last executing test programs: 32m0.942502733s ago: executing program 32 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x20, r0, 0x0, 0x0) ptrace$cont(0x1f, r0, 0xf07, 0x0) prlimit64(r0, 0xe, &(0x7f0000000040)={0x3, 0x2}, &(0x7f0000000080)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x141342, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 29m52.373353005s ago: executing program 33 (id=1424): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) fcntl$setlease(r0, 0x400, 0x2) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x6, &(0x7f0000000040)=[{0x1, 0x5, 0x7}, {0x8, 0x80, 0x9, 0x4}, {0x0, 0x3, 0x8, 0x7}, {0x100, 0x3, 0x2, 0x6}, {0x7, 0x3, 0x8, 0xfffffffd}, {0x1ff, 0xfe, 0x5, 0xffffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000000c0)) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 29m50.625004093s ago: executing program 34 (id=1264): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) r2 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r3, 0x0) read(r3, &(0x7f0000000180)=""/207, 0xcf) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236cd1f8d50f2568ac466a6d40024f87588cbe7808c481b157f18acb07cee62b1d238ba704435ee1c055697eb1ee0e2cfa36d2efbf1ac9fa85fe4", 0xfdae}], 0x1) 26m48.029155989s ago: executing program 35 (id=2275): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000380)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\t\r'], 0x0, 0x0}) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1416b0b71d96d95ac826c242fa100000001000010000000000000000feffffff092c000000060a0b040000000000000000020002000000000000007a30000000000900020073797a320000000014000000110001bbb0c8a76e6f1281a9decefc95c5e5cc55b711c859eef5ef36b150b690ea3f324d57661a6aad00b13df6ed8457551fa8f298d58fd60546e702677d90a879fcc0bdac1f9744b97bb3acd13957d2789366a6b4edf0f5725dc5979654cd29a901c481d4b3ce9fd9abad1a9276edef8035977da9292a274b97485c2a97a424fbb44a7b2771586d0fea4c1421169687fd18f4e89d737598"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[], 0x60}}, 0x0) setreuid(0x0, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000000)={{0x2, 0x4e22, @multicast2}, {0x306, @multicast}, 0x0, {0x2, 0x4e23, @local}, 'veth0_to_bridge\x00'}) 26m47.623840174s ago: executing program 36 (id=2273): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x4c3, &(0x7f0000000a80)={{0x12, 0x1, 0x310, 0xa9, 0xa1, 0xeb, 0xff, 0x2770, 0x9051, 0x35ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b1, 0x3, 0xfd, 0x4, 0x20, 0x2, [{{0x9, 0x4, 0xf7, 0x8, 0x8, 0x89, 0x37, 0x85, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0xe625, 0x9}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0x1, 0x34, '9'}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x4, 0x4, [0xa, 0x1, 0x3, 0x6], 0xd}, @processing_unit={0xa, 0x24, 0x7, 0x6, 0x2, 0x8, "97f441"}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x6, 0x4, 0x6}, @selector_unit={0xa, 0x24, 0x5, 0x1, 0xd, "180717771e"}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0xff, "3128e016"}]}], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x7, 0x8, [@generic={0xef, 0x6, "5577f306943576cf482293b7819965cc42e14f2fba5ae178bd4ba38785d3b27ffe3a658fc79aa6f152e0e80af850e9da825273072f96afd6ac2bcdb8f33df4cb42fc6be5c37fe347beb28fbeba3506f703e8d6b441a818870df0a68d803163570629c7cf7b424ecd70067ca0153bc0abc289685b2be9e66860426b651232ac49f4b3d7daba8d0c958ec8a5362f54dfc9180ddf66930ba27d035538ff2de83dbb04cac011942de73c3936fc5f5e28b903aa847a01c4b43a0802fbbf022ae690303f1ca88a558df20ec00b0d7bf2fd56a7c9004bbe23d20aee061c329cb89326cce28c7d2e7fe404d8912cb4ebcd"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xd, 0x3696}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x3, 0x5a, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x5, 0x2}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0xd, 0xc7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xc18}]}}, {{0x9, 0x5, 0xa, 0x10, 0x3ff, 0x81, 0x3, 0x7, [@generic={0xde, 0x1, "35064a80fbc415f2798eb9d23deb1e4549c25e879ca12b49a417827c53621948fd95be5d08763499965a76c0bbf9fe8edf90ebc1b7c7e939f120da01bbbe23a07d168d4b8134acd55d516d7f413b1644fa62f7fd3d6df6baefa220319a844945382aaeadef71d2312211fddbf9b852b323438d6f4f480542fca3542ee5295cb732c20247b890016e0f9825b5426fe9f13203813a2e87ba21a1667a42684fb833bb90b8fcaa66d448835565fb71887b1281890c761123246f7152c690336e7c280a0edb07254dae12e835d6581ab592cfd379f7c76e0c176bc6d4070a"}]}}, {{0x9, 0x5, 0xe, 0x14, 0x40, 0xc0, 0xf, 0x2}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x5, 0x7, 0x22, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0x5}, @generic={0x8a, 0x0, "237e8d4931507b4805931da83622f10ca6b352ffff4195c661a1a3d24e8d78697168d928127e146f22527e305e575b6627fa64741c22f54fbe524733e9b0d7d50103713fb9873086ab61732f5008624c9fac0bfcee1351b8344bbe4ff59f004cb7ce519b1553342673c1835fb76c07b64a44fc9fe2e30d408f7975d847aaff4da8025617d344ecda"}]}}, {{0x9, 0x5, 0x4, 0x1f, 0x20, 0x2, 0x2, 0x2, [@generic={0x92, 0x31, "6ea72a510cc72a44ae77b126d91bdfc709aae41ddce9de23cdc20d8f48964287b7eb0db1e37c0fe53decf4c10d7400347610918c15e74c74cc4741a938a9d52d7e2332cfd2493e597aaa8a66a1acd7d49ec7238c73e4696756ba76a109a3524eac9df597a7ee5349518d5cebf692fa506a33b46c15dcb8fbf987b0cb11e6f070850f97bce70590f1270c6f975de70075"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x20, 0x0, 0xfc, 0x1}}]}}, {{0x9, 0x4, 0x36, 0x8, 0x5, 0xa6, 0xa3, 0x5, 0x0, [], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x6, 0x3, 0x7}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0x4e, 0x1, 0x18, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x80, 0x80}]}}, {{0x9, 0x5, 0x80, 0x10, 0x10, 0x6, 0x3, 0x7}}, {{0x9, 0x5, 0x4, 0x10, 0x3ef, 0x6, 0x5, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x82, 0x2f, 0x1, [@generic={0xc6, 0x4, "9140fbe829002c4b8afce18f387cbd85c333332881e21376ffd890cc2793703316fb84b0d813e04515fb3e323d2fc6b29ee99e82d2b85b01f8d5ae033fc6cc27a9cdfb8dd45d0c1dd5ef0acddb2353a8a0003537238b125ce882524a0707cd361d42ed12a9a393eac59f4dbd67875cb8100864740d27ac39274eb411f9754c92feb8a4e9ed347d6693f7604ad713b21c8e4764528d7470c18b86aaa97822dfa0e1db4ab95ae5e3148bc392b7f454f00f03d9c6f1426bae651ef2df38c94a33bd1b4f2c46"}]}}]}}, {{0x9, 0x4, 0x7a, 0x10, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x3, 0xf9, 0x9f, 0x20}, 0x8, &(0x7f0000000040)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x180c}}, {0xf4, &(0x7f0000000580)=@string={0xf4, 0x3, "36189d90d89d8a17087ce31bd43066cabde9d7fa29a03d300b8d3982a8627b1eb3c5577dcc400ccd09bb9f74c5d564e390d28c7ffc6a7bb532d70b435c526934925f263ef3d699edb56850f4d97d25e87f8d87897d50b4ffe55e6814f6d2c8263483c169e8251c730d6c858f61ccd25aa2dc2a200805fc31a74b5317d4523f2275618d184bb0e716e67a60be7af4633efee6ed008ddd31c732d7e5ed38a37514c17ae6e7314e017a4d084844cccf7689be9161763e703a081b8d8080faa60e47fb9bd9e99e2390c46428e4982d41a7c91aef96a777b27cd1e4e46923faaa8d340bebf04b2c599724cf1d49b32e9c1f56f05d"}}, {0x100, &(0x7f0000000680)=@string={0x100, 0x3, "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"}}, {0x27, &(0x7f0000000100)=@string={0x27, 0x3, "e694e6ecb86e8237de53e381cf6299f0666fcdcd32b54fcd8b7d16d253e40add5414b33395"}}, {0x5e, &(0x7f0000000200)=@string={0x5e, 0x3, "2a3989dee862fc879db5e66d43544db46bdadda25d4fd93cdbb47cb637e4d14749632d362e945bc4f50233cb2e18ba9f3762f821214e25e6cbe2f44cb5054bbaa6dd82deed619c6313cbd7510b4429903ba6f3713d769a44fa56c724"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x842}}, {0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf8ff}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000540)={0x24, 0x0, 0x0, &(0x7f0000000480)={0x0, 0x22, 0x1, {[@main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3fc, 0x10, 0x1, {0x22, 0xcf7}}}}, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/comedi3\x00', 0xe2801, 0x0) writev(r1, &(0x7f0000000d40)=[{&(0x7f0000000b40)='*', 0x1}], 0x1) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x62, @string={0x62, 0x3, "aecacdcaaecd767680e0c9dc598f61165a2cd8e7e874c5d7646011142c896502267ade20c1d523181efbb87d54acb4fc8537c82b2b1e7bfb1b7472ea7d7ca56a4d294f1d599ff5e746f67294c8472b9e49d500d9d68445226fea746d4a364bf3"}}}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r2, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 26m47.307242414s ago: executing program 37 (id=2236): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) flistxattr(r4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) 26m47.27136384s ago: executing program 38 (id=2276): mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x200000, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001180)=ANY=[@ANYRESDEC=r0], 0xfe33) syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000007f80), 0x1, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000011c0)={'dummy0\x00', 0x202}) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000140)={0x9, 0x968b, {}, {0xee01}, 0x16, 0x4}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x442, 0x1ff) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00"], 0x51) close(r5) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) quotactl$Q_SETINFO(0x3, &(0x7f0000000000)=@nullb, r4, &(0x7f0000000180)={0x400, 0x1, 0x0, 0x5}) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0x80000000, 0xfffffffd}, 0x10) write(r6, &(0x7f00000004c0)="240000001a005f0400f9f4070009040180200000000800"/36, 0x24) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0xffffffffffffffda, r8, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) write$FUSE_INTERRUPT(r2, &(0x7f000000a1c0)={0x10, 0x0, r8}, 0x10) socket$kcm(0x29, 0x0, 0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x40a02, 0x0) write$tcp_mem(r9, &(0x7f0000000300)={0x0, 0x20, 0x2, 0x20, 0x8001}, 0x48) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) userfaultfd(0x1) 26m37.244030064s ago: executing program 39 (id=2287): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x1100, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x2f, 0x0, @empty, @private}}}}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x0) sendfile(r2, r0, 0x0, 0x7ffff002) 12m59.114738093s ago: executing program 8 (id=7126): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104e380102030109021b000100001000090459020171db2a00090582020002000000"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="041813"], 0x1a) syz_usb_control_io(r0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000c40)={0x40, 0x3d, 0xe2, {0xe2, 0x4, "8d84871cb77eaae76ca2a869894c8d031a9b52feb06cd057e15b5c5aa9cd45715a8b740dc05200ac5d487886be38d7336f2a2ba05cd8314a0fd556ec93ada1618f20a62d5b4c4f6126a45874a371c94cbf189d88102122d7fab53109cf4e19132e7bcf33c2d101e87c00b4d04eb8f3cfb6f945d565f120a86e268ddc415ea7044a20ee2807cb132cf58d2d78749d7dab0ef1440051002a543b479a15a88f295ca1c9090e9a26b19a1ff07a8113f61c2d359c4a66635086f329fac041baba167cce27faef4283dbf96fa5cf58ebdf5f62f9ab4621e1ac987dbe35ddadca01846e"}}, &(0x7f0000000b40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x406}}, &(0x7f0000000b80)={0x0, 0xf, 0x77, {0x5, 0xf, 0x77, 0x2, [@generic={0x5e, 0x10, 0x4, "d98dd8e23b14cd6d1d2d4b93c408e5ae7762ab210fbc59986f2f998d983728c4dd462a9058b3b5930ad3e055a5b4cbf4cf1a99dcaadef63eb26b34447726d91af12f6ce1fa9f48178cc8fd57ad0d59824c6bdd6d09b78523b5b1ce"}, @ss_container_id={0x14, 0x10, 0x4, 0x40, "47673919e0d423e46cda3fc32a8097b1"}]}}, &(0x7f0000000d40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x3, 0x40, 0x8a, "75df2e1f", "90b326b0"}}, &(0x7f0000000d80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x81, 0x18, 0x2, 0xb5, 0x7, 0x40, 0x7}}}, &(0x7f0000001300)={0x84, &(0x7f0000000e00)={0x20, 0xb, 0xfd, "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"}, &(0x7f0000000f40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000f80)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000fc0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000001000)=ANY=[@ANYBLOB="20000400400f0f004000"], &(0x7f0000001040)={0x40, 0x7, 0x2, 0x7}, &(0x7f0000001080)={0x40, 0x9, 0x1, 0x10}, &(0x7f00000010c0)={0x40, 0xb, 0x2, "1a65"}, &(0x7f0000001100)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000001140)={0x40, 0x13, 0x6, @random="016bfdc23594"}, &(0x7f0000001180)={0x40, 0x17, 0x6, @local}, &(0x7f00000011c0)={0x40, 0x19, 0x2, "1300"}, &(0x7f0000001200)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000001240)={0x40, 0x1c, 0x1}, &(0x7f0000001280)={0x40, 0x1e, 0x1, 0x1}, &(0x7f00000012c0)={0x40, 0x21, 0x1, 0x4}}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0x7, 0xc8, 0xfd}}}, 0x7) syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, &(0x7f0000000000)={0x0, 0x22, 0x2, {0x2, 0x21}}, 0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) r2 = syz_open_dev$rtc(&(0x7f0000000080), 0x0, 0x80080) ioctl$RTC_RD_TIME(r2, 0x80247009, &(0x7f00000000c0)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001480)={0x14, &(0x7f00000013c0)={0x40, 0x20, 0x78, {0x78, 0x3, "5214d4b2ac50da4e763d362b8fc0663764b664fd78562befbac85a691b4f840efa1839a7bc18ef123c663f0f75f2d40efac12fa35d2fbd1da8041c07bf0d6f0f09a082baae7cd711cda3fd50e6c7c96502d39074ca3041b8eaa3d7619cea93c78b6c6ab8f6b463a5f98a38242b5741b56efd315e7986"}}, &(0x7f0000001440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, &(0x7f0000001780)={0x34, &(0x7f00000014c0)={0x20, 0x16, 0x95, "09ada614b740b8259b37a1ac7d23f00e9903782962c82b9d5dd318bfdbf1c5c15d6bee9558d8523506fc7debbe695d8456cb61fa037fa4265eb18ac4cecb8059eb8c48c7fe9ef0a33e45d4f18b2d0e919d586c91452298a96d185ab75ac8a46143467764a9a1dfe7ac3f36695e3ae1f9cab06f8612d42c6bdcd80a959f9dd1054f4f75409b7a790ddaf2a783dff21830ac679d119d"}, &(0x7f0000001580)={0x0, 0xa, 0x1, 0x4}, &(0x7f00000015c0)={0x0, 0x8, 0x1, 0xff}, &(0x7f0000001600)={0x20, 0x0, 0xd5, {0xd3, "1ec73633017cea04acbdbbddd1ff2338c53df26b85dbc58fb991d4ac11f53abf9216c68e003fd1f40e66cf96869ca661d2e759d0b2590782c245360d94958df72f18f65f482c035324d515ee664e4d5b5bc433a6261ca46f55f7134639b1687d9c5281dde836f2a7aac67fac120866c234f193e7973e23ccd45a9060932632a986fb7b757f6497f8fa3c39ba072b7e247108f5a73281e51ab0872a11b537a43d584f094cbdabe71620f5ffe0afa00aef701376af5e1a63a3d7ee957ea3e351cd300334b79746c955e194ed4859a642ec673086"}}, &(0x7f0000001700)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000001740)={0x20, 0x0, 0x1, 0x7}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000000040)="2700000014000707030e0000120f0a0011970100f5fe009d2fb112ff000000008a151f75080039", 0x27) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000200)={0x20, 0x9, 0xf, {0xf, 0x8, "b4de264f20aa18fcb241685bac"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000880)={0x0, 0x30, 0x76, "ec1be9b8ba30ca6fc96876776b68fa291634abb6f197cf9be92eaea438349f5486c467c3264486782ebdeb5f68585ea92bc1050726661bb8fd6432774103e9bbe7e66a0b14078009b29c1477f98db30d78764c00231809ee10cdb93f6db779bfe183abab6c121eb59ad9ada0b62636ed794d73538875"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xfe}, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x2, 0x3, 0x100, 0x9, 0x80, 0x248, 0x5, 0x40, 0x8, 0xd317, 0xfffe, 0x1e5}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x100}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000400)={0x20, 0x87, 0x2, 0x3}, &(0x7f00000001c0)={0x20, 0x89, 0x2, 0x1}}) bind$ax25(r4, &(0x7f0000000100)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close(r4) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f0000000300)={0x14, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)={0x0, 0x3, 0x10, @string={0x10, 0x3, "31e984a0d7720f8e7a6c25bb2cef"}}}, &(0x7f0000000700)={0x34, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6e}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x9d}, &(0x7f0000000680)={0x20, 0x0, 0x45, {0x43, "4dd04ec62d92e9632bee2fec576293793f394c609cf1bf992203268f826d145e836830e5b7452a0361c190c50b574107f95509633c993e34dd4ba41f3ebb332f21b23a"}}, &(0x7f00000003c0)={0x20, 0x1, 0x1, 0x7}, &(0x7f0000000580)={0x20, 0x0, 0x1, 0x9}}) r5 = fanotify_init(0x1, 0x2) r6 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) fanotify_mark(r5, 0x1, 0x100018, r6, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000c00)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdb", 0x2}], 0x1, 0x0, 0x0, 0x4002}], 0x1, 0x24004850) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) get_mempolicy(0x0, &(0x7f0000000080), 0x1, &(0x7f0000107000/0x4000)=nil, 0x1) setsockopt$inet6_tcp_int(r7, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) 12m56.885436779s ago: executing program 9 (id=7145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000002b80)=[@zcopy_cookie={0x10, 0x114, 0xc, 0x58fd}], 0x10, 0x40010}, 0x4000000) (async) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r2, 0xc008aec1, &(0x7f0000000140)) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async, rerun: 32) r5 = syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="12220000401542209d055015bbe4eb595402030109021200010000000009040000008ec46f008d4d41c2604d6f00"/57], 0x0) (rerun: 32) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io(r5, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) syz_usb_control_io$uac1(r5, 0x0, 0x0) (async) r6 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) ppoll(&(0x7f0000000180)=[{r7, 0x3280}], 0x1, &(0x7f00000001c0), 0x0, 0x0) (async) read$hidraw(r6, &(0x7f0000000080)=""/210, 0xd2) syz_usb_control_io$sierra_net(r5, &(0x7f00000004c0)={0x14, &(0x7f0000000340)={0x0, 0x2, 0x8d, {0x8d, 0x23, "5548f68b19732b0adf040382edd1a5cf0cb30a0f19723c0b6dcbf3373c61c4d21e3ac1baf6c566ed4684ed51a20eaf10f287d6b184a24cfab4e97c827aedf4b21a378832abc6554739287222d52d540a9a8f41f1f4ca1f71e91d256f5277411677986642225e78d108f1bccbb091654475b01814480d4eb6059dd1dca74f6f2f6d59bae61aa6d7087ab6ff"}}, &(0x7f0000000400)={0x0, 0x3, 0x86, @string={0x86, 0x3, "5009b1d1daad6876cccb91f89ee02cbf5cc4cfdff515f847cbe0c098072e9bba7d08e2827181392efa4122d45cdf082491a96a44fbaca0c6c31e09ef0fc3d3265beef937bcbd0ae6489dd8a4148448452bd5d62dbe9b601c78ebe9e33b0025acfc0ec42a4c7b11c15d9ca490f2997231ce83474b27f7f49a13e40804c6d1892f9f87c63e"}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000500)={0x40, 0xb, 0x91, "8059bacc64769f083dc221703b6c2288df62e1b0e2efc30efe7e6f7226e948ece9c8fb6a9cabf67562d9f10ab6d026a4fd88c83852e677444ae4299318ff640cbeae740a4f7522b8bb60bcb9bec8275a864b7d86b3f620aa1929619c4b7621b562bfd0ab056ff21312a88e40acc1f2df7346e54cdbc5ade4dae5de2f1f9800f123ae8e96fc8677a6a90b67cc0fcb17d535"}, &(0x7f00000006c0)={0xa1, 0x1, 0x400, "d40b9a7a26f5db47fb5d7786f54e16cdc27dafd3f5130363a84c7b639fbf5c8308cedced12162d0d801a66ac68be58c25a61f398e58cd7aed8acddccf67df21197d7e5b000e0f21495077d10ed9a217e13846c11a13249c6261ff9cea69257ad9d5981590bd99dce1d66982ef2cc5dc55eaac636ed63af395684102be0cb3107b27ab3d133bfbdb1dca2b0bd551130362863557b4721a43bc5039d34df5314ddc7b6d679655bdedb5b9f32570798e1ab8ef1e40f3d1c65f4dcd2824680686ad0b563683ca9b25ec76ed81ae15cfd0129fff0d49495acdb8a40293cedebf17c725bb72b3b84cb636d01cc8c6fb437d916fb369602ff5430a661af788a8af1b1f574577f9766d6185d75108c864e5037aa088a10374b039c2ab62bcbd140dc69bca5cbf866d2aad183cf5a9c8414709909ec7f9ba87e0ab40e3a40762b7c48b36ebaa22dd4597d9406499329e6af79ee734bc5d226d2d53cd11dba99277a3196ce1fda478b1b91410d9a4c7be8c8dd4e15b884a21f32afed221763926d041f8bf9267a23b11fd09faf5f03811fef0b17ad1874d75075c3b257230d713304a039272ac3763a834ce776c4f4a325fa1d8442a16448c4bddf87b6a11bf96c417c79594e241f8eb350571ec40652db014dcde16fbea12a5e1aeecaeaf7b77dc30de0f1ec0eef520307d2c5d22c1204e9558d2769d119052c8e813493a5c91538ed89c08e40817a2b936d300a6d6e26ff954027172c13e0532095e085cf96d803d4032dcab3a33a99e84f134c6c8d8aa1ece1d8afb8dda1f412569275afcde369604b5eb6d0598186ad2a4d0f2b6424b9124439e5614c383b258d601d1fc865d54c33c27ee540f91cae1d382f95418e7591ff594ccfad3c9f1ef4e95915b01aa7246056e49571b43560bd6e3c7e0ffa2c5de2e55b1a13083ef77f785b3dcf779ce11caf85fe24d83168d8475ea01e5ece261e4dab96d4186ccd130e96bec349b752cb219b23be539d5baea51c3949eb399f41d704155a0cf1628aaea3d53133a733547f5b238fd5ea1ccbca6d9bb40c8ff343085442893674a84398c96f61f157fd3255dd3f4a7e610a6addd3c6fdd1ad199917b17350be9691884a028db4ee8f6965f68a8069bc93b2e803b8a0b1f2d505fe021e9e4739e675728f3c885a797c1d5f3d8fdbf4626c5880575e021e821a437747954cd259d5b7548bfc87b6ee156b08b89165f8b30f54830270a9a617b50cf63b4c8f1c8cfcb8d8d463fa66816adf4ea52544357fe770a2c344f69ac58a412d4dd57f3defbeea6ff7afb2a98b42e0cb9d8888ee6c86d3fdc80b85237ef18a5568745825f7ae6d39f602f7c7989065f43e27f221f0a9addaad5a11a68b26066783a53d42f1038b7dc508aea74e0bc499685227c77add9012e9b124f4213ebfe16df4327305999c73eed7dfcfb9adc81b6e"}, &(0x7f00000005c0)={0x21, 0x0, 0x3, "835b1f"}}) (async, rerun: 32) ioctl$EVIOCREVOKE(r6, 0x40044591, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) (async) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000001, 0x4, 0xc2, 0xf, 0x40, 0x1, 0x80, 0x1, 0x7f, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa7f2, 0xe, 0x8, 0x9, 0xff, 0x4, 0x3, 0xa, 0x13, 0x22, 0x6, 0x1}, {0x1ff, 0x6, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x4, 0xfffffffffffffffd, 0x0, 0x6, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x1, 0x10, 0x0, 0x3], 0xeeee8000, 0x211140}) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (rerun: 64) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 12m56.836404655s ago: executing program 9 (id=7147): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)={0x0, 0x0, 0x9, {0x9, 0x0, "2a53fb8991f8e0"}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x1, {[@global=@item_012={0x0, 0x1, 0x7}]}}, 0x0}, 0x0) socketpair(0x28, 0x3, 0x28, &(0x7f0000000040)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x300000a, 0x22052, r1, 0x5508e000) 12m56.475631484s ago: executing program 2 (id=7148): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) (async) unshare(0x2040400) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000300)={0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) (async) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000, 0x2, 0x1}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) (async) unshare(0x8000000) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x28000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000080)={0xa0000, r5, 'id0\x00'}) (async) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x8, r7, 0x0, 0x0, 0xb8, &(0x7f00000001c0)="bc6041417ca612984cd8c38593b12d6dbe71bd8bb82f03c13a0664063719656da2044a1e5071249c87c137d130c527d3efc3ad0fcc6adc67676d26b1f488c9a9350456d6a44a38255707e3f6ae47f8c0bfd1d9c16f3f0d0cb1717d942ff0e5bb9a2e329a799317f1ad1b7cec56a6260dcd615f1aa9763b478dd7a67eedc57d402d05972b8bf832a17400481e1a52153ca2d72229c4c848e33c02ed6e6f205882188c676c9781402dd0865b4eae74d2d32afe70a02ca61e39", 0x1}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c0001800600060088480000643802"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) write$sndseq(r7, &(0x7f0000000440)=[{0x81, 0xbb, 0x23, 0x2, @tick=0x6, {0x7, 0x7}, {0x2, 0x6}, @queue={0x4, {0x7fff, 0x1ff}}}, {0x7f, 0x0, 0x0, 0x40, @time={0x9, 0x4}, {0x8f, 0xff}, {0x7}, @control={0x3, 0x9ab, 0x3}}, {0x8c, 0x6, 0xc, 0x8, @time={0x3, 0x6}, {0x2f, 0x3}, {0x7, 0xc}, @ext={0xb1, &(0x7f0000000380)="f2f879814e06c3c944f2a71c86c9220769efc7d3c62fc82078a71f59fd8c2d68f03b0f40effc236b2dfd3641e52df3f415e40487ca4f2b9a995c90d5f2446d7a0d1c0eac94405706e0e0ee011f2295b436fe43f8d4827e1320c30abbb0f9c7d16b7130c9c75435c57622ef5dcbb5346edba16559d991b1638ae54fd6adff3c5cc76c7477557228fe06e934dfc4b4ee88f7116f969d990d32a1d121c59392de2d031b57c7381c7205f50463d895ae1392ed"}}, {0x7, 0x3, 0x35, 0x80, @tick=0x4, {0x1, 0x4}, {0x0, 0x5}, @raw32={[0x0, 0xfa3b, 0x544c]}}], 0x70) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000000040)={{0x3}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r9, 0x40505412, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x0, 0x2}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f00000004c0)={0x28, 0x2, 0x0, 0x0, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r5, 0x3b8b, &(0x7f0000000540)={0x10, 0x0, r10}) (async) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000140)={0x28, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r5, 0x3b88, &(0x7f0000000000)={0xc}) 12m56.325451666s ago: executing program 2 (id=7149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) request_key(&(0x7f00000001c0)='rxrpc_s\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x7}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:e\x00\x00\x00', 0x0) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x1d, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000640)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = syz_io_uring_complete(0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r5) r6 = memfd_secret(0x80000) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x89ff, &(0x7f0000000100)={'sit0\x00', 0x0}) close_range(r6, 0xffffffffffffffff, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="2d00000000000400000004001980c577e4540f38c2b62fff4188d740f530f8dfb2c500000000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x18, r10, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x13, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x400009b) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x208, r10, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x73}]}, @TIPC_NLA_NODE={0x68, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0f76dba06d0f3a461814d425e1b854a2b252d412d606cb6f0b6b4db494d93ad53743"}}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xb7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0x28, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc29}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xe30a}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x208}, 0x1, 0x0, 0x0, 0xc000}, 0x4c890) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r12 = open_tree(r11, &(0x7f0000000640)='\x00', 0x89901) move_mount(r11, 0x0, r12, 0x0, 0x275) 12m56.188578775s ago: executing program 9 (id=7150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r1, 0x89e0, &(0x7f0000000140)={0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000240)={'macsec0\x00', 0x1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) ptrace$ARCH_GET_GS(0x1e, 0x0, &(0x7f0000000200), 0x1004) pipe2$9p(0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) dup2(r4, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ff00000}]}) clock_adjtime(0x6, &(0x7f0000000380)={0x30a0, 0x3, 0x8000000000000000, 0x5be, 0x1, 0x38, 0x1, 0x9, 0x7fff, 0x8001, 0xdaeb, 0x8000000000000000, 0x7f, 0x12, 0xe03a, 0x5, 0xe, 0x4, 0x2, 0xd, 0x8000009, 0x5, 0x7, 0xb, 0x0, 0x10000}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r5, 0x9, 0x0) connect$l2tp6(r5, &(0x7f0000000480)={0xa, 0x0, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3, 0x3}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000d40), 0x1a1800, 0x0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r3, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x10d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) syz_clone(0x40100000, &(0x7f0000000280)="45c886c80409b74ac435a997d6f1f62902be3ffe69d5bab3231c3e9acc952887d074ce510170e827361de2c29cc102d23533dfdad699ae31d064e4e4cf2f0567b26522782da81b988876302a8b0467baef770c130c2d2f7c5241eb09a9efc7a15bcd98edae4b39ead471d2dc426f3ea0a17f72b34e454de2a1d3e08c1c477b0a21350448effa8ddacf8e75a28c121279d23f1467e9986e84fd72cab687b7694529d11505a29b6941d24c1589cb38d8a9d39a2ea33f1554a88802d6ab4ef65c99d42d81ed59725e91aeb562b7a90c4a8566da089d", 0xd4, &(0x7f0000000200), &(0x7f0000000380), &(0x7f00000003c0)="859559dd8323e7a3815da7df61c703c9d5863a7c38af1adf32cc0d7016b0e9c3f0db82a7eeb47181dec4ed823bafb82f90649c658389ea2d803b37d08f0e896bf7bf87205ffb42a5629c90bb1baa0f1da9b92d5354b036e2f2d6cec73a3fb09a148387094e3ab4ab037a3e8ece6648b2375f71bc3d08cb1894ab5fcece6c822f010b3197240444d6afd0ceefa8ec6f0dff3c5145533f0c295fd085fd") r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x28) 12m56.132580423s ago: executing program 2 (id=7151): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = socket(0x2, 0x5, 0x0) sendmmsg$inet(r3, &(0x7f0000000200)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000003c0)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000480)={r5, 0x9}, 0xc) r6 = socket$packet(0x11, 0x3, 0x300) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) mount$tmpfs(0x0, 0x0, 0x0, 0x144004, &(0x7f00000001c0)=ANY=[]) syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f00000000c0)) io_setup(0x662, &(0x7f0000000540)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendto$packet(r2, 0x0, 0x0, 0x44040, &(0x7f0000000040)={0xc9, 0x888e, r7, 0x1, 0xff, 0x6, @local}, 0x14) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x400}) write$sysctl(r8, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r8, &(0x7f0000000000)='2\x00', 0x2) ioctl$BLKRRPART(r0, 0x125f, 0x0) 12m55.751911194s ago: executing program 7 (id=7152): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r1, r0, &(0x7f0000000000)=0x7ffffffa, 0x8000010) 12m55.734507324s ago: executing program 8 (id=7153): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b29, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 12m54.892800061s ago: executing program 7 (id=7154): creat(&(0x7f0000000080)='./file0\x00', 0xac) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x17, &(0x7f0000000600)=[@in={0x2, 0x0, @dev}], 0x10) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 12m54.781639309s ago: executing program 8 (id=7155): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000000c0)=0x40) read$dsp(r0, &(0x7f0000000340)=""/100, 0x64) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1f) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0xf, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0xc0285628, &(0x7f0000000300)={0x7}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000034d564b"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000380)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8a}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000e06011100000009050001000700"/28], 0x1c}}, 0x80) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f0000000080)={0x5e60000, "43b5e77d8798896104104284a4d4b9e8c730aef0d22c3883c9848fe107f4a3c4", 0x1}) 12m54.781250484s ago: executing program 2 (id=7156): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) recvfrom$x25(r1, 0x0, 0x0, 0x100, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 12m54.682180139s ago: executing program 7 (id=7157): r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/89, 0x59}], 0x1, 0x200, 0x81) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@getsadinfo={0xe8, 0x23, 0x8, 0x70bd29, 0x25dfdbff, 0x0, [@algo_aead={0xc9, 0x12, {{'gcm(aes)\x00'}, 0x3e8, 0x100, "efe2c563bd5870f5ee5f4d13eb155519599ec6686d9e4bccc1ec7f28039b8cd0de5b47f2b24518fe7b3e7aaf5859bee42f1a0fcc129769e4d394925bff80cd607c2b4f239c9e5880aa6ee28a96258434763f80ae55ae81cb35bbd5265897a27c76f36d6f8a3732f0152b9897fac3e37a8751aa8781a3f31d4397bec9b3"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x1}]}, 0xe8}, 0x1, 0x0, 0x0, 0x50}, 0x90) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000300)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) statx(0xffffffffffffffff, &(0x7f0000000440)='./file0\x00', 0x800, 0x0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x41000, &(0x7f0000000580)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1200}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0xf5}}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1800}}, {@default_permissions}, {@allow_other}], [{@seclabel}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x64, 0x37, 0x31, 0x32, 0x38, 0x61, 0x64], 0x2d, [0x31, 0x39, 0x65, 0x37], 0x2d, [0x62, 0x66, 0x0, 0x36], 0x2d, [0x39, 0x64, 0x32, 0x63], 0x2d, [0x32, 0x31, 0x62, 0x39, 0x37, 0x37, 0x66, 0x36]}}}, {@obj_role={'obj_role', 0x3d, '{\x91!]'}}]}}) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000740)={0x31, 0x4, 0x0, {0x0, 0x3, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) mount$bind(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x2082008, 0x0) syslog(0x2, &(0x7f0000000840)=""/117, 0x75) ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f00000008c0)) umount2(&(0x7f0000000900)='./file0\x00', 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000980), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000009c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000940), 0xc, &(0x7f0000001dc0)={&(0x7f0000000a00)={0x1390, r5, 0x20, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x10000, 0x16}}}}, [@NL80211_ATTR_IE={0x11f, 0x2a, [@link_id={0x65, 0x12, {@initial, @device_a, @broadcast}}, @rann={0x7e, 0x15, {{0x1, 0x7}, 0x6, 0x4, @broadcast, 0x9, 0x1ff, 0x9}}, @perr={0x84, 0xee, {0x1, 0xe, [{{0x0, 0x1}, @device_b, 0x3, @value=@device_b, 0x2b}, {{0x0, 0x1}, @device_b, 0x6, @value=@device_b, 0x7}, {{0x0, 0x1}, @device_b, 0x7f, @value=@device_b, 0x3d}, {{}, @device_a, 0x3, @void, 0x2b}, {{}, @device_a, 0xc2, @void, 0x30}, {{0x0, 0x1}, @device_a, 0x6000000, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @device_b, 0x2e6, @value=@broadcast, 0x4}, {{}, @broadcast, 0x7ff, @void, 0x4}, {{0x0, 0x1}, @broadcast, 0x80000000, @value, 0x1a}, {{}, @device_a, 0x10001, @void, 0x3c}, {{0x0, 0x1}, @device_b, 0x5, @value=@broadcast, 0xf}, {{0x0, 0x1}, @device_b, 0x10001, @value, 0x19}, {{}, @device_b, 0x0, @void, 0x10}, {{0x0, 0x1}, @device_a, 0x80000000, @value, 0x29}]}}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x83, 0xfc, "12702952b78d613dedbeff2e45ae87769588e98b5ed4344c2c60879d80669ab96f089aa703eee91499ec695dd1d28e8a90b418251ad0aa81a66174cab4bb9a18d5ce28e10e8794d5eef4bcefea3f00b37ea63ed062d9e7354a6a87c339dc08fc8ef8db61455d42388957dc00b4f407cb1ac399a16d6b1d65b4d9bf0feb6842"}], @NL80211_ATTR_IE={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0xa, 0xf9, "fce8e9930267"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x4}, @NL80211_ATTR_FILS_ERP_REALM={0x56, 0xfa, "9336304004a267159d2d6388572d6776a3f56d297be0c98be0cb7d6478c9fce6c030125fa4726994c2150c6eaff661c234615b3fa4e6abfc188b270dc59c75f2ed7ff844c6ddbd680bb01edbb19b8cc95a2b"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x14, 0xf9, "62fc6a9f7f122cf50a073fda17f27219"}, @NL80211_ATTR_FILS_ERP_RRK={0xc3, 0xfc, "44312202971ce35e129c4ac88d87f7ef63a70428281fcccdd8963cc6c24499d1a88b7e3bc4eb87286d016d616dd1bb01ac5970e9118743212eb4200cf3080f2d29c369c916e7ef722d08e1972af7075a4691d2406ca90c20639eba60369934c093dfbc2efeedae454858db7e4f5bb3ada50c15254239a0a1ccf63e3a07bdda4fcd5c1ac3ffe28ae8f3268d51f0dc7b1b3e50c71f5f1ffd42e281ae66c8a363d0a9dae80c041d727073ac67d6e5747908883be1a3975767c528d520c3bfd23e"}], @NL80211_ATTR_IE={0x6d, 0x2a, [@preq={0x82, 0x5c, {{}, 0x4, 0x8c, 0x1, @device_b, 0x0, @void, 0x18d, 0x8, 0x6, [{{0x0, 0x0, 0x1}, @device_b, 0x8}, {{}, @broadcast, 0xfffffff7}, {{}, @device_b, 0x4}, {{0x1}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x3}, {{}, @device_a, 0x71698c0e}]}}, @mesh_id={0x72, 0x6}, @erp={0x2a, 0x1}]}]}, 0x1390}}, 0x40) unlink(&(0x7f0000001e40)='./file0\x00') mount$9p_unix(&(0x7f0000001e80)='./file0/file0\x00', &(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00), 0x4821, &(0x7f0000001f40)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r4}}], [{@subj_type={'subj_type', 0x3d, 'unconfined_u'}}, {@fowner_eq={'fowner', 0x3d, r3}}, {@permit_directio}, {@uid_eq={'uid', 0x3d, r3}}, {@fsuuid={'fsuuid', 0x3d, {[0x66, 0x61, 0x61, 0x39, 0x36, 0x66, 0x4, 0x32], 0x2d, [0x888b434946bf2044, 0x63, 0x30, 0x33], 0x2d, [0x38, 0x34, 0x64, 0x63], 0x2d, [0x61, 0x38, 0x61, 0x32], 0x2d, [0x32, 0x61, 0x65, 0x34, 0x39, 0x31, 0x33, 0x33768b038b99ed0]}}}, {@appraise}]}}) syslog(0xa, 0x0, 0x0) r7 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0xf) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000002000)=0x4) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000002380)={""/32, 0x0, 0x0, 0xa, 0x0, &(0x7f0000002040)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r9 = open$dir(&(0x7f00000023c0)='./file0/file0\x00', 0x8000, 0x14) renameat(r9, &(0x7f0000002400)='./file0/../file0\x00', 0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00') getsockopt$SO_TIMESTAMPING(r8, 0x1, 0x0, &(0x7f0000002480), &(0x7f00000024c0)=0x4) lsetxattr$trusted_overlay_opaque(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540), &(0x7f0000002580), 0x2, 0x2) read$FUSE(r2, &(0x7f00000025c0)={0x2020}, 0x2020) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000004700)={0x0, 0x1000}, 0xc) 12m54.640161765s ago: executing program 2 (id=7158): openat$comedi(0xffffffffffffff9c, 0x0, 0x680d40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) socket(0x2c, 0x800, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x110, r0, 0x52fbe000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), r1) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x909c0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x2e) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000d5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xc2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="200025bd7000fedbdf256c00000008000300", @ANYRES32=0x0, @ANYBLOB="0100000012cc62"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000000) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x49, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05002bbd7000fcdbdf254400000008000300", @ANYRES32=r9, @ANYBLOB="0c002380040007006c000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) 12m54.501301982s ago: executing program 9 (id=7159): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ppoll(0x0, 0x25, 0x0, 0x0, 0xfffffffffffffd5a) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r1, 0x5760, 0x5e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400048c0}, 0x2004) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = dup(r2) write$UHID_INPUT(r6, &(0x7f00000010c0)={0xb, {"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", 0x1000}}, 0x1006) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r7, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@rdma_map={0x24, 0x114, 0x3, {{0x0}, 0x0, 0xd}}], 0x30, 0x8004}, 0x0) sendto$inet(r6, &(0x7f0000000080)="6f88f2c74a685773e04634b9eae4ba46ba0c18435bd178583b70b66000d70a2eee322a322723924dde390b3004641e171886289b17e1db03020968aa72a1ba1908780eefe17f21be558d", 0x4a, 0x2c004080, &(0x7f0000000140)={0x2, 0x4e20, @empty}, 0x10) memfd_secret(0x4b17fffefa466180) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 12m54.39521683s ago: executing program 9 (id=7160): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x1b7200, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x2}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0)={[0xfffffffeffffffff]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r1, 0x1a1c1000) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) fchdir(r2) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) 12m54.32971159s ago: executing program 8 (id=7161): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000200)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000240)={0x41424344, 0x41424344}, 0xffffffc0, 0x3) write$tun(r1, &(0x7f0000000300)={@void, @void, @ipv4=@tcp={{0xb, 0x4, 0x2, 0x14, 0x6a, 0x67, 0x0, 0x3d, 0x6, 0x0, @remote, @empty, {[@timestamp_prespec={0x44, 0x14, 0x76, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x401}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x8}]}, @end]}}, {{0x4e24, 0x4e20, r2, r3, 0x0, 0x0, 0x9, 0x20, 0x7fff, 0x0, 0x4, {[@eol, @fastopen={0x22, 0xc, "e59ac794b90e63843b4d"}]}}, {"eec46a6924da96a89fde9c04e1f91a60c7bbfc596aa54f088577"}}}}, 0x6a) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 12m54.025396468s ago: executing program 8 (id=7162): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timerfd_create(0x8, 0x81000) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 12m53.850497111s ago: executing program 7 (id=7163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="44ea07862a07eefa4de37092cf4356f54454db90301c4d373d57166f794f169d63344840a37048638ffd5e30beade3fd768b18191001eb890277fad8bdfe3742686deeb34395963bcf7a870addd76c80aba9f771ebdf410c7d7542fc2b6ae9a458d79457755d94ba8a3248b01a2293d8a70e60815b90297002652966a6b836065bcae0b44f4b26be93dec3cd4cdcbbc84c5b916a1b0d8313340675d67fb0c785d0307f95e426546c9a4d0161a8f52b02b95f4da53ced705a658722091864d74ac0a3a5f3853a0ad71ddb29835680ca9ff30531f8df0f0ac66f7f1433c33d75fa8f0f022b175df093648a81af5ed701b2e7a14199c83b539e763dbe7228f2e184a02becd41bae305d3f34c72e8db93dd214ec203eee6e6dab26b41848c95fe1ece8ca157a90bb7a990dac5f3c64cf49c5c5aa8414b9153f82eca9df88d90a8d6c0e72eacd52f82939d46d41e0f5ccf708c03fccecea467f33f5a49888514787e42c0a12255bca89e82344ab01ac3b6c6158e3c1b34ad953eaf55f3a2c487efd9423a542e41dbd0058aa021cb6fdc5df88f807033edd31abaf5ff7e6a9578d2be6a2d925d98108fda2a7e56a0bbcdce0689fa9e2111b0be8f3e2807f7f3728489917a031f2187ad98a744f19851687adf59a4b4c328ad5c4f2eaa0d112041369319f6d3f928c22d05f9fd68b5c268da5e2f433d651bc602a65ee83752c0c92f7e29002faf9475fbb57788d725f6f8fd495a58d88d55ab8467a85d1f41db5964a19bdd45377c7c8c792de5e76e87da9296ff90e7fa9e57f09358d998c8779bb2348d651808e969e960763c5231c65a06ee16979f4d990dbe7e10b3a2392dfd6483bf2c7c5f6f3d941cc17663668cca83dcc38089b4342a801c74039b32550c2d9cf95a0236523933ce3e7538ff9da2b7b741f3cbf53e6084702d0a5dadab4350848f6e7ba46d4736c7a2ae702c480c30dd78f994a10b9c3157a17e9e29576a68139403300586eb0c673252a319aa1cb01efa777228d8242ebdbef9db5c03e4c8e09bf7a009b7eb19357d1ad6d1defc0dbb58c31d85b9f1035056615ad0b0ded12751273c8bb7810ccc5b2efe51d223894b141dda837e6b7ba21de9a978ac447d995394b800e1065906455af544b9d7f353d1eefcd3387d18e3611f3913926f3a4b87efb3a9707d6136dc00e49ea5e7a6d0bea17eb49cae93c0c4422374b0f46380e0d554e1087c1392716d368b04b1da85d271206b465608468802fae00c7ad9425974d822cffbc420e739f7617f59a879f791ab5dd7a6215298cc7dc6904679889e60a09114b0f421b6f1286d0a6ab3dc887c2d3a48d53a7611ec270530b07a83ae1a2bfa6da42ab38bec3eb8ed1e207d91c02e74a31c29abbd25f5779189f5f2494ea5c3f4b829b96de0c54b3851dd58610c2b9ddcc2960f34fb857c5ab1aa67e8eb10a59639db2ddebd0206ae7ee56b21ef484e3c66003af46326f1c456ad2ab5273d0c0b2bf412f71f820ae12723c74e1857e0ae3d5587a0427c1595e06b1d5ab5e815a5558302e0d9c50b8c6cbd599eb554df6f7323b01f1353b557c565dfe0de51032a88541b49ab682a7dbe4dccb9b952ba9c9ce3bbff80af01e47953666327b8acd7d2cf363c6f7172caaf01d8e3417f768ab08f2cfa7ff26efd219e25ef0f9a84c7b116978eeafe3410972490203dbe49aec33f14d5592a466a6efe630904db9c77ece20bec7552b3dfb48d4e0427ce5024fdc0aec7271e93c51aab19d7a40670add6ea5820f625831a593137f60543e424892856b3bb9e608e88e65cc6dca098d5139a38ada517cd788b9f13618d9c2c31d7918cac6cd669710692797e61f4df3938dd429d977cc11e7465a7a23740052039d9b31cd26b95efba17bfcefe121fcbb762d29287145b11a3abb3e0683b9216a8b5d9744baa75da5d840e70cb310c507c4f7eef1d6535d8e11079edcb51df7ea63a7204e314147eeb57916171ca33c0f5932916e4d568d9e7dd3555500ae119f0c63045658303e1f4ea99c896eaeff3ebf76b2def0ea856a3f24cd76dc437236b71dad9a26fbf3882e81565851eb6c5b265a0721be43f0844f4d0e4296011e280236a0ed7656f2eb906e6b2ec4a8e5bf91eb7e8be889ded6d8492bb72f1de26cf3973249ebcb5c993d1dfa896a658a528aadf57dc28a8db32656ed8e416f96e1f89ac24d4ba587df31f3d2d8d7809d06c8b2d68eb15b377918424499cd6a7fb62e49a78831f0e4b1476bef657fb34bd59e34793d21da3f7bd0278bbea8beed261c697ce17f36f1cbc1b94aef11dd1dbf1c68496765258f4cfc8b5fdc9197d7260b733d2061f399c861bc5912ac76cfb62b9218196fe054b92a295a9b9526871167d436b830a7b4944f527fb4d75a036acf3a71a1a710f609f4e794f1d764a5317ac067e8194666dbc73e32b2870eecf8776bb7641dcdd6d764f91dec83fbb53a97e6531211dd8b86bbb57f8acd637f4b1b66fd9705a200e3081ea382262d54edb161927eb1d85cf7b9373a24607c99f3d66b85e22d2cd5cfe24020d56e0552bd43d803882128317d9a56e63a4808ed6401b662187888a0d0b311364fbddad07911b5244877eeace22ab5bd8501d748ed5cb05809e1639678c4c6cc43a3c2fcdd5b0970332429c3cde09d9556c8360f26caa744ce5e57bfaabcf7d124b2d4fa97d7e72f16cdfc35f87493717e2a852b64fa344db5ec72dbdf22dbdfcd12ff796d515d5f3fd3cddbf53426183bbd92e2fd3e91fca8fee1c1ef4f8d59036df9c48fc7677f2c4905b6cf4adcf448029c6c6a2968b13e3b77d578e2661ae7d07ef84fa098bae9a564bc8c507a103990c00a0e6d2854a1689f7b095a100b7f38df028baf20bd56c843c24f8ca4a81130256b13636440836837429c1c86ae1668d3b250108406acdd21b40450399872c1da6178184bf9c2cc11ad80caa9997d3c6631f09ba2a4d96e6b74313f1e40fbf8a29962648f400dd256c4852c556deca2e3443b858efa43d53efcd496bf5037a82e14868b508632bdb2dde924ce2cd6c65f1708c18cf49073e536f09e8fcfa9a44fdbc349ae75e17205754d3bb82d3ee8a93c59aea1bd7ea6d124224b11405f815ed518a1cb9a80191249ac1cc0e5c1f9aab8fe67bb737cdfefac82a89a7d6ae08bb9e1f710cee451d851b35ba9b886dfd9c277dd67891331d43f36353c78c65e9f3524e1b9b229c9f91de7b5ab16a66017d171e2a4e185481d33cb5bd9c5e3d93c49d2c620c16467bf4db73621957f76d656e6d4cb4d59cacf1209da4e39352554cc2abcc8e82379b4f819fd6d261c6d7615f85f6c5d0b9f57976836493367e1bbb14c57983aa97c6e4e7c4fe2a166284c904ac4f70ef2e52e4e7dbd677ace683cd61aa60b702770aa0ddf14b694bf3cfaeb585f8fd8a85bee2f78400a0874dfb4c319be24a46d1914b6e902d5de8d8375c9ec786ef6eccf1ee7a003f83d2e163097980a06ab9fe23c4ae8e91755e4217d3c302111febfa9dce02a49b217aef709d183a5ab8ad1d39e9a697a79be303fdb2290c827279ce187d1c647cc28e20c0b3ebcab2b1c75850db46211150a8bc5d80d868141f885f7a5ef520ecee6d33842141003df4ce066090c8359b5dc32dd9ecb1039454d0b691d8f97932b69981be240804e860a88d1a047f46ff43609b41ea36dc276b28e87364049940ea7b6dc78848221b30dc6aa1b60f17942c96c46e347606d14ef02ed3ebddb20f7f4d28b9460f4af047b772927ca6a046b7de2a21b8ce79eadb74e4825af5e19ac2955999d7304a35851a4b9086ff922da8845da10a55fbb62fd13d98d45f60842d0d6301cd72e7cb97bc84393a414f671e5e0115a6c1c26054a80ddde10e0a83a4ffd123504c881a844bb7187c604f87588dd0d0f11930f9a3cfeb7098f38f84923637f1a9f6b3e3d0899a156d50d7e740b118c4865ec5e69aac247a930007452748bea9af0af511cc1129740510b13f48fe07ef1417ccc765b2cd0138cb51dd71fbdbe967fc321082a9ee4bbd1ea404cb24971de5a1ee7d7993b5d11d67d30e8ba94a9e943852675a07b88a51df6f4abb507cdaee96726023855e4dee6bccb3e26a2a88fb60d812e7856c13af5f4fcb6776ba8e27a35bffc5e46473b31a4b83ea1a3376f4549af87d03102413faccc3fc897ccae95d2700163f1fc5170a643554169018c5cfcf8f50c7981270995d8aaa9f923c0679b258aab60f79111627b71404e1ce8751228972cbb2bebbe25973cf98bf8fe8e63575950a0aaa1ff060f01e96791d128d0b7b40855126ef3910ed7d7a6d9490618da352ad7b889f7d905bca2214224e170f30a088cff91921917c937950926cb11c04fdc6bee776b9abd2aa286ea5074e72756482fcb6a7d072edc075f99e02747ea49a40b26b58118b6692fbe55b09b054a044d1f481173e8923a74806cb770c4c61ffa982077f82bc4db7fee4ae2beed4673e39f5ff0614072a771034174a0f052ce39e27450d18920664e924ee963c9bbc9852fe68f30a199ee4856c1dadc08c061165867438bd3bb73f5a50f5131b7867dc80e0c5d43eae80cc2874d48edc910e7f8f9b73e032a8ccd7c348e84b4179fa101d488c2fc16cdf953e269a9cf13c0dfe575e0da49d7d2c09293296c0232bca9fe0aa8199b21e19746c4783630e432b5c7e1e25864fcd4deae07c2b07782d155fe6e6b5d9eed4beb9db47bae4007753d8be56b10723b5467c64acb0eee4cb9050b4ef2b57b630f4608af96fbe484816454ff385aa3765051408779384c6585f2e24662fcc3008dc17abb07ba9cf96ff4c795c97811e73b06c65e1b5c66c2e1873191d972830b1f53bbfedf8b5e8a64a29fb3b3eca67f1791652f9ac037c2f87c6d1d9d453b12d5d2b0c070a8084aa15505e240bd0c61895383f23f0460027d60dd9efd8539807f717bc353f9b858b9bfd2acecf2190e280faf6a1603566ff8893dba33ad3300e10438241709ba7413fde84810b966b4556f9c8a51aef27f9b9010e7b6208715169a585e42bf3f7333209afb5b19c0de7722004850d53329d93e2e4909eced3da67dd7d2c82a4c9d0d7cb6f5ff7dbf195e8b39ba9cf0c1699ea1f8b6d1293509774ef3bf48597146a60aa5b6eff2bc8a64f9ae9a81becb9c398ab9676d2cecb14d28f819d08050269bb0ca9bcf59d5c9bd2fe2bcdfe82a8f037781c6275c9229b0729cd085e66e2712bdf22009440c4136c2daa54e547386e1acd16a1d30f3d55c1ef0fe10c108210b9d8894d31e5ef17b049106700bae524eef744ef4b3a69e9cfed4efa9b0c9262177f9fe16f5b1fe5bfe5fc6a611e6ffcb9c5f329d4e328cb69912f0dfb7f4a83d326cb20b053653663096870e7ad2753e992dced7405a00a39dc55e652eb6b2e1b1e9782b42f443890c4067b07376c6f0fb2ea6589e04a8eb39a94d913d9f4410d238e6880c167a0a23b266577c41ec3e0f513eb7fc948c12b26ea2646c0481488417d9911a0107ca0ae11c2c4b8c2eefa5144ecf8b149d22abbd26d1b2a3fe51016b9bbfd229c090fc2fbbca4803217c991e36f86d4720b45ae45e6b20f09fcd8e5decd79997e79177bd67de7433282c1d0be5d585a71c873e7171a133d9f5ea35ac0ac5c1a643279ca66a365d278d14eee3ea90961eebb3f6c098c00d051d4716853ec7069be2a4625cef4c0f72abae5309d2709901d05217fc3e52049c4aa16b50121e43ce491d1bc9adb01679ec25ab5009f746170c2517f0072f16c574cb447c6d8ce4a2e45426900463c5303413bf4fe7fd64c273b404cf936068cb3085c3a81b9872ad2cb79aa4c051e7ad97cd4e8c6b94bb0df87e4347ca6f11f155ea265762f81eb0e9fbaf3dc05157eb9f12596ccdf9193018a2226824db6bbebf4e89a070688f698bbf23f30dfb04db7c3d804a7587ad0fd03e68cff7e516e5109e328e1eb3b887a6aced15804f2c898f41c5452e160ca30e35843705c150bad932d2d3fbd791100b1535d9f3306dcf127fa49c1a36b172f46b1fb676ea8783c23edf89b2446560dc1b95b39f80eb9d0994c8dcac9a5a304c554133e1d6ba368468a17312167cda37932cbd4b93c58b7ef772d56d4311182a680e19da6fb938848aad40242856379310b61d6113de6814644092712133823ee2281639b52cec52ab0dbd65ddae631e7113ca75a5476797cde5f5456acbfe63c6ca8b83774690eaca3a019771ca0e742815ca5645418730ee17f52fa2531e5487c10da3ee080acd50fbd19710ed5cb924e28a18985132afbb7d2ff90f6c3855c56970854b9a48ec4f7566d2829e271af3f0ce26742602241fef70461a484499591a9079ed53aed113589fd74918146e1917a063514d7eaa7f4720a386eb2f32b6d35baaa5d36c2013eb405cec607202f19bda80bfeda8005c5d1582208b861437fff41ec0708a6a98f2b4b4463141c1c312a8115509e363a274864898be996176049d5f7e6cba76b3a37c9b2ee9553fc70f79503797464d736d97d0bb4741ea8ad14fde6f18fbb02ae97e5a77bc1527a13f18624927d79aa5b4df2dffde7fb5356e521c7a419209031df8138838151c7e90783c9af133b6961b44f8de89d6348b191cfa6c0ab652746b8582134537727b18c670691f3c1e8ca0e3cefcd26111bef476eb816482b7726399c86cbc98f0f06929c26cf831163bdbe1fa8d8f96a65d3bbb3d37657cec4b77516864cb32404996dae1d0d9f3c12b7f2698f07930b791813b7ccf0f0dcd3320b78833f077ee55aae156af804fa9a15e60c709fb30b06ac092bf97a4fe4732ea7bc93aa73232024c80434b4900cc30de20cbc1ea407746fb186a610fe31635766f5edaa8c9ae974ff8cecc4e7e391a50bdb34ca1dec1567e866497bb59852cfc1fdb361b235c803d70cfc90c229078079619b4a8086a68d420ee1d7fac403b18c7f6aad91612e2f2b9e5e206bf897bd98a3b24a0637e2b986ae7f5d376bd63d63f6c4f151ce7eaa97a30d9d51f1a9207dca6b596831a9b92517b9d5571e72b4a06c07d5ff0d325896a1b32e9fb4f9d67a903946b205fba7beda108fde3fc503c7352c59c03bebc2891007fbe966a0441a7f4bc8320b901563ac8eadba643bdfc1636864d33549a1b9ad3ce01bec94b631ac6f46c453c57c62f2cf0f76d9f1e0731e266311624a138e607e699c91e37a33096117f418b4c92c66d96fa1b1324cfb569e3d558598ee65e69b8e0b9625d551af54a09db8082f2fa9da1386f92245aadaa13bfa3cf5c39fe455180bbb5e2427e4067bd2f5a5c755c31405477ba832dbbdd4af66acc7c11e576f700e24fb4c26160b4443b8c17805238519c7c732df774b92579e02a8da5e9a17e3c20e92afba7fab49000a7b83987ea48d5854a0411615462cabd245ab3f49ba375ef179c0a78059ffc14264177a6e45dc5f2fe6c957a313ba9889fef33b788933bb37a17943551db9cd08fd8d823fd0b35110ad589c3bb3af4f69bd1c7c7a3e726f933e4a0cb1209e75ff14910061c3750b9312de42c86838d5c35a681899c25220ea87aff02bf72fdd8745f5d751e6d62861496890c956143c08a222774974789bb46924b68a6e3138ce9dbca622e78c5aeed8215de4ee5c1f8312b6349a91ef1e210f18522b7a644700e90eff995e950c8eda05d0bb8e799ef32a7ddb8a87b4120a798a3f87cc78b6db0c7947b4786db1618c523203c097ef3d3dc0f4e1e87d0d597c4eaaac05a033a3fa91309c05cd8c14de649d7dd16d8ed81e5290950f66b66fd519a2a16fc6b3526f97aa1121b4fb52b30640122dfb50ff619fb5c88eb1c4e6ed7f6d09fd29e27b3375a1aad5b09f8175157018467f883ba385208fcd32a50a311b22f7951bd0e912d234364f8590e247dea604872f9bb847bb32b3906339f5698d6e7c0f2a3ed17b194239299091f5ee4ed51c75b76bc949cf05df5dd03cd8a553e7ec81881fdc1e15cef5e72eecd7843a981eff417682604769e302f378ff9519cdbd3ba2bfe50f85a903aa08b900118226889e9bc68124777f6e02fb26fff91d1f31d3828243cc46d4b4fa2965445774e0ddc521fe5fc9626fe3428403e746de0196a45d6acef57f662faf27294be80fed39778a7585b41178ea38f64893f9a46334af6425a4aa46e25e92b0d77750c6737b237dff19913fd9e69ed92c4b6671b4226776b34ae2468907c654bb0f619b2c9b55920fb99e97bf32212f852b615689f3cf4c03d51d1587455b5720692430fe2684522bfe6dae871aa2ff5f00045861ffcfc219888fef8320bec1307236a7a42dd4a691cb6cd4d8436f31a3f2d642b05946dbfee692aee0da31419f9b8bc0e1dcf89a8ffd7856b21b1180ebc8ad75308b1370b93d680e968bcde7d235f601760a5d181f7b55daf330a001ae1da86c130c76fbd956442b6c705889d665560f8b34663390592d85ddde790e0f4f1f0df09c1c6f95477f9d72dc0894b2efe2c3d162ad80f80cae03a06548014293a02f00d6386723d42ab09052f019a1d71d88a78db27afead58bc516be8d23893f007a17ff47b32777752a15648d0ececd345aee1f36c58abb7efaff5567100c0bfa54f172c862e15872abc9d96cead6688f02ea8466fe1134bd3756c6f0df8903fe7935dbe3e635da368f13a10e3018cfb5557d38f859a983a54d660a02bdb3dac2922e7a37651677bfc664d58df59ea625e8e63ee776bcc2937b921f5544924b75cba04bf3cd0df831938f9e9c79572e8492d884646244990920400192c63e15024e2e1239f41390bf7c0e18f852e23d514256ccb8ccb2726710401c4306657fd75eba94a353987780a6d6219012cfe80858060e37652a84ae89d07f5d651fe82a2a8d0e8568492156713b1f76e89e12f76a0254da7d526df51a089600f5b7559afdc63d4872fe8d6ce00a8d0c9b00db5ee676ae2545e74fb7b39f8345a67913b234cfb4f6e3b4e2b1e1f4f1c7fcce8c09cdeb6a1a21bd2370004e583ef62971aec24ce0c6c049b6a2e22081d36854956a362b6cbad48049d7d5f90134d3e77febf87bf4a32c07cdeb36c9cc56b2b3cc8c8b47879a32ff00f3b2e977cee0acb30fc424dbfe24c88d1a08d047925cd7d65a5834e56db2b3e7e0a23dbf948c799db5a48fd4a5fdea43913b2b2c149ae9a98f452b797b55abe1dd44b30232387f466856d6c38ca735dd6175b455363dbf228ef52e443da22a1ee3a158ee304d9ca63c110a3d19ca3bab6d1745affd81c480ff8bcf5f8f7c1ea6d08a7b3c3958c324d42732711170e19523bd209134674b184d4d442a774e04d6eb4ac89a6d018cf0bb68a73da87abce127e57428cf73a5a551c85ea8c376ae951cb8357506f037d17d163172dc5764682c753050f35c6802fb269d7490b196d57bb8a1ada55da7550f82357320e14cf573ed39860f02a11bdad917b2ba2de885c7ea8b30dd62bdad207dfe10e97c8b71abbc8c5661a4483bb6f9488ada0f5885c471cfc1271b60d54f903317cca28ce977f4444cefac5c2ff233dc872d4e809091f8452de9c774ab3bbebf62de92cd6aa7421a41f7d1dea42e4f94bd3a4869c958f3940a99c88835ed2f4021114b9a5bb17240f468887b213814956f9f5e6344cbae19d8753b97c7ce2e9d0954a30dde23dea2748e1c9514672bf4ea3ec3e348a563d9649899e7227708e2e77d0fc5847dc16b59ac3dea9449c176dea2d2ff6b6af764d28dee5ccfd0dfd6e3100d97040657d7ac5da4032e3b7f6b0cef2ec55a83350c3045abb10200c264e6e68e3e03b68546ae48a538063b86315bb8073103a812717f2d8816534fa98d0e956e0f9a67bcdc522cacefc77b0be71832a69ffb72fa15ca4d8b15f7fe03da0f4b24c5fb68e5f3a2297bb0cb0b7bfdeeec4deb64bf71f57820d62c47276e2780b4341b6bc65ac49be09c94013783455a95de92c11d91b9e921a484ed69532b92e202d684d2293a2666709ee38d2114add4c5337bfeef31d481e12530c5c7e83a6c8aa2f580f6da2d735ee5260cf9a7185eff84eb22d6e0d5ac0e63fe6a3def819274a144be5ab90fa157bb7517a54c208aa82da926d5b09ba649e326a654fe8fa9dd7e6d83b0a66253526e5b5aa03e665f2eb4678e8293110420c9d7556df07c7dd1c3e817a4c7409890c4ff5044ecdb34eb652a4d7e20b4b0d596f46ee3c3dad675e958e91c3b40f2d22e671bae51518443042c529c31e343647d6ddeac7ec370970fcc71a24a0826b58d111e9b776ac0e2fa40b3099298ffd0d1c04d41ee1dd039425f52f9f8057ac1f206203f20e1ae9cbae356518ba2fe9e49b47e36942ed7204f3d7da9e71b8d69df3ae7b2de05a13a879af6a1ea6241c645ed73c139e15060aeab6f423c2180dd101863a24f1688ec1a33edc624c3f5e80a20e4cc5c86ab2c692c2d3d17d8a68bb3924efffb29c9fc3df937526452d82a8ca9a558c75d6b2504df1b66c91823216a1c3b3bc39dee0d22491b9c891b9eea193c8af8a992096d0cd74630f7222e9a3530034a582f40601a694cf1085fda7fb33b07332c6aebfa70e2ebb8d7ccf19a69dfb5e4c166add5e153504eeec92f4ea2fe47f291625e1c470b832a488f884692b8ec49b96df235f193027ed38fb4d8b88ed382825df8ffe5b0c6fab8db3e38d60d467f9da725023deb72c378258e911442afae4db650be3621a033a3b84eee65c4c0664ec6d5771cc138937434a6a361de3dc1c12a2a6735f080e94314ddf291516971af252e3cc56e1c65ba5cf8ac2538878b22034ba458e08db26205608ae941a42a27f2643ded87bde626387c2b791ce57991dd2ba08010237279cac2760e19cab9059b229ea002ce4d3b4afa495230e424752f289003a240f5cafc7a83112636321107918d582fad2606a4319199a06ef2cbeaa3e1a4d8c30501aab796f5cbe15453b61218a396b79c547d15d5c11033b3746b432b426404f7b0421b9daafd9e8558f1901283d58e173c4db0511ee826ddc6363eb51e0837c9be6b2078d808d2c05db7495d29322ee6af68b0d52c45f00a59731c0e5b2608ae046af8bcf830f001ffd2f955ea89bed216e71ccb5b44713e2abf5ee5438d63829c9aea34b57f7ab52b820c24a7e9fa138243e4afb2df93588e805e719c1767146a351debb34678a86dd19f0587af31195460a3aa3e68773859fe13b47b6b31a501b4a25c6660cfc47f3318b33b77b10ed4ba91086482db039a56fbd1490f440a6fbb280b62b6d2333afe1c42c3f16865b9c0e484a4f6f393b8bc34fbba856cc5ffad2fe423e79f691b95e7e0dbdb2b2757d9d4443f9a23a8b1bfdb16f8bffd81b4789f80f1fc4bf751627965755d008d134e2c35da34f54718615e9deaca0685396ae7e58121327e0c0696591f6af93f2999ebd3b4e03cfe2a48b2b94015eb06b2a9031ab5e129b2700648fd62ab75f77734b89abb402282635eee41606eb306619e2dae84488e2aac1df54f78460b36115072a2c28801fc122482f1d46de4b2eec07bbbbcf85f30ffb3829c5d0fdbdf3af8c6322d62f4c55ebe8fd52728e2d5d1a24f096fffcec6ff2e752f7500", 0x2000, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000009740)=ANY=[@ANYBLOB="280000001200170a26bd7000000000000700"], 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64) sendfile(r0, r0, 0x0, 0x7ffff000) (async) socket$can_bcm(0x1d, 0x2, 0x2) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000002c0)={0x0, 0x16, 0x3, "4d6fbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04050400c9000159d5b1486f31d6b9b0677b01009a5aaedf26859e2d86c5362fa05a1a58a501000000000000006ea21a2e6dc05555f575c3ca42bb3c6ce42923de649441444610681eeb55f338be481168eb2636cde1a64237658f1c3850b410d97a0150b69c8e3bde5791585f106486db5cf798d40127d69e6ed593ff375df68300"/140], 0x7) 12m51.742618208s ago: executing program 9 (id=7164): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0405519, &(0x7f0000000080)={{0x3, 0x4}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0xcb4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31413bb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x2006, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffd}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 12m49.192558774s ago: executing program 8 (id=7165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x40, @rand_addr=0x64010101}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e22, @multicast1}], 0x4c) creat(&(0x7f0000001380)='./file0\x00', 0x68) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 12m49.191980466s ago: executing program 7 (id=7166): gettid() r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000440)=0x5) ioctl$TCSETA(r2, 0x8925, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES64=r1, @ANYBLOB="2a0033000108021100000050505050505000000000000000ffff"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000040)={0x86, 0x23, 0x9, 0xdedb, 0x14, "00faec694b00"}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000000000)=0x8001) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x14) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x82000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x4000004) getsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x400c2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75a84f5355b16b4c282fe9821e5839926e705f5d643d", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0xa0031718561a10d8, 0xfffc}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) syz_fuse_handle_req(r7, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x3, {0x8000, 0xcd, 0x0, {0x2, 0x6366, 0x9ef1, 0x8, 0x5, 0x9b, 0x5, 0x2339fdf8, 0x5, 0xf000, 0x537, 0x0, 0xffffffffffffffff, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r9, 0x94, 0x6e, 0x5) write(0xffffffffffffffff, &(0x7f0000001280)='\f', 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r9, 0x2000) 12m39.081757952s ago: executing program 7 (id=7167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010255d30e2035060f013681e330e8c487dc4cec919cd275528f0212000103040001098000000000008000"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0xb01}, 0x14}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)={0x24, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 12m38.679940171s ago: executing program 2 (id=7168): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000002060101000000000000000000000003140007800800114000000000050015008f000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 11m58.239136311s ago: executing program 40 (id=7164): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc0405519, &(0x7f0000000080)={{0x3, 0x4}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0xcb4, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x31413bb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x10000000000000]}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000080)=0x2006, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0xfffffffffffffffd}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 7m55.867106309s ago: executing program 41 (id=7167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000000209000200737997310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x4000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201010255d30e2035060f013681e330e8c487dc4cec919cd275528f0212000103040001098000000000008000"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r3, 0xb01}, 0x14}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e21, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)={0x24, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 7m49.604685426s ago: executing program 42 (id=7165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x40, @rand_addr=0x64010101}, 0x2}}, 0x2e) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r1, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_LNS_MODE={0x5}]}, 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, @in={0x2, 0x4e22, @multicast1}], 0x4c) creat(&(0x7f0000001380)='./file0\x00', 0x68) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 7m49.077584138s ago: executing program 43 (id=7168): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6000000002060101000000000000000000000003140007800800114000000000050015008f000000050005000a000000050001000700000005000400000000000900020073797a310000000011000300686173683a6970"], 0x60}, 0x1, 0x0, 0x0, 0x20000805}, 0x800) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 4m4.67162511s ago: executing program 0 (id=8546): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000002100)={0x1fe, 0x4, 0x2, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) write$FUSE_BMAP(r0, &(0x7f0000000080)={0x18, 0xfffffffffffffffe, r2, {0x8}}, 0x18) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x1400, 0x1, 0x3}, 0x18, 0x3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f700", "0200", "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}]}, &(0x7f0000000180)=0x10) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='gid_map\x00') write$cgroup_int(r6, 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000040)={0x800, r4}, 0x0) 4m4.567822753s ago: executing program 0 (id=8547): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)={0x3c, r0, 0x801, 0x0, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "7ee5d52ffd"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac06}]}]}, 0x3c}}, 0x40000) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000050010"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x20, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x10}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_IFNAME={0x0, 0x8, 'veth0_macvtap\x00'}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x40}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x101c02, 0x0) writev(r5, &(0x7f0000000240)=[{&(0x7f0000000680)="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", 0xfa}, {&(0x7f0000000040)="8883c8dfeb78e25f7ee48ae0411ca16d23c2c2cd764acb4f6ffd2c7f27ac53dd7bd99c86ba005b1130828fd9a1701a13eae071b67d86970759b0152413eb5c4255217de714b78bedb414a71e9480f06bdb1be2439c22112f4d2290fbee9a6b02e377f27f58", 0x65}, {&(0x7f00000000c0)="ab90035bec66da9ba004c0f0fbfba96ff59c831dbabd00bd7551c02d0fda8d118800d48ac5900ba01d5232d5d66bfbcbb9e96aec985b44d5da3390a1ae7c39e70abd84800e6124da7220d04c8f2fb999b6", 0x51}, {&(0x7f0000000140)="ecc11483c0124acbd790082432fc616c3cee1e41ace9fc5b89369b39f80eb1341385ce3573f1562db5a0d2bded57c5d229d1d82f507003a3", 0x38}, {&(0x7f0000000180)="a9a098cfdd57862c39a363aaf3c7f262c3074a003a7c33b69afe1dfe990247b364ac882d3de1bbed9222aef4f4426035582dc52a81b145ce4240e7b47e970f63246e501d71c1853f4876223b5ab3e187c2f9bb7abcc739966e4906a6167cb88a027c1473f2a8fc8b413f37", 0x6b}, {&(0x7f0000000200)="dd4b968a64c3e73f580cd1397ebd68ddaa6e166645faa95f525dd8a8e026a0948e2e7fe0dbe7", 0x26}], 0x6) 4m4.493731521s ago: executing program 0 (id=8548): creat(&(0x7f0000000000)='./file0\x00', 0x1ea) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r0, 0x933, 0x7) (async) fchmodat(r0, &(0x7f0000000040)='./file0\x00', 0x12c) mount(&(0x7f0000001400)=@sr0, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x858006, 0x0) 4m4.492232777s ago: executing program 0 (id=8549): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000000050005000100000008000400000000000500060000000000080003"], 0x34}}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x2000) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x48894) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=@ng={0x4, 0xb, "078d91499fa5dda12d"}, 0xb, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f000044d000/0x2000)=nil, 0x2000, 0x3) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0xc80, 0x0) ioctl$RTC_AIE_OFF(r5, 0x7002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x22052, r0, 0x2000) 4m4.278391649s ago: executing program 0 (id=8550): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16d342, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) write(r0, &(0x7f0000000400)="547bbee68789313efe846d6698abfeac0d12b144933fa6f684f1ba13b34680bf4b9ea70f71faa2a82a45ab47458c1f827355ad34033fbb8b9699eb0b279252dfcf29e377e14dcfbde42857cbf2aa88d3dad8ec2deea7afe4e747fa392fe01d425970fb2dd7a000ea3889f0d9021f347818106963e18c256e3df26b41c61d30284a8ad61c6269756119d62e3a7a24c1dcd09d3eb35dfee6ec945ac190c4797988e0d7f6f38bf9b124431dd8208a9208195a70c8e558c216e78d5f5b3f6df6f155e16bf7dd8f4e9eaf61d5142a82da7a87aeca19c25b631cd8a14ce9f2fc8dbcd05f51dc9260abc82d780c9358bd6411ebf48520694d413024432d0bfc3759a620289c9c8705009fd829da6eb5b72b454436b0af8e9dc4941ca2cff92561cad984e15849dcd73f04c7f70a30304da2fbc17f421767ad5ce47ed79d6698428eada9a39faa02f978699bc8c482224a2d5f85cc1135ea92ac1c610e32f1e7c82da6d91e0c8634da679760c32c3e891db352b76b61a65bbdd023e093a8e0d37fd8cd00679cb1bceaac84b05861740c221b2cb4afa1ce8b091c815fc4bd83995b5bf5dcdf2912572cf6180ec27445404917ff9e8e6604e2afc19a1bb3745914f0a101e03e44ea5f64d40402f12a81310c97086fb01d04e82799c40f29348eb283ad58a40d608a47fbf9a25dbb308aa03b2425ffa896e1a70a37cf49e6dbdeda39ee88aadb26811eba78a0dfe5400a51428c31582edcc5f75b5dd963707a54b9b1e35f9966995d6474acbf7094124cecf38369aba3f6a5e3ad071f5e3df902843a3947623fe01571d97625c3e27721b08a6f85fd7b879acd400de5beabdd2603d566fdb4018bf8bd74c3ea1ae67c988992c7dab4ebcf501a73815e1b527d3ff1cf9e729d55127118565f794d253fef25609e5a415615d1b5fca5381b49446d9b9e75fbfcdd9218b0d8d8d965871b897544e32fd0b4cb5600ffdcdb0056bcad75216759590f8a94db82b0acd2a5a34e5c34241a19f1a7a7cceb894341f55c6b474f3cc052f9863a67519dfadee6576f08d7448929424c13e845e2e636b87dc14e1ab4ad05d69f896ca1bc5c1267befb686c4207e21aa30bdae1d1602d3e4080784834e213c426ba5446f90d3b3885a5d6942c6b0e637f5bb9c7908460bd7d04497ab054c8fc7f89068f7535976ad051bfe94c243ce7604a63b2099b69f1ed73590a318fad9a170fa0cddfe60e981a92de2e1aab3465b11a968108e08deadfa1fa546c4cbc0c34ac28597848562583ae8d93cb60f2e06c7a1f743add51eb8cd732b40d48fde00117cb2d654100dfcc66b7c9fefac80e137caa5cf43ae897780251a3ebbc4ddd3b003168963c9e2c9446cb29731fc4bbb5e551aca6913f7b8576ce34012581b5a363917970399ca369688e637cf06ff3c8114383d2fcbf9c69f1ca63cd21695254a440df5ef0a8abfdbd0a651a533b6cdb82382e3bd70f87c1d3eb0a6e22452605026fafe6d35158c0728c1050a39330c80ee2ee0b09366fc6382883ecd0796feec657b36aee4091471e406e9faffd5ede27943e5fbf1b7249ab8bad71f60063697f04db52e980a9fb3eb5e53b89be8a5f0e6afea7435789ecd444c28eb411cdc2158e434178749f36cc957dbd17efb2b218592f78d6864f2708e8c6db2da0d3f6de53959afec0c90d3d62a13a0bc3857bce58d81223eddd05cf3c1ec6b3fc5307d0f16d470f2065300295197e9fa81d2e5574b2c7b18f1c6c85156a9b1174d62dcd3cb026f4b67e6babd66c8f427b9687585f37b18c82e0100507035e78ce010b78ea1b5d3884db25df36ae929dd535a854a31cba5e47655873df72be7463c600b704e9da0e7cb2d61d0710248814ecced2eef8f227c8aec308c2c9d0a39d1a6b306080e8eaef8edece0f6d0d1612c582d70c3999a1a6bd529538f51ba4869ce74bc8509a7126d96db118cdb55411a36f4361d53c8027c12a7486e9c84e4de445b454630be27bdc2ec268702d9c1890297bdd1fc7a235f1a47f4645d286146f3cb9a7ce650f4157a1e7f134eb1815001d59905d3103efad3c66479330e8a5da941c9c38bf21bc0770e3fd56cafa19ad6e9d51f94ed4f900062b5602653aacdcc956aeecfb1dd613caf918e1ca8ef2e1504c42768e77df43569d5fe4b48c237cad5285c578b26b4e47c8ce06fd2686e17eb6d5df5645d0fdde7782216be07a1135dabc3a59598bdbab249c5391832f18ac5163aa7a1a890128a4520835a53eb750604c5e328ecb3216516b3eba3f97652caeb4327da8865880a932dc8e7668666ac3b76a2a424ca37b5dfb52495710611e20790427a9f9e7ac59bb86f0fb7a17a5def347a98dd8e733b784d78d5c7f16f327a2606d4252411457465540a60b0757802f470d08337c0fe4eee5f5cfe4f296d0f7068e80828a022c95632beb7b7f802135e246b1adebebf24c821dee7205e9fe1a437b16aaa8dcb4a58b0bdbc8dbc2fce09271c27430cc9ca8141955ec5ff4228627c3816cfe1bb2c0f40f6a61e8bfa4e2dd744e41ed80b83e9aef77119f4b062b98e86690711e83e795bafa7a8db16f241cee76aa01ff749100c113fda966aa8c83ebe975f760c18e3864065a5de6e8028a9e3199f4acff11e14bb13bc50faf97fdeab46edc371e55cab78841a2de17ca116b0183ac38b658c57a64ab11bb0de071c971a7a5175ad0bac6ac1d1118230a5412a35bd005b369df0e04e749ea93d7e56f713b9ceff580547a2a76ea4753a78b4a5cd0311024c5536b536c8ede63bac8e8b4c5851248d9098a7c6bcc3d5f209178b45aef3c1afa4ab73d8feac3e1f771626d73d85f72dc15d16bd3b7b93e622626f6f3d96b4425d328236cf1579f1ca834a7b318b012e27b9a2dc528189cf1eb3705d90de50ce7ac0c256b7e41500113e164fb7d53c74c6f829552a5bce73eeab9a46d01551bdab18fd3a7e82b036872f1e876b12c5676f63a6ef0c6ff159788a0c2fc40f179a259c656e8aba9295e90027e74ef910ce3c56d6e2de917947410b05603b6a5052453f13e6ac058b3f621573bfe6224bad8c3a5f575e1eb774839cb554c53c9b3ad623df6c5c9627cce856f9ba5847557bc9f854cbb37a936f20a733ba352ee5b343b941290a399fb862434d1b551da420053cad3bad65195cde40b345740e30e9a22619add8aedb763473b729c0649f7a1ea45325534c9b629a1fe3a54a78fe44969715182c6df5c9ecf6878380831b2996579332ac37286e72ab16824c3fc9ef8d74a7f1f5cf80fa37f6bb990db3a7a70139887a4eba0763247c58f4fe770a0496a5ef49a3ba4d62bb900644d49b5fba7e58d58af6ae50c96da346618434ed46b8f4c27cde5e8863d5b090dc117f3b16db2c4273fa84f8b06d3df436bf4a8cfa6d33d7f0e78ef422d5d7640c821398c9adf4d6ccb1b2f7cd0e497023cfdd6b5bb9ad6a29edb8b78fb3322414cad1458eb12699853acb165076db7088f518386380850c111cbe74034ddbfe217db714325ebc4d6b46eba640cf125b87eed0832077ab775e475e431079756b3da6f9bb3c861ce7eabf6adf70b76eb9642a1bab3d7afef2d7b40c8a19b98123ad7449c1039c494e73bc91a86e8e92c39a9482cf60605b9e5c209262c4fcfde76ee370bd6a78253b64c5cbb19a11b34c5a9ccf634c52751277268cd97e795b43867af5a4db51bd631ac547906fd52aff43eb98edacecf08f94a060902b5cb82e87ec856305005bd1150e581d9717460e31ba724da5e7ad72fa580f8509fe838dbc1bfbbf53e29688f25ca602d2de702e4411d3d133e2ab2f454f71f98efc2cd0eb468544cacf608c6689ef122009cf61e813e26b7b2b1695143fcd510f509ec2bf7205e674ba6767eaa29605c51e434c298bde0969617292e960d22b085632d241aa2a8e0f6ac6f2d56d0ed2c6bd3eca306a3224915065894480e737c7d7a11901bb7f977525cfcab652476baab0fd3b68dc59fd14ccdd6248bd5c5a0ab1dbae28a848b2d4ad0d973bb149ff4115b0436b7d145a6f8081d314039131f60dc8ed0ccf2c4971f0a59a65b3b1ef638e6d009dff793a4b7266c58f88bb117d665cae8fc6f6c2840470333bdbc8df12c6633a6ac7b664e089a85dc6d49f52459dd2df1be552194eef6027c1b45f62b97647788c3325f05609c1e02cbc9a18be72e4b502df719e4f9cb82615e3a03b5732328e552023dbfdcf91ed5ab51242e7d09a9b73674f0946976d8a8fa9288dce4d54d5820a0f0053b892685f79a6c8dbac724fce4d24a7b75e383f54ac58af3951d666a22f158637acc4f0e09e248e85f8e1439501afc0d5b7e9eab40fa737ae93482a1e29f3e327fa31d0d764c65ab976af1eb91fe08c5bc10a48b93453ad192d1d538cf93b792a70246bde99f46a78b670edea552840e08c787c928ee311f954b73d07287a59b470e38d4e624ddba8e4b21a74d7c07cc684b0ea82212129901029e74312866722dfa2dc53de3e8ddc00adc21deb7510ed15c50d139296297408da3d6beb589e7bb3f1d74e4e8dddec14b9cdf371d7f142136cdca5644d09edd97228a0abcd2e7b402c5cc68683cb980f50ca7aea8338dc5990a6ebb2d2b95a3deecc45f5a4f4e0e40a57e29f3e227c41db00e17dc962e2ea3184b5057c89974bcab651a22e588a527d7d8ec695e7ab5622c1ad3763d045a8393b7acfa04488556ac957777d1aebfc5d0e2a8150a6984d5607ac2400789d8f622c837d6a9b78fcc2d8aa872949edde53e3a99b5f5bf35bff5f0db7874ad3f172f9d8dd6cbb17a770b1482c79b9a15605cd0d89c6bae9aa6db8e886cfff8f843b99df95dde88c96202ae6ced4d539a3f70997ee7b2bdb7bbe529f9bc55b143066de8d9dcd7fa38c54094f2235e4a17ef8e910b4d48c373ce5e6fc9824ca8f115e579b002df16c591557cd6cac1363b8d8fc656075ca703a87f1efa76e4122eb7358389f659681fb49cb82215f73b284a7678b8b1528472d0cfab1980ee3d4410bdc1c31f1f798c3ca5744077e2f6cb4ca6e415f1e3afc8c00dd95d3307de5428883513f01ed19dde487e1c103619fd78583f09d02982512e0ee20a670b3b24986dcb7431f1ef3fd12e801bb2454213ff7b1962a464647eb4c8125cf2ed098160da880024a98add9b2917e133dcee7a8e25387fd5bf2b3f8fb05b2f7ed5f719b30b9cca4b1754e31d48bd2ec79e7e9c155130ea5f0876f3bb4d94ac74b209633ecb03deb8b9448e8cf4b4bcb04ffdb38ac457881f84636246a4e5e7773166129fb8b7803c6dde0ee69fd1f76f1d93b729eacc9d8dbd6e61e638a3f8de972a824936b1d869a15daaa21db04760e9110c5b7c736671d31a72fcd57a6f7424c898791cafa21a48921215a78d60a367aa7c6284a1aaa1fee0c5291bdc91bf8c032c9917fd28e68fc046ea4b17952f1abbe01af5f19e4fa99fc6a985f6264f9efbb208e6146d3465cc603ef36d3d59b5197bca1696bf5658b60cf0e0455cb1e174e52c4acb712a3ed9202a1ae334427b93305939c7f15e9e5eed09b5fc8d1e3836720d46d133841d4482ec2427d3002d95bce996b4b2d5b59b2a43970afe35517674bfdd8807931697422045f60641138fefa27865b9d477ef04847dd02d305e8f15e228522e54d1ffda6d5b26ad831146c66e6f9153ebeb0785ea75283df66816d771c7e4297c1686d06494a59046313169f2e2b4988a2758198fcb166d9d112d187a4456503e6c0bdfb390c89dcebf3cb8260a27fdebddbc6071857010ad4c59c062db35a4", 0x1f000) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x2, 0x10}, &(0x7f0000000080)=0xc) 4m4.05853324s ago: executing program 0 (id=8551): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @private1, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="832a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000300)=0x1) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000001840)=""/253) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x7ff00, 0x19, 0xbfc2, 0xbffffffe, 0x2, "a4c82192e6700000000007ffffff00"}) set_mempolicy(0x2, &(0x7f0000000040)=0x3, 0x40000000000c) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16d342, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0xc0) 4m3.902688104s ago: executing program 44 (id=8551): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @private1, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r3, &(0x7f00000000c0)="832a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x3) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000300)=0x1) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000001840)=""/253) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) r8 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000200)={0x7ff00, 0x19, 0xbfc2, 0xbffffffe, 0x2, "a4c82192e6700000000007ffffff00"}) set_mempolicy(0x2, &(0x7f0000000040)=0x3, 0x40000000000c) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x16d342, 0x0) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0x5) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000200)=0xc0) 3m22.049090163s ago: executing program 6 (id=8831): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040d80472f300000000001109022400010000000009040000010300000009210000000122030009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\nV\x00\x00\x00V\t'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r2) syz_usb_connect(0x4, 0x24, &(0x7f0000000400)=ANY=[], 0x0) ioctl$EVIOCRMFF(r2, 0x40085507, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r1, 0x2000) 3m18.803874052s ago: executing program 6 (id=8883): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x2, 0x4, 0x7fff7fff}]}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xfa09c4119783e9d) (async) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0xfa09c4119783e9d) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000440)={0x34, &(0x7f0000000200)={0x0, 0xa, 0x10, "93c32a9ac9758ba5825c27dd7cd1698a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b30, &(0x7f0000000000)={'wlan1\x00'}) ioctl$EVIOCGABS20(0xffffffffffffffff, 0x80184560, 0x0) ioctl$EVIOCRMFF(r4, 0x550c, 0x0) (async) ioctl$EVIOCRMFF(r4, 0x550c, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x516, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x4f, 0x39, 0xaa, 0x8, 0x1b3d, 0x16d, 0x359, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x504, 0x1, 0xe, 0x0, 0x30, 0x9, [{{0x9, 0x4, 0x4c, 0x11, 0xc, 0xee, 0xe4, 0xe0, 0xfe, [], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0x7, 0x10, [@generic={0xc9, 0x9, "785ca9348321344e832b52ce0a57f5bde2a160bcddd54da5a79a1006fb3a472a2f8208157af7de9e62fb93abda225f5faccada917c7c0d21977eeac5fd015e85bc4ec95d131a8865a5c4097e7691c99ff132d302039cf66ef933956492b94cb47340b5ca320a9a8a5af6b4e03d47620011ed531c940cd9bcf72d76069fdec3cc325177c375b612a0dc78b9dbd0300d51010cb9ac84280eacac1246cd222ba659e669136c288ee104747dce2ef5a56177ac5e2eda543ca5dbba5193f1fe01b61e069f4d0bc1f1af"}, @generic={0xdd, 0x10, "9cf3d5ff1b88b9012ee64878e082cbff5d8b518b704656efc6d79bff4837204928d4c0f5117ed75f992e57cbc521534a2cdbdc1f2fb1f404074c5186399203c92b2a0a6550f1e161c5ca2b4c1a8d3dba86b1e72e2fba7b9020adc2dea54a24fbd764de5ce501f73ada736ce51a1ff7df0cfcb7ae44d9140d8bbe370d4242af71238400664ef6c1af82352da696f14da1cbc87cfaca4b6a56b184bd5924123cba292ebb0fbdcf32f7d312c803d0b592368b97c45638fcce6247c481a5fd0c3e469328e3cd28132880f6372213a780eaf07018d20685899254d0b88d"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x1, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x8000}, @generic={0x5c, 0x7, "2934e687535b0dabb531c9cccd6f63d4c7740e1bffebf0c5ef43c389a0055ab28161e0edb9c1927b45ffa84792fd7ee9c567fc232d126a60e3cbe32de529d71f253377afb1cb27c490c18a0feaa4789035745cce6b6f406a9407"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x3, 0xb, 0x5}}, {{0x9, 0x5, 0x8f, 0x0, 0x3ff, 0x18, 0x6, 0x4, [@generic={0x6, 0x0, "15f1e356"}, @generic={0xea, 0x5, "af46a3ff6bc403e1f141e1439c8d26ba41a08938498ae2a2ecd50a227f004d044df1e97c488cb03ee1cf337853043982e3759af7b2b3757bd4fe76dc64ef0fc5eefcd5884de72e99a6574a9eb80b5758be9ce146bd07e105f21222a112d5e1f8cd207d38520e1832e03a97f1b5cbe88cea2ee1952667f021b77a5a96585c1c3180aac09331630647949dbe6f9889a2d54fc9ec69ce80beb92c00b290215419bf27914df2c3ed4cdb9a5bebce7ffc4cf8cdb4a661b3bddb771d1fe8deea95dc47ad3767298a14454358bc882f6320ad6bdaa57d671697a3f5e57e25cad1f0da5efaa388eea86dbc6a"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x5, 0xe, 0x2, [@generic={0x3b, 0x3, "e7c296ae30d3f18952718f4803473f37a2f21fc35461d791d7da15535e9cb721747931840a5e7204253672bb6c4d9f9e666f26170285b42b2c"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0xb}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x1, 0xb, 0xf4}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0xb, 0x0, 0xd, [@generic={0xd3, 0xd, "7c7c78d16a40cb8295093fb3ad29325cd840d7a54d976043db7d44066132fac5881fbc9e4bfe499f8b2a216719af327ca60f14e829c88c87292f6ba4a2811159d83210a7cf2ede69b70c89007b3f395a7a7240164948ddeb1a1c373ff5cb5b0f763730af62b125cd4c4f12c578e15d837b977457ba84777e19ceb3d15e8b201ef23ed7534c37caf4be7663a6401d1295bd91a5c20535377163d70eea75d8d1c2015348110701456a841af69e665718d00d89169a1bb644e7db60380c64e2268e1cec68c546160ac3def2849130487030be"}]}}, {{0x9, 0x5, 0xb, 0xf, 0x400, 0x0, 0x0, 0xe}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x2, 0x1, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0xd, 0xdeae}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x4, 0x8, [@generic={0x2d, 0x22, "efd8006de59dc81fd38bc887734238a853dc2d2c8f56e9270f115742d47c90a87e093778620bac9a74c18c"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x3, 0x8, 0x0, [@generic={0x3d, 0x3, "4d3b4f454e655d42d69d93dbbb8ace356c2e0c49931eb0c06e93aa02cbcbbfa116314d1fad18508163d3cf7a075cdb39ab79bd3db11d95e163cae0"}]}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x2, 0x516, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x4f, 0x39, 0xaa, 0x8, 0x1b3d, 0x16d, 0x359, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x504, 0x1, 0xe, 0x0, 0x30, 0x9, [{{0x9, 0x4, 0x4c, 0x11, 0xc, 0xee, 0xe4, 0xe0, 0xfe, [], [{{0x9, 0x5, 0x6, 0x0, 0x40, 0x8, 0x7, 0x10, [@generic={0xc9, 0x9, "785ca9348321344e832b52ce0a57f5bde2a160bcddd54da5a79a1006fb3a472a2f8208157af7de9e62fb93abda225f5faccada917c7c0d21977eeac5fd015e85bc4ec95d131a8865a5c4097e7691c99ff132d302039cf66ef933956492b94cb47340b5ca320a9a8a5af6b4e03d47620011ed531c940cd9bcf72d76069fdec3cc325177c375b612a0dc78b9dbd0300d51010cb9ac84280eacac1246cd222ba659e669136c288ee104747dce2ef5a56177ac5e2eda543ca5dbba5193f1fe01b61e069f4d0bc1f1af"}, @generic={0xdd, 0x10, "9cf3d5ff1b88b9012ee64878e082cbff5d8b518b704656efc6d79bff4837204928d4c0f5117ed75f992e57cbc521534a2cdbdc1f2fb1f404074c5186399203c92b2a0a6550f1e161c5ca2b4c1a8d3dba86b1e72e2fba7b9020adc2dea54a24fbd764de5ce501f73ada736ce51a1ff7df0cfcb7ae44d9140d8bbe370d4242af71238400664ef6c1af82352da696f14da1cbc87cfaca4b6a56b184bd5924123cba292ebb0fbdcf32f7d312c803d0b592368b97c45638fcce6247c481a5fd0c3e469328e3cd28132880f6372213a780eaf07018d20685899254d0b88d"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x1, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x3, 0x8000}, @generic={0x5c, 0x7, "2934e687535b0dabb531c9cccd6f63d4c7740e1bffebf0c5ef43c389a0055ab28161e0edb9c1927b45ffa84792fd7ee9c567fc232d126a60e3cbe32de529d71f253377afb1cb27c490c18a0feaa4789035745cce6b6f406a9407"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x200, 0x3, 0xb, 0x5}}, {{0x9, 0x5, 0x8f, 0x0, 0x3ff, 0x18, 0x6, 0x4, [@generic={0x6, 0x0, "15f1e356"}, @generic={0xea, 0x5, "af46a3ff6bc403e1f141e1439c8d26ba41a08938498ae2a2ecd50a227f004d044df1e97c488cb03ee1cf337853043982e3759af7b2b3757bd4fe76dc64ef0fc5eefcd5884de72e99a6574a9eb80b5758be9ce146bd07e105f21222a112d5e1f8cd207d38520e1832e03a97f1b5cbe88cea2ee1952667f021b77a5a96585c1c3180aac09331630647949dbe6f9889a2d54fc9ec69ce80beb92c00b290215419bf27914df2c3ed4cdb9a5bebce7ffc4cf8cdb4a661b3bddb771d1fe8deea95dc47ad3767298a14454358bc882f6320ad6bdaa57d671697a3f5e57e25cad1f0da5efaa388eea86dbc6a"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x5, 0xe, 0x2, [@generic={0x3b, 0x3, "e7c296ae30d3f18952718f4803473f37a2f21fc35461d791d7da15535e9cb721747931840a5e7204253672bb6c4d9f9e666f26170285b42b2c"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x200, 0x0, 0x2, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xff, 0xb}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x1, 0xb, 0xf4}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0xb, 0x0, 0xd, [@generic={0xd3, 0xd, "7c7c78d16a40cb8295093fb3ad29325cd840d7a54d976043db7d44066132fac5881fbc9e4bfe499f8b2a216719af327ca60f14e829c88c87292f6ba4a2811159d83210a7cf2ede69b70c89007b3f395a7a7240164948ddeb1a1c373ff5cb5b0f763730af62b125cd4c4f12c578e15d837b977457ba84777e19ceb3d15e8b201ef23ed7534c37caf4be7663a6401d1295bd91a5c20535377163d70eea75d8d1c2015348110701456a841af69e665718d00d89169a1bb644e7db60380c64e2268e1cec68c546160ac3def2849130487030be"}]}}, {{0x9, 0x5, 0xb, 0xf, 0x400, 0x0, 0x0, 0xe}}, {{0x9, 0x5, 0x3, 0x10, 0x40, 0x2, 0x1, 0xab, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0xd, 0xdeae}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x8, 0x4, 0x8, [@generic={0x2d, 0x22, "efd8006de59dc81fd38bc887734238a853dc2d2c8f56e9270f115742d47c90a87e093778620bac9a74c18c"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x3, 0x8, 0x0, [@generic={0x3d, 0x3, "4d3b4f454e655d42d69d93dbbb8ace356c2e0c49931eb0c06e93aa02cbcbbfa116314d1fad18508163d3cf7a075cdb39ab79bd3db11d95e163cae0"}]}}]}}]}}]}}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x33}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x20000010) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x33}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x20000010) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x8c, r7, 0x200, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x41, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @val={0x6, 0x2, 0x6}, @void, @val={0x25, 0x3, {0x1, 0x8c, 0x8}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x14, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, 'o('}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) r10 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x34324142}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x1846, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x64, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x0, 0x4}}}}}]}}]}}, 0x0) 3m15.486481265s ago: executing program 6 (id=8909): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xada, 0x1, 0x0, "b49e1b6225be4279fa07fbde4749573e7c17e6e724ae09b9424f5ab23870ecd4"}) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000302, r1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000100)) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x141340, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r5, 0x3b65, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x10, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x2c39000) 3m15.397445713s ago: executing program 6 (id=8910): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba00000000b9c50d0000b800c80000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x5e}], 0x1, 0x4d, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xb) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x9) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r4, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0xd0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r9, 0x4080aebf, &(0x7f0000003680)={{0x3, 0x0, 0xff6f, {0x4000, 0x40000000000000}}, "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", "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"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x50) write(r5, &(0x7f0000000400)="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", 0x1f000) 3m14.962323697s ago: executing program 6 (id=8914): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="b1dbfdfffffffcffff1f060000001800018014000200626f6e643000000000000000000000009706a9059aced28687ff14052177088a9bb96fed11334ed34aae7085b5f4e04101c9a749486fe684144a0a66efb6ab6aae3ad69c840fabbc42ef"], 0x2c}}, 0x4880) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'pcl711\x00', [0x104f27, 0x0, 0x4, 0x4, 0x5, 0x5, 0x4, 0x7, 0x54c6cff3, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x7f, 0x3, 0x40000003, 0x8a, 0xcaa4, 0x0, 0x20001e5b, 0x3, 0xe66, 0x3, 0x4008, 0x4086, 0x0, 0xfffffff8]}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r4 = getpgrp(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') ptrace$cont(0x18, r4, 0x42a, 0x6) r5 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setpgid(r5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x6}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8000) setpgid(0x0, r5) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r8 = inotify_init1(0x800) inotify_add_watch(r8, &(0x7f0000000140)='./file1\x00', 0x1) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x1, 0x21) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 3m14.027487363s ago: executing program 6 (id=8933): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000003040)={0x79, 0x0, 0x5}) fcntl$notify(r1, 0x402, 0x13) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r4, &(0x7f00000000c0)=0x33482a89, 0x8) r5 = socket$isdn(0x22, 0x3, 0x21) r6 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x80000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3004000071dfa00594d391797f3f398edfa57ba272e236dbe5e016c2c32dae3990342fb9a23e3f04c7b019f11d6e3e81b0fde3ad0b0eeb4ecac4a4196b265dc6c084e43eb34bbb33c9e0e9eed630e6a263", @ANYRES16=r7, @ANYBLOB="100028bd7000fddbdf250600000014001f00ff0200000000000000000000000000010600030000100000"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4000) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f0000000000)={0x200, 0xc, 0x7, 0x7}) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x1ae, 0x5, 0x1, 0x0, @sint={0x3, 0xff}}, {0x401, 0x4, 0x0, 0x0, @msi={0x69, 0x8, 0x7, 0x853}}]}) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x4048010) bind$inet6(r8, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000380)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r10, r0, 0x0, 0x7fffefff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000480)={0x0, 0xfffffffffffffff4, 0x6}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001180)={r11, "d3bcdfcd9de33b9f61c770fc0873bff3"}) 2m57.977073634s ago: executing program 45 (id=8933): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000003040)={0x79, 0x0, 0x5}) fcntl$notify(r1, 0x402, 0x13) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r4}) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) write$eventfd(r4, &(0x7f00000000c0)=0x33482a89, 0x8) r5 = socket$isdn(0x22, 0x3, 0x21) r6 = syz_open_dev$mouse(&(0x7f00000001c0), 0x0, 0x80000) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="3004000071dfa00594d391797f3f398edfa57ba272e236dbe5e016c2c32dae3990342fb9a23e3f04c7b019f11d6e3e81b0fde3ad0b0eeb4ecac4a4196b265dc6c084e43eb34bbb33c9e0e9eed630e6a263", @ANYRES16=r7, @ANYBLOB="100028bd7000fddbdf250600000014001f00ff0200000000000000000000000000010600030000100000"], 0x30}, 0x1, 0x0, 0x0, 0x84}, 0x4000) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f0000000000)={0x200, 0xc, 0x7, 0x7}) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r8, 0x29, 0x21, &(0x7f0000000880)=0xfbf, 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000140)={0x2, 0x0, [{0x1ae, 0x5, 0x1, 0x0, @sint={0x3, 0xff}}, {0x401, 0x4, 0x0, 0x0, @msi={0x69, 0x8, 0x7, 0x853}}]}) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c40)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x4048010) bind$inet6(r8, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0xfffffefffbfbbfbe, &(0x7f0000000380)={0xa, 0x4e20, 0x2, @empty, 0x6}, 0x1c) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r10, r0, 0x0, 0x7fffefff) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000480)={0x0, 0xfffffffffffffff4, 0x6}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001180)={r11, "d3bcdfcd9de33b9f61c770fc0873bff3"}) 19.918967155s ago: executing program 4 (id=10463): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000300), 0x244640, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = mq_open(&(0x7f0000000380)='&\x00w\xb4N6Bf\xa9\xc2\xd0\b\x06L\xbbQ\xd6T\xe3+SD\xa8\x0f\xefwHw\xdab\xc4\x1a\xe55@hA5\xd6\xec.)\x8f}\xc5#L\x99\"\x84;{\xfa\x04~\xf1\x17\x1d\x90\x83\xfc\x1e\xae\xb0/(\xbb\xd3\xb7\xca\x13j\xab\xfa\xc5Mq\xb7ks\xe0 \x9d\xf8\x7f\x84b\xa4h\xeekc\xffZ\x9fg\x84lm\xd7F\x97\xdcX\xe3\x87\x18\x90\x03\x12^\xf2{\xf1\xbe\x12[~\xe7\xca\xe4\x13\xd6k\xa6\xf3v5F\xc9.\xce\x87z\xd4<\xa8\xba\xd0\x9c\ff\xe1\xe2\xf9\x18\xc0\xd0\xa1\x02K\xdd0xffffffffffffffff}, 0x80) write$P9_RSTATFS(r0, &(0x7f00000000c0)={0x43, 0x9, 0x1, {0x7, 0x3ff, 0x9, 0x0, 0x8, 0x5, 0x4, 0x8001, 0x81}}, 0x43) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x0, 0x0) (async) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fsetxattr$security_ima(r4, &(0x7f0000000000), &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x9, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) (async) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x34) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async) kexec_load(0xd, 0x0, 0x0, 0x1) (async) syz_kvm_setup_cpu$x86(r7, r3, &(0x7f000045d000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000002c0)="c4c1792b8a398b0000b85f1900000f23c00f21f835000001000f23f80f20e035000020000f22e0440f20c03502000000440f22c073cf660f38817b7f0f01c864d8f7c4c1b814eac4c299a72d6d000000", 0xfffffffffffffd60}], 0x1, 0x45, &(0x7f0000000280)=[@cr0={0x0, 0x40011}, @cr0={0x0, 0x20000020}], 0x2) 18.716796143s ago: executing program 4 (id=10474): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "295c0b0a8dbc21a7", "ee7c69be27bfc86c6e3c475a28a4dc9c", "70d09ec5", "0d2c455215829726"}, 0x28) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e22, @remote}], 0x10) r2 = openat$drirender128(0xffffff9c, &(0x7f0000000080), 0x92181, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f00000003c0)={0x0, 0x0}) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file1\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 18.584855868s ago: executing program 4 (id=10476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a300000000034000480300001800a0001006d617463680000002000028005000300000000000b000100736f636b657400000800024000000003"], 0x88}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r3, &(0x7f00000006c0)=[{{&(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000380)=ANY=[@ANYBLOB="14000000000000002900000008"], 0x18}}], 0x1, 0x40000000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r4, 0x1030}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28e02f3f", @ANYRES16=r5, @ANYBLOB="00022bbd7000fedbdf250200000008006100e0ffffff0800610004"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x801) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}}, 0x28}}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x488042) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000040)=0xa36) 18.443444163s ago: executing program 4 (id=10479): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000179000/0x3000)=nil, 0x3000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x22052, r0, 0x2000) 4.170307493s ago: executing program 1 (id=10583): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e52000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/176) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) madvise(&(0x7f00002a3000/0x4000)=nil, 0x4000, 0xa) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000280)=0xa354, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregset(0x4205, r2, 0x204, &(0x7f00000000c0)={0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.073773577s ago: executing program 1 (id=10585): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fallocate(r0, 0x2, 0xfff, 0x8001) mbind(&(0x7f00008b7000/0x3000)=nil, 0x3000, 0x528e6efd45ff7d74, &(0x7f0000000000)=0x9, 0x8001, 0x1) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x8b69ad66db8b011d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r1, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.877539451s ago: executing program 1 (id=10589): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0x5) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000500)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000040)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON}) syz_usb_connect(0x2, 0x778, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8932, &(0x7f0000000000)={'dummy0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000000c0)=0xff, 0x4) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xffffffff}, 0x1c) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80ad}, 0x1c) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @broadcast}}, 0x0, 0x0, 0x1f, 0x0, "966e49d5b8a5f9bcbb98226a8aa02da2fa3bc307e45f0ac0835e9df4172024ab39323390f33b09244f06fade849a1328407c710ad5f3d8132174a1ad1a6bd5a5b361d6681b400175cd366a76294b5610"}, 0xd8) close(r3) sched_setscheduler(0x0, 0x0, &(0x7f0000000440)=0x7) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0xffffffff, 0x10}, 0xc) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) 2.367276277s ago: executing program 46 (id=10479): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000179000/0x3000)=nil, 0x3000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x22052, r0, 0x2000) 1.540593485s ago: executing program 3 (id=10607): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$P9_RVERSION(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="d0020c00"/22], 0x15) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="000086dd00000a0000008d40000064c80f590064110000000000000000000000000000000000ff0200000000000000000000810000014e244e22004d90780200000002000000010000002737f19c7d3c3653289a9104c02dbfdc70bea0431a23b0f8063fce146e39b05c869bbd9cf785d23a9cebb43d614789daf3f0cb8057706a65a051f8b0ad365751eea00bcb0bfb26a397f5a312ea0bb6b1"], 0x9a) syz_clone(0x220400, &(0x7f0000000000)="5dee41ef45acf30d3c", 0x9, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="1001cf2bcfc29eb7cf6abb5b7b592066e7558d3375bb9c5611483ca00447d06f26253f22706cdf726ed7cf89bcb6f02e971408822bd8469b07ca81cf8bd8de4635cc2b67202ea6acafdd0bd820a97fba6e5c3c1551dcf9f8be46c4f0fd6aed61918cb9f0bc5631921824ad128825acac8a8511f4b5e9e3e94aaa10826b4226d42d187ff96fa91520c80991f4c222312848252f872de0560b1fdabb3bcd0943c11bdd2aa09ff8dbc485") r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'xfrm0\x00', 0x400}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000780)={0x5, 0x7, 0x0, [{0x7ff, 0x2, 0x1, 0x7, 0x2, 0x7f, 0x4, '\x00', 0x7}, {0x7, 0x0, 0x7, 0x0, 0x1, 0x4, 0xc2, '\x00', 0x9}, {0x10000, 0x4, 0xffffffff00000001, 0x6, 0x81, 0x18, 0xf9, '\x00', 0xc9}, {0x8000000000000001, 0x7, 0x0, 0x40, 0x3, 0x80, 0x4, '\x00', 0x3}, {0x6, 0x0, 0xdc, 0x2, 0x0, 0xa8, 0x8, '\x00', 0xfffffffffffffc01}, {0x9, 0x7, 0xd499, 0x6, 0x3, 0xe, 0xd, '\x00', 0x2}, {0x7, 0x0, 0x28000, 0x2, 0x6, 0x0, 0x5, '\x00', 0x9f5a}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a0007215000008009f000d000000080026000816"], 0x40}}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010102}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x184, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x0, 0xb4}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r9) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000980)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x140, r12, 0x20, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x20, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "13199d3f5500e6dd2c7f6a7812e3bec34975ece3a6ecc965"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4bfac1c395d6ab713b8b0a704899edd93bba60609f24276a"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1eac625652dbf4c9a81ecd9ecd33512cab6f6ae52a6bfa80"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f01afea45e515a46d0ed4f0a02328d083e3d119bcaac1a06"}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5a239cc0bf84ebca7fd93f8112568f647f1a9b7a072ab614"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000090}, 0x4004000) write$tun(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236", 0xc1}], 0x1) 1.305643551s ago: executing program 3 (id=10610): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x10b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000600)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioprio_set$pid(0x1, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 1.225678699s ago: executing program 3 (id=10612): madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440), 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x4c, r6, 0x1, 0x0, 0x0, {0x4e}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x401}}]}, 0x4c}}, 0x0) listen(r4, 0x5) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(r7, &(0x7f0000000600)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0xffffff3d, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r8, 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f00000000c0)={'team0\x00', {0x2, 0x0, @local}}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000005c0)={@ptr={0x77682a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x0, 0x29}, @fda={0x66646185, 0x9, 0x1, 0xc8}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, 0xffffffffffffffff, 0xa4717000) 1.093729202s ago: executing program 5 (id=10614): creat(&(0x7f0000000080)='./file0\x00', 0xac) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1.0897317s ago: executing program 5 (id=10615): r0 = getpgid(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x82000, 0x0) unshare(0x6060600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x5}) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000000)={r2, 0x2}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @private0}, 0x1c) sendto$inet6(r4, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x7f, @local, 0xe}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0xc) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f00000000c0)={0x9, 0xee6, {r0}, {0xee01}, 0x5a9, 0xc}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000140)=0x0) ioprio_set$pid(0x3, r5, 0x2004) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) 1.035567533s ago: executing program 3 (id=10616): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0xffff8000}) socket$kcm(0x29, 0x5, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r3, 0x0, 0x4040) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x158) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbff, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfffc, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x9}, {0x0, 0x4, 0x1}, 0x0, 0x0, 0x2, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x40400}, 0x20004001) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x34, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x34}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x7, 0x400, 0x4, 0x8, 0xd379, 0x8, 0x6, {0x0, @in6={{0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8}}, 0x7fffffff, 0x81, 0x4f7, 0x6}}, &(0x7f00000000c0)=0xb0) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r7, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x42, 0x1ff) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, &(0x7f0000000100), &(0x7f0000000140), 0x0) r9 = openat$binfmt(0xffffffffffffff9c, r7, 0x2, 0x0) write(r9, &(0x7f0000000180)="01010101", 0x4) 861.608407ms ago: executing program 3 (id=10617): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket(0x2, 0x5, 0xfffffffd) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r2 = socket(0x23, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000001a005f0400f9f407000904018000000000000000000020000800020040000000", 0x24) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_GET_NESTED_STATE(r3, 0xc080aebe, &(0x7f0000001180)={{0x2, 0x0, 0x80, {0x6000, 0x8000000}}, "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", "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"}) ioctl$BLKRRPART(r0, 0x125f, 0x0) 839.755517ms ago: executing program 3 (id=10618): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x0, 0x8}, {0x6}]}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0xf) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x1ff, 0x2, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000080000004d564b000000000100000000000000"]) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'gretap0\x00', 0x0}) sendmsg$inet(r5, &(0x7f00000007c0)={&(0x7f0000000200)={0x2, 0x4e24, @private=0xa010101}, 0x10, 0x0, 0xffffffffffffffe6, &(0x7f00000018c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @private=0xa010101}}}], 0x20}, 0x20044844) mmap(&(0x7f0000437000/0x1000)=nil, 0x1000, 0x0, 0xf132, 0xffffffffffffffff, 0xffffc000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x40d00, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r8, 0xae44, 0x401) socket$netlink(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r10, r11, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000100)="410f013d191b0000b805000000b9080000000f01c166460fc77463f866ba200066ed66420f73d30966420f3840e566baa000edc4a22dcf01440fc75d150fc7985b170000", 0x44}], 0x1, 0x7b, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000240)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) rt_sigsuspend(&(0x7f00000000c0), 0x8) accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000000)=0x6e, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r13) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r13, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r14, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x880) 638.244298ms ago: executing program 1 (id=10619): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x2, 0x0) fcntl$notify(r0, 0x402, 0x4) (async) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@l2={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0x80) getsockopt$rose(r1, 0x104, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r2, 0xebe3b000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 468.404851ms ago: executing program 1 (id=10620): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) clock_gettime(0x0, &(0x7f0000002940)) (async) recvmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)=""/134, 0x86}], 0x1}, 0x81}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x20, 0x0) fadvise64(r0, 0x7, 0x1ff, 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 217.554822ms ago: executing program 1 (id=10621): syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x7a, 0x95, 0x35, 0x8, 0x16ca, 0x1502, 0x1eb5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x97, 0x0, 0x0, 0x47, 0xa0, 0x7e}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201010200000040c016e1054000010203010902240001010010c30904009b020301020609210100fe01221c0c0905810310000701012508ca9ecea9685205a5a67301096ec91729411965397380bd98e3e3388c76ae1fc5db548378d107665595bee556c7a01077757a4e0a6c30e13fb341bdb98bc502f86b7a05a7bf3af5ffe0259ca6fd8e97765898bdd1a3ae825e68ba7941a9f38eedda3e3342c3119bfdef3273af1ec58e991e9cd6d61192a228080427f453f0c91f4511d9e1d83f17a6c25f79d1358d9f8e97f587714a5e45e80a2dbff5517ca37b24dcd9495e84272b2811621397e739068ba64788b65e8ebc4f121910246c43af7c7bb2c4e8d72e806dafedc2fade97943849e04fd9"], &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="410000000000000001000603000014000300060afc042f0300f006e8ffff00000001080007003a3a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x4041e) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) read$char_usb(r3, 0x0, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r5, 0x7dfff000) 160.057636ms ago: executing program 5 (id=10622): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r1, r0, 0x0, 0x7ffff000) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x4, 0x400) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, 0x0, &(0x7f0000000140)) r4 = getpgid(0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r2, 0xc1105518, &(0x7f0000000140)={{0x0, 0x4, 0x6b4, 0x9, 'syz0\x00', 0x42bde817}, 0x4, 0x200, 0x9, r4, 0x2, 0x7, 'syz0\x00', &(0x7f0000000040)=['/dev/rnullb0\x00', '/dev/rnullb0\x00'], 0x1a}) 85.640555ms ago: executing program 5 (id=10623): ioprio_set$pid(0x1, 0x0, 0x2007) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000740)=@attr_other={0x0, 0x1, 0x2, 0x0}) mkdir(&(0x7f0000000380)='./file1\x00', 0xe) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 69.9858ms ago: executing program 5 (id=10624): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x6, &(0x7f0000ffa000/0x4000)=nil) 0s ago: executing program 5 (id=10625): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 32) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000009b80)=ANY=[@ANYBLOB="3c0000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000100003800c000080080003"], 0x3c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async, rerun: 32) futex(0x0, 0x80000000000b, 0x2, 0x0, &(0x7f0000048000)=0x1, 0x0) (async, rerun: 32) timerfd_create(0x4, 0x0) (async) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)) splice(r2, &(0x7f0000000340)=0xc, 0xffffffffffffffff, &(0x7f0000000380)=0x7, 0x9, 0x3) (async, rerun: 64) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async, rerun: 64) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000080)={r4, 0x8}, &(0x7f00000000c0)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000003640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="200200000006000802ff000000071f0500", @ANYRES32=r5], 0x20, 0x4c004}], 0x1, 0x8010) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000001c0)={r5, 0xfff, 0x30, 0x8, 0x100}, &(0x7f0000000280)=0x18) (async, rerun: 32) r6 = socket$inet6(0xa, 0x5, 0x0) (rerun: 32) setreuid(0x0, 0xee01) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) listen(r6, 0x50) (async) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r7, &(0x7f0000000140)={0xa, 0x4e60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 64) listen(r7, 0x50) (rerun: 64) kernel console output (not intermixed with test programs): [ 1960.531783][ T6275] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1960.536644][T12123] program syz.5.9657 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1960.551676][ T6275] usb 5-1: device descriptor read/8, error -71 [ 1960.669880][ T6275] usb usb5-port1: unable to enumerate USB device [ 1960.800285][T12137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1960.811519][T12137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1960.820847][T12137] /dev/rnullb0: Can't lookup blockdev [ 1960.861220][ T24] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1960.861721][ T1897] Bluetooth: hci4: command 0x0406 tx timeout [ 1960.867413][ T24] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1961.443316][T12144] /dev/rnullb0: Can't lookup blockdev [ 1961.479012][T12149] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 1961.601416][ T30] audit: type=1804 audit(100408.323:15260): pid=12158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9670" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1961.721673][ T30] audit: type=1804 audit(100408.435:15261): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.9674" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1962.031215][T12181] program syz.1.9677 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1962.115352][T12188] /dev/rnullb0: Can't lookup blockdev [ 1962.133161][ T6275] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 1962.293477][ T6275] usb 6-1: Invalid ep0 maxpacket: 32 [ 1962.432501][ T6275] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 1962.485997][ T1899] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 1962.587008][T12196] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1962.603689][ T6275] usb 6-1: Invalid ep0 maxpacket: 32 [ 1962.609199][ T6275] usb usb6-port1: attempt power cycle [ 1962.646240][ T1899] usb 2-1: Using ep0 maxpacket: 32 [ 1962.656151][ T1899] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1962.683044][ T1899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1962.707690][ T1899] usb 2-1: Product: syz [ 1962.718459][ T1899] usb 2-1: Manufacturer: syz [ 1962.731622][ T1899] usb 2-1: SerialNumber: syz [ 1962.747582][ T1899] usb 2-1: config 0 descriptor?? [ 1962.759549][ T1899] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1962.865158][T12206] /dev/rnullb0: Can't lookup blockdev [ 1962.993723][T12213] /dev/rnullb0: Can't lookup blockdev [ 1962.999827][ T6275] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 1963.044478][ T6275] usb 6-1: Invalid ep0 maxpacket: 32 [ 1963.058075][ T30] audit: type=1804 audit(100409.689:15262): pid=12215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9686" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1963.191730][ T6275] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1963.213567][ T6275] usb 6-1: Invalid ep0 maxpacket: 32 [ 1963.221297][ T6275] usb usb6-port1: unable to enumerate USB device [ 1963.255785][ T1897] Bluetooth: hci3: command 0x0c1a tx timeout [ 1963.262104][ T24] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1963.268824][ T24] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1963.328686][T12227] /dev/rnullb0: Can't lookup blockdev [ 1963.396213][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9690'. [ 1963.424889][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.433730][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.445445][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1963.454955][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1963.759488][ T6275] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1963.920555][ T6275] usb 5-1: not running at top speed; connect to a high speed hub [ 1963.930614][ T6275] usb 5-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1963.942316][ T6275] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1963.950901][ T6275] usb 5-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.40 [ 1963.959961][ T6275] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1963.968006][ T6275] usb 5-1: Product: У [ 1963.972164][ T6275] usb 5-1: Manufacturer: ␁ [ 1963.976801][ T6275] usb 5-1: SerialNumber: ᐇ [ 1963.983616][T12231] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 1964.113561][T12237] syzkaller1: entered promiscuous mode [ 1964.119127][T12237] syzkaller1: entered allmulticast mode [ 1964.126843][T12237] /dev/rnullb0: Can't lookup blockdev [ 1964.424603][T12231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1964.433625][T12231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1964.467111][T12231] wlan1 speed is unknown, defaulting to 1000 [ 1964.564206][T12231] lo speed is unknown, defaulting to 1000 [ 1964.595329][ T1899] gspca_stk1135: reg_w 0xf err -110 [ 1964.601815][ T1899] gspca_stk1135: serial bus timeout: status=0x00 [ 1964.608543][ T1899] gspca_stk1135: Sensor write failed [ 1964.618221][ T1899] gspca_stk1135: serial bus timeout: status=0x00 [ 1964.626174][ T1899] gspca_stk1135: Sensor write failed [ 1964.631582][ T1899] gspca_stk1135: serial bus timeout: status=0x00 [ 1964.642836][ T1899] gspca_stk1135: Sensor read failed [ 1964.648323][ T1899] gspca_stk1135: serial bus timeout: status=0x00 [ 1964.654835][ T1899] gspca_stk1135: Sensor read failed [ 1964.663596][ T1899] gspca_stk1135: Detected sensor type unknown (0x0) [ 1964.670578][ T1899] gspca_stk1135: serial bus timeout: status=0x00 [ 1964.677006][ T1899] gspca_stk1135: Sensor read failed [ 1964.683514][ T1899] gspca_stk1135: serial bus timeout: status=0x00 [ 1964.690114][ T1899] gspca_stk1135: Sensor read failed [ 1964.695513][ T1899] gspca_stk1135: serial bus timeout: status=0x00 [ 1964.702221][ T1899] gspca_stk1135: Sensor write failed [ 1964.707721][ T1899] gspca_stk1135: serial bus timeout: status=0x00 [ 1964.715102][ T1899] gspca_stk1135: Sensor write failed [ 1964.720776][ T1899] stk1135 2-1:0.0: probe with driver stk1135 failed with error -110 [ 1964.749086][ T6275] usbhid 5-1:1.0: can't add hid device: -71 [ 1964.762924][ T6275] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1964.777739][ T6275] usb 5-1: USB disconnect, device number 60 [ 1965.211742][ T30] audit: type=1804 audit(100411.691:15263): pid=12252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9698" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1965.382338][ T6275] usb 2-1: USB disconnect, device number 122 [ 1965.448196][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.458964][ T30] audit: type=1326 audit(100411.925:15264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12262 comm="syz.3.9701" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fa42538ebe9 code=0x0 [ 1965.459493][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.490884][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.499571][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.508610][T12261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.531796][T12261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.539824][T12267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1965.550878][T12267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1965.560541][T12261] /dev/rnullb0: Can't lookup blockdev [ 1965.574741][T12267] /dev/rnullb0: Can't lookup blockdev [ 1965.810409][ T6275] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 1965.833166][ T30] audit: type=1804 audit(100412.289:15265): pid=12275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9706" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1965.938694][ T24] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1965.953124][T12275] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1965.985893][ T6275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1965.996411][ T6275] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1966.006362][ T6275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1966.021196][ T6275] usb 2-1: config 0 descriptor?? [ 1966.034502][ T6275] pwc: Askey VC010 type 2 USB webcam detected. [ 1966.073220][T12278] /dev/rnullb0: Can't lookup blockdev [ 1966.123902][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1966.134146][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1966.143244][ T24] usb 5-1: Product: syz [ 1966.147669][ T24] usb 5-1: Manufacturer: syz [ 1966.152672][ T24] usb 5-1: SerialNumber: syz [ 1966.181252][ T24] usb 5-1: config 0 descriptor?? [ 1966.210793][ T30] audit: type=1804 audit(100412.636:15266): pid=12285 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9710" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1966.243954][ T6275] pwc: send_video_command error -71 [ 1966.252417][ T6275] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1966.260346][ T6275] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1966.280127][ T6275] usb 2-1: USB disconnect, device number 123 [ 1966.405168][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1966.511914][T12303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.638193][T12303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.707173][T12303] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1966.736465][T12306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1966.755943][T12306] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1966.901599][T12309] /dev/rnullb0: Can't lookup blockdev [ 1966.962410][ T1918] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1966.969762][ T1918] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1966.977034][ T1918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1966.986483][ T1918] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1966.994085][ T1918] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1967.002520][ T30] audit: type=1804 audit(100413.375:15267): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9717" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1967.023649][ C0] vkms_vblank_simulate: vblank timer overrun [ 1967.034863][ T1897] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1967.057820][ T1897] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1967.066094][ T1897] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1967.073899][ T1897] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1967.084216][ T1897] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1967.136426][T12312] wlan1 speed is unknown, defaulting to 1000 [ 1967.228900][T12325] overlayfs: overlapping lowerdir path [ 1967.235706][T12312] lo speed is unknown, defaulting to 1000 [ 1967.259156][T12325] vxfs: unable to read disk superblock at 1 [ 1967.280550][T12325] vxfs: unable to read disk superblock at 8 [ 1967.289931][T12325] vxfs: can't find superblock. [ 1967.353359][T12330] /dev/rnullb0: Can't lookup blockdev [ 1967.388157][T12334] /dev/rnullb0: Can't lookup blockdev [ 1967.420992][ T30] audit: type=1804 audit(100413.767:15268): pid=12337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9724" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1967.455432][ T1901] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.471465][T12336] program syz.1.9721 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1967.525878][ T1901] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.605399][ T1901] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.641805][T12343] /dev/rnullb0: Can't lookup blockdev [ 1967.711186][ T1901] netdevsim netdevsim5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1967.749142][T12348] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1967.762485][T12312] chnl_net:caif_netlink_parms(): no params data found [ 1967.846772][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.855206][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.862442][T12312] bridge_slave_0: entered allmulticast mode [ 1967.872451][T12312] bridge_slave_0: entered promiscuous mode [ 1967.908623][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 1967.920803][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1967.928321][T12312] bridge_slave_1: entered allmulticast mode [ 1967.935370][T12312] bridge_slave_1: entered promiscuous mode [ 1967.998816][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1968.017105][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1968.030371][ T1901] bridge_slave_1: left allmulticast mode [ 1968.036605][ T1901] bridge_slave_1: left promiscuous mode [ 1968.042465][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.052014][ T1901] bridge_slave_0: left allmulticast mode [ 1968.060757][ T1901] bridge_slave_0: left promiscuous mode [ 1968.067599][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1968.127044][T12359] netlink: 'syz.3.9729': attribute type 4 has an invalid length. [ 1968.136061][T12359] netlink: 17 bytes leftover after parsing attributes in process `syz.3.9729'. [ 1968.218421][ T1901] bridge0 (unregistering): left allmulticast mode [ 1968.224899][ T30] audit: type=1804 audit(100414.516:15269): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9730" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1968.250456][ T1901] smc: removing net device bridge0 with user defined pnetid SYZ0 [ 1968.286058][T12365] overlayfs: conflicting lowerdir path [ 1968.295476][T12365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1968.304948][T12365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1968.319413][ T1901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1968.345980][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1968.380202][ T1901] bond0 (unregistering): Released all slaves [ 1968.382371][T12367] /dev/rnullb0: Can't lookup blockdev [ 1968.424540][T12312] team0: Port device team_slave_0 added [ 1968.433984][T12312] team0: Port device team_slave_1 added [ 1968.453329][ T1901] tipc: Left network mode [ 1968.486182][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1968.494094][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1968.520001][ C0] vkms_vblank_simulate: vblank timer overrun [ 1968.526866][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1968.538814][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1968.545852][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1968.573341][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1968.650287][T12374] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1968.662488][T12312] hsr_slave_0: entered promiscuous mode [ 1968.672150][T12312] hsr_slave_1: entered promiscuous mode [ 1969.233389][ T1901] hsr_slave_0: left promiscuous mode [ 1969.241991][ T1918] Bluetooth: hci2: command tx timeout [ 1969.247425][ T1901] hsr_slave_1: left promiscuous mode [ 1969.258105][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1969.265788][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1969.278135][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1969.287423][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1969.307002][ T1901] veth1_macvtap: left promiscuous mode [ 1969.316806][ T1901] veth0_macvtap: left promiscuous mode [ 1969.333304][ T1901] veth1_vlan: left promiscuous mode [ 1969.343935][ T1901] veth0_vlan: left promiscuous mode [ 1969.367856][T12405] /dev/rnullb0: Can't lookup blockdev [ 1969.457382][T12412] /dev/rnullb0: Can't lookup blockdev [ 1969.527245][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1969.548482][ T24] usb 5-1: USB disconnect, device number 61 [ 1969.588926][ T30] audit: type=1804 audit(100415.798:15270): pid=12418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9744" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1969.648949][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 1969.673618][ T1901] team0 (unregistering): Port device team_slave_0 removed [ 1969.823066][ T30] audit: type=1804 audit(100416.013:15271): pid=12423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9746" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1970.027947][T12433] /dev/rnullb0: Can't lookup blockdev [ 1970.092037][T12312] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1970.156604][T12312] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1970.168666][T12445] /dev/rnullb0: Can't lookup blockdev [ 1970.177296][T12312] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1970.198140][T12312] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1970.310703][ T24] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 1970.360452][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1970.376828][T12466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1970.391222][T12466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1970.407178][T12464] netlink: 'syz.4.9756': attribute type 1 has an invalid length. [ 1970.419459][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 1970.427306][T12464] netlink: 'syz.4.9756': attribute type 101 has an invalid length. [ 1970.443711][T12464] netlink: 564 bytes leftover after parsing attributes in process `syz.4.9756'. [ 1970.443990][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 1970.459852][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1970.475521][T12469] /dev/rnullb0: Can't lookup blockdev [ 1970.499427][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 1970.506550][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1970.535899][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1970.555673][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1970.586335][ T24] usb 2-1: config 0 descriptor?? [ 1970.608313][ T24] cp210x 2-1:0.0: cp210x converter detected [ 1970.737516][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1970.909367][T14309] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1970.923678][T12312] veth0_vlan: entered promiscuous mode [ 1970.935453][T12312] veth1_vlan: entered promiscuous mode [ 1970.955344][T12312] veth0_macvtap: entered promiscuous mode [ 1970.969332][T12312] veth1_macvtap: entered promiscuous mode [ 1970.983319][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1970.998888][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1971.010734][ T4459] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.020077][ T4459] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.029820][ T4459] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.039160][ T4459] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1971.069542][T14309] usb 5-1: Using ep0 maxpacket: 32 [ 1971.081372][T14309] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1971.101570][T14309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.109577][T14309] usb 5-1: Product: syz [ 1971.127176][ T4459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1971.127673][T14309] usb 5-1: Manufacturer: syz [ 1971.146628][ T4459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1971.156509][T30390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1971.164414][T30390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1971.171937][T14309] usb 5-1: SerialNumber: syz [ 1971.179777][T14309] usb 5-1: config 0 descriptor?? [ 1971.283200][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1971.291976][ T24] cp210x 2-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1971.299899][ T24] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 1971.310224][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1971.326503][ T24] usb 2-1: USB disconnect, device number 124 [ 1971.334589][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1971.344157][ T24] cp210x 2-1:0.0: device disconnected [ 1971.465200][ T1918] Bluetooth: hci2: command tx timeout [ 1971.507962][ T1899] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1971.668164][ T1899] usb 6-1: Invalid ep0 maxpacket: 64 [ 1971.809932][ T1899] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 1971.830571][T14309] peak_usb 5-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1971.842307][T14309] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1971.849257][T14309] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1971.894146][T14309] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 1971.978501][ T1899] usb 6-1: Invalid ep0 maxpacket: 64 [ 1971.985847][ T1899] usb usb6-port1: attempt power cycle [ 1972.078656][T12481] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1972.192055][ T24] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1972.352416][ T1899] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 1972.352481][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1972.366655][ T24] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1972.374946][ T24] usb 2-1: config 0 has no interface number 0 [ 1972.381036][ T24] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1972.385263][ T1899] usb 6-1: Invalid ep0 maxpacket: 64 [ 1972.390356][ T24] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1972.402189][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1972.410497][ T24] usb 2-1: Product: syz [ 1972.414662][ T24] usb 2-1: Manufacturer: syz [ 1972.419648][ T24] usb 2-1: SerialNumber: syz [ 1972.426314][ T24] usb 2-1: config 0 descriptor?? [ 1972.432989][ T24] smsc75xx v1.0.0 [ 1972.534004][ T1899] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 1972.555820][ T1899] usb 6-1: Invalid ep0 maxpacket: 64 [ 1972.561380][ T1899] usb usb6-port1: unable to enumerate USB device [ 1972.687549][ T1900] usb 5-1: USB disconnect, device number 62 [ 1972.818057][ T30] audit: type=1804 audit(100418.819:15272): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9762" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1972.864949][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1972.876784][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1972.886460][ T24] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1972.897857][ T24] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 1973.699530][ T1918] Bluetooth: hci2: command tx timeout [ 1973.731252][ T24] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1973.775891][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1973.784462][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1973.798647][T12515] /dev/rnullb0: Can't lookup blockdev [ 1973.894486][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1973.903713][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1973.911718][ T24] usb 5-1: Product: syz [ 1973.915959][ T24] usb 5-1: Manufacturer: syz [ 1973.920574][ T24] usb 5-1: SerialNumber: syz [ 1973.926367][ T24] usb 5-1: config 0 descriptor?? [ 1974.148242][ T24] hso 5-1:0.0: Can't find BULK IN endpoint [ 1974.154562][ T24] usb-storage 5-1:0.0: USB Mass Storage device detected [ 1974.364529][T12509] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1974.373733][T12509] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1974.412953][T12523] /dev/rnullb0: Can't lookup blockdev [ 1974.440277][ T1899] usb 5-1: USB disconnect, device number 63 [ 1974.547088][T12537] netlink: 'syz.5.9772': attribute type 16 has an invalid length. [ 1974.555691][T12537] netlink: 'syz.5.9772': attribute type 2 has an invalid length. [ 1974.563518][T12537] netlink: 'syz.5.9772': attribute type 2 has an invalid length. [ 1974.568542][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9770'. [ 1974.572127][T12537] netlink: 64058 bytes leftover after parsing attributes in process `syz.5.9772'. [ 1974.596308][T12531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9770'. [ 1974.716708][T12549] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1974.754482][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9776'. [ 1974.957668][T12557] /dev/rnullb0: Can't lookup blockdev [ 1974.991401][T12560] /dev/rnullb0: Can't lookup blockdev [ 1975.002201][T12561] NILFS (nullb0): couldn't find nilfs on the device [ 1975.097877][T12567] /dev/rnullb0: Can't lookup blockdev [ 1975.147846][T12572] /dev/rnullb0: Can't lookup blockdev [ 1975.190064][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1975.199192][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1975.313464][ T1899] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1975.499358][ T1899] usb 5-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1975.511013][ T1899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1975.519498][ T1899] usb 5-1: Product: syz [ 1975.523719][ T1899] usb 5-1: Manufacturer: syz [ 1975.530826][ T1899] usb 5-1: SerialNumber: syz [ 1975.539138][ T1899] r8152-cfgselector 5-1: Unknown version 0x0000 [ 1975.545546][ T1899] r8152-cfgselector 5-1: config 0 descriptor?? [ 1975.800744][ T30] audit: type=1804 audit(100421.607:15273): pid=12577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9785" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1975.860496][T12578] ptm ptm28: ldisc open failed (-12), clearing slot 28 [ 1975.912400][ T1918] Bluetooth: hci2: command tx timeout [ 1975.993507][ T1899] r8152-cfgselector 5-1: USB disconnect, device number 64 [ 1976.113729][ T982] usb 2-1: USB disconnect, device number 125 [ 1976.200183][T12587] binder: 12586:12587 ioctl c0306201 200000000640 returned -22 [ 1976.333313][T12592] /dev/rnullb0: Can't lookup blockdev [ 1976.579139][T12604] netlink: 'syz.3.9795': attribute type 21 has an invalid length. [ 1976.589929][T12604] netlink: 164 bytes leftover after parsing attributes in process `syz.3.9795'. [ 1976.643764][T12606] /dev/rnullb0: Can't lookup blockdev [ 1976.962966][ T30] audit: type=1326 audit(100422.692:15274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.4.9800" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc79d78ebe9 code=0x0 [ 1976.984547][ C1] vkms_vblank_simulate: vblank timer overrun [ 1977.031422][T12623] comedi comedi0: s526: I/O port conflict (0x3,64) [ 1977.145283][T12626] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 1977.152457][T12626] cramfs: wrong magic [ 1977.169800][T12626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9801'. [ 1977.429766][ T2075] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1977.570093][T12633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1977.578744][T12633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1977.591734][ T2075] usb 2-1: Using ep0 maxpacket: 16 [ 1977.603472][ T2075] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1977.617220][ T2075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1977.625685][ T2075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1977.637254][ T2075] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1977.645660][ T2075] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1977.655022][ T2075] usb 2-1: config 0 has no interface number 0 [ 1977.661176][ T2075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1977.672634][ T2075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1977.683198][ T2075] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid maxpacket 65517, setting to 64 [ 1977.694583][ T2075] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1977.710659][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1977.710924][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1977.710964][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.749720][ T2075] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1977.756769][ T2075] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1977.765744][ T2075] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1977.774959][ T2075] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.783058][ T2075] usb 2-1: Product: syz [ 1977.787347][ T2075] usb 2-1: Manufacturer: syz [ 1977.792184][ T2075] usb 2-1: SerialNumber: syz [ 1977.800029][ T2075] usb 2-1: config 0 descriptor?? [ 1977.822479][ T2075] usb 2-1: selecting invalid altsetting 2 [ 1978.001132][ T30] audit: type=1804 audit(100423.656:15275): pid=12640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9805" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1978.051019][T12626] /dev/rnullb0: Can't lookup blockdev [ 1978.194201][T12649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1978.221397][T12649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1978.443423][ T30] audit: type=1804 audit(100424.077:15276): pid=12648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9808" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1978.611000][ C0] usb 2-1: async_complete: urb error -71 [ 1978.616819][ C0] usb 2-1: async_complete: urb error -71 [ 1978.622551][ C0] usb 2-1: async_complete: urb error -71 [ 1978.628274][ C0] usb 2-1: async_complete: urb error -71 [ 1978.636231][ T2075] get_1284_register: usb error -71 [ 1978.651986][ T2075] uss720 2-1:0.125: probe with driver uss720 failed with error -71 [ 1978.689923][ T2075] usb 2-1: USB disconnect, device number 126 [ 1978.709111][T12658] /dev/rnullb0: Can't lookup blockdev [ 1978.949689][ T30] audit: type=1804 audit(100424.554:15277): pid=12678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9818" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1979.086695][ T1899] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 1979.198121][ T30] audit: type=1804 audit(100424.788:15278): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9826" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1979.233611][ T30] audit: type=1804 audit(100424.816:15279): pid=12706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9828" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1979.239741][T12706] netlink: 188 bytes leftover after parsing attributes in process `syz.3.9828'. [ 1979.324729][ T1899] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 1979.339822][ T1899] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x82 is Bulk; changing to Interrupt [ 1979.358857][ T1899] usb 6-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1979.396594][ T1899] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1979.406838][ T1899] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1979.426063][ T1899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.444326][ T1899] usb 6-1: Product: А [ 1979.448674][ T1899] usb 6-1: Manufacturer: ѕ [ 1979.467637][ T1899] usb 6-1: SerialNumber: ꢘᄿ잶䯒喨Э핱 [ 1979.495981][T12667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1979.503251][T12667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1979.526107][T12667] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1979.567228][T12721] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1979.576305][T12721] /dev/rnullb0: Can't lookup blockdev [ 1979.627868][ T30] audit: type=1804 audit(100425.181:15280): pid=12727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9837" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1979.657847][T12729] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1979.671036][T12729] 9p: Bad value for 'wfdno' [ 1979.728063][T14309] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1979.784106][ T1899] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 1979.811469][ T1899] usb 6-1: USB disconnect, device number 16 [ 1979.888076][T12744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1979.896721][T14309] usb 5-1: Using ep0 maxpacket: 16 [ 1979.896826][T12746] binder: 12745:12746 ioctl c0306201 0 returned -14 [ 1979.905938][T12744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1979.920632][T14309] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1979.931330][T12747] /dev/rnullb0: Can't lookup blockdev [ 1979.939989][T12744] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1979.947076][T14309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1979.955439][T12744] /dev/rnullb0: Can't lookup blockdev [ 1979.960941][T14309] usb 5-1: Product: syz [ 1979.968370][T14309] usb 5-1: Manufacturer: syz [ 1979.973183][T14309] usb 5-1: SerialNumber: syz [ 1979.987214][T14309] usb 5-1: config 0 descriptor?? [ 1979.994484][T14309] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1980.135542][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9845'. [ 1980.156285][T12752] /dev/rnullb0: Can't lookup blockdev [ 1980.207691][T14309] gp8psk: usb in 128 operation failed. [ 1980.213837][T14309] gp8psk: usb in 137 operation failed. [ 1980.219328][T14309] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1980.229257][T14309] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1980.238569][T14309] usb 5-1: media controller created [ 1980.252067][T14309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1980.266407][T14309] gp8psk_fe: Frontend revision 1 attached [ 1980.272160][T14309] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1980.280275][T14309] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1980.309396][T14309] gp8psk: usb in 138 operation failed. [ 1980.314877][T14309] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1980.325154][T14309] gp8psk: found Genpix USB device pID = 201 (hex) [ 1980.528481][T12754] /dev/rnullb0: Can't lookup blockdev [ 1980.575317][T12756] binder: 12755:12756 ioctl c0306201 200000000300 returned -22 [ 1980.652035][ T30] audit: type=1804 audit(100426.144:15281): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.9849" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1980.921906][T12768] /dev/rnullb0: Can't lookup blockdev [ 1981.010758][ T1899] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1981.070532][ T3585] usb 5-1: USB disconnect, device number 65 [ 1981.110886][ T30] audit: type=1804 audit(100426.574:15282): pid=12779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9855" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1981.132012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1981.186789][ T1899] usb 6-1: config 0 has an invalid interface number: 227 but max is 0 [ 1981.191140][ T3585] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1981.216908][ T1899] usb 6-1: config 0 has no interface number 0 [ 1981.232973][ T1899] usb 6-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1981.254958][ T30] audit: type=1804 audit(100426.696:15283): pid=12785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9858" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1981.278913][ T1899] usb 6-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1981.291248][ T1899] usb 6-1: config 0 interface 227 has no altsetting 0 [ 1981.301060][ T1899] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 1981.312630][ T1899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.321511][ T1899] usb 6-1: Product: syz [ 1981.325747][ T1899] usb 6-1: Manufacturer: syz [ 1981.330402][ T1899] usb 6-1: SerialNumber: syz [ 1981.339598][ T1899] usb 6-1: config 0 descriptor?? [ 1981.345288][T12764] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1981.353168][T12764] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1981.362862][ T1899] usbtouchscreen 6-1:0.227: probe with driver usbtouchscreen failed with error -71 [ 1981.459007][T12790] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1981.495514][T12792] /dev/rnullb0: Can't lookup blockdev [ 1981.556016][ T982] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1981.561509][T12794] syzkaller1: entered promiscuous mode [ 1981.569253][T12794] syzkaller1: entered allmulticast mode [ 1981.580893][T12794] tipc: Started in network mode [ 1981.585795][T12794] tipc: Node identity cad082a6bed5, cluster identity 4711 [ 1981.593145][T12794] tipc: Enabled bearer , priority 0 [ 1981.602561][T12794] /dev/rnullb0: Can't lookup blockdev [ 1981.610082][T14310] usb 6-1: USB disconnect, device number 17 [ 1981.706884][T12793] tipc: Resetting bearer [ 1981.716317][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 1981.727050][ T1899] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1981.736087][ T982] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 1981.745265][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.754106][ T982] usb 2-1: Product: syz [ 1981.758305][ T982] usb 2-1: Manufacturer: syz [ 1981.763013][ T982] usb 2-1: SerialNumber: syz [ 1981.772576][ T982] usb 2-1: config 0 descriptor?? [ 1981.781174][ T982] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 1981.789653][ T982] dvb-usb: bulk message failed: -22 (2/0) [ 1981.798388][ T982] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1981.809031][ T982] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 1981.818758][ T982] usb 2-1: media controller created [ 1981.836843][T12793] tipc: Disabling bearer [ 1981.839475][ T982] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1981.901230][ T1899] usb 5-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 1981.910327][ T1899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.918848][ T1899] usb 5-1: Product: syz [ 1981.923540][ T1899] usb 5-1: Manufacturer: syz [ 1981.928173][ T1899] usb 5-1: SerialNumber: syz [ 1981.937778][ T1899] usb 5-1: config 0 descriptor?? [ 1981.949346][ T1899] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 1982.003105][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9859'. [ 1982.026639][ T982] dvb-usb: bulk message failed: -22 (1/0) [ 1982.065616][ T982] DVB: Unable to find symbol mt352_attach() [ 1982.072215][ T982] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 1982.133136][ T982] rc_core: IR keymap rc-dvico-portable not found [ 1982.139526][ T982] Registered IR keymap rc-empty [ 1982.148312][ T982] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1982.160679][ T982] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input115 [ 1982.173346][ T982] dvb-usb: schedule remote query interval to 100 msecs. [ 1982.180821][ T982] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 1982.226785][ T30] audit: type=1804 audit(100427.613:15284): pid=12807 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.9866" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1982.233798][T12807] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1982.260212][T14310] usb 2-1: USB disconnect, device number 127 [ 1982.354930][T14310] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 1982.401194][ T1899] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 1982.420192][ T1899] sq905c 5-1:0.0: Reading version command failed [ 1982.427582][ T1899] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 1982.445125][ T1899] usb 5-1: USB disconnect, device number 66 [ 1982.724954][T12822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1982.734955][T12822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1982.832979][T12826] SQUASHFS error: Failed to read block 0x0: -5 [ 1982.840217][T12826] unable to read squashfs_super_block [ 1982.874627][T12828] binder_alloc: 12827: binder_alloc_buf, no vma [ 1982.881188][T12828] binder: 12827:12828 ioctl c0306201 200000000240 returned -11 [ 1982.964221][T12822] /dev/rnullb0: Can't lookup blockdev [ 1983.063250][ T3585] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 1983.113388][ T30] audit: type=1804 audit(100428.445:15285): pid=12837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9878" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1983.139632][ T982] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1983.224999][ T3585] usb 6-1: not running at top speed; connect to a high speed hub [ 1983.233653][ T3585] usb 6-1: config 129 has an invalid interface number: 58 but max is 1 [ 1983.243888][ T3585] usb 6-1: config 129 has no interface number 1 [ 1983.250250][ T3585] usb 6-1: config 129 interface 0 has no altsetting 0 [ 1983.257272][ T3585] usb 6-1: config 129 interface 58 has no altsetting 0 [ 1983.266029][ T3585] usb 6-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=f4.af [ 1983.275148][ T3585] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.283277][ T3585] usb 6-1: Product: syz [ 1983.287648][ T3585] usb 6-1: Manufacturer: syz [ 1983.292255][ T3585] usb 6-1: SerialNumber: syz [ 1983.298267][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 1983.305198][ T982] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1983.314059][ T982] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 24 [ 1983.319787][ T30] audit: type=1326 audit(100428.642:15286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.4.9880" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc79d78ebe9 code=0x0 [ 1983.323981][ T982] usb 2-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1983.358774][ T982] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1983.367262][ T982] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1983.374872][T12846] netdevsim netdevsim4: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 1983.379336][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1983.394503][ T30] audit: type=1326 audit(100428.707:15287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12843 comm="syz.4.9880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc79d78ebe9 code=0x7fc00000 [ 1983.396037][ T982] usb 2-1: Product: syz [ 1983.422309][ T982] usb 2-1: Manufacturer: syz [ 1983.427536][ T982] usb 2-1: SerialNumber: syz [ 1983.452739][T12828] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1983.464971][T12828] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 1983.703286][T12828] TCP: TCP_TX_DELAY enabled [ 1983.742453][ T982] usb 2-1: bad CDC descriptors [ 1983.768503][ T982] usb 2-1: USB disconnect, device number 2 [ 1983.855185][ T3585] gspca_main: sunplus-2.14.0 probing 08ca:2022 [ 1983.862687][ T3585] gspca_sunplus: reg_r err -71 [ 1983.869598][ T3585] sunplus 6-1:129.0: probe with driver sunplus failed with error -71 [ 1983.883520][ T3585] usb 6-1: USB disconnect, device number 18 [ 1983.938712][T12856] /dev/rnullb0: Can't lookup blockdev [ 1983.950949][T12856] /dev/rnullb0: Can't lookup blockdev [ 1983.956689][T12856] /dev/rnullb0: Can't lookup blockdev [ 1983.966495][T12856] /dev/rnullb0: Can't lookup blockdev [ 1983.972981][T12856] /dev/rnullb0: Can't lookup blockdev [ 1983.978825][T12856] /dev/rnullb0: Can't lookup blockdev [ 1983.986842][T12856] /dev/rnullb0: Can't lookup blockdev [ 1983.992713][T12856] /dev/rnullb0: Can't lookup blockdev [ 1983.999256][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.006946][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.012705][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.020714][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.028847][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.034674][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.040979][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.046989][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.052734][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.066398][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.072802][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.081769][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.087461][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.093279][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.098917][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.106631][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.113097][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.118870][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.127357][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.133817][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.140156][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.147915][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.153665][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.159427][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.167015][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.172819][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.183983][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.192338][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.198683][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.204339][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.212417][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.218094][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.223874][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.231955][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.237772][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.243464][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.252492][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.258167][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.263944][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.269592][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.277817][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.283634][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.290037][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.304094][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.309740][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.317653][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.323335][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.329566][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.339754][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.350565][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.367282][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.388900][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.396695][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.404917][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.415924][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.425595][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.434749][T12856] /dev/rnullb0: Can't lookup blockdev [ 1984.441722][T12861] misc userio: The device must be registered before sending interrupts [ 1984.479153][T12863] /dev/rnullb0: Can't lookup blockdev [ 1984.520671][T12864] afs: Unknown parameter 'dynio.bfq.io_service_bytes_recursive' [ 1984.528671][T12863] afs: Unknown parameter 'dynio.bfq.io_service_bytes_recursive' [ 1984.628962][T12871] program syz.5.9889 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1984.652768][T12873] /dev/rnullb0: Can't lookup blockdev [ 1984.737295][ T30] audit: type=1804 audit(100429.961:15288): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9891" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1984.778834][T12878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1984.797875][T12878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1985.339958][ T3585] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1985.512582][ T3585] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1985.542564][ T3585] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1985.564060][ T3585] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1985.580172][ T3585] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1985.596490][ T3585] usb 6-1: Manufacturer: syz [ 1985.608711][ T3585] usb 6-1: config 0 descriptor?? [ 1985.714064][ T3585] rc_core: IR keymap rc-hauppauge not found [ 1985.719990][ T3585] Registered IR keymap rc-empty [ 1985.736117][ T3585] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1985.759024][ T3585] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input116 [ 1985.811080][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9896'. [ 1986.057661][ C1] igorplugusb 6-1:0.0: receive overflow invalid: 36 [ 1986.279403][T12884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.299473][T12884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.321014][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1986.341836][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1986.392270][T14310] usb 6-1: USB disconnect, device number 19 [ 1986.554744][T12903] binder: 12901:12903 ioctl ae01 3 returned -22 [ 1986.722598][ T30] audit: type=1804 audit(100431.823:15289): pid=12907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9899" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1986.743755][ C0] vkms_vblank_simulate: vblank timer overrun [ 1986.858009][T14310] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1987.040216][T14310] usb 6-1: Using ep0 maxpacket: 16 [ 1987.062748][T14310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1987.082575][T14310] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1987.114488][T14310] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1987.123574][T14310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1987.154660][T14310] usb 6-1: config 0 descriptor?? [ 1987.911452][T14310] usb 6-1: string descriptor 0 read error: -71 [ 1987.923579][T12902] /dev/rnullb0: Can't lookup blockdev [ 1987.956489][T14310] usb 6-1: Max retries (5) exceeded reading string descriptor 200 [ 1987.972215][T14310] letsketch 0003:6161:4D15.004E: probe with driver letsketch failed with error -32 [ 1987.999218][T12920] /dev/rnullb0: Can't lookup blockdev [ 1988.007884][T14310] usb 6-1: USB disconnect, device number 20 [ 1988.095600][ T30] audit: type=1326 audit(100433.104:15290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12921 comm="syz.3.9906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa42538ebe9 code=0x0 [ 1988.236842][ T1900] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1988.331702][T12925] /dev/rnullb0: Can't lookup blockdev [ 1988.409647][ T1900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.421702][ T1900] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1988.432962][ T1900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.450573][ T1900] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1988.462751][ T1900] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1988.476491][ T1900] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1988.489424][ T1900] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1988.500954][ T1900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1988.510051][ T1900] usb 2-1: SerialNumber: syz [ 1988.541001][ T30] audit: type=1804 audit(100433.525:15291): pid=12935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9909" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1988.588815][T12938] bridge0: entered allmulticast mode [ 1988.667354][ T30] audit: type=1804 audit(100433.647:15292): pid=12942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.9912" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1988.829115][T12919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1988.838809][T12919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1988.898533][ T1899] usb 2-1: USB disconnect, device number 3 [ 1988.985256][T14310] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1989.088257][T12959] dlm: no locking on control device [ 1989.123639][T12965] /dev/rnullb0: Can't lookup blockdev [ 1989.168073][T14310] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 1989.187044][T14310] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1989.198422][T14310] usb 5-1: config 0 has no interface number 0 [ 1989.208470][T14310] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 1989.221994][T14310] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1989.233465][T14310] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1989.247736][T14310] usb 5-1: config 0 interface 52 has no altsetting 0 [ 1989.256259][T12974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1989.260151][T14310] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 1989.265242][T12974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1989.277652][T14310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 1989.290701][T14310] usb 5-1: SerialNumber: syz [ 1989.297524][T14310] usb 5-1: config 0 descriptor?? [ 1989.348683][ T1899] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1989.353368][T12975] binder: BINDER_SET_CONTEXT_MGR already set [ 1989.362228][T12975] binder: 12943:12975 ioctl 40046207 0 returned -16 [ 1989.508850][ T1899] usb 2-1: Using ep0 maxpacket: 32 [ 1989.515859][ T1899] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1989.524489][ T1899] usb 2-1: config 0 has no interface number 0 [ 1989.532549][ T1899] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1989.541695][ T1899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1989.549713][ T1899] usb 2-1: Product: syz [ 1989.554327][ T1899] usb 2-1: Manufacturer: syz [ 1989.558956][ T1899] usb 2-1: SerialNumber: syz [ 1989.565737][ T1899] usb 2-1: config 0 descriptor?? [ 1989.573177][ T1899] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1989.791465][ T1899] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1989.807881][ T30] audit: type=1804 audit(100434.704:15293): pid=12981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.9924" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1989.829650][ T1899] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1989.971680][T12989] comedi comedi3: pcmmio: I/O port conflict (0x4f27,32) [ 1990.011580][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 1990.133825][T12991] /dev/rnullb0: Can't lookup blockdev [ 1990.141989][T12991] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9929'. [ 1990.152732][T12991] netlink: 'syz.5.9929': attribute type 12 has an invalid length. [ 1990.170004][T12991] mkiss: ax0: crc mode is auto. [ 1990.226873][T12963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1990.236261][T12963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1990.248761][T12963] /dev/rnullb0: Can't lookup blockdev [ 1990.254775][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1990.263510][ T1899] usb 2-1: USB disconnect, device number 4 [ 1990.274278][ T1899] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1990.289866][ T1899] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1990.303306][ T1899] quatech2 2-1:0.51: device disconnected [ 1990.386476][T13001] netlink: 'syz.5.9932': attribute type 11 has an invalid length. [ 1990.431498][T13003] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 1990.695396][ T1900] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 1990.839178][T13005] /dev/rnullb0: Can't lookup blockdev [ 1990.859712][ T1900] usb 6-1: config 150 has an invalid interface number: 204 but max is 2 [ 1990.868813][ T1900] usb 6-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 1990.878509][ T1900] usb 6-1: config 150 has no interface number 0 [ 1990.885182][ T1900] usb 6-1: config 150 interface 204 has no altsetting 0 [ 1990.894873][ T1900] usb 6-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1990.907759][ T1900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1990.908751][ T30] audit: type=1804 audit(100435.742:15294): pid=13007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9935" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1990.916313][ T1900] usb 6-1: Product: syz [ 1990.945447][ T1900] usb 6-1: Manufacturer: syz [ 1990.950137][ T1900] usb 6-1: SerialNumber: syz [ 1991.173608][ T1900] xr_serial 6-1:150.204: skipping garbage [ 1991.179859][ T1900] xr_serial 6-1:150.204: xr_serial converter detected [ 1991.219304][ T1899] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1991.401139][ T1899] usb 2-1: Using ep0 maxpacket: 32 [ 1991.413269][ T1899] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 1991.421500][ T1899] usb 2-1: config 0 has no interface number 0 [ 1991.427916][ T1899] usb 2-1: config 0 interface 184 has no altsetting 0 [ 1991.445677][ T1899] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1991.454890][ T1899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1991.462926][ T1899] usb 2-1: Product: syz [ 1991.467382][ T1899] usb 2-1: Manufacturer: syz [ 1991.472843][ T1899] usb 2-1: SerialNumber: syz [ 1991.482713][ T1899] usb 2-1: config 0 descriptor?? [ 1991.500745][ T1899] smsc75xx v1.0.0 [ 1991.822896][T13003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1991.833480][T13003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1991.845408][ T1900] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 1991.852065][ T1900] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 1991.881389][ T1900] usb 6-1: USB disconnect, device number 21 [ 1991.889393][ T1900] xr_serial 6-1:150.204: device disconnected [ 1991.957709][T14310] usb 5-1: can't set config #0, error -71 [ 1991.994540][T14310] usb 5-1: USB disconnect, device number 67 [ 1992.148653][ T1899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1992.170500][ T1899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1992.531537][T13016] /dev/rnullb0: Can't lookup blockdev [ 1992.600609][T14310] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1992.770642][T14310] usb 5-1: config 0 has no interfaces? [ 1992.776180][T14310] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1992.788651][T14310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.799848][T14310] usb 5-1: config 0 descriptor?? [ 1992.844506][ T3585] usb 6-1: new full-speed USB device number 22 using dummy_hcd [ 1993.028339][ T3585] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 1993.029458][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1993.047041][ T3585] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1993.052584][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.068825][ T3585] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1993.084103][ T3585] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1993.092196][T13014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1993.108819][T13014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1993.116682][ T3585] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1993.120526][T14310] usb 5-1: USB disconnect, device number 68 [ 1993.145656][ T3585] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1993.158015][ T3585] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1993.167151][ T3585] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1993.177860][ T3585] usb 6-1: Product: syz [ 1993.182052][ T3585] usb 6-1: Manufacturer: syz [ 1993.187996][ T3585] usb 6-1: SerialNumber: syz [ 1993.194201][ T3585] usb 6-1: config 0 descriptor?? [ 1993.204432][T13018] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1993.217482][ T3585] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1993.232522][ T3585] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1993.436777][ T3585] usb 6-1: USB disconnect, device number 22 [ 1993.447999][ T3585] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 1993.613702][T14310] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 1993.779049][T14310] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1993.787667][T14310] usb 5-1: config 0 has no interface number 0 [ 1993.793793][T14310] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1993.809400][T14310] usb 5-1: config 0 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1993.824816][T14310] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1993.831663][T14310] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1993.844024][T14310] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1993.854500][T14310] usb 5-1: config 0 descriptor?? [ 1993.959336][ T1899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71 [ 1993.973024][ T1899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71 [ 1993.983508][ T1899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address [ 1993.994143][ T1899] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1994.004500][ T1899] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 1994.032490][ T1899] usb 2-1: USB disconnect, device number 5 [ 1994.087346][T13026] /dev/rnullb0: Can't lookup blockdev [ 1994.098122][ T30] audit: type=1326 audit(100438.727:15295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13010 comm="syz.4.9937" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc79d78ebe9 code=0x0 [ 1994.138149][T13030] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1994.155113][T13030] kvm: apic: phys broadcast and lowest prio [ 1994.399205][ T30] audit: type=1804 audit(100439.007:15296): pid=13040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.9944" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1994.730487][ T30] audit: type=1804 audit(100439.316:15297): pid=13049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9947" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1994.930120][T13060] netlink: 192 bytes leftover after parsing attributes in process `syz.1.9951'. [ 1995.277688][T13076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9956'. [ 1995.426859][ T3585] usb 5-1: USB disconnect, device number 69 [ 1995.524762][T13084] /dev/rnullb0: Can't lookup blockdev [ 1995.983454][T13102] /dev/rnullb0: Can't lookup blockdev [ 1996.550401][T13121] netlink: 116 bytes leftover after parsing attributes in process `syz.1.9970'. [ 1996.563592][T13121] /dev/rnullb0: Can't lookup blockdev [ 1996.751744][T13139] /dev/rnullb0: Can't lookup blockdev [ 1996.851725][T13144] /dev/rnullb0: Can't lookup blockdev [ 1996.890653][T13152] QAT: Invalid ioctl 1075883590 [ 1996.896356][T13152] QAT: Invalid ioctl 1075883590 [ 1996.901288][T13152] QAT: Invalid ioctl 1075883590 [ 1996.912594][T13152] QAT: Invalid ioctl 1075883590 [ 1996.917926][T13152] QAT: Invalid ioctl 1075883590 [ 1996.922905][T13152] QAT: Invalid ioctl 1075883590 [ 1996.928230][T13152] QAT: Invalid ioctl 1075883590 [ 1996.933915][T13155] input: syz0 as /devices/virtual/input/input117 [ 1996.935505][T13152] QAT: Invalid ioctl 1075883590 [ 1996.945727][T13152] QAT: Invalid ioctl 1075883590 [ 1996.950910][T13152] QAT: Invalid ioctl 1075883590 [ 1997.003654][ T1900] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 1997.172264][ T1900] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1997.191720][ T1900] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1997.202433][ T1900] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1997.213848][ T1900] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1997.226310][ T1900] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1997.241837][ T1900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1997.257030][ T1900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1997.275322][ T1900] usb 6-1: SerialNumber: syz [ 1997.303356][T13136] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1997.311854][ T1900] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 1997.322598][ T1900] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 1997.440348][T13168] netlink: 'syz.4.9984': attribute type 21 has an invalid length. [ 1997.454638][T13168] netlink: 156 bytes leftover after parsing attributes in process `syz.4.9984'. [ 1997.465163][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9984'. [ 1997.630507][T13180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1997.639442][T13174] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1997.665939][ T1899] usb 6-1: USB disconnect, device number 23 [ 1997.695370][T13184] netlink: 40 bytes leftover after parsing attributes in process `syz.5.9987'. [ 1997.706899][T13183] /dev/rnullb0: Can't lookup blockdev [ 1997.768941][T13188] block nbd5: Attempted send on invalid socket [ 1997.775903][T13188] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1997.785237][T13188] block nbd5: Attempted send on invalid socket [ 1997.791492][T13188] I/O error, dev nbd5, sector 120 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1997.800785][T13188] Mount JFS Failure: -5 [ 1997.804992][T13188] jfs_mount failed w/return code = -5 [ 1997.846687][ T3585] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1998.018477][ T3585] usb 5-1: Using ep0 maxpacket: 16 [ 1998.029367][ T3585] usb 5-1: config 1 interface 0 altsetting 3 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1998.058543][ T3585] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1998.306303][ T1899] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1998.488574][ T1899] usb 6-1: config index 0 descriptor too short (expected 2843, got 27) [ 1998.496890][ T1899] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 1998.507291][ T1899] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 9 [ 1998.516613][ T1899] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice= 0.00 [ 1998.525877][ T1899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.547541][ T1899] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1998.759019][T13198] /dev/rnullb0: Can't lookup blockdev [ 1998.767902][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1998.779523][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1998.803192][ T1899] gspca_sn9c2028: read1 error -71 [ 1998.818319][ T1899] gspca_sn9c2028: read1 error -71 [ 1998.830722][ T1899] gspca_sn9c2028: read1 error -71 [ 1998.840832][ T1899] sn9c2028 6-1:17.0: probe with driver sn9c2028 failed with error -71 [ 1998.871107][ T1899] usb 6-1: USB disconnect, device number 24 [ 1999.044029][ T30] audit: type=1804 audit(100443.348:15298): pid=13210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.9996" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 1999.143559][T13214] /dev/sg0: Can't lookup blockdev [ 1999.291657][T13220] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10000'. [ 1999.316550][T13220] /dev/rnullb0: Can't lookup blockdev [ 1999.358245][T13223] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1999.476408][T13231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10004'. [ 1999.491913][T13232] /dev/rnullb0: Can't lookup blockdev [ 1999.518833][T13234] /dev/rnullb0: Can't lookup blockdev [ 1999.905725][ T30] audit: type=1804 audit(100444.153:15299): pid=13250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10011" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2000.061972][T13261] /dev/rnullb0: Can't lookup blockdev [ 2000.293020][T13272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10016'. [ 2000.314925][T13272] netlink: 'syz.3.10016': attribute type 11 has an invalid length. [ 2000.783840][ T3585] usb 5-1: string descriptor 0 read error: -71 [ 2000.807833][ T3585] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a0c, bcdDevice= 0.40 [ 2000.816997][ T3585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2000.858035][ T3585] usb 5-1: can't set config #1, error -71 [ 2000.861380][T13275] /dev/rnullb0: Can't lookup blockdev [ 2000.873512][ T3585] usb 5-1: USB disconnect, device number 70 [ 2001.037634][T13279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2001.058981][T13279] /dev/rnullb0: Can't lookup blockdev [ 2001.269861][ T3585] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 2001.454181][ T3585] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 2001.472333][ T3585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.494963][ T982] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 2001.502684][ T3585] usb 5-1: Product: syz [ 2001.506864][ T3585] usb 5-1: Manufacturer: syz [ 2001.508606][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804b456c00: rx timeout, send abort [ 2001.511464][ T3585] usb 5-1: SerialNumber: syz [ 2001.524542][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88804b456c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 2001.568537][T13304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2001.588599][T13304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2001.620414][T13304] /dev/rnullb0: Can't lookup blockdev [ 2001.666009][ T982] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 2001.697175][ T982] usb 6-1: New USB device found, idVendor=0bda, idProduct=0129, bcdDevice=b5.6d [ 2001.716232][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2001.733313][ T982] usb 6-1: Product: syz [ 2001.742534][ T982] usb 6-1: Manufacturer: syz [ 2001.747196][ T982] usb 6-1: SerialNumber: syz [ 2001.774233][ T982] usb 6-1: config 0 descriptor?? [ 2001.920212][ T982] rtsx_usb 6-1:0.0: probe with driver rtsx_usb failed with error -22 [ 2002.010676][T13290] /dev/rnullb0: Can't lookup blockdev [ 2002.019618][ T982] usb 6-1: USB disconnect, device number 25 [ 2002.204713][T13306] netlink: 'syz.3.10029': attribute type 11 has an invalid length. [ 2002.260863][T13312] /dev/rnullb0: Can't lookup blockdev [ 2002.315513][T13313] netlink: 'syz.1.10030': attribute type 10 has an invalid length. [ 2002.330661][T13313] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 2002.818802][T13330] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10035'. [ 2002.844098][T13330] sctp: [Deprecated]: syz.5.10035 (pid 13330) Use of int in maxseg socket option. [ 2002.844098][T13330] Use struct sctp_assoc_value instead [ 2002.900356][T13336] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10035'. [ 2002.923707][T13326] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.10035'. [ 2002.937079][T13330] /dev/rnullb0: Can't lookup blockdev [ 2003.028319][T13338] /dev/rnullb0: Can't lookup blockdev [ 2003.046186][ T3585] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 2003.373195][T14310] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2003.555451][T14310] usb 6-1: Using ep0 maxpacket: 8 [ 2003.575699][T14310] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2003.609947][T14310] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 2003.629785][T14310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2003.650203][T14310] usb 6-1: config 0 descriptor?? [ 2003.663766][T14310] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 2003.815124][T13347] netlink: 'syz.3.10042': attribute type 6 has an invalid length. [ 2003.835298][T13347] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10042'. [ 2003.974683][ T3585] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 2003.994460][ T3585] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 2004.017351][ T3585] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 2004.039216][ T3585] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 2004.072859][ T3585] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 2004.090444][T13354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.106098][ T3585] usb 5-1: USB disconnect, device number 71 [ 2004.115579][T13340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2004.124357][T13354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.143619][T13340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2004.377980][T14310] gspca_vc032x: reg_r err -32 [ 2004.382760][T14310] vc032x 6-1:0.0: probe with driver vc032x failed with error -32 [ 2004.596317][T13357] /dev/rnullb0: Can't lookup blockdev [ 2004.844945][ T30] audit: type=1804 audit(100448.774:15300): pid=13362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10047" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2004.910653][T13367] /dev/rnullb0: Can't lookup blockdev [ 2005.136892][ T3585] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 2005.278353][T13374] netlink: 72 bytes leftover after parsing attributes in process `syz.3.10050'. [ 2005.343726][ T3585] usb 5-1: Using ep0 maxpacket: 16 [ 2005.352401][ T3585] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 2005.360591][ T3585] usb 5-1: config 0 has no interface number 0 [ 2005.375702][ T3585] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 2005.400696][ T3585] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 2005.412733][ T3585] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2005.424391][T10559] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2005.437505][ T3585] usb 5-1: Product: syz [ 2005.441691][ T3585] usb 5-1: Manufacturer: syz [ 2005.446296][ T3585] usb 5-1: SerialNumber: syz [ 2005.452994][ T3585] usb 5-1: config 0 descriptor?? [ 2005.461571][T10559] CPU: 0 UID: 0 PID: 10559 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 2005.461595][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2005.461607][T10559] Call Trace: [ 2005.461614][T10559] [ 2005.461621][T10559] dump_stack_lvl+0x189/0x250 [ 2005.461655][T10559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2005.461683][T10559] ? __pfx__printk+0x10/0x10 [ 2005.461712][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.461735][T10559] dump_header+0xd3/0x480 [ 2005.461753][T10559] oom_kill_process+0x387/0x920 [ 2005.461777][T10559] out_of_memory+0xf09/0x12a0 [ 2005.461800][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.461821][T10559] ? __pfx_out_of_memory+0x10/0x10 [ 2005.461839][T10559] ? percpu_ref_put+0x19/0x180 [ 2005.461856][T10559] ? lock_release+0x4b/0x3e0 [ 2005.461876][T10559] mem_cgroup_out_of_memory+0x145/0x240 [ 2005.461897][T10559] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2005.461923][T10559] ? _raw_spin_unlock+0x28/0x50 [ 2005.461945][T10559] ? memcg1_oom_prepare+0x37f/0x450 [ 2005.461971][T10559] try_charge_memcg+0xdff/0x1290 [ 2005.461998][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.462030][T10559] ? __pfx_try_charge_memcg+0x10/0x10 [ 2005.462057][T10559] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 2005.462078][T10559] ? xa_load+0x60/0x210 [ 2005.462103][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.462125][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.462145][T10559] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 2005.462175][T10559] charge_memcg+0x9f/0x180 [ 2005.462201][T10559] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 2005.462229][T10559] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 2005.462258][T10559] __read_swap_cache_async+0x28c/0x510 [ 2005.462286][T10559] swap_cluster_readahead+0x305/0x5f0 [ 2005.462310][T10559] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2005.462341][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.462361][T10559] ? filemap_get_entry+0xad/0x2f0 [ 2005.462383][T10559] ? get_vma_policy+0x27c/0x3c0 [ 2005.462431][T10559] swapin_readahead+0x17d/0xb50 [ 2005.462455][T10559] ? __pfx_filemap_get_entry+0x10/0x10 [ 2005.462481][T10559] ? get_swap_device_info+0x1c/0x2b0 [ 2005.462505][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.462528][T10559] ? __pfx_swapin_readahead+0x10/0x10 [ 2005.462555][T10559] ? __filemap_get_folio+0x9a6/0xaf0 [ 2005.462582][T10559] ? swap_cache_get_folio+0xae/0x3b0 [ 2005.462609][T10559] do_swap_page+0x525/0x5ac0 [ 2005.462642][T10559] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2005.462674][T10559] ? ___pte_offset_map+0x29/0x250 [ 2005.462705][T10559] ? lock_acquire+0x5f/0x360 [ 2005.462723][T10559] ? do_swap_page+0x184/0x5ac0 [ 2005.462749][T10559] ? __pfx_do_swap_page+0x10/0x10 [ 2005.462777][T10559] ? __pfx_default_wake_function+0x10/0x10 [ 2005.462797][T10559] ? ___pte_offset_map+0x45/0x250 [ 2005.462825][T10559] ? ___pte_offset_map+0x1cf/0x250 [ 2005.462855][T10559] ? pte_offset_map_rw_nolock+0xea/0x160 [ 2005.462886][T10559] __handle_mm_fault+0xe55/0x5400 [ 2005.462924][T10559] ? __pfx___handle_mm_fault+0x10/0x10 [ 2005.462954][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.462982][T10559] ? lock_vma_under_rcu+0x3cb/0x450 [ 2005.463013][T10559] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2005.463036][T10559] handle_mm_fault+0x40a/0x8e0 [ 2005.463068][T10559] do_user_addr_fault+0xa81/0x1390 [ 2005.463092][T10559] ? rcu_is_watching+0x15/0xb0 [ 2005.463112][T10559] ? trace_page_fault_user+0x84/0x1e0 [ 2005.463130][T10559] exc_page_fault+0x82/0x100 [ 2005.463152][T10559] asm_exc_page_fault+0x26/0x30 [ 2005.463168][T10559] RIP: 0033:0x7f138e5c14a8 [ 2005.463183][T10559] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 2005.463198][T10559] RSP: 002b:00007ffd80444730 EFLAGS: 00010293 [ 2005.463213][T10559] RAX: 0000000000000000 RBX: 000000000000020f RCX: 00007f138e5c14a5 [ 2005.463225][T10559] RDX: 00007ffd80444770 RSI: 0000000000000000 RDI: 0000000000000000 [ 2005.463235][T10559] RBP: 00007ffd804447dc R08: 0000000000000000 R09: 0000000000000000 [ 2005.463246][T10559] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 2005.463256][T10559] R13: 00000000000927c0 R14: 00000000001cc92d R15: 00007ffd80444830 [ 2005.463275][T10559] [ 2005.464488][T10559] memory: usage 307188kB, limit 307200kB, failcnt 49210 [ 2005.883790][T10559] memory+swap: usage 307292kB, limit 9007199254740988kB, failcnt 0 [ 2005.894853][T10559] kmem: usage 3872kB, limit 9007199254740988kB, failcnt 0 [ 2005.905143][T10559] Memory cgroup stats for /syz1: [ 2005.905253][T10559] cache 310550528 [ 2005.914333][T10559] rss 0 [ 2005.917323][T10559] rss_huge 0 [ 2005.920817][T10559] shmem 310550528 [ 2005.924468][T10559] mapped_file 0 [ 2005.924478][T10559] dirty 0 [ 2005.924486][T10559] writeback 0 [ 2005.934668][T10559] workingset_refault_anon 10920 [ 2005.940211][T10559] workingset_refault_file 5526 [ 2005.945058][T10559] swap 94208 [ 2005.948381][T10559] swapcached 57344 [ 2005.952219][T10559] pgpgin 1331331 [ 2005.955833][T10559] pgpgout 1273518 [ 2005.959537][T10559] pgfault 640775 [ 2005.963151][T10559] pgmajfault 37996 [ 2005.966880][T10559] inactive_anon 57344 [ 2005.970915][T10559] active_anon 0 [ 2005.974383][T10559] inactive_file 0 [ 2005.978009][T10559] active_file 0 [ 2005.981532][T10559] unevictable 310550528 [ 2005.985701][T10559] hierarchical_memory_limit 314572800 [ 2005.991071][T10559] hierarchical_memsw_limit 9223372036854771712 [ 2005.997358][T10559] total_cache 310550528 [ 2006.001519][T10559] total_rss 0 [ 2006.009089][T10559] total_rss_huge 0 [ 2006.012835][T10559] total_shmem 310550528 [ 2006.017190][T10559] total_mapped_file 0 [ 2006.021184][T10559] total_dirty 0 [ 2006.024745][T10559] total_writeback 0 [ 2006.028649][T10559] total_workingset_refault_anon 10920 [ 2006.034363][T10559] total_workingset_refault_file 5526 [ 2006.040060][T10559] total_swap 94208 [ 2006.044011][T10559] total_swapcached 57344 [ 2006.049580][T10559] total_pgpgin 1331331 [ 2006.053670][T10559] total_pgpgout 1273518 [ 2006.059807][T10559] total_pgfault 640775 [ 2006.063885][T10559] total_pgmajfault 37996 [ 2006.068580][T10559] total_inactive_anon 57344 [ 2006.073094][T10559] total_active_anon 0 [ 2006.077093][T10559] total_inactive_file 0 [ 2006.083150][T10559] total_active_file 0 [ 2006.087148][T10559] total_unevictable 310550528 [ 2006.092252][T10559] anon_cost 0 [ 2006.095545][T10559] file_cost 0 [ 2006.103893][T10559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10034,pid=13321,uid=0 [ 2006.119717][T10559] Memory cgroup out of memory: Killed process 13321 (syz.1.10034) total-vm:98300kB, anon-rss:1116kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 2006.140974][ T30] audit: type=1804 audit(100449.990:15301): pid=13359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10046" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2006.145885][ T3585] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 2006.214758][ T3585] usb 5-1: USB disconnect, device number 72 [ 2006.343516][T14310] usb 6-1: USB disconnect, device number 26 [ 2006.465236][T13391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 2006.525339][T13402] /dev/rnullb0: Can't lookup blockdev [ 2006.638535][T13404] netlink: 220 bytes leftover after parsing attributes in process `syz.5.10058'. [ 2006.649434][T13404] unsupported nla_type 224 [ 2006.654589][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10058'. [ 2006.976050][ T982] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2007.103758][T14310] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 2007.148002][ T982] usb 6-1: config 0 has no interfaces? [ 2007.155582][ T982] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 2007.164810][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2007.173379][ T982] usb 6-1: SerialNumber: syz [ 2007.180055][ T982] usb 6-1: config 0 descriptor?? [ 2007.264262][T14310] usb 5-1: Using ep0 maxpacket: 32 [ 2007.280010][T14310] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 2007.306785][T14310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2007.314815][T14310] usb 5-1: Product: syz [ 2007.328176][T14310] usb 5-1: Manufacturer: syz [ 2007.332801][T14310] usb 5-1: SerialNumber: syz [ 2007.343523][T14310] usb 5-1: config 0 descriptor?? [ 2007.354118][T14310] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 2007.426757][ T982] usb 6-1: USB disconnect, device number 27 [ 2007.843102][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2007.929426][T13423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2007.940434][T13423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.003894][ T24] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30 [ 2008.014765][ T24] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 2008.026580][ T24] usb 2-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91 [ 2008.038102][ T24] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79 [ 2008.051219][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 2008.064388][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.084297][T13427] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=4243739199 (8487478398 ns) > initial count (2409167910 ns). Using initial count to start timer. [ 2008.086076][T13414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2008.104327][T13427] block nbd5: Attempted send on invalid socket [ 2008.115408][T13427] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 2008.124896][T13427] SQUASHFS error: Failed to read block 0x0: -5 [ 2008.131333][T13427] unable to read squashfs_super_block [ 2008.209219][T14310] gspca_ov534_9: reg_w failed -71 [ 2008.335512][T13414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2008.347665][T13414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2008.356926][T13414] /dev/sg0: Can't lookup blockdev [ 2008.367915][ T24] ath6kl: Failed to submit usb control message: -71 [ 2008.374574][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 2008.382736][ T24] ath6kl: Unable to send get target info: -71 [ 2008.389733][ T24] ath6kl: Failed to init ath6kl core: -71 [ 2008.396376][ T24] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 2008.413303][ T24] usb 2-1: USB disconnect, device number 6 [ 2008.536296][T14310] gspca_ov534_9: Unknown sensor 0000 [ 2008.536374][T14310] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 2008.560261][T14310] usb 5-1: USB disconnect, device number 73 [ 2008.824636][T13438] usb usb8: usbfs: process 13438 (syz.4.10072) did not claim interface 0 before use [ 2008.946396][ T30] audit: type=1804 audit(100452.619:15302): pid=13441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10073" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2008.990976][T13441] overlay: Unknown parameter 'obj_user' [ 2009.447267][T13450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2009.456102][T13450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2009.766621][T13452] netlink: 'syz.1.10077': attribute type 12 has an invalid length. [ 2009.788153][T13453] netlink: 'syz.1.10077': attribute type 12 has an invalid length. [ 2009.912234][T13461] /dev/rnullb0: Can't lookup blockdev [ 2009.959344][ T30] audit: type=1326 audit(100453.564:15303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13458 comm="syz.4.10080" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc79d78ebe9 code=0x0 [ 2010.024737][T13467] netlink: 116 bytes leftover after parsing attributes in process `syz.4.10080'. [ 2010.074253][ T30] audit: type=1804 audit(100453.667:15304): pid=13469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10083" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2010.167406][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.176326][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2010.192179][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2010.201304][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2010.289337][T13479] CIFS mount error: No usable UNC path provided in device string! [ 2010.289337][T13479] [ 2010.299738][T13479] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 2010.567355][ T1894] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2010.738634][ T1894] usb 2-1: Using ep0 maxpacket: 16 [ 2010.745536][ T1894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2010.767951][ T1894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2010.809953][ T1894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2010.819918][ T1894] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 2010.838761][ T1894] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2010.854505][ T1894] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2010.865565][ T1894] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2010.874463][ T1894] usb 2-1: Manufacturer: syz [ 2010.881885][T13481] ufs: You didn't specify the type of your ufs filesystem [ 2010.881885][T13481] [ 2010.881885][T13481] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 2010.881885][T13481] [ 2010.881885][T13481] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 2010.914204][T13481] ufs: ufstype=old is supported read-only [ 2010.920764][ T1894] usb 2-1: config 0 descriptor?? [ 2010.933535][T13481] block nbd3: Attempted send on invalid socket [ 2010.942122][T13481] I/O error, dev nbd3, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 2011.208678][ T1894] rc_core: IR keymap rc-hauppauge not found [ 2011.215224][ T1894] Registered IR keymap rc-empty [ 2011.220232][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.251295][T14309] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 2011.259239][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.295008][ T1894] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 2011.309125][ T1894] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input119 [ 2011.326900][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.347472][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.369025][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.402744][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.437517][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.445937][T14309] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 2011.455240][T14309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.467837][T14309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2011.476881][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.487147][T14309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.501574][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.510316][T14309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2011.525163][T14309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.535602][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.546775][T14309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2011.558489][T14309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.568920][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.580134][T14309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2011.590405][T14309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.600908][ T1894] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 2011.608211][T14309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2011.618640][T14309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.633161][ T1894] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 2011.642043][ T1894] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 2011.651333][T14309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2011.670572][T14309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.681006][T14309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2011.693868][T14309] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2011.704242][T14309] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2011.714564][ T1895] Bluetooth: hci0: Frame reassembly failed (-84) [ 2011.725822][T14309] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2011.735343][T14309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2011.743734][T14309] usb 5-1: Product: syz [ 2011.748037][T14309] usb 5-1: Manufacturer: syz [ 2011.752731][T14309] usb 5-1: SerialNumber: syz [ 2012.008523][T13483] syzkaller1: entered promiscuous mode [ 2012.013333][ T30] audit: type=1804 audit(100455.481:15305): pid=13500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.10092" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2012.017796][T13483] syzkaller1: entered allmulticast mode [ 2012.137002][T13508] /dev/rnullb0: Can't lookup blockdev [ 2012.183771][ T1894] usb 5-1: USB disconnect, device number 74 [ 2012.242581][T13513] comedi: valid board names for 8255 driver are: [ 2012.249054][T13513] 8255 [ 2012.251878][T13513] comedi: valid board names for vmk80xx driver are: [ 2012.258545][T13513] vmk80xx [ 2012.261805][T13513] comedi: valid board names for usbduxsigma driver are: [ 2012.269082][T13513] usbduxsigma [ 2012.272648][T13513] comedi: valid board names for usbduxfast driver are: [ 2012.279880][T13513] usbduxfast [ 2012.283240][T13513] comedi: valid board names for usbdux driver are: [ 2012.289856][T13513] usbdux [ 2012.293018][T13513] comedi: valid board names for ni6501 driver are: [ 2012.300491][T13513] ni6501 [ 2012.303507][T13513] comedi: valid board names for dt9812 driver are: [ 2012.310128][T13513] dt9812 [ 2012.313127][T13513] comedi: valid board names for ni_labpc_cs driver are: [ 2012.320459][T13513] ni_labpc_cs [ 2012.323899][T13513] comedi: valid board names for ni_daq_700 driver are: [ 2012.331456][T13513] ni_daq_700 [ 2012.334817][T13513] comedi: valid board names for labpc_pci driver are: [ 2012.341918][T13513] labpc_pci [ 2012.345210][T13513] comedi: valid board names for adl_pci9118 driver are: [ 2012.352559][T13513] pci9118dg [ 2012.359630][T13513] pci9118hg [ 2012.365938][T13513] pci9118hr [ 2012.369249][T13513] comedi: valid board names for 8255_pci driver are: [ 2012.376876][T13513] 8255_pci [ 2012.380316][T13513] comedi: valid board names for s526 driver are: [ 2012.387093][T13513] s526 [ 2012.389939][T13513] comedi: valid board names for multiq3 driver are: [ 2012.397068][T13513] multiq3 [ 2012.400181][T13513] comedi: valid board names for pcmuio driver are: [ 2012.407689][T13513] pcmuio48 [ 2012.410883][T13513] pcmuio96 [ 2012.414067][T13513] comedi: valid board names for pcmmio driver are: [ 2012.421116][T13513] pcmmio [ 2012.424131][T13513] comedi: valid board names for pcmda12 driver are: [ 2012.431312][T13513] pcmda12 [ 2012.434423][T13513] comedi: valid board names for pcmad driver are: [ 2012.441156][T13513] pcmad12 [ 2012.444279][T13513] pcmad16 [ 2012.447370][T13513] comedi: valid board names for ni_labpc driver are: [ 2012.454661][T13513] lab-pc-1200 [ 2012.458118][T13513] lab-pc-1200ai [ 2012.462042][T13513] lab-pc+ [ 2012.465152][T13513] comedi: valid board names for atmio16 driver are: [ 2012.472115][T13513] atmio16 [ 2012.475232][T13513] atmio16d [ 2012.478421][T13513] comedi: valid board names for ni_at_ao driver are: [ 2012.485516][T13513] at-ao-6 [ 2012.488847][T13513] at-ao-10 [ 2012.492306][T13513] comedi: valid board names for ni_at_a2150 driver are: [ 2012.499317][T13513] ni_at_a2150 [ 2012.503108][T13513] comedi: valid board names for adq12b driver are: [ 2012.509694][T13513] adq12b [ 2012.513356][T13513] comedi: valid board names for mpc624 driver are: [ 2012.519980][T13513] mpc624 [ 2012.523007][T13513] comedi: valid board names for c6xdigio driver are: [ 2012.530199][T13513] c6xdigio [ 2012.533397][T13513] comedi: valid board names for aio_iiro_16 driver are: [ 2012.540724][T13513] aio_iiro_16 [ 2012.544205][T13513] comedi: valid board names for aio_aio12_8 driver are: [ 2012.551561][T13513] aio_aio12_8 [ 2012.555024][T13513] aio_ai12_8 [ 2012.558878][T13513] aio_ao12_4 [ 2012.562260][T13513] comedi: valid board names for fl512 driver are: [ 2012.569758][T13513] fl512 [ 2012.572707][T13513] comedi: valid board names for dmm32at driver are: [ 2012.579712][T13513] dmm32at [ 2012.582830][T13513] comedi: valid board names for dt282x driver are: [ 2012.589701][T13513] dt2821 [ 2012.592731][T13513] dt2821-f [ 2012.595923][T13513] dt2821-g [ 2012.600481][T13513] dt2823 [ 2012.603666][T13513] dt2824-pgh [ 2012.607388][T13513] dt2824-pgl [ 2012.611114][T13513] dt2825 [ 2012.614256][T13513] dt2827 [ 2012.617277][T13513] dt2828 [ 2012.621137][T13513] dt2829 [ 2012.624181][T13513] dt21-ez [ 2012.627326][T13513] dt23-ez [ 2012.630807][T13513] dt24-ez [ 2012.633926][T13513] dt24-ez-pgl [ 2012.637377][T13513] comedi: valid board names for dt2817 driver are: [ 2012.644404][T13513] dt2817 [ 2012.647442][T13513] comedi: valid board names for dt2815 driver are: [ 2012.654386][T13513] dt2815 [ 2012.657426][T13513] comedi: valid board names for dt2814 driver are: [ 2012.664283][T13513] dt2814 [ 2012.667299][T13513] comedi: valid board names for dt2811 driver are: [ 2012.674308][T13513] dt2811-pgh [ 2012.677712][T13513] dt2811-pgl [ 2012.681078][T13513] comedi: valid board names for dt2801 driver are: [ 2012.688139][T13513] dt2801 [ 2012.691274][T13513] comedi: valid board names for das6402 driver are: [ 2012.698171][T13513] das6402-12 [ 2012.701555][T13513] das6402-16 [ 2012.704906][T13513] comedi: valid board names for das1800 driver are: [ 2012.712199][T13513] das-1701st [ 2012.715560][T13513] das-1701st-da [ 2012.719921][T13513] das-1702st [ 2012.723326][T13513] das-1702st-da [ 2012.727259][T13513] das-1702hr [ 2012.730627][T13513] das-1702hr-da [ 2012.747744][T13513] das-1701ao [ 2012.752291][T13513] das-1702ao [ 2012.759377][T13513] das-1801st [ 2012.762768][T13513] das-1801st-da [ 2012.766940][T13513] das-1802st [ 2012.774498][T13513] das-1802st-da [ 2012.778147][T13513] das-1802hr [ 2012.783001][T13513] das-1802hr-da [ 2012.786635][T13513] das-1801hc [ 2012.789987][T13513] das-1802hc [ 2012.797917][T13513] das-1801ao [ 2012.805890][T13513] das-1802ao [ 2012.814537][T13513] comedi: valid board names for das800 driver are: [ 2012.829844][T13513] das-800 [ 2012.837827][T13513] cio-das800 [ 2012.845887][T13513] das-801 [ 2012.852546][T13513] cio-das801 [ 2012.868395][T13513] das-802 [ 2012.879704][T13513] cio-das802 [ 2012.890269][T13513] cio-das802/16 [ 2012.905547][T13513] comedi: valid board names for isa-das08 driver are: [ 2012.913418][T13513] isa-das08 [ 2012.916893][T13513] das08-pgm [ 2012.920619][T13513] das08-pgh [ 2012.924197][T13513] das08-pgl [ 2012.927784][T13513] das08-aoh [ 2012.935611][T13513] das08-aol [ 2012.938932][T13513] das08-aom [ 2012.942636][T13513] das08/jr-ao [ 2012.946166][T13513] das08jr-16-ao [ 2012.949868][T13513] pc104-das08 [ 2012.958906][T13513] das08jr/16 [ 2012.963098][T13513] comedi: valid board names for das16m1 driver are: [ 2012.969964][T13513] das16m1 [ 2012.981811][T13513] comedi: valid board names for dac02 driver are: [ 2012.999295][T13513] dac02 [ 2013.006429][T13513] comedi: valid board names for rti802 driver are: [ 2013.013137][T13513] rti802 [ 2013.016481][T13513] comedi: valid board names for rti800 driver are: [ 2013.023074][T13513] rti800 [ 2013.026484][T13513] rti815 [ 2013.029498][T13513] comedi: valid board names for pcm3724 driver are: [ 2013.037384][T13513] pcm3724 [ 2013.040501][T13513] comedi: valid board names for pcl818 driver are: [ 2013.057568][T13513] pcl818l [ 2013.064927][T13513] pcl818h [ 2013.068039][T13513] pcl818hd [ 2013.077274][T13513] pcl818hg [ 2013.080716][T13513] pcl818 [ 2013.083734][T13513] pcl718 [ 2013.086793][T13513] pcm3718 [ 2013.090320][T13513] comedi: valid board names for pcl816 driver are: [ 2013.096912][T13513] pcl816 [ 2013.099991][T13513] pcl814b [ 2013.103569][T13513] comedi: valid board names for pcl812 driver are: [ 2013.110164][T13513] pcl812 [ 2013.118490][T13513] pcl812pg [ 2013.123692][T13513] acl8112pg [ 2013.127331][T13513] acl8112dg [ 2013.139512][T13513] acl8112hg [ 2013.142775][T13513] a821pgl [ 2013.146328][T13513] a821pglnda [ 2013.149771][T13513] a821pgh [ 2013.152826][T13513] a822pgl [ 2013.157225][T13513] a822pgh [ 2013.160284][T13513] a823pgl [ 2013.163446][T13513] a823pgh [ 2013.167823][T13513] pcl813 [ 2013.170790][T13513] pcl813b [ 2013.173847][T13513] acl8113 [ 2013.181594][T13513] iso813 [ 2013.184613][T13513] acl8216 [ 2013.188867][T13513] a826pg [ 2013.191836][T13513] comedi: valid board names for pcl730 driver are: [ 2013.201787][T13513] pcl730 [ 2013.204776][T13513] iso730 [ 2013.209292][T13513] acl7130 [ 2013.212476][T13513] pcm3730 [ 2013.215531][T13513] pcl725 [ 2013.219450][T13513] p8r8dio [ 2013.222515][T13513] acl7225b [ 2013.225755][T13513] p16r16dio [ 2013.229412][T13513] pcl733 [ 2013.232396][T13513] pcl734 [ 2013.235375][T13513] opmm-1616-xt [ 2013.238953][T13513] pearl-mm-p [ 2013.242545][T13513] ir104-pbf [ 2013.245774][T13513] comedi: valid board names for pcl726 driver are: [ 2013.252889][T13513] pcl726 [ 2013.256085][T13513] pcl727 [ 2013.259061][T13513] pcl728 [ 2013.262409][T13513] acl6126 [ 2013.265554][T13513] acl6128 [ 2013.268605][T13513] comedi: valid board names for pcl724 driver are: [ 2013.275653][T13513] pcl724 [ 2013.278713][T13513] pcl722 [ 2013.281676][T13513] pcl731 [ 2013.285147][T13513] acl7122 [ 2013.288235][T13513] acl7124 [ 2013.291383][T13513] pet48dio [ 2013.294956][T13513] pcmio48 [ 2013.298040][T13513] onyx-mm-dio [ 2013.301428][T13513] comedi: valid board names for pcl711 driver are: [ 2013.308643][T13513] pcl711 [ 2013.311609][T13513] pcl711b [ 2013.315546][T13513] acl8112hg [ 2013.318862][T13513] acl8112dg [ 2013.322129][T13513] comedi: valid board names for amplc_pc263 driver are: [ 2013.329686][T13513] pc263 [ 2013.332586][T13513] comedi: valid board names for amplc_pc236 driver are: [ 2013.339913][T13513] pc36at [ 2013.342953][T13513] comedi: valid board names for amplc_dio200 driver are: [ 2013.350415][T13513] pc212e [ 2013.353394][T13513] pc214e [ 2013.356422][T13513] pc215e [ 2013.359751][T13513] pc218e [ 2013.363001][T13513] pc272e [ 2013.365972][T13513] comedi: valid board names for comedi_parport driver are: [ 2013.373646][T13513] comedi_parport [ 2013.377371][T13513] comedi: valid board names for comedi_test driver are: [ 2013.384720][T13513] comedi_test [ 2013.388168][T13513] comedi: valid board names for comedi_bond driver are: [ 2013.396080][T13513] comedi_bond [ 2013.455222][ T1894] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 2013.483219][T13529] binder: 13527:13529 ioctl 40046210 0 returned -14 [ 2013.492220][T13529] binder: 13527:13529 ioctl 40046210 0 returned -14 [ 2013.500270][T13529] binder: 13527:13529 ioctl 40046210 0 returned -14 [ 2013.508106][T13529] binder: 13527:13529 ioctl 40046210 0 returned -14 [ 2013.514886][T13529] binder: 13527:13529 ioctl 40046210 0 returned -14 [ 2013.525293][T13529] binder: 13527:13529 ioctl 40046210 0 returned -14 [ 2013.534932][T13529] binder: 13527:13529 ioctl 40046210 0 returned -14 [ 2013.546553][T13529] binder: 13527:13529 ioctl 40046210 0 returned -14 [ 2013.638684][ T1894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.654616][ T1894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2013.671622][ T1894] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2013.691774][ T1894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2013.710046][ T1894] usb 5-1: Product: syz [ 2013.719097][ T1894] usb 5-1: Manufacturer: syz [ 2013.729691][ T1894] usb 5-1: SerialNumber: syz [ 2013.881030][ T1897] Bluetooth: hci0: command 0x1003 tx timeout [ 2013.883695][ T1918] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 2013.896409][ T24] usb 2-1: USB disconnect, device number 7 [ 2013.961337][T13524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2013.981565][T13542] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2013.997750][T13524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2014.007375][T13542] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2014.033886][T13542] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2014.084004][ T3585] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2014.266977][ T3585] usb 6-1: too many configurations: 252, using maximum allowed: 8 [ 2014.296469][ T3585] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 2014.309882][ T3585] usb 6-1: can't read configurations, error -71 [ 2014.470719][ T1899] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 2014.673430][ T1899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2014.693256][ T1899] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 2014.713360][ T1899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.737059][ T1899] usb 2-1: config 0 descriptor?? [ 2015.028157][T13548] kvm: pic: non byte write [ 2015.136500][T13553] /dev/rnullb0: Can't lookup blockdev [ 2015.181439][ T1899] lua 0003:1E7D:2C2E.004F: unknown main item tag 0x0 [ 2015.213395][ T1899] lua 0003:1E7D:2C2E.004F: unknown main item tag 0x0 [ 2015.231559][ T1899] lua 0003:1E7D:2C2E.004F: unknown main item tag 0x0 [ 2015.246971][ T1899] lua 0003:1E7D:2C2E.004F: unknown main item tag 0x0 [ 2015.264894][ T1899] lua 0003:1E7D:2C2E.004F: unknown main item tag 0x0 [ 2015.279528][ T1899] lua 0003:1E7D:2C2E.004F: unknown main item tag 0x0 [ 2015.294766][ T1899] lua 0003:1E7D:2C2E.004F: unknown main item tag 0x0 [ 2015.316004][ T1899] lua 0003:1E7D:2C2E.004F: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 2015.437547][ T30] audit: type=1804 audit(100458.681:15306): pid=13561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.10109" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2015.566351][T13566] /dev/rnullb0: Can't lookup blockdev [ 2016.310290][ T1894] usb 5-1: 0:2 : does not exist [ 2016.354205][ T1894] usb 5-1: USB disconnect, device number 75 [ 2016.777747][ T1894] usb 5-1: new low-speed USB device number 76 using dummy_hcd [ 2016.964520][ T32] oom_reaper: reaped process 13497 (syz.3.10091), now anon-rss:20kB, file-rss:22076kB, shmem-rss:0kB [ 2016.981133][ T1894] usb 5-1: Invalid ep0 maxpacket: 32 [ 2017.151909][ T1894] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 2017.193607][T13588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2017.218931][T13588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2017.333524][ T1894] usb 5-1: Invalid ep0 maxpacket: 32 [ 2017.342528][ T1894] usb usb5-port1: attempt power cycle [ 2017.411681][ T24] usb 2-1: USB disconnect, device number 8 [ 2017.441757][ T3585] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 2017.695107][T13591] kAFS: unable to lookup cell '' [ 2017.729127][ T1894] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 2017.750998][ T1894] usb 5-1: Invalid ep0 maxpacket: 32 [ 2017.911651][ T1894] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 2017.951037][ T1894] usb 5-1: Invalid ep0 maxpacket: 32 [ 2017.961307][ T1894] usb usb5-port1: unable to enumerate USB device [ 2018.024005][T13614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2018.038448][T13614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2018.075930][T13619] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2018.573556][ T3585] usb 6-1: device descriptor read/64, error -71 [ 2018.690365][ T30] audit: type=1804 audit(100461.721:15307): pid=13629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10132" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2018.803013][T13634] fuse: blksize only supported for fuseblk [ 2018.851531][ T3585] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2018.990475][ T3585] usb 6-1: device descriptor read/64, error -71 [ 2019.111000][ T3585] usb usb6-port1: attempt power cycle [ 2019.185370][ T30] audit: type=1804 audit(100462.198:15308): pid=13652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10140" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2019.189035][T13652] input: syz0 as /devices/virtual/input/input121 [ 2019.492971][ T3585] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 2019.525608][ T3585] usb 6-1: device descriptor read/8, error -71 [ 2019.781627][ T3585] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 2019.803233][ T3585] usb 6-1: device descriptor read/8, error -71 [ 2019.920798][ T3585] usb usb6-port1: unable to enumerate USB device [ 2019.984581][T14309] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 2020.005938][ T1894] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 2020.146042][ T1894] usb 5-1: device descriptor read/64, error -71 [ 2020.153769][T14309] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2020.162091][T14309] usb 2-1: not running at top speed; connect to a high speed hub [ 2020.170762][T14309] usb 2-1: config 5 has an invalid interface number: 160 but max is 0 [ 2020.179014][T14309] usb 2-1: config 5 has no interface number 0 [ 2020.185102][T14309] usb 2-1: config 5 interface 160 has no altsetting 0 [ 2020.193826][T14309] usb 2-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=b4.24 [ 2020.202932][T14309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2020.210990][T14309] usb 2-1: Product: syz [ 2020.215152][T14309] usb 2-1: Manufacturer: syz [ 2020.219825][T14309] usb 2-1: SerialNumber: syz [ 2020.372386][T13662] /dev/rnullb0: Can't lookup blockdev [ 2020.409329][ T30] audit: type=1804 audit(100463.330:15309): pid=13664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10146" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2020.430583][ C1] vkms_vblank_simulate: vblank timer overrun [ 2020.433665][ T1894] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 2020.448854][T14309] cypress_m8 2-1:5.160: HID->COM RS232 Adapter converter detected [ 2020.458217][T14309] cyphidcom ttyUSB0: required endpoint is missing [ 2020.583161][ T1894] usb 5-1: device descriptor read/64, error -71 [ 2020.653966][T13675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2020.664585][T13675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2020.665941][ T1899] usb 2-1: USB disconnect, device number 9 [ 2020.685458][ T1899] cypress_m8 2-1:5.160: device disconnected [ 2020.702014][ T1894] usb usb5-port1: attempt power cycle [ 2021.074894][ T1894] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 2021.097277][ T1894] usb 5-1: device descriptor read/8, error -71 [ 2021.352819][ T1894] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 2021.375024][ T1894] usb 5-1: device descriptor read/8, error -71 [ 2021.444498][ T30] audit: type=1804 audit(100464.303:15310): pid=13684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10153" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2021.494307][ T1894] usb usb5-port1: unable to enumerate USB device [ 2021.507004][T14309] usb 2-1: new low-speed USB device number 10 using dummy_hcd [ 2021.582731][ T30] audit: type=1804 audit(100464.434:15311): pid=13698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.10158" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2021.683126][ T30] audit: type=1804 audit(100464.528:15312): pid=13706 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10161" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2021.704453][T14309] usb 2-1: Invalid ep0 maxpacket: 32 [ 2021.782068][T13713] /dev/rnullb0: Can't lookup blockdev [ 2021.810995][T13715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10165'. [ 2021.835083][T14309] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 2021.919376][ T1899] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 2022.005012][T14309] usb 2-1: Invalid ep0 maxpacket: 32 [ 2022.010762][T14309] usb usb2-port1: attempt power cycle [ 2022.062130][T13721] /dev/rnullb0: Can't lookup blockdev [ 2022.083264][ T1899] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 2022.094056][ T1899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2022.111495][ T1899] usb 6-1: Product: syz [ 2022.115954][ T1899] usb 6-1: Manufacturer: syz [ 2022.121029][ T1899] usb 6-1: SerialNumber: syz [ 2022.132660][ T1899] usb 6-1: config 0 descriptor?? [ 2022.190536][T13725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.199427][T13725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2022.202632][T13726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2022.216574][T13726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2022.356019][ T1894] usb 6-1: USB disconnect, device number 35 [ 2022.391105][T14309] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 2022.412958][T14309] usb 2-1: Invalid ep0 maxpacket: 32 [ 2022.550104][T14309] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 2022.572368][T14309] usb 2-1: Invalid ep0 maxpacket: 32 [ 2022.577909][T14309] usb usb2-port1: unable to enumerate USB device [ 2022.879954][T13730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10170'. [ 2023.177819][T13736] PKCS8: Unsupported PKCS#8 version [ 2023.185885][T13736] /dev/rnullb0: Can't lookup blockdev [ 2023.269624][ T30] audit: type=1804 audit(100466.015:15313): pid=13747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10176" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2023.341602][T13748] /dev/rnullb0: Can't lookup blockdev [ 2023.765407][T13753] netlink: 'syz.3.10178': attribute type 15 has an invalid length. [ 2023.892914][T13757] syzkaller1: entered promiscuous mode [ 2023.900391][T13757] syzkaller1: entered allmulticast mode [ 2023.909156][T13757] /dev/rnullb0: Can't lookup blockdev [ 2023.909163][T13758] /dev/rnullb0: Can't lookup blockdev [ 2024.037912][T13764] /dev/rnullb0: Can't lookup blockdev [ 2024.129314][T13768] /dev/rnullb0: Can't lookup blockdev [ 2024.148573][ T30] audit: type=1326 audit(100466.838:15314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13744 comm="syz.5.10175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243318ebe9 code=0x7fc00000 [ 2024.194400][ T30] audit: type=1804 audit(100466.876:15315): pid=13772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10183" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2024.259765][T13774] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 2024.282446][ T30] audit: type=1804 audit(100466.951:15316): pid=13776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10186" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2024.383815][T13781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2024.393376][T13781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2024.402706][T13781] /dev/rnullb0: Can't lookup blockdev [ 2024.452880][ T24] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 2024.481307][ T30] audit: type=1326 audit(100467.147:15317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13782 comm="syz.1.10189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f138e58ebe9 code=0x0 [ 2024.591727][T14309] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 2024.635899][ T24] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 2024.644137][ T24] usb 6-1: config 0 has no interface number 0 [ 2024.650289][ T24] usb 6-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2024.661776][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2024.672696][ T24] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 2024.682472][ T24] usb 6-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2024.695440][ T24] usb 6-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 2024.704679][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.715503][ T24] usb 6-1: config 0 descriptor?? [ 2024.752341][T14309] usb 5-1: Using ep0 maxpacket: 16 [ 2024.760448][T14309] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 2024.768729][T14309] usb 5-1: config 0 has no interface number 0 [ 2024.776786][T14309] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2024.785904][T14309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2024.793905][T14309] usb 5-1: Product: syz [ 2024.798153][T14309] usb 5-1: Manufacturer: syz [ 2024.802758][T14309] usb 5-1: SerialNumber: syz [ 2024.808664][T14309] usb 5-1: config 0 descriptor?? [ 2024.815782][T14309] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2025.016811][T13791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2025.028889][T13791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2025.156625][ T30] audit: type=1804 audit(100467.774:15318): pid=13804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10194" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2025.365484][ T24] usbhid 6-1:0.1: can't add hid device: -71 [ 2025.371493][ T24] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 2025.417234][ T24] usb 6-1: USB disconnect, device number 36 [ 2025.467003][T14309] gspca_spca1528: reg_w err -71 [ 2025.500743][T14309] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 2025.528498][T14309] usb 5-1: USB disconnect, device number 84 [ 2025.821054][ T24] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 2025.996921][ T24] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 2026.005319][ T24] usb 6-1: config 0 has no interface number 0 [ 2026.011429][ T24] usb 6-1: config 0 interface 41 has no altsetting 0 [ 2026.022174][ T24] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2026.039854][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2026.048219][ T24] usb 6-1: Product: syz [ 2026.052417][ T24] usb 6-1: Manufacturer: syz [ 2026.057305][ T24] usb 6-1: SerialNumber: syz [ 2026.067517][ T24] usb 6-1: config 0 descriptor?? [ 2026.094420][ T30] audit: type=1804 audit(100468.653:15319): pid=13850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10198" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2026.096133][T13850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2026.115622][ C0] vkms_vblank_simulate: vblank timer overrun [ 2026.169270][T13850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2026.183183][T13856] random: crng reseeded on system resumption [ 2026.310774][T13876] /dev/rnullb0: Can't lookup blockdev [ 2026.357534][ T30] audit: type=1804 audit(100468.906:15320): pid=13880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10207" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2026.499273][T13889] overlayfs: missing 'lowerdir' [ 2026.509169][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10209'. [ 2026.525502][T13889] bond0: (slave bond_slave_0): Releasing backup interface [ 2026.955185][T13818] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2026.962474][ T24] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 2026.981554][ T24] usb 6-1: USB disconnect, device number 37 [ 2027.312157][T13895] /dev/rnullb0: Can't lookup blockdev [ 2027.349583][T13898] /dev/rnullb0: Can't lookup blockdev [ 2027.511873][ T30] audit: type=1804 audit(100469.982:15321): pid=13914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10217" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2027.512448][T13914] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2027.570325][T13905] /dev/rnullb0: Can't lookup blockdev [ 2027.801472][ T24] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 2027.926787][ T1899] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 2027.937749][ T3585] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 2027.980235][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 2027.986682][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2027.998655][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=6d.b8 [ 2028.007771][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2028.015917][ T24] usb 2-1: Product: syz [ 2028.020245][ T24] usb 2-1: Manufacturer: syz [ 2028.025127][ T24] usb 2-1: SerialNumber: syz [ 2028.031293][ T24] usb 2-1: config 0 descriptor?? [ 2028.038889][ T24] port100 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 2028.098009][ T1899] usb 6-1: Using ep0 maxpacket: 8 [ 2028.104445][ T1899] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2028.108542][ T3585] usb 5-1: Using ep0 maxpacket: 16 [ 2028.113685][ T1899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.123625][ T3585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2028.130745][ T1899] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2028.138509][ T3585] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2028.150355][ T1899] pvrusb2: ********** [ 2028.158479][ T3585] usb 5-1: config 0 interface 0 has no altsetting 0 [ 2028.160997][ T1899] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2028.171182][ T3585] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 2028.175800][ T1899] pvrusb2: Important functionality might not be entirely working. [ 2028.192725][ T1899] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2028.204149][ T3585] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2028.212773][ T1899] pvrusb2: ********** [ 2028.214158][ T3585] usb 5-1: config 0 descriptor?? [ 2028.254947][T13914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.263932][T13914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.273610][ T24] usb 2-1: USB disconnect, device number 14 [ 2028.346940][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.355791][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.367587][ T2344] pvrusb2: Invalid write control endpoint [ 2028.402292][ T2344] pvrusb2: Invalid write control endpoint [ 2028.408344][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2028.417638][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2028.426943][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2028.439286][ T2344] pvrusb2: Device being rendered inoperable [ 2028.445357][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2028.452610][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2028.460666][ T2344] pvrusb2: Attached sub-driver cx25840 [ 2028.466336][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2028.476621][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2028.586337][T13920] pvrusb2: Attempted to execute control transfer when device not ok [ 2028.640540][T13920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2028.650473][T13920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2028.668302][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.676463][ T1899] usb 6-1: USB disconnect, device number 38 [ 2028.678343][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.690850][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.697999][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.704899][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.711842][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.718803][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.725665][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.732656][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.739931][ T3585] apple 0003:05AC:0247.0050: unknown main item tag 0x0 [ 2028.755848][ T3585] apple 0003:05AC:0247.0050: unexpected long global item [ 2028.763548][ T3585] apple 0003:05AC:0247.0050: parse failed [ 2028.769323][ T3585] apple 0003:05AC:0247.0050: probe with driver apple failed with error -22 [ 2028.837076][T13927] overlay: Unknown parameter 'hash' [ 2028.891997][ T24] usb 5-1: USB disconnect, device number 85 [ 2029.230956][T14309] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 2029.249110][ T30] audit: type=1804 audit(100471.600:15322): pid=13935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.10225" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2029.323188][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.329599][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.335220][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.341095][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.346904][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.359543][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.365727][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.374292][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.380275][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.386140][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.391954][T14309] usb 2-1: Using ep0 maxpacket: 16 [ 2029.396697][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.402739][T14309] usb 2-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 2029.402763][T14309] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2029.406240][T14309] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2029.416550][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.440033][T14309] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2029.456903][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.462700][T14309] usb 2-1: Product: syz [ 2029.475148][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.486562][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.489784][T14309] usb 2-1: Manufacturer: syz [ 2029.495917][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.502497][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.508199][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.516243][T14309] usb 2-1: SerialNumber: syz [ 2029.542866][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.548530][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.560892][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.568493][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.574406][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.594204][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.601938][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.610116][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.616883][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.622945][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.631991][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.633943][T13956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2029.646752][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.656847][T13956] input: syz1 as /devices/virtual/input/input122 [ 2029.658401][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.669736][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.675861][T13940] /dev/rnullb0: Can't lookup blockdev [ 2029.688061][T13956] /dev/rnullb0: Can't lookup blockdev [ 2029.753435][T13933] overlayfs: failed to resolve 'pcr=00000000000000000009': -2 [ 2029.770959][T13933] overlay: filesystem on ./cgroup is read-only [ 2029.778689][T13959] /dev/rnullb0: Can't lookup blockdev [ 2029.837042][T13961] /dev/rnullb0: Can't lookup blockdev [ 2029.879699][T13964] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2029.886576][T13964] ieee802154 phy0 wpan0: encryption failed: -22 [ 2029.893905][ T1900] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 2029.906201][T13964] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10236'. [ 2030.019050][ T30] audit: type=1804 audit(100472.320:15323): pid=13970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.10238" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2030.057503][ T1900] usb 5-1: device descriptor read/64, error -71 [ 2030.321371][ T1900] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 2030.342805][ T2075] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 2030.460192][ T1900] usb 5-1: device descriptor read/64, error -71 [ 2030.515616][ T2075] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2030.528903][ T2075] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.544228][ T2075] usb 6-1: config 0 descriptor?? [ 2030.557105][ T2075] cp210x 6-1:0.0: cp210x converter detected [ 2030.588496][ T1900] usb usb5-port1: attempt power cycle [ 2030.776026][ T2075] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2030.951982][ T1900] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 2030.976066][ T1900] usb 5-1: device descriptor read/8, error -71 [ 2030.984478][ T2075] usb 6-1: USB disconnect, device number 39 [ 2030.993893][ T2075] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2031.003991][ T2075] cp210x 6-1:0.0: device disconnected [ 2031.088790][T13977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10240'. [ 2031.218481][T13985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2031.228429][T13985] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2031.239443][ T1900] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 2031.285831][ T1900] usb 5-1: device descriptor read/8, error -71 [ 2031.326715][T13989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2031.335412][T13989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2031.402498][ T1900] usb usb5-port1: unable to enumerate USB device [ 2031.592843][T14000] /dev/rnullb0: Can't lookup blockdev [ 2032.078163][ T2075] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 2032.201298][T14309] usb 2-1: 0:2 : does not exist [ 2032.215927][T14309] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5) [ 2032.229816][T14309] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2032.231725][T14009] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2032.241581][T14309] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2032.251876][ T2075] usb 6-1: Using ep0 maxpacket: 16 [ 2032.261189][ T2075] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 2032.274627][ T2075] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2032.285991][ T2075] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2032.295300][ T2075] usb 6-1: Product: syz [ 2032.303534][ T2075] usb 6-1: Manufacturer: syz [ 2032.308363][ T2075] usb 6-1: SerialNumber: syz [ 2032.313183][T14309] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 2032.327436][ T2075] usb 6-1: config 0 descriptor?? [ 2032.335288][ T2075] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2032.347386][ T2075] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 2032.356589][T14309] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 2032.369142][T14309] usb 2-1: USB disconnect, device number 15 [ 2032.696139][T14015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2032.704735][T14015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2032.886454][T14017] /dev/rnullb0: Can't lookup blockdev [ 2032.977849][ T2075] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 2033.164768][T14309] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 2033.326781][T14309] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2033.334901][T14309] usb 2-1: config 0 has no interface number 0 [ 2033.341203][T14309] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 2033.352497][T14309] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 2033.363372][T14309] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2033.372508][T14309] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.388996][T14309] usb 2-1: config 0 descriptor?? [ 2033.394607][T14029] autofs: Unknown parameter 't˱G%' [ 2033.396624][T14019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2033.420286][T14309] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 2033.437000][ T2075] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 2033.447232][ T2075] em28xx 6-1:0.0: board has no eeprom [ 2033.482363][ T30] audit: type=1804 audit(100475.567:15324): pid=14033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10258" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2033.518162][ T2075] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 2033.526085][ T2075] em28xx 6-1:0.0: dvb set to bulk mode. [ 2033.533070][T14309] em28xx 6-1:0.0: Binding DVB extension [ 2033.541217][ T2075] usb 6-1: USB disconnect, device number 40 [ 2033.557344][ T2075] em28xx 6-1:0.0: Disconnecting em28xx [ 2033.605242][T14309] em28xx 6-1:0.0: Registering input extension [ 2033.611625][ T2075] em28xx 6-1:0.0: Closing input extension [ 2033.634207][ T2075] em28xx 6-1:0.0: Freeing device [ 2033.641880][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 2033.653123][T14309] usb 2-1: USB disconnect, device number 16 [ 2033.814759][T14042] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10260'. [ 2033.969886][T14046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10262'. [ 2034.006999][ T30] audit: type=1804 audit(100476.053:15325): pid=14048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.10263" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2034.145201][T14054] /dev/rnullb0: Can't lookup blockdev [ 2034.480947][ T24] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 2034.542661][T14070] /dev/rnullb0: Can't lookup blockdev [ 2034.548792][ T30] audit: type=1804 audit(100476.568:15326): pid=14077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10273" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2034.651935][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 2034.667827][ T24] usb 6-1: config 162 has an invalid interface number: 81 but max is 0 [ 2034.668619][T14086] /dev/rnullb0: Can't lookup blockdev [ 2034.676355][ T24] usb 6-1: config 162 has no interface number 0 [ 2034.688215][ T24] usb 6-1: config 162 interface 81 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 2034.698406][ T24] usb 6-1: config 162 interface 81 has no altsetting 0 [ 2034.709901][ T24] usb 6-1: New USB device found, idVendor=12d1, idProduct=35f3, bcdDevice=d6.3c [ 2034.721748][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2034.730043][ T24] usb 6-1: Product: syz [ 2034.734272][ T24] usb 6-1: Manufacturer: syz [ 2034.739192][ T24] usb 6-1: SerialNumber: syz [ 2034.756540][T14088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2034.765733][T14088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2034.779006][T14309] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 2034.915338][T14093] /dev/rnullb0: Can't lookup blockdev [ 2034.922428][T14093] /dev/rnullb0: Can't lookup blockdev [ 2034.928725][T14309] usb 2-1: device descriptor read/64, error -71 [ 2034.964385][ T30] audit: type=1804 audit(100476.951:15327): pid=14096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10280" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2035.009264][ T24] usb 6-1: USB disconnect, device number 41 [ 2035.185020][T14309] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 2035.323925][T14309] usb 2-1: device descriptor read/64, error -71 [ 2035.442052][T14309] usb usb2-port1: attempt power cycle [ 2035.507245][T14112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2035.516909][T14112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2035.695218][T14123] wlan1 speed is unknown, defaulting to 1000 [ 2035.733863][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10289'. [ 2035.768849][T14123] lo speed is unknown, defaulting to 1000 [ 2035.804932][T14309] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 2035.826775][T14309] usb 2-1: device descriptor read/8, error -71 [ 2035.979335][ T30] audit: type=1804 audit(100477.905:15328): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10290" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2036.007288][T14128] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.10290'. [ 2036.095524][T14309] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 2036.111393][T14132] rdma_rxe: rxe_newlink: failed to add wlan1 [ 2036.126660][T14132] /dev/rnullb0: Can't lookup blockdev [ 2036.140128][T14309] usb 2-1: device descriptor read/8, error -71 [ 2036.250000][ T30] audit: type=1400 audit(100478.158:15329): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name="nl80211" pid=14134 comm="syz.4.10292" [ 2036.280267][T14309] usb usb2-port1: unable to enumerate USB device [ 2036.307166][ T30] audit: type=1400 audit(100478.158:15330): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14134 comm="syz.4.10292" [ 2036.342801][T14140] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2037.793281][ T1900] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 2037.932197][ T982] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2037.967742][ T1900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2037.982595][ T1900] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 2037.991983][ T1900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.001385][ T1900] usb 5-1: Product: syz [ 2038.005613][ T1900] usb 5-1: Manufacturer: syz [ 2038.010389][ T1900] usb 5-1: SerialNumber: syz [ 2038.017085][ T1900] usb 5-1: config 0 descriptor?? [ 2038.025493][ T1900] yurex 5-1:0.0: Could not find endpoints [ 2038.093411][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 2038.099887][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2038.109536][ T982] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 2038.118728][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2038.126804][ T982] usb 2-1: Product: syz [ 2038.130975][ T982] usb 2-1: Manufacturer: syz [ 2038.136185][ T982] usb 2-1: SerialNumber: syz [ 2038.146341][ T982] usb 2-1: config 0 descriptor?? [ 2038.154739][ T982] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 2038.296246][ T1900] usb 5-1: USB disconnect, device number 90 [ 2038.355047][T14213] virtiofs: Unknown parameter '/dev/loop' [ 2038.370282][T14163] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2038.384551][T14163] input: syz1 as /devices/virtual/input/input124 [ 2038.405981][T14218] /dev/rnullb0: Can't lookup blockdev [ 2038.501676][ T982] snd_usb_toneport 2-1:0.0: set_interface failed [ 2038.509848][ T982] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 2038.517821][ T982] snd_usb_toneport 2-1:0.0: probe with driver snd_usb_toneport failed with error -71 [ 2038.536879][ T982] usb 2-1: USB disconnect, device number 21 [ 2038.588612][T14232] fuse: Unknown parameter 'rlY\0x0000000000000003' [ 2038.666762][T14237] Invalid ELF header type: 0 != 1 [ 2038.877611][T14251] /dev/rnullb0: Can't lookup blockdev [ 2039.078349][T14264] netlink: 5092 bytes leftover after parsing attributes in process `syz.3.10328'. [ 2039.082698][T14266] /dev/rnullb0: Can't lookup blockdev [ 2039.104977][ T30] audit: type=1804 audit(100480.815:15331): pid=14253 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.10326" name="rnullb0" dev="tmpfs" ino=711 res=1 errno=0 [ 2039.305701][T14282] fuse: Unknown parameter '' [ 2039.461678][T14303] rdma_rxe: rxe_newlink: failed to add wlan1 [ 2039.479655][T14303] /dev/rnullb0: Can't lookup blockdev [ 2039.573156][ T30] audit: type=1804 audit(100481.264:15332): pid=14315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.10342" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2039.660312][T14322] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2039.953210][ T1900] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 2040.008728][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10348'. [ 2040.009014][T14335] /dev/rnullb0: Can't lookup blockdev [ 2040.018220][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10348'. [ 2040.035177][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10348'. [ 2040.046115][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10348'. [ 2040.055865][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10348'. [ 2040.066010][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10348'. [ 2040.075976][T14333] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10348'. [ 2040.102127][ T1900] usb 5-1: device descriptor read/64, error -71 [ 2040.131895][T14337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2040.148619][T14337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2040.173459][T14337] kvm: user requested TSC rate below hardware speed [ 2040.360250][ T1900] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 2040.499877][ T1900] usb 5-1: device descriptor read/64, error -71 [ 2040.615823][ T1900] usb usb5-port1: attempt power cycle [ 2040.784519][T14346] netlink: 'syz.3.10353': attribute type 27 has an invalid length. [ 2040.794998][T14346] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2040.978871][ T1900] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 2041.022112][ T1900] usb 5-1: device descriptor read/8, error -71 [ 2041.074036][T14353] syz.5.10355: vmalloc error: size 134221824, failed to allocated page array size 262152, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2041.117599][T14353] CPU: 0 UID: 0 PID: 14353 Comm: syz.5.10355 Not tainted syzkaller #0 PREEMPT(full) [ 2041.117624][T14353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2041.117636][T14353] Call Trace: [ 2041.117643][T14353] [ 2041.117652][T14353] dump_stack_lvl+0x189/0x250 [ 2041.117686][T14353] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2041.117714][T14353] ? __pfx__printk+0x10/0x10 [ 2041.117739][T14353] ? lock_release+0x4b/0x3e0 [ 2041.117758][T14353] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2041.117784][T14353] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 2041.117809][T14353] warn_alloc+0x214/0x310 [ 2041.117831][T14353] ? __pfx_warn_alloc+0x10/0x10 [ 2041.117852][T14353] ? __get_vm_area_node+0x28f/0x300 [ 2041.117882][T14353] ? xskq_create+0xbf/0x170 [ 2041.117906][T14353] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 2041.117937][T14353] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2041.117956][T14353] ? xsk_setsockopt+0x502/0x8d0 [ 2041.117976][T14353] ? __kasan_kmalloc+0x93/0xb0 [ 2041.118005][T14353] vmalloc_user_noprof+0xad/0xf0 [ 2041.118023][T14353] ? xskq_create+0xbf/0x170 [ 2041.118051][T14353] xskq_create+0xbf/0x170 [ 2041.118074][T14353] xsk_init_queue+0xb0/0x110 [ 2041.118096][T14353] xsk_setsockopt+0x57b/0x8d0 [ 2041.118117][T14353] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2041.118138][T14353] ? __pfx_aa_sk_perm+0x10/0x10 [ 2041.118160][T14353] ? lock_release+0x4b/0x3e0 [ 2041.118177][T14353] ? aa_sock_opt_perm+0xff/0x1b0 [ 2041.118202][T14353] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 2041.118226][T14353] ? __pfx_xsk_setsockopt+0x10/0x10 [ 2041.118247][T14353] do_sock_setsockopt+0x17c/0x1b0 [ 2041.118276][T14353] __x64_sys_setsockopt+0x13f/0x1b0 [ 2041.118305][T14353] do_syscall_64+0xfa/0xfa0 [ 2041.118331][T14353] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.118350][T14353] ? clear_bhb_loop+0x60/0xb0 [ 2041.118370][T14353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2041.118388][T14353] RIP: 0033:0x7f243318ebe9 [ 2041.118404][T14353] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2041.118421][T14353] RSP: 002b:00007f24340d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2041.118441][T14353] RAX: ffffffffffffffda RBX: 00007f24333c5fa0 RCX: 00007f243318ebe9 [ 2041.118455][T14353] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 2041.118466][T14353] RBP: 00007f2433211e19 R08: 0000000000000004 R09: 0000000000000000 [ 2041.118477][T14353] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2041.118488][T14353] R13: 00007f24333c6038 R14: 00007f24333c5fa0 R15: 00007ffc715f4f28 [ 2041.118509][T14353] [ 2041.118525][T14353] Mem-Info: [ 2041.351462][ T1900] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 2041.381797][T14358] wlan1 speed is unknown, defaulting to 1000 [ 2041.398313][T14353] active_anon:26947 inactive_anon:46 isolated_anon:0 [ 2041.398313][T14353] active_file:16535 inactive_file:23714 isolated_file:0 [ 2041.398313][T14353] unevictable:75844 dirty:59 writeback:0 [ 2041.398313][T14353] slab_reclaimable:9333 slab_unreclaimable:126043 [ 2041.398313][T14353] mapped:26402 shmem:92801 pagetables:2519 [ 2041.398313][T14353] sec_pagetables:0 bounce:0 [ 2041.398313][T14353] kernel_misc_reclaimable:0 [ 2041.398313][T14353] free:1209455 free_pcp:8912 free_cma:0 [ 2041.460861][ T1900] usb 5-1: device descriptor read/8, error -71 [ 2041.502412][T14353] Node 0 active_anon:105776kB inactive_anon:168kB active_file:57944kB inactive_file:75668kB unevictable:302040kB isolated(anon):0kB isolated(file):0kB mapped:105608kB dirty:236kB writeback:0kB shmem:369968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14976kB pagetables:9944kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2041.558620][ T30] audit: type=1804 audit(100483.116:15333): pid=14359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10356" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2041.577533][ T1900] usb usb5-port1: unable to enumerate USB device [ 2041.605656][T10559] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 2041.616770][T14353] Node 1 active_anon:0kB inactive_anon:0kB active_file:8196kB inactive_file:19188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 2041.623952][T14358] lo speed is unknown, defaulting to 1000 [ 2041.647497][T10559] CPU: 1 UID: 0 PID: 10559 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 2041.647525][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 2041.647539][T10559] Call Trace: [ 2041.647549][T10559] [ 2041.647556][T10559] dump_stack_lvl+0x189/0x250 [ 2041.647595][T10559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2041.647627][T10559] ? __pfx__printk+0x10/0x10 [ 2041.647659][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.647686][T10559] dump_header+0xd3/0x480 [ 2041.647707][T10559] oom_kill_process+0x387/0x920 [ 2041.647733][T10559] out_of_memory+0xf09/0x12a0 [ 2041.647758][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.647782][T10559] ? __pfx_out_of_memory+0x10/0x10 [ 2041.647804][T10559] ? percpu_ref_put+0x19/0x180 [ 2041.647823][T10559] ? lock_release+0x4b/0x3e0 [ 2041.647846][T10559] mem_cgroup_out_of_memory+0x145/0x240 [ 2041.647870][T10559] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 2041.647898][T10559] ? _raw_spin_unlock+0x28/0x50 [ 2041.647923][T10559] ? memcg1_oom_prepare+0x37f/0x450 [ 2041.647953][T10559] try_charge_memcg+0xdff/0x1290 [ 2041.647993][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.648022][T10559] ? __pfx_try_charge_memcg+0x10/0x10 [ 2041.648052][T10559] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 2041.648076][T10559] ? xa_load+0x60/0x210 [ 2041.648103][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.648127][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.648149][T10559] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 2041.648181][T10559] charge_memcg+0x9f/0x180 [ 2041.648209][T10559] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 2041.648239][T10559] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 2041.648281][T10559] __read_swap_cache_async+0x28c/0x510 [ 2041.648310][T10559] swap_cluster_readahead+0x305/0x5f0 [ 2041.648336][T10559] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 2041.648361][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.648382][T10559] ? filemap_get_entry+0xad/0x2f0 [ 2041.648404][T10559] ? get_vma_policy+0x27c/0x3c0 [ 2041.648433][T10559] swapin_readahead+0x17d/0xb50 [ 2041.648455][T10559] ? __pfx_filemap_get_entry+0x10/0x10 [ 2041.648497][T10559] ? get_swap_device_info+0x1c/0x2b0 [ 2041.648522][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.648544][T10559] ? __pfx_swapin_readahead+0x10/0x10 [ 2041.648571][T10559] ? __filemap_get_folio+0x9a6/0xaf0 [ 2041.648598][T10559] ? swap_cache_get_folio+0xae/0x3b0 [ 2041.648624][T10559] do_swap_page+0x525/0x5ac0 [ 2041.648658][T10559] ? ___pte_offset_map+0x29/0x250 [ 2041.648688][T10559] ? lock_acquire+0x5f/0x360 [ 2041.648706][T10559] ? do_swap_page+0x184/0x5ac0 [ 2041.648732][T10559] ? __pfx_do_swap_page+0x10/0x10 [ 2041.648760][T10559] ? __pfx_default_wake_function+0x10/0x10 [ 2041.648780][T10559] ? ___pte_offset_map+0x45/0x250 [ 2041.648819][T10559] ? ___pte_offset_map+0x1cf/0x250 [ 2041.648846][T10559] ? pte_offset_map_rw_nolock+0xea/0x160 [ 2041.648875][T10559] __handle_mm_fault+0xe55/0x5400 [ 2041.648912][T10559] ? __pfx___handle_mm_fault+0x10/0x10 [ 2041.648941][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.648967][T10559] ? lock_vma_under_rcu+0x3cb/0x450 [ 2041.648992][T10559] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 2041.649014][T10559] handle_mm_fault+0x40a/0x8e0 [ 2041.649045][T10559] do_user_addr_fault+0xa81/0x1390 [ 2041.649068][T10559] ? rcu_is_watching+0x15/0xb0 [ 2041.649090][T10559] ? trace_page_fault_user+0x84/0x1e0 [ 2041.649109][T10559] exc_page_fault+0x82/0x100 [ 2041.649136][T10559] asm_exc_page_fault+0x26/0x30 [ 2041.649154][T10559] RIP: 0033:0x7f138e5c14a8 [ 2041.649170][T10559] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 2041.649186][T10559] RSP: 002b:00007ffd80444730 EFLAGS: 00010293 [ 2041.649205][T10559] RAX: 0000000000000000 RBX: 000000000000029f RCX: 00007f138e5c14a5 [ 2041.649218][T10559] RDX: 00007ffd80444770 RSI: 0000000000000000 RDI: 0000000000000000 [ 2041.649230][T10559] RBP: 00007ffd804447dc R08: 0000000000000000 R09: 0000000000000000 [ 2041.649243][T10559] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 2041.649256][T10559] R13: 00000000000927c0 R14: 00000000001d50c1 R15: 00007ffd80444830 [ 2041.649278][T10559] [ 2041.649286][T10559] memory: usage 307200kB, limit 307200kB, failcnt 50223 [ 2041.962191][T14353] Node 0 [ 2041.962721][T10559] memory+swap: usage 307556kB, limit 9007199254740988kB, failcnt 0 [ 2041.967366][T14353] DMA free:12228kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2041.972554][T10559] kmem: usage 4204kB, limit 9007199254740988kB, failcnt 0 [ 2041.977835][T14353] lowmem_reserve[]: [ 2041.981975][T10559] Memory cgroup stats for /syz1: [ 2042.015552][T14353] 0 [ 2042.061539][T10559] cache 310263808 [ 2042.113086][T14353] 2495 2496 2496 2496 [ 2042.147818][T14353] Node 0 DMA32 free:936552kB boost:34816kB min:69032kB low:77584kB high:86136kB reserved_highatomic:2048KB free_highatomic:1368KB active_anon:301452kB inactive_anon:68kB active_file:57656kB inactive_file:74952kB unevictable:106840kB writepending:236kB present:3129332kB managed:2555588kB mlocked:0kB bounce:0kB free_pcp:38304kB local_pcp:18424kB free_cma:0kB [ 2042.179903][T10559] rss 0 [ 2042.181638][T14353] lowmem_reserve[]: 0 0 1 1 1 [ 2042.188865][T14353] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:96kB inactive_anon:0kB active_file:288kB inactive_file:716kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2042.194744][T10559] rss_huge 0 [ 2042.218574][T14353] lowmem_reserve[]: 0 0 0 0 0 [ 2042.225978][T14353] Node 1 Normal free:3880900kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:26624KB free_highatomic:26624KB active_anon:0kB inactive_anon:0kB active_file:8196kB inactive_file:19188kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2042.251118][T10559] shmem 310263808 [ 2042.257903][T14353] lowmem_reserve[]: 0 0 0 0 0 [ 2042.266241][T14353] Node 0 DMA: 11*4kB (U) 9*8kB (U) 5*16kB (U) 4*32kB (U) 4*64kB (U) 3*128kB (U) 2*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (U) 2*4096kB (UM) = 12228kB [ 2042.281640][T14353] Node 0 DMA32: 258*4kB (EH) 336*8kB (EH) 2271*16kB (UEH) 6073*32kB (UMEH) 3729*64kB (UEH) 1351*128kB (UEH) 585*256kB (UMEH) 213*512kB (UMH) 31*1024kB (UM) 0*2048kB 0*4096kB = 936536kB [ 2042.300134][T14353] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 2042.303177][T10559] mapped_file 0 [ 2042.312068][T14353] Node 1 Normal: 283*4kB (UME) 131*8kB (UME) 176*16kB (UME) 308*32kB (UME) 215*64kB (UME) 142*128kB (UME) 121*256kB (UME) 112*512kB (UME) 102*1024kB (UME) 98*2048kB (UMH) 840*4096kB (UMH) = 3880900kB [ 2042.337276][T14353] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.339954][T10559] dirty 0 [ 2042.346979][T14353] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=2 hugepages_size=2048kB [ 2042.350309][T10559] writeback 0 [ 2042.362875][T14353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2042.369096][T10559] workingset_refault_anon 10940 [ 2042.377679][T10559] workingset_refault_file 5558 [ 2042.378127][T14353] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2042.383492][T10559] swap 364544 [ 2042.394262][T14353] 133591 total pagecache pages [ 2042.400146][T10559] swapcached 0 [ 2042.402562][T14353] 40 pages in swap cache [ 2042.407883][T10559] pgpgin 1411896 [ 2042.408339][T14353] Free swap = 122360kB [ 2042.415980][T14353] Total swap = 124996kB [ 2042.431093][T14353] 2097051 pages RAM [ 2042.439659][T10559] pgpgout 1354678 [ 2042.445636][T10559] pgfault 648886 [ 2042.449277][T10559] pgmajfault 38017 [ 2042.453009][T10559] inactive_anon 0 [ 2042.461382][T14353] 0 pages HighMem/MovableOnly [ 2042.466563][T14353] 426256 pages reserved [ 2042.469682][T10559] active_anon 154148864 [ 2042.471481][T14353] 0 pages cma reserved [ 2042.477066][T10559] inactive_file 0 [ 2042.488745][T10559] active_file 0 [ 2042.492346][T10559] unevictable 156114944 [ 2042.497643][T10559] hierarchical_memory_limit 314572800 [ 2042.503102][T10559] hierarchical_memsw_limit 9223372036854771712 [ 2042.511068][T10559] total_cache 310263808 [ 2042.515244][T10559] total_rss 0 [ 2042.541863][T10559] total_rss_huge 0 [ 2042.545787][T10559] total_shmem 310263808 [ 2042.556574][T10559] total_mapped_file 0 [ 2042.560584][T10559] total_dirty 0 [ 2042.579549][T10559] total_writeback 0 [ 2042.600069][T10559] total_workingset_refault_anon 10940 [ 2042.623869][T10559] total_workingset_refault_file 5558 [ 2042.651188][T10559] total_swap 364544 [ 2042.666092][T10559] total_swapcached 0 [ 2042.673513][T10559] total_pgpgin 1411896 [ 2042.687058][T10559] total_pgpgout 1354678 [ 2042.699698][T10559] total_pgfault 648886 [ 2042.721895][T14367] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 2042.731703][T10559] total_pgmajfault 38017 [ 2042.742367][T10559] total_inactive_anon 0 [ 2042.746610][T10559] total_active_anon 154148864 [ 2042.751616][T14367] kvm: pic: level sensitive irq not supported [ 2042.751938][T14367] kvm: pic: non byte read [ 2042.762163][T10559] total_inactive_file 0 [ 2042.772948][T10559] total_active_file 0 [ 2042.783992][T10559] total_unevictable 156114944 [ 2042.795594][T14367] kvm: pic: level sensitive irq not supported [ 2042.795653][T14367] kvm: pic: non byte read [ 2042.806167][T10559] anon_cost 0 [ 2042.813957][T14367] kvm: pic: level sensitive irq not supported [ 2042.814016][T14367] kvm: pic: non byte read [ 2042.816115][T10559] file_cost 0 [ 2042.834989][T10559] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.10340,pid=14304,uid=0 [ 2042.867344][T10559] Memory cgroup out of memory: Killed process 14304 (syz.1.10340) total-vm:102008kB, anon-rss:1148kB, file-rss:23208kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 2043.398030][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2043.407378][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.414698][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.415826][ T1894] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 2043.651043][ T1894] usb 5-1: Using ep0 maxpacket: 8 [ 2043.659771][ T1894] usb 5-1: unable to get BOS descriptor or descriptor too short [ 2043.686816][ T1894] usb 5-1: config 190 has an invalid interface number: 42 but max is 0 [ 2043.706344][ T1894] usb 5-1: config 190 has an invalid descriptor of length 0, skipping remainder of the config [ 2043.725792][ T1894] usb 5-1: config 190 has no interface number 0 [ 2043.740109][ T1894] usb 5-1: config 190 interface 42 has no altsetting 0 [ 2043.770963][ T1894] usb 5-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=77.12 [ 2043.786389][ T1894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2043.806120][ T1894] usb 5-1: Product: syz [ 2043.810309][ T1894] usb 5-1: Manufacturer: syz [ 2043.822112][ T1894] usb 5-1: SerialNumber: syz [ 2043.913897][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.939870][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2043.969333][T14390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2043.980832][T14390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2044.039652][T14390] /dev/rnullb0: Can't lookup blockdev [ 2044.130822][ T1894] usb 5-1: USB disconnect, device number 95 [ 2044.351862][T14394] netlink: 'syz.5.10368': attribute type 13 has an invalid length. [ 2044.361578][T14394] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.767170][T14400] can: request_module (can-proto-0) failed. [ 2044.998029][ T1894] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 2045.155212][T14414] __nla_validate_parse: 26 callbacks suppressed [ 2045.155231][T14414] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10376'. [ 2045.175561][ T1894] usb 5-1: Using ep0 maxpacket: 32 [ 2045.183834][ T1894] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 2045.193558][T14414] netlink: 40 bytes leftover after parsing attributes in process `syz.5.10376'. [ 2045.203258][ T1894] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2045.211874][ T1894] usb 5-1: Product: syz [ 2045.224912][ T1894] usb 5-1: Manufacturer: syz [ 2045.229525][ T1894] usb 5-1: SerialNumber: syz [ 2045.239364][ T1894] usb 5-1: config 0 descriptor?? [ 2045.250168][ T1894] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 2045.323194][T14425] 9p: Bad value for 'rfdno' [ 2045.437409][T14427] block nbd3: shutting down sockets [ 2045.618595][ T30] audit: type=1804 audit(100486.924:15334): pid=14444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10387" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2045.874421][ T982] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2046.056112][ T982] usb 2-1: Using ep0 maxpacket: 32 [ 2046.070491][ T982] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 2046.078722][ T982] usb 2-1: config 0 has no interface number 0 [ 2046.084825][ T982] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2046.101867][ T982] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 2046.110980][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2046.118981][ T982] usb 2-1: Product: syz [ 2046.123408][ T982] usb 2-1: Manufacturer: syz [ 2046.128019][ T982] usb 2-1: SerialNumber: syz [ 2046.145793][ T982] usb 2-1: config 0 descriptor?? [ 2046.164341][ T982] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 2046.174166][ T982] em28xx 2-1:0.132: Video interface 132 found: [ 2046.349194][T14450] /dev/rnullb0: Can't lookup blockdev [ 2046.584254][ T982] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 2046.917744][T14465] /dev/rnullb0: Can't lookup blockdev [ 2047.034944][ T982] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 2047.064599][ T982] em28xx 2-1:0.132: board has no eeprom [ 2047.138905][ T982] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 2047.154042][ T982] em28xx 2-1:0.132: analog set to bulk mode. [ 2047.168324][ T24] em28xx 2-1:0.132: Registering V4L2 extension [ 2047.186056][ T982] usb 2-1: USB disconnect, device number 22 [ 2047.217648][ T982] em28xx 2-1:0.132: Disconnecting em28xx [ 2047.253404][ T1894] gspca_stk1135: reg_w 0x200 err -71 [ 2047.259860][ T1894] gspca_stk1135: serial bus timeout: status=0x00 [ 2047.285439][ T1894] gspca_stk1135: Sensor write failed [ 2047.290769][ T1894] gspca_stk1135: serial bus timeout: status=0x00 [ 2047.311388][ T24] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 2047.320885][ T24] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 2047.326908][ T1894] gspca_stk1135: Sensor write failed [ 2047.333557][ T1894] gspca_stk1135: serial bus timeout: status=0x00 [ 2047.340445][ T1894] gspca_stk1135: Sensor read failed [ 2047.346223][ T1894] gspca_stk1135: serial bus timeout: status=0x00 [ 2047.354213][ T1894] gspca_stk1135: Sensor read failed [ 2047.356706][ T24] em28xx 2-1:0.132: No AC97 audio processor [ 2047.359425][ T1894] gspca_stk1135: Detected sensor type unknown (0x0) [ 2047.359462][ T1894] gspca_stk1135: serial bus timeout: status=0x00 [ 2047.386820][ T1894] gspca_stk1135: Sensor read failed [ 2047.387989][ T24] usb 2-1: Decoder not found [ 2047.392061][ T1894] gspca_stk1135: serial bus timeout: status=0x00 [ 2047.405917][ T1894] gspca_stk1135: Sensor read failed [ 2047.411189][ T1894] gspca_stk1135: serial bus timeout: status=0x00 [ 2047.414146][ T24] em28xx 2-1:0.132: failed to create media graph [ 2047.418165][ T1894] gspca_stk1135: Sensor write failed [ 2047.431814][ T1894] gspca_stk1135: serial bus timeout: status=0x00 [ 2047.434756][ T24] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 2047.438710][ T1894] gspca_stk1135: Sensor write failed [ 2047.454840][ T24] em28xx 2-1:0.132: Remote control support is not available for this card. [ 2047.456288][ T1894] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 2047.474396][ T982] em28xx 2-1:0.132: Closing input extension [ 2047.477873][ T1894] usb 5-1: USB disconnect, device number 96 [ 2047.499559][ T982] em28xx 2-1:0.132: Freeing device [ 2047.634690][ T30] audit: type=1804 audit(100488.804:15335): pid=14479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10399" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2047.661983][ T30] audit: type=1326 audit(100488.832:15336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14476 comm="syz.1.10399" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f138e58ebe9 code=0x0 [ 2048.108663][ T982] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 2048.230680][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10401'. [ 2048.272405][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 2048.288455][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2048.313833][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2048.326907][ T982] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 2048.339923][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2048.355024][ T982] usb 5-1: config 0 descriptor?? [ 2048.802797][ T982] hid-multitouch 0003:1FD2:6007.0051: item fetching failed at offset 1/5 [ 2048.815523][ T982] hid-multitouch 0003:1FD2:6007.0051: probe with driver hid-multitouch failed with error -22 [ 2048.835408][ T1894] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2048.995776][ T1894] usb 2-1: Using ep0 maxpacket: 8 [ 2049.002488][ T1894] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2049.012891][ T1894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2049.018553][T14482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.023474][ T1894] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2049.042465][ T1894] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2049.054170][T14482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.056581][ T1894] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2049.072560][ T1894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2049.304268][ T1894] usb 2-1: GET_CAPABILITIES returned 0 [ 2049.308209][T14492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.316610][ T1894] usbtmc 2-1:16.0: can't read capabilities [ 2049.318922][ T982] usb 5-1: USB disconnect, device number 97 [ 2049.330197][T14492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.382481][ T24] usb 2-1: USB disconnect, device number 23 [ 2049.451663][ T30] audit: type=1804 audit(100490.507:15337): pid=14501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10407" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2049.483877][T14503] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2049.491093][T14507] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2049.503538][T14507] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 2049.510081][T14507] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2049.519020][T14507] vhci_hcd vhci_hcd.0: Device attached [ 2049.525887][T14501] ALSA: seq fatal error: cannot create timer (-19) [ 2049.597139][T14508] vhci_hcd: connection closed [ 2049.597346][ T1895] vhci_hcd: stop threads [ 2049.607422][ T1895] vhci_hcd: release socket [ 2049.611933][ T1895] vhci_hcd: disconnect device [ 2049.643795][T14520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.653049][T14520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.669345][T14520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.678601][T14520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2049.688888][T14520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2049.697522][T14520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2050.182479][T14310] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2050.361587][T14310] usb 2-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice=c5.77 [ 2050.377980][T14310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2050.388313][T14310] usb 2-1: Product: syz [ 2050.392782][T14310] usb 2-1: Manufacturer: syz [ 2050.401372][T14310] usb 2-1: SerialNumber: syz [ 2050.410802][T14552] /dev/rnullb0: Can't lookup blockdev [ 2050.416779][T14310] usb 2-1: config 0 descriptor?? [ 2050.431115][T14551] /dev/rnullb0: Can't lookup blockdev [ 2050.445014][T14310] usb 2-1: disable ehci-hcd to run US-144 [ 2050.679367][ T2075] usb 2-1: USB disconnect, device number 24 [ 2051.058869][ T24] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 2051.229936][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 2051.239366][ T24] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 2051.249142][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2051.267975][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2051.279208][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2051.291011][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2051.299612][ T24] usb 5-1: Product: syz [ 2051.303909][ T24] usb 5-1: Manufacturer: syz [ 2051.310978][ T24] usb 5-1: SerialNumber: syz [ 2051.332007][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10425'. [ 2051.341072][T14569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10425'. [ 2051.362092][T14571] ubi: mtd0 is already attached to ubi7 [ 2051.439384][T14577] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2051.449519][T14577] XFS (loop1): SB validate failed with error -5. [ 2051.462188][T14577] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 2051.473067][T14577] XFS (loop1): SB validate failed with error -5. [ 2051.629066][ T30] audit: type=1804 audit(100492.546:15338): pid=14597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10432" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2051.748195][T14605] /dev/rnullb0: Can't lookup blockdev [ 2051.778430][ T24] usb 5-1: 0:2 : does not exist [ 2051.793846][ T24] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 2051.818210][ T24] usb 5-1: USB disconnect, device number 98 [ 2051.843959][T14603] /dev/rnullb0: Can't lookup blockdev [ 2051.853026][T14610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2051.873747][ T2206] udevd[2206]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2051.875904][T14610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2052.052021][T14614] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2052.059534][T14614] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2052.090751][ T30] audit: type=1326 audit(100492.976:15339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14493 comm="syz.5.10405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f243318ebe9 code=0x7fc00000 [ 2052.094062][T14616] /dev/rnullb0: Can't lookup blockdev [ 2052.154323][T14618] /dev/rnullb0: Can't lookup blockdev [ 2052.283315][T14628] netlink: 'syz.5.10445': attribute type 10 has an invalid length. [ 2052.291584][T14631] batadv_slave_0: entered promiscuous mode [ 2052.301280][T14628] team0: Device tunl0 is of different type [ 2052.327831][T14632] batadv_slave_0: left promiscuous mode [ 2052.343315][ T30] audit: type=1804 audit(100493.210:15340): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10447" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2052.552794][T14651] 9pnet: p9_errstr2errno: server reported unknown error [ 2052.648820][T14664] can0: slcan on ptm0. [ 2052.783969][T14670] /dev/rnullb0: Can't lookup blockdev [ 2052.822861][ T2075] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 2052.838015][T14659] can0 (unregistered): slcan off ptm0. [ 2052.993731][ T2075] usb 2-1: Using ep0 maxpacket: 16 [ 2053.002754][ T2075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2053.041036][ T2075] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2053.083259][ T2075] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2053.146829][ T2075] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2053.167050][ T2075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2053.198028][ T2075] usb 2-1: config 0 descriptor?? [ 2053.298841][T14701] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2053.312308][T14701] /dev/rnullb0: Can't lookup blockdev [ 2053.333465][T14706] /dev/rnullb0: Can't lookup blockdev [ 2053.561772][ T30] audit: type=1804 audit(100494.351:15341): pid=14722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10469" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2053.646348][T14727] (syz.5.10470,14727,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 2053.688724][T14728] (syz.5.10470,14728,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 2053.739697][T14738] [U]  [ 2053.742497][T14738] [U] K{ [ 2053.745533][T14738] [U] t 1ŠFfˊ`GJgo/mC [ 2053.752484][T14738] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 2053.768028][T14738] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 2053.778465][T14738] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 2053.814091][T14738] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 2053.837615][T14738] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 2053.848723][T14738] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 2053.860265][T14738] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 2053.983398][T14738] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 2053.991929][T14738] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 2053.997025][T14643] netlink: 'syz.1.10450': attribute type 21 has an invalid length. [ 2054.005485][T14738] [U] 22Ʃx?0;3u [ 2054.005510][T14738] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 2054.005535][T14738] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 2054.005550][T14738] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 2054.005562][T14738] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 2054.005578][T14738] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 2054.005590][T14738] [U] ec [ 2054.005603][T14738] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 2054.005649][ C1] vkms_vblank_simulate: vblank timer overrun [ 2054.100197][ C1] vkms_vblank_simulate: vblank timer overrun [ 2054.107767][T14643] netlink: 388 bytes leftover after parsing attributes in process `syz.1.10450'. [ 2054.216625][T14738] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 2054.319648][T14753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2054.328257][T14753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2054.366678][T14757] /dev/rnullb0: Can't lookup blockdev [ 2054.387686][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10476'. [ 2054.937389][ T1918] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2054.945374][T14768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10482'. [ 2054.991347][T14768] sctp: [Deprecated]: syz.5.10482 (pid 14768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2054.991347][T14768] Use struct sctp_sack_info instead [ 2055.035824][T14768] netlink: 60 bytes leftover after parsing attributes in process `syz.5.10482'. [ 2055.102839][T14768] netlink: 52 bytes leftover after parsing attributes in process `syz.5.10482'. [ 2055.121404][T14768] netlink: 'syz.5.10482': attribute type 1 has an invalid length. [ 2055.143447][T14770] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2055.851008][T14777] fuse: Bad value for 'fd' [ 2055.930042][T14781] /dev/rnullb0: Can't lookup blockdev [ 2056.280082][T14796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2056.307956][T14796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.120916][T14805] /dev/rnullb0: Can't lookup blockdev [ 2057.533340][T14819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2057.559070][T14819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2057.834058][ T2075] usbhid 2-1:0.0: can't add hid device: -71 [ 2057.862735][ T2075] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2057.877084][ T2075] usb 2-1: USB disconnect, device number 25 [ 2060.177030][ T2075] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2060.326646][ T2075] usb 2-1: device descriptor read/64, error -71 [ 2060.604499][ T2075] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2060.754940][ T2075] usb 2-1: device descriptor read/64, error -71 [ 2060.790768][T14860] tipc: Enabling of bearer rejected, failed to enable media [ 2060.823344][T14862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2060.836015][T14862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2060.893327][ T2075] usb usb2-port1: attempt power cycle [ 2061.256565][ T2075] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2061.278419][ T2075] usb 2-1: device descriptor read/8, error -71 [ 2061.424497][ T30] audit: type=1804 audit(100501.704:15342): pid=14870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.10516" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2061.535420][ T2075] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2061.557754][ T2075] usb 2-1: device descriptor read/8, error -71 [ 2061.684395][ T2075] usb usb2-port1: unable to enumerate USB device [ 2061.784760][T14875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2061.794818][T14875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2063.307396][ T24] Process accounting resumed [ 2064.213932][T14919] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10531'. [ 2064.299534][T14924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2064.314313][T14924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2064.987464][ T30] audit: type=1326 audit(100505.044:15343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14933 comm="syz.5.10536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f243318ebe9 code=0x0 [ 2065.673372][T14964] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 2065.697894][T14964] PKCS7: Only support pkcs7_signedData type [ 2065.715542][T14964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10547'. [ 2066.588548][T14900] Process accounting resumed [ 2066.753439][T14988] MTD: Couldn't look up '/dev/rnullb0': -15 [ 2067.024026][T15004] /dev/rnullb0: Can't lookup blockdev [ 2067.114421][ T1894] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 2067.276272][ T1894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 2067.289151][ T1894] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2067.301089][ T1894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 2067.315285][ T1894] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2067.324787][ T1894] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2067.333280][ T1894] usb 2-1: Product: syz [ 2067.337610][ T1894] usb 2-1: Manufacturer: syz [ 2067.342576][ T1894] usb 2-1: SerialNumber: syz [ 2067.348818][ T1894] usb 2-1: config 0 descriptor?? [ 2067.354843][T14994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2067.362475][T14994] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2067.370578][ T1894] usb 2-1: ucan: probing device on interface #0 [ 2067.495602][T14924] orangefs_mount: mount request failed with -4 [ 2067.536780][T15006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2067.548963][T15006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2067.719924][T15010] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2067.727319][T15012] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 2068.138167][ T1894] usb 2-1: ucan: failed to retrieve device info [ 2068.150779][ T1894] usb 2-1: ucan: probe failed; try to update the device firmware [ 2068.165246][ T1894] usb 2-1: USB disconnect, device number 30 [ 2069.051385][T15075] Option ' ' to dns_resolver key: bad/missing value [ 2069.063856][T15075] /dev/rnullb0: Can't lookup blockdev [ 2069.402022][ T982] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 2069.576242][ T982] usb 2-1: config 9 has an invalid interface number: 88 but max is 1 [ 2069.584400][ T982] usb 2-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 2069.593091][ T982] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 2069.603450][ T982] usb 2-1: config 9 has no interface number 1 [ 2069.618627][ T982] usb 2-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2069.639768][ T982] usb 2-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 2069.664727][ T982] usb 2-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 2069.677304][ T982] usb 2-1: config 9 interface 88 has no altsetting 0 [ 2069.688835][ T982] usb 2-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 2069.720701][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2069.730599][ T982] usb 2-1: Product: syz [ 2069.735037][ T982] usb 2-1: Manufacturer: syz [ 2069.739945][ T982] usb 2-1: SerialNumber: syz [ 2070.028926][ T30] audit: type=1804 audit(100509.759:15344): pid=15076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10589" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2070.436760][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10596'. [ 2070.761361][ T30] audit: type=1326 audit(100510.433:15345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15005 comm="syz.3.10563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa42538ebe9 code=0x7fc00000 [ 2070.785303][T15103] Invalid ELF header magic: != ELF [ 2070.792754][T15103] Invalid ELF header magic: != ELF [ 2071.108825][T15111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2071.131724][ T1897] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2071.139182][ T1897] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2071.147210][ T1897] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2071.154897][ T1897] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2071.160563][T15111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2071.172822][ T1897] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2071.218561][T15113] wlan1 speed is unknown, defaulting to 1000 [ 2071.317884][T15113] lo speed is unknown, defaulting to 1000 [ 2071.354039][T15121] 9p: Bad value for 'rfdno' [ 2071.484168][T15123] syzkaller1: entered promiscuous mode [ 2071.490147][T15123] syzkaller1: entered allmulticast mode [ 2071.715312][T15140] binder: 15138:15140 ioctl c0306201 200000000080 returned -14 [ 2071.727632][T15113] chnl_net:caif_netlink_parms(): no params data found [ 2071.896278][T15113] bridge0: port 1(bridge_slave_0) entered blocking state [ 2071.907442][T15113] bridge0: port 1(bridge_slave_0) entered disabled state [ 2071.917049][T15113] bridge_slave_0: entered allmulticast mode [ 2071.924345][T15113] bridge_slave_0: entered promiscuous mode [ 2071.939527][T15113] bridge0: port 2(bridge_slave_1) entered blocking state [ 2071.951869][T15113] bridge0: port 2(bridge_slave_1) entered disabled state [ 2071.959665][T15113] bridge_slave_1: entered allmulticast mode [ 2071.966909][T15113] bridge_slave_1: entered promiscuous mode [ 2072.045068][T15113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2072.068881][ T30] audit: type=1326 audit(100511.668:15346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15155 comm="syz.3.10618" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa42538ebe9 code=0x0 [ 2072.079213][T15113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2072.130285][T15113] team0: Port device team_slave_0 added [ 2072.138753][T15113] team0: Port device team_slave_1 added [ 2072.164281][T15113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2072.171464][T15113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2072.199494][T15113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2072.235860][ T982] qmi_wwan 2-1:9.88: skipping garbage [ 2072.236922][T15113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2072.262260][T15113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2072.267084][ T982] qmi_wwan 2-1:9.88: probe with driver qmi_wwan failed with error -22 [ 2072.312613][T15113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2072.326563][ T982] usb 2-1: USB disconnect, device number 31 [ 2072.400841][ T30] audit: type=1804 audit(100511.976:15347): pid=15163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.10620" name="/newroot/dev/rnullb0" dev="devtmpfs" ino=4574 res=1 errno=0 [ 2072.436572][T15113] hsr_slave_0: entered promiscuous mode [ 2072.444031][T15113] hsr_slave_1: entered promiscuous mode [ 2072.450521][T15113] debugfs: 'hsr0' already exists in 'hsr' [ 2072.456319][T15113] Cannot create hsr debugfs directory [ 2072.955533][T15113] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2072.972668][ T982] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2072.992095][T15113] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2073.018074][T15113] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2073.042947][T15113] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2073.188788][ T982] usb 2-1: Using ep0 maxpacket: 8 [ 2073.200880][ T982] usb 2-1: config 5 has an invalid interface number: 151 but max is 0 [ 2073.221091][ T982] usb 2-1: config 5 has no interface number 0 [ 2073.238255][ T982] usb 2-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=1e.b5 [ 2073.269899][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2073.281921][T15113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2073.300023][ T982] usb 2-1: Product: syz [ 2073.307857][ T982] usb 2-1: Manufacturer: syz [ 2073.312614][ T982] usb 2-1: SerialNumber: syz [ 2073.359493][T15113] 8021q: adding VLAN 0 to HW filter on device team0 [ 2073.399928][ T1897] Bluetooth: hci0: command tx timeout [ 2073.402176][ T4459] bridge0: port 1(bridge_slave_0) entered blocking state [ 2073.412445][ T4459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2073.493878][ T4459] bridge0: port 2(bridge_slave_1) entered blocking state [ 2073.501025][ T4459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2073.563025][T15172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2073.594943][T15172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2073.621659][T15228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2073.654973][T15228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2073.700018][ T982] usb 2-1: USB disconnect, device number 32 [ 2073.825246][T15113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2074.070901][T15113] veth0_vlan: entered promiscuous mode [ 2074.086245][T15113] veth1_vlan: entered promiscuous mode [ 2074.110765][T15113] veth0_macvtap: entered promiscuous mode [ 2074.121626][T15113] veth1_macvtap: entered promiscuous mode [ 2074.145473][T15113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2074.168131][T15113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2074.187773][T11461] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.206364][T11461] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.226534][T11461] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.249585][T11461] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2074.321356][ T1895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.329218][ T1895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.369567][T11461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2074.380603][T11461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2074.813588][ T2075] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 2074.992535][ T2075] usb 10-1: Using ep0 maxpacket: 8 [ 2075.004666][ T2075] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2075.029747][ T2075] usb 10-1: New USB device found, idVendor=1b1c, idProduct=1b25, bcdDevice= 0.00 [ 2075.052814][ T2075] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2075.068898][ T2075] usb 10-1: config 0 descriptor?? [ 2075.517173][ T2075] hid-corsair-void 0003:1B1C:1B25.0052: item fetching failed at offset 0/1 [ 2075.528985][ T2075] hid-corsair-void 0003:1B1C:1B25.0052: parse failed (reason: -22) [ 2075.540040][ T2075] hid-corsair-void 0003:1B1C:1B25.0052: probe with driver hid-corsair-void failed with error -22 [ 2075.623435][ T1897] Bluetooth: hci0: command tx timeout [ 2075.730580][ T982] usb 10-1: USB disconnect, device number 4 [ 2077.846620][ T1897] Bluetooth: hci0: command tx timeout [ 2080.070079][ T1897] Bluetooth: hci0: command tx timeout [ 2109.062868][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2109.072648][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2109.078939][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2174.742190][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2174.751265][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2174.757621][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2198.862153][ T1918] Bluetooth: hci2: command 0x0406 tx timeout [ 2204.324548][ T1918] Bluetooth: hci0: command 0x0406 tx timeout [ 2224.377554][T14310] usb 4-1: USB disconnect, device number 44 [ 2224.973921][T13862] syz_tun (unregistering): left allmulticast mode [ 2224.981324][T13862] bond0: (slave syz_tun): Releasing backup interface [ 2225.015283][ T1901] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.165500][ T1901] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.238700][ T1901] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.294659][ T1901] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2225.431588][ T1901] bridge_slave_1: left allmulticast mode [ 2225.438372][ T1901] bridge_slave_1: left promiscuous mode [ 2225.444052][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 2225.453723][ T1901] bridge_slave_0: left allmulticast mode [ 2225.459944][ T1901] bridge_slave_0: left promiscuous mode [ 2225.465594][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2225.614690][ T1901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2225.662407][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2225.705721][ T1901] bond0 (unregistering): Released all slaves [ 2226.214137][ T1901] hsr_slave_0: left promiscuous mode [ 2226.220297][ T1901] hsr_slave_1: left promiscuous mode [ 2226.226065][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2226.240165][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2226.256052][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2226.264123][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2226.275537][ T1901] veth1_macvtap: left promiscuous mode [ 2226.281305][ T1901] veth0_macvtap: left promiscuous mode [ 2226.286877][ T1901] veth1_vlan: left promiscuous mode [ 2226.295112][ T1901] veth0_vlan: left promiscuous mode [ 2226.463621][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 2226.479385][ T1901] team0 (unregistering): Port device team_slave_0 removed [ 2227.493331][ T1901] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.549552][ T1901] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.590775][ T1901] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.647101][ T1901] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.816942][ T1901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.860075][ T1901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2227.954460][ T1901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.008178][ T1901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.148832][ T1901] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.170936][ T1901] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.223133][ T1901] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.274390][ T1901] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2228.489003][ T1901] bridge_slave_1: left allmulticast mode [ 2228.497080][ T1901] bridge_slave_1: left promiscuous mode [ 2228.502804][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.513254][ T1901] bridge_slave_0: left allmulticast mode [ 2228.523449][ T1901] bridge_slave_0: left promiscuous mode [ 2228.529525][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.541366][ T1901] bridge_slave_1: left allmulticast mode [ 2228.548370][ T1901] bridge_slave_1: left promiscuous mode [ 2228.554018][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.562589][ T1901] bridge_slave_0: left allmulticast mode [ 2228.568681][ T1901] bridge_slave_0: left promiscuous mode [ 2228.574392][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.583649][ T1901] bridge_slave_1: left allmulticast mode [ 2228.589318][ T1901] bridge_slave_1: left promiscuous mode [ 2228.595472][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 2228.604011][ T1901] bridge_slave_0: left allmulticast mode [ 2228.609663][ T1901] bridge_slave_0: left promiscuous mode [ 2228.615710][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2228.929433][ T1901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2228.965494][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2229.007286][ T1901] bond0 (unregistering): Released all slaves [ 2229.082251][ T1901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2229.115080][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2229.146236][ T1901] bond0 (unregistering): Released all slaves [ 2229.217220][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2229.254995][ T1901] bond0 (unregistering): Released all slaves [ 2229.337144][ T1901] tipc: Left network mode [ 2230.423514][ T1901] hsr_slave_0: left promiscuous mode [ 2230.435612][ T1901] hsr_slave_1: left promiscuous mode [ 2230.447624][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2230.455101][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2230.463625][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2230.471097][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2230.480979][ T1901] hsr_slave_0: left promiscuous mode [ 2230.487747][ T1901] hsr_slave_1: left promiscuous mode [ 2230.494266][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2230.501636][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2230.510327][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2230.518343][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2230.529221][ T1901] hsr_slave_0: left promiscuous mode [ 2230.535091][ T1901] hsr_slave_1: left promiscuous mode [ 2230.540752][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2230.548266][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2230.555856][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2230.563477][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2230.577173][ T1901] veth1_macvtap: left promiscuous mode [ 2230.583643][ T1901] veth0_macvtap: left promiscuous mode [ 2230.589394][ T1901] veth1_vlan: left promiscuous mode [ 2230.594650][ T1901] veth0_vlan: left promiscuous mode [ 2230.601725][ T1901] veth1_macvtap: left promiscuous mode [ 2230.607236][ T1901] veth0_macvtap: left promiscuous mode [ 2230.612848][ T1901] veth1_vlan: left promiscuous mode [ 2230.618119][ T1901] veth0_vlan: left promiscuous mode [ 2230.624441][ T1901] veth1_macvtap: left promiscuous mode [ 2230.629991][ T1901] veth0_macvtap: left promiscuous mode [ 2230.635647][ T1901] veth1_vlan: left promiscuous mode [ 2230.640872][ T1901] veth0_vlan: left promiscuous mode [ 2230.849912][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 2230.862078][ T1901] team0 (unregistering): Port device team_slave_0 removed [ 2230.981781][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 2230.998957][ T1901] team0 (unregistering): Port device team_slave_0 removed [ 2231.051406][ T1901] vcan0 (unregistering): left allmulticast mode [ 2231.119667][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 2231.131485][ T1901] team0 (unregistering): Port device team_slave_0 removed [ 2240.417070][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2240.426985][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2240.433347][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2306.090487][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2306.099520][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2306.105792][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2371.777268][ T1303] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 2371.786482][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 2371.792749][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 2371.993673][ T1901] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.057999][ T1901] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.099868][ T1901] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.153168][ T1901] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2372.286484][ T1901] bridge_slave_1: left allmulticast mode [ 2372.296921][ T1901] bridge_slave_1: left promiscuous mode [ 2372.305558][ T1901] bridge0: port 2(bridge_slave_1) entered disabled state [ 2372.314624][ T1901] bridge_slave_0: left allmulticast mode [ 2372.321620][ T1901] bridge_slave_0: left promiscuous mode [ 2372.327288][ T1901] bridge0: port 1(bridge_slave_0) entered disabled state [ 2372.434547][ T1901] bridge0 (unregistering): left allmulticast mode [ 2372.538210][ T1901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2372.567622][ T1901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2372.588856][ T1901] bond0 (unregistering): Released all slaves [ 2372.643201][ T1901] tipc: Disabling bearer [ 2372.648624][ T1901] tipc: Left network mode [ 2373.141892][ T1901] hsr_slave_0: left promiscuous mode [ 2373.147789][ T1901] hsr_slave_1: left promiscuous mode [ 2373.153682][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2373.161972][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2373.169756][ T1901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2373.181245][ T1901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2373.192555][ T1901] veth1_macvtap: left promiscuous mode [ 2373.198961][ T1901] veth0_macvtap: left promiscuous mode [ 2373.204551][ T1901] veth1_vlan: left promiscuous mode [ 2373.211639][ T1901] veth0_vlan: left promiscuous mode [ 2373.353366][ T1901] team0 (unregistering): Port device team_slave_1 removed [ 2373.365393][ T1901] team0 (unregistering): Port device team_slave_0 removed