last executing test programs: 9m25.057650866s ago: executing program 3 (id=630): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) pipe(&(0x7f0000000040)={0xffffffffffffffff}) splice(r6, 0x0, r1, 0x0, 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) clock_getres(0x2, &(0x7f00000009c0)) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r9, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendfile(r9, r7, 0x0, 0x40008) write(r0, &(0x7f00000004c0)="fc0000001c000704ab5b2509b868030002ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400604033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177332e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd5339ec2a0f0d1bcae5fa0f5fcbbc7bc190bd06a76a715498fe9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd64338034a084f2013cd1890058a10000c880ac801fe4af", 0xfc) r10 = socket(0x2, 0x3, 0xff) bind$inet(r10, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_BATCH(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000020a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00020100000000000000010900010073797a30"], 0xac}, 0x1, 0x0, 0x0, 0x8040}, 0x0) connect$inet(r10, &(0x7f00000000c0)={0x2, 0xfff9, @multicast1}, 0x10) write(r10, 0x0, 0x1400) socket$inet_tcp(0x2, 0x1, 0x0) 9m24.617692688s ago: executing program 3 (id=631): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r2 = syz_open_dev$vbi(&(0x7f00000002c0), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f00000005c0)={0x5, @sliced}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f00000006c0)={0x2, 0xf, 0x4, 0x1, 0x0, 0x5, 0x0}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) recvfrom(r0, &(0x7f0000000200)=""/106, 0x6a, 0x0, &(0x7f0000000340)=@pppoe={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, 'sit0\x00'}}, 0x80) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000000c0)='\x00', 0x1) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f0000000100)) r6 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_REWIND(r6, 0x40084146, &(0x7f00000002c0)=0xb6) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x8000, 0x7) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 9m23.238638164s ago: executing program 3 (id=646): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) pipe(&(0x7f0000000000)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) 9m23.173158347s ago: executing program 3 (id=647): mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2ee, 0x282) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x18, 0x0, &(0x7f0000000040)=[@clear_death, @release], 0xed, 0x0, &(0x7f0000000340)="ad65ceda5953e234bfd515bdaf10b40c8f45283f28a56b249c4c1cdac11f053fed99105388d054c392906cb39237c4dffe260a966ef814e1e114a816f7cd4e554716065e8a074b3aeb04060ffcabfa2191b591e8e6978d59170c5be46ecac81b8acc032826d7d55f8c97a6f9c68a8b85bbcf5a3384c08c5dac5e5fbaa26550e9fe1c04d943845a533f503ace0211ab5c925d9756a119b9d4ade7cef629df8375b48aff25095aa482f17ee37da4b3a7e7cb7cc56f615b9b555966ca34bde74100d23d0327286de4d49c0d536e8b8ab87d4aed9fd8b6d514c77aadbab522849fe22d460e1a765f0e2988f12a529a"}) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0xff, 0xa}}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00006af000/0x1000)=nil) 9m23.077768819s ago: executing program 3 (id=648): ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) pwritev2(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="30620b465e7b9b8b1465d18eedd7f56c9844124e544189b3ce32ae929da7bc8d904e40a90416ff486c1d12942bfc82479b", 0x31}, {&(0x7f0000000140)="e87accdc2978614d36a1058dbf154ae3444ffb72ecf93dc4e0241be4da05dd8fbd2ae58d69b16ac45f3652e9e2ceaef1c60a150d851339fd53fa8ae65bb0a2197d09d08a3fe216b06c60f6066188c61cbd2cd566229301708a1c7fe171207318ace01de2baa53e1459fe5373ebc6bfb774cc11a1a2d8e24698679e646e0367739ed4fe39a1d657dee388942316d2d3a106a7417f7702d7e9244aaa2396848629d7267ac55b516af57e5aa11983", 0xad}], 0x2, 0xffff, 0x4, 0x2) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 9m22.785782746s ago: executing program 3 (id=653): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"66ade30dde82978264071b21162a711bc123e587865c94d7723d58857470bb65", 0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, 0x0, 0x2) (async) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, 0x0, 0x2) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x80000) sendfile(r0, r1, &(0x7f0000001300)=0xffffffffffff8001, 0x7) timer_create(0x7, &(0x7f0000001500)={0x0, 0x25, 0x2, @thr={&(0x7f0000001340)="83952946f130f974125f01590b63a00132e2d8bcec553fe69530a1df7722eb107f1b9af4bc490113bfb12cfa7fb00f46f8fad307b30cd5851ea2547a28cdf3d8d23db3bdbb0384f8fa4d2d0d142ffa87d3590a6357a6c63d3347d47a4dbc26d0a85c7f991611fc0940650bc5c8efefc5544a552be3410ef4ecad89b4f5dfbcf5600085246cb9e3490cfa031fb9e48c688105418f764bc4055476d2e68666761d39f1e38a7913b907b2d1bb5c38440046732bd615f446064a7ac920034953e4afa00afa26706712b9704234311df893619b59ea95586dd5669bae6d9dde4f4b9e62f8ae36ae53ed444d50f99b728527946a92", &(0x7f0000001440)="91c3c63830615ed244652f8ddac793f0f9e2c973dd9d2b701d04405336cd3b72cd64d1284254c81becb9634ec3b09c713b28b4fb52aed4f4b0cce9e8b8f8dfec6751d53207886884e5feb7704b112aadb967f0f28068380cf1e80e5f0db1b68791d509a097c13713afde7d62fd7107e7b07ae479c8588fef08488ab38abe99055c84"}}, &(0x7f0000001540)) bind(r1, &(0x7f0000001580)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0xab55, 0x0, {0xa, 0x4e22, 0x10000, @private1, 0xda}}}, 0x80) (async) bind(r1, &(0x7f0000001580)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0xab55, 0x0, {0xa, 0x4e22, 0x10000, @private1, 0xda}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001600)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001600)={'batadv_slave_0\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000001640)={'ip_vti0\x00', {0x2, 0x0, @empty}}) r2 = syz_clone(0x8400, &(0x7f0000001680)="81ec2ecd35e55cb551d06a18b669121d80fa0c842842044deb0705", 0x1b, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)="fb79c994597c1b779bf212e1dfda89f92c48fb02de7adde398e98f2d7a33847832adcbf4d64cd086b651edf5d12d98729653d8ce600b594b383a7fe4cc62d689ae2b466e5c9e46417e01e66c9b3c727a4ccae46ba48854a2e68106e868a1f1cd9bb4b1115f3aba5d5d269710151aa8d0b1da18c8a54e7f7be2077043948135251c3e73b561ef7c0c0c0b505f98c1066711bb0ecd8ba6b0f1f24d324137a38ae3f9d62dad285c931ddab918c0b863459aad7784c8d7ea360b2cb5369348ac6eea8b0b385d2fef37aef1") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x46, 0xa}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a7f2c0a997"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x200400c4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)={0x1bc, 0x37, 0x8, 0x70bd25, 0x25dfdbfd, {0xe}, [@generic="807ec400819e2d6be233dca24b1de9b90b1bf5e301721929c574fc42df01f91258f9c96ddb3c5c3782c756d2d8f9da9e92d85490ab99637ace549d928910f235a2f602375396833b68b1998bcfef189d17487253d288f06d793150d96e915165e4410520a46e2e67e5838495deb5fba56723975625ee5d8b9339c0decb1614454fa0727404b5352a031cef78c50c0de0bc6a65da8c7baea2718996d568", @generic="217018e3e4ddd759623499d92d2a7a474365e292a09e299b7ffbc1a138f103524ef64b8113493bd44f44bc4ca458e749050442108466bc89e3e22f8357b3f7bc2197a8b550659ccd294d42ab33d333942b9353eab27f545db0ff79cd61b0359cba8549ee4ba5978d7d877aacc1fa3685f0584d240cdbea66a66218a80521a798e5518a528247b4982bace0987e517c46dc3d656ef62fdf43b888b0bf74c9", @typed={0x69, 0xc8, 0x0, 0x0, @binary="64b2ad31e1a40fbbbea886d2116643d8f52d0c051535dc8bfed3424e95fd79c991e99a74f86321f20f91c7555f21b518c4bc386999f47c95d1bfb2b90b3844abf9794210b0c2bcd3684a5e3ac161df3ab0372533f698ecf5c894cac42a9ffdde6be8e20665"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x94}, 0x1) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000001cc0)={&(0x7f0000001c00)=""/131, 0x83}) (async) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000001cc0)={&(0x7f0000001c00)=""/131, 0x83}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x44, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000001e40)=[@window={0x3, 0x6, 0xa}, @timestamp, @timestamp, @sack_perm, @sack_perm, @timestamp, @timestamp], 0x7) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000001e40)=[@window={0x3, 0x6, 0xa}, @timestamp, @timestamp, @sack_perm, @sack_perm, @timestamp, @timestamp], 0x7) ioctl$int_in(r1, 0x5452, &(0x7f0000001e80)) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000001e80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xcc, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x53}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52ea6d9876167535059c53e8a69e80f8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a1db71dc24bccc63"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7ed1d9110bcae32f98bd85b42de624e0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="86be8b3767cc4edc5d35a18ca26246b8"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6067195ed30b3386"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2c72e1ce82ec0c54f676391381a73e3ca239fd047b60a8ea"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d8178cb17b900614588f635c2e0e19c028b9c2ad21bfba70f8c91a301ae455b2"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x41}, 0x20040001) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r3, 0xd5aa3eb9ba772378, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) (async) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r3, 0xd5aa3eb9ba772378, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) (async) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002200), r6) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000002740)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002240)={0x4b0, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x65, 0x3, "78772ad035d39b85ea3dd9e3a77a5e8d4a9faf9596b94acc5d88cf6021dc819f43c8dc6598541e8d74d2f77b8c70e09f462c673ae798af9ca4c5ebee9a0c7ce071f77c704b04ca381110fdf6501f75463e3cfd53c4b3744a9273e31e5137b90b87"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "78e7610d292279d323e5d5c4f5789c8abb5ba9ff5cab70f9e861e6fac7e90f36c0"}}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x641}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xd2, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2cb}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x2, 0x8, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8}]}, @TIPC_NLA_NODE={0x208, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x85, 0x3, "959de4a21458a5b524c9637a6ea67f593eaec90b4f3f52e84f832bdc79133e22ea38cc9ebff10fbd8cf9f6a11690470c5fc75db681a1a84f63bdb2e89f607622a2d860193443950edadb8ab008a4d6db3dac754145d74c90d2674f419eed5fcaa021f811758c08308456820a04b566ba3f886cbd0e9b613d051df2b9918bf55e96"}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "fa9e80840390a4be39a72a97a0be1ec73c5b59073f1061a288d62166269f42aaaf426c3af41035e273a011e2cf9c82928294c9d6645f111d6dbff754cbc559b0371e193977c0685c6d8b43fb8401c6a799e610ee7603a7b846be5cde30ede57d103dc4829d58b38861ab41436ea9938180d3e20385fc701cd586287c3ff66d29e32641ad9c38c02b07d2cedd2b8f2f75018496934932e6ebfa1b1a856a8c537abcbbb378ecbc30927e331845ff3abe27c5c52899e0035e02c27ba9a402fc4fa24b4a823d7b649f5cfc71251cfb174c17a6fa5c4fbd8fb21178e7f68f36ae0ef0c11fb07638f1c3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2d6db3b968bf6eb6c86765a5215fca60520cf13d11460544f004"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "facf49294285140a96dc01532eb3ec67b6040725fcb25f7bfd67"}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x80}, 0x4004041) (async) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000002740)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002240)={0x4b0, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x65, 0x3, "78772ad035d39b85ea3dd9e3a77a5e8d4a9faf9596b94acc5d88cf6021dc819f43c8dc6598541e8d74d2f77b8c70e09f462c673ae798af9ca4c5ebee9a0c7ce071f77c704b04ca381110fdf6501f75463e3cfd53c4b3744a9273e31e5137b90b87"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "78e7610d292279d323e5d5c4f5789c8abb5ba9ff5cab70f9e861e6fac7e90f36c0"}}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x641}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xd2, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2cb}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x2, 0x8, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8}]}, @TIPC_NLA_NODE={0x208, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x85, 0x3, "959de4a21458a5b524c9637a6ea67f593eaec90b4f3f52e84f832bdc79133e22ea38cc9ebff10fbd8cf9f6a11690470c5fc75db681a1a84f63bdb2e89f607622a2d860193443950edadb8ab008a4d6db3dac754145d74c90d2674f419eed5fcaa021f811758c08308456820a04b566ba3f886cbd0e9b613d051df2b9918bf55e96"}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "fa9e80840390a4be39a72a97a0be1ec73c5b59073f1061a288d62166269f42aaaf426c3af41035e273a011e2cf9c82928294c9d6645f111d6dbff754cbc559b0371e193977c0685c6d8b43fb8401c6a799e610ee7603a7b846be5cde30ede57d103dc4829d58b38861ab41436ea9938180d3e20385fc701cd586287c3ff66d29e32641ad9c38c02b07d2cedd2b8f2f75018496934932e6ebfa1b1a856a8c537abcbbb378ecbc30927e331845ff3abe27c5c52899e0035e02c27ba9a402fc4fa24b4a823d7b649f5cfc71251cfb174c17a6fa5c4fbd8fb21178e7f68f36ae0ef0c11fb07638f1c3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2d6db3b968bf6eb6c86765a5215fca60520cf13d11460544f004"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "facf49294285140a96dc01532eb3ec67b6040725fcb25f7bfd67"}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x80}, 0x4004041) pipe2$watch_queue(&(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r9, &(0x7f00000027c0)=""/4096, 0x1000) (async) read$watch_queue(r9, &(0x7f00000027c0)=""/4096, 0x1000) fcntl$setlease(r1, 0x400, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x20, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7f, 0x41}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c045}, 0x0) 9m22.497745999s ago: executing program 32 (id=653): ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"66ade30dde82978264071b21162a711bc123e587865c94d7723d58857470bb65", 0xffffffffffffffff, 0xffffffffffffffff}) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, 0x0, 0x2) (async) preadv(r0, &(0x7f0000001280)=[{&(0x7f0000000040)=""/238, 0xee}, {&(0x7f0000000140)=""/8, 0x8}, {&(0x7f0000000180)=""/255, 0xff}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x4, 0x0, 0x2) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000012c0), 0x80000) sendfile(r0, r1, &(0x7f0000001300)=0xffffffffffff8001, 0x7) timer_create(0x7, &(0x7f0000001500)={0x0, 0x25, 0x2, @thr={&(0x7f0000001340)="83952946f130f974125f01590b63a00132e2d8bcec553fe69530a1df7722eb107f1b9af4bc490113bfb12cfa7fb00f46f8fad307b30cd5851ea2547a28cdf3d8d23db3bdbb0384f8fa4d2d0d142ffa87d3590a6357a6c63d3347d47a4dbc26d0a85c7f991611fc0940650bc5c8efefc5544a552be3410ef4ecad89b4f5dfbcf5600085246cb9e3490cfa031fb9e48c688105418f764bc4055476d2e68666761d39f1e38a7913b907b2d1bb5c38440046732bd615f446064a7ac920034953e4afa00afa26706712b9704234311df893619b59ea95586dd5669bae6d9dde4f4b9e62f8ae36ae53ed444d50f99b728527946a92", &(0x7f0000001440)="91c3c63830615ed244652f8ddac793f0f9e2c973dd9d2b701d04405336cd3b72cd64d1284254c81becb9634ec3b09c713b28b4fb52aed4f4b0cce9e8b8f8dfec6751d53207886884e5feb7704b112aadb967f0f28068380cf1e80e5f0db1b68791d509a097c13713afde7d62fd7107e7b07ae479c8588fef08488ab38abe99055c84"}}, &(0x7f0000001540)) bind(r1, &(0x7f0000001580)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0xab55, 0x0, {0xa, 0x4e22, 0x10000, @private1, 0xda}}}, 0x80) (async) bind(r1, &(0x7f0000001580)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x3, 0x1, 0xab55, 0x0, {0xa, 0x4e22, 0x10000, @private1, 0xda}}}, 0x80) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001600)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000001600)={'batadv_slave_0\x00'}) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000001640)={'ip_vti0\x00', {0x2, 0x0, @empty}}) r2 = syz_clone(0x8400, &(0x7f0000001680)="81ec2ecd35e55cb551d06a18b669121d80fa0c842842044deb0705", 0x1b, &(0x7f00000016c0), &(0x7f0000001700), &(0x7f0000001740)="fb79c994597c1b779bf212e1dfda89f92c48fb02de7adde398e98f2d7a33847832adcbf4d64cd086b651edf5d12d98729653d8ce600b594b383a7fe4cc62d689ae2b466e5c9e46417e01e66c9b3c727a4ccae46ba48854a2e68106e868a1f1cd9bb4b1115f3aba5d5d269710151aa8d0b1da18c8a54e7f7be2077043948135251c3e73b561ef7c0c0c0b505f98c1066711bb0ecd8ba6b0f1f24d324137a38ae3f9d62dad285c931ddab918c0b863459aad7784c8d7ea360b2cb5369348ac6eea8b0b385d2fef37aef1") r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x2c, r3, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x46, 0xa}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a7f2c0a997"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x200400c4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001bc0)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001b80)={&(0x7f00000019c0)={0x1bc, 0x37, 0x8, 0x70bd25, 0x25dfdbfd, {0xe}, [@generic="807ec400819e2d6be233dca24b1de9b90b1bf5e301721929c574fc42df01f91258f9c96ddb3c5c3782c756d2d8f9da9e92d85490ab99637ace549d928910f235a2f602375396833b68b1998bcfef189d17487253d288f06d793150d96e915165e4410520a46e2e67e5838495deb5fba56723975625ee5d8b9339c0decb1614454fa0727404b5352a031cef78c50c0de0bc6a65da8c7baea2718996d568", @generic="217018e3e4ddd759623499d92d2a7a474365e292a09e299b7ffbc1a138f103524ef64b8113493bd44f44bc4ca458e749050442108466bc89e3e22f8357b3f7bc2197a8b550659ccd294d42ab33d333942b9353eab27f545db0ff79cd61b0359cba8549ee4ba5978d7d877aacc1fa3685f0584d240cdbea66a66218a80521a798e5518a528247b4982bace0987e517c46dc3d656ef62fdf43b888b0bf74c9", @typed={0x69, 0xc8, 0x0, 0x0, @binary="64b2ad31e1a40fbbbea886d2116643d8f52d0c051535dc8bfed3424e95fd79c991e99a74f86321f20f91c7555f21b518c4bc386999f47c95d1bfb2b90b3844abf9794210b0c2bcd3684a5e3ac161df3ab0372533f698ecf5c894cac42a9ffdde6be8e20665"}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x94}, 0x1) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000001cc0)={&(0x7f0000001c00)=""/131, 0x83}) (async) ptrace$getregset(0x4204, r2, 0x1, &(0x7f0000001cc0)={&(0x7f0000001c00)=""/131, 0x83}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r4, &(0x7f0000001e00)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x500}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x44, 0x2, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000001e40)=[@window={0x3, 0x6, 0xa}, @timestamp, @timestamp, @sack_perm, @sack_perm, @timestamp, @timestamp], 0x7) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000001e40)=[@window={0x3, 0x6, 0xa}, @timestamp, @timestamp, @sack_perm, @sack_perm, @timestamp, @timestamp], 0x7) ioctl$int_in(r1, 0x5452, &(0x7f0000001e80)) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000001e80)) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000001f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r6, &(0x7f0000002080)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002040)={&(0x7f0000001f40)={0xcc, r3, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x53}}}}, [@NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52ea6d9876167535059c53e8a69e80f8"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a1db71dc24bccc63"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x1ff}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="7ed1d9110bcae32f98bd85b42de624e0"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="86be8b3767cc4edc5d35a18ca26246b8"}]}, @NL80211_ATTR_REKEY_DATA={0x50, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "6067195ed30b3386"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="2c72e1ce82ec0c54f676391381a73e3ca239fd047b60a8ea"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="d8178cb17b900614588f635c2e0e19c028b9c2ad21bfba70f8c91a301ae455b2"}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x41}, 0x20040001) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r3, 0xd5aa3eb9ba772378, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) (async) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000002180)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r3, 0xd5aa3eb9ba772378, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8050}, 0x4000) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) (async) map_shadow_stack(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002200), r6) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000002740)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002240)={0x4b0, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x65, 0x3, "78772ad035d39b85ea3dd9e3a77a5e8d4a9faf9596b94acc5d88cf6021dc819f43c8dc6598541e8d74d2f77b8c70e09f462c673ae798af9ca4c5ebee9a0c7ce071f77c704b04ca381110fdf6501f75463e3cfd53c4b3744a9273e31e5137b90b87"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "78e7610d292279d323e5d5c4f5789c8abb5ba9ff5cab70f9e861e6fac7e90f36c0"}}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x641}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xd2, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2cb}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x2, 0x8, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8}]}, @TIPC_NLA_NODE={0x208, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x85, 0x3, "959de4a21458a5b524c9637a6ea67f593eaec90b4f3f52e84f832bdc79133e22ea38cc9ebff10fbd8cf9f6a11690470c5fc75db681a1a84f63bdb2e89f607622a2d860193443950edadb8ab008a4d6db3dac754145d74c90d2674f419eed5fcaa021f811758c08308456820a04b566ba3f886cbd0e9b613d051df2b9918bf55e96"}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "fa9e80840390a4be39a72a97a0be1ec73c5b59073f1061a288d62166269f42aaaf426c3af41035e273a011e2cf9c82928294c9d6645f111d6dbff754cbc559b0371e193977c0685c6d8b43fb8401c6a799e610ee7603a7b846be5cde30ede57d103dc4829d58b38861ab41436ea9938180d3e20385fc701cd586287c3ff66d29e32641ad9c38c02b07d2cedd2b8f2f75018496934932e6ebfa1b1a856a8c537abcbbb378ecbc30927e331845ff3abe27c5c52899e0035e02c27ba9a402fc4fa24b4a823d7b649f5cfc71251cfb174c17a6fa5c4fbd8fb21178e7f68f36ae0ef0c11fb07638f1c3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2d6db3b968bf6eb6c86765a5215fca60520cf13d11460544f004"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "facf49294285140a96dc01532eb3ec67b6040725fcb25f7bfd67"}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x80}, 0x4004041) (async) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000002740)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000002240)={0x4b0, r8, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x65, 0x3, "78772ad035d39b85ea3dd9e3a77a5e8d4a9faf9596b94acc5d88cf6021dc819f43c8dc6598541e8d74d2f77b8c70e09f462c673ae798af9ca4c5ebee9a0c7ce071f77c704b04ca381110fdf6501f75463e3cfd53c4b3744a9273e31e5137b90b87"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "78e7610d292279d323e5d5c4f5789c8abb5ba9ff5cab70f9e861e6fac7e90f36c0"}}]}, @TIPC_NLA_LINK={0x28, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x641}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff7f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xd2, @local, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e22, @loopback}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2cb}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0x1, @remote}}, {0x14, 0x2, @in={0x2, 0x4e24, @local}}}}]}, @TIPC_NLA_LINK={0x1c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x7ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x2, 0x8, @mcast1, 0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe8}]}, @TIPC_NLA_NODE={0x208, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x85, 0x3, "959de4a21458a5b524c9637a6ea67f593eaec90b4f3f52e84f832bdc79133e22ea38cc9ebff10fbd8cf9f6a11690470c5fc75db681a1a84f63bdb2e89f607622a2d860193443950edadb8ab008a4d6db3dac754145d74c90d2674f419eed5fcaa021f811758c08308456820a04b566ba3f886cbd0e9b613d051df2b9918bf55e96"}, @TIPC_NLA_NODE_ID={0xeb, 0x3, "fa9e80840390a4be39a72a97a0be1ec73c5b59073f1061a288d62166269f42aaaf426c3af41035e273a011e2cf9c82928294c9d6645f111d6dbff754cbc559b0371e193977c0685c6d8b43fb8401c6a799e610ee7603a7b846be5cde30ede57d103dc4829d58b38861ab41436ea9938180d3e20385fc701cd586287c3ff66d29e32641ad9c38c02b07d2cedd2b8f2f75018496934932e6ebfa1b1a856a8c537abcbbb378ecbc30927e331845ff3abe27c5c52899e0035e02c27ba9a402fc4fa24b4a823d7b649f5cfc71251cfb174c17a6fa5c4fbd8fb21178e7f68f36ae0ef0c11fb07638f1c3"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "2d6db3b968bf6eb6c86765a5215fca60520cf13d11460544f004"}}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "facf49294285140a96dc01532eb3ec67b6040725fcb25f7bfd67"}}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x4b0}, 0x1, 0x0, 0x0, 0x80}, 0x4004041) pipe2$watch_queue(&(0x7f0000002780)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) read$watch_queue(r9, &(0x7f00000027c0)=""/4096, 0x1000) (async) read$watch_queue(r9, &(0x7f00000027c0)=""/4096, 0x1000) fcntl$setlease(r1, 0x400, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r10, &(0x7f0000003880)={&(0x7f00000037c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003840)={&(0x7f0000003800)={0x20, r3, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void, @val={0xc, 0x99, {0x7f, 0x41}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x404c045}, 0x0) 7m18.468289038s ago: executing program 4 (id=1605): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) fanotify_mark(0xffffffffffffffff, 0x8, 0x8000010, 0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/file0\x00') (async) r0 = socket(0x8, 0x800, 0x2) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0x4}}, './cgroup/file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000280)={0x50, 0x0, r2, {0x7, 0x2b, 0x7, 0x4a0890, 0x10, 0x200, 0x100, 0x80000001, 0x0, 0x0, 0x1, 0x6}}, 0x50) (async) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x982, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0xa77}, 0x1c) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000240)={0x1, 0x4, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = timerfd_create(0x8, 0x80000) close(r7) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x18, 0x41, 0x107, 0x0, 0x25dfdbfc, {0x1, 0x7c}, [@nested={0x4, 0x31}]}, 0x18}}, 0x4010) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000023c0)={{0x1009, 0x1, 0x0, 0x4}, 0x5, 0x0, 0x2, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) syz_clone3(&(0x7f0000000140)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x2}, 0x7a) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r9, 0x890c, &(0x7f0000000000)=@generic={0x1800, 0x2}) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0xe79b04dd2a128718, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000000)="0f080fae04a200400f01c426660f3a15e6160fc76bdbf08666350f2170260fed9c000066b9230b00000f32", 0x2b}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) recvmmsg(r0, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 7m18.395702312s ago: executing program 4 (id=1607): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r0, 0x1000, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14, 0x2, 0x7, 0x401, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) 7m18.225226566s ago: executing program 4 (id=1609): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x209c4580, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000200)='auxv\x00') read$FUSE(r2, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$phonet(0x23, 0x2, 0x1) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x9e1, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xbb, 0x4b, 0x34, 0x10, 0x7aa, 0x11, 0x949f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9cf, 0x4, 0x2, 0x3, 0x60, 0xff, [{{0x9, 0x4, 0xb0, 0x6, 0xb, 0x9f, 0xe8, 0x23, 0x6, [], [{{0x9, 0x5, 0xb, 0x0, 0x20, 0x40, 0xfc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x25, 0xfffb}]}}, {{0x9, 0x5, 0xf, 0xc, 0x40, 0xb2, 0x9}}, {{0x9, 0x5, 0xa, 0x0, 0x40, 0xc, 0x8, 0x50}}, {{0x9, 0x5, 0x5, 0x10, 0x3ff, 0xeb, 0x9c, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xb, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x43, 0xf, 0x9ba6}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x3, 0x0, 0x9}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0xa, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x49}, @generic={0x82, 0x9, "adb2d6ce3b1e4939c1a62f4743e0138c132e8cd1cc1f97d81665c48dbf2b4fe86016ff23b920359fe37ca223fa9f510c3dd36a133ec488c28252c75f6e8c478a3d73d33ffdd9fa423fe3a6d08291c51e4c71f738ad4cefe61242e00f4beae7ccb899eca4148efa1d05f3d0d47cd6a5bfa5046ad23dec5be5bf0add2576ecf744"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x0, 0xb1, 0x3, [@generic={0xdf, 0x12, "f29f3d182e8d9deafa8e02eb5a942d8116d496350d318e78294e8aa36368896cdabf2d7c9b4d0eced3d2b8e311a3721588005df708b4684f8e3aaa4422cb33286554b1716a86567e47f92eac343cd26dc22ec4900991d74f3e9fdeee0c144ed076ed872ae3f3fe0a7b7f0b315178d7f2ed29d1cbebe4fe41d002c8c434522e3b372d699c363f2e6c5b7818b561d38a69bcfec264cad6b3d05e79b4cc8664ac780c22fb6c4af0ce008def90960690950d569d5a340b80d1d9262202aa8f484ca37fb346e8c9373226d25b61481331e03729728fb860f3df29c8e14e711a"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x400, 0xff, 0xfe, 0x9, [@generic={0xd, 0x21, "f88a092e0fcd51198a6809"}, @uac_iso={0x7, 0x25, 0x1, 0x102, 0x5, 0x3}]}}, {{0x9, 0x5, 0xa, 0x0, 0x3ff, 0xe9, 0x5, 0x55, [@generic={0x86, 0x31, "d91f3f0d34e818b301a2290f01c4d6990287b30dde454f2a85148df34d3f40cf00602cdf71d13240d44a8d8cc5fab3822264cf6dcadb058b5bd73975464f6b679cccfb1072b97c2c26c1aa297fb973227d4e326730561398db79383b7ab42a6b352ef11f15436e031caa341c66da7535334b70455e985271ea0aa648705d9fe9e6cb45da"}]}}, {{0x9, 0x5, 0x80, 0x11, 0x3ff, 0x8, 0xa5, 0x1, [@generic={0x1f, 0x21, "df3f9c403c9cb38a41927335754714255d9b995ba563b80796059e4aaf"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x1d, 0x6a, 0x5, [@generic={0x91, 0x31, "48f1fca187aefe893c33af3c1a7deb6937312bf6125a313611bc1e6cb4c766bd2a07c3eb030e95cfab25d55a0ca734162b372ccff28ded9dfacd0c6cbd6b4e6efbb3438a155278bda314c657aa8ad6cc1efc05854aad260b61da9b00dcd1232379576be82960629318ecae7e032b0e2582a5d03501a5efc809b1673c554f292cfb9b954e9f549581270a90ab402018"}]}}]}}, {{0x9, 0x4, 0xf0, 0x3, 0x3, 0xc0, 0x12, 0xda, 0x35, [], [{{0x9, 0x5, 0xf, 0x10, 0x20, 0x7, 0x0, 0x6}}, {{0x9, 0x5, 0x80, 0x4, 0x10, 0x49, 0x1e, 0x51, [@generic={0xd1, 0x4, "626b564dad7b139d82d32920df3355639f15ae1c8e989480490df82605f07d655e35d680d349d1eedc8a651e83652ab600406aff882a4787752264fbf32e6156861fb7366d937ecfe3f83fec2a77d3a9397da41e05f3099e8371bbff8a3b9d59a16aa8a5cebec96ee775b3f63c74ee7cb4ff9bf08a907734d9fc113057626f1feacb8a7194dcc347808bdf1c04c7f4faba1533e31548f2373db57b089dcdcdd523eae1224721bd13cea4ef86138d1becbceedfb27f31eb0563081b356c6bb2fa60e8b96b9109cb15b5a1f88f1fd92c"}]}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x6, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0xdce2}]}}]}}, {{0x9, 0x4, 0x1e, 0x8, 0x5, 0xff, 0xff, 0xff, 0x81, [], [{{0x9, 0x5, 0x7, 0x10, 0x20, 0x3, 0xa7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfa, 0x6e76}]}}, {{0x9, 0x5, 0xc, 0x8, 0x20, 0xb, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x64, 0xfffd}, @generic={0xdc, 0xa, "ba3b381a4d722e7f9b36976a37cfeeb4a20b543097e788a7b32db121b5afa28b2476bbe057e3289ba785360d78689ea4710e821812669ae2f9418c1a32c8d7872c958dd754db5bc37bd2583f88cf41c4c67a35f00f2ef61963f12b3ef7ded8872a5c850164b9de51c858881bda2e818509c91bcd7043c46b818b46cf106fe2b04a5ba3fde5231fa7e6e7707717e5d598e97b149f88b974126d00066602afa8426077f53f8dd6479553b04ad6a74cd8819320865d89c0f31896697e7ed569cedc5a79a88a12b9797b3edd89b335f07317e53c22539a801f86644b"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x3ff, 0x0, 0x1, 0x3}}, {{0x9, 0x5, 0xbee081c75bfd5be4, 0x0, 0x200, 0x1, 0x80, 0x7}}, {{0x9, 0x5, 0x1, 0x0, 0x8, 0x9}}]}}, {{0x9, 0x4, 0x86, 0x7, 0xa, 0x8b, 0x52, 0xa1, 0x1, [], [{{0x9, 0x5, 0xa, 0x1, 0x3ff, 0xa5, 0x10, 0x3, [@generic={0xc3, 0x24, "ebc9442afc78391d753494548fc72953d788a4c0731079462fa8d3710c1d5737ba2c31a41d00bd32d57478fee5b6c755f8450bd91377f13b8ccd86cd28095541f0b1545c8c43bb8ff060ad092dcd8c10c9481d7813dedf3937140bf087002fb37cb7089cdec9b2b14160b9774a8924a59a788e1192c2bd1bc2a5eb6c12cc77bb186f92182ead25036b8859dcf216196ab272a384abc7d5b9cb6ee1746706cc775f870fd7c9c5f81315b5585e70177dbb1b1e1ab42684d5092206b0e940f24d874d"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x7, 0x1, 0x7f}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x1, 0xfb, 0x2, [@generic={0x65, 0x17, "ad99efcc17c0b9cb4ba88136ff244b45aa1ef2afcd4d447f8e35699d550f2be5aa1beffaacfba493728e1b31540887ac6bb6790bce924c475df9646fe7cbb74eb781b36dc9e7d766b3cef1caa89ae5d09cfab968b99a14baa3cda0f7412389282499c2"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x3ff, 0x7f, 0x6b, 0xe0, [@generic={0xec, 0x23, "f735f69e7c05a3f07595ee645538529fa6404744ce7ce392b2d719a19075949a5992af380bf9961d96256245e8086c27507bb3078ce6b262b63e5d1ae7cd63dfeda658669290413fbd2855eb23c9d821b909e3c4601455bb23218b16345ab2ae915aba765f417eab882e8d8a101a010b744ae6e3b402b1a25ec9af5cd5a974a037af79685a28ed754b687ca5e37a83d065c289ab9b528d1ee9f103ffcb31038ae3afb7ae6afbc095b3288b6f855ad83a3d975b863c8266ef73178887e52eb411c72f88d4f6e8011d779f9006a6796e690ef54ae229623b2aa63111db87cc29e5408ae5566e369921f6b9"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x20, 0x9, 0x8, 0x9d}}, {{0x9, 0x5, 0x80, 0xc, 0x3ff, 0x4, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x5}, @generic={0xfa, 0x24, "629d1e5e579a8455fda1b77314408f55cd57c8cc5970e88ab47b12320072b5a7c3f4cc4baad9afea7f01f6da166cb32b3a9e4732527467d41530c39965f268eb7a7b15d7b105319b49c67d5e6d5ac5cf11720797da79b2170394addfde908fd6c79f0b232614c5857fb6c69004854b5aad07f17037de9f6d64dd87deb54740b9a3c6d1deab181a570a124271b13f631ba9136198599fab6975c977a00ea8bae9c348123ca69dbaaeb8143c92f6b080aa35677b78dcdc54caeba6d4511b323db56947b574d4575b3f9fa2644a9535d3acc4d7a3d9437d7f38c5c48731ce703785ac56d2c1c78a4442b8d0ce978e2b264e1b4365992130cb17"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x28, 0x30, 0x50, 0xd2, [@generic={0xb4, 0x9, "d5f0e74a95274a059e4a80f031c4d073bda81f8b44dc2fbcc6edcef9844e3bbd3083888e4ec0641e43d856ad4e51526410d011032c2b59d4fbba6758706a263d211d4eb82bb3c2d4fb47cdce684417dbe6bfa86ce6c43b4b23e66ff928db3cc85d61cf6e462ed6ece0b78c653dedc64523549e2dca06e80a0dfad65be2dd23a08e83f32365682b8dc077037c3764af8f20159971ad3433ac7b67bf04829911cf11b0e56541d9cd0f4c0e95f39b26dee6b084"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0xfff}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x7, 0x4}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x6, 0x8, 0x31}}, {{0x9, 0x5, 0x7, 0x3, 0x620, 0xdf, 0x0, 0x2, [@generic={0x3d, 0x3, "9f26df5bf5f8b345e3441cd4839c27afd6c511acf8fe6daeab314dd05f1e2d489aebe30b2df68ec08abb8529eb75a2bbc54c49ea5b0588f21152d6"}]}}]}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xff, 0x0, 0x7, 0x8, 0x6}, 0x2e, &(0x7f0000000100)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0xa, 0x5, 0x4}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "eadf514ec92cf0e0536306bfdb6fa70e"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x80, 0x80, 0x8, 0xa}]}, 0x3, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x43e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x41f}}, {0x68, &(0x7f0000000240)=@string={0x68, 0x3, "50b883a074d0298911a56cf89944f23fe1464f1f8f8a0f62390c4a426c1ddcdc5b1f0cb9c9fe0b955366b966196f4d47a082630259ffbe15ad00c56fcc9c721897215a39f7fd9cb72e9c6311a0d2dcd668262fbf3aeabd7b8f833fd364a8a52543549b0a4f7a"}}]}) setreuid(0xffffffffffffffff, 0xee00) ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, &(0x7f0000000000)) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x6c64}, &(0x7f0000000040)=0x8) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 7m15.055810883s ago: executing program 4 (id=1627): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, &(0x7f00000000c0)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x12, 0x0, 0x0) dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 7m14.275555889s ago: executing program 4 (id=1637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000040)="bb710600000000000000a88eb266c7", 0xf, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @private2, 0xffffffff}, 0x1c) (async, rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x80000001}, 0x8) 7m14.17826817s ago: executing program 4 (id=1640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2505000000040001800478c1e4f14883e7428de1181c61c96dd8c1097531316959dac638e7f0d36ce3a163ba4ec1ffa8359909e347f3922a94e89f13f7cdb2e580a7d6f060f25c7b357dad564b0e0dedd2d94535ebed6a35242260335c5824c8035e06d86a892110de5439d2430d08d86ae22f30e9bd2564f5619667e601810f3527f03a421e6e0de56640dde09bb78087b02ddd72892e18883fa9fcfc3e91c9166fe36c9fcb17bcd417"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000540)={0x640, 0xf0, 0x356, 0x1000, 0x4, 0xc, 0x18, 0x2, {0x9, 0xd509, 0x1}, {0x4, 0x1}, {0x2, 0x2c2c, 0x1}, {0x10001, 0x8, 0x1}, 0x0, 0x0, 0xfffffff7, 0x9, 0x1, 0x10000, 0x5, 0xffffffff, 0x66d3, 0xb, 0x9, 0x2, 0x4, 0x1, 0x2, 0x6}) (async) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000540)={0x640, 0xf0, 0x356, 0x1000, 0x4, 0xc, 0x18, 0x2, {0x9, 0xd509, 0x1}, {0x4, 0x1}, {0x2, 0x2c2c, 0x1}, {0x10001, 0x8, 0x1}, 0x0, 0x0, 0xfffffff7, 0x9, 0x1, 0x10000, 0x5, 0xffffffff, 0x66d3, 0xb, 0x9, 0x2, 0x4, 0x1, 0x2, 0x6}) syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x1, 0x0, 0x8, 0xfff, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) listen(r6, 0x0) mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)) listen(r6, 0x802) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0400cd005700330080200900ffffffffffff0802110000005050505050505f00ffffffffffffffff640000100006010101010101010003012c0602ff01050305970572060303030303037107ff000100fd0720760603002f00060000"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0400cd005700330080200900ffffffffffff0802110000005050505050505f00ffffffffffffffff640000100006010101010101010003012c0602ff01050305970572060303030303037107ff000100fd0720760603002f00060000"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000010000410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r10, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0xc04}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x71) write(r11, &(0x7f0000000440)="10730f824337f74f1506822196f59c8da1750816c60d9e727c2dc3fd459751ed3218e887cdd7e5a42f6cc1d3d5661dc851cb91f285d21b76b34ab6042056feea1a09c152115e7a998c0c5ab1c75388d56f11c5bf0ab32eff0bd1131106f989d65fd5f728e7430c50c8db757b080c47188c4e1dffd60d5afdf766dec922a1039a83643e6b4d359db56bd681ffe14b43fd750410ceb1f343726ed8235c6353773fbe1cb78fb6bc17328dcda44fd5009485942f740d1517ce8db78bee49350f61315da0ccafd54eeeee55507e1a889057a3c66811610715645dcbeafe87f9634d450228bbf02ef483bca55f8983eb3c084a423d3598ae1870", 0xf7) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='fuseblk\x00', 0x208083, 0x0) 6m58.761023326s ago: executing program 33 (id=1640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa002, 0x0) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000002c0)={'veth1_to_batadv\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf2505000000040001800478c1e4f14883e7428de1181c61c96dd8c1097531316959dac638e7f0d36ce3a163ba4ec1ffa8359909e347f3922a94e89f13f7cdb2e580a7d6f060f25c7b357dad564b0e0dedd2d94535ebed6a35242260335c5824c8035e06d86a892110de5439d2430d08d86ae22f30e9bd2564f5619667e601810f3527f03a421e6e0de56640dde09bb78087b02ddd72892e18883fa9fcfc3e91c9166fe36c9fcb17bcd417"], 0x18}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000540)={0x640, 0xf0, 0x356, 0x1000, 0x4, 0xc, 0x18, 0x2, {0x9, 0xd509, 0x1}, {0x4, 0x1}, {0x2, 0x2c2c, 0x1}, {0x10001, 0x8, 0x1}, 0x0, 0x0, 0xfffffff7, 0x9, 0x1, 0x10000, 0x5, 0xffffffff, 0x66d3, 0xb, 0x9, 0x2, 0x4, 0x1, 0x2, 0x6}) (async) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000540)={0x640, 0xf0, 0x356, 0x1000, 0x4, 0xc, 0x18, 0x2, {0x9, 0xd509, 0x1}, {0x4, 0x1}, {0x2, 0x2c2c, 0x1}, {0x10001, 0x8, 0x1}, 0x0, 0x0, 0xfffffff7, 0x9, 0x1, 0x10000, 0x5, 0xffffffff, 0x66d3, 0xb, 0x9, 0x2, 0x4, 0x1, 0x2, 0x6}) syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x74, 0x141341) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x0, 0x1, 0x0, 0x8, 0xfff, 0x4}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r7, 0x8b32, &(0x7f0000000040)) listen(r6, 0x0) mount$9p_unix(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0), 0x800000, &(0x7f0000000140)) listen(r6, 0x802) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) (async) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0400cd005700330080200900ffffffffffff0802110000005050505050505f00ffffffffffffffff640000100006010101010101010003012c0602ff01050305970572060303030303037107ff000100fd0720760603002f00060000"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="0400cd005700330080200900ffffffffffff0802110000005050505050505f00ffffffffffffffff640000100006010101010101010003012c0602ff01050305970572060303030303037107ff000100fd0720760603002f00060000"], 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000000010000410000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000d0087006c325f64726f7073000000000800870000000000"], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r10, @ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0xc04}, 0x10) creat(&(0x7f0000000140)='./file0\x00', 0x71) write(r11, &(0x7f0000000440)="10730f824337f74f1506822196f59c8da1750816c60d9e727c2dc3fd459751ed3218e887cdd7e5a42f6cc1d3d5661dc851cb91f285d21b76b34ab6042056feea1a09c152115e7a998c0c5ab1c75388d56f11c5bf0ab32eff0bd1131106f989d65fd5f728e7430c50c8db757b080c47188c4e1dffd60d5afdf766dec922a1039a83643e6b4d359db56bd681ffe14b43fd750410ceb1f343726ed8235c6353773fbe1cb78fb6bc17328dcda44fd5009485942f740d1517ce8db78bee49350f61315da0ccafd54eeeee55507e1a889057a3c66811610715645dcbeafe87f9634d450228bbf02ef483bca55f8983eb3c084a423d3598ae1870", 0xf7) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='fuseblk\x00', 0x208083, 0x0) 6m58.293273405s ago: executing program 2 (id=1764): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r2, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}, 0x2}], 0x1, 0x60, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffff20}) 6m57.941770116s ago: executing program 2 (id=1769): bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1-ce)\x00'}, 0x58) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="12000000120001000200000000000000100000000c00001700000000000000000f10"], 0x30}], 0x1, 0x0, 0x0, 0x20004801}, 0x1) (async) dup(r1) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async, rerun: 64) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (rerun: 64) 6m57.785088711s ago: executing program 2 (id=1771): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000004140)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000280)="3b942cdf3dbb4d708446209c8a7a9893c711167b6aee1ac4a8cc59d92a394f460b20f21b9add9e84d2dba9e6df8034c449e64138a4aea2a8df6d35031bd3263f", 0x40}], 0x1}], 0x1, 0x0) process_vm_readv(0x0, &(0x7f0000001100)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, &(0x7f00000012c0)=[{0x0}, {0x0}], 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 6m57.66572036s ago: executing program 2 (id=1772): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x3, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x7000000000000, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40043d14, &(0x7f0000000080)={{0xffffffffffffffff, 0x4}, {0x6, 0x571}}) (async) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) mount$bind(0x0, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socket(0x40000000015, 0x5, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) (async) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x3, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0xbc, 0x400, 0x6, 0x0, 0x0, 0x7000000000000, 0x80000000000, 0x7125, 0x1, 0x102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0x1, 0xffff, 0x0, 0x8, 0x0, 0x80000000000000}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) (async) 6m57.567797623s ago: executing program 2 (id=1773): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) read$FUSE(r5, &(0x7f00000047c0)={0x2020}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r9 = socket(0x1, 0x2, 0x1) bind$unix(r9, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$SIOCGETLINKNAME(r9, 0x89e0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400), 0x80600, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x13c, 0x0, 0x0, 0x2, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x7f}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}]}, @NBD_ATTR_SOCKETS={0x7c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r5}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r7}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r8}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r9}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r10}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r11}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xcc7}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r12}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x8}}, {0xc, 0x1, 0x0, 0x1, {0x4, 0x1, r13}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r14}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x10001}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x102}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4}, 0x11) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r15, @ANYBLOB="010000"], 0x14}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r16 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r17 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r17, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r17, 0x82, 0x0, 0x0) setsockopt$netrom_NETROM_T1(r16, 0x103, 0x1, &(0x7f0000000000)=0x3, 0x4) 6m57.205509885s ago: executing program 2 (id=1775): ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x8ff8, 0x305000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfe}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32f}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xce2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x20044c05) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7}, "8ea3ebb9c6f8ff"}, 0xb) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x90605, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r1, 0xe0cd}, {r1, 0x6002}, {r1, 0x108}, {r1, 0x8550}, {r1, 0x11}, {r3, 0x1402}, {r1, 0x316}, {r1, 0x1102}, {r1, 0x680}], 0x9, &(0x7f0000000400)={r4, r5+10000000}, &(0x7f0000000440), 0x8) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000480)={0x7, 'veth0_vlan\x00', {0xf31}, 0x8}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x4a0002, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f00000005c0)={0x1, 0x0, 0x98, &(0x7f0000000500)={0x8, 0xfff, 0x14}}) socket(0x5, 0x6, 0x100) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x2}}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x44000, 0x0) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f00000006c0)={0x8, &(0x7f0000000680)=[{0x7, 0x7f, 0x1, 0x8}, {0x3ee4, 0x3, 0x9, 0x8}, {0x2, 0x4, 0x2, 0x4}, {0x3ff, 0xf3, 0x80, 0x2}, {0x3, 0x23, 0x0, 0x2}, {0xa6fc, 0x14, 0x9, 0x1c00000}, {0x9, 0x3, 0x2, 0x1ff}, {0x9, 0x40, 0x1, 0x4}]}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x800, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x6, 0x0, {0xa7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x7, 0x87}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0xf}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000a40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x80000001, @local, 0x9}, r13, 0xc}}, 0x48) syz_emit_vhci(&(0x7f0000000ac0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40881}, 0x20000) 6m56.944599358s ago: executing program 34 (id=1775): ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) syz_emit_vhci(&(0x7f0000000000)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x8ff8, 0x305000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xf0, r2, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xfe}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x271}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32f}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16e4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xfff}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xce2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x20044c05) syz_emit_vhci(&(0x7f00000002c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x7}, "8ea3ebb9c6f8ff"}, 0xb) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x90605, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ppoll(&(0x7f0000000340)=[{r1, 0xe0cd}, {r1, 0x6002}, {r1, 0x108}, {r1, 0x8550}, {r1, 0x11}, {r3, 0x1402}, {r1, 0x316}, {r1, 0x1102}, {r1, 0x680}], 0x9, &(0x7f0000000400)={r4, r5+10000000}, &(0x7f0000000440), 0x8) r6 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8983, &(0x7f0000000480)={0x7, 'veth0_vlan\x00', {0xf31}, 0x8}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f00000004c0), 0x4a0002, 0x0) ioctl$BLKPG(r7, 0x1269, &(0x7f00000005c0)={0x1, 0x0, 0x98, &(0x7f0000000500)={0x8, 0xfff, 0x14}}) socket(0x5, 0x6, 0x100) syz_emit_vhci(&(0x7f0000000600)=@HCI_EVENT_PKT={0x4, @HCI_EV_INQUIRY_COMPLETE={{0x1, 0x1}, 0x2}}, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000640), 0x44000, 0x0) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f00000006c0)={0x8, &(0x7f0000000680)=[{0x7, 0x7f, 0x1, 0x8}, {0x3ee4, 0x3, 0x9, 0x8}, {0x2, 0x4, 0x2, 0x4}, {0x3ff, 0xf3, 0x80, 0x2}, {0x3, 0x23, 0x0, 0x2}, {0xa6fc, 0x14, 0x9, 0x1c00000}, {0x9, 0x3, 0x2, 0x1ff}, {0x9, 0x40, 0x1, 0x4}]}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x800, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x4c, r0, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x80, 0x1, 0x6, 0x0, {0xa7, 0x8, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x400, 0x7, 0x87}}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0xc, 0x2a, [@mesh_id={0x72, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2404c000}, 0x1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r9, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x28, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x4, 0xf}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r12, &(0x7f0000000a40)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x400, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, {0xa, 0x4e21, 0x80000001, @local, 0x9}, r13, 0xc}}, 0x48) syz_emit_vhci(&(0x7f0000000ac0)=@HCI_VENDOR_PKT={0xff, 0xc0}, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000b00), 0x2, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000b80)={0x90, r0, 0x800, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x40881}, 0x20000) 39.676056341s ago: executing program 0 (id=3744): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0xc6, 0x0, 0x0, @ipv4=@local}]}, 0x18}], 0x1}, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 39.526364248s ago: executing program 0 (id=3745): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'ip6tnl0\x00', 0x8000}) 39.357181237s ago: executing program 0 (id=3748): r0 = syz_usb_connect(0x2, 0x24, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x8, 0x43, {0x43, 0xc, "21efac6474da804d545d72cb7dbea83d4734a8f92dfd7355a092d82adc2d54530c57e05148c111b4779182bec0d15370caf484f3a2c57a0b732435608910dd5f47"}}, &(0x7f00000001c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "8791c2a778f68fedb3fa0c359381010dcecbea62916647226b25dc59887db1ccd2a9a77a37a2c29b4952de7bf8b611db9fc5fa0e3559432cbf721159"}}}, &(0x7f00000005c0)={0x44, &(0x7f00000003c0)={0x40, 0x3, 0xb2, "4341b980db5121f23e8dd4fabbaac23b7c24cfd862f233b07922911f6f06e8d759a734a4e8c7ce9b84714e24f57fad0bf019026848310a46a7f82307a1aafe3a934670f98dc4587add1f90b00706c0b92aee1ca4d7b0eac6f7ceee928335b4163c0e8d25c1a4ef1ff9ab78d390789ca0e191eaecca08306287ad4480d384c54f5ed2153cfe0a9ba9b1e01caa0a1254e7f6a2e5a263996bcd42b1dec4526d6c52f29d801fe4955b00863af4b60a1aa5b1321e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x81, 0x3, "f6401d"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "a411"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "d912d2"}, &(0x7f0000000540)={0x20, 0x84, 0x4, "6360b864"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "04b1f2"}}) 38.754291143s ago: executing program 0 (id=3749): mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x7, 0x44, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x2, 0x80, 0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x2, 0x8b45, 0x0, 0x6, 0x6, 0x0, 0x200000], 0xeeee0000, 0x28340}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x44, 0x0) r3 = syz_clone(0xa08100, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='macvtap0\x00', 0x10) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0)={0x3c1c, 0x1, 0x1, 0x0, 0x5, 0x8000, 0xf, 0xa1b}, &(0x7f0000000100)={0xd7, 0x10001, 0x0, 0xfffffffffffffff7, 0x101, 0x200, 0x100000001, 0x8}, &(0x7f0000000140)={0x100, 0xaa7e, 0xc5c, 0x4, 0x6, 0x5, 0x3, 0x3}, &(0x7f00000001c0)={r6, r7+10000000}, &(0x7f0000000240)={&(0x7f0000000200)={[0x4]}, 0x8}) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r8, 0xc01064c5, &(0x7f0000000cc0)={0x0}) brk(0x9) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000040), 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x110, r4, 0x6c18a000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000940)}, 0x40) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 38.531334669s ago: executing program 0 (id=3750): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x41b0}], 0x1, 0x0, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 37.928022723s ago: executing program 0 (id=3758): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x3) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8932, &(0x7f0000000000)={'dummy0\x00'}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x93a, 0x7, 0x7}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000180)={0x7, 0x0, [{0x2a2, 0x4, 0x0, 0x0, @msi={0x2, 0x7, 0x9, 0x7}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x40, 0x2}}, {0x0, 0x3, 0x1, 0x0, @irqchip={0x7, 0x3}}, {0x3, 0x5, 0x1, 0x0, @sint={0x3, 0x7fff}}, {0x9, 0x5, 0x0, 0x0, @sint={0x83fc, 0x7434}}, {0x7f, 0x2, 0x1, 0x0, @msi={0x800, 0x7, 0x1}}, {0x3ff, 0x4, 0x0, 0x0, @adapter={0x8, 0x3, 0x4, 0x9, 0x78e105d3}}]}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34424752, 0x0, 0x0, 0xffffffff}}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0xa6502) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 37.779082114s ago: executing program 35 (id=3758): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0xf4240) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000040)=0x3) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CPUID(r6, 0x4008ae8a, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8932, &(0x7f0000000000)={'dummy0\x00'}) ioctl$IOC_PR_RESERVE(r1, 0x401070c9, &(0x7f00000000c0)={0x93a, 0x7, 0x7}) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4008ae6a, &(0x7f0000000180)={0x7, 0x0, [{0x2a2, 0x4, 0x0, 0x0, @msi={0x2, 0x7, 0x9, 0x7}}, {0x3, 0x1, 0x0, 0x0, @irqchip={0x40, 0x2}}, {0x0, 0x3, 0x1, 0x0, @irqchip={0x7, 0x3}}, {0x3, 0x5, 0x1, 0x0, @sint={0x3, 0x7fff}}, {0x9, 0x5, 0x0, 0x0, @sint={0x83fc, 0x7434}}, {0x7f, 0x2, 0x1, 0x0, @msi={0x800, 0x7, 0x1}}, {0x3ff, 0x4, 0x0, 0x0, @adapter={0x8, 0x3, 0x4, 0x9, 0x78e105d3}}]}) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34424752, 0x0, 0x0, 0xffffffff}}) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0xa6502) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 8.07445533s ago: executing program 6 (id=3914): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r1) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4020aeb2, 0x0) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) r5 = socket(0x10, 0x3, 0x0) r6 = fsopen(0x0, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT=r0, @ANYRESOCT=r0, @ANYBLOB="df4358274ed5a52268d73ffcd1917504097b94049ebd7cb2a7d6337c27133d0b804e7d86a9876f637488064668086dc6d4e20b65e61a2b8f08c469230e97cfeaa13d00cab2851560ba1ecb142a321b131ead53e69d68f8c763c7238bcaa1c79dfde5b20dbef3bda531", @ANYRES32=0x0, @ANYBLOB="85fa211727ba95f51d9342c24498cf99224e67f3c2be18e732433ff032d9eebf01e3ee30a8", @ANYRESOCT=r6], 0x14}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) splice(r5, 0x0, r8, 0x0, 0x8002, 0x0) dup(0xffffffffffffffff) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100006e40b740e1092151c1400102030109021200010000800000000000003cac2400"], 0x0) r10 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) keyctl$setperm(0x5, 0x0, 0x6203000) shmat(r10, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) socket$xdp(0x2c, 0x3, 0x0) shmctl$IPC_INFO(r10, 0x3, &(0x7f0000001180)=""/4096) clock_gettime(0x0, 0x0) recvmmsg(r7, 0x0, 0x0, 0x52418e567e5a9d8b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r11 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0) syz_usb_control_io(r11, &(0x7f0000000600)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00030400e06bec1d3039d49966020004030f97e6e64a48852d440fcf9b04"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) 5.393295075s ago: executing program 5 (id=3920): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$inet_pktinfo(r1, 0x119, 0x8, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@isdn={0x22, 0x4, 0x9, 0x4, 0x18}, 0x80) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, &(0x7f00000015c0)=[{0x4, 0x3, 0x6, 0x7d, @tick=0x4, {0x0, 0x93}, {0x7, 0x5f}, @quote={{0x7, 0x2}, 0x6}}, {0x2, 0x7, 0x0, 0x8, @tick=0x800000, {0xf2, 0x9}, {0xb, 0x5}, @raw8={"5c124e8c76dfdb6fe2730839"}}], 0x38) ioctl$BINDER_GET_EXTENDED_ERROR(r2, 0xc0046209, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x201, 0x14, 0x3d, 0xc0, 0x20, 0x84f, 0x1, 0x6c05, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x7, 0x0, 0x6, [{{0x9, 0x4, 0x5b, 0x0, 0x0, 0x98, 0xc7, 0xa2, 0xff}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e20, 0xffffffff, @remote}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0x8e) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000001c0)=[{&(0x7f0000000200)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) splice(r6, 0x0, r8, 0x0, 0x88000cc, 0x0) fcntl$setpipe(r7, 0x407, 0x100004) write$eventfd(r7, &(0x7f0000000240), 0xffffff14) geteuid() mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x408, &(0x7f0000000440)={[{@nfs_export_on}], [{@smackfsroot={'smackfsroot', 0x3d, '\xbd\xcc\xc3\x9c\xfe\v\xea|M:\xa0yl\xeb?Q\x8d5-J\xd6\xba\xee\xe1\x99\xdc\x96\xc1f\x10A\xef\xa2\xbfv\x93\x81\xdam\xa6\x93\xc7}f\xee+9FC\xb3\xa6\xa0\xe5i\x85\xb1\x18\xb9\x90~\x9e\xe0\x13l\xee\xed\vX\xb7\x7f\x95\x1e\x934\xb9\xc2\n~\xd2\x88\xaba\x8d\xc6\xcf9sf\x99O\xe6\x11\x94\x93.S\x92\x90\xe6\xcam\xc0\xfer\xdeg\xea\xf8\xf8\xbb\xab8,\'1\xf2\xad$vd\xbe\xaa\xcd\x1dm\xa76\x04\xa2@\x1d^\xfbZ\x8e\xb5R]\x82\r\x97\xb1\x95\x04=\xc1hJ\x1eG\xebn\xdd#\xd9\r\xed\xdc0\xd1'}}, {@flag='nomand'}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@appraise_type}]}) 4.948400612s ago: executing program 6 (id=3921): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) ptrace(0x4207, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x161042, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x2e, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x9}]}, 0x20}}, 0x0) (async) r3 = socket(0x1e, 0x1, 0x0) connect$can_bcm(r3, &(0x7f00000000c0)={0x1e}, 0x10) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x3) (async) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000007500)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000780)=""/242, 0xf2}, {&(0x7f0000001f80)=""/4103, 0x1007}], 0x3}, 0x4}], 0x1, 0x42, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x8c9f, &(0x7f0000000040)) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 4.776454963s ago: executing program 6 (id=3922): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r1, &(0x7f0000001480)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x6}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r1, &(0x7f00000019c0)=[{{0x0, 0x0, &(0x7f0000000280)}}], 0x1, 0x2604002c) chdir(&(0x7f0000000140)='./bus\x00') r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000500)=ANY=[@ANYRESHEX=r1], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25031100800c0002"], 0x114}], 0x1, 0x0, 0x0, 0x8c0}, 0x4040054) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f00000000c0), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) connect$vsock_stream(r6, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f00000002c0)={0x3, 0xa069}) r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) write$FUSE_CREATE_OPEN(r7, 0x0, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/62, 0x3e}], 0x1) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 3.945539654s ago: executing program 7 (id=3928): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d050090443100"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x8, 0x43, {0x43, 0xc, "21efac6474da804d545d72cb7dbea83d4734a8f92dfd7355a092d82adc2d54530c57e05148c111b4779182bec0d15370caf484f3a2c57a0b732435608910dd5f47"}}, &(0x7f00000001c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "8791c2a778f68fedb3fa0c359381010dcecbea62916647226b25dc59887db1ccd2a9a77a37a2c29b4952de7bf8b611db9fc5fa0e3559432cbf721159"}}}, &(0x7f00000005c0)={0x44, &(0x7f00000003c0)={0x40, 0x3, 0xb2, "4341b980db5121f23e8dd4fabbaac23b7c24cfd862f233b07922911f6f06e8d759a734a4e8c7ce9b84714e24f57fad0bf019026848310a46a7f82307a1aafe3a934670f98dc4587add1f90b00706c0b92aee1ca4d7b0eac6f7ceee928335b4163c0e8d25c1a4ef1ff9ab78d390789ca0e191eaecca08306287ad4480d384c54f5ed2153cfe0a9ba9b1e01caa0a1254e7f6a2e5a263996bcd42b1dec4526d6c52f29d801fe4955b00863af4b60a1aa5b1321e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x81, 0x3, "f6401d"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "a411"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "d912d2"}, &(0x7f0000000540)={0x20, 0x84, 0x4, "6360b864"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "04b1f2"}}) 2.665690489s ago: executing program 1 (id=3931): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000280)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@nested={0xb9, 0x9c, 0x0, 0x1, [@nested={0x8, 0x13a, 0x0, 0x1, [@nested={0x4, 0x7d}]}, @typed={0x8, 0xe9, 0x0, 0x0, @uid}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @generic="46e16f7519cabb74e75f5284a7644ee2669cf260d7ee8a72b1d2136dd2cf8f62ab5e0a5db5c620d94653ffcf494387a7cace4f6db5809d7bfd444c39f08538cf4ab4867900a34e58819453bee4b96fc4da12184791474d35fe57ec181883bcd4803ca788a4adfedaaf47763633fea932df1a5ecc8e402f4288d8b2085e457fcdfcac92fab90e27f24d8a1494fb4e35fe93ff248cd58762e1ca3a5ba1c5"]}, @generic="b7b86d126d136b69478a408c8a3294c0eb"]}, 0xe0}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x44, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x56}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x44}}, 0x20040000) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) symlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000100)='./cgroup\x00') 2.559682009s ago: executing program 1 (id=3932): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r0, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 2.331361555s ago: executing program 5 (id=3933): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='aio\x00', 0xc400, 0x0) lremovexattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)=@random={'os2.', '/dev/rnullb0\x00'}) 2.101697856s ago: executing program 5 (id=3934): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000d0a0104000000000000000005000008916860c46e512e70675fa08ed0e390322d14749df3b1f994965234dc5ac6eea91f4ed64eb10bf851062a939d98a4fc2acade9f69dff20cf7d7913742252c52455525f27e198287851f8980440d99155452a899f8be1b2484612a95e645f5b4a5722036281caa8621ad4677db1327d63b726cce03e4ce741d036af09a46"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000000)=@req={0x9ae1, 0x5, 0x397f, 0x3}, 0x10) unshare(0x64000600) r3 = socket(0xa, 0x801, 0x0) getsockopt(r3, 0x0, 0x40, &(0x7f0000b3ffac)=""/84, &(0x7f00000000c0)=0x54) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000009f00)="0b032200e0ff25000200475400f6a13bb1000000080008004803218f69fb1e4c1df27f22e71c401826e0ca28b8371d250a5dd6b04fd225", 0x37, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) 1.759572173s ago: executing program 6 (id=3935): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000009f00)="0b032200e0ff25000200475400f6a13bb1000000e0ff08004803218f69fb1e4c1df27f22e71c401826e0ca28b8371d250a5dd6b04fd225", 0x37, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 1.602436274s ago: executing program 6 (id=3936): ioprio_set$pid(0x1, 0x0, 0x0) r0 = fanotify_init(0x8, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup(r1) fanotify_mark(r0, 0x201, 0x8000000, r2, 0x0) r3 = gettid() capset(&(0x7f0000000280)={0x19980330, r3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=0']) r5 = syz_open_procfs(r3, &(0x7f0000000000)='net/icmp\x00') read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r6, 0x7dfff000) 1.421484135s ago: executing program 6 (id=3937): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000001300)={0x1f, @none}, 0x8) listen(r0, 0x1) userfaultfd(0x1) socket$vsock_stream(0x28, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000380)={0x3ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7fffffff, 0xfffffffffffffffc}, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010002800fe8087c050022fd0e0000000109021200010000600009045e000088686fbcba8d5973d3800b00c0aee5875c89cfefd4fd365be742fbe0842c8d5becc395359cd031687ffd449b435d9e66d4e4b6999334eb2a7359605d80d7e2685667fd3c837dcbdf55ffae7936064c53c677dde318f3e207cfb445a6742810f56739f42c08083b99283f168be7fbc565475a79b33f4c4412028708fb2729349ba03b805b1830688913bd4b89bc509f28a566d0c803647ca8995ce0e0059035b494bb3bec5639a1465294cb919de04589de20a7f341365dea85b0dd66c4bcc283d646d01cccc08d0b9635dae7e8297bad3810734adef9fb"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xf7) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x14, 0x3, "0230e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={0x40, 0x19, 0x2, "adf5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r3, 0xff, 0x53, &(0x7f0000000180)=""/83) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000002280)={0xfc60, 0x8, 0x8, 0x7fffffff, 0x3, 0x3, 0x3, 0x1ff}, &(0x7f00000022c0)=0x20) r4 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000001200)={0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000007a80)=[{{&(0x7f0000000b40)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x5}}, {{&(0x7f00000010c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000800}}], 0x2, 0x48000) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000000)={0x190, 0x78, 0x0, 0x0, 0x20000000, 0x11, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x3}) 1.420254331s ago: executing program 5 (id=3938): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x6a98047402e98331}, 0x14}}, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000180)={'pcmda12\x00', [0x4, 0xe, 0x8, 0x8, 0x1000, 0x101, 0x6623, 0x6, 0xb, 0x0, 0xfffffffa, 0x2, 0x1, 0x8, 0x6, 0x7, 0x1, 0x10, 0x4, 0x5, 0x10, 0x5, 0x9, 0x9, 0x5, 0x4, 0x1, 0xc005, 0x59, 0x7, 0x4]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r9, @ANYBLOB="10007d80", @ANYRES32=r7, @ANYRESDEC=r5], 0x2c}, 0x1, 0x0, 0x0, 0x440c0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000180)={r5, 0x80, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0xfffff800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, @in={0x2, 0x4e23, @remote}, @in6={0xa, 0x4e22, 0x1, @mcast1, 0x6}, @in6={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xc4db}, @in6={0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}]}, &(0x7f00000001c0)=0x10) r10 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) ioctl$EVIOCSFF(r10, 0x40304580, &(0x7f0000001080)={0x52, 0x0, 0x4, {0x2, 0x7}, {0x74, 0x2}, @ramp={0x0, 0x0, {0x0, 0x8}}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 1.252629392s ago: executing program 5 (id=3939): creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000100)=""/251) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003380)={0x30, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x17, 0x0, 0x1, [@generic='}']}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 1.050268802s ago: executing program 5 (id=3940): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) (async) r0 = getpid() r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000085707000a0000000000010902d738f64c4d9193ef412400010000b020090400000203000100092100000001224600"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, &(0x7f0000002200)={0x2c, &(0x7f0000002040)=ANY=[@ANYBLOB="400247"], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r0, 0x3, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0xd507, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000080)={0x3, 0x2, 0x20000a, 0x0, 0x4, 0x562}) ioctl$VIDIOC_ENUMSTD(0xffffffffffffffff, 0xc0485619, &(0x7f0000000080)={0x8, 0x7, "0b290207faa210bcf2c60390a9cb7ae7c3d50d2154504250", {0x1, 0x2}, 0x6}) (async) r5 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_RM_DEV(r5, 0x5411, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000100)={0x0}}, 0x0) (async) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @remote}, 0x10) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) listen(r6, 0x8001) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r2, &(0x7f0000000ec0)=[{{&(0x7f0000000240)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000002c0)="127d167081a2d540a421f158dc856a20e1db9754bf1836927040829a61e10f23b0acd6f5df4749743e875008ce4f3023f77a31cfaf8f48811b74a4d353076cb68945e9604331bdae90cd0b5f1f226a7b1dac0dfaac72afb945da36f5e36d2108b66478c7e0cfb9b5175fe9681674c1bcda48ea048f3ba5c7c737ca868576171742eb927f49c0d26c33283ed1a69ce75432aa9447745b5da90fc1aa3e6212edd0ce9181be5c6e13c9d5b6c7b5018c6c3f67a74afcf995bd694f47dcea4cf3b7c1060f57bf9d565fc38f70be", 0xcb}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="2fc1b9199ea09da5e022cb58bc52a2d9", 0x10}, {&(0x7f0000000580)="bc0cb4d4a026bc9d125e6179fd2042b0364425235bd341ed7a0a3d3f13a4daff786fc12e1bc76d12f1187d32f8adc9dadba65a9c0607c0dd6d60f48d5070ddc77f99e0a807f99383e11042998bda4a9b51fe0db789ccecc64c337f7426fdac0f7b33ef9e6931530fd4150023de85a04e804fa4abac298c94f5f41870e8326ae54b60c35e3d0a95c4c2908a2b8a625ba621a555ed98756de53e46d71294b92d1aefb79b8e8b78bcc48e81089dd04e53847271217a0b0b60351ef42e7a4473e841c0027e6a315207bce5f4e5ac7bd4227b384deada3094fb560a2e44945b4ebd38f69f6ff43c3d66b61175def8", 0xec}], 0x4, &(0x7f0000000680)=[{0x80, 0x10d, 0xe, "6bc1970fdbe8bf961bf1354dc41956c252ccc70bd5299ffbbb101946385179f1318ced2e3fd0811a98dd836fb6d17f2c679694a7a33a753633339bad11a2e5cf949092e48919f81b65144f8b1cf6942c1d9844726ff09df1ad65726c0caa94a0ef0232dd7c46ac63719d46e0cb"}, {0x110, 0x0, 0x80000000, "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"}, {0xe8, 0x10b, 0xacf, "70877a513eea0ad92aa09441305f4eefadd9c06ad0d2c84bf2954f8c7befca0fed646a2a4706c3de2afb2d33438507e86b3f1522fca939fb22a26061b0ca6fb4e390cc39d6041099d7a2e8553f1f25cd1e171783082fe65adacbdcd5ab5f746ff9587e9137b9f677cef9cdda2d0a7bb43287fe6b9abea7a1e09b77a7ff3b58a3de7fd90a6042040f2af2afe8cc516d34c75d6f381388d3f1b826af7726cfe8ddcd7313ff979f86b5b09bf8e55959a4bcb2a26506c8beb52f1798666d2fd9760a5214a6960fe0c7458227a7456f7f3188813dca8ffdbef46a"}, {0x78, 0x10f, 0x4, "77d32d34bdbfd687f693fa343a9b9b03cd81355ace776082ab1b5a60f85b3c9a8b3e84b494db05ac42b49505da013f071b21f5795f400d5d3b4152d2451e833e6ca5f4e9cae3b106e5dba97283f62c86a9dd9938a3b48b8f6d993fee1aa7d76d72f29f4356"}], 0x2f0}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000004c0)="4bfbe38a5acf3ed4eeff9565abc0568bb29a06e0bf0c0da6f98675a3a7695e3fc6c0896a46d905ba353beaab", 0x2c}, {&(0x7f0000000980)="d1d3dc30f00ae856a58829c1355585f5e334aac2726c4661e7097b3dc52d22faf7984ca6c6aa171ecec9b8f3a3013d1af77e585829f4c582954b0f4279f50340d0835fa059c396020914b0b73051b2637ffaa5612a2f5af9e2827c2e7cae2e6a319ca8bea966cde0f1ccfc0f0f9fdc58e4b3", 0x72}, {&(0x7f0000000500)="53bb5657647a2665b4236a43d13a612b7f5052e979973749d25a7a631f1eb1b4157175665a427f46e466b070408e1b34b6f56f66ee", 0x35}, {&(0x7f0000000a00)="b14ff6ee6da4ea", 0x7}, {&(0x7f0000002240)="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", 0x1000}, {&(0x7f0000000a40)="6686912e802a3f8ae007cfbfe8dc8be0e57ec7f37abef32bb8b762f9d9bcd8cc8aa175cd84315daf922129d3d31220c01a7362806a45fa7e610c847701370be0c263c683d619f1264e7a49745c2dd3c96aaba961e387ebcd757592cac8f6e503472522cba8a16f7305b047", 0x6b}], 0x6, &(0x7f0000003240)=[{0xb0, 0x9726c84760f05b6a, 0x7, "e42e8b83759388f87b5469467ee1553ff1e2a55380558098bb79fad76e8aba5a522125b882db7b50e8e2fe6d178cfac1cf105e4b304b0c609ed9d8580b1166130295766ce609961ff2e54d9dca1abd43e202cc4c8d288eff71538723043070ecd105906803f23ad71eeb7fb63db8918a907f5068d115ce2cb0a463351347fa2019b66c39e6a6d2d7d96ea286f32e3bcb03115dec22238f96b67b6c"}, {0x1010, 0x88, 0xffffffff, "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"}, {0x58, 0x117, 0x2, "8280b398db9108bbdd4f4744e4fe70608218045d941e5b61ceed549d76125475a1e0930a16861ad2ff19898b7d1a768e0be3c0df0935c2a4feae6d20a0526bbca3d3444b5e414f63"}], 0x1118}}, {{&(0x7f0000000b40)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000fc0)="d7950d71d662ed6af348fab63f61992404b72206042f544eb0ad321594be1f8a2bf9542c31ce04f268595b495a3ebf68004291c3fac6e4a45fdc624ef169a85fffce13bbe61c815216dd4577a74a5175fe5d1bd3942b93713b093b60b6380c309a1164124a80db7d2e9bf316e9b553bd81e52dbc43e06a3b4280ce94c0737e25f160cbe64223faeb68c725c0f5a0b2aa0131c04977ee24a3", 0x98}, {&(0x7f0000000c80)="f278ed653bb9ed45569fc56a4ee4187ee9ec8f1f4bb852b678a9e47b1d3550b58bbd7228ab42353892f9ddc71c364abea8588570ef75e4dc17de", 0x3a}, {&(0x7f0000004380)="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", 0x1000}, {&(0x7f0000000cc0)="28de975e3c650547d01562f70fec607b93a27e4d552911191595d1b873bcb86069b5298e3bd39f878f63d234dde7cce526ac7b87bc3283", 0x37}], 0x4}}, {{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d40)="72df36ff3729d7b2e2d34f8997130b769bc7965af1ca04aa2402947af6c12728108fa63df144b39e87429f8eda9c578b21238cdcd1624116a120d2fd0d4a1fa303518c4428a3eab730491707fc426a2a7679582f0f623b3ff5fb40044339851dab7fccaf56611801cabf0f6deea1419040f5cac0970dfef57df1fd3a90ec6357f465", 0x82}, {&(0x7f0000000e00)="6d57751b903886f9b21b9794187f472cb665b280a1c1fecf445ca5a3ecde7be1a21a35743cf948fcb510c99b40ec313a1cf90670d0fb67870cf71fa08a4edd7bf0383b9ae986e4f1088926dfcff78e722bff9d76779a94df7d54dbd35683316bd87db05822eb401a8b780d0187c0f37b0fd41a7be143afcbe24a4603b117", 0x7e}], 0x2, &(0x7f0000001180)=[{0xf8, 0x102, 0x0, "9a0cf4210c1200d6dc471a8fecd6081a9ac9357660ef77bafc47899a063f4b5276a85444d7bdbe29436775125180d28677624ac550490090c0ce4fc1a3420b3a751db3796ff947f429389e5e1b3321f73e12485e643c43df8d4f3389bf7eade46cb4f657fd87d09dca183aedc95001c5c049bcd1a394863b681e4ab53308c2674df180c034dc6a0ee4e95641ffe141db7375e6411e8782b396ea712b5445cb3033381873f4b81d4f214898c8bb872fdb4fb569ef0698254d5828c0f1165650a53ab60ecad56f5226c2fc992e7af42616d2b2a53a23fadf0bcd19238f807a579a4e79ce1c"}, {0xe8, 0x101, 0x7, "8475dc31ef56902a7b3837a12ba1dba3870e02c4819fbe697ea1451a5a2a29f09e021cc2ea8b7f4877051ead5d7d86fcc369952d6bb3c3b61888d412dd5a5379fc04b3df5e7dd313915eb1d2ca47462e679e6c9d0fc64c0c7b8436c9dd977788c57d1aab1deba347ac29c879c2367127aabdbed56d3a2969e768e121c92a4be7a7bd7413f2e89cb12557df6aa6148a20dc23e94c268d34e5aa285c3a1c580052acc5b8d936a8641f949a58fcf052846a0bb754cba4f6a459c677aed6eeb465da6377b000e86ed50dbae70e31b68669fd18"}, {0x50, 0x1, 0x0, "566350dd7aad440a165e8c372ce46eb6fb8392e1968cba2e51fad1f089ac60ac8f18f2d3dc1ffb862cf4b0be4567b05a9d0ed4d7269a1fb5c9622a728a31eb"}, {0x110, 0x101, 0x3, "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"}], 0x340}}], 0x4, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) (async) fanotify_mark(0xffffffffffffffff, 0x40, 0x2010, 0xffffffffffffffff, 0x0) (async) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/comedi4\x00', 0x40000, 0x0) ioctl$COMEDI_INSNLIST(r7, 0x8010640b, &(0x7f00001859c0)={0x6666666666669dd, &(0x7f0000185780)=[{0x4000000, 0x0, 0x0, 0x0, 0x3}]}) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r8, 0x45809000) (async) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 769.867363ms ago: executing program 7 (id=3941): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20000041}, 0x24040040) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000005c0)="13cc", 0x2, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r1, &(0x7f0000000140)=""/124, 0x7c, 0x737, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 734.959ms ago: executing program 7 (id=3942): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000000c0)={0x4, 0x8, 0xfa00, {r1, 0x6}}, 0x10) pselect6(0x40, &(0x7f0000000100)={0x9, 0x6ce, 0x6, 0x80000001, 0x8, 0x7, 0x81, 0x7}, &(0x7f0000000140)={0x8, 0x5, 0x7, 0x2, 0x1, 0x7c1, 0x2, 0x1}, &(0x7f0000000180)={0x8, 0x4, 0xd6, 0x3, 0x8, 0x7fffffffffffffff, 0x7fff}, &(0x7f00000001c0)={0x0, 0x3938700}, &(0x7f0000000240)={&(0x7f0000000200)={[0x2]}, 0x8}) write$char_usb(0xffffffffffffffff, &(0x7f0000000280)="6a7048940be268c503", 0x9) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x7a, 0x2, "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", 0x7, 0x3, 0xb6, 0x5, 0x2, 0x8, 0x40}, r1}}, 0x120) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000400), 0x111, 0x3}}, 0x20) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000004c0)={0xe, 0x39555659, 0x2, @stepwise={0x486, 0x0, 0xfffffffa, 0x2, 0xfffff800, 0x8}}) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r2, 0xf50f, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f00000005c0)={0x15, 0x110, 0xfa00, {r4, 0xad7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x8, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, @ib={0x1b, 0x101, 0xd, {"ce68f31f34f087981e48db75c93797ba"}, 0x4, 0x0, 0x4}}}, 0x118) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000700)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000900)={{r6, 0x4, 0x3, 0x9, 0x4, 0x8, 0x1, 0x7, 0x7ff, 0x0, 0x8b1, 0x8, 0x0, 0xffffffff, 0x6}}) r9 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000001900), 0x4) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000019c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001980), 0x2, 0x4}}, 0x20) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000001b80)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001a40)={0xe0, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xb8}, @TIPC_NLA_BEARER_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xca}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa2}]}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'syzkaller1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x48}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0xc1}, 0x8000) bind$alg(r9, &(0x7f0000001bc0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000001c40)={0x6, [{r8, r7}, {r8, r7}, {r8, r7}, {r8, r7}, {r5, r7}, {r6, r7}, {r8, r7}, {r8, r7}, {r5, r7}, {r5, r7}, {r5, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r5, r7}, {r8, r7}, {r8, r7}, {r8, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r6, r7}, {r6}, {r5, r7}, {r8, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {0x0, r7}, {r8, r7}, {0x0, r7}, {r6, r7}, {r8, r7}, {r5, r7}, {r8, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {0x0, r7}, {r8}, {r5, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {r8, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {0x0, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r6}, {r6, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r8, r7}, {r5, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r8, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {r8, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {0x0, r7}, {r5, r7}, {r6, r7}, {0x0, r7}, {r6, r7}, {r8, r7}, {r8, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r5, r7}, {r8, r7}, {r5, r7}, {r8, r7}, {r8, r7}, {r5, r7}, {r6, r7}, {r5, r7}, {r8}, {r6, r7}, {r6, r7}, {r5}, {0x0, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r8}, {r8, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r8, r7}, {r8}, {r8, r7}, {r6, r7}, {r8, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {r8, r7}, {r8, r7}, {r6, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r8, r7}, {r8, r7}, {r6}, {0x0, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {r6, r7}, {r8, r7}, {r8, r7}, {r5, r7}, {r8, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {0x0, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r8, r7}, {r5, r7}, {r5, r7}, {r5, r7}, {r5, r7}, {r6, r7}, {r5}, {r5}, {r5, r7}, {r5, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r8, r7}, {r8, r7}, {r6, r7}, {r6}, {r6, r7}, {r8}, {r5, r7}, {r5, r7}, {r6, r7}, {r6, r7}, {r8, r7}, {r5, r7}, {r5, r7}, {r5, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r6}, {r8, r7}, {r6, r7}, {r8, r7}, {r8, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r6}, {r5, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r6, r7}, {r5, r7}, {r6, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r5, r7}, {r6}, {r5, r7}, {0x0, r7}, {0x0, r7}, {r8, r7}, {r5, r7}, {r5, r7}, {r8, r7}, {r5, r7}, {r5, r7}, {r6, r7}, {r5, r7}, {r5, r7}, {r6, r7}, {r8, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r8, r7}, {r5, r7}, {r8, r7}, {r6, r7}, {r8, r7}, {r5, r7}, {r5, r7}], 0x3, "9d28873d19f3e1"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r9, 0xd000943e, &(0x7f0000002c40)={r7, r11, "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", "9bfea57b7c0cdbd1fff16e4565b4746cc2a7495c5ff774995bc884cd7a14feca840eb83bb45e0dcc9f0ca7a0deab6c839ec6dbc598fef4d9f008f2bb6a42d8fad196b3fe3715b79fb197d60389ad2132df2d346c70a32d0ec574a20dbcac7cbdb5a1487bc068886b1b72816324e5440db514f6f0c7701d00db365a817aa0185ec2563ce1799b2662dbc860413dbba4d08069ad71253f843c445762a66cc645ff371bae89238676c6cfb03903d89ad7b4e83ca6e64e9ff352a0e8b50fe9cad62725b2a5ed3aa4248b17e445953a5e417a6bb53b6fed356ec44a1a4ec4f65f0fbcd34cfe18adc6128c545c1cbed4a9528be8769925066495e6885c0c869ff1adf5f17eaafe618af5d2f8b94924ff937ba505d232981a3e8b26cf4435eeccb5eecce2aff7f4b73d4eff3e388acacb1e0eacecb0c3ecf6abb3752146caa76b1bbd32129977e0c449e8949dde851244c752a6116ebf3b3b500898d23c6d5f5b148d3c99d7b3963d88bd33bf6c5590cc9d1bf52bb2b2f8eb9b53dd2bf95f7ae5eddd98647a5a059acf94ce1828c7b6a6a8be806681adb59d9faf7070e8e864f41e5c7d76595607189b891ac16db84f4159779789d6557a02c25cb6b41b276da46ac9121dc45461c2c3e7abd4f0efe71dfe7aee89bc935b9268034a56b57f148eaf4fd7bc43ddc4cec9fe0627700c0056bdf94c7be5f15f5877b667dfa9bb7c4deae20094442464a46ef8dba4bbc40885d6c6768d77ae2353df7b93ab156eb6255611b684a545fd8c09b9f1a25fcebbe925613833719bc3ad32223adfdd579882f8fc915f6e77ceb471fd19e20fcb6dea98654495ec28768f5d35b9bf2cbf241ab266eda5b6ea3b471622078a4081d313cf814fe4e234138eb22218fb4439d0a5cb68a003e3ee6756f867f2e9d3993d2651707c5f3f40f2038ea884d70ae331f97ea28f171a7fe4ca553e610746ec711115513cabaac5c6aa46a94e8e647a74fcbd172c38d25215e38a2e7829367f4b52e9777f2714b51cd1dfc4c2e12f726988355c3c45c69d0cf6b9cbdf12b6f7bccf327fd04069b502045205435d8a1779c69bbd30672a6f14e6ce3d861819ac9417249fcb3d3b2a720397c098c459cbadd25cfeeb283364e9c7776a9278f0aba91467d17c6bc0153333fbce040cf023c41af9e23584328a4989bfbf7696fc9c2b41d584e508f8947e334a578576ee956b5e978e56c240ea890185302e730950beb895586cbfd74f047ad33cf14cc02f4d89029b63ffdbd7ec50dcb16051860f05eeb4775551c6d0e5130a6d8938b47b0459e3838215d620053cec2346625c1c27f84b25b4fed756ba35d3ee109d75a648869e51ea135e41034f687969bbe4f4471118b342dfebca3db03667597189b064383082dbf9821a4fec66aedceaa9e5181246b6c3bdf27b3baba6293bc7fb1bebdb2cb0f6299771ce9e8d6cc7b015d958d33d334606bca471d64285f2a23f8651fee137bd90919ded35eb429589b341e9ab4c4b88a8bb8ef751cac2c148f7043958643e8dc04885e3fc3101f57519f07a8213455d1a7691e2c040279e205178ea1624d5182a2c5d38ed2b26fb413af71a41250d1bcd71633e687c19dc43e1bf7615ca4bdd1205d4dc0d33c5df511a7b1973ea3bcfd49a9e841e7216903ea81f92fdea45d6c4c9958456102350980421659dbe27196f3e4db06371a5e272228136da5f38ca6ae8129ed157db78511f48ba1707ee36cc4871d0b5718175adf4b49a127ab8b726cd5320351829512d0ac7d6b6a9ace11b3a751ede94ea85e6cddade97b5d6cdde3dd74690ea083182b46d2d012c685ba1ef5d1c1547dbfb2b2b89d516ea6a6b1958d288fb04baaf28218bd93b75605fd246ae6fcdf9ad24c4fb1dc91e0889904e45c885b01ca9d57840b3d46cd8357ff7764a893501745e808c92b7153f43ad888a8a78b1fec63fb8cce6900eb5f01254549e61cfadc3ea550ce8c9774011364e315a2ab5d30f91cdee8bd4dee747b69d273808d7dc37d1cf75df9612551fbf015ee42844dee9ad8cdad4606781d04ecf5848c9cfad959a3f2d6f80fc2b14ea5959c84e3594a018ecc3e13acc32ccf7a2b9ed8c710e492739816dd1bcb36bed11a434c2ad66d2d2fcbdfaa34e89cf097df6b2672aa3a26205a80f20b93a2cc2b83b40b10a02db4de203f5d329bc69d4a434f80c197ffba5a629fcf3cb53167bbae3f2ad848eb197e020729bedca2c4a57e39683be635e2c39d886c40abd515ae2ec969ad57bd698ceaa142f10d4cc4782c981742cda5871d0932b8f001dce5e166844e817a2c8257359e565f449864a692dfb61ba36f1687f3f1ee471467281a4f142d44c12424c9e96f59315c2c8b9f2dd29acf577955888d228e3391d7407ff230b3539d8d1adeac0ef62a958b33a359340a4686b7c09ff05c4ea853c9afa7a2d9135f4f5a9d6d53648b1a60a46e15cbd9731ca4f70e3faac39f704170fdefd7796fbc036ed9b42b49ae0bcf7823f88b0295335c4f7107b1b4ff78d946093d3137b09774ef33a67270dacdfe1539b0105eba323afe54d6f643acf336287d4bdb7d2c963f5f74dc4efe314fbba89e3c32cb3a81f06045f8b94ba8415a6815318aa04cb9ce8b48b3600af3c6db79f6d95570a752fbf01bc65a888ace5e7a2aa845910125e340bdb263dc02cbb6979704e74845930f39ef450fd2ffc505fb49fa33cb5f66675e6198a0a18595ad2a644c752610fcefa370748bb60149c9f5216ffba62dac99f4d0d983ca695bb6e9c6b7d49ac4036ae3651397d7705a2ed053cc4c00bf2a32eab34d6e596d39f754fef4f198e61e2b8e0fee3beffbff1b7419513b6e84d05dae03dd1858017de4cceac06357f6dd7f807bd10214aad36dcb7849e6cd86d311e7184eb4f7cb6795ee22fec1bdc4ab60de93268d6a70ad8f3ccadf4c9532137c3c8d110509f0601005a2a8eab4443d8ac1c31ce31c19fc766a89a88f8ee600ef1d9011c8537080ee5b0ff49cb112f6f3e4aba3446216977997957a9d50914770a0ce4c05b7cb2694ebc47de7c652a915adab10422318c80d2e53354412209e8e28a7e14c3981dc67da90c8339bf7459c4a11ff210cf2317ac2d88315ded368aa49205b15deb71e968e6d5e0802e8fb421101da1c4cba7b28acdb3d4c232c4e2ffd4aaab1fe36c4f28386f69bf21c62994972b74f5ca081a12f7f3e191eddb7425057e95d9511582ba7133733d62ddc59a32690ffa68ba355253cdcf116ab945a8a5f27d0083f405ea17ec17df1141d9ae28708ab03901f314595d5d7d50d14060e4bf69b1884e151fd5286b8cfb1e70a7a7c37d4a47a41d10de57a124a6047ac6475ee668127d964aa6304bb14b23250602541c6c7dc59d6e788313c5d4897e6378b1e141f3014acb347a5c95782dc45d587b48fa2ab014f0237affb146c91f89a79ea0e7362d4609b5a95f07e94110ed411613cf47aec448d0c2b688055c5c0e50d820a14d3cdab61ac2df3bd21df58c60f8ae3909d0588b126a2ff1928dc3bffd365b62f187102bfa1b28591b63b781f324a7db1c33cc03c8dbab1fb6883b0fae21368d4e24dac057be4642a0bbd6ab2c4d39f6edeeb4d4d170eed5172c7c12a8cba6b68f2428d1bed1177c52a1677bfadf6ff50625e20b26dbad23d1b57085e3ff552083d9774204a876ecde3289205fc77d68717a0556b4e9df53d900f851e57948fe6126f0ebbde58d21917dfc82835880311548594dce449d241e7d42968aeea39922f7247f9e659eef0f8b976796e188894ccbf417782944afb7b0f18d2f69cce7002bb06e1bb12543f51f763bba76d06187fe93eea43da14d68f833e9ee5e9b4bd7559374471a8dc8b8749aa7c8841e420bc4d6530dc397e9504a27027020542bec721f15d3f1e7941b24e89e7102598dee7159f55e4e5c4a62044541ff08e740f8e3b0760f4c156b94104ddd2fa13105b066d10748881b34782b5f69b1ddab2568d6569aa9b1f11c65cb4d8d2f498f725d41aef5859293494035a13b26a5fe5262554e1a7a909bcfe9fa4a07b057f420289deb6e35e53a64c753588e9ff5a0ce7ef334768a272642319e9b2bbbf573b1b8977844b98df7f8dad626a274015903251b32703ae523af65f82b6a06149edd9b150c7dddfbe2eec150eb7b26ff9211d761eaca3fe4b640cd27589850adb3148c1e3c8fc5bcd5cb486fe5be9aa0dee3df1d48391fefeeed718dfe363e0bca191175c40cf75adf615236d71359aac61143558f0bce6a590f1615a8807eb91b7edb0063428fd3a22e5e3aad903d12e990ba357a0e9fbe56468b73f1875713d72fefbc2b8138c6d41ac8f11e9db650437f428a1debc928c4ee516eb8c0626017b4f6c1626805d8a284aa298b4bc38bab80f96e6da911adebafacf8b69560cd811b862e5917f626af5257250af828e6e44344025e422d7c27da209eff84dcd9eb8ebc32c705e778fd3e6eaeb043f661ab02d5e1683715d00a499942522081e4f75f290826594ce808f564d67d0e695c3522b61258102654e7c1214b714a43a367038bddb89eb41f378f40c6793d1199ac153a7c0af97553dd664945f169161ad1f42c396b167ebd140d6ab3248924e1a4ed1135f56272964aefece99e6df5e13313dc386d0835131910c008a3d7e94ba11caa8c6f7ef3b416974dd47667060d74718e4e241e4c400cbf3ebf5ddfe5f35eaf848331739bc58f8d8f6398e722d4934e4419de2baf61111539787028e1b68b032715d6365aed6dbea893c7fc4d1c189af15264ccf86df84eb3f239b59d480e79fe37a469630c924362a402399a5aeb94a9160aa6cb48b0a0067f08b06287fe546513cd71b7d8956309bc3be08d85d3084484d7eec9a91a4b7e3b7e78c6803759b47822a1e9e8b7f2efaedd2e655d7c5dc0a2818df560b9af1479da103fe472e6f6c05442c6db62692edcf13432854b65acb3c0c3866c4bb83d6fe7666a6f1ef70f5faaa6fca16d7a05951d2b9ec3bf3f031db3d25e54840c3fd864c56d87f20b75c703adeceb53e73818a0f3859c5f2d3ae61b353bc9805f0733921008e4f1538ed687440e3b2d7d4d3df59bebb00c7024499028cd7a27e1c36776f191e9e6d7a4d324ac950871282ae1f9eee1fc3467048b586509fd1cccf85523040e37acd3cf6b61038a4fb384c1a57990c97477fd3629b8dc2f38275a348142b88addda2d1ec602d4cf8f37010ebe406a107a3cf415c77cd34a5a5d3f8c9407ff6c3805cd77b12ee89cb458c64334d0de46479bbd870e8f19c7993a0f17f9a706144aa1c1601ee4ae0a1c3bd94e13feb6e92b722f18bec63bbac419d017df20e796de88214615ead69490b5e5fa8f90694a62cf47ff35b8f78e0596d15083a38787d3e576525b2dd92745"}) r12 = openat$incfs(r3, &(0x7f0000003c40)='.pending_reads\x00', 0x1410c1, 0x60) ioctl$BINDER_GET_NODE_DEBUG_INFO(r12, 0xc018620b, &(0x7f0000003c80)={0x1}) syz_genetlink_get_family_id$l2tp(&(0x7f0000003cc0), r12) ioctl$PTP_PEROUT_REQUEST2(r12, 0x40383d0c, &(0x7f0000003d00)={{0xffffffffffffffff, 0x3}, {0x6}, 0x80, 0x1}) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f0000003d40)={0x1, @sliced={0x3, [0x7, 0x3, 0x1, 0x7ff, 0x5, 0x8, 0x7, 0x1, 0x273d, 0x3, 0x8000, 0x8, 0xfffb, 0x0, 0x7, 0xc61, 0xa4, 0x30, 0x0, 0x1, 0x122b, 0x985, 0xc, 0x9, 0xb6, 0x17d3, 0x7f, 0x3, 0x8, 0x5dc, 0x7, 0x10, 0x40, 0x400, 0xb561, 0xea3a, 0x7c9a, 0x2, 0xa, 0x0, 0x7, 0x0, 0x9, 0x10, 0x4, 0xfeff, 0x9, 0x2], 0x1}}) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000003e80)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000003e40)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000003ec0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0xe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x76ca}, {0xa, 0x4e21, 0x8e2, @private2, 0x5}, r13, 0x5}}, 0x48) 600.0834ms ago: executing program 7 (id=3943): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r3, 0x4610, &(0x7f0000000000)={0x3a}) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100fefffffffedbdf256700000008000100c239e7060013aab98182d4530000000c009900c75300001c000000f4d8d35fae04f0d641adc04b7afcb023ae81e6c409362ddf839de71a2b59eb1e19d7c3b1b2415166573df575db027d3219b1499c4830e043d1661b748c085db2cafa510ad3ff55cd47bdce7491ab85e613d1c72eda1ec28ab7f0ed774521c3c97a3a8bd0aa153312e6e383777b292e915651a5139ee573c45bfb4d192b6065f7399b0f48f10bd494de6b31576e58"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc800) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000000f0000"], 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000002c000000000000000000860090780000000000000000000000000000ee3f000000002b036f"], 0xfdef) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) 285.860284ms ago: executing program 7 (id=3944): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000009f00)="0b032200e0ff25000200475400f6a13bb1000000080005004803218f69fb1e4c1df27f22e71c401826e0ca28b8371d250a5dd6b04fd225", 0x37, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 284.702923ms ago: executing program 1 (id=3945): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$FIBMAP(r0, 0x401870c8, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0xb}, @cpuid={0x2, 0x18, {0x0, 0x7fff}}, @uexit={0x0, 0x18, 0x6}, @cpuid={0x2, 0x18, {0x4, 0x14dc}}, @cpuid={0x2, 0x18, {0x3, 0x1}}, @uexit={0x0, 0x18, 0x2}, @uexit={0x0, 0x18, 0x8}], 0xa8}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="2ef00fc70d3a44000066ba430066edc744240026000000c74424020d000000ff2c24c42375389da0e60000ed67360f01f8440f01c9c4e1f85677cc2e0fd3f2a766baf80cb810dc6a82ef66bafc0cb867df0000ef", 0x54}], 0x1, 0x2a, &(0x7f0000000280)=[@vmwrite={0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x2}], 0x1) 179.90187ms ago: executing program 1 (id=3946): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1280041, 0x0) (async) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1280041, 0x0) r0 = openat2(0xffffffffffffffff, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)={0x80000, 0x0, 0x41}, 0x18) connect$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 170.071018ms ago: executing program 7 (id=3947): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x7ffffffe, 0xd, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d5c20eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x1a}, 0x48, r1) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffffffffffe) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) r3 = socket(0x10, 0x3, 0x0) fsopen(0x0, 0x0) sendmsg$nl_generic(r3, 0x0, 0x0) pipe(&(0x7f0000000380)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$packet(0x11, 0x3, 0x300) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 33.810483ms ago: executing program 1 (id=3948): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000009f00)="0b032200e0ff25000200475400f6a13bb1000000080008004803218f69fb1e4c1df27f22e71c401826e0ca28b8371d250a5dd6b04fd225", 0x37, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 0s ago: executing program 1 (id=3949): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000ac0fce405d050090443100"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000140)={0x0, 0x8, 0x43, {0x43, 0xc, "21efac6474da804d545d72cb7dbea83d4734a8f92dfd7355a092d82adc2d54530c57e05148c111b4779182bec0d15370caf484f3a2c57a0b732435608910dd5f47"}}, &(0x7f00000001c0)={0x0, 0x3, 0x3e, @string={0x3e, 0x3, "8791c2a778f68fedb3fa0c359381010dcecbea62916647226b25dc59887db1ccd2a9a77a37a2c29b4952de7bf8b611db9fc5fa0e3559432cbf721159"}}}, &(0x7f00000005c0)={0x44, &(0x7f00000003c0)={0x40, 0x3, 0xb2, "4341b980db5121f23e8dd4fabbaac23b7c24cfd862f233b07922911f6f06e8d759a734a4e8c7ce9b84714e24f57fad0bf019026848310a46a7f82307a1aafe3a934670f98dc4587add1f90b00706c0b92aee1ca4d7b0eac6f7ceee928335b4163c0e8d25c1a4ef1ff9ab78d390789ca0e191eaecca08306287ad4480d384c54f5ed2153cfe0a9ba9b1e01caa0a1254e7f6a2e5a263996bcd42b1dec4526d6c52f29d801fe4955b00863af4b60a1aa5b1321e"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000480)={0x20, 0x81, 0x3, "f6401d"}, &(0x7f00000004c0)={0x20, 0x82, 0x2, "a411"}, &(0x7f0000000500)={0x20, 0x83, 0x3, "d912d2"}, &(0x7f0000000540)={0x20, 0x84, 0x4, "6360b864"}, &(0x7f0000000580)={0x20, 0x85, 0x3, "04b1f2"}}) kernel console output (not intermixed with test programs): using dummy_hcd [ 665.827991][T18794] /dev/rnullb0: Can't open blockdev [ 665.926098][T18798] /dev/rnullb0: Can't open blockdev [ 665.964496][ T5909] usb 7-1: config index 0 descriptor too short (expected 539, got 27) [ 665.975586][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 228, changing to 4 [ 665.989409][ T5909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 28366, setting to 1023 [ 666.007995][ T5909] usb 7-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 666.018201][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.027822][ T5909] usb 7-1: Product: syz [ 666.033036][ T5909] usb 7-1: Manufacturer: syz [ 666.038654][ T5909] usb 7-1: SerialNumber: syz [ 666.055286][ T5909] usb 7-1: config 0 descriptor?? [ 666.066039][ T5909] hub 7-1:0.0: bad descriptor, ignoring hub [ 666.074016][ T5909] hub 7-1:0.0: probe with driver hub failed with error -5 [ 666.088141][ T5909] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input53 [ 666.103764][ T5909] usbtouchscreen 7-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -22 [ 666.132088][ T5909] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -22 [ 666.420576][ T982] usb 7-1: USB disconnect, device number 105 [ 666.530219][ T5909] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 666.751887][ T5909] usb 2-1: too many configurations: 227, using maximum allowed: 8 [ 666.777216][ T5909] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 666.789552][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.811566][ T5909] usb 2-1: config 0 descriptor?? [ 666.830729][ T5909] pwc: Samsung MPC-C10 USB webcam detected. [ 666.845864][ T5909] pwc: Warning: more than 1 configuration available. [ 667.041066][ T5909] pwc: send_video_command error -71 [ 667.046447][ T5909] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 667.060349][ T5909] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 667.083136][ T5909] usb 2-1: USB disconnect, device number 106 [ 667.350433][ T982] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 667.490438][ T982] usb 1-1: device descriptor read/64, error -71 [ 667.740258][ T982] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 667.767912][T18847] wg1 speed is unknown, defaulting to 1000 [ 667.777823][T18847] lo speed is unknown, defaulting to 1000 [ 667.798653][T18848] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3496'. [ 667.880207][ T982] usb 1-1: device descriptor read/64, error -71 [ 668.000920][ T982] usb usb1-port1: attempt power cycle [ 668.360586][ T982] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 668.393380][ T982] usb 1-1: device descriptor read/8, error -71 [ 668.479714][T18852] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3497'. [ 668.640275][ T982] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 668.681262][ T982] usb 1-1: device descriptor read/8, error -71 [ 668.794492][ T982] usb usb1-port1: unable to enumerate USB device [ 669.431096][T18872] /dev/rnullb0: Can't open blockdev [ 669.554969][T18876] syzkaller1: entered promiscuous mode [ 669.566989][T18876] syzkaller1: entered allmulticast mode [ 669.750222][ T5909] usb 7-1: new full-speed USB device number 106 using dummy_hcd [ 669.911059][ T5909] usb 7-1: too many configurations: 227, using maximum allowed: 8 [ 669.937937][ T5909] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 669.960226][ T5909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.977416][ T5909] usb 7-1: config 0 descriptor?? [ 669.993204][ T5909] pwc: Samsung MPC-C10 USB webcam detected. [ 669.999241][ T5909] pwc: Warning: more than 1 configuration available. [ 670.191305][T18895] syz.0.3510: attempt to access beyond end of device [ 670.191305][T18895] loop0: rw=0, sector=6, nr_sectors = 2 limit=0 [ 670.205207][T18895] ADFS-fs (loop0): error: unable to read block 3, try 0 [ 670.380303][ T43] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 670.413349][ T5909] pwc: recv_control_msg error -71 req 02 val 2b00 [ 670.423276][ T5909] pwc: recv_control_msg error -71 req 02 val 2700 [ 670.440312][ T5909] pwc: recv_control_msg error -71 req 04 val 1700 [ 670.447481][ T5909] pwc: recv_control_msg error -71 req 02 val 2c00 [ 670.468173][ T5909] pwc: recv_control_msg error -71 req 04 val 1000 [ 670.473957][T18899] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3511'. [ 670.488810][ T5909] pwc: recv_control_msg error -71 req 04 val 1300 [ 670.502147][ T5909] pwc: recv_control_msg error -71 req 04 val 1400 [ 670.511433][ T5909] pwc: recv_control_msg error -71 req 02 val 2000 [ 670.518980][ T5909] pwc: recv_control_msg error -71 req 02 val 2100 [ 670.527907][ T5909] pwc: recv_control_msg error -71 req 02 val 2200 [ 670.538443][ T5909] pwc: recv_control_msg error -71 req 06 val 0600 [ 670.546595][ T5909] pwc: recv_control_msg error -71 req 04 val 1500 [ 670.554036][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 670.569836][ T5909] pwc: recv_control_msg error -71 req 02 val 2500 [ 670.577433][ T5909] pwc: recv_control_msg error -71 req 02 val 2400 [ 670.586738][ T5909] pwc: recv_control_msg error -71 req 02 val 2600 [ 670.594754][ T5909] pwc: recv_control_msg error -71 req 02 val 2900 [ 670.603269][ T5909] pwc: recv_control_msg error -71 req 02 val 2800 [ 670.611488][ T5909] pwc: recv_control_msg error -71 req 04 val 1100 [ 670.650253][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 670.670158][ T5909] pwc: recv_control_msg error -71 req 04 val 1200 [ 670.678007][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 670.686367][ T5909] pwc: Registered as video103. [ 670.691904][ T43] usb 2-1: can't read configurations, error -71 [ 670.717702][ T5909] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input54 [ 670.761315][ T5909] usb 7-1: USB disconnect, device number 106 [ 670.852236][T18908] /dev/rnullb0: Can't open blockdev [ 670.996636][T18912] binder: 18911:18912 ioctl 4020ae46 200000000000 returned -22 [ 671.198920][ T51] Bluetooth: hci2: link tx timeout [ 671.201903][T18924] /dev/rnullb0: Can't open blockdev [ 671.208441][ T51] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 671.677199][T18941] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3522'. [ 671.720276][ T2154] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 671.920983][ T2154] usb 6-1: Using ep0 maxpacket: 32 [ 671.936499][ T2154] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 672.008100][T18963] /dev/rnullb0: Can't open blockdev [ 672.018211][ T2154] usb 6-1: config 0 has no interface number 0 [ 672.060525][ T43] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 672.071438][ T2154] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 672.121779][ T2154] usb 6-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 672.162059][ T2154] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 672.190864][ T2154] usb 6-1: config 0 interface 126 has no altsetting 0 [ 672.216788][ T2154] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 672.236367][ T2154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.270304][ T2154] usb 6-1: Product: syz [ 672.275845][ T2154] usb 6-1: Manufacturer: syz [ 672.287052][ T43] usb 2-1: too many configurations: 227, using maximum allowed: 8 [ 672.295008][ T2154] usb 6-1: SerialNumber: syz [ 672.326294][ T43] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 672.344052][ T2154] usb 6-1: config 0 descriptor?? [ 672.354558][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.364330][T18932] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 672.397726][ T43] usb 2-1: config 0 descriptor?? [ 672.426642][T18975] /dev/rnullb0: Can't open blockdev [ 672.432603][ T43] pwc: Samsung MPC-C10 USB webcam detected. [ 672.449716][ T43] pwc: Warning: more than 1 configuration available. [ 672.750326][ T5896] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 672.788352][ T2154] ir_usb 6-1:0.126: IR Dongle converter detected [ 672.788434][T18990] /dev/rnullb0: Can't open blockdev [ 672.804422][T18988] overlayfs: missing 'lowerdir' [ 672.832119][ T43] pwc: recv_control_msg error -71 req 02 val 2b00 [ 672.840801][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 672.860329][ T43] pwc: recv_control_msg error -71 req 04 val 1700 [ 672.868100][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 672.877075][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 672.887318][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 672.902741][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 672.910556][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 672.913065][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 672.919812][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 672.929406][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 672.939755][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 672.958881][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 672.960309][ T43] pwc: recv_control_msg error -71 req 02 val 2200 [ 672.970776][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 672.990500][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 673.006901][ T5896] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 673.016864][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.020414][ T2154] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 673.030968][ T5896] usb 1-1: Product: syz [ 673.039425][ T5896] usb 1-1: Manufacturer: syz [ 673.045145][ T5896] usb 1-1: SerialNumber: syz [ 673.049074][ T43] pwc: recv_control_msg error -71 req 06 val 0600 [ 673.058929][ T5896] usb 1-1: config 0 descriptor?? [ 673.060331][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 673.100643][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 673.110342][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 673.133450][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 673.152071][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 673.170575][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 673.183551][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 673.192012][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 673.228118][ T43] pwc: Registered as video103. [ 673.245700][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input56 [ 673.275355][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 673.296880][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 673.338447][ T43] usb 2-1: USB disconnect, device number 109 [ 673.364546][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.410566][T19002] /dev/rnullb0: Can't open blockdev [ 673.422251][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.450516][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.493004][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.512350][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.519488][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.539459][T19005] No control pipe specified [ 673.546967][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.574298][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.592605][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.599230][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.607075][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.617283][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.624791][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.636397][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.644296][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.657475][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.664974][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.667811][ T2154] usb 6-1: USB disconnect, device number 89 [ 673.694906][ T2154] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 673.704197][ T2154] ir_usb 6-1:0.126: device disconnected [ 673.706729][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.720269][ T5909] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 673.737676][ T5896] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 673.759534][ T5896] input input55: Timeout waiting for response from device. [ 673.794763][ T5896] usb 1-1: USB disconnect, device number 31 [ 673.890380][ T5909] usb 7-1: Using ep0 maxpacket: 32 [ 673.902169][ T5909] usb 7-1: unable to get BOS descriptor or descriptor too short [ 673.926248][ T5909] usb 7-1: config 3 has an invalid interface number: 242 but max is 0 [ 673.935214][ T5909] usb 7-1: config 3 has no interface number 0 [ 673.942173][ T5909] usb 7-1: config 3 interface 242 has no altsetting 0 [ 673.951844][ T5909] usb 7-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 673.961725][ T5909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.972967][ T5909] usb 7-1: Product: syz [ 673.977878][ T5909] usb 7-1: Manufacturer: syz [ 673.982758][ T5909] usb 7-1: SerialNumber: syz [ 674.053058][T19022] binder: 19021:19022 ioctl c0044dff 200000000000 returned -22 [ 674.100270][ T5896] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 674.268752][ T5896] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 674.294667][ T5896] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 674.317218][ T5896] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 674.337528][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.368158][ T5896] usb 1-1: Product: syz [ 674.377827][ T5896] usb 1-1: Manufacturer: syz [ 674.400859][ T5896] usb 1-1: SerialNumber: syz [ 674.423826][ T5896] usb 1-1: config 0 descriptor?? [ 674.434896][T19005] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.443429][T19005] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.482604][T19027] i2c i2c-0: Invalid block write size 34 [ 674.504785][ T30] audit: type=1326 audit(2000000322.500:939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19026 comm="syz.1.3543" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b01d8e929 code=0x0 [ 674.654750][T19005] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.664985][T19005] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.683961][ T5938] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 674.841721][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 674.854591][ T5938] usb 6-1: config 3 has an invalid interface number: 99 but max is 0 [ 674.865247][ T5938] usb 6-1: config 3 has no interface number 0 [ 674.871873][ T5938] usb 6-1: config 3 interface 99 has no altsetting 0 [ 674.882503][ T5938] usb 6-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=85.74 [ 674.892296][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.901028][ T5896] Error reading MAC address [ 674.911399][ T5938] usb 6-1: Product: syz [ 674.915706][ T5938] usb 6-1: Manufacturer: syz [ 674.925040][ T5938] usb 6-1: SerialNumber: syz [ 675.153222][T19025] /dev/rnullb0: Can't open blockdev [ 675.195444][ T5938] usb 6-1: USB disconnect, device number 90 [ 675.263095][ T5896] usb 1-1: USB disconnect, device number 32 [ 675.338123][ T5909] ums-karma 7-1:3.242: USB Mass Storage device detected [ 675.421446][ T5909] usb 7-1: USB disconnect, device number 107 [ 675.654189][T19038] wg1 speed is unknown, defaulting to 1000 [ 675.661794][T19038] lo speed is unknown, defaulting to 1000 [ 676.100542][ T982] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 676.115960][T19045] No source specified [ 676.149296][T19045] vxcan0: tx address claim with dest, not broadcast [ 676.184475][T19045] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 676.220846][T19045] /dev/rnullb0: Can't open blockdev [ 676.310359][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 676.332345][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.364146][ T982] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.392205][T19051] /dev/rnullb0: Can't open blockdev [ 676.410784][T19051] pvfs2: Unknown parameter '@-' [ 676.417083][ T982] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 676.447266][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.480989][ T982] usb 6-1: config 0 descriptor?? [ 676.484522][T19056] netlink: 'syz.1.3551': attribute type 10 has an invalid length. [ 676.515592][T19056] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3551'. [ 676.526096][ T982] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input57 [ 676.528207][T19054] binder: BINDER_SET_CONTEXT_MGR already set [ 676.625374][T19060] tmpfs: Unknown parameter 'usrquota' [ 676.640784][T19054] binder: 19053:19054 ioctl 4018620d 200000000040 returned -16 [ 676.662621][T19055] wg1 speed is unknown, defaulting to 1000 [ 676.712554][T19055] lo speed is unknown, defaulting to 1000 [ 676.744240][T19041] /dev/rnullb0: Can't open blockdev [ 676.891382][T19064] /dev/rnullb0: Can't open blockdev [ 676.911565][ T982] usb 6-1: USB disconnect, device number 91 [ 676.917769][ C0] pxrc 6-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19 [ 677.665991][T19074] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3555'. [ 678.312054][T19085] /dev/rnullb0: Can't open blockdev [ 678.888469][T19104] /dev/rnullb0: Can't open blockdev [ 679.021526][ T43] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 679.157476][T19108] /dev/rnullb0: Can't open blockdev [ 679.191045][ T43] usb 1-1: too many configurations: 227, using maximum allowed: 8 [ 679.208602][ T43] usb 1-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 679.240409][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.275306][ T43] usb 1-1: config 0 descriptor?? [ 679.377637][ T43] pwc: Samsung MPC-C10 USB webcam detected. [ 679.404151][ T43] pwc: Warning: more than 1 configuration available. [ 679.771413][ T2154] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 679.794595][ T43] pwc: recv_control_msg error -71 req 02 val 2b00 [ 679.821700][ T43] pwc: recv_control_msg error -71 req 02 val 2700 [ 679.837863][ T43] pwc: recv_control_msg error -71 req 04 val 1700 [ 679.855676][ T43] pwc: recv_control_msg error -71 req 02 val 2c00 [ 679.877245][ T43] pwc: recv_control_msg error -71 req 04 val 1000 [ 679.899814][ T43] pwc: recv_control_msg error -71 req 04 val 1300 [ 679.920586][ T43] pwc: recv_control_msg error -71 req 04 val 1400 [ 679.947779][ T43] pwc: recv_control_msg error -71 req 02 val 2000 [ 679.957944][ T43] pwc: recv_control_msg error -71 req 02 val 2100 [ 679.964826][ T2154] usb 7-1: Using ep0 maxpacket: 32 [ 679.988556][ T43] pwc: recv_control_msg error -71 req 02 val 2200 [ 680.002311][ T2154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.014617][ T43] pwc: recv_control_msg error -71 req 06 val 0600 [ 680.021337][ T2154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.044852][ T43] pwc: recv_control_msg error -71 req 04 val 1500 [ 680.062196][ T2154] usb 7-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 680.080524][ T43] pwc: recv_control_msg error -71 req 02 val 2500 [ 680.097720][ T2154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.107253][ T43] pwc: recv_control_msg error -71 req 02 val 2400 [ 680.116781][ T43] pwc: recv_control_msg error -71 req 02 val 2600 [ 680.130938][ T2154] usb 7-1: config 0 descriptor?? [ 680.146401][ T43] pwc: recv_control_msg error -71 req 02 val 2900 [ 680.181211][ T43] pwc: recv_control_msg error -71 req 02 val 2800 [ 680.190895][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 680.200286][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 680.255728][ T43] pwc: Registered as video103. [ 680.273938][T19138] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 680.300367][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input58 [ 680.380821][ T43] usb 1-1: USB disconnect, device number 33 [ 680.558407][T19143] /dev/rnullb0: Can't open blockdev [ 680.572303][ T2154] hid_mf 0003:0079:1801.0048: item fetching failed at offset 0/2 [ 680.618125][ T2154] hid_mf 0003:0079:1801.0048: HID parse failed. [ 680.646989][ T2154] hid_mf 0003:0079:1801.0048: probe with driver hid_mf failed with error -22 [ 680.699462][T13944] Bluetooth: hci4: unexpected event for opcode 0x080b [ 680.711527][T19149] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3578'. [ 680.760404][ T2154] usb 7-1: USB disconnect, device number 108 [ 680.827208][T19155] /dev/rnullb0: Can't open blockdev [ 680.876678][T19158] /dev/rnullb0: Can't open blockdev [ 681.229360][T19166] overlay: ./file0 is not a directory [ 681.324069][T19164] /dev/rnullb0: Can't open blockdev [ 681.463576][T19173] /dev/rnullb0: Can't open blockdev [ 681.645698][T19177] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3586'. [ 681.745447][T19178] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 681.870337][ T5896] usb 7-1: new full-speed USB device number 109 using dummy_hcd [ 682.029460][ T5896] usb 7-1: too many configurations: 227, using maximum allowed: 8 [ 682.085252][ T5896] usb 7-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 682.095051][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 682.138466][ T5896] usb 7-1: config 0 descriptor?? [ 682.161802][ T5896] pwc: Samsung MPC-C10 USB webcam detected. [ 682.178292][ T5896] pwc: Warning: more than 1 configuration available. [ 682.495554][ T2154] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 682.554017][ T5896] pwc: recv_control_msg error -71 req 02 val 2b00 [ 682.572150][ T5896] pwc: recv_control_msg error -71 req 02 val 2700 [ 682.582380][ T5896] pwc: recv_control_msg error -71 req 04 val 1700 [ 682.589479][ T5896] pwc: recv_control_msg error -71 req 02 val 2c00 [ 682.600015][ T5896] pwc: recv_control_msg error -71 req 04 val 1000 [ 682.609155][ T5896] pwc: recv_control_msg error -71 req 04 val 1300 [ 682.616995][ T5896] pwc: recv_control_msg error -71 req 04 val 1400 [ 682.626186][ T5896] pwc: recv_control_msg error -71 req 02 val 2000 [ 682.633875][ T5896] pwc: recv_control_msg error -71 req 02 val 2100 [ 682.645061][ T5896] pwc: recv_control_msg error -71 req 02 val 2200 [ 682.652234][ T982] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 682.663854][ T5896] pwc: recv_control_msg error -71 req 06 val 0600 [ 682.671523][ T5896] pwc: recv_control_msg error -71 req 04 val 1500 [ 682.679289][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 682.686875][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 682.694223][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 682.702055][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 682.711139][ T2154] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 682.711539][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 682.729175][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 682.731259][ T2154] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 682.737623][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 682.745569][ T2154] usb 1-1: Product: syz [ 682.755365][ T5896] pwc: Registered as video103. [ 682.764227][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input59 [ 682.773829][ T2154] usb 1-1: SerialNumber: syz [ 682.796540][ T2154] usb 1-1: config 0 descriptor?? [ 682.806365][ T5896] usb 7-1: USB disconnect, device number 109 [ 682.816126][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.831547][ T982] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 682.887697][ T982] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 682.899938][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.915426][ T982] usb 6-1: Product: syz [ 682.919905][ T982] usb 6-1: Manufacturer: syz [ 682.925599][ T982] usb 6-1: SerialNumber: syz [ 682.934434][ T982] usb 6-1: config 0 descriptor?? [ 683.148208][ T30] audit: type=1800 audit(2000000331.140:940): pid=19198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3591" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 683.203589][ T5909] usb 6-1: USB disconnect, device number 92 [ 683.258486][ T5896] usb 1-1: USB disconnect, device number 34 [ 683.410473][ T2154] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 683.572874][ T2154] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 683.584743][ T2154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 683.595892][ T2154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 683.607379][ T5909] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 683.616252][ T2154] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 683.631195][ T5896] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 683.632934][ T2154] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 683.649837][ T2154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.666896][ T2154] usb 7-1: config 0 descriptor?? [ 683.790289][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 683.792995][ T5909] usb 6-1: config 0 has an invalid interface number: 117 but max is 0 [ 683.799257][ T5896] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 683.805040][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 683.818552][ T5896] usb 1-1: config 0 has no interface number 0 [ 683.822537][ T5909] usb 6-1: config 0 has no interface number 0 [ 683.834982][ T5909] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 683.836661][ T5896] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 683.846364][ T5909] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 683.871562][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.882432][ T5896] usb 1-1: Product: syz [ 683.883416][ T2154] hid_parser_main: 5 callbacks suppressed [ 683.883436][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 683.886650][ T5896] usb 1-1: Manufacturer: syz [ 683.886669][ T5896] usb 1-1: SerialNumber: syz [ 683.905444][ T5896] usb 1-1: config 0 descriptor?? [ 683.908282][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 683.928856][ T5909] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 683.939950][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 683.943570][ T5896] smsc95xx v2.0.0 [ 683.950078][ T5909] usb 6-1: Product: syz [ 683.958269][ T5909] usb 6-1: Manufacturer: syz [ 683.963741][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 683.972512][ T5909] usb 6-1: SerialNumber: syz [ 683.980246][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 683.988298][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 683.999442][ T5909] usb 6-1: config 0 descriptor?? [ 684.007875][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 684.024733][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 684.032809][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 684.040468][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 684.048046][ T2154] plantronics 0003:047F:FFFF.0049: unknown main item tag 0x0 [ 684.074624][ T2154] plantronics 0003:047F:FFFF.0049: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 684.122861][ T30] audit: type=1326 audit(2000000332.110:941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19203 comm="syz.6.3592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc246b8e929 code=0x7fc00000 [ 684.198158][ T2154] usb 7-1: USB disconnect, device number 110 [ 684.219172][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.252000][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.268610][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.280975][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.295284][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.309362][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.334780][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.361152][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.380511][T19209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.391674][T19209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.495576][T19219] /dev/rnullb0: Can't open blockdev [ 684.704688][ T5909] usbtouchscreen 6-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 684.724165][T13944] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 684.734144][T13944] Bluetooth: hci4: Injecting HCI hardware error event [ 684.744465][ T51] Bluetooth: hci4: hardware error 0x00 [ 684.757282][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 684.772940][ T5909] usb 6-1: USB disconnect, device number 93 [ 684.963319][ T5896] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 684.986794][ T30] audit: type=1326 audit(2000000332.980:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19227 comm="syz.1.3598" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b01d8e929 code=0x0 [ 685.000508][ T5896] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 685.031445][T19237] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3600'. [ 685.084452][ T5896] usb 1-1: USB disconnect, device number 35 [ 685.363661][T19245] /dev/rnullb0: Can't open blockdev [ 685.947952][T19259] netlink: 'syz.1.3604': attribute type 27 has an invalid length. [ 686.087352][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.094158][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.253348][ T5938] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 686.421397][ T5938] usb 2-1: Using ep0 maxpacket: 16 [ 686.436135][ T5938] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 686.467438][ T5938] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 686.491882][ T5938] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 686.504237][ T5938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 686.513906][ T5938] usb 2-1: Product: syz [ 686.519149][ T5938] usb 2-1: Manufacturer: syz [ 686.529879][ T5938] usb 2-1: SerialNumber: syz [ 686.538512][ T5938] usb 2-1: config 0 descriptor?? [ 686.552186][ T5938] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 686.574712][ T5938] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 686.602849][T19271] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 686.887548][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 687.176999][ T5938] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 687.185775][ T5938] em28xx 2-1:0.0: Config register raw data: 0xe8 [ 687.192646][ T5938] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 687.199355][ T5938] em28xx 2-1:0.0: No AC97 audio processor [ 689.724804][ T5909] usb 2-1: USB disconnect, device number 110 [ 690.225332][T19302] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3614'. [ 690.310305][ T5938] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 690.390271][ T982] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 690.489137][ T5938] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 690.512330][ T5938] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 690.542414][ T5938] usb 1-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 690.552038][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 690.570912][ T5938] usb 1-1: Product: syz [ 690.576345][ T982] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.587156][ T5938] usb 1-1: Manufacturer: syz [ 690.592179][ T982] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 690.602733][ T5938] usb 1-1: SerialNumber: syz [ 690.628087][ T5938] usb 1-1: config 0 descriptor?? [ 690.636880][ T982] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 690.646332][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 690.655612][ T982] usb 2-1: SerialNumber: syz [ 690.898754][ T982] usb 2-1: 0:2 : does not exist [ 690.917279][ T982] usb 2-1: unit 255 not found! [ 690.968323][ T982] usb 2-1: USB disconnect, device number 111 [ 691.136187][T19319] /dev/rnullb0: Can't open blockdev [ 691.296737][T19330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.319583][T19330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.590279][ T5909] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 691.733376][ T5909] usb 6-1: device descriptor read/64, error -71 [ 691.784618][T19344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.796265][T19344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.812114][T19344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.823212][T19344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.838572][T19344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.861860][T19345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.876635][T19344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.887262][T19345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.980235][ T5909] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 692.020245][ T2154] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 692.133453][ T5909] usb 6-1: device descriptor read/64, error -71 [ 692.176216][ T2154] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 692.189804][ T2154] usb 2-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 692.208173][ T2154] usb 2-1: config 1 interface 0 has no altsetting 0 [ 692.217572][ T2154] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 692.233072][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.242190][ T2154] usb 2-1: Product: syz [ 692.246520][ T2154] usb 2-1: SerialNumber: syz [ 692.256013][ T5909] usb usb6-port1: attempt power cycle [ 692.267816][T19343] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 692.496817][ T2154] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 112 if 0 alt 4 proto 1 vid 0x0525 pid 0xA4A8 [ 692.517640][ T2154] usb 2-1: USB disconnect, device number 112 [ 692.527415][ T2154] usblp0: removed [ 692.600267][ T5909] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 692.621020][ T5909] usb 6-1: device descriptor read/8, error -71 [ 692.870467][ T5909] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 692.900963][ T5909] usb 6-1: device descriptor read/8, error -71 [ 692.958692][ T2154] usb 1-1: USB disconnect, device number 36 [ 692.990556][ T5938] usb 7-1: new low-speed USB device number 111 using dummy_hcd [ 693.024306][ T5909] usb usb6-port1: unable to enumerate USB device [ 693.070740][T19358] /dev/rnullb0: Can't open blockdev [ 693.153211][T19362] wg1 speed is unknown, defaulting to 1000 [ 693.160595][ T5938] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 693.164201][T19362] lo speed is unknown, defaulting to 1000 [ 693.177080][ T5938] usb 7-1: config 0 has no interfaces? [ 693.187808][ T5938] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 693.199891][ T5938] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 693.209908][T19363] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 693.216496][ T5938] usb 7-1: config 0 descriptor?? [ 693.444218][T19354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.465309][T19354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.522032][T19354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.535979][T19354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.585609][T19354] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 693.692284][T19373] Can't find a SQUASHFS superblock on nullb0 [ 693.761319][ T5938] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 693.789715][ T982] usb 7-1: USB disconnect, device number 111 [ 693.923957][ T5938] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 693.938647][ T5938] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 693.954155][ T5938] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 693.965890][ T5938] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 693.976011][ T5938] usb 2-1: SerialNumber: syz [ 694.453187][T19382] /dev/rnullb0: Can't open blockdev [ 694.496414][ T5938] usb 2-1: 0:2 : does not exist [ 694.538222][ T5938] usb 2-1: USB disconnect, device number 113 [ 694.592486][T15954] udevd[15954]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 694.751173][ T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 694.963167][ T24] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 694.999940][ T24] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 695.014503][ T24] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 695.027187][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 695.037308][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.054492][T19385] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 695.060363][ T5938] usb 7-1: new full-speed USB device number 112 using dummy_hcd [ 695.245853][ T5938] usb 7-1: config 0 has an invalid interface number: 123 but max is 0 [ 695.260335][ T5938] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.277246][ T5938] usb 7-1: config 0 has no interface number 0 [ 695.297238][ T5938] usb 7-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 695.306750][ T5938] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 695.320654][ T5938] usb 7-1: Product: syz [ 695.324966][ T5938] usb 7-1: Manufacturer: syz [ 695.334878][ T5938] usb 7-1: SerialNumber: syz [ 695.337261][T19394] /dev/rnullb0: Can't open blockdev [ 695.345446][ T5938] usb 7-1: config 0 descriptor?? [ 695.363823][ T5938] cdc_acm 7-1:0.123: skipping garbage [ 695.488456][T19404] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 695.545683][T19407] netlink: 'syz.0.3647': attribute type 21 has an invalid length. [ 695.560935][T19407] netlink: 'syz.0.3647': attribute type 5 has an invalid length. [ 695.574520][T19407] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3647'. [ 695.633294][T19409] /dev/rnullb0: Can't open blockdev [ 695.700584][ T24] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 695.729958][ T24] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input61 [ 695.822668][ T24] usb 1-1: USB disconnect, device number 37 [ 695.829454][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 696.033452][T19422] /dev/rnullb0: Can't open blockdev [ 696.202897][T19432] /dev/rnullb0: Can't open blockdev [ 696.600803][ T5909] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 696.713958][T19446] /dev/rnullb0: Can't open blockdev [ 696.726235][T19446] /dev/rnullb0: Can't open blockdev [ 696.734002][T19446] /dev/rnullb0: Can't open blockdev [ 696.740492][T19446] /dev/rnullb0: Can't open blockdev [ 696.747442][T19446] /dev/rnullb0: Can't open blockdev [ 696.755214][T19446] /dev/rnullb0: Can't open blockdev [ 696.761810][T19446] /dev/rnullb0: Can't open blockdev [ 696.767654][T19446] /dev/rnullb0: Can't open blockdev [ 696.774998][ T5909] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 696.780759][T19446] /dev/rnullb0: Can't open blockdev [ 696.787710][ T5909] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 696.792473][T19446] /dev/rnullb0: Can't open blockdev [ 696.803685][ T5909] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 696.806886][T19446] /dev/rnullb0: Can't open blockdev [ 696.820071][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.822423][T19446] /dev/rnullb0: Can't open blockdev [ 696.832981][ T5909] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.838918][T19446] /dev/rnullb0: Can't open blockdev [ 696.855023][T19446] /dev/rnullb0: Can't open blockdev [ 696.861603][T19446] /dev/rnullb0: Can't open blockdev [ 696.863926][ T5909] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 696.868093][T19446] /dev/rnullb0: Can't open blockdev [ 696.881823][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 696.881854][ T5909] usb 2-1: Product: syz [ 696.881870][ T5909] usb 2-1: Manufacturer: syz [ 696.898412][ T5909] cdc_wdm 2-1:1.0: skipping garbage [ 696.902097][T19446] /dev/rnullb0: Can't open blockdev [ 696.912941][T19446] /dev/rnullb0: Can't open blockdev [ 696.913668][ T5909] cdc_wdm 2-1:1.0: skipping garbage [ 696.919679][T19446] /dev/rnullb0: Can't open blockdev [ 696.928125][ T5909] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 696.931630][T19446] /dev/rnullb0: Can't open blockdev [ 696.937944][ T5909] cdc_wdm 2-1:1.0: Unknown control protocol [ 696.943582][T19446] /dev/rnullb0: Can't open blockdev [ 696.957000][T19446] /dev/rnullb0: Can't open blockdev [ 696.964281][T19446] /dev/rnullb0: Can't open blockdev [ 696.971108][T19446] /dev/rnullb0: Can't open blockdev [ 696.978335][T19446] /dev/rnullb0: Can't open blockdev [ 696.985115][T19446] /dev/rnullb0: Can't open blockdev [ 696.994147][T19446] /dev/rnullb0: Can't open blockdev [ 697.001337][T19446] /dev/rnullb0: Can't open blockdev [ 697.007299][T19446] /dev/rnullb0: Can't open blockdev [ 697.013620][T19446] /dev/rnullb0: Can't open blockdev [ 697.019653][T19446] /dev/rnullb0: Can't open blockdev [ 697.026264][T19446] /dev/rnullb0: Can't open blockdev [ 697.032661][T19446] /dev/rnullb0: Can't open blockdev [ 697.084163][T19448] /dev/rnullb0: Can't open blockdev [ 697.093465][T19437] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 697.103155][T19436] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 697.105314][T19437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.128643][T19437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.147377][T19437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.158525][T19436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.171977][T19437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.182402][T19436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 697.193683][T19437] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 697.202753][T19438] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 697.216155][ T5938] usb 2-1: USB disconnect, device number 114 [ 697.355052][T19454] /dev/rnullb0: Can't open blockdev [ 697.550450][ T5939] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 697.589245][ T30] audit: type=1326 audit(2000000345.580:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19386 comm="syz.6.3641" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc246b8e929 code=0x7fc00000 [ 697.703339][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 697.712489][ T5939] usb 6-1: config 129 has too many interfaces: 182, using maximum allowed: 32 [ 697.725593][ T5939] usb 6-1: config 129 has an invalid descriptor of length 215, skipping remainder of the config [ 697.739422][ T5939] usb 6-1: config 129 has 0 interfaces, different from the descriptor's value: 182 [ 697.753892][ T5939] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 697.765151][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.779188][T19460] /dev/rnullb0: Can't open blockdev [ 697.846490][ T5938] usb 7-1: USB disconnect, device number 112 [ 697.996133][T19451] /dev/rnullb0: Can't open blockdev [ 698.003786][T19451] /dev/rnullb0: Can't open blockdev [ 698.012320][T19451] /dev/rnullb0: Can't open blockdev [ 698.019137][T19451] /dev/rnullb0: Can't open blockdev [ 698.026269][T19451] /dev/rnullb0: Can't open blockdev [ 698.033618][T19451] /dev/rnullb0: Can't open blockdev [ 698.041467][T19451] /dev/rnullb0: Can't open blockdev [ 698.048196][T19451] /dev/rnullb0: Can't open blockdev [ 698.057836][T19451] /dev/rnullb0: Can't open blockdev [ 698.068594][T19451] /dev/rnullb0: Can't open blockdev [ 698.082372][T19451] /dev/rnullb0: Can't open blockdev [ 698.098635][T19451] /dev/rnullb0: Can't open blockdev [ 698.105815][T19451] /dev/rnullb0: Can't open blockdev [ 698.114575][T19451] /dev/rnullb0: Can't open blockdev [ 698.127053][T19451] /dev/rnullb0: Can't open blockdev [ 698.135192][T19451] /dev/rnullb0: Can't open blockdev [ 698.142651][T19451] /dev/rnullb0: Can't open blockdev [ 698.149559][T19451] /dev/rnullb0: Can't open blockdev [ 698.156621][T19451] /dev/rnullb0: Can't open blockdev [ 698.165032][T19451] /dev/rnullb0: Can't open blockdev [ 698.172272][T19451] /dev/rnullb0: Can't open blockdev [ 698.178834][T19451] /dev/rnullb0: Can't open blockdev [ 698.187379][T19451] /dev/rnullb0: Can't open blockdev [ 698.194518][T19451] /dev/rnullb0: Can't open blockdev [ 698.203868][T19451] /dev/rnullb0: Can't open blockdev [ 698.213873][T19451] /dev/rnullb0: Can't open blockdev [ 698.220620][T19451] /dev/rnullb0: Can't open blockdev [ 698.226862][T19451] /dev/rnullb0: Can't open blockdev [ 698.235750][T19451] /dev/rnullb0: Can't open blockdev [ 698.246217][T19451] /dev/rnullb0: Can't open blockdev [ 698.253749][T19451] /dev/rnullb0: Can't open blockdev [ 698.255076][ T5938] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 698.260767][T19451] /dev/rnullb0: Can't open blockdev [ 698.274881][T19451] /dev/rnullb0: Can't open blockdev [ 698.400556][ T5938] usb 7-1: device descriptor read/64, error -71 [ 698.520320][ T5909] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 698.650541][ T5938] usb 7-1: new high-speed USB device number 114 using dummy_hcd [ 698.694144][ T5909] usb 1-1: not running at top speed; connect to a high speed hub [ 698.704257][ T5909] usb 1-1: config 23 has an invalid interface number: 211 but max is 3 [ 698.715516][ T5909] usb 1-1: config 23 has an invalid interface number: 87 but max is 3 [ 698.729070][ T5909] usb 1-1: config 23 has an invalid interface number: 80 but max is 3 [ 698.741531][ T5909] usb 1-1: config 23 has an invalid interface number: 50 but max is 3 [ 698.750091][ T5909] usb 1-1: config 23 has an invalid interface number: 131 but max is 3 [ 698.766647][ T5909] usb 1-1: config 23 has 5 interfaces, different from the descriptor's value: 4 [ 698.778936][ T5909] usb 1-1: config 23 has no interface number 0 [ 698.790793][ T5938] usb 7-1: device descriptor read/64, error -71 [ 698.793388][ T5909] usb 1-1: config 23 has no interface number 1 [ 698.806579][ T5909] usb 1-1: config 23 has no interface number 2 [ 698.815596][ T5909] usb 1-1: config 23 has no interface number 3 [ 698.822800][ T5909] usb 1-1: config 23 has no interface number 4 [ 698.831284][ T5909] usb 1-1: config 23 interface 211 altsetting 84 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 698.833434][ T5939] usb 6-1: language id specifier not provided by device, defaulting to English [ 698.845986][ T5909] usb 1-1: config 23 interface 211 altsetting 84 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 698.870353][ T5909] usb 1-1: too many endpoints for config 23 interface 87 altsetting 126: 205, using maximum allowed: 30 [ 698.883265][ T5909] usb 1-1: config 23 interface 87 altsetting 126 has a duplicate endpoint with address 0x4, skipping [ 698.895275][ T5909] usb 1-1: config 23 interface 87 altsetting 126 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 698.908829][ T5909] usb 1-1: config 23 interface 87 altsetting 126 has a duplicate endpoint with address 0xD, skipping [ 698.910892][ T5938] usb usb7-port1: attempt power cycle [ 698.920575][ T5909] usb 1-1: config 23 interface 87 altsetting 126 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 698.920616][ T5909] usb 1-1: config 23 interface 87 altsetting 126 has 6 endpoint descriptors, different from the interface descriptor's value: 205 [ 698.920680][ T5909] usb 1-1: config 23 interface 80 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 698.920705][ T5909] usb 1-1: config 23 interface 80 altsetting 4 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 698.920731][ T5909] usb 1-1: config 23 interface 80 altsetting 4 endpoint 0x88 has invalid maxpacket 1024, setting to 64 [ 698.920757][ T5909] usb 1-1: config 23 interface 80 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 698.920778][ T5909] usb 1-1: config 23 interface 80 altsetting 4 has a duplicate endpoint with address 0xD, skipping [ 699.014646][ T5909] usb 1-1: config 23 interface 80 altsetting 4 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 699.014764][ T5896] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 699.026402][ T5909] usb 1-1: config 23 interface 80 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 699.047252][ T5909] usb 1-1: config 23 interface 80 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 699.058772][ T5909] usb 1-1: config 23 interface 50 altsetting 2 has a duplicate endpoint with address 0x4, skipping [ 699.070684][ T5909] usb 1-1: config 23 interface 50 altsetting 2 has an endpoint descriptor with address 0xAF, changing to 0x8F [ 699.082979][ T5909] usb 1-1: config 23 interface 50 altsetting 2 has a duplicate endpoint with address 0x8F, skipping [ 699.094486][ T5909] usb 1-1: config 23 interface 50 altsetting 2 has a duplicate endpoint with address 0xD, skipping [ 699.106374][ T5909] usb 1-1: config 23 interface 50 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 699.119575][ T5909] usb 1-1: config 23 interface 50 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 699.136869][ T5909] usb 1-1: config 23 interface 50 altsetting 2 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 699.150332][ T5909] usb 1-1: config 23 interface 50 altsetting 2 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 699.164410][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 699.175602][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 699.186871][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 699.197921][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 699.200410][ T5896] usb 2-1: Using ep0 maxpacket: 16 [ 699.212683][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 699.217994][ T5896] usb 2-1: config 0 has an invalid interface descriptor of length 8, skipping [ 699.236045][ T5896] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 699.238968][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 699.244996][ T5896] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 699.259019][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 699.267947][ T5896] usb 2-1: New USB device found, idVendor=5bac, idProduct=9a00, bcdDevice=b2.89 [ 699.281121][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 699.285631][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.295836][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 699.307166][ T5896] usb 2-1: Product: syz [ 699.315283][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 699.318982][ T5938] usb 7-1: new high-speed USB device number 115 using dummy_hcd [ 699.329953][ T5909] usb 1-1: config 23 interface 131 altsetting 7 endpoint 0x9 has an invalid bInterval 0, changing to 10 [ 699.346566][ T5896] usb 2-1: Manufacturer: syz [ 699.354216][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 699.357591][ T5896] usb 2-1: SerialNumber: syz [ 699.369662][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 699.383189][ T5909] usb 1-1: config 23 interface 131 altsetting 7 has a duplicate endpoint with address 0xC, skipping [ 699.384830][ T5896] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 699.394671][ T5909] usb 1-1: config 23 interface 211 has no altsetting 0 [ 699.394697][ T5909] usb 1-1: config 23 interface 87 has no altsetting 0 [ 699.394713][ T5909] usb 1-1: config 23 interface 80 has no altsetting 0 [ 699.394731][ T5909] usb 1-1: config 23 interface 50 has no altsetting 0 [ 699.394750][ T5909] usb 1-1: config 23 interface 131 has no altsetting 0 [ 699.397201][ T5909] usb 1-1: New USB device found, idVendor=19d2, idProduct=1253, bcdDevice=91.35 [ 699.409737][ T5938] usb 7-1: device descriptor read/8, error -71 [ 699.411785][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.428191][ T5896] usb 2-1: no configuration chosen from 1 choice [ 699.432255][ T5909] usb 1-1: Product: 쪻鬟౳륣僎层먚䢯勧烹饼睁녾胚秣麒袭鋳暖ⶸ幺Ꮂ겷ₓố锳∆聧魨େ綌㒩顿椒⹪捓歎友耶䥢◑鄢뜳觼謁揳㷥᫄吱쟤蜅쉅碧婛䱑값᎜ڶ埮៕ꑏ婌৐岑懚䁲኏朅꩷던읠 [ 699.500774][ T5909] usb 1-1: Manufacturer: 䱁疚넲哼摺듀䄮뼤⨓Ⳗ냗ꚤ鏎洟霊饯骛赫䅫桮ඥ蓟꛺֬樯艏곽哭쒅풙鳦ᕊᕔ췇岁㚮趵⫪⴩旧ꢤ錽럝⚮丸決볱릱앇ᦱ햛聶䑕湛鑑鱳ন㑲巳Υ⾜ἵ䏄౒煥史鸋 [ 699.525620][ T5909] usb 1-1: SerialNumber: п [ 699.650506][ T5938] usb 7-1: new high-speed USB device number 116 using dummy_hcd [ 699.671331][ T5938] usb 7-1: device descriptor read/8, error -71 [ 699.759866][ T5909] option 1-1:23.211: GSM modem (1-port) converter detected [ 699.780796][ T5938] usb usb7-port1: unable to enumerate USB device [ 699.801417][ T5909] usb 1-1: USB disconnect, device number 38 [ 699.811102][ T5909] option 1-1:23.211: device disconnected [ 700.209288][ T5909] usb 6-1: USB disconnect, device number 98 [ 700.570485][ T24] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 700.726305][T19488] binder: 19487:19488 ioctl 40046109 200000000100 returned -22 [ 700.737032][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 700.752173][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 700.764913][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 700.778496][T19488] /dev/rnullb0: Can't open blockdev [ 700.784235][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 700.827859][ T24] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 700.843394][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.861629][T19493] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 700.876617][ T24] usb 1-1: config 0 descriptor?? [ 700.906439][T19493] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3673'. [ 701.007815][T19495] /dev/rnullb0: Can't open blockdev [ 701.103815][ T24] hid_parser_main: 5 callbacks suppressed [ 701.103831][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.119069][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.127996][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.157964][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.167223][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.189228][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.212906][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.223111][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.233934][T19503] netlink: 'syz.0.3676': attribute type 10 has an invalid length. [ 701.242834][T19503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3676'. [ 701.252675][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.263992][T19503] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 701.272392][ T24] plantronics 0003:047F:FFFF.004A: unknown main item tag 0x0 [ 701.300356][T19503] batman_adv: batadv0: Removing interface: virt_wifi0 [ 701.309453][ T24] plantronics 0003:047F:FFFF.004A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 701.328109][T19503] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 701.354163][ T24] usb 1-1: USB disconnect, device number 39 [ 701.383045][T19509] fido_id[19509]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 701.750569][ T5939] usb 2-1: USB disconnect, device number 115 [ 702.016044][T19528] /dev/rnullb0: Can't open blockdev [ 702.023261][T19528] netlink: 'syz.5.3684': attribute type 21 has an invalid length. [ 702.036906][T19528] IPv6: NLM_F_CREATE should be specified when creating new route [ 702.048252][T19528] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 702.056656][T19528] IPv6: NLM_F_CREATE should be set when creating new route [ 702.064277][T19528] IPv6: NLM_F_CREATE should be set when creating new route [ 702.074164][T19528] IPv6: NLM_F_CREATE should be set when creating new route [ 702.128658][T19528] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3684'. [ 702.145624][T19528] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3684'. [ 702.159647][T19528] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3684'. [ 702.220561][ T51] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 702.230586][ T5939] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 702.334249][T19536] /dev/rnullb0: Can't open blockdev [ 702.397080][ T5939] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 702.412676][ T5939] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 702.423867][ T5939] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 702.441876][ T5939] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 702.452287][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 702.473528][ T5939] usb 1-1: Product: syz [ 702.478188][ T5939] usb 1-1: Manufacturer: syz [ 702.490261][ T5939] usb 1-1: SerialNumber: syz [ 702.540458][ T5896] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 702.701114][ T5896] usb 2-1: too many configurations: 227, using maximum allowed: 8 [ 702.712292][ T5939] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 702.743546][ T5896] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 702.757149][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.772232][ T5896] usb 2-1: config 0 descriptor?? [ 702.783201][ T5896] pwc: Samsung MPC-C10 USB webcam detected. [ 702.792403][ T5896] pwc: Warning: more than 1 configuration available. [ 702.924244][ T5909] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 703.001776][T19543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 703.030818][T19543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 703.091005][ T5909] usb 6-1: Using ep0 maxpacket: 8 [ 703.118154][ T5909] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 703.140315][ T24] usb 1-1: USB disconnect, device number 40 [ 703.152040][ T24] usblp0: removed [ 703.156368][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.177713][ T5909] usb 6-1: Product: syz [ 703.194549][ T5896] pwc: recv_control_msg error -71 req 02 val 2b00 [ 703.207591][ T5909] usb 6-1: Manufacturer: syz [ 703.217716][ T5896] pwc: recv_control_msg error -71 req 02 val 2700 [ 703.224415][ T5909] usb 6-1: SerialNumber: syz [ 703.233829][ T5909] usb 6-1: config 0 descriptor?? [ 703.242097][ T5896] pwc: recv_control_msg error -71 req 04 val 1700 [ 703.247041][T19547] /dev/rnullb0: Can't open blockdev [ 703.255879][ T5896] pwc: recv_control_msg error -71 req 02 val 2c00 [ 703.265046][ T5896] pwc: recv_control_msg error -71 req 04 val 1000 [ 703.274068][ T5896] pwc: recv_control_msg error -71 req 04 val 1300 [ 703.282262][ T5896] pwc: recv_control_msg error -71 req 04 val 1400 [ 703.289673][ T5896] pwc: recv_control_msg error -71 req 02 val 2000 [ 703.298818][ T5896] pwc: recv_control_msg error -71 req 02 val 2100 [ 703.308911][ T5896] pwc: recv_control_msg error -71 req 02 val 2200 [ 703.317885][ T5896] pwc: recv_control_msg error -71 req 06 val 0600 [ 703.327011][ T5896] pwc: recv_control_msg error -71 req 04 val 1500 [ 703.335232][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 703.343381][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 703.350953][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 703.360093][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 703.375076][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 703.379354][T19552] /dev/rnullb0: Can't open blockdev [ 703.384076][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 703.397008][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 703.416404][ T5896] pwc: Registered as video103. [ 703.433430][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input62 [ 703.463441][ T5909] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 703.481241][ T5896] usb 2-1: USB disconnect, device number 116 [ 703.646264][T19557] /dev/rnullb0: Can't open blockdev [ 703.990518][T15843] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 704.162431][T15843] usb 1-1: Using ep0 maxpacket: 32 [ 704.174609][T15843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 704.215578][T15843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 704.229347][T15843] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 704.242556][T15843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 704.257413][T15843] usb 1-1: config 0 descriptor?? [ 704.266728][T15843] hub 1-1:0.0: USB hub found [ 704.476659][T15843] hub 1-1:0.0: 1 port detected [ 704.892383][T19577] /dev/rnullb0: Can't open blockdev [ 705.105490][ T24] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 705.105791][ T5896] usb 1-1: USB disconnect, device number 41 [ 705.127775][ T5909] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 705.147037][ T5909] usb 6-1: USB disconnect, device number 99 [ 705.231088][T19590] fuseblk: Bad value for 'fd' [ 705.721428][T19610] /dev/rnullb0: Can't open blockdev [ 705.793763][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3712'. [ 706.062204][T19629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 706.072612][T19629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 706.115993][T19631] /dev/rnullb0: Can't open blockdev [ 706.310317][ T5909] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 706.354320][T19640] /dev/rnullb0: Can't open blockdev [ 706.591358][T19651] /dev/rnullb0: Can't open blockdev [ 706.777726][T19662] 9pnet: p9_errstr2errno: server reported unknown error pA;KZ [ 707.192732][T19682] /dev/rnullb0: Can't open blockdev [ 707.308668][T19687] /dev/rnullb0: Can't open blockdev [ 707.350383][ T5896] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 707.500375][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 707.509972][T19691] /dev/rnullb0: Can't open blockdev [ 707.516260][ T5896] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 707.527675][ T5896] usb 2-1: config 0 has no interface number 0 [ 707.535642][ T5896] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 707.553276][ T5896] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 707.565537][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.575484][ T5896] usb 2-1: Product: syz [ 707.582552][ T5938] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 707.592895][ T5896] usb 2-1: Manufacturer: syz [ 707.599291][ T5896] usb 2-1: SerialNumber: syz [ 707.616761][ T5896] usb 2-1: config 0 descriptor?? [ 707.629016][T19694] sctp: [Deprecated]: syz.6.3739 (pid 19694) Use of struct sctp_assoc_value in delayed_ack socket option. [ 707.629016][T19694] Use struct sctp_sack_info instead [ 707.649469][ C0] vkms_vblank_simulate: vblank timer overrun [ 707.662245][ T5896] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 707.676107][ T5896] em28xx 2-1:0.132: Video interface 132 found: [ 707.760363][ T5938] usb 6-1: Using ep0 maxpacket: 8 [ 707.768384][ T5938] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 707.777763][ T5938] usb 6-1: config 0 has no interface number 0 [ 707.785342][ T5938] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 707.796809][ T5938] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 707.809148][ T5938] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.842620][ T5938] usb 6-1: config 0 descriptor?? [ 707.898584][ T5938] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 708.034767][ T5896] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 708.106310][ T5938] usb 6-1: USB disconnect, device number 100 [ 708.440724][T19472] usb 7-1: new high-speed USB device number 117 using dummy_hcd [ 708.454601][T19678] /dev/rnullb0: Can't open blockdev [ 708.475360][ T5896] em28xx 2-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 708.497038][ T5896] em28xx 2-1:0.132: board has no eeprom [ 708.560916][ T5896] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 708.573451][ T5896] em28xx 2-1:0.132: analog set to bulk mode. [ 708.580072][ T5939] em28xx 2-1:0.132: Registering V4L2 extension [ 708.599026][ T5896] usb 2-1: USB disconnect, device number 117 [ 708.612163][T19472] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 708.631782][ T5896] em28xx 2-1:0.132: Disconnecting em28xx [ 708.655045][T19472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 708.707783][T19472] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 708.739644][T19472] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 708.770509][T19472] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 708.787485][T19472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.814965][T19472] usb 7-1: config 0 descriptor?? [ 708.854850][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3744'. [ 708.872608][T19709] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 708.886758][T19709] /dev/rnullb0: Can't open blockdev [ 708.959105][ T5939] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 708.973676][ T5939] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 709.000241][ T5939] em28xx 2-1:0.132: No AC97 audio processor [ 709.018167][T19716] /dev/rnullb0: Can't open blockdev [ 709.033326][ T5939] usb 2-1: Decoder not found [ 709.046194][ T5939] em28xx 2-1:0.132: failed to create media graph [ 709.060501][ T5939] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 709.112187][ T5939] em28xx 2-1:0.132: Remote control support is not available for this card. [ 709.122506][ T5896] em28xx 2-1:0.132: Closing input extension [ 709.150535][ T5896] em28xx 2-1:0.132: Freeing device [ 709.244241][T19472] hid_parser_main: 5 callbacks suppressed [ 709.244272][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.319244][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.339823][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.360351][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.370312][T15843] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 709.380230][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.400212][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.408195][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.420206][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.428179][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.438348][T19472] plantronics 0003:047F:FFFF.004B: unknown main item tag 0x0 [ 709.442163][T19704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.471439][T19472] plantronics 0003:047F:FFFF.004B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 709.480750][T19704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.520624][T15843] usb 6-1: device descriptor read/64, error -71 [ 709.543339][T19704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 709.682219][T19704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 709.708261][T19472] usb 7-1: USB disconnect, device number 117 [ 709.810408][T15843] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 709.821587][T19725] 9p filesystem being mounted at /321/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 709.950384][T15843] usb 6-1: device descriptor read/64, error -71 [ 710.105520][T15843] usb usb6-port1: attempt power cycle [ 710.458706][T19741] /dev/rnullb0: Can't open blockdev [ 710.462157][T15843] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 710.474760][T19741] ALSA: mixer_oss: invalid index 100000 [ 710.503297][T15843] usb 6-1: device descriptor read/8, error -71 [ 710.740513][T19472] usb 7-1: new full-speed USB device number 118 using dummy_hcd [ 710.760552][T15843] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 710.801620][T15843] usb 6-1: device descriptor read/8, error -71 [ 710.890460][T19472] usb 7-1: device descriptor read/64, error -71 [ 710.920684][T15843] usb usb6-port1: unable to enumerate USB device [ 711.046536][T13944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 711.058576][T13944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 711.076048][T13944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 711.085727][T13944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 711.101861][T13944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 711.135721][T19759] /dev/rnullb0: Can't open blockdev [ 711.150800][T19472] usb 7-1: new full-speed USB device number 119 using dummy_hcd [ 711.178768][T19755] wg1 speed is unknown, defaulting to 1000 [ 711.191800][T19761] /dev/rnullb0: Can't open blockdev [ 711.194227][T19755] lo speed is unknown, defaulting to 1000 [ 711.300338][T19472] usb 7-1: device descriptor read/64, error -71 [ 711.367490][T19765] /dev/rnullb0: Can't open blockdev [ 711.422840][T19472] usb usb7-port1: attempt power cycle [ 711.507807][T19768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.540631][T19768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.735017][T19755] chnl_net:caif_netlink_parms(): no params data found [ 711.770447][T19472] usb 7-1: new full-speed USB device number 120 using dummy_hcd [ 711.801154][T19472] usb 7-1: device descriptor read/8, error -71 [ 711.889700][T19755] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.900435][T19755] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.908587][T19755] bridge_slave_0: entered allmulticast mode [ 711.919517][T19755] bridge_slave_0: entered promiscuous mode [ 711.930251][T19755] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.938426][T19755] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.946886][T19755] bridge_slave_1: entered allmulticast mode [ 711.955897][T19755] bridge_slave_1: entered promiscuous mode [ 712.009899][T19755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.035551][T19755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 712.051686][T19472] usb 7-1: new full-speed USB device number 121 using dummy_hcd [ 712.096154][T19472] usb 7-1: device descriptor read/8, error -71 [ 712.113581][T19755] team0: Port device team_slave_0 added [ 712.134969][T19755] team0: Port device team_slave_1 added [ 712.188311][T19755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 712.195758][T19755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.225162][T19755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 712.240683][T19472] usb usb7-port1: unable to enumerate USB device [ 712.252277][T19755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.263452][T19755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.295898][T19755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 712.397911][T19755] hsr_slave_0: entered promiscuous mode [ 712.431600][T19755] hsr_slave_1: entered promiscuous mode [ 712.438846][T19755] debugfs: 'hsr0' already exists in 'hsr' [ 712.447926][T19755] Cannot create hsr debugfs directory [ 712.964064][T19798] /dev/rnullb0: Can't open blockdev [ 713.055660][T19755] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 713.086789][T19755] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 713.124794][T19755] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 713.143727][T19755] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 713.185604][T19800] /dev/rnullb0: Can't open blockdev [ 713.200247][ T51] Bluetooth: hci0: command tx timeout [ 713.380825][T19755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.415239][T19755] 8021q: adding VLAN 0 to HW filter on device team0 [ 713.462292][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.469837][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.505718][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.512938][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.604549][T19812] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3778'. [ 713.940779][ T5939] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 713.961606][T19755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.023238][T19824] FAULT_INJECTION: forcing a failure. [ 714.023238][T19824] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 714.040468][T19824] CPU: 1 UID: 0 PID: 19824 Comm: syz.5.3781 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 714.040499][T19824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 714.040513][T19824] Call Trace: [ 714.040522][T19824] [ 714.040531][T19824] dump_stack_lvl+0x189/0x250 [ 714.040575][T19824] ? __pfx____ratelimit+0x10/0x10 [ 714.040597][T19824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.040630][T19824] ? __pfx__printk+0x10/0x10 [ 714.040656][T19824] ? __might_fault+0xb0/0x130 [ 714.040698][T19824] should_fail_ex+0x414/0x560 [ 714.040731][T19824] _copy_from_user+0x2d/0xb0 [ 714.040760][T19824] __sys_sendto+0x25c/0x520 [ 714.040789][T19824] ? __pfx___sys_sendto+0x10/0x10 [ 714.040810][T19824] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 714.040847][T19824] ? __fget_files+0x3a0/0x420 [ 714.040878][T19824] ? ksys_write+0x22a/0x250 [ 714.040898][T19824] ? __pfx_ksys_write+0x10/0x10 [ 714.040914][T19824] ? rcu_is_watching+0x15/0xb0 [ 714.040944][T19824] __x64_sys_sendto+0xde/0x100 [ 714.040973][T19824] do_syscall_64+0xfa/0x3b0 [ 714.040995][T19824] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.041016][T19824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.041035][T19824] ? clear_bhb_loop+0x60/0xb0 [ 714.041060][T19824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.041080][T19824] RIP: 0033:0x7f0aa198e929 [ 714.041098][T19824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.041117][T19824] RSP: 002b:00007f0aa28bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 714.041140][T19824] RAX: ffffffffffffffda RBX: 00007f0aa1bb5fa0 RCX: 00007f0aa198e929 [ 714.041155][T19824] RDX: 0000000000000037 RSI: 0000200000009f00 RDI: 0000000000000004 [ 714.041168][T19824] RBP: 00007f0aa28bd090 R08: 0000200000000140 R09: 0000000000000014 [ 714.041182][T19824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.041195][T19824] R13: 0000000000000000 R14: 00007f0aa1bb5fa0 R15: 00007ffc9bdb4708 [ 714.041226][T19824] [ 714.280428][ T5939] usb 2-1: Using ep0 maxpacket: 32 [ 714.288931][ T5939] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 714.298078][ T5939] usb 2-1: config 0 has no interface number 0 [ 714.308285][ T5939] usb 2-1: config 0 interface 132 has no altsetting 0 [ 714.334112][ T5939] usb 2-1: New USB device found, idVendor=0525, idProduct=9901, bcdDevice=39.75 [ 714.350940][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.378003][ T5939] usb 2-1: Product: syz [ 714.407248][ T5939] usb 2-1: Manufacturer: syz [ 714.442209][ T5939] usb 2-1: SerialNumber: syz [ 714.466576][ T5939] usb 2-1: config 0 descriptor?? [ 714.594741][T19755] veth0_vlan: entered promiscuous mode [ 714.628789][T19755] veth1_vlan: entered promiscuous mode [ 714.709449][ T5939] cdc_subset 2-1:0.132 usb0: register 'cdc_subset' at usb-dummy_hcd.1-1, Belkin, eTEK, or compatible, 9e:b5:5a:f1:68:40 [ 714.735920][T19755] veth0_macvtap: entered promiscuous mode [ 714.764150][T19755] veth1_macvtap: entered promiscuous mode [ 714.846390][T19755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 714.890957][ T24] usb 2-1: USB disconnect, device number 119 [ 714.902943][T19755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.909781][ T24] cdc_subset 2-1:0.132 usb0: unregister 'cdc_subset' usb-dummy_hcd.1-1, Belkin, eTEK, or compatible [ 714.938036][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.064554][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.094021][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.133066][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 715.281146][ T51] Bluetooth: hci0: command tx timeout [ 715.355677][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.364305][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.505951][ T3031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.529060][ T3031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.971834][ T43] usb 2-1: new full-speed USB device number 120 using dummy_hcd [ 716.135365][ T43] usb 2-1: device descriptor read/64, error -71 [ 716.380418][ T43] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 716.531007][ T43] usb 2-1: device descriptor read/64, error -71 [ 716.549465][T19867] /dev/rnullb0: Can't open blockdev [ 716.651760][ T43] usb usb2-port1: attempt power cycle [ 716.702549][T15843] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 716.745339][T19872] FAULT_INJECTION: forcing a failure. [ 716.745339][T19872] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 716.793704][T19872] CPU: 0 UID: 0 PID: 19872 Comm: syz.6.3789 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 716.793736][T19872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 716.793748][T19872] Call Trace: [ 716.793756][T19872] [ 716.793765][T19872] dump_stack_lvl+0x189/0x250 [ 716.793799][T19872] ? __pfx____ratelimit+0x10/0x10 [ 716.793821][T19872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 716.793849][T19872] ? __pfx__printk+0x10/0x10 [ 716.793876][T19872] ? __might_fault+0xb0/0x130 [ 716.793917][T19872] should_fail_ex+0x414/0x560 [ 716.793951][T19872] _copy_from_iter+0x1db/0x16f0 [ 716.793990][T19872] ? __pfx__copy_from_iter+0x10/0x10 [ 716.794020][T19872] ? dev_get_by_index+0x22/0x2e0 [ 716.794039][T19872] ? dev_get_by_index+0x22/0x2e0 [ 716.794110][T19872] packet_sendmsg+0x3359/0x5410 [ 716.794139][T19872] ? aa_label_sk_perm+0x4d3/0x630 [ 716.794174][T19872] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 716.794220][T19872] ? __pfx___might_resched+0x10/0x10 [ 716.794245][T19872] ? __lock_acquire+0xab9/0xd20 [ 716.794282][T19872] ? __pfx_packet_sendmsg+0x10/0x10 [ 716.794306][T19872] ? aa_sk_perm+0x81e/0x950 [ 716.794333][T19872] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 716.794365][T19872] ? aa_sock_msg_perm+0xf1/0x1d0 [ 716.794390][T19872] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 716.794409][T19872] ? __pfx_packet_sendmsg+0x10/0x10 [ 716.794433][T19872] __sock_sendmsg+0x219/0x270 [ 716.794454][T19872] __sys_sendto+0x3bd/0x520 [ 716.794478][T19872] ? __pfx___sys_sendto+0x10/0x10 [ 716.794497][T19872] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 716.794530][T19872] ? __fget_files+0x3a0/0x420 [ 716.794560][T19872] ? ksys_write+0x22a/0x250 [ 716.794581][T19872] ? __pfx_ksys_write+0x10/0x10 [ 716.794596][T19872] ? rcu_is_watching+0x15/0xb0 [ 716.794627][T19872] __x64_sys_sendto+0xde/0x100 [ 716.794653][T19872] do_syscall_64+0xfa/0x3b0 [ 716.794673][T19872] ? lockdep_hardirqs_on+0x9c/0x150 [ 716.794693][T19872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.794712][T19872] ? clear_bhb_loop+0x60/0xb0 [ 716.794735][T19872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.794754][T19872] RIP: 0033:0x7fc246b8e929 [ 716.794771][T19872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 716.794789][T19872] RSP: 002b:00007fc247a33038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 716.794811][T19872] RAX: ffffffffffffffda RBX: 00007fc246db5fa0 RCX: 00007fc246b8e929 [ 716.794825][T19872] RDX: 0000000000000037 RSI: 0000200000009f00 RDI: 0000000000000004 [ 716.794839][T19872] RBP: 00007fc247a33090 R08: 0000200000000140 R09: 0000000000000014 [ 716.794853][T19872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 716.794865][T19872] R13: 0000000000000000 R14: 00007fc246db5fa0 R15: 00007ffdc636bd08 [ 716.794896][T19872] [ 717.212644][T15843] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 717.224199][ T43] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 717.287092][T15843] usb 6-1: config 0 has no interface number 0 [ 717.301515][ T43] usb 2-1: device descriptor read/8, error -71 [ 717.332700][T15843] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 717.347679][T15843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.365654][ T51] Bluetooth: hci0: command tx timeout [ 717.399072][T15843] usb 6-1: config 0 descriptor?? [ 717.437237][T15843] cp210x 6-1:0.1: cp210x converter detected [ 717.444187][ T5846] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 717.550332][ T43] usb 2-1: new full-speed USB device number 123 using dummy_hcd [ 717.572565][ T43] usb 2-1: device descriptor read/8, error -71 [ 717.615417][ T5846] usb 8-1: Using ep0 maxpacket: 32 [ 717.630679][ T5846] usb 8-1: unable to get BOS descriptor or descriptor too short [ 717.642611][ T5846] usb 8-1: too many configurations: 87, using maximum allowed: 8 [ 717.670214][ T5846] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 717.679446][ T5846] usb 8-1: can't read configurations, error -61 [ 717.700275][ T43] usb usb2-port1: unable to enumerate USB device [ 717.829565][T15843] cp210x 6-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 717.853727][ T5846] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 717.996439][T19905] kvm: pic: single mode not supported [ 717.998351][T19905] kvm: pic: single mode not supported [ 718.031560][ T5846] usb 8-1: Using ep0 maxpacket: 32 [ 718.058812][T15843] usb 6-1: cp210x converter now attached to ttyUSB0 [ 718.077856][ T5846] usb 8-1: unable to get BOS descriptor or descriptor too short [ 718.087600][ T5846] usb 8-1: too many configurations: 87, using maximum allowed: 8 [ 718.100966][ T5846] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 718.120603][ T5846] usb 8-1: can't read configurations, error -61 [ 718.142404][ T5846] usb usb8-port1: attempt power cycle [ 718.362558][T19915] /dev/rnullb0: Can't open blockdev [ 718.378201][T15843] usb 6-1: USB disconnect, device number 105 [ 718.399043][T15843] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 718.485701][T15843] cp210x 6-1:0.1: device disconnected [ 718.510413][ T5846] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 718.540591][ T5846] usb 8-1: Using ep0 maxpacket: 32 [ 718.556422][ T5846] usb 8-1: unable to get BOS descriptor or descriptor too short [ 718.567439][ T5846] usb 8-1: too many configurations: 87, using maximum allowed: 8 [ 718.583184][ T5846] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 718.593346][ T5846] usb 8-1: can't read configurations, error -61 [ 718.730318][ T5846] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 718.771995][ T5846] usb 8-1: Using ep0 maxpacket: 32 [ 718.782498][ T5846] usb 8-1: unable to get BOS descriptor or descriptor too short [ 718.801449][ T5846] usb 8-1: too many configurations: 87, using maximum allowed: 8 [ 718.823633][ T5846] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 718.832772][ T5846] usb 8-1: can't read configurations, error -61 [ 718.852541][ T5846] usb usb8-port1: unable to enumerate USB device [ 719.109752][T19925] /dev/rnullb0: Can't open blockdev [ 719.180300][ T5940] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 719.359761][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 719.393732][ T5940] usb 2-1: config 0 interface 0 has no altsetting 0 [ 719.424058][ T5940] usb 2-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 719.434449][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.443974][ T5940] usb 2-1: Product: syz [ 719.450149][ T5940] usb 2-1: Manufacturer: syz [ 719.450226][ T51] Bluetooth: hci0: command tx timeout [ 719.455342][ T5940] usb 2-1: SerialNumber: syz [ 719.482999][ T5940] usb 2-1: config 0 descriptor?? [ 719.525686][ T5940] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 719.545211][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 719.580575][ T5940] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 719.638863][ T5940] usb 2-1: media controller created [ 719.689874][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 719.798461][ T5940] DVB: Unable to find symbol tda10046_attach() [ 719.805379][ T5940] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 719.828646][ T5940] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 720.120400][ T5846] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 720.260658][ T5846] usb 6-1: device descriptor read/64, error -71 [ 720.530428][ T5846] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 720.628688][ T5940] dvb_usb_m920x 2-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 720.679514][ T5939] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 720.680346][ T5846] usb 6-1: device descriptor read/64, error -71 [ 720.716768][ T5940] usb 2-1: USB disconnect, device number 124 [ 720.830825][ T5846] usb usb6-port1: attempt power cycle [ 720.884033][ T5939] usb 8-1: Using ep0 maxpacket: 16 [ 720.896509][ T5939] usb 8-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 720.908565][ T5939] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.919904][ T5939] usb 8-1: Product: syz [ 720.925301][ T5939] usb 8-1: Manufacturer: syz [ 720.931106][ T5939] usb 8-1: SerialNumber: syz [ 720.944870][ T5939] usb 8-1: config 0 descriptor?? [ 721.126771][T15843] usb 7-1: new full-speed USB device number 122 using dummy_hcd [ 721.190347][ T5846] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 721.221511][ T5846] usb 6-1: device descriptor read/8, error -71 [ 721.260282][T15843] usb 7-1: device descriptor read/64, error -71 [ 721.470349][ T5846] usb 6-1: new high-speed USB device number 109 using dummy_hcd [ 721.491035][ T5939] dvb_usb_dtv5100 8-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 721.512869][T15843] usb 7-1: new full-speed USB device number 123 using dummy_hcd [ 721.529618][ T5846] usb 6-1: device descriptor read/8, error -71 [ 721.661921][ T5846] usb usb6-port1: unable to enumerate USB device [ 721.692662][T15843] usb 7-1: device descriptor read/64, error -71 [ 721.824395][T15843] usb usb7-port1: attempt power cycle [ 722.170336][T15843] usb 7-1: new full-speed USB device number 124 using dummy_hcd [ 722.214426][T15843] usb 7-1: device descriptor read/8, error -71 [ 722.470561][T15843] usb 7-1: new full-speed USB device number 125 using dummy_hcd [ 722.526260][T15843] usb 7-1: device descriptor read/8, error -71 [ 722.662985][T15843] usb usb7-port1: unable to enumerate USB device [ 723.393143][T15843] usb 8-1: USB disconnect, device number 6 [ 723.432328][T19472] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 723.562404][T19973] /dev/rnullb0: Can't open blockdev [ 723.625896][T19472] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 723.644036][T19472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.668437][T19472] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 723.682874][T19472] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 723.716537][T19472] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 723.727831][T19472] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.743487][T19472] usb 2-1: config 0 descriptor?? [ 723.770660][ T5939] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 723.930671][ T5939] usb 6-1: Using ep0 maxpacket: 32 [ 723.943317][ T5939] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 723.957075][ T5939] usb 6-1: config 0 has no interface number 0 [ 723.971321][ T5939] usb 6-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 723.991655][ T5939] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 724.003496][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.039366][ T5939] usb 6-1: Product: syz [ 724.044707][ T5939] usb 6-1: Manufacturer: syz [ 724.050311][ T5939] usb 6-1: SerialNumber: syz [ 724.081564][ T5939] usb 6-1: config 0 descriptor?? [ 724.102301][ T5939] em28xx 6-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 724.118611][ T5939] em28xx 6-1:0.132: Video interface 132 found: [ 724.175520][T19472] hid_parser_main: 5 callbacks suppressed [ 724.175546][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.211335][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.222179][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.230092][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.242238][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.254071][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.296486][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.332920][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.351719][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.380707][T19967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 724.390846][T19967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.415308][T19472] plantronics 0003:047F:FFFF.004C: unknown main item tag 0x0 [ 724.474524][T19472] plantronics 0003:047F:FFFF.004C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 724.507622][ T5939] em28xx 6-1:0.132: unknown em28xx chip ID (0) [ 724.539237][T19995] fuse: Bad value for 'fd' [ 724.550347][T19472] usb 2-1: USB disconnect, device number 125 [ 724.618870][T19996] fido_id[19996]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 724.759770][ T5939] em28xx 6-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 724.777007][ T5939] em28xx 6-1:0.132: board has no eeprom [ 724.850320][ T5939] em28xx 6-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 724.861232][ T5939] em28xx 6-1:0.132: analog set to bulk mode. [ 724.868828][ T5938] em28xx 6-1:0.132: Registering V4L2 extension [ 724.897542][ T5939] usb 6-1: USB disconnect, device number 110 [ 724.927674][ T5939] em28xx 6-1:0.132: Disconnecting em28xx [ 724.982787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 725.020853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 725.148894][ T5938] em28xx 6-1:0.132: Config register raw data: 0xffffffed [ 725.184585][T20003] /dev/rnullb0: Can't open blockdev [ 725.193260][ T5938] em28xx 6-1:0.132: AC97 chip type couldn't be determined [ 725.212707][ T5938] em28xx 6-1:0.132: No AC97 audio processor [ 725.252221][ T5938] usb 6-1: Decoder not found [ 725.257077][ T5938] em28xx 6-1:0.132: failed to create media graph [ 725.265267][ T5938] em28xx 6-1:0.132: V4L2 device video103 deregistered [ 725.294940][T20007] /dev/rnullb0: Can't open blockdev [ 725.301578][T20004] wg1 speed is unknown, defaulting to 1000 [ 725.313989][T20008] netlink: 'syz.1.3823': attribute type 10 has an invalid length. [ 725.327020][ T5938] em28xx 6-1:0.132: Remote control support is not available for this card. [ 725.340064][ T5939] em28xx 6-1:0.132: Closing input extension [ 725.362512][T20004] lo speed is unknown, defaulting to 1000 [ 725.383648][ T5939] em28xx 6-1:0.132: Freeing device [ 725.390399][T20008] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3823'. [ 725.720235][ T5938] usb 7-1: new full-speed USB device number 126 using dummy_hcd [ 725.890213][ T5938] usb 7-1: device descriptor read/64, error -71 [ 726.132654][T20031] /dev/rnullb0: Can't open blockdev [ 726.174646][ T5938] usb 7-1: new full-speed USB device number 127 using dummy_hcd [ 726.329019][T20035] /dev/rnullb0: Can't open blockdev [ 726.340546][ T5938] usb 7-1: device descriptor read/64, error -71 [ 726.461035][ T5938] usb usb7-port1: attempt power cycle [ 726.680380][T19472] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 726.800853][ T5938] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 726.820354][T19472] usb 2-1: device descriptor read/64, error -71 [ 726.837758][ T5938] usb 7-1: device descriptor read/8, error -71 [ 727.020567][ T5939] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 727.061056][T19472] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 727.080405][ T5938] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 727.114098][ T5938] usb 7-1: device descriptor read/8, error -71 [ 727.186532][ T5939] usb 6-1: config 241 has an invalid interface number: 0 but max is -1 [ 727.197521][ T5939] usb 6-1: config 241 has 1 interface, different from the descriptor's value: 0 [ 727.208579][T19472] usb 2-1: device descriptor read/64, error -71 [ 727.215912][ T5939] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=db.e9 [ 727.226857][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.238131][ T5938] usb usb7-port1: unable to enumerate USB device [ 727.252162][ T5939] pcwd_usb: The device isn't a Human Interface Device [ 727.332651][T19472] usb usb2-port1: attempt power cycle [ 727.526825][T20045] netlink: 536 bytes leftover after parsing attributes in process `syz.5.3835'. [ 727.540667][T20045] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3835'. [ 727.686165][T19472] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 727.718781][T19472] usb 2-1: device descriptor read/8, error -71 [ 727.970716][T19472] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 728.012236][T19472] usb 2-1: device descriptor read/8, error -71 [ 728.131812][T19472] usb usb2-port1: unable to enumerate USB device [ 728.514144][T20075] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3844'. [ 728.695930][T20072] /dev/rnullb0: Can't open blockdev [ 729.503401][T20086] binder: 20085:20086 ioctl c0306201 2000000003c0 returned -14 [ 729.535191][T20086] /dev/rnullb0: Can't open blockdev [ 729.640715][T19472] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 729.773783][ T5938] usb 6-1: USB disconnect, device number 111 [ 729.780424][T19472] usb 8-1: device descriptor read/64, error -71 [ 730.020725][T19472] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 730.150040][T20102] /dev/rnullb0: Can't open blockdev [ 730.170295][T19472] usb 8-1: device descriptor read/64, error -71 [ 730.291034][T19472] usb usb8-port1: attempt power cycle [ 730.311278][ T5938] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 730.450412][ T5938] usb 2-1: device descriptor read/64, error -71 [ 730.486692][T20107] /dev/rnullb0: Can't open blockdev [ 730.530465][T15843] usb 6-1: new low-speed USB device number 112 using dummy_hcd [ 730.546276][T20109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3857'. [ 730.558334][T20109] netlink: 64 bytes leftover after parsing attributes in process `syz.6.3857'. [ 730.568242][T20109] tipc: Invalid UDP bearer configuration [ 730.568299][T20109] tipc: Enabling of bearer rejected, failed to enable media [ 730.630433][T19472] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 730.666065][T19472] usb 8-1: device descriptor read/8, error -71 [ 730.691522][T15843] usb 6-1: config index 0 descriptor too short (expected 6427, got 27) [ 730.699919][T15843] usb 6-1: config 0 has an invalid interface number: 21 but max is 0 [ 730.700639][ T5938] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 730.720285][T15843] usb 6-1: config 0 has no interface number 0 [ 730.726938][T15843] usb 6-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 730.750292][T15843] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 730.759920][T15843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.777054][T15843] usb 6-1: config 0 descriptor?? [ 730.854555][ T5938] usb 2-1: device descriptor read/64, error -71 [ 730.910390][T19472] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 730.931493][T19472] usb 8-1: device descriptor read/8, error -71 [ 730.970964][ T5938] usb usb2-port1: attempt power cycle [ 730.994054][ T5896] usb 6-1: USB disconnect, device number 112 [ 731.043056][T19472] usb usb8-port1: unable to enumerate USB device [ 731.299901][T20123] /dev/rnullb0: Can't open blockdev [ 731.322887][ T5938] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 731.338861][T20123] /dev/rnullb0: Can't open blockdev [ 731.356457][ T5938] usb 2-1: device descriptor read/8, error -71 [ 731.433875][T20130] tmpfs: Unknown parameter 'inoe32' [ 731.441694][T20130] syz.6.3863: attempt to access beyond end of device [ 731.441694][T20130] nbd6: rw=0, sector=2, nr_sectors = 1 limit=0 [ 731.600490][ T5938] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 731.643338][ T5938] usb 2-1: device descriptor read/8, error -71 [ 731.770645][ T5938] usb usb2-port1: unable to enumerate USB device [ 732.070010][T20147] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.608371][T20165] fuse: Bad value for 'fd' [ 732.688850][T20165] /dev/rnullb0: Can't open blockdev [ 732.910524][ T5938] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 733.060308][ T5938] usb 7-1: device descriptor read/64, error -71 [ 733.170286][T20169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3874'. [ 733.310519][ T5938] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 733.450284][ T5938] usb 7-1: device descriptor read/64, error -71 [ 733.495700][ T30] audit: type=1326 audit(6000001099.576:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20173 comm="syz.7.3876" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3416b8e929 code=0x0 [ 733.563405][ T5938] usb usb7-port1: attempt power cycle [ 733.690258][ T5896] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 733.866607][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.880509][ T5896] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 733.895980][ T5896] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 733.905651][ T5938] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 733.920360][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.929431][ T5896] usb 6-1: Product: syz [ 733.934440][ T5896] usb 6-1: Manufacturer: syz [ 733.939559][ T5896] usb 6-1: SerialNumber: syz [ 733.950376][ T5896] usb 6-1: config 0 descriptor?? [ 733.956672][ T5938] usb 7-1: device descriptor read/8, error -71 [ 734.200471][ T5938] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 734.231480][ T5938] usb 7-1: device descriptor read/8, error -71 [ 734.360581][ T5938] usb usb7-port1: unable to enumerate USB device [ 734.732523][T19472] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 734.870555][T19472] usb 2-1: device descriptor read/64, error -71 [ 735.111476][T19472] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 735.191355][T20199] /dev/rnullb0: Can't open blockdev [ 735.198256][T20200] /dev/rnullb0: Can't open blockdev [ 735.250470][T19472] usb 2-1: device descriptor read/64, error -71 [ 735.371368][T19472] usb usb2-port1: attempt power cycle [ 735.721003][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 735.722550][T19472] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 735.783467][T19472] usb 2-1: device descriptor read/8, error -71 [ 735.888818][ T24] usb 8-1: config 0 has an invalid interface number: 3 but max is 0 [ 735.901452][ T24] usb 8-1: config 0 has no interface number 0 [ 735.908232][ T24] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 735.925760][ T24] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 735.938078][ T24] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 735.950220][ T24] usb 8-1: config 0 interface 3 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 735.961625][ T24] usb 8-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 735.971962][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.988115][ T24] usb 8-1: config 0 descriptor?? [ 736.006588][ T24] hub 8-1:0.3: bad descriptor, ignoring hub [ 736.014291][T20216] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3891'. [ 736.022857][ T24] hub 8-1:0.3: probe with driver hub failed with error -5 [ 736.039337][ T24] sierra 8-1:0.3: Sierra USB modem converter detected [ 736.050404][T19472] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 736.096052][T19472] usb 2-1: device descriptor read/8, error -71 [ 736.206268][T20211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.216826][T20211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 736.226475][T19472] usb usb2-port1: unable to enumerate USB device [ 736.250912][ T24] usb 8-1: Sierra USB modem converter now attached to ttyUSB0 [ 736.291307][ T24] usb 8-1: Sierra USB modem converter now attached to ttyUSB1 [ 736.333431][ T24] usb 8-1: USB disconnect, device number 11 [ 736.370753][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 736.405134][ T24] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 736.431960][ T24] sierra 8-1:0.3: device disconnected [ 736.440650][T19472] usb 6-1: USB disconnect, device number 113 [ 736.970481][T19472] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 737.100341][T19472] usb 7-1: device descriptor read/64, error -71 [ 737.140578][ T5938] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 737.149403][ T5939] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 737.310443][ T5938] usb 6-1: Using ep0 maxpacket: 16 [ 737.318758][ T5939] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 737.332560][ T5938] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 737.341568][ T5939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 737.352777][T19472] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 737.361270][ T5938] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 737.373353][ T5939] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 737.384937][ T5938] usb 6-1: config 0 has no interface number 0 [ 737.391978][ T5939] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 737.406170][ T5939] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 737.416191][ T5939] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.426617][ T5938] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 737.438762][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.447840][ T5939] usb 8-1: config 0 descriptor?? [ 737.453191][ T5938] usb 6-1: Product: syz [ 737.462775][ T5938] usb 6-1: Manufacturer: syz [ 737.467928][ T5938] usb 6-1: SerialNumber: syz [ 737.475706][ T5938] usb 6-1: config 0 descriptor?? [ 737.497403][ T5938] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 737.505483][ T5938] usb 6-1: No valid video chain found. [ 737.520774][T19472] usb 7-1: device descriptor read/64, error -71 [ 737.632687][T19472] usb usb7-port1: attempt power cycle [ 737.665532][T20233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 737.692641][T20233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.726428][T20240] ./cgroup: Can't lookup blockdev [ 737.852958][T20245] /dev/rnullb0: Can't open blockdev [ 737.917430][ T5846] usb 6-1: USB disconnect, device number 114 [ 737.985724][T19472] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 738.021078][T19472] usb 7-1: device descriptor read/8, error -71 [ 738.096937][ T5939] hid_parser_main: 5 callbacks suppressed [ 738.096963][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.122757][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.130723][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.130855][T20251] /dev/rnullb0: Can't open blockdev [ 738.138389][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.152661][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.163387][T20251] /dev/rnullb0: Can't open blockdev [ 738.169512][T20251] /dev/rnullb0: Can't open blockdev [ 738.175444][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.185852][T20251] /dev/rnullb0: Can't open blockdev [ 738.194768][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.206384][T20251] /dev/rnullb0: Can't open blockdev [ 738.213884][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.223852][T20251] /dev/rnullb0: Can't open blockdev [ 738.229836][T20251] /dev/rnullb0: Can't open blockdev [ 738.237059][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.246614][ T5939] plantronics 0003:047F:FFFF.004D: unknown main item tag 0x0 [ 738.256809][T20251] /dev/rnullb0: Can't open blockdev [ 738.275984][T20251] /dev/rnullb0: Can't open blockdev [ 738.282361][ T5939] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 738.301440][T20251] /dev/rnullb0: Can't open blockdev [ 738.329020][T20251] /dev/rnullb0: Can't open blockdev [ 738.339901][T20251] /dev/rnullb0: Can't open blockdev [ 738.347597][T20251] /dev/rnullb0: Can't open blockdev [ 738.358382][T20251] /dev/rnullb0: Can't open blockdev [ 738.364275][T19472] usb 7-1: new full-speed USB device number 11 using dummy_hcd [ 738.377883][T20251] /dev/rnullb0: Can't open blockdev [ 738.386977][T20251] /dev/rnullb0: Can't open blockdev [ 738.396395][T19472] usb 7-1: device descriptor read/8, error -71 [ 738.405959][T20251] /dev/rnullb0: Can't open blockdev [ 738.417728][T20251] /dev/rnullb0: Can't open blockdev [ 738.426127][T20251] /dev/rnullb0: Can't open blockdev [ 738.437797][T20251] /dev/rnullb0: Can't open blockdev [ 738.446920][T20251] /dev/rnullb0: Can't open blockdev [ 738.485492][T20251] /dev/rnullb0: Can't open blockdev [ 738.501585][T20251] /dev/rnullb0: Can't open blockdev [ 738.507601][T20251] /dev/rnullb0: Can't open blockdev [ 738.518218][T19472] usb usb7-port1: unable to enumerate USB device [ 738.546713][T20251] /dev/rnullb0: Can't open blockdev [ 738.573555][T20251] /dev/rnullb0: Can't open blockdev [ 738.585133][T20251] /dev/rnullb0: Can't open blockdev [ 738.593831][T20251] /dev/rnullb0: Can't open blockdev [ 738.608915][T20251] /dev/rnullb0: Can't open blockdev [ 738.618870][T20251] /dev/rnullb0: Can't open blockdev [ 738.633562][T20251] /dev/rnullb0: Can't open blockdev [ 738.645314][T20251] /dev/rnullb0: Can't open blockdev [ 738.661535][T20251] /dev/rnullb0: Can't open blockdev [ 738.686024][T20255] wg1 speed is unknown, defaulting to 1000 [ 738.697170][T20255] lo speed is unknown, defaulting to 1000 [ 739.537703][T20260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 739.780467][T19472] usb 8-1: reset high-speed USB device number 12 using dummy_hcd [ 740.089447][T20270] /dev/rnullb0: Can't open blockdev [ 740.193801][T20274] /dev/rnullb0: Can't open blockdev [ 740.214773][T20276] /dev/rnullb0: Can't open blockdev [ 740.337488][T20284] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3913'. [ 740.353009][ T5846] usb 6-1: new full-speed USB device number 115 using dummy_hcd [ 740.521034][ T5846] usb 6-1: no configurations [ 740.525735][ T5846] usb 6-1: can't read configurations, error -22 [ 740.543351][T15843] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 740.660355][ T5846] usb 6-1: new full-speed USB device number 116 using dummy_hcd [ 740.690314][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 740.700536][T15843] usb 2-1: Using ep0 maxpacket: 16 [ 740.710493][T15843] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 740.728047][T15843] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 740.737916][T15843] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.749643][T15843] usb 2-1: config 0 descriptor?? [ 740.821756][ T5846] usb 6-1: no configurations [ 740.826468][ T5846] usb 6-1: can't read configurations, error -22 [ 740.833833][ T5846] usb usb6-port1: attempt power cycle [ 740.842498][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.853548][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 740.865211][ T24] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 740.872639][ T5939] usb 8-1: USB disconnect, device number 12 [ 740.874778][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.889605][ T24] usb 7-1: Product: syz [ 740.894004][ T24] usb 7-1: Manufacturer: syz [ 740.898972][ T24] usb 7-1: SerialNumber: syz [ 740.919379][ T24] usb 7-1: config 0 descriptor?? [ 741.165392][T20290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 741.180790][T15843] input: HID 041e:3100 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.004E/input/input63 [ 741.181461][T20290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 741.193273][ T5846] usb 6-1: new full-speed USB device number 117 using dummy_hcd [ 741.241793][ T5846] usb 6-1: no configurations [ 741.246455][ T5846] usb 6-1: can't read configurations, error -22 [ 741.301271][T15843] creative-sb0540 0003:041E:3100.004E: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.1-1/input0 [ 741.375008][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3912'. [ 741.385245][ T5846] usb 6-1: new full-speed USB device number 118 using dummy_hcd [ 741.423339][ T5846] usb 6-1: no configurations [ 741.434964][ T5846] usb 6-1: can't read configurations, error -22 [ 741.442376][ T5846] usb usb6-port1: unable to enumerate USB device [ 741.483170][T19472] usb 2-1: USB disconnect, device number 12 [ 741.549658][T20301] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3916'. [ 741.639036][T20301] hsr_slave_1 (unregistering): left promiscuous mode [ 742.050370][T19472] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 742.213246][T19472] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.225196][T19472] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 742.236547][T19472] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 742.251096][T19472] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 742.260359][T19472] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 742.268671][T19472] usb 2-1: Manufacturer: syz [ 742.273413][T19472] usb 2-1: SerialNumber: syz [ 742.498938][T19472] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 742.507534][T19472] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input64 [ 742.523958][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 742.531218][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 742.538206][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 742.545326][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 742.554918][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 742.562520][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 742.569611][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 742.576792][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 742.583599][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 742.597473][T19472] usb 2-1: USB disconnect, device number 13 [ 743.000271][T19472] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 743.072761][T20311] /dev/rnullb0: Can't open blockdev [ 743.084848][T20311] binder: 20310:20311 ioctl c0046209 0 returned -22 [ 743.154624][T19472] usb 2-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 743.166891][T19472] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 743.178168][T19472] usb 2-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 743.194994][T19472] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 743.204948][T19472] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 743.213913][T19472] usb 2-1: Manufacturer: syz [ 743.218978][T19472] usb 2-1: SerialNumber: syz [ 743.400344][ T5938] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 743.433480][ T5846] usb 7-1: USB disconnect, device number 12 [ 743.457406][T19472] yealink 2-1:36.0: invalid payload size 0, expected 16 [ 743.477507][T19472] input: Yealink usb-p1k as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:36.0/input/input65 [ 743.550371][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 743.558583][ T5938] usb 6-1: unable to get BOS descriptor or descriptor too short [ 743.568157][ T5938] usb 6-1: config 4 has an invalid interface number: 91 but max is 0 [ 743.579413][ T5938] usb 6-1: config 4 has no interface number 0 [ 743.589715][ T5938] usb 6-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=6c.05 [ 743.600290][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.608386][ T5938] usb 6-1: Product: syz [ 743.620444][ T5938] usb 6-1: Manufacturer: syz [ 743.625247][ T5938] usb 6-1: SerialNumber: syz [ 743.661612][T20317] overlay: ./file0 is not a directory [ 743.910320][ T982] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 744.050373][ T982] usb 7-1: device descriptor read/64, error -71 [ 744.065345][T20328] /dev/rnullb0: Can't open blockdev [ 744.284744][T20332] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3927'. [ 744.300273][ T982] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 744.324798][T20332] /dev/rnullb0: Can't open blockdev [ 744.440705][ T982] usb 7-1: device descriptor read/64, error -71 [ 744.550770][ T982] usb usb7-port1: attempt power cycle [ 744.736208][T20308] /dev/rnullb0: Can't open blockdev [ 744.748950][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 744.756667][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 744.765075][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 744.773858][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 744.783213][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 744.790691][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 744.800578][ C0] yealink 2-1:36.0: urb_ctl_callback - urb status -71 [ 744.807491][ C0] yealink 2-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 744.821593][T19472] usb 2-1: USB disconnect, device number 14 [ 744.880435][ T5939] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 744.891287][ T982] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 744.921984][ T982] usb 7-1: device descriptor read/8, error -71 [ 745.037603][ T5939] usb 8-1: no configurations [ 745.054335][ T5939] usb 8-1: can't read configurations, error -22 [ 745.160402][ T982] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 745.190999][ T982] usb 7-1: device descriptor read/8, error -71 [ 745.200496][ T5939] usb 8-1: new full-speed USB device number 14 using dummy_hcd [ 745.300748][ T982] usb usb7-port1: unable to enumerate USB device [ 745.379195][ T5939] usb 8-1: no configurations [ 745.388886][ T5939] usb 8-1: can't read configurations, error -22 [ 745.399371][ T5939] usb usb8-port1: attempt power cycle [ 745.656378][T20345] trusted_key: encrypted_key: master key parameter 'default0' is invalid [ 745.740387][ T5939] usb 8-1: new full-speed USB device number 15 using dummy_hcd [ 745.792107][ T5939] usb 8-1: no configurations [ 745.797345][ T5939] usb 8-1: can't read configurations, error -22 [ 745.817843][T20348] /dev/rnullb0: Can't open blockdev [ 745.950468][ T5939] usb 8-1: new full-speed USB device number 16 using dummy_hcd [ 745.996176][ T5939] usb 8-1: no configurations [ 746.001729][ T5939] usb 8-1: can't read configurations, error -22 [ 746.004618][T18958] Bluetooth: hci2: Frame reassembly failed (-84) [ 746.010700][ T5939] usb usb8-port1: unable to enumerate USB device [ 746.032051][T20352] /dev/rnullb0: Can't open blockdev [ 746.126683][ T5938] empeg 6-1:4.91: empeg converter detected [ 746.140892][ T5938] usb 6-1: active config #4 != 1 ?? [ 746.177022][ T5938] usb 6-1: USB disconnect, device number 119 [ 746.394711][T20358] wg1 speed is unknown, defaulting to 1000 [ 746.407019][T20358] lo speed is unknown, defaulting to 1000 [ 746.902081][T20366] fuse: Invalid rootmode [ 747.092243][T20370] comedi comedi0: pcmda12: I/O port conflict (0x4,16) [ 747.117519][T20370] /dev/rnullb0: Can't open blockdev [ 747.281162][T20373] openvswitch: netlink: Message has 1 unknown bytes. [ 747.288126][T20373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 747.333803][T20374] /dev/rnullb0: Can't open blockdev [ 747.370225][T15843] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 747.522632][T15843] usb 7-1: Using ep0 maxpacket: 8 [ 747.528289][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.534760][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.548600][T15843] usb 7-1: config 0 has an invalid interface number: 94 but max is 0 [ 747.557564][T15843] usb 7-1: config 0 has no interface number 0 [ 747.564203][T15843] usb 7-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 747.574226][T15843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.585651][T15843] usb 7-1: config 0 descriptor?? [ 747.673453][T20380] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 747.682561][T20380] /dev/rnullb0: Can't open blockdev [ 747.780406][ T982] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 747.797703][T20371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.813079][T20371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.889000][T20385] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3943'. [ 747.950227][ T982] usb 6-1: Using ep0 maxpacket: 8 [ 747.967232][ T982] usb 6-1: config index 0 descriptor too short (expected 14551, got 36) [ 747.991011][ T982] usb 6-1: config 76 has too many interfaces: 246, using maximum allowed: 32 [ 747.999840][ T982] usb 6-1: config 76 has an invalid descriptor of length 239, skipping remainder of the config [ 748.027581][ T51] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 748.030991][ T982] usb 6-1: config 76 has 0 interfaces, different from the descriptor's value: 246 [ 748.067846][ T982] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 748.145401][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.209147][T20392] /dev/rnullb0: Can't open blockdev [ 748.592619][T20377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 748.603839][T20377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 748.616878][T20378] ------------[ cut here ]------------ [ 748.622730][T20378] WARNING: mm/page_alloc.c:5121 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#0: syz.5.3940/20378 [ 748.634617][T20378] Modules linked in: [ 748.639888][T20378] CPU: 0 UID: 0 PID: 20378 Comm: syz.5.3940 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 748.652592][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 748.663428][T20378] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 748.670380][T20378] Code: 74 10 4c 89 e7 89 54 24 0c e8 14 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 4e f8 b5 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 748.690906][T20378] RSP: 0018:ffffc90004caf920 EFLAGS: 00010246 [ 748.697421][T20378] RAX: ffffc90004caf900 RBX: 0000000000000019 RCX: 0000000000000000 [ 748.705751][T20378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004caf988 [ 748.714105][T20378] RBP: ffffc90004cafa08 R08: ffffc90004caf987 R09: 0000000000000000 [ 748.722793][T20378] R10: ffffc90004caf960 R11: fffff52000995f31 R12: 0000000000000000 [ 748.730892][T20378] R13: 1ffff92000995f28 R14: 0000000000040dc0 R15: dffffc0000000000 [ 748.738935][T20378] FS: 00007f0aa289c6c0(0000) GS:ffff8881257af000(0000) knlGS:0000000000000000 [ 748.748193][T20378] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 748.755227][T20378] CR2: 00002000001859c0 CR3: 00000000469b2000 CR4: 00000000003526f0 [ 748.763352][T20378] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000003c40 [ 748.771718][T20378] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 748.780091][T20378] Call Trace: [ 748.783928][T20378] [ 748.786928][T20378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 748.793578][T20378] ? policy_nodemask+0x27c/0x720 [ 748.798776][T20378] alloc_pages_mpol+0x232/0x4a0 [ 748.804269][T20378] ___kmalloc_large_node+0x5f/0x1b0 [ 748.809550][T20378] __kmalloc_large_node_noprof+0x18/0x90 [ 748.815584][T20378] __kmalloc_noprof+0x36f/0x4f0 [ 748.820664][T20378] ? comedi_unlocked_ioctl+0x9ee/0xf40 [ 748.826365][T20378] comedi_unlocked_ioctl+0x9ee/0xf40 [ 748.831893][T20378] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 748.837749][T20378] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 748.843743][T20378] ? do_vfs_ioctl+0xbe8/0x1430 [ 748.848868][T20378] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 748.854054][T20378] ? __lock_acquire+0xab9/0xd20 [ 748.859042][T20378] ? __fget_files+0x2a/0x420 [ 748.863775][T20378] ? __fget_files+0x2a/0x420 [ 748.868607][T20378] ? __fget_files+0x3a0/0x420 [ 748.873703][T20378] ? __fget_files+0x2a/0x420 [ 748.878545][T20378] ? bpf_lsm_file_ioctl+0x9/0x20 [ 748.883667][T20378] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 748.889544][T20378] __se_sys_ioctl+0xf9/0x170 [ 748.894250][T20378] do_syscall_64+0xfa/0x3b0 [ 748.899109][T20378] ? lockdep_hardirqs_on+0x9c/0x150 [ 748.904675][T20378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.910874][T20378] ? clear_bhb_loop+0x60/0xb0 [ 748.915630][T20378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.922012][T20378] RIP: 0033:0x7f0aa198e929 [ 748.926824][T20378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.947488][T20378] RSP: 002b:00007f0aa289c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 748.957019][T20378] RAX: ffffffffffffffda RBX: 00007f0aa1bb6080 RCX: 00007f0aa198e929 [ 748.965403][T20378] RDX: 00002000001859c0 RSI: 000000008010640b RDI: 0000000000000008 [ 748.973872][T20378] RBP: 00007f0aa1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 748.982354][T20378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.990529][T20378] R13: 0000000000000000 R14: 00007f0aa1bb6080 R15: 00007ffc9bdb4708 [ 748.998656][T20378] [ 749.002125][T20378] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 749.009436][T20378] CPU: 0 UID: 0 PID: 20378 Comm: syz.5.3940 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 749.021085][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.031451][T20378] Call Trace: [ 749.034762][T20378] [ 749.037713][T20378] dump_stack_lvl+0x99/0x250 [ 749.042356][T20378] ? __asan_memcpy+0x40/0x70 [ 749.047063][T20378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.052288][T20378] ? __pfx__printk+0x10/0x10 [ 749.057104][T20378] panic+0x2db/0x790 [ 749.061072][T20378] ? __pfx_panic+0x10/0x10 [ 749.065551][T20378] __warn+0x334/0x4c0 [ 749.069550][T20378] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 749.075635][T20378] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 749.081721][T20378] report_bug+0x2be/0x4f0 [ 749.086068][T20378] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 749.092056][T20378] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 749.098053][T20378] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 749.104044][T20378] handle_bug+0x84/0x160 [ 749.108479][T20378] exc_invalid_op+0x1a/0x50 [ 749.113067][T20378] asm_exc_invalid_op+0x1a/0x20 [ 749.117917][T20378] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 749.124592][T20378] Code: 74 10 4c 89 e7 89 54 24 0c e8 14 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 4e f8 b5 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 749.144196][T20378] RSP: 0018:ffffc90004caf920 EFLAGS: 00010246 [ 749.150269][T20378] RAX: ffffc90004caf900 RBX: 0000000000000019 RCX: 0000000000000000 [ 749.158238][T20378] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004caf988 [ 749.166294][T20378] RBP: ffffc90004cafa08 R08: ffffc90004caf987 R09: 0000000000000000 [ 749.174296][T20378] R10: ffffc90004caf960 R11: fffff52000995f31 R12: 0000000000000000 [ 749.182300][T20378] R13: 1ffff92000995f28 R14: 0000000000040dc0 R15: dffffc0000000000 [ 749.190296][T20378] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 749.196654][T20378] ? policy_nodemask+0x27c/0x720 [ 749.201626][T20378] alloc_pages_mpol+0x232/0x4a0 [ 749.206510][T20378] ___kmalloc_large_node+0x5f/0x1b0 [ 749.211721][T20378] __kmalloc_large_node_noprof+0x18/0x90 [ 749.217375][T20378] __kmalloc_noprof+0x36f/0x4f0 [ 749.222334][T20378] ? comedi_unlocked_ioctl+0x9ee/0xf40 [ 749.227883][T20378] comedi_unlocked_ioctl+0x9ee/0xf40 [ 749.233381][T20378] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 749.239307][T20378] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 749.244959][T20378] ? do_vfs_ioctl+0xbe8/0x1430 [ 749.249741][T20378] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 749.254775][T20378] ? __lock_acquire+0xab9/0xd20 [ 749.259637][T20378] ? __fget_files+0x2a/0x420 [ 749.264402][T20378] ? __fget_files+0x2a/0x420 [ 749.269180][T20378] ? __fget_files+0x3a0/0x420 [ 749.273869][T20378] ? __fget_files+0x2a/0x420 [ 749.278480][T20378] ? bpf_lsm_file_ioctl+0x9/0x20 [ 749.283434][T20378] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 749.289795][T20378] __se_sys_ioctl+0xf9/0x170 [ 749.294500][T20378] do_syscall_64+0xfa/0x3b0 [ 749.299016][T20378] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.304392][T20378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.311339][T20378] ? clear_bhb_loop+0x60/0xb0 [ 749.316066][T20378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.322023][T20378] RIP: 0033:0x7f0aa198e929 [ 749.326461][T20378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.346243][T20378] RSP: 002b:00007f0aa289c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 749.354665][T20378] RAX: ffffffffffffffda RBX: 00007f0aa1bb6080 RCX: 00007f0aa198e929 [ 749.362660][T20378] RDX: 00002000001859c0 RSI: 000000008010640b RDI: 0000000000000008 [ 749.370926][T20378] RBP: 00007f0aa1a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 749.378908][T20378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 749.386877][T20378] R13: 0000000000000000 R14: 00007f0aa1bb6080 R15: 00007ffc9bdb4708 [ 749.394951][T20378] [ 749.398362][T20378] Kernel Offset: disabled [ 749.402740][T20378] Rebooting in 86400 seconds..