last executing test programs: 5m19.600463123s ago: executing program 0 (id=89): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2c0a00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) capget(&(0x7f0000000040)={0x19980330}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x2, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r3 = timerfd_create(0x7, 0x0) timerfd_settime(r3, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r3, &(0x7f0000000200)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r6, 0x400c4808, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) r7 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCRTMSG(r7, 0x890d, 0x0) r8 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) pidfd_getfd(r8, r3, 0x0) 5m19.0168448s ago: executing program 0 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = syz_open_dev$sndctrl(&(0x7f0000000740), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0x80dc5521, 0xffffffffffffffff) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f0000003540)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10461afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0xe, 0x1, 'IDLETIMER\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r3, &(0x7f0000000200)=""/251, 0xfb) (async) getdents(r3, &(0x7f0000000200)=""/251, 0xfb) lseek(r3, 0x4, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendfile(r4, r4, 0x0, 0x7ffff000) 5m18.176624948s ago: executing program 0 (id=96): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000000)="cb5c6cef", 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x5, &(0x7f0000000000)="cb5c6cef", 0x4) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (async) 5m17.908965587s ago: executing program 0 (id=98): r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000080)={0x0, 0x31324d59}) (async) r1 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x10080, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, r2, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8}, {0x6, 0x11, 0x9b9}, {0x8}}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x4804) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r4 = socket(0xa, 0x1, 0x96b6) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, 0x0, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x0, @random="60ece51cd3dd", 'syz_tun\x00'}}, 0x1e) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 5m17.807831526s ago: executing program 0 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000100)) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) lremovexattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140)=@random={'trusted.', '\\]\xd7P/%$\x95%}\x00'}) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) setxattr$incfs_metadata(&(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000300), &(0x7f0000000440)="c803a7948031dcb3de4655714ae363109dc20cfb38eef2394e1211c07b74528b0766ed7fca065039d6ed62979e8e30861de5d9c0c672e45b0a7ffe5bea1b89a6293e007dac6f12f418f38c22ee5ed200b72af3740292ed3c3dcf2d139404ed5bfed7e568271516cea7e55a426d9ef0724383b8fa5a2d2c3e279f3af84ea6", 0x7e, 0x2) (async) gettid() (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) timer_create(0x6, &(0x7f0000533fa0)={0x0, 0x22, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2, 0x81, 0x0, 0x0, 0x4}) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x20080, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x87}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) ioctl$TCSETSW2(r3, 0x5453, 0x0) (async) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 5m17.71398399s ago: executing program 0 (id=101): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) sendto$inet(r0, &(0x7f0000000380)="c01b38993b43e01d350361656974f8b5a9452dd314f4db0936c7f81582aa3f0de3cb0b9d41cc7a378f31504b2808fc71302a66c41a326fefbc15f984c471a3986a87e322d9d3f1a08eeabf58fe46ab56de2ecfa942f59cb7b81fb24c3d9c9437f3872d9e27bd40fdde5dc1854d8f532e258c5a70ff5fb0bd11852f88ba397808e9025aad8c8b0c80e63c1de661dec744c29a376e1dfc5ba43194f9f5", 0x9c, 0x2404c081, &(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x882427) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) (async) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x44000840) (async) r4 = dup(r3) recvmmsg$unix(r4, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000062, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x5}) r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x0) getpeername$unix(r5, &(0x7f0000000180), &(0x7f0000000200)=0x6e) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) recvmsg(r3, &(0x7f0000000940)={&(0x7f00000004c0)=@rc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f00000007c0)=""/201, 0xc9}], 0x5}, 0x0) getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000000000)) (async) write$P9_RLINK(r0, &(0x7f0000000980)={0x7, 0x47, 0x2}, 0x7) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a00000001090222006d49b17f0009040000000e010000082403"], 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000300)={0x1f, @none}, 0x8) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000001b010100000000000000000500000a0900010073797a300000000048000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031400048008000242000000120800014000000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 5m2.237937685s ago: executing program 32 (id=101): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) sendto$inet(r0, &(0x7f0000000380)="c01b38993b43e01d350361656974f8b5a9452dd314f4db0936c7f81582aa3f0de3cb0b9d41cc7a378f31504b2808fc71302a66c41a326fefbc15f984c471a3986a87e322d9d3f1a08eeabf58fe46ab56de2ecfa942f59cb7b81fb24c3d9c9437f3872d9e27bd40fdde5dc1854d8f532e258c5a70ff5fb0bd11852f88ba397808e9025aad8c8b0c80e63c1de661dec744c29a376e1dfc5ba43194f9f5", 0x9c, 0x2404c081, &(0x7f0000000480)={0x2, 0x4e21, @loopback}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x882427) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000140)=0x6, 0x4) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='batadv_slave_0\x00', 0x10) (async) sendmmsg$inet(r3, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}}], 0x1, 0x44000840) (async) r4 = dup(r3) recvmmsg$unix(r4, &(0x7f0000003fc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000062, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x200, 0x10001, 0xffffffffffffffff, 0x8, 0x2, 0x200, 0x4, 0x2c, 0x80000005, 0x5}) r5 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e, 0x0) getpeername$unix(r5, &(0x7f0000000180), &(0x7f0000000200)=0x6e) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) recvmsg(r3, &(0x7f0000000940)={&(0x7f00000004c0)=@rc, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000540)=""/156, 0x9c}, {&(0x7f0000000600)=""/169, 0xa9}, {&(0x7f00000006c0)=""/160, 0xa0}, {&(0x7f0000000780)=""/44, 0x2c}, {&(0x7f00000007c0)=""/201, 0xc9}], 0x5}, 0x0) getsockopt$packet_int(r6, 0x107, 0xc, 0x0, &(0x7f0000000000)) (async) write$P9_RLINK(r0, &(0x7f0000000980)={0x7, 0x47, 0x2}, 0x7) syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092e1300833280102d52a00000001090222006d49b17f0009040000000e010000082403"], 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000300)={0x1f, @none}, 0x8) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000001b010100000000000000000500000a0900010073797a300000000048000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000031400048008000242000000120800014000000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 3m33.110681627s ago: executing program 3 (id=775): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x32, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}}, {{0xa, 0x0, 0x20000002, @rand_addr=' \x01\x00'}}}, 0x108) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r2, 0x0, 0x4, 0x3}) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'user.', '/dev/rnullb0\x00'}, &(0x7f00000002c0)=""/146, 0x92) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x32, &(0x7f0000000c00)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}}}, {{0xa, 0x0, 0x20000002, @rand_addr=' \x01\x00'}}}, 0x108) (async) syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x5, 0x1, 0x7}) (async) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000001c0)={r2, 0x0, 0x4, 0x3}) (async) lgetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'user.', '/dev/rnullb0\x00'}, &(0x7f00000002c0)=""/146, 0x92) (async) 3m33.046703043s ago: executing program 3 (id=776): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r1) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="5ad581b6884ae4f535ac34f22f4cb541daf3196391283ad7d7133c0105c59815f51e12a7cac697acb2d729313c7d06b446410740f656c592e0e5eeb0fa5cbf2b3006ea27e6545cc781e7c35479eec49cdbe015bbffb26fb5af06f201040000fefdcc3869ee6625840d8b7175e262e50eb6055f80672ea688c951cc0157667f0abd47cd3b96e0a7ab2c926ba1fa10f13772d6431931cb31ec6bd5a7f47daf0c30c44924be6678b22b76385d044078fcc077b77b3cfc8af85e32c893d8053a6789680985d0008aee159bc4345af4409ae227c044a4da3a723a9bb2d096f7a3c0435f7bb3964cf54947e2a541b73456c5", @ANYRES16=r2, @ANYBLOB="010026bd7000fddbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x1, 0x106) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000040), 0x4) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x3}, 0x80, 0x0}, 0xe07e872420dfefca) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0xee594000) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) r6 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0xb2c, &(0x7f0000001c80)={{0x12, 0x1, 0x110, 0x33, 0x43, 0x44, 0xff, 0x1058, 0x704, 0x3c7c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1a, 0x4, 0x87, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0xf7, 0x5, 0xf, 0xc0, 0x49, 0x95, 0xc0, [@uac_control={{0xa, 0x24, 0x1, 0x1, 0x9}, [@mixer_unit={0x7, 0x24, 0x4, 0x5, 0x0, "7f9d"}, @mixer_unit={0xb, 0x24, 0x4, 0x3, 0xe7, "e7d6d46a675e"}]}], [{{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xab, 0x401}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x2, 0x42, 0x4, [@generic={0xcf, 0x21, "bbe681816e42a01cb2826b5db2ec439f03ed0ba08b6986afdfbc0b72114c7e7fa3d54070d83ae2877815d39ffcd021b81bdd992714261d91ecb85e1ef221ce9c388f35d841a361b546fbfac77d0421b6790333a21acabcc18340a403f71af04b63ce7920037500966136ab906778be888d5726dd6cbbe5bb851f285246cdc0522e5fac4d87f167ae93d63f8fd007f6719eb70487b22f9b6cb3198885567ec3359a282cbb62b4def2a93bdc0b74e761a6be6ff81b804ec8dc46b702d979c2278e8a0139fd575af35d1140e5d72a"}]}}, {{0x9, 0x5, 0x2, 0x1, 0x70, 0x40, 0xea, 0x7f}}, {{0x9, 0x5, 0x9, 0x2, 0x0, 0x3, 0x8, 0x1, [@generic={0x44, 0x23, "6a32e52cbffc879273363043865689b5596c94188930e777032a37208fa40cb8cc43a25a1cee5434ddf046763da626de231fcd4ff6ba0f450584cba325983f777747"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x20, 0x42, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x7}, @generic={0x59, 0x4, "731c970915983305894d2ccb687550aa7a396af47044931bd53c69bf38eb3794ceb73a1812e1910d809e2cad699c64d656c5a7ea499aca024c093bd20340445a4af57bd95051d60f9dab17bafbefb4ddcd983a59bf7570"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x3ff, 0x8, 0x3, 0x5c, [@generic={0xb0, 0x21, "7c73e7a2cbfaf01bb2b2c930e9b2e486734aebf9190b31c9034290a864ab8b215eb88bd037cbe428abf05134a028c962769aaf26a4f65361d24824bcb96724d3cacaaca90cf320fcf03ce328d42a709a0aa04ebe385a2bf887f0285612dbde7a6552774ccacb61b2ae25a8ea2ed8d0f3922f17d97772292a877f878003acf5e38d78e80a75a0620bf3c0877cada1cfa0ed874c5e3a6bcbdf2fff51cb30ed1eef53dd1c5435b031c7d3bfd83483b0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x200}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x9, 0xab, 0x9}}, {{0x9, 0x5, 0x3, 0x3, 0x8, 0x1, 0x2, 0x9, [@generic={0x5e, 0x2, "fcbf57025b9889f3f0488808e19836fbaf0ae7bd24b2e287cbb4aeb830e3aeba765de29debee44bc60aa51cff7885a606bd8dde7b3e82f0ae920f3151a1e966c11cb456bc0c0ea1abb3d1bc06ae6df8d132ecd95b2289e00cba74511"}]}}, {{0x9, 0x5, 0x0, 0x1, 0x200, 0x0, 0xa, 0xe, [@generic={0xd8, 0xe, "53526afd2da28cc5ee6d3d7d066d80714faad225ea0ba76465c6143f610608a24bfeaca13285d36d72f5064b7f5c628b55294bec9c426c1cd0eab14bb701820b678873b6728370f0a7e2c19ea1920475036ffa7bf8e494001708a44d49baae8847fec66b0bb27c3dfee92fc35ed7ef80372cf61e23a52c01be15a8306b251a999d22d3d9a6bf710cdcf9e7324a904e95679f07b043efe0fc66d579d290ba257a618448c525bc4c040a43933cbef17a79f807b3977ffe611de03452b8611ffaea79e1f657cffd0c11708801c1616701e6f81e8af1d4cc"}]}}, {{0x9, 0x5, 0x87, 0x10, 0x40, 0x6, 0x7, 0x7f}}, {{0x9, 0x5, 0x9, 0x4, 0x10, 0x0, 0x3e, 0xc8}}, {{0x9, 0x5, 0xc, 0x4, 0x40, 0xd5, 0xe4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x8}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x7, 0xa8, 0x80}}, {{0x9, 0x5, 0x8, 0xc, 0x40, 0xf7, 0x3, 0x7f}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0xb, 0x5, 0x6, [@generic={0x51, 0x8, "c43c86e64d0464d0c1552b26677c9389584bac1b27d1ea7def271ce6200069b52e3830bad0b318b5b288977fbb0227f941bd21bf034290a77de21c55a8a5274151900380021c83b9ca9db8590ffa87"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5c, 0x2}]}}]}}, {{0x9, 0x4, 0x55, 0x3, 0xd, 0x59, 0x93, 0xee, 0xb4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "b23467"}, {0x5, 0x24, 0x0, 0xa208}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x2, 0x72, 0x1}, {0x6, 0x24, 0x1a, 0x7, 0x30}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @dmm={0x7, 0x24, 0x14, 0x3ff, 0xa}]}, @uac_control={{0xa, 0x24, 0x1, 0x7ff, 0x6}, [@extension_unit={0xd, 0x24, 0x8, 0x6, 0x5, 0x3, "db164692c3f6"}]}], [{{0x9, 0x5, 0x80, 0x10, 0x200, 0xf, 0x1, 0x2, [@generic={0xb8, 0xe, "692451ac57e82f3a2d5253c809a095531da536a999205352c957f387f25b71f9a45bb4ea5943d10bb626a34a40eb6cc319bb7e1efad20cb57ee2866548df87e9bc64538ec3359853211a5d24704cefe814594191ea93b8381f94ddfa889c8f5afaf84eaa23fb06a454080af1204f1defd302dde69667e153ddff056ef3e17e4ba8aec46fbe14f1edee5887d36769cc48fbe769887eb791b402b076761fac70093a0574082282749c10444717fbf896a316aad0391663"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xe3, 0xe1, 0xa}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0x2, 0x40, 0x4d, [@generic={0xf2, 0x2, "6ce848689b05186f6b606a3524c5be97a99dad302a96ca5faf6c754291c4cb302ba8d96180822d5b7e8d4d1fb5aad59587d9553f454ff8cf603ff8dc70ce10dfc8328003a9e23658f303824656269e0bad5139f8dce60fe2b37bf305db149869d60915c3f6bf22c37208d3ad92ac10330f15fc1f47ece01cc5a89799b26e026c7297782a1f37276b6255fa83bf399099d85ba3353c1598bc13425f3154c4ed6045553a189b21bbedacb006e142076d95f8cfe2670da7c4f084887673c2674a080b76a6613f822547c654fe9acc33943e7bb6f971eb3bffa61f66e52ec6bfab2e5367dad6a221caccb2a651d08ee9b877"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x3, 0x7, 0x8}}, {{0x9, 0x5, 0x6, 0x28, 0x0, 0xf7, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x37, 0x9}]}}, {{0x9, 0x5, 0x8, 0x1, 0x200, 0xf9, 0x0, 0x6}}, {{0x9, 0x5, 0x5, 0x10, 0x10, 0x9, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x2, 0x50}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0x3, 0xc8, 0x9, [@generic={0x2c, 0xf, "297b682f002cec9477eeb895308cf32a3ad162545ab37fcf621cc7f03b5ac1b1e85c5e081432e141723e"}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x6a, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x5b9}]}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x81, 0x8, 0x3}}, {{0x9, 0x5, 0x5, 0x2, 0x10, 0x0, 0x3, 0x6, [@generic={0x7c, 0xb, "9461ddbf418a729103dae9b1057484a5e42daa0f36715a1e2ccbc8bcb0ea7da4f70632bf795a4a36df6c8b32856aa96ecb8f358b1708546166d1347b983a0b8adf8b618d8b25f14cfce0ee20ad7a12a6de8c1064796b267211dc2646d6957df8d0533873c41f12c6cd1e4919a51f478b3b8a5eb87dc7bc402ff4"}]}}, {{0x9, 0x5, 0xa, 0x2, 0x8, 0x0, 0x9, 0xc}}, {{0x9, 0x5, 0x9, 0x1, 0x20, 0x3, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}]}}]}}, {{0x9, 0x4, 0x55, 0x7, 0xa, 0xea, 0x47, 0xc1, 0xb, [], [{{0x9, 0x5, 0xa, 0x2, 0x40, 0x1, 0x4, 0x5}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x3, 0xfd, 0x7, [@generic={0x25, 0x22, "e85f51e0a193cbdedb7cb1582fbaa26420db1e406f7485502e526368358c43f7412692"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x1, 0xe, 0x6}}, {{0x9, 0x5, 0x9, 0x2, 0x3ff, 0xc, 0x4, 0x1, [@generic={0xc0, 0x5, "54a2bdd7ad3e66266042ae21db74b2374a44fd2079128a2cbec0e41c28f003d7684cf3f3626c5b2f4524c109ace22467176bc087bd433bb2b2d154491597026c3fe26c1b39f819e4135ac02e22ebec97a47bd30c3d87ddbc3a288e8c26c475bf5cb294ab4e66d799c3e4714c4a1d3b033e95bd45598fe575617530993c2f1e01bb007854f9535aff4fbdae7919751b3cb6fb6d784905d0a02a0d190e508a421c2ea2995638c1d58dbc6e85e6257e6da8fe83afa2cd772e64e941443cef9f"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x66, 0x900}]}}, {{0x9, 0x5, 0x9, 0x13, 0x10, 0xcc, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x7}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x4, 0xa6, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf5, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x4}]}}, {{0x9, 0x5, 0x8, 0x0, 0x10, 0x1, 0x4, 0x80}}, {{0x9, 0x5, 0x3, 0x10, 0x200, 0xb7, 0x8d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x9}, @generic={0xfe, 0x2, "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"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x3ff, 0xfc, 0x1, 0x21, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0xb172}, @generic={0x25, 0x6, "3f6bc18b1637cbe474f85cb38244361901e9fdbfe2e30622bcdbc2a2f2e831e446adf0"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x94, 0x8, 0x3}}]}}, {{0x9, 0x4, 0xc4, 0x7, 0x1, 0xa5, 0x32, 0xdf, 0x6, [], [{{0x9, 0x5, 0x0, 0x3, 0x8, 0x7, 0x2, 0x6, [@generic={0x2c, 0x21, "5ec316023765cd3b0c7061524274e9771f593a4a89c6c8caf803f7dd596f6a729738d97a19f483d4ccc3"}, @generic={0x88, 0xa, "e0730d5e72e54c32f4a889141bf6997671d15080e962c367d9017843fc0d1af45aa98952a7ae35e29ef4a564210c57ba04f5ccde4c84b9951f5aa68e3b8da794766699d7c29e4b9a2346eaef8e2488f361c2b4e583776039f1b65a18ace2405b66de56bd26123e029b4de396409d90eb535e83297f75fb0086ad2cf2187e29839b1e28a0d77b"}]}}]}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x76, 0xf9, 0x3, 0x20, 0x7f}, 0x25, &(0x7f0000000100)={0x5, 0xf, 0x25, 0x1, [@ssp_cap={0x20, 0x10, 0xa, 0xa6, 0x5, 0x677, 0xff00, 0xa, [0xff0000, 0xc0c0, 0xc000, 0x0, 0xf]}]}, 0x1, [{0xc3, &(0x7f0000000140)=@string={0xc3, 0x3, "3b58f067119cab6556dc5fe058356b25402a5180051f7c2f75dd6415ee164e5a71040246783c542bb4d5bbbe0657f6e108b29fc1587dcd584dc9181d8feeaf17aebc2605eaf3ffde2383fda35373920d8dfffcf7b0cdac55abd02b1b1c3e2364ede567b2408799d620d1a21db4ad58ae8bb7274d209033e820b52f062539021850c66d95fbba7d98169fd2007f8d3a91f8b9b9287616dd93a11c67b08ca861f38efcc7018971b005d67b59dcb6cc6b4068ae55c957aad1da7a9f63dd55fbd05966"}}]}) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001c40)=ANY=[@ANYBLOB="781100001100010000000000020000001d0000006411e3800800228004002b80080035"], 0x1178}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x10004, 0x6, 0x33333000, 0x2000, &(0x7f000040a000/0x2000)=nil}) r7 = gettid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r7) 3m30.005410445s ago: executing program 3 (id=809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000300)={'syz', 0x2}, 0x0, 0xfffffffffffffff8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2e0000001100a96db80d80ee59acbc04130800482f0000005e29004218d9", 0x1e}], 0x1}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0b92dca36def4983f0c51a6a4c6b04c2ea1935a6b091b63538d64f6dc64e61587dc05398245dd21de77289e88132e784de4b16", @ANYRESOCT=r1, @ANYRES8=r0], 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000800004410e60008000300", @ANYRES32=r3, @ANYBLOB="0c00238005001e0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x48041}, 0x40840) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4010, r4, 0xe6683000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000380)={@val={0x2000}, @void, @eth={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x4, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x300, 0x0, 0x8}}}}}}, 0x2e) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x3e) setsockopt$inet6_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) write$binfmt_script(r7, &(0x7f0000000200), 0xfffffd9d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '0\xcf\x04\x00\x896\xaf\x11\xb6\xc82dA\x16\x18\x96~\x12\xf5\xbf\xdd\x17e'}, {0x20, 'wlan0\x00'}, {}, {0x20, 'big_key\x00'}, {0x20, '&-:+'}, {0x20, '\xbb\xbb\xbb\xbb\xbb\xbb'}, {0x20, 'highspeed\x00'}]}, 0x4b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r9 = dup(r8) kexec_load(0x4, 0x9, &(0x7f0000000840)=[{&(0x7f0000000140)="d5a8f2a64e190d5be17cc8df3872eac752ba0ea081b29b7a8bdef299bf", 0x1d, 0x3, 0xfffffffffffffff7}, {&(0x7f0000000440)="f14e7e46599101894b4038b476a8b93e66e31690c99e5b799b8b8391302e1efda4a315d98f69e6d05bca026b0d027e23d3545a475b73f520ae3879be65706c2f5597a6b84a550208060defcf7052953503764ea2f9556fa9d7ee1985144c855ed92cf5a49f73b9347bd6532c50094e630f19f93ff9d84fede42c0343c1dcbe29b162549c157070f1600aa748e8d4519231dd3d56c38ebfe6b69b54b09f8ab9998b4b8882", 0xa4, 0x8, 0x7}, {&(0x7f00000002c0)="ac765f710af722", 0x7, 0x7, 0x1}, {&(0x7f0000000500)="8581ab054132e47a4da64c144e2f8dd998c562", 0x13, 0x9, 0x1000}, {&(0x7f0000001180)="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", 0x1000, 0x6, 0x9}, {&(0x7f0000000540)="31899bcbc6c5144d73421a607e0d40f65a4ab5a3e54229361d6d794197f2363a236e2a2e813cfeb64d604baa2bc661c53a3d3b7a15cfbba9e767f1f52186c99fec817b9af2a06aa4a4140f5f22f944dd324fb005f6ada00301739a4c68dcd837770ff6c76c1f5bab2335962d7c0f78e6184fff15d451b9cb493505a25eb07d9c7df8fe4aa191681ed48bf0b28a1aa4a43b9063a6b983c69b3e6390f9dd430094b2acc00b0d78b0ed4b3d129791441c42ecac6b5e2c", 0xb5, 0x0, 0xd1fa}, {&(0x7f0000000600)="21e384aeabf918f1bd9e14196ad0f202f91d1438e07565cdce9a92ee37580005a5a918d2d5231496da52873b205fb692d51135eccb7270dcd860df8680150e675aeb4d4cd5e324450a2c575160e93c7f2f30383d3dcc08f86f7a69034024ea353b5ded318260f7cd3af1bcf0cb74bafbf3fea893a5f84d93a2f399e483d72166e3177eaa09946dd1a8c570507e8354880ab639dcbd6916965f9d5c607fbefbbc743398ddeabe416c6f1b0462657cd56a877c8c717e420557be51eda76dacd06f0752a8416bf98f8fa269bcfa81555caa98", 0xd1, 0x9, 0x7c}, {&(0x7f0000000700)="88bf4065e1a2168c10cdae685858ca67788d7c8d9e3d4fc8b1a88a3597e3dd4e263018b4cdf6ab38b4ae5c110f0375f0f47c7a66237a46c10e0637ae3eda3aebc40bff25819941fdb45799163f62508d610c331ddbd05fcd3ac9e22d949cc65c1511e9f61481c8e6c38bd4989e4f51d64d48d82b9e73e5c0fe8606024b8fbf97444957c3bd60de91fa02a955a943b5003330aaddf76365d2065a9f8ad1a3be7ade03534c190234ba72a1807e5b7ffc37770828a34dec7e56b59439927aa1da194e1b4d1e03ac1ed8ca95a49f93b6aa3562e0fe9d69b54b6300d95fa65627d18faa57a78633dad1caec311e201627e4a927e53fc2fb8fa95deeb1166c09a87b", 0xff, 0x7fff, 0xb}, {&(0x7f0000000800)="a611b90d047e6de069e215b0d879aa86a0cf67c02ee5acd8", 0x18, 0x7f, 0x7}], 0x320000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r9, 0x0) fadvise64(r8, 0x18, 0x0, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m26.963072014s ago: executing program 3 (id=825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r0], 0x25c}, 0x1, 0x0, 0x0, 0x200080d1}, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0xe45, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x80, 0x5, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 3m26.853185739s ago: executing program 3 (id=829): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f000013e000/0xa000)=nil, 0xa000, 0x3000003, 0x22052, r0, 0xa4717000) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r2, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/uevent_helper', 0x200000, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2145c99, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) shmat(r1, &(0x7f00001f2000/0x9000)=nil, 0x4000) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000001100)={0x101ff, 0x6, 0x100000, 0x1000, &(0x7f000022c000/0x1000)=nil}) 3m26.784441261s ago: executing program 3 (id=831): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x310, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000011) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) 3m11.744646165s ago: executing program 33 (id=831): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r1, 0x310, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_SHORT_ADDR={0x6}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000011) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) 4.641574479s ago: executing program 5 (id=1481): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40342, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 3.775104722s ago: executing program 5 (id=1488): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0xc10, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x406, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x8, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) r2 = syz_usb_connect$lan78xx(0x2, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r2, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x20, 0x22, 0x46, {0x46, 0xa, "7e83e8aedd4cd57bc010e5164fe9a8115ce4d6941207f3f47c5cd7c2a3619010c0653af8668f49f7f90a1f4ea485d13816509ec4b4904c64f0089a110a0240d9673c97f5"}}, &(0x7f0000000280)={0x0, 0x3, 0xbe, @string={0xbe, 0x3, "40df1e8d5aa62512747adca30909a9f96b82085a19e8452e9934ad9f54f0d2a21b9939914ed058df95fa67b84530c28c8dc5cb04548d34b979f6757127832d70f869961720674a58829779f134dae25a0264ad208c4a857e12002bfa117eeb85ed89a69d88bbef8b7b2eb4fd89042b41375022b1c451370cb3725f0c1435167521d949e4e7d75c4b61471d70ff403334100667e2f1cb7f4f2ef1d797bd00d756a20702440aad30e6a3a27642885e2d871da80ab3fd6979d62368f227"}}}, &(0x7f0000000580)={0x34, &(0x7f0000000400)={0x20, 0x7, 0x2d, "c1928025cac380c8377bc6bdaf55cf1323a7d82343844410d0bdcfdad3b652a4d17afd7c456d584fde54f5bbfa"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xb7}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0x3}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x4}, &(0x7f0000000540)={0xc0, 0xa2, 0x2f, "2dcc130159e3b019237204f6dfacc9167ccbb205deca44a0fda37c7029f0ea9975b521ca30217686593b40c3ead2fb"}}) r3 = openat$binfmt_format(0xffffff9c, &(0x7f0000000240)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r4 = syz_clone(0xa4106880, &(0x7f0000000ac0)="5a7c11a73106f2b2855a3946befbae33655c0eb650fc77d969dd6c0a1ddde0593a44b8253d456381f6892ec6e72a9a75daa2a7a5259a0fd03d1f551cda7d4f45afffdb40c542de81a1eb7bf79e78091fbb455a440adffd84", 0x58, &(0x7f0000000b40), &(0x7f0000000b80), &(0x7f0000000bc0)="48872688ff26dba07cc7936687f1a2a551a2c94e8b0532684b2fcc1aa5466d174ee2d2e7d4588915ab24c4f403f7ce2016129e8d8d4c9e2e4c8518818af85a5de7a3bccb58c03df15142b87b97093d3cc51a6233cbd95520e5675655511bba99863c6fa61516c3e73b8094327705d309a58369235cd52de34848d831a4f5f02647970cf5652aa106e60302fe229614630a2d686db204b3c5") r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r6, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000d00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x2c, 0x13, 0x200, 0x70bd26, 0x25dfdbfb, {0x18}, [@nested={0x18, 0x73, 0x0, 0x1, [@typed={0x8, 0x116, 0x0, 0x0, @pid=r4}, @typed={0x6, 0xe3, 0x0, 0x0, @str='@\x00'}, @nested={0x4, 0xab}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x20044010) syz_clone(0x80200c00, &(0x7f00000005c0)="6466577664154d8072a6d561efda09430d0b4d7116bf856a076c6a2e469050f788d04cbf791e1da1a8190ade513a62addba299de15f3808d7211e89d41e2774a13037e9968d941ad2e59f70c8dc14c735a576246e7d263373bc4f63f8d", 0x5d, &(0x7f0000000940), &(0x7f0000000980), &(0x7f00000009c0)="00cc6ac88835d0764d5913ed62104b1c461403fa0a16a5ecd88b1bea313418d668c1af3903b8e2a038a06dd2e504711f8195b1c00aeb17f95ec3fd934612bcaf468af0eb367e73ef800443634afbcd4fe30979da35767f61bb40e100fe4aa3295644634d6cb87a9dbb3b3c3837433319e3828493417b3891596e67d4f135dac4122c563fed380cedb25876e7af90c083224e537563586ae6b7d6393faa83c4f976f87d7c5328") write$binfmt_format(r3, &(0x7f0000000000)='0\x00', 0x2) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ppoll(&(0x7f0000002080)=[{r8, 0x11}, {r1, 0x2}], 0x2, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x8, 0x801, 0x0, 0x0, {0xf, 0x0, 0x1}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x82}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x18d2}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7ff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88be}]}, 0x5c}}, 0x20044888) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) 2.990458205s ago: executing program 1 (id=1502): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r1, &(0x7f00000025c0)={0x1e0, 0x0, r2, [{0x1400000000000007, 0x0, 0x8, 0x0, '@-/\\&\r\x80-'}, {0x0, 0x0, 0x197, 0x0, '->\x04\x01\x00\xf8/\xa6\xf5K/J\xa5\xaf\xabO MzP\x05\x8f\xb4\r\xc3{\x15U\xc0\a\xde\xd2\x97\xfdE\xdes\xaa\xb9\x02Z$cw#\xa4/\x85f\x83}\xd9\x94\xd0\x06b,Q\xab[\x14{\xe6\x1a\x95\xc6\xae$\n\xc74&I:#\x195o6\x9f3\x94\xd1\x8e.l%\xa4\x9ewC\n\x8e?\x10\x15=\n\x8d.\t\xfe\x86\x95*:M\nD\xbb\x82\xadoX\xbfm\x04L\x9bZ=\xa8\x8f\xe47\xdf@\xe8%~\x83L\x14\xd6\x01A\xbfR\x02#\x0f#!\xfe\x93\x8f\xb0.j\xc6\xe5\x8d \xc8@\xac\\\x85\xa4[\x9b\x1f\xc8X\xce;M\xe6\x1d\x8c\x9d\x9aUt\x1c\x88\xb3gN\xf4\x91\x9c\xb1\xe9\x9f\xa4X\"Q$\xe4\bI\x022\x02(\xde\xc9\xc3\xb7\x8fG\xba\xa4\x81\xfc\x9c\x12\xfc\xb2\x8e\xe0\fhA\xda\xd4\xd2{\x1c\x04\xf9\x82R\x1c\xcd- \x8d\xbaw\x19\x12q\xeaIza4\xdaSQv\xda\xea\x01PO?\x00v\x852\x89.7\x12\x92\xf5\xb8\xcb\x82\xfe\xa0\xae\xd1\x12*5\xae\xb8\xd3\xec\x95SEAy\xa0\xfb\x85\x13\t\xbf`?e`\x14\xfe\x15\x1a\x8al6\xdd\xa1\xd0\x12\xd9\xe9Q0V84\xdc\x8e\x17{c\"\xe1K\xfc\xfc^\xf7vaO\xd6\x90M \x1a\x8c\xd7\xd7\xca8\xe6f1\x0f\xa8\\\x11.\xc7\x866\x8f\a\xe1\x1e(3\xb4i\xcb\x1c\xbf\xad\x9b\x83f\xcf\x8911,\x1bkb\xad\x0f\xb0\xeez\x9b\xd6\x05\x89\"\x9dNXj\xaa}\x98\t\xdf~\x01\xefwu/\xbeK\xc89\xca.\xb2\xd0r\xf9\xaf\xd7\xa4\x06\xa9\x02'}]}, 0x1e0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000008c0)=""/150, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/76, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x1, 0x2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, 0x0, 0xe08d5718f5164b70}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fedbdf252700000008000300", @ANYRES32=r8, @ANYBLOB="06003600440000000a0006"], 0x30}, 0x1, 0x0, 0x0, 0x20004841}, 0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) write$tun(r9, &(0x7f0000000340)={@void, @val={0x1, 0x4, 0x4, 0x5, 0x5, 0x2}, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@mpls_uc={0x8847, {[{0xc}, {0xfff, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x9}, {0x2, 0x0, 0x1}], @ipv6=@generic={0x9, 0x6, "4a55ec", 0x164, 0x87, 0x0, @local, @local, {[@hopopts={0x3a, 0x1, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @routing={0x2, 0xa, 0x1, 0xfc, 0x0, [@empty, @remote, @private2, @private0, @ipv4={'\x00', '\xff\xff', @broadcast}]}, @hopopts={0x2c, 0x0, '\x00', [@pad1]}, @hopopts={0x2f, 0x1, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}], "c8236cfd315febcc694c6c6ef7939eeb02ee55a1c5a795968414d8ab3e2fc0eac53325f5f6d429b42edfd570c220d1e4ce407f13c426e1a9efbf6d5aa0850c844f2234db42ce19fa8f897b1f6d89c0f39ee4bec9792c67ed9b5f0d9095806fa26a4151c0042231fdb1aa005c215fa0b1360ca2d4e436394e202009029601353219991c8be5781383743f24a042373c6bade6071ce22aefdac13a0703639158fe4a2130b3390fff2b3ab953dcecc6c42ab955ae330e9b4d96d5deac4442b1f14e5f5cb74bfcd1db18bda3119b"}}}}}}}, 0x1c8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) syz_usbip_server_init(0x5) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB="120100002a7f74be180c664c802db2000001090212006b68402d769742adc1df516001000000000900000000ffffff00ae50c17d705379c88cbd5a1cf7321f8b2b66a70fecf1ed1a229bdc284826f9511cd4f718acdb9076115c95767018712282fc71181258f55b98ace8aeef29b3c98ce7e33f246df149335d1dda1231e3c810fb54858875b46da522b6f4dbc193e5ed432a83a0e64c9f1bd9306001cbf6d7bc0a8689bf4ac3943feef361556e59c6d77d5cb9a58c5188e68373dfe2e38ad68f5a4b0e04b480d2a0416e2418406d1b1e856d7fbde83c11ac712341567212d1afb6f4336c5c534c00b186c0e6de9c48c951f1942aa6dac6309918a962763cbbdc528389f5b7b8c84080a98a3efed9d26cce863de713e775f1"], 0x0) socket$qrtr(0x2a, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) 2.510082248s ago: executing program 4 (id=1506): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) splice(r0, 0x0, r2, 0x0, 0x800000000fe, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x76b60f1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x3c, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x76b60f1}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHENTICATED={0x4}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4054) ioctl$FIDEDUPERANGE(r4, 0xc0189436, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000400)={0x10}) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0xec, 0x2, 0x2, 0x101, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_NAT={0x74, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x10, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_MASTER={0x5c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x81) r8 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$apparmor_current(r8, &(0x7f00000000c0)=@profile={'changeprofile ', ':!\xd0\x1a\v\x97\x8d//&-*\x83\xd1\x00\xae\xd9\xf5\x04\\\xb3\xdf\xccQ\t\xda}\x16\x91P\xc0&KF\xd5\x06?t\xff\\\xd8\xce#\xfc:P>\x8dH\xd5\x00y8\xb4`\x1c\xc8\xf1/w\xe5U\x83\x1b y\x98T:A\xc1\x92s\x01\xb7\xa6\xe0\x8c\xbd\"\xbc\x9fb\x9a\x01Z\x82\xdc}\xac\x85\xf0Y\xd1\x00\x89=k\x1f\x11\x91\x12\x03_ti\xd9\x93>\xff\x9a\xdc\xb2\xaf\xce\xa7\xcb7\x0f\xc4\xcb\x94\xc1\xc0*\x84k\raZ\x8f\x88N\x7fMP\x9e\xbaq\xec\x99\xe1=\x8b\x8a\xee\x956O\xb2\xb8o\x96\xe88\x95\x15\xaa\xfb\x86g)N\x8b\xe66}\xca0\xf7{-\xef\xed\xc4\x17\xaf\xc5I6qt\x19\xf7\xce\x8d\xd5&\xfa\x90\xc7\x7f\xf5\xbc]\xe9!\xb1\xc1\xc9\x94\x9afu\x1cV\v\xd7r\xbb\x9c\xc7)lH \xb4}B~-\x00\xce'}, 0xed) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r9, 0x0) (async) listen(r9, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) setsockopt$sock_int(r10, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) listen(r10, 0x0) (async) listen(r10, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070601020000ebffffff000003000007080006400000170e"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x10) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000070601020000ebffffff000003000007080006400000170e"], 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x10) 2.421015627s ago: executing program 4 (id=1507): inotify_init() mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 2.418086965s ago: executing program 4 (id=1508): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000880), 0x7, 0x8101) ioctl$BLKZEROOUT(r2, 0x127f, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0x5, 0x0, 0xffffffff, 0x88d7, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0x6c, 0x7, 0x10020009, 0x1, 0x5, 0x1, 0x1000, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0x100, 0x8, 0x1, 0x2]}) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x50200, 0x0) r5 = accept$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e) accept$unix(r5, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) syz_open_dev$vcsa(&(0x7f0000000000), 0x8001, 0x880) sendfile(r4, r3, 0x0, 0x7fffefff) 2.208903512s ago: executing program 1 (id=1512): syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000005, 0x11, r0, 0x100000000) prctl$PR_SCHED_CORE(0x4a, 0x4, 0x0, 0x2, 0x0) r2 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002020000202505a1a44000010203010902700001018080090904000702020600006a240600000300000068d6052400dc000d240f01050000000400040008152412bd0ea317a88b045e4f01a607c0ffcb7e392a1524120800a317a88b045e4f01a607c0ffcb7e392a052401010509058202ff03f3b80509050302ff031000c6"], 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x82, &(0x7f0000000100)=ANY=[@ANYBLOB="12015002020000202505a1a44000010203010902700001018080090904000702020600006a240600000300000068d6052400dc000d240f01050000000400040008152412bd0ea317a88b045e4f01a607c0ffcb7e392a1524120800a317a88b045e4f01a607c0ffcb7e392a052401010509058202ff03f3b80509050302ff031000c6"], 0x0) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000d00), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) (async) fcntl$lock(r5, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x1b9, 0x7fffffff}) fcntl$lock(r5, 0x24, &(0x7f0000000180)={0x2, 0x0, 0x4000000089}) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000d40)={0xa, @pix={0x4, 0x5, 0x3234564e, 0x9, 0xfffffff7, 0x8, 0xa, 0x3, 0x0, 0x6, 0x0, 0x4}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) r6 = open(&(0x7f0000000080)='./file0\x00', 0xc0000, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f00000000c0)={0x9f91, 0x8, [0x200, 0x4635]}) (async) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r6, 0xc008551b, &(0x7f00000000c0)={0x9f91, 0x8, [0x200, 0x4635]}) 2.052946232s ago: executing program 4 (id=1516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000000040)={0x8000, 0x7, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x5, 0x6}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast1, @in=@multicast1, 0x4e24, 0x6, 0x4e20, 0x8, 0xa, 0x0, 0x0, 0x8, r2, r3}, {0xa7d, 0x5, 0x2, 0x80000001, 0x32, 0x9, 0xa4, 0x5000000000}, {0x7, 0x6, 0x7, 0x5}, 0x5, 0x6e6bbb, 0x1, 0x1, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d3, 0x3c}, 0x2, @in6=@loopback, 0x3507, 0x3, 0x0, 0xcd, 0xffff, 0x10001, 0x479}}, 0xe8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.769095857s ago: executing program 4 (id=1520): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000002e000/0x1000)=nil) (rerun: 32) pwritev(r0, &(0x7f0000000080), 0x0, 0x7, 0x1) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x800, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) (async) syz_fuse_handle_req(r1, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r3, 0x0, 0x0) (async) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) (async) r4 = syz_clone(0x80840800, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2e}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) ptrace(0x10, r4) ptrace$poke(0x4, r4, &(0x7f0000000000), 0x0) (async) mmap(&(0x7f0000121000/0x2000)=nil, 0x2000, 0x1000001, 0x12, r0, 0xa471a000) 1.658343582s ago: executing program 4 (id=1524): r0 = syz_open_dev$media(&(0x7f0000000580), 0x800, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000006c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001540)={0x34, &(0x7f0000001380)={0x40, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000004c0)={0x20, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@index_on}]}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r2, 0xffffe000) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r3, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) ioctl$IOCTL_GET_NUM_DEVICES(r4, 0x40046104, &(0x7f0000000000)) 1.568481539s ago: executing program 1 (id=1527): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xdfd99f7b578ec294) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2d, &(0x7f0000000140)=0x5, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.541236599s ago: executing program 1 (id=1529): ioprio_set$pid(0x0, 0x0, 0x2004) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) setxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)=@random={'user.', '\x00'}, 0x0, 0x0, 0x2) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0xffffffffffffffff, 0x2, &(0x7f0000000080)=""/134) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 733.539539ms ago: executing program 2 (id=1533): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='personality\x00') openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x8000, 0x48) read$FUSE(r1, &(0x7f0000000640)={0x2020}, 0x2020) modify_ldt$read_default(0x2, 0x0, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(0xffffffffffffffff, 0xc0106418, &(0x7f0000000000)={0x96d, 0x3, 0x10001, 0x9, 0x1, 0xc92}) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) 646.21551ms ago: executing program 1 (id=1534): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x0, 0x180) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="6400000000000000e97b9edb6240fcea2a941b603344ce4b6f47c5a367d51b6d15531ec73157f0d752f634fade9758311e2bc98eff3b9fe7fd4b54d1540a458ab3abd520d3b8b5e9b85ada9e6608724d02fc5a6dc72b3990a705836b759a49533f9c598e9d036f082e229bccd6a41144143ebc047822cdbc3449ba3e76f2d9927232effca8430cfc3c415a22e214668da9071dcdebda0e25c1c3bbcbefdef8bacdc31743e5f5e814d71f9c28de960b6bba3ccd9dac345d5feb9dc63fa17bfb857296f355b21acf56cc4cb3"], 0xc4800) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 576.777214ms ago: executing program 2 (id=1535): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r2, 0x89f0, &(0x7f0000000000)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048090) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048090) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xe) shutdown(r4, 0x0) (async) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x10001}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f00000001c0)={r5, 0x4}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000005c0)={r5, 0xb8, &(0x7f0000000500)=[@in6={0xa, 0x4e23, 0x3, @mcast1, 0x7f6}, @in6={0xa, 0x4e23, 0x2, @remote, 0x7fff}, @in6={0xa, 0x4e22, 0x9, @remote, 0x7}, @in6={0xa, 0x4e22, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8001}, @in6={0xa, 0x4e20, 0x80000001, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xef4}, @in6={0xa, 0x4e23, 0x3, @loopback}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000600)=0x10) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) (async) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0x99, 0x0, 0x0, 0x10000, 0x2, '\x00', 0xc94}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000440)={0x100, r0}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x901801, 0x0) (async) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x901801, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) (async) r7 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f00000000c0)={0x100000000, 0x10000, 0x1, 0xc5, 0x2, 0xfffffffe, '\x00\x00\x00\x00\x00\x00\x00\x00\t\x00', 0xa5, 0xba, 0x4, 0x1, 0x3, 0xf7, 0x6}) execveat(r6, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000300)={[&(0x7f0000000280)='/dev/rnullb0\x00', &(0x7f00000002c0)='/dev/rnullb0\x00']}, &(0x7f0000000400)={[&(0x7f0000000340)='}\x00', &(0x7f0000000380)='--#\x00', &(0x7f00000003c0)='\x00']}, 0x800) fadvise64(r0, 0x92, 0x8000000000008, 0x5) (async) fadvise64(r0, 0x92, 0x8000000000008, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x810, r0, 0xa4717000) 570.868216ms ago: executing program 5 (id=1536): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d0009058223"], 0x0) (async) r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700)=@getstat={0xe0, 0x15, 0x1, 0x70bd2a, 0x25dfdbfc, {{'ecb(cast5)\x00'}, '\x00', '\x00', 0x1400, 0x2600}}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000180)={0x60, 0x23, 0xb2, {0xb2, 0x24, "6908b3dc1d8f00b860146f73f74b28f79e71fc082c351b934837afef153683ffc69df0b5994b223b73d1191f6871590baba0351c7700bbbff2b3d17b0751d6eb510c9fa90c23a3a2b0a394f4a55c74e222e8dfd4505f58b36c569559dd462f4e7571b3d837ebd9bb9f93c23e342241a9fc67aebb2b7e3407a48f7a6b234384a2dd9439bfdb000e21d3de28abae4b473708880f7b33a931f8ad32cdd6615a7ed757a688bdd70e961f2ade09478e8f64a2"}}, &(0x7f0000000240)={0x0, 0x3, 0x39, @string={0x39, 0x3, "51e9591ec288bd5d1fd0747294f1441fd7c2b3c112e09a72acc3c7dadf84a26486824703f211a64a4fcba8cf587c1500a4ea5f551173f2"}}, &(0x7f0000000280)={0x0, 0xf, 0x1d, {0x5, 0xf, 0x1d, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0x8, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x6, 0x6, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xb, 0x7, 0x4}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x4, 0x2, 0x6, "7433e0cb", "ebb9c42b"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x18, 0x2, 0xaf, 0x8, 0x1ff, 0x8}}}, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x40, 0x18, 0x96, "607fdcd251fa30a4fa5facf759b6e2d85f8970bd0e7429c0b3b8c88d1bf2d22bccb04860bc87f25316eca776e4d6b068ebbf51b04be627e4c28f8e5bbd1b6b092adc88f63ac187a004c8045c30b36f4e0ab771c6d3bf390cddfd813c6696d3614fa4acacb4083ddc9d1b8cba2053ed8390728c1587d98db64ad471212f69613f83a041bd1197cd73cc6ae20b3923963ff0c4735a351b"}, &(0x7f0000000480)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xde}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0x0, 0x2, [0xf]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000000600)={0x40, 0x9, 0x1}, &(0x7f0000000640)={0x40, 0xb, 0x2, "60e7"}, &(0x7f0000000680)={0x40, 0xf, 0x2, 0x888}, &(0x7f00000006c0)={0x40, 0x13, 0x6, @local}, &(0x7f0000000700)={0x40, 0x17, 0x6, @random="65fd3ec40c05"}, &(0x7f0000000740)={0x40, 0x19, 0x2, "4f83"}, &(0x7f0000000780)={0x40, 0x1a, 0x2, 0x4}, &(0x7f00000007c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000800)={0x40, 0x1e, 0x1, 0x2}, &(0x7f0000000840)={0x40, 0x21, 0x1, 0x1}}) (async, rerun: 64) syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x20000) (async, rerun: 64) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) fsetxattr$security_capability(r2, &(0x7f00000000c0), &(0x7f0000000100)=@v2={0x2000000, [{0x2ed7, 0x401}, {0x401, 0x8}]}, 0x14, 0x1) (async) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200180000000800882"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 509.01693ms ago: executing program 1 (id=1537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) r4 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xcc, 0xbd, 0xf, 0x8, 0xbc3, 0x1, 0x8167, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x94, 0xfc, 0x12}}]}}]}}, 0x0) read(r4, &(0x7f0000000740)=""/377, 0x179) sendfile(r1, r1, 0x0, 0x7ffff000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 426.740532ms ago: executing program 5 (id=1538): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @default, @rose, @null, @rose, @null, @default, @null]}, &(0x7f0000000080)=0x48) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0)=0x6, &(0x7f0000000100)=0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x31c, r2, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5e9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_SOCK={0x58, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x723}]}]}, @TIPC_NLA_LINK={0x58, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}]}, @TIPC_NLA_NET={0x60, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xf}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}]}, @TIPC_NLA_NODE={0xe8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xc30}, @TIPC_NLA_NODE_ID={0xd6, 0x3, "1e65d4e091c631bfbbde86ce3014640ba157815d1907a9cadf70fe83112be3a1ccb67571f6d5c1ed43f7df376d7d76f08a6f4e1bc416452a352c5f1030de25bcc11c603110af5ba6ae0ddc5ea2b697e12da83b9c85d01c09be7a809e5fc54af5adfa8baabc87650742824fdced2ebf4d47c0c22d3fa0b754cc3e6363836fad76420de8d24e64ed4afd7e4f9968f16f25a46851b5f9937de8e3d29c876765883f9c1f009984985cbeb65e531be7225c7df377910d2407c29a76ba7143aff14d73667d22fb3337a81fe316e4c77c14eaceac1f"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xd09}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xce25}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xae69}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x200}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x4000d}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000800)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)={0x1ec, 0x15, 0x300, 0x70bd25, 0x25dfdbfd, {0x10}, [@generic="0854c351ea9bbe1cf48a32ef4ee168d57ffbf0eca1a931abd56ca6ec9b1cf4d0999049cec2067d25b20373a9129724a1ae9e96d817c2466c7160b6bfd6fa72a4ebfe3387a5f516ac8fec734e3945fe38cc4243a5b7994729f5ee02d5a58fd38882a1cc35e4f234325e9be1808cc35398db9f4d157d474dbc8e32d13edac593bbd315cc1b483783ad6b227fefbf14ca23d695ffba33b0edd7349506b96689f7988ad95cd495cb6954b5a1e1b7fca424661fdc537b128a83bff9a8c5f9da0aba6e97163470eafcac1fbb5d22eec8f054cc95976958c683ee2ea91dcb", @typed={0x4, 0x117}, @generic="b459d5e0f642addffd804620da61fef2f9041f3e75e0a08be1d709faa78214b97968190e4698964ac6b01297f69164b8b16d2ab03ae869f4d8140d5e40685b57341cfff745051466f8016760f40f15733b169005febb2a97226af334a7bacc0e2c5264bcc7411516451385d00cefa35253b3659f22aa11d93719f6c5701b4a44cc319319a84b6f562e91d28a9f6fd9385f58b337e42a67d1feb724f0f512393b90bb4d9b716954fb9695c52e1336f3734b8df94db924779f5bb5bbb01871509bad2f65e44da8a79aea967691e22b6974641416aaeaa0fc9801780055b334e7767eaa0ed94fed5415f1638766401fc7d355783ef808b4"]}, 0x1ec}, 0x1, 0x0, 0x0, 0x10}, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000840)={0x0, 0x6}, &(0x7f0000000880)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000008c0)={r4, 0x6, 0x20, 0x6, 0xffffffff}, &(0x7f0000000900)=0x18) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r6 = accept$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000940)) recvmmsg(r6, &(0x7f00000010c0)=[{{&(0x7f0000000980)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000a00)}, {&(0x7f0000000a40)=""/119, 0x77}, {&(0x7f0000000ac0)=""/170, 0xaa}, {&(0x7f0000000b80)=""/78, 0x4e}, {&(0x7f0000000c00)=""/208, 0xd0}, {&(0x7f0000000d00)=""/183, 0xb7}, {&(0x7f0000000dc0)=""/149, 0x95}, {&(0x7f0000000e80)=""/240, 0xf0}], 0x8, &(0x7f0000001000)=""/134, 0x86}, 0x3}], 0x1, 0x1101, &(0x7f0000001100)={0x0, 0x3938700}) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f00000013c0)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x50002404}, 0xc, &(0x7f0000001380)={&(0x7f0000001180)={0x1f4, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xeac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0xf8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x78}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4008080}, 0x1) accept4$netrom(r0, &(0x7f0000001400)={{0x3, @null}, [@rose, @default, @null, @remote, @netrom, @null, @remote, @null]}, &(0x7f0000001480)=0x48, 0x800) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f00000014c0), r7) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000016c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001680)={&(0x7f0000001540)={0x13c, r2, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010101}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x76c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xde9b, @mcast2, 0x6a51}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x4, @mcast1, 0x3}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffe}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x8004}, 0x20002811) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001700)={0x3, 0x9, {}, {0xee01}, 0x81, 0x8}) quotactl_fd$Q_GETINFO(r6, 0xffffffff80000500, r9, &(0x7f0000001740)) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000017c0), r3) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x64, r10, 0x600, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}]}, 0x64}, 0x1, 0x0, 0x0, 0x44040}, 0xc0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r7) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x28, r11, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x47}, @broadcast}}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x40000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001a40), r1) r12 = syz_open_dev$sndpcmp(&(0x7f0000001a80), 0x767, 0x2002) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r12, 0xf501, 0x0) r13 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000001ac0)={r5, @in={{0x2, 0x4e24, @private=0xa010102}}, 0x1, 0xffc0}, 0x90) r14 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001b80), 0x1, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r14, &(0x7f0000001cc0)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001c80)={&(0x7f0000001c00)={0x60, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x3}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}]}]}, 0x60}}, 0xc800) 317.088838ms ago: executing program 2 (id=1539): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83b9000) r1 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync(r1) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f00008ae000/0x1000)=nil, 0x1000, 0x12) pidfd_getfd(0xffffffffffffffff, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 316.251107ms ago: executing program 5 (id=1540): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x20e02, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000e7080003"], 0x64}}, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0x541b, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 228.745869ms ago: executing program 2 (id=1541): r0 = add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "de735033674cc2bdfe3b0558ca1ad089841786820b9736be9f10ab34c322c2b4c8c5ddade65d2ce488bd547c382bc6bfa4067da8cb0a307a64e2cb914b91a5ad", 0x35}, 0x48, 0xfffffffffffffff8) keyctl$revoke(0x3, r0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000180)='./cgroup/file0\x00', &(0x7f0000000240)='vxfs\x00', 0x1140800, 0x0) 197.129917ms ago: executing program 5 (id=1542): syz_usb_connect(0x2, 0x4f, &(0x7f0000000080)={{0x12, 0x1, 0x351, 0x29, 0xfb, 0xf0, 0x40, 0x738, 0x4540, 0xc6ce, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3d, 0x2, 0x2, 0x6, 0x10, 0x78, [{{0x9, 0x4, 0xd4, 0x9, 0x1, 0x78, 0x6d, 0x3d, 0x40, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x9, 0x4, 0x2}}]}}, {{0x9, 0x4, 0xe2, 0x0, 0x2, 0xb2, 0x26, 0x18, 0xbb, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x7c, 0x9e, 0x9, [@generic={0x7, 0x5, "85e371932d"}]}}, {{0x9, 0x5, 0x7, 0xb, 0x0, 0x9, 0x73, 0x3}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000edffff48"]) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x24, r0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}, 0x1, 0x0, 0x0, 0x44151}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES16, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300a0000000080211000001080211000000505050505050"], 0x3c}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x5e, 0xff, 0xf}, 0x2c) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x7, 0xfffc, 0x41, 0x2, 0x20, 0x0, 0x4e}, {0x2000000000005, 0x3, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x1}, {0x400, 0x3, 0x0, 0x800}, 0x8, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x10000000, 0x2b}, 0x2, @in=@empty, 0xffffffff, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe}}, 0xe8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, 0x1c) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x1002, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) fadvise64(r4, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000100)={0x19}) 76.75825ms ago: executing program 2 (id=1543): syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) (async) r0 = syz_open_dev$vivid(&(0x7f0000000000), 0x3, 0x2) close_range(0xffffffffffffffff, r0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000100)={{@any, 0x4}, 0x8b9, 0xe70, 0x7f, 0x10001, 0xe335, 0x100, 0x3, 0x3}) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) (async) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r3, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x4000, 0x1) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x4000, 0x1) ioctl$TIOCGPTPEER(r5, 0x4004092b, 0x7) ioctl$VIDIOC_G_INPUT(r5, 0x80045626, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0xe6683000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r6 = timerfd_create(0x7, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r7) sendmsg$IEEE802154_ADD_IFACE(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930f845763519"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x0) timerfd_settime(r6, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x3938700}}, 0x0) readv(r6, &(0x7f0000000200)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x3c, 0x2, 0x7, 0xa01, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x809) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa07, 0x0) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r9, &(0x7f0000000100), 0x208e24b) 0s ago: executing program 2 (id=1544): keyctl$reject(0x13, 0x0, 0x8, 0x200, 0x0) (async, rerun: 32) r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0xcb, 0xa3, 0x70, 0x10, 0x525, 0xa4a0, 0x5cf5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0xd0, 0x5, [{{0x9, 0x4, 0xe7, 0xe6, 0x1, 0xfd, 0xae, 0x43, 0xaf, [], [{{0x9, 0x5, 0x9, 0x3, 0x20, 0x5, 0x5, 0xf4}}]}}]}}]}}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (rerun: 32) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 64) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) (rerun: 64) kernel console output (not intermixed with test programs): 006/input/input23 [ 171.798288][ T24] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 171.817144][ T5944] usb_ehset_test 4-1:7.192: probe with driver usb_ehset_test failed with error -32 [ 171.844186][ T5944] usb 4-1: USB disconnect, device number 29 [ 171.976147][ T24] usb 3-1: USB disconnect, device number 46 [ 172.060342][ T10] HID 045e:07da: Invalid code 65791 type 1 [ 172.069572][ T10] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0007/input/input24 [ 172.084364][ T10] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 172.265826][ T10] usb 2-1: USB disconnect, device number 45 [ 172.279471][ T5860] input: PS/2 Generic Mouse as /devices/serio2/input/input22 [ 172.500237][ T5860] psmouse serio2: Failed to enable mouse on [ 172.553660][ T8459] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 172.560211][ T8459] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 172.571905][ T8459] vhci_hcd vhci_hcd.0: Device attached [ 172.606163][ T8463] /dev/rnullb0: Can't open blockdev [ 172.838300][ T10] usb 40-1: SetAddress Request (22) to port 0 [ 172.845316][ T5944] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 172.854252][ T10] usb 40-1: new SuperSpeed USB device number 22 using vhci_hcd [ 172.963140][ T5997] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 173.013961][ T5944] usb 4-1: unable to get BOS descriptor or descriptor too short [ 173.022713][ T5944] usb 4-1: not running at top speed; connect to a high speed hub [ 173.035768][ T5944] usb 4-1: config index 0 descriptor too short (expected 58907, got 27) [ 173.046105][ T5944] usb 4-1: config 1 has an invalid interface number: 130 but max is 0 [ 173.055536][ T5944] usb 4-1: config 1 has no interface number 0 [ 173.062300][ T5944] usb 4-1: config 1 interface 130 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 173.073656][ T5944] usb 4-1: config 1 interface 130 has no altsetting 0 [ 173.082562][ T5944] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=84.ac [ 173.092202][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.102870][ T5944] usb 4-1: Product: syz [ 173.107162][ T5944] usb 4-1: Manufacturer: syz [ 173.111854][ T5997] usb 5-1: device descriptor read/64, error -71 [ 173.119150][ T5944] usb 4-1: SerialNumber: syz [ 173.130751][ T8459] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 173.346337][ T5944] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 173.360937][ T8460] vhci_hcd: connection reset by peer [ 173.367399][ T5944] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 173.377770][ T49] vhci_hcd: stop threads [ 173.383138][ T5997] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 173.393540][ T49] vhci_hcd: release socket [ 173.398131][ T49] vhci_hcd: disconnect device [ 173.404026][ T5944] dib0700: firmware download failed at 7 with -71 [ 173.419306][ T5944] usb 4-1: USB disconnect, device number 30 [ 173.558254][ T5997] usb 5-1: device descriptor read/64, error -71 [ 173.680154][ T5997] usb usb5-port1: attempt power cycle [ 174.028303][ T5997] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 174.058894][ T5997] usb 5-1: device descriptor read/8, error -71 [ 174.068323][ T984] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 174.136150][ T8506] /dev/rnullb0: Can't open blockdev [ 174.239489][ T984] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 174.251450][ T984] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 36128, setting to 64 [ 174.263667][ T984] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 174.278264][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 174.286477][ T8514] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 174.294919][ T8514] /dev/rnullb0: Can't open blockdev [ 174.299238][ T5997] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 174.300498][ T984] usb 3-1: SerialNumber: syz [ 174.325602][ T8491] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 174.338995][ T5997] usb 5-1: device descriptor read/8, error -71 [ 174.344577][ T984] cdc_acm 3-1:1.0: skipping garbage [ 174.358985][ T984] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -12 [ 174.448871][ T5997] usb usb5-port1: unable to enumerate USB device [ 174.544510][ T5997] usb 3-1: USB disconnect, device number 47 [ 174.589395][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 174.638312][ T7308] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 174.739498][ T9] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 174.748628][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.757637][ T9] usb 4-1: config 0 descriptor?? [ 174.809659][ T7308] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.819995][ T7308] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.830347][ T7308] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.840507][ T7308] usb 2-1: config 0 descriptor?? [ 174.847633][ T7308] pwc: Askey VC010 type 2 USB webcam detected. [ 175.072361][ T8522] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 175.171756][ T9] waltop 0003:172F:0032.0008: item fetching failed at offset 3/5 [ 175.181326][ T9] waltop 0003:172F:0032.0008: probe with driver waltop failed with error -22 [ 175.386547][ T9] usb 4-1: USB disconnect, device number 31 [ 175.408248][ T5997] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 175.463902][ T8520] /dev/rnullb0: Can't open blockdev [ 175.560730][ T5997] usb 3-1: config 0 has an invalid descriptor of length 53, skipping remainder of the config [ 175.571017][ T5997] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 175.580117][ T5997] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 175.589208][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.598162][ T5997] usb 3-1: config 0 descriptor?? [ 176.148329][ T984] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 176.310767][ T984] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 176.322492][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 176.334727][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 176.358579][ T984] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 176.370319][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.379384][ T984] usb 4-1: Product: syz [ 176.384001][ T984] usb 4-1: Manufacturer: syz [ 176.388901][ T984] usb 4-1: SerialNumber: syz [ 176.408692][ T984] usb 4-1: config 0 descriptor?? [ 176.420395][ T984] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 177.188289][ T5869] Bluetooth: hci1: command 0x0405 tx timeout [ 177.572996][ T8554] syz0: rxe_newlink: already configured on wlan1 [ 177.639530][ T8554] /dev/rnullb0: Can't open blockdev [ 177.900177][ T10] usb 40-1: device descriptor read/8, error -110 [ 178.187390][ T6507] usb 3-1: USB disconnect, device number 48 [ 178.340757][ T10] usb usb40-port1: attempt power cycle [ 178.531205][ T8570] netlink: 'syz.2.721': attribute type 28 has an invalid length. [ 178.951877][ T10] usb usb40-port1: unable to enumerate USB device [ 178.955642][ T24] usb 4-1: USB disconnect, device number 32 [ 179.151622][ T8581] /dev/rnullb0: Can't open blockdev [ 179.463674][ T8595] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 179.470238][ T8595] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 179.483680][ T8595] vhci_hcd vhci_hcd.0: Device attached [ 179.573489][ T8596] vhci_hcd: connection closed [ 179.573698][ T1149] vhci_hcd: stop threads [ 179.590815][ T1149] vhci_hcd: release socket [ 179.595299][ T1149] vhci_hcd: disconnect device [ 179.808465][ T984] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 180.039757][ T984] usb 4-1: unable to get BOS descriptor or descriptor too short [ 180.065306][ T984] usb 4-1: not running at top speed; connect to a high speed hub [ 180.081994][ T984] usb 4-1: config index 0 descriptor too short (expected 58907, got 27) [ 180.102119][ T984] usb 4-1: config 1 has an invalid interface number: 130 but max is 0 [ 180.133546][ T984] usb 4-1: config 1 has no interface number 0 [ 180.155148][ T984] usb 4-1: config 1 interface 130 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 180.197757][ T984] usb 4-1: config 1 interface 130 has no altsetting 0 [ 180.223561][ T984] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice=84.ac [ 180.243177][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.264148][ T984] usb 4-1: Product: syz [ 180.272913][ T984] usb 4-1: Manufacturer: syz [ 180.283955][ T984] usb 4-1: SerialNumber: syz [ 180.302327][ T7308] pwc: recv_control_msg error -110 req 02 val 2700 [ 180.303240][ T8595] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 180.312736][ T7308] pwc: recv_control_msg error -32 req 02 val 2c00 [ 180.328515][ T7308] pwc: recv_control_msg error -32 req 04 val 1000 [ 180.348375][ T7308] pwc: recv_control_msg error -32 req 04 val 1300 [ 180.355438][ T7308] pwc: recv_control_msg error -32 req 04 val 1400 [ 180.368554][ T7308] pwc: recv_control_msg error -32 req 02 val 2000 [ 180.375390][ T7308] pwc: recv_control_msg error -32 req 02 val 2100 [ 180.388585][ T7308] pwc: recv_control_msg error -32 req 04 val 1500 [ 180.399668][ T7308] pwc: recv_control_msg error -32 req 02 val 2500 [ 180.418952][ T7308] pwc: recv_control_msg error -32 req 02 val 2400 [ 180.425758][ T7308] pwc: recv_control_msg error -32 req 02 val 2600 [ 180.438530][ T7308] pwc: recv_control_msg error -32 req 02 val 2900 [ 180.448830][ T7308] pwc: recv_control_msg error -32 req 02 val 2800 [ 180.468616][ T7308] pwc: recv_control_msg error -32 req 04 val 1100 [ 180.475401][ T7308] pwc: recv_control_msg error -32 req 04 val 1200 [ 180.490790][ T7308] pwc: Registered as video103. [ 180.496619][ T7308] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 180.551978][ T8611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.587237][ T8611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.808309][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 180.908972][ T8626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.940980][ T8626] bond0: (slave rose0): Enslaving as an active interface with an up link [ 180.978262][ T24] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 181.093368][ T984] dvb-usb: found a 'Gigabyte U7000' in cold state, will try to load a firmware [ 181.131105][ T984] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 181.143315][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.160643][ T984] dib0700: firmware download failed at 7 with -71 [ 181.177592][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 181.192709][ T984] usb 4-1: USB disconnect, device number 33 [ 181.206990][ T24] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 181.228530][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.247962][ T24] usb 3-1: config 0 descriptor?? [ 181.262593][ T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 181.278587][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 181.297185][ T24] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 181.316276][ T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 181.334176][ T24] usb 3-1: media controller created [ 181.345667][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 181.363123][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 181.373670][ T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 181.390904][ T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input26 [ 181.425267][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 181.444911][ T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 181.458500][ T10] usb 5-1: device descriptor read/64, error -71 [ 181.471680][ T8618] dvb-usb: bulk message failed: -22 (2/0) [ 181.499177][ T8618] /dev/rnullb0: Can't open blockdev [ 181.505935][ T7308] usb 3-1: USB disconnect, device number 49 [ 181.519242][ T984] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 181.531108][ T7308] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 181.682093][ T984] usb 4-1: config 5 has an invalid interface number: 123 but max is 0 [ 181.698343][ T984] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 181.718740][ T984] usb 4-1: config 5 has no interface number 0 [ 181.719764][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 181.724882][ T984] usb 4-1: config 5 interface 123 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 181.724906][ T984] usb 4-1: config 5 interface 123 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.777011][ T984] usb 4-1: config 5 interface 123 has no altsetting 0 [ 181.790365][ T984] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 181.810303][ T984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=19 [ 181.828341][ T984] usb 4-1: Product: syz [ 181.832543][ T984] usb 4-1: Manufacturer: syz [ 181.837142][ T984] usb 4-1: SerialNumber: syz [ 181.888502][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 181.898840][ T10] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 181.918419][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.942232][ T10] usb 5-1: config 0 descriptor?? [ 181.952734][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 182.113072][ T984] comedi comedi5: Wrong number of endpoints [ 182.128258][ T984] ni6501 4-1:5.123: driver 'ni6501' failed to auto-configure device. [ 182.151713][ T984] usb 4-1: USB disconnect, device number 34 [ 182.298501][ T24] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 182.460790][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 182.472066][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 182.484322][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 182.494321][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.507493][ T24] usb 3-1: config 0 descriptor?? [ 182.513677][ T8670] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 182.649862][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.661836][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.737310][ T8684] /dev/rnullb0: Can't open blockdev [ 182.773148][ T8688] /dev/rnullb0: Can't open blockdev [ 182.793824][ T24] ath6kl: Failed to submit usb control message: -71 [ 182.809441][ T24] ath6kl: unable to send the bmi data to the device: -71 [ 182.823009][ T24] ath6kl: Unable to send get target info: -71 [ 182.832020][ T24] ath6kl: Failed to init ath6kl core: -71 [ 182.840207][ T24] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 182.851823][ T24] usb 3-1: USB disconnect, device number 50 [ 182.950560][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 182.950560][ T8698] Use struct sctp_assoc_value instead [ 182.967937][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 182.967937][ T8698] Use struct sctp_assoc_value instead [ 182.973065][ T10] gspca_nw80x: reg_w err -71 [ 182.989405][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 182.989405][ T8698] Use struct sctp_assoc_value instead [ 182.994609][ T10] nw80x 5-1:0.0: probe with driver nw80x failed with error -71 [ 183.004802][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 183.004802][ T8698] Use struct sctp_assoc_value instead [ 183.019187][ T10] usb 5-1: USB disconnect, device number 34 [ 183.030617][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 183.030617][ T8698] Use struct sctp_assoc_value instead [ 183.046616][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 183.046616][ T8698] Use struct sctp_assoc_value instead [ 183.061376][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 183.061376][ T8698] Use struct sctp_assoc_value instead [ 183.076661][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 183.076661][ T8698] Use struct sctp_assoc_value instead [ 183.092121][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 183.092121][ T8698] Use struct sctp_assoc_value instead [ 183.107055][ T8698] sctp: [Deprecated]: syz.3.747 (pid 8698) Use of int in max_burst socket option. [ 183.107055][ T8698] Use struct sctp_assoc_value instead [ 183.148329][ T24] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 183.198439][ T7308] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 183.216193][ T8704] rdma_rxe: rxe_newlink: failed to add wlan1 [ 183.225400][ T8704] /dev/rnullb0: Can't open blockdev [ 183.252534][ T8707] /dev/rnullb0: Can't open blockdev [ 183.300183][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 183.310167][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.325126][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 183.332515][ T24] pvrusb2: ********** [ 183.336505][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 183.347509][ T24] pvrusb2: Important functionality might not be entirely working. [ 183.355610][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 183.367484][ T24] pvrusb2: ********** [ 183.372625][ T7308] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 183.382905][ T7308] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.391198][ T7308] usb 4-1: Product: syz [ 183.395358][ T7308] usb 4-1: Manufacturer: syz [ 183.400311][ T7308] usb 4-1: SerialNumber: syz [ 183.408647][ T7308] usb 4-1: config 0 descriptor?? [ 183.415645][ T7308] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 183.540181][ T2344] pvrusb2: Invalid write control endpoint [ 183.601344][ T2344] pvrusb2: Invalid write control endpoint [ 183.614173][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 183.633324][ T7308] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 183.648519][ T7308] sq905c 4-1:0.0: Get version command failed [ 183.650706][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.654762][ T7308] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 183.666584][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.685565][ T7308] usb 4-1: USB disconnect, device number 35 [ 183.883509][ T7308] usb 3-1: USB disconnect, device number 51 [ 183.899137][ T2344] pvrusb2: Device being rendered inoperable [ 183.905121][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 183.921349][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 183.930352][ T2344] pvrusb2: Attached sub-driver cx25840 [ 183.936941][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 183.951571][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 184.471333][ T8732] /dev/rnullb0: Can't open blockdev [ 184.478282][ T984] usb 4-1: new full-speed USB device number 36 using dummy_hcd [ 184.752783][ T8746] netlink: 'syz.4.762': attribute type 1 has an invalid length. [ 184.792555][ T8749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.761'. [ 184.809534][ T984] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 184.821147][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.876877][ T8754] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 184.877776][ T984] usb 4-1: config 0 descriptor?? [ 184.893887][ T8753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.904310][ T8754] /dev/rnullb0: Can't open blockdev [ 184.911149][ T8754] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 184.916022][ T8753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.918070][ T8754] /dev/rnullb0: Can't open blockdev [ 185.098330][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 185.198336][ T5906] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 185.268409][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 185.275235][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 185.285845][ T24] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 185.295013][ T24] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 185.303176][ T24] usb 3-1: Product: syz [ 185.307349][ T24] usb 3-1: Manufacturer: syz [ 185.311969][ T24] usb 3-1: SerialNumber: syz [ 185.358273][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 185.364260][ T5906] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 185.374000][ T5906] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.382064][ T5906] usb 5-1: config 0 has no interface number 0 [ 185.389566][ T5906] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.397584][ T5906] usb 5-1: config 0 has no interface number 0 [ 185.404484][ T5906] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.412631][ T5906] usb 5-1: config 0 has no interface number 0 [ 185.420534][ T5906] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.428575][ T5906] usb 5-1: config 0 has no interface number 0 [ 185.435691][ T5906] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.443763][ T5906] usb 5-1: config 0 has no interface number 0 [ 185.450898][ T5906] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.459304][ T5906] usb 5-1: config 0 has no interface number 0 [ 185.466406][ T5906] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.476012][ T5906] usb 5-1: config 0 has no interface number 0 [ 185.488683][ T5906] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 185.496754][ T5906] usb 5-1: config 0 has no interface number 0 [ 185.504984][ T5906] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 185.506530][ T8760] /dev/rnullb0: Can't open blockdev [ 185.514246][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.529544][ T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 185.537449][ T24] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 185.545428][ T5906] usb 5-1: Product: syz [ 185.549979][ T5906] usb 5-1: Manufacturer: syz [ 185.554617][ T5906] usb 5-1: SerialNumber: syz [ 185.559584][ T24] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 185.571033][ T5906] usb 5-1: config 0 descriptor?? [ 185.579792][ T5906] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz) [ 185.734263][ T8752] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 185.779247][ T5906] etas_es58x 5-1:0.2: could not parse product info: '424242424242' [ 185.868353][ T24] usb 3-1: palm_os_3_probe - error -110 getting bytes available request [ 185.877014][ T24] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 185.891905][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 185.904453][ T24] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 185.956911][ T984] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 185.983223][ T984] usb 4-1: USB disconnect, device number 36 [ 186.006141][ T24] usb 5-1: USB disconnect, device number 35 [ 186.026669][ T24] etas_es58x 5-1:0.2: Disconnecting syz syz [ 186.389674][ T24] usb 3-1: USB disconnect, device number 52 [ 186.403058][ T24] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 186.431844][ T24] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 186.455602][ T24] visor 3-1:1.0: device disconnected [ 186.513923][ T8809] /dev/rnullb0: Can't open blockdev [ 186.537853][ T8814] /dev/rnullb0: Can't open blockdev [ 186.904626][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803304d000: rx timeout, send abort [ 186.948300][ T7308] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 187.098252][ T7308] usb 4-1: device descriptor read/64, error -71 [ 187.220094][ T8831] /dev/rnullb0: Can't open blockdev [ 187.322643][ T8838] /dev/rnullb0: Can't open blockdev [ 187.338412][ T7308] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 187.340248][ T8835] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 187.352930][ T8835] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 187.361567][ T8835] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.367663][ T8835] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.375411][ T8835] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.383818][ T8835] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.390561][ T8835] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.398042][ T8835] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.403795][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803304f800: rx timeout, send abort [ 187.404914][ T8835] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.412881][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803304d000: abort rx timeout. Force session deactivation [ 187.460830][ T8845] input: syz1 as /devices/virtual/input/input28 [ 187.488336][ T7308] usb 4-1: device descriptor read/64, error -71 [ 187.608529][ T7308] usb usb4-port1: attempt power cycle [ 187.637233][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.645978][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.759174][ T6507] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 187.828272][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 187.909323][ T6507] usb 5-1: config 7 has an invalid interface number: 252 but max is 0 [ 187.912166][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803304f800: abort rx timeout. Force session deactivation [ 187.917528][ T6507] usb 5-1: config 7 has no interface number 0 [ 187.934272][ T6507] usb 5-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 187.944146][ T6507] usb 5-1: config 7 interface 252 has no altsetting 0 [ 187.951026][ T7308] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 187.960941][ T6507] usb 5-1: string descriptor 0 read error: -22 [ 187.967165][ T6507] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 187.976295][ T6507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.984846][ T7308] usb 4-1: device descriptor read/8, error -71 [ 187.994239][ T6507] idmouse 5-1:7.252: Unable to find bulk-in endpoint. [ 187.998397][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 188.010620][ T24] usb 3-1: config 254 has an invalid interface number: 235 but max is 0 [ 188.019283][ T24] usb 3-1: config 254 has no interface number 0 [ 188.025528][ T24] usb 3-1: config 254 interface 235 altsetting 2 bulk endpoint 0x6 has invalid maxpacket 32 [ 188.037314][ T24] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.048579][ T24] usb 3-1: config 254 interface 235 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 188.058749][ T24] usb 3-1: config 254 interface 235 has no altsetting 0 [ 188.067617][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1 [ 188.076758][ T24] usb 3-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3 [ 188.084968][ T24] usb 3-1: Product: syz [ 188.089214][ T24] usb 3-1: Manufacturer: syz [ 188.093807][ T24] usb 3-1: SerialNumber: syz [ 188.100491][ T8857] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 188.224274][ T5906] usb 5-1: USB disconnect, device number 36 [ 188.229041][ T7308] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 188.258634][ T7308] usb 4-1: device descriptor read/8, error -71 [ 188.332118][ T24] usbtest 3-1:254.235: couldn't get endpoints, -71 [ 188.342249][ T24] usbtest 3-1:254.235: probe with driver usbtest failed with error -71 [ 188.349579][ T8873] netlink: 'syz.1.794': attribute type 2 has an invalid length. [ 188.351507][ T8872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.361061][ T8873] netlink: 244 bytes leftover after parsing attributes in process `syz.1.794'. [ 188.370502][ T24] usb 3-1: USB disconnect, device number 53 [ 188.383036][ T7308] usb usb4-port1: unable to enumerate USB device [ 188.385610][ T8872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.435470][ T8879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.445103][ T8879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.005195][ T8902] /dev/rnullb0: Can't open blockdev [ 189.218246][ T6507] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 189.308324][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.330908][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.339136][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.347365][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.371389][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.402896][ T8911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.414232][ T8911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.418462][ T5867] Bluetooth: hci1: command 0x0405 tx timeout [ 189.428140][ T5869] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.429005][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.441162][ T6507] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 189.450494][ T6507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.458960][ T6507] usb 5-1: Product: syz [ 189.463205][ T6507] usb 5-1: Manufacturer: syz [ 189.468092][ T6507] usb 5-1: SerialNumber: syz [ 189.943980][ T8897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.954200][ T8897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.965480][ T6507] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 189.980271][ T6507] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 189.992852][ T8921] /dev/rnullb0: Can't open blockdev [ 189.999563][ T6507] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 190.016374][ T6507] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 190.029145][ T24] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 190.036984][ T6507] usb 5-1: USB disconnect, device number 37 [ 190.052217][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.061817][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.073822][ T8923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.083678][ T8923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.168274][ T24] usb 4-1: device descriptor read/64, error -71 [ 190.428985][ T24] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 190.558390][ T24] usb 4-1: device descriptor read/64, error -71 [ 190.670005][ T24] usb usb4-port1: attempt power cycle [ 191.038042][ T24] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 191.069226][ T24] usb 4-1: device descriptor read/8, error -71 [ 191.268319][ T7308] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 191.308966][ T24] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 191.328865][ T24] usb 4-1: device descriptor read/8, error -71 [ 191.418497][ T7308] usb 3-1: device descriptor read/64, error -71 [ 191.425617][ T5186] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.438943][ T24] usb usb4-port1: unable to enumerate USB device [ 191.498302][ T5867] Bluetooth: hci1: command 0x0405 tx timeout [ 191.504352][ T5867] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.510551][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.658252][ T7308] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 191.670660][ T8955] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 191.685118][ T8955] batadv_slave_1: entered promiscuous mode [ 191.693812][ T8954] batadv_slave_1: left promiscuous mode [ 191.820768][ T7308] usb 3-1: device descriptor read/64, error -71 [ 191.929974][ T7308] usb usb3-port1: attempt power cycle [ 192.144190][ T8964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.152935][ T8964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.279150][ T7308] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 192.312682][ T7308] usb 3-1: device descriptor read/8, error -71 [ 192.558305][ T7308] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 192.579490][ T7308] usb 3-1: device descriptor read/8, error -71 [ 192.592162][ T8945] Set syz1 is full, maxelem 65536 reached [ 192.690696][ T7308] usb usb3-port1: unable to enumerate USB device [ 192.724542][ T8973] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 192.807201][ T8981] /dev/rnullb0: Can't open blockdev [ 193.019388][ T8992] netlink: 256 bytes leftover after parsing attributes in process `syz.1.835'. [ 193.288319][ T24] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 193.452709][ T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.478774][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.486806][ T24] usb 5-1: Product: syz [ 193.508230][ T24] usb 5-1: Manufacturer: syz [ 193.512870][ T24] usb 5-1: SerialNumber: syz [ 193.528825][ T24] usb 5-1: config 0 descriptor?? [ 193.581574][ T5186] Bluetooth: hci2: command 0x0c1a tx timeout [ 193.736848][ T24] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.809307][ T9019] /dev/rnullb0: Can't open blockdev [ 193.976092][ T9025] trusted_key: encrypted_key: master key parameter is missing [ 194.380487][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.386906][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.688259][ T5906] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 194.782376][ T9039] /dev/rnullb0: Can't open blockdev [ 194.858467][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 194.867620][ T5906] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 194.883955][ T5906] usb 3-1: config 0 has no interface number 0 [ 194.892036][ T5906] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 194.903938][ T5906] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.914276][ T5906] usb 3-1: config 0 interface 85 has no altsetting 0 [ 194.924059][ T5906] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 194.938293][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.956600][ T5906] usb 3-1: Product: syz [ 194.961118][ T5906] usb 3-1: Manufacturer: syz [ 194.965752][ T5906] usb 3-1: SerialNumber: syz [ 194.979900][ T5906] usb 3-1: config 0 descriptor?? [ 195.394423][ T5906] appletouch 3-1:0.85: Failed to read mode from device. [ 195.413920][ T5906] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 195.436348][ T5906] usb 3-1: USB disconnect, device number 58 [ 195.760411][ T24] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 195.780767][ T24] usb 5-1: USB disconnect, device number 38 [ 195.896719][ T5186] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 196.002254][ T9051] netlink: 'syz.4.848': attribute type 1 has an invalid length. [ 196.034100][ T9051] 9p: Unknown parameter 'k' [ 196.044446][ T9051] vlan0: entered promiscuous mode [ 196.061058][ T9051] /dev/rnullb0: Can't open blockdev [ 196.368312][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 196.418246][ T5906] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 196.519847][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.532309][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.546564][ T24] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 196.556901][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.567274][ T24] usb 3-1: config 0 descriptor?? [ 196.580044][ T5906] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 196.592310][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.604223][ T5906] usb 5-1: config 0 descriptor?? [ 196.783953][ T24] hid-picolcd 0003:04D8:C002.0009: unknown main item tag 0x2 [ 196.802393][ T24] hid-picolcd 0003:04D8:C002.0009: item fetching failed at offset 3/7 [ 196.843721][ T24] hid-picolcd 0003:04D8:C002.0009: device report parse failed [ 196.855763][ T24] hid-picolcd 0003:04D8:C002.0009: probe with driver hid-picolcd failed with error -22 [ 196.878751][ T24] usb 3-1: USB disconnect, device number 59 [ 196.924589][ T9063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.278238][ T24] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 197.461326][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 197.472645][ T5906] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 197.491221][ T5906] [drm:udl_init] *ERROR* Selecting channel failed [ 197.497959][ T24] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 197.593861][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.607115][ T5906] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 197.626875][ T5906] [drm] Initialized udl on minor 2 [ 197.633618][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 197.651725][ T24] usb 3-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0 [ 197.664724][ T5906] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.672918][ T5906] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 197.681182][ T5899] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.696510][ T24] usb 3-1: string descriptor 0 read error: -22 [ 197.703159][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 197.714285][ T5899] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 197.722442][ T5906] usb 5-1: USB disconnect, device number 39 [ 197.733218][ T5899] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 197.742307][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.777404][ T24] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 197.792928][ T24] cdc_ncm 3-1:1.0: bind() failure [ 198.013348][ T5906] usb 3-1: USB disconnect, device number 60 [ 198.834952][ T9136] /dev/rnullb0: Can't open blockdev [ 199.048472][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 199.069057][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.077658][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.234616][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.258759][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 199.267689][ T24] usb 3-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 199.298335][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.314329][ T24] usb 3-1: config 0 descriptor?? [ 199.507004][ T9162] netlink: 4416 bytes leftover after parsing attributes in process `syz.4.864'. [ 199.557733][ T9163] /dev/rnullb0: Can't open blockdev [ 199.724180][ T24] Bluetooth: Can't get state to change to load configuration err [ 199.732466][ T24] Bluetooth: Loading sysconfig file failed [ 199.741276][ T24] ath3k 3-1:0.0: probe with driver ath3k failed with error -16 [ 199.935766][ T9194] Bluetooth: MGMT ver 1.23 [ 199.945319][ T9] usb 3-1: USB disconnect, device number 61 [ 200.118259][ T7308] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 200.280755][ T7308] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 200.290099][ T7308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.298104][ T7308] usb 5-1: Product: syz [ 200.302789][ T7308] usb 5-1: Manufacturer: syz [ 200.307405][ T7308] usb 5-1: SerialNumber: syz [ 200.320530][ T7308] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 200.335602][ T9] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 200.550593][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.562229][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.577046][ T9187] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.588145][ T9187] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.599031][ T24] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 200.618654][ T24] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 200.751054][ T24] usb 5-1: USB disconnect, device number 40 [ 201.154814][ T9225] /dev/rnullb0: Can't open blockdev [ 201.190841][ T9230] IPv6: NLM_F_CREATE should be specified when creating new route [ 201.200554][ T9230] IPv6: NLM_F_REPLACE set, but no existing node found! [ 201.209373][ T9230] /dev/rnullb0: Can't open blockdev [ 201.250979][ T9239] trusted_key: syz.1.886 sent an empty control message without MSG_MORE. [ 201.261378][ T9239] /dev/rnullb0: Can't open blockdev [ 201.498229][ T5899] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 201.578360][ T9] usb 5-1: Service connection timeout for: 256 [ 201.595048][ T9] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 201.617061][ T9] ath9k_htc: Failed to initialize the device [ 201.627449][ T24] usb 5-1: ath9k_htc: USB layer deinitialized [ 201.660308][ T5899] usb 3-1: not running at top speed; connect to a high speed hub [ 201.669780][ T5899] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1032, setting to 64 [ 201.684609][ T5899] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 201.697607][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.706765][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.714846][ T5899] usb 3-1: Product: syz [ 201.719211][ T5899] usb 3-1: Manufacturer: ᐁ [ 201.723826][ T5899] usb 3-1: SerialNumber: syz [ 201.739282][ T9241] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 202.152124][ T9278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.160916][ T9278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.268484][ T5899] cdc_ncm 3-1:1.0: bind() failure [ 202.276358][ T5899] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 202.312314][ T5899] cdc_ncm 3-1:1.1: bind() failure [ 202.330397][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.899'. [ 202.354780][ T5899] usb 3-1: USB disconnect, device number 62 [ 203.126572][ T9309] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 203.133762][ T9309] /dev/rnullb0: Can't open blockdev [ 203.173041][ T9311] netlink: 'syz.1.908': attribute type 4 has an invalid length. [ 203.187964][ T9311] /dev/rnullb0: Can't open blockdev [ 203.199176][ T5906] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 203.359977][ T5906] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 203.378265][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.388970][ T5906] usb 3-1: config 0 descriptor?? [ 203.606236][ T5906] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 203.811792][ T5906] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 203.825430][ T5906] [drm] Initialized udl on minor 2 [ 204.228618][ T5906] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 204.247448][ T5906] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 204.254478][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 204.270880][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 204.285625][ T5906] usb 3-1: USB disconnect, device number 63 [ 204.292670][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 204.809772][ T9325] /dev/rnullb0: Can't open blockdev [ 205.048255][ T6507] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 205.198279][ T6507] usb 3-1: device descriptor read/64, error -71 [ 205.448267][ T6507] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 205.588525][ T6507] usb 3-1: device descriptor read/64, error -71 [ 205.718573][ T6507] usb usb3-port1: attempt power cycle [ 205.853682][ T5186] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 206.061004][ T6507] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 206.098887][ T6507] usb 3-1: device descriptor read/8, error -71 [ 206.351865][ T6507] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 206.389350][ T6507] usb 3-1: device descriptor read/8, error -71 [ 206.428771][ T9359] /dev/rnullb0: Can't open blockdev [ 206.507474][ T9370] /dev/rnullb0: Can't open blockdev [ 206.515308][ T6507] usb usb3-port1: unable to enumerate USB device [ 206.908457][ T9381] netlink: 1343 bytes leftover after parsing attributes in process `syz.4.925'. [ 207.779816][ T9384] netlink: 44 bytes leftover after parsing attributes in process `syz.4.926'. [ 207.802975][ T9386] /dev/rnullb0: Can't open blockdev [ 207.818286][ T9384] netlink: 12 bytes leftover after parsing attributes in process `syz.4.926'. [ 207.861582][ T9384] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 207.960110][ T9390] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.927'. [ 208.025562][ T9390] /dev/rnullb0: Can't open blockdev [ 208.238890][ T5867] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.246158][ T5867] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.254509][ T5867] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.267229][ T5867] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.278957][ T5867] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 208.325782][ T9394] wlan1 speed is unknown, defaulting to 1000 [ 208.516126][ T4321] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.610452][ T4321] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.637752][ T9394] chnl_net:caif_netlink_parms(): no params data found [ 208.662510][ T9400] /dev/rnullb0: Can't open blockdev [ 208.686727][ T4321] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.774777][ T4321] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.804553][ T9394] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.830025][ T9394] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.837254][ T9394] bridge_slave_0: entered allmulticast mode [ 208.844702][ T9394] bridge_slave_0: entered promiscuous mode [ 208.852567][ T9394] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.859783][ T9394] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.868655][ T9394] bridge_slave_1: entered allmulticast mode [ 208.875502][ T9394] bridge_slave_1: entered promiscuous mode [ 208.941313][ T9394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.976969][ T9394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 209.047495][ T4321] bridge_slave_1: left allmulticast mode [ 209.057355][ T4321] bridge_slave_1: left promiscuous mode [ 209.064537][ T4321] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.073818][ T4321] bridge_slave_0: left allmulticast mode [ 209.079872][ T4321] bridge_slave_0: left promiscuous mode [ 209.085758][ T4321] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.168390][ T7308] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 209.284414][ T4321] bond0 (unregistering): (slave 30): Releasing backup interface [ 209.296473][ T4321] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.308885][ T4321] bond0 (unregistering): Released all slaves [ 209.320528][ T9394] team0: Port device team_slave_0 added [ 209.332021][ T9394] team0: Port device team_slave_1 added [ 209.351974][ T7308] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 209.367884][ T7308] usb 5-1: config 0 interface 0 has no altsetting 0 [ 209.381711][ T7308] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 209.391280][ T7308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.400852][ T7308] usb 5-1: Product: syz [ 209.405078][ T7308] usb 5-1: Manufacturer: syz [ 209.410645][ T7308] usb 5-1: SerialNumber: syz [ 209.419559][ T7308] usb 5-1: config 0 descriptor?? [ 209.429600][ T7308] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 209.445115][ T7308] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 209.455571][ T7308] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 209.465110][ T7308] usb 5-1: media controller created [ 209.484446][ T7308] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 209.506183][ T4321] tipc: Disabling bearer [ 209.511899][ T4321] tipc: Disabling bearer [ 209.517422][ T4321] tipc: Left network mode [ 209.554337][ T7308] DVB: Unable to find symbol tda10046_attach() [ 209.556443][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.570001][ T7308] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 209.570870][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.588635][ T7308] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 209.637108][ T9394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.661524][ T9394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.669221][ T9394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.695615][ T9394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.773999][ T9394] hsr_slave_0: entered promiscuous mode [ 209.780631][ T9394] hsr_slave_1: entered promiscuous mode [ 209.786889][ T9394] debugfs: 'hsr0' already exists in 'hsr' [ 209.796747][ T9394] Cannot create hsr debugfs directory [ 210.095776][ T4321] hsr_slave_0: left promiscuous mode [ 210.111391][ T4321] hsr_slave_1: left promiscuous mode [ 210.128835][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.136913][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.155832][ T4321] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.178308][ T4321] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.203134][ T4321] veth1_macvtap: left promiscuous mode [ 210.218755][ T4321] veth0_macvtap: left promiscuous mode [ 210.224392][ T4321] veth1_vlan: left promiscuous mode [ 210.238465][ T4321] veth0_vlan: left promiscuous mode [ 210.307078][ T5867] Bluetooth: hci4: command tx timeout [ 210.521609][ T7308] dvb_usb_m920x 5-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 210.542598][ T9449] /dev/rnullb0: Can't open blockdev [ 210.559751][ T7308] usb 5-1: USB disconnect, device number 41 [ 210.615573][ T9452] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 210.677835][ T4321] team0 (unregistering): Port device team_slave_1 removed [ 210.704441][ T4321] team0 (unregistering): Port device team_slave_0 removed [ 211.424765][ T9394] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.464834][ T9394] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.510925][ T9465] /dev/rnullb0: Can't open blockdev [ 211.516687][ T9394] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.542599][ T9394] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.578035][ T9475] IPVS: set_ctl: invalid protocol: 59 224.0.0.1:20001 [ 211.669613][ T9394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.713254][ T9394] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.733421][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.740575][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.784800][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.791957][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.804034][ T9487] /dev/rnullb0: Can't open blockdev [ 211.930021][ T9342] syz.1.918 (9342) used greatest stack depth: 17936 bytes left [ 212.029294][ T5867] Bluetooth: hci3: connection err: -111 [ 212.458349][ T5867] Bluetooth: hci4: command tx timeout [ 212.476497][ T9520] /dev/rnullb0: Can't open blockdev [ 212.654163][ T9523] /dev/rnullb0: Can't open blockdev [ 212.893365][ T9394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.964853][ T9535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.001909][ T9535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.060569][ T6507] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 213.249485][ T6507] usb 3-1: Using ep0 maxpacket: 32 [ 213.266064][ T6507] usb 3-1: unable to get BOS descriptor or descriptor too short [ 213.292603][ T6507] usb 3-1: config 7 has an invalid interface number: 115 but max is 1 [ 213.315682][ T6507] usb 3-1: config 7 has an invalid interface number: 250 but max is 1 [ 213.340226][ T6507] usb 3-1: config 7 has no interface number 0 [ 213.355891][ T6507] usb 3-1: config 7 has no interface number 1 [ 213.371622][ T6507] usb 3-1: config 7 interface 115 has no altsetting 0 [ 213.389451][ T6507] usb 3-1: config 7 interface 250 has no altsetting 0 [ 213.401169][ T9552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.417736][ T6507] usb 3-1: string descriptor 0 read error: -22 [ 213.431263][ T6507] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=df.93 [ 213.448785][ T9552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.451930][ T6507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.563977][ T9394] veth0_vlan: entered promiscuous mode [ 213.574735][ T9394] veth1_vlan: entered promiscuous mode [ 213.607303][ T9394] veth0_macvtap: entered promiscuous mode [ 213.617993][ T9394] veth1_macvtap: entered promiscuous mode [ 213.635913][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.661031][ T9394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.686316][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.720244][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.745990][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.792409][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.824243][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.835343][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.853211][ T7308] usb 3-1: USB disconnect, device number 68 [ 213.882626][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.891247][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.034958][ T9585] /dev/rnullb0: Can't open blockdev [ 214.077044][ T9590] /dev/rnullb0: Can't open blockdev [ 214.090343][ T5899] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 214.249626][ T5899] usb 5-1: config index 0 descriptor too short (expected 143, got 27) [ 214.258001][ T5899] usb 5-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 214.288762][ T5899] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 214.300202][ T5899] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE7, changing to 0x87 [ 214.313992][ T5899] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 214.326473][ T5899] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 214.339909][ T5899] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 214.349960][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.502146][ T9614] netlink: 512 bytes leftover after parsing attributes in process `syz.2.962'. [ 214.538412][ T5186] Bluetooth: hci4: command tx timeout [ 215.428381][ T5899] ath6kl: Failed to submit usb control message: -110 [ 215.435147][ T5899] ath6kl: unable to send the bmi data to the device: -110 [ 215.442557][ T5899] ath6kl: Unable to send get target info: -110 [ 215.449043][ T5899] ath6kl: Failed to init ath6kl core: -110 [ 215.455097][ T5899] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -110 [ 216.618579][ T5186] Bluetooth: hci4: command 0x0419 tx timeout [ 216.777482][ T6507] usb 5-1: USB disconnect, device number 42 [ 218.698848][ T5186] Bluetooth: hci4: command 0x0419 tx timeout [ 255.819875][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.826215][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.282491][ T9694] /dev/rnullb0: Can't open blockdev [ 277.506188][ T9714] Invalid ELF header type: 3 != 1 [ 277.527253][ T9714] Invalid ELF header type: 3 != 1 [ 277.539522][ T9714] Invalid ELF header type: 2 != 1 [ 277.545092][ T9715] /dev/sg0: Can't lookup blockdev [ 277.608768][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 277.617676][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.972'. [ 277.642995][ T9718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.659803][ T9718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.669592][ T9718] /dev/rnullb0: Can't open blockdev [ 277.724656][ T9724] syzkaller1: entered promiscuous mode [ 277.744240][ T9724] syzkaller1: entered allmulticast mode [ 277.759245][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.2.975'. [ 277.802863][ T9730] /dev/rnullb0: Can't open blockdev [ 278.070834][ T9741] /dev/rnullb0: Can't open blockdev [ 278.312411][ T9745] /dev/rnullb0: Can't open blockdev [ 278.320829][ T9747] : Can't lookup blockdev [ 278.428252][ T6507] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 278.568336][ T6507] usb 6-1: device descriptor read/64, error -71 [ 278.808270][ T6507] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 278.938351][ T6507] usb 6-1: device descriptor read/64, error -71 [ 279.060126][ T6507] usb usb6-port1: attempt power cycle [ 279.400435][ T6507] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 279.431251][ T6507] usb 6-1: device descriptor read/8, error -71 [ 279.678278][ T6507] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 279.709492][ T6507] usb 6-1: device descriptor read/8, error -71 [ 279.838280][ T6507] usb usb6-port1: unable to enumerate USB device [ 317.260300][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.266663][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.698236][ T5186] Bluetooth: hci4: command 0x0419 tx timeout [ 345.165296][ T9764] /dev/rnullb0: Can't open blockdev [ 345.409792][ T24] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 345.568236][ T24] usb 5-1: device descriptor read/64, error -71 [ 345.818394][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 345.836748][ T5906] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 345.855372][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.2.989'. [ 345.921094][ T9776] bridge0: port 3(hsr_slave_1) entered blocking state [ 345.931847][ T9776] bridge0: port 3(hsr_slave_1) entered disabled state [ 345.939282][ T9776] hsr_slave_1: entered allmulticast mode [ 345.945995][ T9776] hsr_slave_1: left allmulticast mode [ 345.957679][ T5186] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 345.957709][ T5186] Bluetooth: hci2: Dropping invalid advertising data [ 345.974988][ T24] usb 5-1: device descriptor read/64, error -71 [ 345.985156][ T5186] Bluetooth: hci2: Malformed LE Event: 0x02 [ 345.991698][ T5906] usb 6-1: device descriptor read/64, error -71 [ 346.103195][ T9778] /dev/rnullb0: Can't open blockdev [ 346.119016][ T24] usb usb5-port1: attempt power cycle [ 346.268294][ T5906] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 346.418412][ T5906] usb 6-1: device descriptor read/64, error -71 [ 346.488412][ T24] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 346.519405][ T24] usb 5-1: device descriptor read/8, error -71 [ 346.529399][ T5906] usb usb6-port1: attempt power cycle [ 346.768519][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 346.799183][ T24] usb 5-1: device descriptor read/8, error -71 [ 346.865425][ T9787] /dev/rnullb0: Can't open blockdev [ 346.878744][ T5906] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 346.908921][ T5906] usb 6-1: device descriptor read/8, error -71 [ 346.931525][ T24] usb usb5-port1: unable to enumerate USB device [ 346.964290][ T9789] /dev/rnullb0: Can't open blockdev [ 347.043459][ T9793] program syz.1.996 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.131512][ T9801] bridge0: port 3(hsr_slave_1) entered blocking state [ 347.138591][ T9801] bridge0: port 3(hsr_slave_1) entered disabled state [ 347.145639][ T9801] hsr_slave_1: entered allmulticast mode [ 347.154228][ T9801] hsr_slave_1: left allmulticast mode [ 347.161347][ T5906] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 347.405142][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.415106][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.631349][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.641601][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.654413][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.666041][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.677262][ T9822] /dev/rnullb0: Can't open blockdev [ 348.137999][ T5906] usb 6-1: device descriptor read/8, error -71 [ 348.247366][ T9833] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1009'. [ 348.248393][ T5906] usb usb6-port1: unable to enumerate USB device [ 348.265730][ T9833] /dev/rnullb0: Can't open blockdev [ 348.277042][ T9831] netlink: 'syz.2.1007': attribute type 5 has an invalid length. [ 348.291768][ T9831] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1007'. [ 348.304047][ T9834] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 348.316393][ T9834] block device autoloading is deprecated and will be removed. [ 348.361940][ T5867] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 348.499684][ T9849] block nbd2: Attempted send on invalid socket [ 348.517814][ T9849] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.527535][ T9849] block nbd2: Attempted send on invalid socket [ 348.534744][ T9849] I/O error, dev nbd2, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.563669][ T9856] netlink: 'syz.1.1016': attribute type 2 has an invalid length. [ 348.576791][ T9849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 348.587362][ T9849] block nbd2: Attempted send on invalid socket [ 348.595912][ T9849] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.606139][ T9849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 348.618718][ T9849] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 348.626452][ T9849] UDF-fs: Scanning with blocksize 512 failed [ 348.634364][ T9849] block nbd2: Attempted send on invalid socket [ 348.641176][ T9849] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.651724][ T9849] block nbd2: Attempted send on invalid socket [ 348.658049][ T9849] I/O error, dev nbd2, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.721253][ T9849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 348.757346][ T9849] block nbd2: Attempted send on invalid socket [ 348.782213][ T9849] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.825445][ T9849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 348.877589][ T9849] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 348.900622][ T9863] /dev/rnullb0: Can't open blockdev [ 348.906395][ T9849] UDF-fs: Scanning with blocksize 1024 failed [ 348.924771][ T9849] block nbd2: Attempted send on invalid socket [ 348.949259][ T9849] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.961469][ T9849] block nbd2: Attempted send on invalid socket [ 348.967770][ T9849] I/O error, dev nbd2, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 348.978894][ T9849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 348.990295][ T9849] block nbd2: Attempted send on invalid socket [ 348.996588][ T9849] I/O error, dev nbd2, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.009678][ T9849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 349.020971][ T9849] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 349.029719][ T9849] UDF-fs: Scanning with blocksize 2048 failed [ 349.036445][ T9849] block nbd2: Attempted send on invalid socket [ 349.044112][ T9849] I/O error, dev nbd2, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 349.056686][ T9849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 349.067193][ T9849] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 349.077971][ T9849] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 349.086190][ T9849] UDF-fs: Scanning with blocksize 4096 failed [ 349.093506][ T9849] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 349.116069][ T9850] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 349.127072][ T9850] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 349.138074][ T9850] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 349.146233][ T9850] UDF-fs: Scanning with blocksize 512 failed [ 349.154330][ T9850] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 349.166803][ T9850] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 349.177439][ T6507] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 349.201817][ T9850] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 349.222130][ T9850] UDF-fs: Scanning with blocksize 1024 failed [ 349.237331][ T9850] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 349.248086][ T9850] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 349.260263][ T9850] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 349.267946][ T9850] UDF-fs: Scanning with blocksize 2048 failed [ 349.280453][ T9850] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 349.291597][ T9850] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 349.302369][ T9850] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 349.333619][ T9850] UDF-fs: Scanning with blocksize 4096 failed [ 349.344324][ T9850] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 349.361257][ T6507] usb 6-1: config 0 has an invalid interface number: 3 but max is 0 [ 349.375419][ T6507] usb 6-1: config 0 has no interface number 0 [ 349.415871][ T6507] usb 6-1: config 0 interface 3 has no altsetting 0 [ 349.468952][ T6507] usb 6-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=53.69 [ 349.498590][ T6507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.537746][ T6507] usb 6-1: Product: syz [ 349.547861][ T6507] usb 6-1: Manufacturer: syz [ 349.557972][ T6507] usb 6-1: SerialNumber: syz [ 349.592476][ T6507] usb 6-1: config 0 descriptor?? [ 349.603007][ T9877] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1023'. [ 349.639606][ T9877] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1023'. [ 349.722236][ T9886] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 349.731111][ T9886] /dev/rnullb0: Can't open blockdev [ 349.829962][ T6507] cdc_subset 6-1:0.3: probe with driver cdc_subset failed with error -22 [ 349.868215][ T7308] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 349.894326][ T9893] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1027'. [ 350.021777][ T7308] usb 5-1: not running at top speed; connect to a high speed hub [ 350.035012][ T7308] usb 5-1: config 5 has an invalid interface number: 72 but max is 1 [ 350.049813][ T7308] usb 5-1: config 5 has an invalid interface number: 208 but max is 1 [ 350.061633][ T7308] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 350.071601][ T7308] usb 5-1: config 5 has no interface number 0 [ 350.077832][ T7308] usb 5-1: config 5 has no interface number 1 [ 350.085242][ T7308] usb 5-1: config 5 interface 208 altsetting 5 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 350.097195][ T7308] usb 5-1: config 5 interface 208 altsetting 5 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 350.110007][ T7308] usb 5-1: config 5 interface 208 altsetting 5 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 350.123493][ T6507] usb 6-1: USB disconnect, device number 10 [ 350.146098][ T7308] usb 5-1: config 5 interface 208 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 350.162100][ T7308] usb 5-1: config 5 interface 208 altsetting 5 has a duplicate endpoint with address 0x3, skipping [ 350.176061][ T7308] usb 5-1: config 5 interface 208 altsetting 5 endpoint 0x5 has invalid wMaxPacketSize 0 [ 350.187581][ T7308] usb 5-1: config 5 interface 208 altsetting 5 endpoint 0xB has invalid maxpacket 72, setting to 64 [ 350.200370][ T7308] usb 5-1: config 5 interface 72 has no altsetting 0 [ 350.207225][ T7308] usb 5-1: config 5 interface 208 has no altsetting 0 [ 350.216487][ T7308] usb 5-1: Dual-Role OTG device on HNP port [ 350.227478][ T7308] usb 5-1: New USB device found, idVendor=413c, idProduct=81c2, bcdDevice=95.55 [ 350.237811][ T7308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.247922][ T7308] usb 5-1: Product: э [ 350.252155][ T7308] usb 5-1: Manufacturer: Ъ [ 350.256769][ T7308] usb 5-1: SerialNumber: syz [ 350.500255][ T7308] usb 5-1: USB disconnect, device number 47 [ 350.943985][ T9908] /dev/rnullb0: Can't open blockdev [ 351.098692][ T9911] md2: using deprecated bitmap file support [ 351.104915][ T9911] md2: error: bitmap file must be a regular file [ 351.174694][ T9922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 351.188006][ T9922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1036'. [ 351.243787][ T9928] /dev/rnullb0: Can't open blockdev [ 351.378553][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 351.529437][ T24] usb 6-1: device descriptor read/64, error -71 [ 351.788168][ T24] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 351.930967][ T24] usb 6-1: device descriptor read/64, error -71 [ 352.039489][ T24] usb usb6-port1: attempt power cycle [ 352.198501][ T9958] zonefs (nullb0) ERROR: Not a zoned block device [ 352.264488][ T9960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.298926][ T9960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.324598][ T9960] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 352.355735][ T9960] /dev/rnullb0: Can't open blockdev [ 352.384243][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 352.419010][ T24] usb 6-1: device descriptor read/8, error -71 [ 352.515757][ T9964] /dev/rnullb0: Can't open blockdev [ 352.622279][ T9980] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 352.668457][ T24] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 352.691843][ T24] usb 6-1: device descriptor read/8, error -71 [ 352.800011][ T24] usb usb6-port1: unable to enumerate USB device [ 352.900403][ T9994] /dev/rnullb0: Can't open blockdev [ 352.940838][ T9996] tipc: Enabling of bearer rejected, failed to enable media [ 353.034395][T10003] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 353.048289][T10003] /dev/rnullb0: Can't open blockdev [ 353.134807][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1065'. [ 353.145804][T10009] /dev/rnullb0: Can't open blockdev [ 353.424803][T10016] /dev/rnullb0: Can't open blockdev [ 353.477313][T10019] overlayfs: upper fs does not support tmpfile. [ 353.487605][T10019] /dev/rnullb0: Can't open blockdev [ 353.531915][T10023] /dev/rnullb0: Can't open blockdev [ 353.727783][T10036] /dev/rnullb0: Can't lookup blockdev [ 353.997232][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 354.006543][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1079'. [ 354.143772][T10070] /dev/rnullb0: Can't open blockdev [ 354.223081][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 354.230625][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 354.278193][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 354.418173][ T24] usb 5-1: device descriptor read/64, error -71 [ 354.488432][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 354.494697][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 354.658227][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 354.788292][ T24] usb 5-1: device descriptor read/64, error -71 [ 354.887404][T10092] overlayfs: failed to resolve './cgroup': -2 [ 354.899741][ T24] usb usb5-port1: attempt power cycle [ 355.001005][T10094] wlan1 speed is unknown, defaulting to 1000 [ 355.008526][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 355.014559][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 355.039421][T10075] ceph: No mds server is up or the cluster is laggy [ 355.238186][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 355.269196][ T24] usb 5-1: device descriptor read/8, error -71 [ 355.636304][T10123] overlayfs: failed to clone upperpath [ 356.125738][T10127] /dev/rnullb0: Can't open blockdev [ 356.308383][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 356.338682][ T24] usb 5-1: device descriptor read/8, error -71 [ 356.448355][ T24] usb usb5-port1: unable to enumerate USB device [ 356.769955][T10139] /dev/rnullb0: Can't lookup blockdev [ 356.925094][ T30] audit: type=1326 audit(2000000223.060:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10155 comm="syz.2.1111" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f68cb98ebe9 code=0x0 [ 357.020663][T10160] /dev/rnullb0: Can't open blockdev [ 357.213664][T10176] /dev/rnullb0: Can't open blockdev [ 357.312279][T10172] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 357.330908][T10172] File: /dev/rnullb0 PID: 10172 Comm: syz.1.1116 [ 357.548233][T10193] /dev/rnullb0: Can't open blockdev [ 357.557277][T10191] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.590804][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 357.848352][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 358.008350][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 358.016100][ T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 358.025904][ T9] usb 5-1: config 0 has no interface number 0 [ 358.035652][ T9] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 358.048019][ T9] usb 5-1: config 0 interface 85 has no altsetting 0 [ 358.057478][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 358.068439][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.076673][ T9] usb 5-1: Product: syz [ 358.082213][ T9] usb 5-1: Manufacturer: syz [ 358.086839][ T9] usb 5-1: SerialNumber: syz [ 358.103324][ T9] usb 5-1: config 0 descriptor?? [ 358.164146][T10208] /dev/rnullb0: Can't open blockdev [ 358.727051][ T9] appletouch 5-1:0.85: Geyser mode initialized. [ 358.734590][ T9] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input33 [ 358.746571][ C1] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 358.774564][T10236] fuse: Bad value for 'user_id' [ 358.780561][T10236] fuse: Bad value for 'user_id' [ 358.787632][T10236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.798018][T10236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.810050][T10236] Device name cannot be null; rc = [-22] [ 358.898792][ T7308] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 358.929350][T10196] /dev/rnullb0: Can't open blockdev [ 358.935961][ T9] usb 5-1: USB disconnect, device number 52 [ 358.948695][ T9] appletouch 5-1:0.85: input: appletouch disconnected [ 359.049403][ T7308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.060401][ T7308] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.070157][ T7308] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 359.083182][ T7308] usb 6-1: New USB device found, idVendor=05ac, idProduct=8102, bcdDevice= 0.00 [ 359.092365][ T7308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.102293][ T7308] usb 6-1: config 0 descriptor?? [ 359.514512][T10228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.523246][T10228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.038631][T10253] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1139'. [ 361.585740][T10282] raw_sendmsg: syz.2.1148 forgot to set AF_INET. Fix it! [ 361.720734][ T7308] usbhid 6-1:0.0: can't add hid device: -71 [ 361.737445][ T7308] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 361.750361][ T7308] usb 6-1: USB disconnect, device number 15 [ 361.858441][ T5899] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 362.003194][T10296] openvswitch: netlink: Flow key attr not present in new flow. [ 362.019560][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 362.027494][ T5899] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 362.036186][ T5899] usb 5-1: config 0 has no interface number 0 [ 362.042490][ T5899] usb 5-1: config 0 interface 184 has no altsetting 0 [ 362.052615][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 362.062323][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.070458][ T5899] usb 5-1: Product: syz [ 362.074626][ T5899] usb 5-1: Manufacturer: syz [ 362.079278][ T5899] usb 5-1: SerialNumber: syz [ 362.091029][ T5899] usb 5-1: config 0 descriptor?? [ 362.102929][ T5899] smsc75xx v1.0.0 [ 362.253952][T10315] netlink: 'syz.5.1159': attribute type 1 has an invalid length. [ 362.264514][T10315] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1159'. [ 362.287293][T10317] /dev/rnullb0: Can't lookup blockdev [ 362.484795][T10331] vxfs: WRONG superblock magic 00000000 at 1 [ 362.492724][T10331] vxfs: WRONG superblock magic 00000000 at 8 [ 362.499583][T10331] vxfs: can't find superblock. [ 362.639135][ T7308] hid (null): unknown global tag 0xe [ 362.645781][ T7308] hid (null): unknown global tag 0xd [ 362.654121][ T7308] hid (null): unknown global tag 0xd [ 362.662861][ T5867] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 362.672544][ T5867] CPU: 0 UID: 0 PID: 5867 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) [ 362.672574][ T5867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.672588][ T5867] Workqueue: hci4 hci_rx_work [ 362.672620][ T5867] Call Trace: [ 362.672628][ T5867] [ 362.672635][ T5867] dump_stack_lvl+0x189/0x250 [ 362.672662][ T5867] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.672687][ T5867] ? __pfx__printk+0x10/0x10 [ 362.672709][ T5867] ? kernfs_root+0x1c/0x230 [ 362.672733][ T5867] ? kernfs_path_from_node+0x250/0x290 [ 362.672753][ T5867] ? kernfs_path_from_node+0x2f/0x290 [ 362.672777][ T5867] sysfs_create_dir_ns+0x259/0x280 [ 362.672799][ T5867] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 362.672820][ T5867] ? do_raw_spin_unlock+0x122/0x240 [ 362.672843][ T5867] kobject_add_internal+0x59f/0xb40 [ 362.672870][ T5867] kobject_add+0x155/0x220 [ 362.672892][ T5867] ? __pfx_kobject_add+0x10/0x10 [ 362.672914][ T5867] ? _raw_spin_unlock+0x28/0x50 [ 362.672934][ T5867] ? get_device_parent+0x366/0x3a0 [ 362.672956][ T5867] device_add+0x408/0xb50 [ 362.672977][ T5867] hci_conn_add_sysfs+0xd5/0x1e0 [ 362.673001][ T5867] le_conn_complete_evt+0xc3a/0x1220 [ 362.673027][ T5867] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 362.673048][ T5867] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 362.673068][ T5867] ? __asan_memcpy+0x40/0x70 [ 362.673091][ T5867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 362.673112][ T5867] ? skb_pull_data+0xfb/0x200 [ 362.673131][ T5867] hci_le_conn_complete_evt+0x187/0x450 [ 362.673154][ T5867] hci_event_packet+0x78c/0x1200 [ 362.673172][ T5867] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 362.673191][ T5867] ? __pfx_hci_event_packet+0x10/0x10 [ 362.673209][ T5867] ? rcu_is_watching+0x15/0xb0 [ 362.673228][ T5867] ? hci_send_to_monitor+0xe2/0x570 [ 362.673250][ T5867] hci_rx_work+0x46a/0xe80 [ 362.673270][ T5867] ? process_scheduled_works+0x9ef/0x17b0 [ 362.673289][ T5867] process_scheduled_works+0xae1/0x17b0 [ 362.673317][ T5867] ? __pfx_process_scheduled_works+0x10/0x10 [ 362.673342][ T5867] worker_thread+0x8a0/0xda0 [ 362.673369][ T5867] kthread+0x711/0x8a0 [ 362.673391][ T5867] ? __pfx_worker_thread+0x10/0x10 [ 362.673409][ T5867] ? __pfx_kthread+0x10/0x10 [ 362.673429][ T5867] ? rcu_is_watching+0x15/0xb0 [ 362.673453][ T5867] ? __pfx_kthread+0x10/0x10 [ 362.673473][ T5867] ret_from_fork+0x47c/0x820 [ 362.673493][ T5867] ? __pfx_ret_from_fork+0x10/0x10 [ 362.673515][ T5867] ? __switch_to_asm+0x39/0x70 [ 362.673531][ T5867] ? __switch_to_asm+0x33/0x70 [ 362.673548][ T5867] ? __pfx_kthread+0x10/0x10 [ 362.673569][ T5867] ret_from_fork_asm+0x1a/0x30 [ 362.673592][ T5867] [ 362.673635][ T5867] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 362.716275][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 362.721360][ T5867] Bluetooth: hci4: failed to register connection device [ 362.732205][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 362.738026][ T7308] hid-generic 0004:0002:0002.000B: unknown global tag 0xe [ 362.979044][ T7308] hid-generic 0004:0002:0002.000B: item 0 4 1 14 parsing failed [ 362.987123][ T7308] hid-generic 0004:0002:0002.000B: probe with driver hid-generic failed with error -22 [ 363.250247][T10353] netlink: 679 bytes leftover after parsing attributes in process `syz.2.1174'. [ 363.346416][T10355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.355366][T10355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.687048][T10374] usb usb8: check_ctrlrecip: process 10374 (syz.5.1182) requesting ep 01 but needs 81 [ 363.696893][T10374] usb usb8: usbfs: process 10374 (syz.5.1182) did not claim interface 0 before use [ 363.961251][T10386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.985173][T10386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.001628][T10386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1187'. [ 364.736610][T10406] MTD: Couldn't look up '/dev/rnullb0': -15 [ 364.818509][ T6507] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 364.968226][ T6507] usb 6-1: Using ep0 maxpacket: 32 [ 364.971492][T10284] /dev/rnullb0: Can't open blockdev [ 364.976247][ T6507] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.981060][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 364.993317][ T6507] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.000616][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 365.015202][ T6507] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.021298][ T5899] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 365.030641][ T6507] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.037475][ T5899] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 365.046693][ T6507] usb 6-1: Product: syz [ 365.057711][ T6507] usb 6-1: Manufacturer: syz [ 365.062311][ T5899] usb 5-1: USB disconnect, device number 53 [ 365.071191][ T6507] usb 6-1: SerialNumber: syz [ 365.299510][ T7308] libceph: connect (1)[c::]:6789 error -101 [ 365.305606][ T7308] libceph: mon0 (1)[c::]:6789 connect error [ 365.351047][ T7308] libceph: connect (1)[c::]:6789 error -101 [ 365.357109][ T7308] libceph: mon0 (1)[c::]:6789 connect error [ 365.402576][T10410] ceph: No mds server is up or the cluster is laggy [ 365.402684][T10413] ceph: No mds server is up or the cluster is laggy [ 365.488522][T10423] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 365.504873][ T6507] usb 6-1: 0:2 : does not exist [ 365.527425][ T6507] usb 6-1: USB disconnect, device number 16 [ 365.551513][ T9769] udevd[9769]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.365914][T10442] binder: 10441:10442 ioctl c00c620f 200000000180 returned -22 [ 366.376453][T10442] delete_channel: no stack [ 366.381771][T10442] delete_channel: no stack [ 366.718179][ T7308] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 366.889705][ T7308] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 366.900093][ T7308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 366.918504][ T7308] usb 6-1: SerialNumber: syz [ 366.929744][ T7308] usb 6-1: config 0 descriptor?? [ 367.010002][T10457] syzkaller1: entered promiscuous mode [ 367.015716][T10457] syzkaller1: entered allmulticast mode [ 367.148753][T10459] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.165920][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.177803][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.189358][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.199491][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.212288][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.222439][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.234487][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.244577][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.255705][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1211'. [ 367.337490][ T7308] hackrf 6-1:0.0: Board ID: 00 [ 367.342890][ T7308] hackrf 6-1:0.0: Firmware version: [ 367.352562][ T7308] videodev: could not get a free minor [ 367.370367][ T7308] hackrf 6-1:0.0: Failed to register as video device (-23) [ 367.395493][ T7308] hackrf 6-1:0.0: probe with driver hackrf failed with error -23 [ 367.543509][T10447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.552394][T10447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.623728][T10483] /dev/rnullb0: Can't lookup blockdev [ 367.923399][T10489] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 367.934153][ T7308] usb 6-1: USB disconnect, device number 17 [ 367.940709][T10489] /dev/rnullb0: Can't open blockdev [ 368.025532][T10494] ipvlan0: entered promiscuous mode [ 368.036112][T10494] ipvlan0: entered allmulticast mode [ 368.042987][T10494] veth0_vlan: entered allmulticast mode [ 368.809409][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.819786][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.835480][T10504] /dev/rnullb0: Can't open blockdev [ 368.992066][T10509] /dev/rnullb0: Can't open blockdev [ 369.118226][ T7308] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 369.268185][ T7308] usb 6-1: Using ep0 maxpacket: 8 [ 369.269193][ T24] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 369.274970][ T7308] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 369.290757][ T7308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.302936][ T7308] pvrusb2: Hardware description: Terratec Grabster AV400 [ 369.310040][ T7308] pvrusb2: ********** [ 369.314074][ T7308] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 369.324243][ T7308] pvrusb2: Important functionality might not be entirely working. [ 369.332088][ T7308] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 369.343465][ T7308] pvrusb2: ********** [ 369.448666][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 369.455999][ T24] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 369.468200][ T24] usb 5-1: config 0 has no interface number 0 [ 369.474371][ T24] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 369.485555][ T24] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 369.496657][ T24] usb 5-1: config 0 interface 126 has no altsetting 0 [ 369.503540][ T2344] pvrusb2: Invalid write control endpoint [ 369.513687][ T24] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 369.523496][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.532650][ T24] usb 5-1: Product: syz [ 369.536902][ T24] usb 5-1: Manufacturer: syz [ 369.541562][ T24] usb 5-1: SerialNumber: syz [ 369.554313][ T24] usb 5-1: config 0 descriptor?? [ 369.560274][T10511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.578915][ T2344] pvrusb2: Invalid write control endpoint [ 369.585741][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 369.609002][T10511] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 369.622601][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 369.631424][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 369.644312][ T2344] pvrusb2: Device being rendered inoperable [ 369.650328][ T2344] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 369.657466][ T2344] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 369.670481][ T2344] pvrusb2: Attached sub-driver cx25840 [ 369.675990][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 369.686609][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 369.713129][ T7308] usb 6-1: USB disconnect, device number 18 [ 370.030535][T10512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.041214][T10512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.284668][T10525] MTD: Couldn't look up '/dev/rnullb0': -15 [ 370.306488][T10525] MTD: Couldn't look up '/dev/rnullb0': -15 [ 370.376413][T10530] netlink: 'syz.2.1231': attribute type 10 has an invalid length. [ 370.422996][T10530] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 370.541946][ T24] ir_usb 5-1:0.126: IR Dongle converter detected [ 370.551503][ T24] usb 5-1: IRDA class descriptor not found, device not bound [ 370.577215][ T24] usb 5-1: USB disconnect, device number 54 [ 370.836076][ T5186] Bluetooth: hci2: unexpected cc 0x2002 length: 65 > 4 [ 370.843156][ T5186] Bluetooth: hci2: unexpected event for opcode 0x2002 [ 371.457713][T10555] Invalid source name [ 371.473547][T10555] UBIFS error (pid: 10555): cannot open "./file0", error -22 [ 371.485288][ T30] audit: type=1800 audit(2000000237.620:7): pid=10557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1238" name="rnullb0" dev="tmpfs" ino=1476 res=0 errno=0 [ 371.551083][T10561] /dev/rnullb0: Can't open blockdev [ 371.562612][T10563] /dev/rnullb0: Can't open blockdev [ 371.868250][ T7308] usb 5-1: new low-speed USB device number 55 using dummy_hcd [ 372.029317][ T7308] usb 5-1: Invalid ep0 maxpacket: 64 [ 372.168269][ T7308] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 372.328226][ T7308] usb 5-1: Invalid ep0 maxpacket: 64 [ 372.342961][ T7308] usb usb5-port1: attempt power cycle [ 372.688209][ T7308] usb 5-1: new low-speed USB device number 57 using dummy_hcd [ 372.711276][ T7308] usb 5-1: Invalid ep0 maxpacket: 64 [ 372.859562][ T7308] usb 5-1: new low-speed USB device number 58 using dummy_hcd [ 372.890603][ T7308] usb 5-1: Invalid ep0 maxpacket: 64 [ 372.896272][ T7308] usb usb5-port1: unable to enumerate USB device [ 373.308210][ T7308] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 373.480001][ T7308] usb 6-1: config 0 has no interfaces? [ 373.485528][ T7308] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 373.494630][ T7308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.503670][ T7308] usb 6-1: config 0 descriptor?? [ 373.733765][ T7308] usb 6-1: USB disconnect, device number 19 [ 373.872226][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.881725][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.424501][T10651] rtc_cmos 00:00: Alarms can be up to one day in the future [ 374.481480][T10656] /dev/rnullb0: Can't open blockdev [ 374.546904][T10658] input: syz0 as /devices/virtual/input/input37 [ 374.552741][T10662] __nla_validate_parse: 27 callbacks suppressed [ 374.552758][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1271'. [ 374.578290][ T5899] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 374.738469][ T5899] usb 6-1: Using ep0 maxpacket: 8 [ 374.766265][ T5899] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.780070][ T5899] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 374.792145][T10677] nbd_handle_cmd: 14 callbacks suppressed [ 374.792166][T10677] block nbd4: Attempted send on invalid socket [ 374.806007][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.816715][ T5899] usb 6-1: config 0 descriptor?? [ 374.823059][T10677] blk_print_req_error: 14 callbacks suppressed [ 374.823074][T10677] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 374.842370][ T5899] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 374.849291][T10677] EXT4-fs (nbd4): unable to read superblock [ 375.169137][T10688] /dev/rnullb0: Can't open blockdev [ 375.205950][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.225792][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.255640][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.274079][ T5906] rtc_cmos 00:00: Alarms can be up to one day in the future [ 375.288577][ T5906] rtc rtc0: __rtc_set_alarm: err=-22 [ 375.623706][T10699] gfs2: path_lookup on c::: returned error -2 [ 375.677822][T10708] /dev/rnullb0: Can't lookup blockdev [ 375.741936][T10714] Malformed UNC in devname [ 375.741936][T10714] [ 375.749121][T10714] CIFS: VFS: Malformed UNC in devname [ 376.076441][T10649] /dev/rnullb0: Can't open blockdev [ 376.083796][ T5899] gspca_vc032x: reg_w err -71 [ 376.090428][ T5899] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 376.091949][T10730] overlayfs: failed to resolve './file1': -2 [ 376.105466][ T5899] usb 6-1: USB disconnect, device number 20 [ 376.395752][T10742] binder: 10741:10742 ioctl c018620c 0 returned -14 [ 376.424227][T10749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.433581][T10749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.530269][T10749] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.1300'. [ 376.540564][T10749] /dev/rnullb0: Can't open blockdev [ 376.546895][T10748] block nbd1: shutting down sockets [ 376.677569][T10753] /dev/rnullb0: Can't open blockdev [ 376.717645][T10760] /dev/rnullb0: Can't open blockdev [ 377.136716][T10776] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1310'. [ 377.187648][T10778] /dev/rnullb0: Can't open blockdev [ 377.203875][T10773] kvm_intel: kvm [10772]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x65b7 [ 377.217002][T10773] kvm: kvm [10772]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x3b7 [ 377.231746][T10773] kvm: kvm [10772]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x14a2 [ 377.244738][T10773] kvm: kvm [10772]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xac3c [ 377.276386][T10787] /dev/rnullb0: Can't open blockdev [ 377.310154][T10792] netlink: 'syz.2.1315': attribute type 10 has an invalid length. [ 377.319142][T10773] kvm: kvm [10772]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7b28 [ 377.331086][T10792] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1315'. [ 377.341298][T10773] kvm: kvm [10772]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfe14 [ 377.365672][T10792] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.401928][T10792] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.417485][T10792] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 377.451338][T10792] bond0 (unregistering): Released all slaves [ 377.532742][T10807] vlan1: entered promiscuous mode [ 377.594423][T10807] vlan1: entered allmulticast mode [ 377.613581][T10807] veth0_vlan: entered allmulticast mode [ 377.691191][T10807] /dev/rnullb0: Can't open blockdev [ 377.724820][T10816] overlayfs: failed to clone upperpath [ 377.873498][ T30] audit: type=1326 audit(2000000244.010:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10826 comm="syz.4.1327" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff92278ebe9 code=0x0 [ 377.927889][T10833] /dev/rnullb0: Can't open blockdev [ 378.268331][T10838] MTD: Couldn't look up '/dev/rnullb0': -15 [ 378.702115][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.709775][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.881297][T10860] /dev/rnullb0: Can't open blockdev [ 380.102857][T10891] netlink: 'syz.1.1346': attribute type 8 has an invalid length. [ 380.111959][T10891] /dev/rnullb0: Can't open blockdev [ 380.241651][T10898] /dev/rnullb0: Can't open blockdev [ 380.888285][ T30] audit: type=1804 audit(2000000246.990:9): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1356" name="rnullb0" dev="tmpfs" ino=1476 res=1 errno=0 [ 381.679850][T10942] nbd: device at index 1 is going down [ 381.779388][T10947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.809841][T10947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.162430][T10949] /dev/rnullb0: Can't lookup blockdev [ 382.551162][T10965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.569986][T10965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.740233][T10973] /dev/rnullb0: Can't open blockdev [ 383.440328][T10987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.496148][T10987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.658419][ T7308] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 383.822868][ T7308] usb 6-1: not running at top speed; connect to a high speed hub [ 383.834664][ T7308] usb 6-1: config 12 has an invalid interface number: 158 but max is 2 [ 383.843196][ T7308] usb 6-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 383.855999][ T7308] usb 6-1: config 12 has an invalid interface number: 7 but max is 2 [ 383.866093][ T7308] usb 6-1: config 12 has an invalid interface number: 101 but max is 2 [ 383.885386][ T7308] usb 6-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 383.910598][ T7308] usb 6-1: config 12 has an invalid descriptor of length 1, skipping remainder of the config [ 383.934605][ T7308] usb 6-1: config 12 has no interface number 0 [ 383.947586][ T7308] usb 6-1: config 12 has no interface number 1 [ 383.956627][ T7308] usb 6-1: config 12 has no interface number 2 [ 383.965783][ T7308] usb 6-1: config 12 interface 158 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 383.977982][ T7308] usb 6-1: config 12 interface 158 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 383.992090][ T7308] usb 6-1: config 12 interface 158 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 384.004873][ T7308] usb 6-1: config 12 interface 158 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 384.017289][ T7308] usb 6-1: config 12 interface 158 altsetting 5 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 384.031659][ T7308] usb 6-1: config 12 interface 7 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 384.042626][ T7308] usb 6-1: config 12 interface 7 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 384.054639][ T7308] usb 6-1: config 12 interface 7 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 384.072302][ T7308] usb 6-1: too many endpoints for config 12 interface 101 altsetting 234: 234, using maximum allowed: 30 [ 384.083981][ T7308] usb 6-1: config 12 interface 101 altsetting 234 has an invalid descriptor for endpoint zero, skipping [ 384.096687][ T7308] usb 6-1: config 12 interface 101 altsetting 234 has a duplicate endpoint with address 0x8E, skipping [ 384.109911][ T7308] usb 6-1: config 12 interface 101 altsetting 234 has a duplicate endpoint with address 0xC, skipping [ 384.132906][ T7308] usb 6-1: config 12 interface 101 altsetting 234 has 6 endpoint descriptors, different from the interface descriptor's value: 234 [ 384.163333][ T7308] usb 6-1: config 12 interface 158 has no altsetting 0 [ 384.182235][ T7308] usb 6-1: config 12 interface 7 has no altsetting 0 [ 384.197733][ T7308] usb 6-1: config 12 interface 101 has no altsetting 0 [ 384.231731][ T7308] usb 6-1: New USB device found, idVendor=0a46, idProduct=9000, bcdDevice=a4.d4 [ 384.242303][ T7308] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.272533][ T7308] usb 6-1: Product: ۃუ୨쎯魢膘燸酲沙㾍ή튞ᦍ᥶ꎊ맏뷐⿟伬勈ᱶ䀕ು쫐Ʈᱺ⣒༂輦⊁䃔폓ް堭毿눙䟛կ쿠ﮋ⸺束ƺ䶷谶䥯ʭ藺겇㜯챒ꐺ덎㯪禢곻阸嚤痖᪑㾥䈦參䗵짂箈䨄栾䌵뭲뉧柅萚䥅滙 [ 384.330134][ T7308] usb 6-1: Manufacturer: ࠾ [ 384.340565][ T7308] usb 6-1: SerialNumber: 尭ꞙ胦谊㒹쌧륄뼨ඖꎺ⸩蘻錸㫘ೱᆘ໅䴐软寔㿯ㆵ쇃᤺갤쿦溏隞␏릔組럧玴瀣ѻⸯ혬鎱諌朗 [ 384.391721][T10986] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 384.604182][ T7308] dm9601 6-1:12.158: probe with driver dm9601 failed with error -22 [ 384.649598][ T7308] dm9601 6-1:12.7: probe with driver dm9601 failed with error -22 [ 384.680658][ T7308] dm9601 6-1:12.101: probe with driver dm9601 failed with error -22 [ 384.706650][ T7308] usb 6-1: USB disconnect, device number 21 [ 384.962131][T11008] /dev/rnullb0: Can't open blockdev [ 385.548225][ T7308] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 385.709397][ T7308] usb 5-1: Using ep0 maxpacket: 16 [ 385.719952][ T7308] usb 5-1: unable to get BOS descriptor or descriptor too short [ 385.726151][T11042] netlink: 'syz.2.1399': attribute type 83 has an invalid length. [ 385.730266][ T7308] usb 5-1: config 1 has an invalid interface number: 26 but max is 1 [ 385.744604][ T7308] usb 5-1: config 1 has an invalid interface number: 89 but max is 1 [ 385.754374][ T7308] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 385.765780][ T7308] usb 5-1: config 1 has no interface number 0 [ 385.773171][ T7308] usb 5-1: config 1 has no interface number 1 [ 385.779663][ T7308] usb 5-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 385.797284][ T7308] usb 5-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.816995][ T7308] usb 5-1: config 1 interface 26 has no altsetting 0 [ 385.823956][ T7308] usb 5-1: config 1 interface 89 has no altsetting 0 [ 385.833854][ T7308] usb 5-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 385.848316][ T7308] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.865510][ T7308] usb 5-1: Product: syz [ 385.873887][ T7308] usb 5-1: Manufacturer: syz [ 385.882202][ T7308] usb 5-1: SerialNumber: syz [ 385.887972][T11051] nftables ruleset with unbound set [ 385.940519][T11058] /dev/rnullb0: Can't open blockdev [ 385.941876][T11054] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.956548][T11054] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.508241][ T5906] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 386.658535][ T5906] usb 6-1: Using ep0 maxpacket: 16 [ 386.678402][ T5906] usb 6-1: config 4 has an invalid interface number: 55 but max is 3 [ 386.707163][ T5906] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 386.737150][ T5906] usb 6-1: config 4 has an invalid interface number: 206 but max is 3 [ 386.766247][ T5906] usb 6-1: config 4 has an invalid interface number: 186 but max is 3 [ 386.795512][ T5906] usb 6-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 386.832904][ T5906] usb 6-1: config 4 has 3 interfaces, different from the descriptor's value: 4 [ 386.871412][ T5906] usb 6-1: config 4 has no interface number 0 [ 386.894512][ T5906] usb 6-1: config 4 has no interface number 1 [ 386.951632][ T5906] usb 6-1: config 4 has no interface number 2 [ 386.981413][ T5906] usb 6-1: config 4 interface 55 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 386.996240][ T5906] usb 6-1: config 4 interface 55 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 386.998638][T11073] "syz.2.1410" (11073) uses obsolete ecb(arc4) skcipher [ 387.042015][ T5906] usb 6-1: config 4 interface 55 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 387.054576][ T5906] usb 6-1: config 4 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 387.069602][T11080] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 387.093450][T11080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.106187][ T5906] usb 6-1: config 4 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 387.117854][T11080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.128960][ T5906] usb 6-1: config 4 interface 55 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 387.158667][ T5906] usb 6-1: config 4 interface 55 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 387.170733][ T5906] usb 6-1: config 4 interface 206 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 387.181908][T11086] xt_socket: unknown flags 0xe4 [ 387.190723][ T5906] usb 6-1: config 4 interface 206 altsetting 104 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 387.203698][ T5906] usb 6-1: config 4 interface 206 altsetting 104 has a duplicate endpoint with address 0xE, skipping [ 387.226315][ T5906] usb 6-1: config 4 interface 206 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 387.239309][ T5906] usb 6-1: config 4 interface 206 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 387.252376][ T5906] usb 6-1: config 4 interface 206 altsetting 104 has an invalid descriptor for endpoint zero, skipping [ 387.269318][ T5906] usb 6-1: config 4 interface 206 altsetting 104 has a duplicate endpoint with address 0xF, skipping [ 387.281393][ T5906] usb 6-1: config 4 interface 186 altsetting 3 has a duplicate endpoint with address 0x1, skipping [ 387.292836][ T5906] usb 6-1: config 4 interface 186 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 387.309080][ T5906] usb 6-1: config 4 interface 206 has no altsetting 0 [ 387.315869][ T5906] usb 6-1: config 4 interface 186 has no altsetting 0 [ 387.347881][ T5906] usb 6-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice=78.a3 [ 387.372793][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.382872][ T5906] usb 6-1: Product: Ƅ縭ኙツ훩瑕᦬礌旞㳈魬䲽삚⎖㊽ẖ卷乜㢔픝鋞ᗿ얧蒽籃喿ጁ퉲䈷곆уꝒ괫놈莈졯偶臈勺ｳ陘꺾㰾㢋猝ꟁ䚰嗄快㵉뤠⢭⌙툫쁨瓀汸컚둡旚╸魩艾贻ថ伡骤奖ᛡ살赠檏儮殘闟ꮄ曰넬寔瓜兼쫰抭䖩蟔蹃 [ 387.414013][ C1] vkms_vblank_simulate: vblank timer overrun [ 387.461552][ T5906] usb 6-1: Manufacturer: ф [ 387.466103][ T5906] usb 6-1: SerialNumber: Њ [ 387.500553][T11066] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 387.720485][ T5906] usb 6-1: can't set first interface for hiFace device. [ 387.739779][ T5906] snd-usb-hiface 6-1:4.55: probe with driver snd-usb-hiface failed with error -5 [ 387.763967][ T5906] usb 6-1: can't set first interface for hiFace device. [ 387.795418][ T5906] snd-usb-hiface 6-1:4.206: probe with driver snd-usb-hiface failed with error -5 [ 387.838035][ T5906] usb 6-1: can't set first interface for hiFace device. [ 387.861082][ T5906] snd-usb-hiface 6-1:4.186: probe with driver snd-usb-hiface failed with error -5 [ 387.910456][ T5906] usb 6-1: USB disconnect, device number 22 [ 388.051233][ T7308] usb 5-1: unknown interface protocol 0x7d, assuming v1 [ 388.058320][ T7308] usb 5-1: 26:2 : does not exist [ 388.071950][ T7308] usb 5-1: unknown interface protocol 0x13, assuming v1 [ 388.088302][ T7308] usb 5-1: 89:0 : does not exist [ 388.108487][ T7308] usb 5-1: USB disconnect, device number 59 [ 388.161696][ T9769] udevd[9769]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.204401][ T5186] Bluetooth: hci1: unexpected subevent 0x04 length: 9 < 11 [ 388.399429][T11139] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1427'. [ 388.518169][ T5899] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 388.688274][ T5899] usb 6-1: device descriptor read/64, error -71 [ 388.928845][ T5899] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 389.078183][ T5899] usb 6-1: device descriptor read/64, error -71 [ 389.189227][ T5899] usb usb6-port1: attempt power cycle [ 389.481540][T11155] openvswitch: netlink: Tunnel attr 79 out of range max 16 [ 389.492302][T11155] /dev/rnullb0: Can't open blockdev [ 389.528322][ T5899] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 389.561279][ T5899] usb 6-1: device descriptor read/8, error -71 [ 389.775244][T11167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.784064][T11167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.808689][ T5899] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 389.836757][ T5899] usb 6-1: device descriptor read/8, error -71 [ 389.888160][ T6507] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 389.950071][ T5899] usb usb6-port1: unable to enumerate USB device [ 390.048177][ T6507] usb 5-1: Using ep0 maxpacket: 8 [ 390.055115][ T6507] usb 5-1: unable to get BOS descriptor or descriptor too short [ 390.064469][ T6507] usb 5-1: config 16 interface 0 has no altsetting 0 [ 390.073125][ T6507] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35 [ 390.082339][ T6507] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.090419][ T6507] usb 5-1: Product: syz [ 390.094563][ T6507] usb 5-1: Manufacturer: syz [ 390.099189][ T6507] usb 5-1: SerialNumber: syz [ 390.316728][ T6507] usb 5-1: ucan: probing device on interface #0 [ 390.323385][ T6507] usb 5-1: ucan: invalid endpoint configuration [ 390.329737][ T6507] usb 5-1: ucan: probe failed; try to update the device firmware [ 390.340449][ T6507] usb 5-1: USB disconnect, device number 60 [ 390.465388][T11170] 9p: Bad value for 'rfdno' [ 391.008553][ T5906] IPVS: starting estimator thread 0... [ 391.108219][T11175] IPVS: using max 51 ests per chain, 122400 per kthread [ 391.183623][T11177] sctp: [Deprecated]: syz.4.1442 (pid 11177) Use of struct sctp_assoc_value in delayed_ack socket option. [ 391.183623][T11177] Use struct sctp_sack_info instead [ 391.204212][T11177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.281573][T11179] /dev/rnullb0: Can't open blockdev [ 391.502291][T11198] tipc: Enabling of bearer rejected, failed to enable media [ 391.815982][T11210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.832542][T11210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.038250][ T5906] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 392.056603][T11210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.067158][T11210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.189569][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.201113][ T5906] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 392.210705][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.226883][ T5906] usb 5-1: config 0 descriptor?? [ 392.242967][ T5906] pwc: Askey VC010 type 2 USB webcam detected. [ 392.451269][T11225] /dev/rnullb0: Can't open blockdev [ 392.645698][ T5906] pwc: recv_control_msg error -32 req 02 val 2b00 [ 392.652681][ T5906] pwc: recv_control_msg error -32 req 02 val 2700 [ 392.659793][ T5906] pwc: recv_control_msg error -32 req 02 val 2c00 [ 392.666625][ T5906] pwc: recv_control_msg error -32 req 04 val 1000 [ 392.673587][ T5906] pwc: recv_control_msg error -32 req 04 val 1300 [ 392.681023][ T5906] pwc: recv_control_msg error -32 req 04 val 1400 [ 392.687885][ T5906] pwc: recv_control_msg error -32 req 02 val 2000 [ 392.694822][ T5906] pwc: recv_control_msg error -32 req 02 val 2100 [ 392.701883][ T5906] pwc: recv_control_msg error -32 req 04 val 1500 [ 392.708929][ T5906] pwc: recv_control_msg error -32 req 02 val 2500 [ 392.768151][ T5899] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 392.939224][ T5899] usb 6-1: Using ep0 maxpacket: 32 [ 392.949362][ T5899] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 392.958828][ T5899] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.966950][ T5906] pwc: recv_control_msg error -71 req 02 val 2600 [ 392.973603][ T5899] usb 6-1: Product: syz [ 392.977769][ T5899] usb 6-1: Manufacturer: syz [ 392.982536][ T5899] usb 6-1: SerialNumber: syz [ 392.987260][ T5906] pwc: recv_control_msg error -71 req 02 val 2900 [ 392.994176][ T5906] pwc: recv_control_msg error -71 req 02 val 2800 [ 393.001838][ T5899] usb 6-1: config 0 descriptor?? [ 393.007142][ T5906] pwc: recv_control_msg error -71 req 04 val 1100 [ 393.014963][ T5899] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 393.021437][ T5906] pwc: recv_control_msg error -71 req 04 val 1200 [ 393.028242][ T5906] videodev: could not get a free minor [ 393.033897][ T5906] pwc: Failed to register as video device (-23). [ 393.041395][ T5906] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -23 [ 393.053647][ T5906] usb 5-1: USB disconnect, device number 61 [ 393.239038][ T5899] gspca_ov534_9: reg_w failed -71 [ 393.486280][T11233] /dev/rnullb0: Can't open blockdev [ 393.515481][T11235] /dev/rnullb0: Can't open blockdev [ 393.577125][T11238] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.587184][T11238] /dev/rnullb0: Can't open blockdev [ 393.621108][T11240] /dev/rnullb0: Can't open blockdev [ 393.638379][ T5899] gspca_ov534_9: Unknown sensor 0000 [ 393.638451][ T5899] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 393.659003][ T5899] usb 6-1: USB disconnect, device number 27 [ 393.854640][T11251] /dev/rnullb0: Can't open blockdev [ 393.917246][T11257] /dev/rnullb0: Can't open blockdev [ 394.076229][T11269] mkiss: ax0: crc mode is auto. [ 394.228338][ T5860] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 394.358150][ T5860] usb 5-1: device descriptor read/64, error -71 [ 394.599161][ T5860] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 394.728748][ T5860] usb 5-1: device descriptor read/64, error -71 [ 394.816384][T11275] /dev/rnullb0: Can't open blockdev [ 394.840561][ T5860] usb usb5-port1: attempt power cycle [ 394.843061][T11277] 9p: Bad value for 'rfdno' [ 394.851402][T11277] /dev/rnullb0: Can't open blockdev [ 394.957459][T11288] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 394.966686][T11288] /dev/rnullb0: Can't open blockdev [ 395.178974][ T5860] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 395.209385][ T5860] usb 5-1: device descriptor read/8, error -71 [ 395.458870][ T5860] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 395.490556][ T5860] usb 5-1: device descriptor read/8, error -71 [ 395.609497][ T5860] usb usb5-port1: unable to enumerate USB device [ 395.968503][T11316] /dev/rnullb0: Can't open blockdev [ 396.068376][ T5860] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 396.218246][ T5860] usb 6-1: Using ep0 maxpacket: 32 [ 396.224839][ T5860] usb 6-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.238296][ T5860] usb 6-1: config 0 interface 0 has no altsetting 0 [ 396.244948][ T5860] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 396.254755][ T5860] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.264239][ T5860] usb 6-1: config 0 descriptor?? [ 396.492301][T11341] /dev/rnullb0: Can't open blockdev [ 396.505707][T11341] input: syz0 as /devices/virtual/input/input38 [ 396.542468][T11346] overlayfs: failed to clone upperpath [ 396.614780][T11355] CUSE: unknown device info "MzP{UҗEsZ$cw#/f}ٔb,Q[{Ʈ$ [ 396.614780][T11355] 4&I:#5o63ю.l%wC [ 396.614780][T11355] ?" [ 396.636052][T11355] CUSE: unknown device info "v2.7˂*5SEAy `?e`l6ݡQ0V84܎{c"K^vaO֐M 8f1\.dž6(3ifω11,kbz"NXj} ~wu/K9.rפ" [ 396.654821][T11355] CUSE: DEVNAME unspecified [ 396.669442][T11355] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 396.675963][T11355] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 396.684080][T11355] vhci_hcd vhci_hcd.0: Device attached [ 396.691340][ T5860] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 396.693137][T11355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.702600][ T5860] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 396.709594][T11355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.717112][ T5860] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 396.734125][ T5860] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 396.742525][ T5860] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 396.755262][T11361] vhci_hcd: connection closed [ 396.755556][ T36] vhci_hcd: stop threads [ 396.760938][ T5860] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.5-1/input0 [ 396.767615][ T36] vhci_hcd: release socket [ 396.782682][ T36] vhci_hcd: disconnect device [ 396.869786][ T5860] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -38 [ 396.892422][T11314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.901182][T11314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.036015][T11367] syz0: rxe_newlink: already configured on wlan1 [ 397.089426][ T30] audit: type=1400 audit(2000000263.230:10): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A21D01A0B978D2F2F262D2A83D1 pid=11372 comm="syz.4.1506" [ 397.135219][T11376] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 397.142520][T11376] /dev/rnullb0: Can't open blockdev [ 397.370436][T11398] overlayfs: failed to clone upperpath [ 397.382836][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.394043][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.404864][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.415068][T11395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.430967][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.452497][T11395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.573016][T11414] netlink: 'syz.2.1517': attribute type 5 has an invalid length. [ 397.595862][T11414] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1517'. [ 397.615119][T11414] netlink: 'syz.2.1517': attribute type 1 has an invalid length. [ 397.784146][ T30] audit: type=1804 audit(2000000263.920:11): pid=11423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1519" name="rnullb0" dev="tmpfs" ino=1476 res=1 errno=0 [ 397.785321][T11423] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1519'. [ 397.960594][T11443] tmpfs: Unknown parameter 'func' [ 398.188133][ T5899] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 398.203322][ T30] audit: type=1804 audit(2000000264.340:12): pid=11462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1531" name="rnullb0" dev="tmpfs" ino=1476 res=1 errno=0 [ 398.346010][ T5899] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 398.367223][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.382987][ T5899] usb 5-1: Product: syz [ 398.391453][ T5899] usb 5-1: Manufacturer: syz [ 398.401617][ T5899] usb 5-1: SerialNumber: syz [ 398.979934][ T9] usb 6-1: USB disconnect, device number 28 [ 399.007023][T11470] /dev/rnullb0: Can't open blockdev [ 399.027190][T11477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.046932][T11477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.114036][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.129169][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.330577][T11488] /dev/rnullb0: Can't open blockdev [ 399.658226][ T9] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 399.819744][ C0] ------------[ cut here ]------------ [ 399.825294][ C0] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#0: kworker/u8:1/13 [ 399.832612][ T5899] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 399.835895][ C0] Modules linked in: [ 399.851484][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 399.860798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.870901][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 399.877888][ C0] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 399.883574][ C0] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 399.903235][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00010246 [ 399.909337][ C0] RAX: ffffffff8a51b3b7 RBX: ffff888049665640 RCX: ffff88801d298000 [ 399.917336][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 399.925336][ C0] RBP: ffffc90000007568 R08: ffff888076d7f543 R09: 1ffff1100edafea8 [ 399.933536][ C0] R10: dffffc0000000000 R11: ffffed100edafea9 R12: ffff88807a2d8101 [ 399.941567][ C0] R13: dffffc0000000001 R14: 1ffff110092ccad3 R15: 0000000000000000 [ 399.949587][ C0] FS: 0000000000000000(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 399.958549][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.965138][ C0] CR2: 00007f68cc86af98 CR3: 000000005e9f4000 CR4: 00000000003526f0 [ 399.973253][ C0] Call Trace: [ 399.976537][ C0] [ 399.979453][ C0] ? __pfx_nf_send_unreach6+0x10/0x10 [ 399.984848][ C0] ? __udp6_lib_mcast_deliver+0xecd/0xf10 [ 399.990609][ C0] ? __udp6_lib_rcv+0x608/0x1770 [ 399.995557][ C0] nft_reject_inet_eval+0x441/0x690 [ 400.000811][ C0] nft_do_chain+0x40c/0x1920 [ 400.005411][ C0] ? __pfx_udpv6_rcv+0x10/0x10 [ 400.010213][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 400.015234][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 400.020131][ C0] ? NF_HOOK+0x9a/0x3a0 [ 400.024296][ C0] nft_do_chain_inet+0x25d/0x340 [ 400.029263][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 400.034744][ C0] ? NF_HOOK+0x9a/0x3a0 [ 400.038935][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.043707][ C0] ? lock_acquire+0x5f/0x360 [ 400.048347][ C0] ? ip_sabotage_in+0x57/0x270 [ 400.053377][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 400.055809][T11441] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 400.058890][ C0] nf_hook_slow+0xc5/0x220 [ 400.058922][ C0] NF_HOOK+0x206/0x3a0 [ 400.058943][ C0] ? skb_orphan+0xaf/0xd0 [ 400.058965][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 400.058986][ C0] ? NF_HOOK+0x9a/0x3a0 [ 400.059004][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 400.059022][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 400.077636][T11441] overlayfs: missing 'lowerdir' [ 400.080087][ C0] __netif_receive_skb+0xd3/0x380 [ 400.080119][ C0] ? process_backlog+0x2d5/0x14f0 [ 400.114191][ C0] process_backlog+0x60e/0x14f0 [ 400.119109][ C0] ? __pfx_process_backlog+0x10/0x10 [ 400.124408][ C0] ? do_raw_spin_lock+0x121/0x290 [ 400.129547][ C0] __napi_poll+0xc4/0x360 [ 400.133909][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.138741][ C0] net_rx_action+0x707/0xe30 [ 400.143344][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.148151][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 400.153305][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 400.159603][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 400.164826][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 400.170253][ C0] handle_softirqs+0x283/0x870 [ 400.175050][ C0] ? do_softirq+0xec/0x180 [ 400.175079][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 400.184850][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 400.190818][ C0] do_softirq+0xec/0x180 [ 400.195083][ C0] [ 400.198014][ C0] [ 400.201002][ C0] ? __pfx_do_softirq+0x10/0x10 [ 400.205864][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.210686][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 400.215898][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 400.221684][ C0] ? lock_release+0x4b/0x3e0 [ 400.226288][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 400.231368][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 400.237122][ C0] wg_packet_handshake_send_worker+0x1db/0x320 [ 400.243336][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 400.250068][ C0] ? lock_acquire+0x5f/0x360 [ 400.254675][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.259495][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 400.265225][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 400.271020][ C0] process_scheduled_works+0xae1/0x17b0 [ 400.276584][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.282625][ C0] worker_thread+0x8a0/0xda0 [ 400.287251][ C0] kthread+0x711/0x8a0 [ 400.291382][ C0] ? __pfx_worker_thread+0x10/0x10 [ 400.296497][ C0] ? __pfx_kthread+0x10/0x10 [ 400.301149][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.306357][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.311612][ C0] ? __pfx_kthread+0x10/0x10 [ 400.316234][ C0] ret_from_fork+0x47c/0x820 [ 400.320881][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 400.326005][ C0] ? __switch_to_asm+0x39/0x70 [ 400.330815][ C0] ? __switch_to_asm+0x33/0x70 [ 400.335602][ C0] ? __pfx_kthread+0x10/0x10 [ 400.340246][ C0] ret_from_fork_asm+0x1a/0x30 [ 400.345029][ C0] [ 400.348072][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 400.355353][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 400.364642][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 400.374714][ C0] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 400.381675][ C0] Call Trace: [ 400.384960][ C0] [ 400.387803][ C0] dump_stack_lvl+0x99/0x250 [ 400.392406][ C0] ? __asan_memcpy+0x40/0x70 [ 400.397004][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.402242][ C0] ? __pfx__printk+0x10/0x10 [ 400.406840][ C0] vpanic+0x281/0x750 [ 400.410818][ C0] ? __pfx_vpanic+0x10/0x10 [ 400.415316][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 400.420586][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 400.425770][ C0] panic+0xb9/0xc0 [ 400.429476][ C0] ? __pfx_panic+0x10/0x10 [ 400.433883][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 400.438805][ C0] __warn+0x334/0x4c0 [ 400.442773][ C0] ? nf_send_unreach6+0x828/0xa20 [ 400.447788][ C0] ? nf_send_unreach6+0x828/0xa20 [ 400.452799][ C0] report_bug+0x2be/0x4f0 [ 400.457123][ C0] ? nf_send_unreach6+0x828/0xa20 [ 400.462139][ C0] ? nf_send_unreach6+0x828/0xa20 [ 400.467148][ C0] ? nf_send_unreach6+0x82a/0xa20 [ 400.472158][ C0] handle_bug+0x84/0x160 [ 400.476391][ C0] exc_invalid_op+0x1a/0x50 [ 400.480877][ C0] asm_exc_invalid_op+0x1a/0x20 [ 400.485716][ C0] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 400.491339][ C0] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 400.510934][ C0] RSP: 0018:ffffc900000073c0 EFLAGS: 00010246 [ 400.517010][ C0] RAX: ffffffff8a51b3b7 RBX: ffff888049665640 RCX: ffff88801d298000 [ 400.524969][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.532925][ C0] RBP: ffffc90000007568 R08: ffff888076d7f543 R09: 1ffff1100edafea8 [ 400.540883][ C0] R10: dffffc0000000000 R11: ffffed100edafea9 R12: ffff88807a2d8101 [ 400.548838][ C0] R13: dffffc0000000001 R14: 1ffff110092ccad3 R15: 0000000000000000 [ 400.556803][ C0] ? nf_send_unreach6+0x827/0xa20 [ 400.561823][ C0] ? __pfx_nf_send_unreach6+0x10/0x10 [ 400.567179][ C0] ? __udp6_lib_mcast_deliver+0xecd/0xf10 [ 400.572890][ C0] ? __udp6_lib_rcv+0x608/0x1770 [ 400.577809][ C0] nft_reject_inet_eval+0x441/0x690 [ 400.582997][ C0] nft_do_chain+0x40c/0x1920 [ 400.587588][ C0] ? __pfx_udpv6_rcv+0x10/0x10 [ 400.592344][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 400.597348][ C0] ? ipv6_find_hdr+0xc78/0x1050 [ 400.602190][ C0] ? NF_HOOK+0x9a/0x3a0 [ 400.606338][ C0] nft_do_chain_inet+0x25d/0x340 [ 400.611257][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 400.616708][ C0] ? NF_HOOK+0x9a/0x3a0 [ 400.620849][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.625613][ C0] ? lock_acquire+0x5f/0x360 [ 400.630185][ C0] ? ip_sabotage_in+0x57/0x270 [ 400.634944][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 400.640388][ C0] nf_hook_slow+0xc5/0x220 [ 400.644798][ C0] NF_HOOK+0x206/0x3a0 [ 400.648854][ C0] ? skb_orphan+0xaf/0xd0 [ 400.653180][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 400.658362][ C0] ? NF_HOOK+0x9a/0x3a0 [ 400.662508][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 400.667086][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 400.672278][ C0] __netif_receive_skb+0xd3/0x380 [ 400.677291][ C0] ? process_backlog+0x2d5/0x14f0 [ 400.682305][ C0] process_backlog+0x60e/0x14f0 [ 400.687162][ C0] ? __pfx_process_backlog+0x10/0x10 [ 400.692452][ C0] ? do_raw_spin_lock+0x121/0x290 [ 400.697487][ C0] __napi_poll+0xc4/0x360 [ 400.701813][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.706567][ C0] net_rx_action+0x707/0xe30 [ 400.711151][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.715904][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 400.721005][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 400.727242][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 400.732460][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 400.737749][ C0] handle_softirqs+0x283/0x870 [ 400.742501][ C0] ? do_softirq+0xec/0x180 [ 400.746903][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 400.752186][ C0] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 400.758081][ C0] do_softirq+0xec/0x180 [ 400.762312][ C0] [ 400.765241][ C0] [ 400.768155][ C0] ? __pfx_do_softirq+0x10/0x10 [ 400.772996][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.777746][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 400.782933][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 400.788637][ C0] ? lock_release+0x4b/0x3e0 [ 400.793211][ C0] ? do_raw_read_unlock+0x3d/0x80 [ 400.798225][ C0] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 400.803934][ C0] wg_packet_handshake_send_worker+0x1db/0x320 [ 400.810075][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 400.816743][ C0] ? lock_acquire+0x5f/0x360 [ 400.821321][ C0] ? rcu_is_watching+0x15/0xb0 [ 400.826069][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 400.831776][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 400.837484][ C0] process_scheduled_works+0xae1/0x17b0 [ 400.843023][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.849001][ C0] worker_thread+0x8a0/0xda0 [ 400.853590][ C0] kthread+0x711/0x8a0 [ 400.857650][ C0] ? __pfx_worker_thread+0x10/0x10 [ 400.862746][ C0] ? __pfx_kthread+0x10/0x10 [ 400.867325][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.872509][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.877693][ C0] ? __pfx_kthread+0x10/0x10 [ 400.882275][ C0] ret_from_fork+0x47c/0x820 [ 400.886858][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 400.891961][ C0] ? __switch_to_asm+0x39/0x70 [ 400.896708][ C0] ? __switch_to_asm+0x33/0x70 [ 400.901463][ C0] ? __pfx_kthread+0x10/0x10 [ 400.906047][ C0] ret_from_fork_asm+0x1a/0x30 [ 400.910803][ C0] [ 400.913963][ C0] Kernel Offset: disabled [ 400.918294][ C0] Rebooting in 86400 seconds..