last executing test programs: 2m30.815777611s ago: executing program 2 (id=1662): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84242, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, 0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r1, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e84d528539f3d3289737f0374c89a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e00000010e200", [0x0, 0x1]}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r5) recvmmsg(r5, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x200003}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/222, 0xde}, {&(0x7f0000003e00)=""/4090, 0xffa}], 0x2}, 0x101}], 0x3, 0x40010020, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r4, 0xc040128b, &(0x7f0000000180)={&(0x7f00000000c0)="8a04550589094d12f7da79c04db28546c45a658f6331aab08066195adfed2e34676b716f8a0a0a0f47683e0a5c75d84e9b88bba697343054c0a0bdb91972187f7e6697a66ec0f3fe3c99f82715fd9c02e2d8c9694cf2d748e6a0a23aba79b5f0ac7a98d17ab047156aabb8a4605af707ded7d3c102e3", 0x76, &(0x7f0000000000)=""/62, 0x3e}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93774000) 2m30.405347573s ago: executing program 2 (id=1663): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept$inet(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x2, 0xd}}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @private}, &(0x7f0000000140)=0xc) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in6=@remote, 0x4e24, 0xfffd, 0x4e20, 0x7, 0xa, 0xa0, 0x80, 0x0, r3, r4}, {0x3, 0x6, 0x7fffffff, 0x4, 0x6, 0x10000, 0x1, 0xffffffffffffffff}, {0x9, 0xa, 0x6, 0x7}, 0x28cf, 0x6e6bb2, 0x1, 0x1, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0x2, @in=@remote, 0x34ff, 0x1, 0x1, 0x4, 0xff, 0x1}}, 0xe8) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000340)) r6 = syz_open_dev$vcsa(&(0x7f0000000380), 0x3fa, 0x40) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r7, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x8aec}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x45, 0xa8, @random="5b744e4d6bb42070ac1e589a66c3f02e01ee99b837b29d5c46831a07243945fd4f128be0eafed897b3c662f940f23456d761cdd3556c91047e148fdd83b942637f"}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) sendmsg$NFT_MSG_GETGEN(r6, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20002001) r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x2c, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x81}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x26004888}, 0x24004880) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000007c0)={0x0, 0x2, 0x1, [0x4, 0xfffffffffffffffc, 0x7, 0x200000004, 0x8], [0x1, 0xda, 0x80000001, 0xc1, 0xa3, 0x4, 0x7, 0x9c, 0x7f, 0x10001, 0x7, 0x200, 0x700, 0x3, 0x6, 0xfffffffffffffff7, 0x30, 0xfffffffffffffffb, 0xf, 0x9, 0xe1c, 0x3, 0x79b5, 0x9, 0x8, 0x0, 0x6, 0x1, 0x0, 0x7, 0xfffffffffffff71f, 0xba, 0x0, 0x100000001, 0x6, 0x8, 0x6, 0x1, 0x4, 0x18, 0xa, 0x7fffffff, 0x7, 0x9, 0x23b, 0x5, 0x5, 0x81, 0x0, 0x2, 0xe5, 0x0, 0x6, 0x800, 0x8, 0x7, 0x5, 0x8, 0xc, 0x0, 0x8000000000000000, 0x7fffffff, 0x80, 0x1ca, 0x0, 0x9, 0x7, 0x9, 0xdfa, 0x100000001, 0x2, 0x800, 0x1, 0xae, 0x10, 0x61c1, 0x8000000000000000, 0x69, 0x7, 0x0, 0x8, 0x6, 0x6, 0x7, 0xfffffffffffffffa, 0x5, 0x7a1, 0x1, 0x2, 0x4, 0x0, 0x4, 0x8, 0x5, 0x7, 0xf5, 0x8000, 0x9, 0xffffffffffffffa3, 0x90, 0xfffffffffffffffb, 0x9, 0x3, 0x7fff, 0xa0, 0x8, 0x9, 0x1, 0xffffffff, 0xfffffffffffffff8, 0x9, 0x1a, 0x800, 0x3, 0x4, 0x100000000, 0x6, 0x6, 0xa5, 0xb98, 0x7]}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c00)={r9, "5f8928fc7a9addf219ae249b07349e4a"}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000001c00)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000001c40)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0, 0x1}) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) accept4$bt_l2cap(r6, 0x0, &(0x7f0000001cc0), 0x80000) linkat(r6, &(0x7f0000001d00)='./file0\x00', r5, &(0x7f0000001d40)='./file0\x00', 0x400) r12 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0) getpeername$netlink(r12, &(0x7f0000001dc0), &(0x7f0000001e00)=0xc) sendmsg$DEVLINK_CMD_PORT_SET(r6, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x44, r7, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendto(r6, &(0x7f0000001f80)="44fb702951c2dd1c03f4a8586d71a7df1e91f650ccab5c96a39bbc6376f003fa2f43cc6a0e2198334e21ee41e9d01a7873dec0f64674753129a636ea46517b49f887544f8fa21fdc3df505264efac66a2b623b0c55b1f2672fd7f37052caa452b9b1adedea21825807bb2d883ec6fa54349ec3d3dc6ca734438df318febd651e30e7eb2a68ddb3709adafd815f12", 0x8e, 0x10004010, 0x0, 0x0) r13 = syz_open_dev$vcsu(&(0x7f0000002040), 0xf, 0x40100) ioctl$IOMMU_IOAS_MAP$PAGES(r13, 0x3b85, &(0x7f0000002080)={0x28, 0x4, r10, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) connect$unix(r12, &(0x7f00000020c0)=@file={0x0, './file0\x00'}, 0x6e) ioctl$FS_IOC_SETVERSION(r11, 0x40087602, &(0x7f0000002140)=0x7) 2m30.241459555s ago: executing program 2 (id=1664): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)="6dc824", 0x3}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="83994f8dce8e15c5dda28b0ca6879c84e35f973b172669fc3da69f55d0e9c62e56bd037c851765ea8af28ec1114fc5047debe5c6e70e071376ee23236cf1ae1035c165fc738297f16ab538ffe37a90d7", 0x50}, {&(0x7f00000011c0)="e2816adeb056ab01fccc309a12938cfaa9af95b83f8956ad3fbc66d616bf50ff863f3f32caafea10a958187f45f54500632bd1fb96bdf2f36bb9bdb00ba216a90951e305221b563c27406ffa870f8db803ed922795133a0af2b26adf80b248a77c10c9fa3cdbc9c30d2806cc929315c5f2af11e4a7f321762816ed175b15fb101512350958fc16d83f4ef21615032b92f12abebaea6755d83acef8a3017b3c4d6a19", 0xa2}, {&(0x7f0000001280)}], 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdb9f2534000000080003001e311a0e74d0723fa5b7b486581994ef0744e9647a4db2b6eb8c88fa7c4ed56ebe02559a14b015e8bc681cebe5dde2dc5d5ce083368fb218640b764fbcae67d3c89bb7a23d6695aeaed861e5a167621646c201994058ae6bb54ecbb5cdb00d5d1d3064e219366df514c773b0d4ef0424a007e3709e410416fd2776b4d02775aee55004d291e6f7fccd495bdfab", @ANYRES32=r3, @ANYBLOB="040034000600fd000010000014005500009bf3423841ed8803f8d1484d2ac2b3"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x7, 0xc, 0x8, 0x5, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000100)="6dc824", 0x3}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="83994f8dce8e15c5dda28b0ca6879c84e35f973b172669fc3da69f55d0e9c62e56bd037c851765ea8af28ec1114fc5047debe5c6e70e071376ee23236cf1ae1035c165fc738297f16ab538ffe37a90d7", 0x50}, {&(0x7f00000011c0)="e2816adeb056ab01fccc309a12938cfaa9af95b83f8956ad3fbc66d616bf50ff863f3f32caafea10a958187f45f54500632bd1fb96bdf2f36bb9bdb00ba216a90951e305221b563c27406ffa870f8db803ed922795133a0af2b26adf80b248a77c10c9fa3cdbc9c30d2806cc929315c5f2af11e4a7f321762816ed175b15fb101512350958fc16d83f4ef21615032b92f12abebaea6755d83acef8a3017b3c4d6a19", 0xa2}, {&(0x7f0000001280)}], 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fbdb9f2534000000080003001e311a0e74d0723fa5b7b486581994ef0744e9647a4db2b6eb8c88fa7c4ed56ebe02559a14b015e8bc681cebe5dde2dc5d5ce083368fb218640b764fbcae67d3c89bb7a23d6695aeaed861e5a167621646c201994058ae6bb54ecbb5cdb00d5d1d3064e219366df514c773b0d4ef0424a007e3709e410416fd2776b4d02775aee55004d291e6f7fccd495bdfab", @ANYRES32=r3, @ANYBLOB="040034000600fd000010000014005500009bf3423841ed8803f8d1484d2ac2b3"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, &(0x7f00000000c0)={0x7, 0xc, 0x8, 0x5, 0x2}) (async) 2m30.091704092s ago: executing program 2 (id=1665): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3d, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000380)={0x1, 0x1}, 0x8) shutdown(r1, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0xa08000, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) acct(&(0x7f0000000240)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f0000000040)={{}, 0x80003, 0x1, 0x7fffffff}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000001940)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f00000001c0)={'ipvlan0\x00'}) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x40, 0x40, 0x1}, 0x18) ptrace$setregs(0xf, r3, 0xdcaf, &(0x7f0000000580)="7b3507a2eab77b162e76790e71789521deedf08a8271451c8f5d99bddee7bfb625e192f1954ef6194a76373bc00c3b438778dee84b") r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="d8000000140081044e81f782db44b904021f080219000000040060a118000200e800000a09000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c046100a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed04ffece0b42a9ecbee5de6ccd40dd68adbeffa447ef4a6fbd3824305240c000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) recvmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000480)=""/241, 0xf1}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f00000019c0)=""/222, 0xde}], 0x3, &(0x7f0000001880)=""/152, 0x98}, 0x40000002) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)=0x20) 2m29.206012273s ago: executing program 2 (id=1670): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14000, 0x0) r1 = syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = epoll_create1(0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x34, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) mmap(&(0x7f0000b58000/0x1000)=nil, 0x1000, 0xf411119ed9bebbb7, 0x30, r2, 0x658e000) socket$unix(0x1, 0x1, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x7a) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r9 = dup2(r8, r8) sendto$rose(r9, 0x0, 0x0, 0x8885, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0) timer_create(0x4, &(0x7f0000000080)={0x0, 0x38, 0x4}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m28.399276123s ago: executing program 2 (id=1677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002c80)="c141bff7032eee0b7d4d1d6e27b7f049ab1d7d99c1c674a499fcce987f", 0x1d}], 0x2}}], 0x1, 0x9200000000000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) close(r0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00)) read(r0, &(0x7f0000000140)=""/121, 0x79) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000080)=""/104, 0x1000, 0x1000, 0x7, 0x1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0xa, 0x201}, @void, @eth={@empty, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0xd, 0x1c, 0x66, 0x0, 0x1, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @empty}, {0x15, 0xdf, 0x0, @remote}}}}}}, 0x2e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x10000}) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 2m28.204077487s ago: executing program 32 (id=1677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x1e, 0x4, 0x0) socket(0x1e, 0x2, 0x0) sendmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000002c80)="c141bff7032eee0b7d4d1d6e27b7f049ab1d7d99c1c674a499fcce987f", 0x1d}], 0x2}}], 0x1, 0x9200000000000000) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x1e, 0x4, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) close(r0) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r6, 0x80047437, &(0x7f0000001f00)) read(r0, &(0x7f0000000140)=""/121, 0x79) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$PPPOEIOCSFWD(r6, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'veth0_macvtap\x00'}}) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000080)=""/104, 0x1000, 0x1000, 0x7, 0x1}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0xa, 0x201}, @void, @eth={@empty, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0xd, 0x1c, 0x66, 0x0, 0x1, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x39}, @empty}, {0x15, 0xdf, 0x0, @remote}}}}}}, 0x2e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'ipvlan1\x00', 0x10000}) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 1m57.482150798s ago: executing program 0 (id=1935): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0xd4, r7, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x0, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x0, 0x5b, "18ecd8683b597e5d3702e1e7ae64dd241221231a27b95df5f48e51192e25f96b77e5e016423f9278aabebfd20b"}]}, 0xffffffffffffffd2}}, 0x4090) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r5, @ANYBLOB="05005b"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 1m57.23566039s ago: executing program 0 (id=1936): r0 = socket(0x28, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x0, &(0x7f0000000240)={0x4, {{0xa, 0x4e21, 0xadf, @local, 0xf}}, {{0xa, 0x4e20, 0x40, @private2, 0x7}}}, 0x108) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001840)="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", 0x1c3}], 0x1}}], 0x1, 0x20048041) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) write$cgroup_devices(r3, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000040), 0xabd6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000080)={0x5, 0xd8, 0xfffffff8}) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000001800)=0x3, 0x4) listen(r0, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r6, 0x0, 0x40000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000001c0)={0x40, @time={0x7, 0x4}, 0x0, {0x38, 0x1}, 0x1}) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000380)=0xc99, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) fanotify_mark(r4, 0x40, 0x10, r2, &(0x7f0000000100)='./cgroup\x00') 1m57.201309411s ago: executing program 0 (id=1937): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) (async) r2 = socket$inet6(0xa, 0x2, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008894) (async) r3 = syz_open_dev$swradio(&(0x7f0000000800), 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f00000000c0)={0x40980001, 0x0, "bf5dff0f258c6b1765c2141433ae000000000000000000000000000000008000"}) (async) bind$inet6(r2, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x31, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r6, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m57.04091409s ago: executing program 0 (id=1938): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) signalfd(0xffffffffffffffff, &(0x7f0000000080)={[0x9]}, 0x8) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x12, 0x2, 0x10f6}], 0x18) readv(r1, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000001c0)=""/172, 0xac}], 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) 1m56.182034056s ago: executing program 0 (id=1939): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) (async) socket$unix(0x1, 0x2, 0x0) (async) sendmmsg(r1, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) (async) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) (async) 1m56.103679385s ago: executing program 0 (id=1940): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00001100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007c1000/0x2000)=nil, 0x2000, 0x15) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x2}, 0x4) madvise(&(0x7f00006e4000/0x4000)=nil, 0x4000, 0xd) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bind$packet(r4, &(0x7f0000001c80)={0x11, 0x17, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66002, 0x0) madvise(&(0x7f000096c000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r9, 0x2000) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000140)=""/13, 0xd}], 0x3, &(0x7f0000000a80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/40, 0x28}], 0x1, &(0x7f0000000700)=""/97, 0x61}, 0x9}], 0x2, 0x20, &(0x7f0000000800)={0x77359400}) execveat(r7, &(0x7f0000000840)='./file0\x00', &(0x7f0000001a80)={[&(0x7f0000000880)=']\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='/dev/rnullb0\x00', &(0x7f0000000940)='/dev/rnullb0\x00', &(0x7f0000000980)='\x00', &(0x7f00000009c0)='{\x81).*\'/#\'^\\^{&\x00', &(0x7f0000000a00)='/dev/fuse\x00']}, &(0x7f0000001c40)={[&(0x7f0000001ac0)='-!\'!(#\\.)$--\xe6)-\x00', &(0x7f0000001b00)='%', &(0x7f0000001b40)='{+(%#+{\xd1.,)\x00', &(0x7f0000001b80)='/dev/i2c-#\x00', &(0x7f0000001bc0)='/dev/i2c-#\x00', &(0x7f0000001c00)='\x00']}, 0x400) ioctl$int_in(r9, 0xfc85, &(0x7f0000000180)=0x2) 1m41.086686922s ago: executing program 33 (id=1940): r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) msgrcv(0x0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a0200010203010902120001000000400904000000ff"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="00001100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x1, &(0x7f00000003c0)='t'}], 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007c1000/0x2000)=nil, 0x2000, 0x15) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000000c0)=0x2) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x2}, 0x4) madvise(&(0x7f00006e4000/0x4000)=nil, 0x4000, 0xd) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) bind$packet(r4, &(0x7f0000001c80)={0x11, 0x17, 0x0, 0x1, 0x4, 0x6, @multicast}, 0x14) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x66002, 0x0) madvise(&(0x7f000096c000/0x2000)=nil, 0x2000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r9, 0x2000) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f00000002c0)=@rc, 0x80, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/228, 0xe4}, {&(0x7f00000005c0)=""/191, 0xbf}, {&(0x7f0000000140)=""/13, 0xd}], 0x3, &(0x7f0000000a80)=""/4096, 0x1000}, 0xff}, {{&(0x7f0000000680)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f0000000340)=""/40, 0x28}], 0x1, &(0x7f0000000700)=""/97, 0x61}, 0x9}], 0x2, 0x20, &(0x7f0000000800)={0x77359400}) execveat(r7, &(0x7f0000000840)='./file0\x00', &(0x7f0000001a80)={[&(0x7f0000000880)=']\x00', &(0x7f00000008c0)='\x00', &(0x7f0000000900)='/dev/rnullb0\x00', &(0x7f0000000940)='/dev/rnullb0\x00', &(0x7f0000000980)='\x00', &(0x7f00000009c0)='{\x81).*\'/#\'^\\^{&\x00', &(0x7f0000000a00)='/dev/fuse\x00']}, &(0x7f0000001c40)={[&(0x7f0000001ac0)='-!\'!(#\\.)$--\xe6)-\x00', &(0x7f0000001b00)='%', &(0x7f0000001b40)='{+(%#+{\xd1.,)\x00', &(0x7f0000001b80)='/dev/i2c-#\x00', &(0x7f0000001bc0)='/dev/i2c-#\x00', &(0x7f0000001c00)='\x00']}, 0x400) ioctl$int_in(r9, 0xfc85, &(0x7f0000000180)=0x2) 1m22.401038071s ago: executing program 3 (id=2090): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0xf) read$char_usb(r0, &(0x7f0000000000)=""/148, 0x94) (async, rerun: 32) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_version={{0xc, 0x8}, {0x3, 0xc8, 0x7c, 0x8001, 0x8}}}, 0xb) (rerun: 32) ioctl(0xffffffffffffffff, 0x2, &(0x7f0000000100)="e6436a66dfa09911c9d0aea262c55e6d02832037a196134794930fc8dd1115d1c141d09b40e8d97cea8245db9bb9075adb2206c94d4d55d0e5c60d2fcafb0ad29701063aae9f97f38989700f7d04446c47be6fe31c17351dabcda8de03078a41107e8bf2fb2b5e671d7413557c94d1b1ba6830bd33bb0521c557cd501e1e4534d6aba3ee300b199065c54b40a0eda67d1a973a0f51aab84688daa5b2f330ac9bad5f679a214385b5fee92f2483fc50861587d28154e59c76ecdb34fa7092cb1e1d36957de6e59dc3360f5a697c69b5df20451a8a972c6ede4c5898c8af4b22db97d0c4bddea3") syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xbb}, "fb7cfcb0ca066a0f4bac64f3ce2651be5ee5f4c982661c31f93b4419f8809f50015b5494d1674661cecd2a0ab9c211d6b0bdaf40c3f3e5d4609c59f9d269010f1352ea705515d2c16420a60b5a668851ca5a9a032f0243612007867bcaac25a165bcf1919c6764b8d2b9643306bdbdea55d39d865aaaf1aaebb0da1058c1571dc11cd5f52680db240e159f5ad2b267aef75384b6f93bf0cf54074b39f873d6caa527cc6bb6a3262ee65ce9f8e105ad2f8bd2ab1fece8ba646ed376"}, 0xbf) syz_emit_vhci(&(0x7f00000002c0)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) (async) ioctl(r0, 0x3, &(0x7f0000000300)="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") r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000400), 0x843) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000440)={0x3ff, 0x4, 0xa, 0x0, 0x8, 0x9}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmmsg$unix(r2, &(0x7f0000004cc0)=[{{&(0x7f0000000500)=@abs, 0x6e, &(0x7f0000000680)=[{&(0x7f0000000580)=""/127, 0x7f}, {&(0x7f0000000600)=""/75, 0x4b}], 0x2, &(0x7f00000006c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}], 0x40}}, {{&(0x7f0000000700)=@abs, 0x6e, &(0x7f0000001980)=[{&(0x7f0000000780)=""/58, 0x3a}, {&(0x7f00000007c0)=""/51, 0x33}, {&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/147, 0x93}, {&(0x7f00000018c0)=""/184, 0xb8}], 0x5}}, {{&(0x7f0000001a00)=@abs, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001a80)=""/176, 0xb0}, {&(0x7f0000001b40)=""/255, 0xff}], 0x2, &(0x7f0000001c80)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x10}}, @cred={{0x1c}}], 0x70}}, {{&(0x7f0000001d00)=@abs, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000001d80)=""/221, 0xdd}, {&(0x7f0000001e80)}, {&(0x7f0000001ec0)=""/58, 0x3a}, {&(0x7f0000001f00)=""/4096, 0x1000}], 0x4, &(0x7f0000002f40)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000003000)=@abs, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003080)=""/169, 0xa9}, {&(0x7f0000003140)=""/13, 0xd}, {&(0x7f0000003180)=""/124, 0x7c}, {&(0x7f0000003200)=""/122, 0x7a}, {&(0x7f0000003280)=""/121, 0x79}, {&(0x7f0000003300)=""/130, 0x82}, {&(0x7f00000033c0)=""/238, 0xee}, {&(0x7f00000034c0)=""/92, 0x5c}], 0x8}}, {{&(0x7f00000035c0)=@abs, 0x6e, &(0x7f00000037c0)=[{&(0x7f0000003640)=""/103, 0x67}, {&(0x7f00000036c0)=""/172, 0xac}, {&(0x7f0000003780)=""/4, 0x4}], 0x3, &(0x7f0000003800)}}, {{0x0, 0x0, &(0x7f0000004b00)=[{&(0x7f0000003840)=""/4096, 0x1000}, {&(0x7f0000004840)=""/53, 0x35}, {&(0x7f0000004880)=""/135, 0x87}, {&(0x7f0000004940)=""/251, 0xfb}, {&(0x7f0000004a40)=""/168, 0xa8}], 0x5, &(0x7f0000004b80)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0x0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}}], 0x7, 0x0, 0x0) ioctl$sock_netrom_SIOCDELRT(r17, 0x890c, &(0x7f0000004e80)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={'nr', 0x0}, 0x80, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5420, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) socket$inet6_udp(0xa, 0x2, 0x0) (async) fstat(r12, &(0x7f0000006180)={0x0, 0x0, 0x0, 0x0, 0x0}) r27 = gettid() sendmsg$unix(r22, &(0x7f00000062c0)={&(0x7f0000004f00)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000006140)=[{&(0x7f0000004f80)="af3af5722889744ce2e271cccd2719327c327d1e71ce27a42a851960f9ec11b510abb2159a6187428bfa635c6b709def8a2a0d6bc5f6038e2002492cfaf44acb7698ab3e078b02ba89c2727911efc9790b1afa4db272488a1a54845129c40fc72f05", 0x62}, {&(0x7f0000005000)="21790cd5e84d80e3d76eef1333a39518151cbcb827e62b42e80f845e9e478fed01e85ba9690424a5972169877f675d8f0d1b57955ae2de585cfd25e4a00937d1136e4104de2b29669298d310c76bf8245749807b661758fdcb7b58a0c7129e52569457bcab8f35d383624204bd588779d26ef12e7ff354311268c09114446831d6edb1562b48477675d5", 0x8a}, {&(0x7f00000050c0)="a434449723829f78a8dca33065fa8aad36f87a607440d90e4a125efd98bb69889dc36f675c248581e605642bbdb6aab9df50f4be3bf3f91c7f846d203004f58bad3928a2a8e8e52afbed6fa462914d172e5a3110c1b11f13c4f8d7ad9873120ac696d9c771cfcaca4b955a907b90c442e4d9c499e5e48a19e073f879ff6ce663432b698a750c0861a081275e05b833b4fe53009e15deaa1e0aae39a3ff72b694b10be1cfdea09227982c5ee2c5da02c800462b5f426f846da24add5af28d94ef4eb2b5b1205c39818dbca3fbdb124b80495a1a13da96dc52ce440515b08646088e324a7332983a1024434b09bd2ef3e43a8e35985902d22a09b4fc2c0653a1ea564c45d0f3eeb44c5f6034fc20d352a7b329ee187ce6603031f0e9666337577dedc3dbd938fd30ca6ef7c8972c3345cb34b2f71b9d825873192689cbde59a05ceefffa93b1cf8bb9c51c15a72cd1e02ee7b56d6a37c2f3a7b5e530e74c28fcbb51786258ee96ce575ea10ca80f48ae087cef1f4e1453b13c9718bd74c3f8c2416156a7ec3e106aa37ada5f092f0f189878dd8df1cc01076bbd0cf2c44d90e2401fc44a042d36e0f34b04a3836e760a61d2b896e48a676305a1aa1b285bd1f4fd16b3b874e95dc308bfcc0eed2122920983d9d42ebdf6458702719311eaee46ee15626f36d093bdc37e112d15990f258e977c3332cfdc023f35cadb6c7245ad5a41ca9b51efee5cb4096211f951eaf3ab222760b411f8cddf75c5f3cdd0309abd9fd7803798f84d78882ebc64be03fe6a1b3f1a7030f4a9c0ff427a2bd931f19e53ad84650dcc024bc84b38f18b6f6ee4c520d6e84507fbd3013b91eabcec7884622c4c90edd63a9b84591696e1d6d533b4cbd9d798c8a5186abd9ea56378d14ccbec567b7299d59741fb437b2b6eb2a1925515e2df372ce927e8fa8f0d249ac6d2a18035d9b12b02592db155569ba8119b51d50cb54d49a5ec23b13cf78180d1f8ac7f08b35431ae9afc3a97b82013d9d6db4c9e597377a37bb7450d5a0885d535ed634a3bc557e5092acf99ca1da34442160085157ab2c871b7b42d8750a3d69a794c12d262049a6b94ada047740daea16d29dec0745cfefee7bc0387e5d9425ed7d881114b795a9b19c1cee01bb0e418baeb5bce754b1bbd8e446dea050c8d9c65b34d096b05ce034a4b385acd152c2c8845de68dff70bffc4773f442d5ac4310af0c9d6f9545a343637b1be0f942bad5045c9774e066c8b6dbf79cd3954c2f790a412d5c99213103354cbd8a84405ffc307f4fdca0defbecac621d5cbcaa0a18ce9c6b26bf1f1053d902761ed52827b3f0bb7f7cc58e0e78915fd7d5357f98afda9c3a284a5a846f9cbc184a689fcc117fa935c6490c9c65870fe907b61742f7dc88baec317f27edac1741c72a1feb3c2de304b423115f2fbef1d2aac5dc2098c1b2ebbf56efdcc153b23a392b2758e315dd6793667a54487bd09713b72246159e2133c847c1bca0dd5de251aef5d1b3206967756d37ccb2f2babbd2709c64688f1bbee8c39c92ceaa3de7c1094a30acf9882290baa3b99deb7be7d082857f6c8da35cdc593006d10bec92938d87deb91bf02c1a3d9c920270307e158cd33032e88dec2c4c68f9b48d17e7dcca36f021100d5067e8992558a5e2efcc94697b2832914c0ff16d53af6bc529143b08fc077742eceae3ff22d97284c13d972b4afc8d0f98e3268dc3afe20f6d453870bc563d4428c489c0f65e59e2f3a55f254e817936d2c31fcd2c40ad39c6c421df3ca4460a8c2dbac3fda786ace99b738739f33f8b7e177448a43a35045b9d2bdf814de98d07b059a5b207e5133a42364aa220e3a112babe402a27f1e7529851448ffaef73b87b328f8d3101b2fe6aaf0254a7f7d415bcf3cdda69bc9f5c8606c4bdd470d0636a155aa81e0172b2e1fe62f1d56e16be42ea616cf467ffe338bb6c9c51fa79aa929c492e7291346af037a3754c412d04e3bfe75e2e1f6e423923de5eeee8957530de0831ddfb5bc8489593fd5b55e09410c4d8ddda0c3b8fb11f57320f86291f4b70a159ab236017feb07e19ab1404b28220873286448e65ba7041f05f4914747949ef44af977ed2f28167e9b6a75a90b1e5bac42bab077d77e5af118f00b91383920ba9c8a2ba86736e2be80b30b1313b4cdb27c6a9fcbbceb3ab3b3abebef843a582c1458a1ce9910cc47f6bda23b5420ade154ec3fd6d92e1f26c21ca29676bc75aa5a127daef18afa44c6c739a5fe9fa5a6d3948538a188a9a3e729afc9838de52ed895b8f3a1262375d7f876c9fca59e22c0bc04bbbee09575607b2d5ba14bd4ea9d8d4ff13aa5b01822a733e31f26458e9fbc0839619e6196695b5a8a2621b7caa40d8cb30b2c58836ddfaa78e38cd70c6ec1bd31cc182d630e6d378815eb47e66c955e40c02369eb3bfa2d2f5688b87826597b5f395868f37359b302ee01eb299b2c6c2a3f28db074d8ed2540c0d24393c1b78f5b9d39818909b407c2895b1b037a1e8ac411e160d754105cc904e0e5bb159dcbdec17c5a335f4e2d9c152a6fa49a4b6b3a52ea0e97b83a47922ec16922a344f7621201b92aacbff2e83f13013c6f31b792bcb83083d5589cec7728e39b52eafe9f10e7ec488276ffc81abde801f3e631eefdafb49d7dfe09041c81728d229db72c55e1f37536fc9f1ce9701bfa011efa9de238ab7849a8c5807854d766abc0278764eedafc71ae3bb96471e199fbbeceee451c3ab15e79cb65962ff5d656d025513777736cb7be5e119393758ed86eceb51b3484abaf0d81cb7bb02172deb9391cc77ec2e0be395d7581a1aa0a13a9f2a63b48fbdb78529013ded77ce0b91118fbc7c0ec9f6d7e52662ec914219f1d8fc7e13126dcdefa5818876228f51fa5ae3be37923605d7d2f9849b63a90ee75b5ca8f3f95f55763f0afbcac6cf5f928a125ba94ea6de0dcbec0ec1e0608ca2217f9f379fb6fd20740b4dde9e72cd766af3f886bc9bf949e6c108e82d2bc3e0d71620d3ccfe77943a83b04e5d5aeabe091f0a2a8eaef4c2cf65ca99f42c8074f8748292a615f4f6aa1e127c7855abe0e7c8d7fe494dd4263102147c30a889e86bf4037193b47701c0e25a3cedf2ae25f38d778df5abd4c5b01f443e91d8f31e61a47b36ed4f2e4144e287b85bf714f141aacce629a8c6e74c7a688ba69fa47dddcd377c8f0fd63fc6b4fe9ea9ba5ca97300c9c44bf918120f4f23f5b71cdc98441cbc15007ba9a04fc9b239f9ff03d623a515ab7621db0578bb6dd05c8f24b03b1b072723ce31330629813c138a02894794b411e66cb908782e0ce7f461fccbbcc93b37b19b35b061d7fa32fb1d7c0497db5237502f523d9c9da0fe8ed614b623ab110e9431dcfe1577101743df84a09ec32ee67702f35a6dfcd55748a7fea172af4eab130a32993bf152e12c1f60d0eb1a949e2451e0f4242d1042903e49c65913945b0786a25ef5f875a3b6e5d638d25c0282351bdbe7fd418e38bc0c301144e36873d7cc8ab556f1e85c676401ce9026039b6e41bff83312798877fb09049a1fcd579ead4353405400b602115ba7f6541c252c5729bafa5dfc1db74975499857528d7061e0b5c869b222531d8adfed5894344bccf78f826903ea91e685efc174585df63012b4222f766fe78a7ab7420892f3552eb1c70a5f449cdcb5c4a1b4ab4944cf9ef2e20ab51c83b6fff30d5b79464900a7721bd7c3c48b75140e550115ee64a51e1ff8bf2513c38de0d06e99e1e2a4459908aff8991374c051c7dffc47b62846cc78336469c69b27a73989b4cd589c51f217fd864ab33342b8c1824f8a523355227155ff720caeb55db5b3b9529a50f600d08920fee0a3ce79c6ad4ff22fcf81adb0166aae8fec92a7cb3a314e0df621cb8e5a1b218bdd88e8d9fa4313b9a9b062376a16458ff1de22dcf0cd721e16a472d3745555d0315f8bf9c69bf9c5afd9a458ea9c549aea0f656e68d710e54739452691d50da744fa463beb83698e81837a0d3b7109215ee2a6d8c69a8d5b8106bd185e2e8aba1d0e8b075885798522032c6e777c08fdee57395f38a27e70943de8b002312eabd39f9297372a178e46c5aa48c2e58afdbd8a78ea32fa16c16585802397b32cf57052b2900c89a008057277cc0ed87ad626fec2db0f74b1599d94ffd5f1627150bbfc2373f652ef04093886a279d5807cae50bfbd595ea1c2a263a75f0ef39f719b84c913d85fcb602e82d3ffe50030152483521a65717dd8a7d275071d123f06d79391493ee97ff921005465ca4c6d02b7fce9b8c414d7b1defa91565c9726881f3027e9360461ce259d46d0c86dcbf8871735c4cb229d7cfbcbb58b562b2b8c57f73f77b34b3f83bc13c4fb7c83bd690fa9fc15cc118704fcc24272414eea929959ebaa72e668e5f92e4a1058b22e41bc2e6a33fdaca29eb1792ce668d57826b537cc82f890f40ce1f61e9d796be451fef129728590be4cda12bd39ca2be8748ea31068aca65274b896973445c62a9bddfacd6ad2141c945e34233ed76d1d16b2dcc26490babef5283b87e1e0a77ef506baf031cf6f983905b0aba1793d9a0bf2c25f14be6f4c0667c0839f1e340663ff7b5538adb94270a6c78b83f87f13a4d6754b3217ac27a61f744aa86c86d9db2d7fcd1afd0b411c4b131852eb14ffa04570be6c084f660b07006ce755cea4d53d7de5daa3889eb2c5256dd0f0c64e6fc600dee313be526dfea97bcbf504bb171ffec279a8025936a588a21e179e0e9af1f783f658dfcb30b55ff9ac8887dddc70bc35dc78e5047e896b02bf66ad8360a0482731cef772527755d21783bc6f62351ba6355908753b45261cb0728613294c442c15f6ef1e40cf5420f8abd44d4656347cd7023a01d47b76aef663d08147aa680125ef4b993e978aa29bbbe06b0b6eec3cfb070e2b533310ec89130e5252959952275be7fedfffb0f96d86043a57966aac910ed531b28ce7e31a534a2977b6b10b62c24ec247e21d94995b72553aa299515aa7c805c53a1e493c0aded795d850f2c36ded104b54d2b692286c91adf1042d17caaa11086fae5f7bdaf5403f590791be396fe8cc34982453d020dc72f2191b43549196fa3f73b199de350a92abb047016228fc7a37f9ee6d6a84a0c697daaf480a3091a92b47b65644ae0ffd0c97a56be0d9b3291cd03ccb2c31a60a77d60cf3546c736d1e2de12842ae49c65974925981998b324f092299332fef22d2495af9277df31b0212c661479666e6a042dfeebd6b1ffb03c58607a992123d75159bfed292ea4bb8c4710b71330620423a6f348bfb1b0c4951ae66f4f85f5043bf0cd8b71a33d8f1bdeac3996f78c9fba6d35938614ae948241c29e07de60671831bde77dee2207c065c6c077989081665fde11565be2e01c1ff29e389d3de4fc882c232052716fcff7430cfc277836f5019ec8717b079c8f24e7eafe1593fbaaf403e787cdf8f94bf1b1cd2e4c5b3e83d4b32f07c37b56e8a1c1d20b810381278ca440da444478d4f4bda826925e6365546b897713c98a9982e0c25e8844d7af27149f47e8b784f89a02c927aa06c0b55ba20b1a6d972169af8d72cfdc668c51cee3b5bdacf30bbf227393742cae119553fb2d8f2aea97bfcbf4fe82572d6a3d61e57d4c1e9a8670584ecb52df2b2869d466af644e562a18adbf5c7e0963b3ce870c83d01376033650120ec0721ac9570d402c7d65a032d11b69598e6b5cffd777dd5933a35c55ff61b7ffa62c4916f73a90b2a111d7aab1fa2", 0x1000}, {&(0x7f00000060c0)="84f7f4536004ef40b9f23fee4b133835db6878a2f0dda931e527c6f56dfb34091a0eee1ce228c1b8c93d61ac0da2c9d9580ff0c611028d3ac4c1ac2859778f281f674c3998f3faf54272d4b8c626fcf74de989053b37321def991944e17346141717eb646d1162a979ac47091309026527dd55", 0x73}], 0x4, &(0x7f0000006200)=[@rights={{0x18, 0x1, 0x1, [r18, r13]}}, @cred={{0x1c, 0x1, 0x2, {r25, r26, r8}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @rights={{0x14, 0x1, 0x1, [r21]}}, @cred={{0x1c, 0x1, 0x2, {r27, r9, r16}}}], 0x90, 0x48d4}, 0x48c0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r22, 0xc04064a0, &(0x7f0000006400)={&(0x7f0000006300)=[0x0, 0x0, 0x0], &(0x7f0000006340)=[0x0], &(0x7f0000006380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000063c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x3, 0x1, 0x6, 0x5}) ioctl$DRM_IOCTL_MODE_CURSOR(r14, 0xc01c64a3, &(0x7f0000006440)={0x1, r28, 0x815, 0x9, 0x7, 0x6}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000006480)) (async) ioctl$BLKGETZONESZ(r10, 0x80041284, &(0x7f00000064c0)=0xc) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r20, 0x84, 0x7, &(0x7f0000006500)={0x7}, 0x4) (async) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r23, 0x40096100, &(0x7f0000006880)={{&(0x7f0000006800)={'Accelerator\x00', {&(0x7f0000006540)=@adf_dec={@format={'Cy', '3', 'NumConcurrentRequests\x00'}, {0x6}}}, {&(0x7f0000006780)={'GENERAL\x00', {&(0x7f00000066c0)=@adf_hex={@format={'Cy', '1', 'RingTx\x00'}, {0x7}, {&(0x7f0000006600)=@adf_hex={@bank={'Bank', '2', 'InterruptCoalescingTimerNs\x00'}, {0xfffffffffffffff4}}}}}}}}}, 0x8}) setsockopt$XDP_TX_RING(r11, 0x11b, 0x3, &(0x7f00000068c0)=0x40, 0x4) (async) getsockopt$TIPC_DEST_DROPPABLE(r24, 0x10f, 0x81, &(0x7f0000006900), &(0x7f0000006940)=0x4) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000003, 0x4000010, r5, 0x60d78000) (async, rerun: 32) ioctl$IOCTL_STOP_ACCEL_DEV(r15, 0x40096101, &(0x7f0000006ac0)={{&(0x7f0000006a40)={'Accelerator0\x00', {&(0x7f0000006980)=@adf_str={@format={'Cy', '4', 'NumConcurrentSymRequests\x00'}, {"7cfdd150e3414f3d3d17ce9afeea07606a20e2d4741025892e4f0aed12ab63317fe71adf8b374e3fa1e8719f2280fae10688a8bb50cc86a34a2d12adf15083ef"}}}}}, 0x3}) (rerun: 32) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000006b00), &(0x7f0000006b40)=0x30) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r19, 0x7a4, &(0x7f0000006b80)={{@local, 0x3}, 0x100, 0x1, 0x80000000, 0x4}) io_setup(0x690, &(0x7f0000006bc0)=0x0) io_submit(r29, 0x2, &(0x7f0000006dc0)=[&(0x7f0000006c80)={0x0, 0x0, 0x0, 0x3, 0x9, 0xffffffffffffffff, &(0x7f0000006c00)="2bef6ef622392498d9244e0f807c790de78086ac8808559facd94254451d43b96d2e66c3e830d3400fc0f00e296d48b869874cd2728605801239b6039bd1409ff2958f8d20bed5d6677b5f1d70203a0af8f607fc71aff52b5c977250b9758daef56ed8bb8af95be805410edef01ee75aafb9b5e2f7d329248a", 0x79, 0x100000000}, &(0x7f0000006d80)={0x0, 0x0, 0x0, 0x5, 0x8, r4, &(0x7f0000006cc0)="481965b81e4f03b101c69a57017c0dffa14c287a47be2c21229d3a953908aa47b828161e0da3108fa6aa13d8b1217ab804709358dd7cd1db479bea20888e9b64aff41a3cf601786be1d549139b82f7ed31f34ab3e17fa6fc3f3f1cdf2ff4ed231fc3e2dd4c89f36dc37624ef838650c576ca56e51796058f9a1cbb2133cec0347c8e", 0x82, 0x1801, 0x0, 0x3, r20}]) 1m21.154541451s ago: executing program 3 (id=2097): setregid(0xffffffffffffffff, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ubifs\x00', 0x200000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @local}, 0x1c) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r2, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x21f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xb, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x40, 0x9, 0x1, {0x22, 0xd1c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xfe, 0x1, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x1, 0x4, 0x9}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x0, 0x3, 0xa, 0x20, 0x24}, 0x10, &(0x7f00000004c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x4, 0xf1, 0xc0, 0x3, 0x3, 0x9}]}, 0x7, [{0x68, &(0x7f0000000180)=@string={0x68, 0x3, "5ce9532d786483466ebd8aac39a4b828095a949271b9d7d00a4e2298f1cee63eb23e628b9d8a7620bcf172856c425f34904c9e579dd7f4512f24c4f328df523432bf52c612aa81e2180e04d0861f5408216d3bed71f02b86a1223f03c4050bcd46ac7cb6981d"}}, {0x31, &(0x7f0000000200)=@string={0x31, 0x3, "c1c5fb9478728157d2caf963642da818e996c304ce1c95b0d38007d38481fa932bbc1db370850b6fedc3bb8450191f"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x42d}}, {0x62, &(0x7f00000002c0)=@string={0x62, 0x3, "68abc79cf76810bbc07fa0a1eb0238a4d89d812a06556c287044397d29d99f3e9f3ac90e24ab958d522574f857ceabc76d18b614b0644234d2dfdfc872a411c7e1c65467b1b4ca0f96f2d3a60bbfb9aa028cb182614c9f39fdec44de5edfa8ad"}}, {0xb5, &(0x7f0000000340)=@string={0xb5, 0x3, "d54465712a98c20763dd90fa554ff2a3839e322bb0cfb886979febb90e1d59c6062a38a0425dfbb4118228ec6487a74e83d5e68df630d05f6369932f26ff49a14356be0d669baba4c7e179d93f880e1e4be54f173f7fb96c814851aad3ca64915a4aeb17715a220e2683a444226d922a2a73ce3649455d69b31947feaed09282b646860b1ca596e023898f925b0589d86e3ab7664e97775caf2b57915cba3fbfa8412380b10bfd8bdf5dd168f2f3eec8ad83fe"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x100c}}]}) 1m19.875665604s ago: executing program 3 (id=2112): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(r2, 0x0, &(0x7f00000000c0)={{0x0, 0x3938700}}, &(0x7f0000000100)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000840)={0x44, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x12, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) (async, rerun: 32) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) (async, rerun: 32) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 1m19.766531143s ago: executing program 3 (id=2115): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000140)={'comedi_bond\x00', [0x3, 0x80008000, 0x9, 0x2, 0xfffffffe, 0x0, 0x1, 0xf, 0xffe, 0x1, 0x7, 0x1, 0xd7c, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x836, 0x3, 0x3fb, 0x10000, 0x800, 0xe2df, 0x2, 0x1, 0x4, 0x3, 0x7, 0x105, 0x8005]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) (async, rerun: 32) chdir(&(0x7f00000000c0)='./bus\x00') (async) r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[], 0x830200) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000240)={0x3, 0x0, 0x46}) ptrace(0x10, r1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$packet(0x11, 0x2, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r9}, 0x14) (async) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@GTPA_LINK={0x8, 0x1, r9}, @GTPA_I_TEI={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x2c}}, 0x0) (async, rerun: 32) ptrace$setregs(0x1a, r1, 0xba, &(0x7f0000000300)="cea8677a6ee10f68721a9a02c93e") (rerun: 32) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x4) ioctl$KVM_SET_MSRS(r13, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x4b564d04, 0x0, 0x100000000}]}) (async) read$FUSE(r10, &(0x7f0000001180)={0x2020}, 0x2020) 1m19.540559265s ago: executing program 3 (id=2118): mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x20484c0, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='syscall\x00') read$FUSE(r0, &(0x7f0000006a40)={0x2020}, 0x2020) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x566, 0x3004, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x0, 0x80}}}}}]}}]}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x46c0, 0x48) (async) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) pivot_root(&(0x7f0000000180)='./cgroup\x00', &(0x7f00000001c0)='./cgroup\x00') (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3, 0x80800, 0x0, 0xffffffffffffffff}) openat(r0, &(0x7f0000000200)='./cgroup\x00', 0x500, 0x5) (async) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000000)='hfs\x00', &(0x7f00000000c0)='./cgroup\x00', r2) (async) socket$inet_tcp(0x2, 0x1, 0x0) 1m19.075818508s ago: executing program 3 (id=2122): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}}, 0x40) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c554c7beef915d564c90c200", 0xffffffeb) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="f78d9ca28fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket(0x1d, 0x2, 0x6) r7 = syz_open_dev$video(&(0x7f0000000040), 0x41a4, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x78, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3e}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000080)={0x0, "6f2699bf988913927a7f60763318f4d49461aa1a41a0d3264519fee88f3c3a8e"}) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 1m18.990781381s ago: executing program 34 (id=2122): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @short={0x2, 0x2, 0xaaa0}}, 0x14) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}]}, 0x1c}}, 0x40) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20102, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000006c0)="ad56b6c554c7beef915d564c90c200", 0xffffffeb) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="f78d9ca28fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r6 = socket(0x1d, 0x2, 0x6) r7 = syz_open_dev$video(&(0x7f0000000040), 0x41a4, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000640)='./binderfs2/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r11, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x71, 0x0, 0x0, 0x78, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x25}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x3e}}, &(0x7f00000000c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_ENUMINPUT(r7, 0xc050561a, &(0x7f0000000080)={0x0, "6f2699bf988913927a7f60763318f4d49461aa1a41a0d3264519fee88f3c3a8e"}) mount$9p_fd(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 7.70944806s ago: executing program 5 (id=2590): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x14d480, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) fadvise64(r0, 0x9, 0x9, 0x2) sendfile(r0, r0, 0x0, 0x7ffff000) 6.779969919s ago: executing program 5 (id=2594): ioprio_set$pid(0x1, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r1) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x340000c1) sendmsg$rds(r1, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/123, 0x7b}], 0x2, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 5.905086945s ago: executing program 5 (id=2596): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000280)='.\x00', 0x48000, 0x0) fcntl$notify(r1, 0x402, 0x80000024) r2 = epoll_create(0x2) fgetxattr(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="62747266732e250017ee5ce17ca5c573f636de6d3b182b355855eafc1cbe197a9df5916c6e0f3ce3c3830de4437b9dffa0ba769d804798af0b1071dc32d6415525e4498f7055af0f4fa6578588853e3b0d3f8738c70bcc9a458a7d43696e34fa5f1440f9234579cd9d682badf3ac471288376c5ad88317", @ANYRES32=r0], 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) ioctl$SNDCTL_TMR_SOURCE(0xffffffffffffffff, 0xc0045406) fadvise64(r2, 0x92, 0x3, 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r3, 0x93771000) 5.699996715s ago: executing program 5 (id=2597): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e22, 0x5, @mcast1, 0x3}}, 0x0, 0x0, 0xc, 0x0, "bb798e1c134bcd58692cdbe0e867d8013f5372a15aaa69b24a03784111fc07075c3f9c39cf05e02b7fcd7de47ed8d5bc94e28d8d296b9ac72491711ffeb7d7c50531c6e6e98ff08137ca6960e17103d9"}, 0xd8) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r1, 0x57789000) (async) syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64) madvise(&(0x7f0000be9000/0x2000)=nil, 0x2000, 0xe) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 5.6396502s ago: executing program 5 (id=2598): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001900)=ANY=[@ANYBLOB="280000005e000dc9"], 0x28}], 0x1}, 0x40) (async) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x82b80, 0x0) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x10448) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r7, @ANYRES32=r1], 0x24}}, 0x0) (async) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r8, 0x400c330d, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4ea1, @remote}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) (async) sendfile(r1, 0xffffffffffffffff, 0x0, 0x20000023896) (async) ioctl$TIOCSERGETLSR(r1, 0x5459, &(0x7f0000000300)) (async) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x181101, 0x0) syz_usb_connect$uac1(0x1, 0x101, &(0x7f0000000700)=ANY=[@ANYBLOB="12011003000000086b1d010140000102e058cbe7a7c6d616de9acb934803010902ef0003010280800904000000010100000a24019100080201020924030601010606000c2402050002051e01807f080d2406010203010000000400040824080201000bd609240302ff010101e60904010000010200000904010101010200000a240202ca00550b056510240202730605007f74ffdc33b2289909050109100005050107250102080100090402008001020000090402010101020000092402010c010007730924020205000500060c2402010601ad9da6be067a092402010f020b09e611240201010305036c28cb61f38d705d210b24020106070403101acb0905820900026908fe072501810808005d270c7c98d8de684da596fd27d4a88725b962760d1f0a8aeb"], &(0x7f0000000680)={0xa, &(0x7f00000005c0)={0xa, 0x6, 0x300, 0x40, 0xff, 0x8, 0x20, 0x3}, 0x10, &(0x7f00000006c0)=ANY=[@ANYBLOB="050f1000010b10012c0400010600001e84f4d0d0db0ef71e36e46708"], 0x1, [{0x37, &(0x7f0000000640)=ANY=[@ANYBLOB="370321f98be50ced0d3c7a5dc133470cfeb4a9ba2da61d7f6b06d3b36aa5"]}]}) (async) ioctl$TCSBRKP(r9, 0x5425, 0x4) ioctl$TCSBRKP(r9, 0x5425, 0x40000000005) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) set_mempolicy(0x1, &(0x7f00000002c0)=0x7, 0x5) (async) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000380)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x98f911, 0x8000, '\x00', @p_u8=&(0x7f0000000340)=0x3}}) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r10, 0x5708e000) 2.914214416s ago: executing program 6 (id=2609): r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x76d8, 0x100) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f00000000c0)=0x3) ioctl$HIDIOCGNAME(r0, 0x80404806, &(0x7f0000000080)) (async, rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) (rerun: 32) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 2.807887806s ago: executing program 6 (id=2612): set_mempolicy(0x0, 0x0, 0xfffffffffffffffe) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000000c0)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 2.639831148s ago: executing program 4 (id=2616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000001180)={0x1188, r1, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}]}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}]}, @TIPC_NLA_NODE={0x1024, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x1004, 0x3, "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"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x2, @loopback, 0x81}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xffff41fe}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'ib', 0x3a, 'bridge_slave_1\x00'}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf47}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4ec}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8}]}]}, 0x1188}, 0x1, 0x0, 0x0, 0x4040880}, 0x24048051) bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) clock_gettime(0x0, &(0x7f0000002e00)) 2.599083446s ago: executing program 5 (id=2618): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x20, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x82, 0x2, "c9a7"}, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "0600"}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) eventfd2(0x5, 0x0) eventfd2(0x5, 0x1) tgkill(0x0, 0x0, 0x13) io_submit(0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2.511215002s ago: executing program 6 (id=2620): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) personality(0x2000000) sendfile(r0, r0, 0x0, 0x7ffff000) 2.494694208s ago: executing program 4 (id=2621): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x800) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) mkdirat(r2, &(0x7f00000000c0)='./file0\x00', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getownex(r3, 0x10, &(0x7f0000000100)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x1, r4}) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)=0x0) setsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f00000001c0)=0x8, 0x4) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) (async) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r7, 0x9000aea4, &(0x7f0000000200)) r8 = socket$inet6(0xa, 0x3, 0x81) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000001200)={{0x1, 0x1, 0x18, r8, {0x4}}, './file0\x00'}) (async) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001280), r2) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000001a40)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001a00)={&(0x7f00000012c0)={0x724, r10, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x5d}}}}, [@NL80211_ATTR_TID_CONFIG={0x428, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xb4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xf0}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}]}, {0x1b4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1b0, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xa0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x3, 0x6}, {0x2, 0x3}, {0x7, 0xa}, {0x1, 0x1}, {0x5, 0x7}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x4}, {0x3, 0x7}, {0x5, 0x8}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x9, 0x8, 0x1, 0x7, 0x0, 0x5, 0x401]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x6, 0x3}, {0x4, 0x8}, {0x6, 0x3}, {0x7, 0x7}, {0x5, 0x1}, {0x1, 0x1}, {0x6, 0x1}, {0x1, 0x2}, {0x3, 0x6}, {0x1, 0x8}, {0x3, 0x7}, {}, {0x1, 0x8}, {0x1, 0x3}, {0x6, 0x6}, {0x6, 0x7}, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0xa}, {0x6, 0x8}, {0x4, 0x2}, {0x1, 0x2}, {0x0, 0x9}, {0x6, 0x4}, {0x1, 0x9}, {0x7, 0xf}, {}, {0x4, 0x4}, {0x0, 0x1c}, {0x0, 0x5}, {0x2, 0x3}, {0x1, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x6, 0x5}, {0x0, 0x4}, {0x6, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x4}, {0x3, 0x2}, {0x4, 0x4}, {0x0, 0x6}, {0x6, 0xa}, {0x2, 0x6}, {0x3, 0x8}, {0x6, 0x2}, {0x0, 0x1}, {0x1, 0x2}, {0x0, 0x1}, {0x7, 0x1}, {0x7, 0x3}, {0x5, 0xa}, {0x0, 0xa}, {0x3, 0x4}, {0x1, 0x8}, {0x2, 0x6}, {0x0, 0x3}, {0x3, 0x2}, {0x6, 0x2}, {0x2, 0x4}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x5}, {0x1, 0x2}, {0x6, 0x7}, {0x3, 0x2}, {0x6, 0x1}, {0x4}, {0x5, 0x1}, {0x1, 0x8}, {0x2}, {0x6, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x0, 0x6}]}]}, @NL80211_BAND_60GHZ={0x38, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0xb, 0x30, 0x9, 0x3, 0x30, 0x5, 0x9, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x1a, 0x2, [{0x5, 0x7}, {0x7, 0x9}, {0x5, 0x1}, {0x5}, {0x0, 0x3}, {0x7}, {0x4, 0x8}, {0x0, 0x5}, {0x1, 0x7}, {0x5, 0x1}, {0x5}, {0x1, 0x3}, {0x0, 0x8}, {0x4, 0x1}, {0x0, 0x2}, {0x5, 0x4}, {0x1, 0x9}, {0x2, 0x4}, {0x7, 0x1}, {0x4, 0x7}, {0x3, 0x7}, {0x2, 0x8}]}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0xac, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfffe, 0x40, 0x60, 0x6, 0x8f5, 0xf, 0x502]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x21, 0x1, [0x30, 0x2, 0x6, 0x6, 0x30, 0x48, 0x36, 0x6c, 0x18, 0x48, 0x4, 0x60, 0x5, 0x24, 0xb, 0x5, 0xd, 0xb, 0x60, 0x9, 0x17, 0x1b, 0x3, 0x0, 0x1, 0xc, 0x1, 0x9, 0x18]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7c, 0x7, 0x401, 0x2, 0xf0, 0x10, 0x8, 0x40]}}, @NL80211_TXRATE_HT={0x1e, 0x2, [{0x1, 0x7}, {0x7, 0x8}, {0x2, 0xa}, {0x6, 0xa}, {0x0, 0x3}, {0x2, 0x9}, {0x4, 0x8}, {0x4, 0x3}, {0x6, 0x1}, {0x7, 0x6}, {0x6, 0x1}, {0x6, 0xa}, {0x5, 0x7}, {0x0, 0xa}, {0x0, 0x8}, {0x1, 0x9}, {0x3, 0x8}, {0x7, 0x5}, {0x6, 0x2}, {0x1, 0x4}, {0x0, 0x5}, {0x3, 0x4}, {0x6, 0xa}, {0x0, 0x1}, {0x2, 0x2}, {0x6, 0x2}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xd9, 0x4, 0x1eb1, 0x622e, 0x6, 0x80, 0xfffe]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x3}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0x220, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x1d}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x1f4, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0xd4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x8, 0x8001, 0xa, 0xffff, 0x8001, 0x0, 0xd0ed]}}, @NL80211_TXRATE_LEGACY={0xc, 0x1, [0x48, 0x24, 0x0, 0x9, 0x48, 0x9, 0x12, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xfff, 0x6, 0x1, 0x5, 0x82, 0x2, 0x8, 0x5]}}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x0, 0x48, 0x16, 0x5, 0x6, 0x4, 0x12, 0x2, 0xca594457e3cde533, 0x24, 0x24, 0x48, 0x24, 0x6c, 0x1b, 0x6c, 0x6c, 0x50, 0x6, 0x2, 0x0, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x3, 0x7f, 0x7, 0x8, 0x8, 0x8c7a, 0x8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3ff, 0x2, 0x6, 0x401, 0x7, 0x10, 0x81]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xff81, 0x5, 0x8, 0xfff, 0x8, 0x8, 0x2, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x31, 0x2, [{0x1, 0x3}, {0x1, 0x6}, {0x5}, {0x6, 0x9}, {0x1, 0x1}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x2}, {0x3, 0x5}, {0x1, 0x9}, {0x4, 0xa}, {0x3, 0xa}, {}, {0x5, 0x1}, {0x3, 0x4}, {0x1, 0x6}, {0x2, 0x7}, {0x2, 0x3}, {0x2, 0x1}, {0x6, 0x4}, {0x4, 0xa}, {0x2, 0x5}, {0x6, 0x5}, {0x0, 0x8}, {0x5, 0x5}, {0x1, 0x2}, {0x1, 0x1}, {0x0, 0x1}, {0x2, 0x7}, {0x4, 0x5}, {0x7, 0x1}, {0x1}, {0x6, 0x1}, {0x0, 0xa}, {0x3, 0x6}, {0x6, 0x8}, {0x1, 0x6}, {0x2, 0x4}, {0x0, 0x1}, {0x7, 0xa}, {0x5, 0x2}, {0x6, 0x8}, {0x7, 0x3}, {0x3, 0x8}, {0x3, 0x3}]}]}, @NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x0, 0x8, 0x2, 0x6, 0x6, 0xf801]}}]}, @NL80211_BAND_60GHZ={0x20, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x800, 0x0, 0x400, 0x3, 0x100, 0x8, 0x2]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x84, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x19, 0x2, [{0x2, 0x5}, {0x2, 0xa}, {0x5, 0x5}, {0x6}, {0x5}, {0x4, 0xa}, {0x5, 0x1}, {0x4, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x7, 0x9}, {0x1, 0x6}, {0x4, 0x1}, {0x0, 0x4}, {0x0, 0xa}, {0x6, 0x8}, {0x3, 0x5}, {0x1, 0x5}, {0x4, 0x4}, {0x7, 0x6}, {0x5, 0x6}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x101, 0x1, 0x5, 0x0, 0x2, 0x475, 0x9]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0xc245, 0x9, 0x6, 0x6, 0x6, 0x80, 0x3]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x1, 0x8}, {0x3, 0x9}, {0x5, 0x7}, {0x6, 0x6}, {0x4, 0x9}, {0x4, 0x6}, {0x5, 0xa}, {0x6, 0x1}, {0x1, 0x4}, {0x0, 0xa}, {0x7, 0x5}, {0x4, 0x9}, {0x5, 0xa}, {0x1, 0x8}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x8}, {0x5, 0x8}, {0x0, 0x9}, {0x2, 0x7}, {0x3, 0x2}, {0x1, 0x7}, {0x2, 0xa}, {0x3, 0x1}, {0x1, 0x5}, {0x0, 0x5}, {0x1, 0x9}, {0x4, 0x8}, {}, {0x1, 0x9}, {0x1, 0x4}, {0x1, 0x2}, {0x1, 0xa}, {0x2, 0x1}, {0x4}, {0x0, 0xa}, {0x3}, {0x5, 0x5}, {0x4, 0x2}, {0x2, 0x9}, {0x4, 0x6}, {0x1, 0x2}, {0x1, 0x4}, {0x3, 0x2}, {0x3, 0x2}, {0x1, 0x5}]}]}, @NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x23, 0x1, [0x30, 0x5, 0x53, 0x16, 0x1, 0xb, 0xc, 0x6c, 0xb, 0x30, 0x24, 0x0, 0x2, 0x6c, 0x9, 0x16, 0x6, 0x3, 0x16, 0xb, 0x12, 0x0, 0x16, 0x5, 0x4, 0x2, 0xc, 0xb, 0x17, 0x6c, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x4, 0x6, 0x7ff, 0x5, 0x3, 0x3, 0x100]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x3, 0x0, 0x10, 0x3, 0x8000, 0xffc0, 0x4]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x2}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x53}]}]}, @NL80211_ATTR_TID_CONFIG={0x2a4, 0x11d, 0x0, 0x1, [{0x17c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x164, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x7, 0x1, [0x9, 0x3, 0x16]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}, @NL80211_BAND_60GHZ={0x4c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x0, 0x6, 0x8001, 0x9, 0x4, 0x9, 0x8]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x6c, 0x12, 0x9, 0x4, 0x43, 0x1, 0x16, 0x1b, 0x30, 0x24, 0x18, 0x36, 0x12, 0x16, 0xb, 0x36, 0x60, 0x0, 0x60, 0xb]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x1, 0x6, 0x7fff, 0xa, 0x0, 0xa9b5, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x20, 0x4, 0x14d3, 0x800, 0x0, 0x3, 0xea]}}]}, @NL80211_BAND_60GHZ={0x18, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xa, 0x7, 0xd02, 0x8, 0x4, 0x100, 0x1, 0xee04]}}]}, @NL80211_BAND_5GHZ={0xbc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {0x1, 0x2}, {0x5, 0x9}, {0x0, 0x2}, {0x0, 0x4}, {0x7, 0x3}, {0x6, 0x9}, {0x4, 0x2}, {0x2, 0x2}, {0x0, 0x8}, {0x0, 0x4}, {0x0, 0x6}, {0x0, 0x3}, {0x2, 0xa}, {0x5, 0x9}, {0x1, 0x5}, {0x0, 0x3}, {0x5, 0x8}, {0x0, 0x2}, {0x2, 0x7}, {0x2, 0x1}, {0x0, 0x6}, {0x7, 0x3}, {0x5, 0x6}, {0x2, 0x6}, {0x2, 0x8}, {0x2, 0xa}, {0x0, 0x3}, {0x7, 0x1}, {0x6, 0x2}, {0x1, 0x6}, {0x0, 0xa}, {0x0, 0x4}, {0x4, 0x9}, {0x4, 0x9}, {0x6, 0x4}, {0x4, 0x8}, {0x1}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x6, 0x4, 0x6, 0x7, 0x5, 0xfffb, 0xff]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x6, 0x1}, {0x1, 0x2}, {0x6}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0xa}, {0x3, 0x4}, {0x3, 0x1}, {0x2}, {0x4, 0x5}, {0x2, 0x3}, {0x5}, {0x0, 0x7}, {0x6, 0x2}, {0x5, 0x1}, {0x4, 0x6}, {0x0, 0x6}, {0x7, 0x5}, {0x4, 0x7}, {0x4, 0x6}, {0x4, 0x4}, {0x1, 0x8}, {0x7, 0xa}, {0x4, 0xa}, {0x5, 0xa}, {0x4, 0x9}, {0x0, 0x1}, {0x1, 0x1}, {0x1, 0xa}, {0x6, 0x8}, {0x7, 0xa}, {0x3, 0x1}, {0x2}, {0x4, 0x9}, {0x7, 0x2}, {0x7, 0xa}, {0x0, 0x9}, {0x3, 0x1}, {0x2, 0x9}, {0x2, 0x2}, {0x0, 0x3}, {0x2, 0x5}, {0x3, 0x5}, {0x7}, {0x7, 0x2}, {0x6, 0x8}, {0x0, 0x3}, {0x3, 0x7}, {0x5, 0x7}, {0x0, 0x8}, {0x2, 0x7}, {0x0, 0x9}, {0x3, 0x8}, {}, {0x4, 0x6}, {0x3, 0x9}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x4, 0x8, 0x1, 0x8, 0x3, 0x3ff, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x9}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x29}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x10}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa7}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x27}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xd}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xc5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x1}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0xd91f}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x15}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xa0}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xb6}]}]}]}, 0x724}, 0x1, 0x0, 0x0, 0x4000}, 0x3) (async) ioctl$EXT4_IOC_SWAP_BOOT(r9, 0x6611) (async) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r6, &(0x7f0000001cc0)={&(0x7f0000001a80), 0xc, &(0x7f0000001c80)={&(0x7f0000001ac0)={0x1b8, r10, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1ff, 0x32}}}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x6d, 0xfc, "870d1074e87d49d7a85289871ccfbaa1d08d599438ede8fa1d1e39076ad6595b0a7eb8c9097d1bdc146b579c968e6389ad6528102c9203e6283d9eaee8cb8562c16ddf806e355ea18d9f62298e2c1fee212596772718ea33adb53ca571e419783a52bd51a4787f4a46"}, @NL80211_ATTR_FILS_ERP_RRK={0x24, 0xfc, "b16460283a1096c0384d0c04e33ae9f2042656b3d1410813c82c91ab4e0f9540"}, @NL80211_ATTR_FILS_ERP_REALM={0xa, 0xfa, "05bea4213c2a"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x7}], @NL80211_ATTR_IE={0x69, 0x2a, [@perr={0x84, 0x5b, {0x7, 0x5, [{{0x0, 0x1}, @device_a, 0x200, @value, 0x2c}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0x2e}, {{}, @broadcast, 0x0, @void, 0x25}, {{0x0, 0x1}, @device_b, 0x6, @value, 0x1}, {{0x0, 0x1}, @device_b, 0xa, @value=@broadcast, 0x14}]}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x81, 0xfc, "b69f01a96c6a11b68d10b1af3c5bff2094b88c5043103be211ebecf41c17c4d2f2e2e76536161d87d146a888afacd5e6f8603e32b4d42e8f7931ffdf3b4d3b9061b71614f9b310683b944f9145520d6db59bd9dcc806fde2505aba5af1c8ab7032dec4e452f52eab9c14925d8e9cd0eacc51ccfe58c546ff6bc477aa79"}]]}, 0x1b8}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) (async, rerun: 64) sched_setscheduler(r5, 0x5, &(0x7f0000001d00)=0x9) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_BEACONS(r9, &(0x7f0000001e00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x14, r10, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc080}, 0x8c4) (async) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001e80), r9) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000020c0)={&(0x7f0000001ec0)={0x1fc, r11, 0x20, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x80000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e20, @loopback}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x6, @loopback, 0xb64}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff8}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip6tnl0\x00'}}]}, @TIPC_NLA_LINK={0xb4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd01}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf84d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2a59dfc4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5e}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "cc85d6ae0f5551cab53b42f40e20b833bc78bf0e0a6839397653172d"}}]}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x1}, 0x50) (async) ioctl$SIOCGSKNS(r9, 0x894c, &(0x7f0000002140)={'ip6gretap0\x00'}) syz_clone(0x8024a000, &(0x7f0000002180)="6e001863f6f1f1e2b245c70738bfd5b2a435e3abe9a84496d0751f0987273ec009be5666a065b4613408b810bfa0c6871c36f46800f254e62d74dd64752dbc77dd988ea324e5331b3f57150bd7f7db754b50110a14bd6c07541c925b96d5b64f8f6588a4399a69344339efa80cd54bb1cd87e638fe2c397d34104ab39ad86a2c8adad3ef324e1701b7c0b791ca9bfb7e4f4a1120ff462421f7798f5cdcb71c7f06c0680d535a9454825b783c722239fd4b1e9ed39baeba877d75ab7329e68b66a4abf3b8f5f94c30a6ad308485e4e4c0", 0xd0, &(0x7f0000002280), &(0x7f00000022c0), &(0x7f0000002300)="f88cd89c33cabba8f77a68d54e9b0c82f82bb5dfda850a19cd113ec2a8241ab05858798ea9d944305814a9f4c75c34807154d93b53335500e9e9965e371fe7f31b2cde53fea0800545a3aabfe68fd082a24aaea2c2e5e2b6e7a05801a46ae6ea5f440f633c710e27ecc74c08887c95d3f76d98e5630f88d1d9cdd70f473b87bbed51a97305b736936e7f3ce76e56a41d1babea869012af712fab072e73e57e48c159e59418fac8c7eb6571c79a47d15e9f68222ce2c2d9fde5b67178a346fe5d30220e16cdbab35e10d481de5843cd02a57510692e5a772884781f9ad8b6") (async) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000002440)=@arm64_fp={0x60400000001000cd, &(0x7f0000002400)=0x7}) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), r9) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000002580)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x34, r12, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4011}, 0x1000) fcntl$setown(r0, 0x8, r5) (async) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000002700)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000026c0)={&(0x7f0000002640)={0x4c, r10, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xd, 0x1c}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7d3712c}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xd}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x4c}}, 0x20004040) 2.427762062s ago: executing program 4 (id=2622): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) (async) sendfile(r1, r0, 0x0, 0x7fffefff) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x51424752, 0x7}}) r3 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) (async) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = open(&(0x7f0000000600)='./file0\x00', 0x8060, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup2(r4, r5) process_mrelease(r4, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_clone(0x102311, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 2.275921549s ago: executing program 4 (id=2623): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='hybla\x00', 0x6) fadvise64(r0, 0x92, 0x5, 0x2) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307, 0x1}], 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 2.08886079s ago: executing program 4 (id=2624): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f00000001c0)={0x0, 0x81, 0x1b}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x12, r1, 0x57789000) pipe2$9p(0x0, 0x80080) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x80800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x1001002, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.838129687s ago: executing program 4 (id=2625): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000000c0)={&(0x7f00000011c0)=""/4096, 0x1000}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x7}, "ea445a55877df4a8", "86a8b831051f546f80fd45baeff72519", "beac6815", "fc5b4894c93fd56d"}, 0x28) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)) fadvise64(r0, 0x7, 0x1ff, 0x1) r3 = socket(0x2, 0x2, 0x4) close(0x3) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) mlock(&(0x7f0000ea0000/0x3000)=nil, 0x3000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000100)={0x50, 0x0, r6, {0x7, 0x1f, 0x1000001, 0x5069f481, 0x8, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) fallocate(r7, 0x40, 0x1bc, 0x800) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000180)={0x0, 0xa3, "c7c239b4644aa29fa6cac4a51d12c38efddc6eb270f90637f78656a597d82f289f2c9dca7bb53024e1d9489cdb61a668f3009ae9ee4fdd88dc50c6161c561d6bd0e2d194a4fad8bf2f111fbbb8a5eb458caa035eda4800103c338e0cd8a57ea43012f0e4a731a10b32a2ef1a2532f006e368d93e0fbb81dba4ae8579c6512f6ca8fec0adaf33fea8a618e8ada2f713cad11ce0e774ec7a76de057da83ad9ff6668479f"}, &(0x7f0000000340)=0xab) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000380)=@assoc_id=r8, 0x4) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r4, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x5}, 0x8) 1.655312114s ago: executing program 6 (id=2627): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xec) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1.486695423s ago: executing program 1 (id=2629): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "71404c525955112b", "15458837a356f59557e8a2d3fe106a54", "080000ce", "de441a4c13e9f450"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r0, r1, 0x0, 0xffffffff004) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x10001, 0x0, 0xfffffff9, 0x0, 0xfffffffffffffffd, 0xffffffffffffff7b}) (async) pipe2$watch_queue(0x0, 0x80) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000100)=[@dead_binder_done, @acquire={0x40046305, 0x3}], 0x32, 0x0, &(0x7f0000000180)="632ee87f3973cb1bbdc5864cad7426db5e68592de4bce5d51c9da798eb0bd6dd6793d3af5b417fbab3e62265f981031104f7"}) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x93774000) 1.399801774s ago: executing program 1 (id=2630): r0 = socket$nl_generic(0x10, 0x3, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x5, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(0x0, 0x7fffffff, 0x2) r1 = syz_open_procfs(0x0, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x5000940e, &(0x7f0000000e40)={{r2}, "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"}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)={0x26c, 0x44, 0x800, 0xfffffffc, 0x0, {0x0, 0x7c}, [@nested={0x257, 0x82, 0x0, 0x1, [@generic="404ce7b9b7bbb693c6b243bbb84023f8c41330a66ab25ac24f569c13500b05e8d6672511aebdf566f4272811d810eb5874b6fe3c63d52e00ca17aecfa7de0749dfb0e90b6a5de3b086d5b57b8e5c53450624a6801bb91b24b4d82f40889414319d612e89109df86605da79562d6a23ccaaa42785918e626abaaed95c2241b60bf2a7fe5c7140", @nested={0x1c, 0x122, 0x0, 0x1, [@nested={0x4, 0x11c}, @nested={0x4, 0x64}, @typed={0x8, 0x3c, 0x0, 0x0, @pid=r3}, @typed={0x8, 0x14a, 0x0, 0x0, @uid=0xee01}]}, @generic, @generic="63327344d1cc4ebf7a565fa37c2638f1c33a18fa4d5f7d6316c0da61b11ee5c787a65e10c04cac23c7f39d20937bc5f6265354efbec7af7768fb0348f9a7ad97fe81aeeed85147f840b438d1a7587b6fb08453d1099c3b4382008499f83ffb98618802d591ffd1f728bc1c71070b67d28928a25ba8e646feccf3827498bc78a4c5d67f7432c537ce9053531f3ad6654389a841293f2791977fb1313b740e3c1bfd609eca6b5a177a2db106f0359567c7d5776de79c3bbbab9926a424671083a02a6335c270", @nested={0x66, 0xa5, 0x0, 0x1, [@nested={0x4, 0xbd}, @generic="083c4c2bce64d2790b2ac0340efa6f52a78179dc3dfa28aa0a56023102c4f75e6a5d9100c9d683afdffa98d0cd52bd497e86bdaeab05ab606be7049ce17faa4c5ff0f25f8a87285085212110ec2367ffb642ddb39d6ebb524712", @nested={0x4, 0x6c}]}, @generic="68cf29e1ae3c70566dd6f6ac29ee207105016d1a532d1585b1aca60a589742f959b6d2d7ed80f4dfa5f1150ec0d9a75f986647f9ffd402873ea62f6ff4f7", @typed={0x8, 0x6, 0x0, 0x0, @uid=0xee00}, @generic="24d35670637722b0032c2eedb0f07993a23eac86842316ce0ef46449aceed58abf998a9d8d06ee166de97d4138b81c898801cb5bd31fe4ce6fe72d2d0e03"]}]}, 0x26c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc094) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001e40)={0x2020}, 0x2020) 1.390523748s ago: executing program 1 (id=2631): msgsnd(0x0, 0x0, 0x0, 0x800) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4010) io_setup(0x4, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) mount$overlay(0x0, 0x0, 0x0, 0x1001002, &(0x7f0000004180)) madvise(&(0x7f0000210000/0x3000)=nil, 0x3000, 0x12) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.230499411s ago: executing program 1 (id=2632): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001240), 0x1c9800) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="5c00000011006b906fdfe1ef704ad931c605876c1d0000007ea60864160af365040012000a002e00000000009ee5179da5a02b9e9171452bc520ae8cc4044ed34445bc24eaba56a705251e6182949afc422e41ebfc50b887934fcbd3", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x200000c0) read$FUSE(r0, 0x0, 0x0) openat(r0, &(0x7f00000001c0)='./cgroup\x00', 0x600000, 0x8) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x12006, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x25b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x24, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0xf, 0x5, 0x3, 0x0, 0x2, 0x95, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x16f}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x1, 0x0, 0xd}}}}}]}}]}}, 0x0) r3 = accept$ax25(r0, &(0x7f0000000100)={{}, [@default, @null, @default, @default, @bcast, @default, @netrom, @netrom]}, &(0x7f0000000000)=0x4f) ioctl$FS_IOC_FSGETXATTR(r3, 0x801c581f, &(0x7f0000000180)={0x3, 0x9, 0x93e8, 0x8, 0x8000}) 759.951347ms ago: executing program 6 (id=2633): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 620.324837ms ago: executing program 1 (id=2634): openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x80421, 0x0) r0 = syz_usb_connect(0x5, 0x3f, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r1, 0x52fbf000) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0x6e) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 588.973748ms ago: executing program 6 (id=2635): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) ppoll(0x0, 0x0, 0x0, &(0x7f0000000000)={[0xffffffffffff9f5b]}, 0x8) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0612"], 0x9) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) 0s ago: executing program 1 (id=2636): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x4f27, 0x5, 0x10000, 0x30, 0x66, 0x4c7, 0x0, 0x8000, 0xa, 0x100, 0xffffffff, 0x7, 0x9, 0x1, 0x2, 0x80000101, 0x5, 0x1a449, 0x3, 0x400, 0x2086, 0x22, 0xd27, 0x20001e5c, 0x7fff, 0x8002, 0x3c, 0x1, 0x6, 0x3, 0x1000000, 0x700]}) kernel console output (not intermixed with test programs): 021247][ T5945] usb 6-1: Manufacturer: syz [ 425.036308][ T5945] usb 6-1: SerialNumber: syz [ 425.048333][T13151] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 425.261422][T13151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.270146][T13151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.303015][ T5945] usb 6-1: USB disconnect, device number 9 [ 425.312481][T13183] /dev/rnullb0: Can't open blockdev [ 425.426792][ T1212] usb 2-1: new low-speed USB device number 94 using dummy_hcd [ 425.566706][ T1212] usb 2-1: device descriptor read/64, error -71 [ 425.602835][T13196] /dev/rnullb0: Can't open blockdev [ 425.666357][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 425.673782][ T5861] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 425.681920][ T5861] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 425.690158][ T5861] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 425.698029][ T5861] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 425.727331][T13199] wg0 speed is unknown, defaulting to 1000 [ 425.816613][ T1212] usb 2-1: new low-speed USB device number 95 using dummy_hcd [ 425.842242][T13199] chnl_net:caif_netlink_parms(): no params data found [ 425.862551][T13206] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input41 [ 425.887007][T13206] /dev/rnullb0: Can't open blockdev [ 425.943019][T13199] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.950617][T13199] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.957969][ T1212] usb 2-1: device descriptor read/64, error -71 [ 425.964431][T13199] bridge_slave_0: entered allmulticast mode [ 425.972615][T13199] bridge_slave_0: entered promiscuous mode [ 425.980409][T13199] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.988088][T13199] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.995627][T13199] bridge_slave_1: entered allmulticast mode [ 426.002809][T13199] bridge_slave_1: entered promiscuous mode [ 426.028495][T13214] /dev/rnullb0: Can't open blockdev [ 426.037953][T13199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.049835][T13199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.076444][ T1212] usb usb2-port1: attempt power cycle [ 426.084444][T13199] team0: Port device team_slave_0 added [ 426.095535][T13199] team0: Port device team_slave_1 added [ 426.127351][T13199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.134408][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.160332][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.203617][T13199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.239674][T13199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.254542][T13199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.332364][T13199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.385586][T13199] hsr_slave_0: entered promiscuous mode [ 426.397133][T13199] hsr_slave_1: entered promiscuous mode [ 426.412789][T13199] debugfs: 'hsr0' already exists in 'hsr' [ 426.427237][T13199] Cannot create hsr debugfs directory [ 426.582305][T13199] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 426.592017][T13199] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 426.604657][T13199] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 426.615030][T13199] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 426.696722][T13199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.720553][T13199] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.734678][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.741831][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.770583][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.777734][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.973049][T13199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.141199][T13199] veth0_vlan: entered promiscuous mode [ 427.151353][T13199] veth1_vlan: entered promiscuous mode [ 427.172721][T13199] veth0_macvtap: entered promiscuous mode [ 427.181549][T13199] veth1_macvtap: entered promiscuous mode [ 427.185170][ T1212] usb 2-1: new low-speed USB device number 96 using dummy_hcd [ 427.199235][T13199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.210291][T13199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.216424][ T1212] usb 2-1: device descriptor read/8, error -71 [ 427.224904][ T1152] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.233891][ T1152] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.249035][ T1152] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.257830][ T1152] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.290333][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.302890][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.320950][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.329615][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.466880][ T1212] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 427.495288][ T1212] usb 2-1: device descriptor read/8, error -71 [ 427.605482][ T1212] usb usb2-port1: unable to enumerate USB device [ 427.653239][ C0] vcan0: j1939_tp_rxtimer: 0xffff888050685c00: rx timeout, send abort [ 427.661537][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888050685c00: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 427.724647][ T5867] Bluetooth: hci3: command tx timeout [ 428.936884][ C1] vcan0: j1939_tp_rxtimer: 0xffff888050686000: rx timeout, send abort [ 428.945305][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888050686000: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 429.009191][T13283] loop6: detected capacity change from 0 to 63 [ 429.019106][T13283] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.027614][T13283] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.063789][T13283] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.114203][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.142359][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.169464][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.187111][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.210594][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.430374][T13296] comedi comedi4: comedi_config --init_data is deprecated [ 429.451657][ T9] hid_parser_main: 18 callbacks suppressed [ 429.451674][ T9] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 429.487496][ T9] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 429.576076][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 429.748872][ T24] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 429.761205][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.784830][ T24] usb 6-1: Product: syz [ 429.794040][ T24] usb 6-1: Manufacturer: syz [ 429.803311][ T5867] Bluetooth: hci3: command tx timeout [ 429.812804][ T24] usb 6-1: SerialNumber: syz [ 429.827034][ T24] usb 6-1: config 0 descriptor?? [ 429.858503][T13303] loop6: detected capacity change from 0 to 63 [ 429.882144][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 429.911737][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 430.251953][ T24] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 430.278791][ T24] asix 6-1:0.0: probe with driver asix failed with error -71 [ 430.300546][ T24] usb 6-1: USB disconnect, device number 10 [ 430.537368][T13339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 430.599752][T13353] /dev/rnullb0: Can't open blockdev [ 430.657465][T13356] ubi0: attaching mtd0 [ 430.661633][T13356] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 431.191736][ T5860] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 431.341958][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 431.350466][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 431.352674][ T5860] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 431.369054][ T5860] usb 5-1: config 0 has no interface number 0 [ 431.378216][ T5860] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=e9.e9 [ 431.396235][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.405356][ T5860] usb 5-1: Product: syz [ 431.410897][ T5860] usb 5-1: Manufacturer: syz [ 431.420561][ T5860] usb 5-1: SerialNumber: syz [ 431.430776][ T5860] usb 5-1: config 0 descriptor?? [ 431.445819][ T5860] mcba_usb 5-1:0.29: Can't find endpoints [ 431.645487][T13363] /dev/rnullb0: Can't open blockdev [ 431.733838][T13370] /dev/rnullb0: Can't open blockdev [ 431.882363][ T5867] Bluetooth: hci3: command tx timeout [ 431.891695][ T43] usb 5-1: USB disconnect, device number 21 [ 432.004165][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.024260][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.052431][ T24] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 432.070374][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.093148][ T24] usb 6-1: config 0 descriptor?? [ 432.195145][T13378] /dev/rnullb0: Can't open blockdev [ 432.304641][T13361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.313548][T13361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.377993][T13381] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2164'. [ 432.398856][T13381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 432.419410][T13381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2164'. [ 432.522189][T13393] sp0: Synchronizing with TNC [ 432.552915][ T24] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 432.570494][ T24] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 432.573643][T13393] [U] [ 432.585717][ T24] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 432.593259][ T24] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 432.600079][ T24] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 432.607691][ T24] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 432.614717][ T24] arvo 0003:1E7D:30D4.0037: unknown main item tag 0x0 [ 432.633945][ T24] arvo 0003:1E7D:30D4.0037: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0 [ 432.688937][T13398] block device autoloading is deprecated and will be removed. [ 432.704885][T13398] /dev/rnullb0: Can't open blockdev [ 432.732810][T13361] /dev/rnullb0: Can't open blockdev [ 432.747593][ T24] arvo 0003:1E7D:30D4.0037: couldn't init struct arvo_device [ 432.755254][ T24] arvo 0003:1E7D:30D4.0037: couldn't install keyboard [ 432.765937][ T24] arvo 0003:1E7D:30D4.0037: probe with driver arvo failed with error -71 [ 432.800348][ T24] usb 6-1: USB disconnect, device number 11 [ 432.950993][T13412] /dev/rnullb0: Can't open blockdev [ 433.001376][ T43] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 433.034799][ T43] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 433.045420][T13419] /dev/rnullb0: Can't open blockdev [ 433.219606][T13415] /dev/rnullb0: Can't open blockdev [ 433.310064][T13428] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2176'. [ 433.322220][T13428] /dev/rnullb0: Can't open blockdev [ 433.412889][T13441] syz.6.2178: attempt to access beyond end of device [ 433.412889][T13441] nbd6: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 433.430740][T13441] XFS (nbd6): SB validate failed with error -5. [ 433.619308][T13458] netlink: 'syz.5.2183': attribute type 13 has an invalid length. [ 433.737731][T13465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.747297][T13465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.908480][T13469] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 434.088193][T13471] PM: Enabling pm_trace changes system date and time during resume. [ 434.088193][T13471] PM: Correct system time has to be restored manually after resume. [ 434.244581][T13474] syzkaller1: entered promiscuous mode [ 434.261983][T13475] /dev/rnullb0: Can't open blockdev [ 434.280885][T13474] syzkaller1: entered allmulticast mode [ 434.607461][T13480] /dev/rnullb0: Can't open blockdev [ 434.727317][T13485] netlink: 666 bytes leftover after parsing attributes in process `syz.4.2191'. [ 434.731112][ T30] audit: type=1326 audit(1755546217.790:19990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13486 comm="syz.5.2192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc44478ebe9 code=0x0 [ 434.817622][T13483] /dev/rnullb0: Can't open blockdev [ 435.067818][T13499] overlay: filesystem on ./bus not supported as upperdir [ 435.082227][T13499] overlay: filesystem on ./bus not supported as upperdir [ 435.091300][T13499] overlay: filesystem on ./bus not supported as upperdir [ 435.100690][T13499] overlay: filesystem on ./bus not supported as upperdir [ 435.113293][T13501] /dev/rnullb0: Can't open blockdev [ 435.121255][T13499] overlayfs: failed to resolve './bus': -2 [ 435.133281][T13496] overlayfs: failed to decode file handle (len=0, type=3452, flags=0, err=-22) [ 435.277700][T13513] /dev/rnullb0: Can't open blockdev [ 435.293752][T13505] /dev/rnullb0: Can't open blockdev [ 435.323229][T13509] mac80211_hwsim hwsim14 4: renamed from wlan1 (while UP) [ 435.577900][ T5860] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 435.631124][ T1212] IPVS: starting estimator thread 0... [ 435.718560][T13543] IPVS: using max 48 ests per chain, 115200 per kthread [ 435.747708][ T5860] usb 6-1: Using ep0 maxpacket: 16 [ 435.754121][ T5860] usb 6-1: config 0 descriptor has 1 excess byte, ignoring [ 435.761653][ T5860] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 435.772791][ T5860] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 435.782924][ T5860] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 435.794597][ T5860] usb 6-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 435.803931][ T5860] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.812893][ T5860] usb 6-1: Product: syz [ 435.817064][ T5860] usb 6-1: Manufacturer: syz [ 435.821670][ T5860] usb 6-1: SerialNumber: syz [ 435.827333][ T5860] usb 6-1: config 0 descriptor?? [ 435.832833][T13509] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 435.840114][T13509] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 435.852493][ T5860] mcba_usb 6-1:0.0: Microchip CAN BUS Analyzer connected [ 435.859673][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 435.859730][ C0] mcba_usb 6-1:0.0 can0: Tx URB aborted (-71) [ 435.937688][ T1212] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 436.059447][T13509] /dev/rnullb0: Can't open blockdev [ 436.077432][ T5912] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 436.099631][ T1212] usb 5-1: Using ep0 maxpacket: 16 [ 436.103103][ T5860] usb 6-1: USB disconnect, device number 12 [ 436.114678][ T5860] mcba_usb 6-1:0.0 can0: device disconnected [ 436.115437][ T1212] usb 5-1: config 15 has an invalid interface number: 107 but max is 0 [ 436.132708][ T1212] usb 5-1: config 15 has no interface number 0 [ 436.140827][ T1212] usb 5-1: config 15 interface 107 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 436.153266][ T1212] usb 5-1: config 15 interface 107 has no altsetting 0 [ 436.163984][ T1212] usb 5-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3 [ 436.173588][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.187163][ T1212] usb 5-1: Product: syz [ 436.192378][ T1212] usb 5-1: Manufacturer: syz [ 436.197003][ T1212] usb 5-1: SerialNumber: syz [ 436.227376][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 436.234150][ T5912] usb 2-1: config 9 has an invalid interface number: 92 but max is 0 [ 436.243038][ T5912] usb 2-1: config 9 has no interface number 0 [ 436.249433][ T5912] usb 2-1: config 9 interface 92 has no altsetting 0 [ 436.259256][ T5912] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=4d.c1 [ 436.268607][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.276664][ T5912] usb 2-1: Product: syz [ 436.281314][ T5912] usb 2-1: Manufacturer: syz [ 436.285972][ T5912] usb 2-1: SerialNumber: syz [ 436.413929][T13545] loop6: detected capacity change from 0 to 63 [ 436.424010][ T9636] buffer_io_error: 3 callbacks suppressed [ 436.424024][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.443009][T13545] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.451578][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.460051][T13545] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.469807][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.478065][T13545] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.486443][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.495940][T13544] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.504603][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.512671][T13545] Buffer I/O error on dev loop6, logical block 0, async page read [ 436.747584][T13587] /dev/rnullb0: Can't open blockdev [ 436.765740][T13589] /dev/rnullb0: Can't open blockdev [ 436.873221][ T1212] usb 5-1: USB disconnect, device number 22 [ 437.106614][ T43] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 437.276384][ T43] usb 6-1: Invalid ep0 maxpacket: 16 [ 437.406358][ T43] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 437.537284][T13605] /dev/rnullb0: Can't open blockdev [ 437.576210][ T43] usb 6-1: Invalid ep0 maxpacket: 16 [ 437.584751][ T43] usb usb6-port1: attempt power cycle [ 437.925871][ T43] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 437.947533][ T43] usb 6-1: Invalid ep0 maxpacket: 16 [ 438.075721][ T43] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 438.096091][ T43] usb 6-1: Invalid ep0 maxpacket: 16 [ 438.101673][ T43] usb usb6-port1: unable to enumerate USB device [ 438.502433][T13612] /dev/rnullb0: Can't open blockdev [ 438.630466][ T5912] usb 2-1: USB disconnect, device number 98 [ 438.855189][ T9] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 438.953649][T13624] syzkaller1: entered promiscuous mode [ 438.959305][T13624] syzkaller1: entered allmulticast mode [ 439.018408][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.034940][ T9] usb 5-1: no configurations [ 439.039569][ T9] usb 5-1: can't read configurations, error -22 [ 439.185511][ T9] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 439.349038][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.362733][ T9] usb 5-1: no configurations [ 439.377692][ T9] usb 5-1: can't read configurations, error -22 [ 439.390655][ T9] usb usb5-port1: attempt power cycle [ 439.799285][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.807463][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.957050][T13629] /dev/rnullb0: Can't open blockdev [ 439.964393][ T9] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 439.986469][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 439.998962][ T9] usb 5-1: no configurations [ 440.007894][ T9] usb 5-1: can't read configurations, error -22 [ 440.143992][ T9] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 440.176684][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 440.199490][ T9] usb 5-1: no configurations [ 440.223593][ T9] usb 5-1: can't read configurations, error -22 [ 440.252221][ T9] usb usb5-port1: unable to enumerate USB device [ 440.649470][T13651] wg0 speed is unknown, defaulting to 1000 [ 440.956263][T13657] /dev/rnullb0: Can't open blockdev [ 442.022513][ T6028] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 442.159699][T13678] netlink: 'syz.5.2239': attribute type 1 has an invalid length. [ 442.161196][T13677] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 442.169024][T13678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.179589][ T6028] usb 5-1: device descriptor read/64, error -71 [ 442.201956][T13678] /dev/rnullb0: Can't open blockdev [ 442.241273][T13681] /dev/rnullb0: Can't open blockdev [ 442.395716][T13683] /dev/rnullb0: Can't open blockdev [ 442.452036][ T6028] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 442.532009][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 442.582258][ T6028] usb 5-1: device descriptor read/64, error -71 [ 442.694424][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 442.700568][ T6028] usb usb5-port1: attempt power cycle [ 442.707766][ T9] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 442.716330][ T9] usb 2-1: config 0 has no interface number 0 [ 442.724741][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 442.735980][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 442.748250][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 442.759757][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 442.770610][ T9] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.786649][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 442.796253][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.805051][ T9] usb 2-1: Product: syz [ 442.809390][ T9] usb 2-1: Manufacturer: syz [ 442.815068][ T9] usb 2-1: SerialNumber: syz [ 442.821401][ T9] usb 2-1: config 0 descriptor?? [ 443.045059][ T9] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 443.061772][ T6028] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 443.063479][ T9] usb 2-1: USB disconnect, device number 99 [ 443.113063][ T6028] usb 5-1: device descriptor read/8, error -71 [ 443.371392][ T6028] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 443.391611][ T6028] usb 5-1: device descriptor read/8, error -71 [ 443.501351][ T6028] usb usb5-port1: unable to enumerate USB device [ 443.509020][T13694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.518239][T13694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.587633][T13697] /dev/rnullb0: Can't open blockdev [ 443.636312][T13699] /dev/rnullb0: Can't open blockdev [ 443.752470][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 443.825414][T13705] hsr0: entered promiscuous mode [ 443.830376][T13705] hsr0: entered allmulticast mode [ 443.835472][T13705] hsr_slave_0: entered allmulticast mode [ 443.841237][T13705] hsr_slave_1: entered allmulticast mode [ 443.849498][T13705] /dev/rnullb0: Can't open blockdev [ 443.882198][T13708] /dev/rnullb0: Can't open blockdev [ 443.925227][T13710] netlink: 'syz.1.2251': attribute type 4 has an invalid length. [ 443.933782][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 443.950412][ T43] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 443.959793][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.971810][ T43] usb 6-1: config 0 descriptor?? [ 443.986616][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 444.379514][ T43] gspca_sunplus: reg_r err -32 [ 444.384584][ T43] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 445.098420][ T43] usb 6-1: USB disconnect, device number 17 [ 445.429589][ T43] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 445.572111][T13730] ubi0: attaching mtd0 [ 445.576200][T13730] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 445.590740][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 445.597061][ T43] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 445.606007][ T43] usb 6-1: config 0 has no interface number 0 [ 445.625661][ T43] usb 6-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 255 [ 445.638871][ T43] usb 6-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 445.650937][ T43] usb 6-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 445.659870][ T43] usb 6-1: Product: syz [ 445.664048][ T43] usb 6-1: Manufacturer: syz [ 445.668654][ T43] usb 6-1: SerialNumber: syz [ 445.685791][ T43] usb 6-1: config 0 descriptor?? [ 445.693718][T13728] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 445.843672][T13739] loop6: detected capacity change from 0 to 63 [ 445.857223][T13739] buffer_io_error: 394 callbacks suppressed [ 445.857259][T13739] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.859417][ T5860] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 445.865994][T13739] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.887583][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.895926][T13739] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.904069][T13739] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.912525][T13739] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.922064][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.930924][ T9636] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.939492][T13739] Buffer I/O error on dev loop6, logical block 0, async page read [ 445.952534][T13739] Buffer I/O error on dev loop6, logical block 0, async page read [ 446.031006][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 446.037558][ T5860] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 446.099060][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.115716][ T5860] usb 5-1: config 0 descriptor?? [ 446.125867][ T5860] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 446.153517][ T5860] usb 5-1: Detected FT4232H [ 446.421671][ T5860] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 446.436421][ T5860] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 446.452521][ T5860] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 446.476728][ T5860] usb 5-1: USB disconnect, device number 31 [ 446.504027][ T5860] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 446.530010][ T5860] ftdi_sio 5-1:0.0: device disconnected [ 446.817274][T13748] tmpfs: Invalid gid '0x00000000ffffffff' [ 446.836157][T13748] /dev/rnullb0: Can't open blockdev [ 447.066649][T13755] netlink: 'syz.1.2265': attribute type 16 has an invalid length. [ 447.103462][T13755] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.2265'. [ 447.194435][ T30] audit: type=1326 audit(1755546230.271:19991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13754 comm="syz.4.2266" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb99b18ebe9 code=0x0 [ 447.349093][T13761] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 447.356404][T13761] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2266'. [ 447.387330][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 447.407116][T13761] No control pipe specified [ 447.428503][T13761] /dev/rnullb0: Can't open blockdev [ 447.507926][ T24] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 447.612497][T13765] ubi0: attaching mtd0 [ 447.624029][T13765] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 447.671100][ T24] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 447.699223][ T24] usb 2-1: config 0 has no interface number 0 [ 447.723642][ T24] usb 2-1: config 0 interface 3 has no altsetting 0 [ 447.756128][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=53.69 [ 447.780687][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.797794][ T24] usb 2-1: Product: syz [ 447.805375][ T24] usb 2-1: Manufacturer: syz [ 447.812184][ T24] usb 2-1: SerialNumber: syz [ 447.839209][ T24] usb 2-1: config 0 descriptor?? [ 448.073022][ T24] cdc_subset 2-1:0.3: probe with driver cdc_subset failed with error -22 [ 448.184788][ T43] keyspan 6-1:0.107: Keyspan 4 port adapter converter detected [ 448.222698][ T43] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 81 [ 448.257761][ T43] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 1 [ 448.287475][ T43] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 448.350454][ T43] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 2 [ 448.393906][ T43] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 448.420890][ T43] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 4 [ 448.454948][ T43] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 448.485645][ T43] keyspan 6-1:0.107: found no endpoint descriptor for endpoint 6 [ 448.511175][ T43] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 448.708671][ T43] usb 6-1: USB disconnect, device number 18 [ 448.761062][ T43] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 448.782797][ T43] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 448.803780][ T43] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 448.828829][ T43] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 448.850205][ T43] keyspan 6-1:0.107: device disconnected [ 449.386658][ T5867] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 449.390114][ T5861] Bluetooth: hci5: command 0x1003 tx timeout [ 449.436518][T13790] ubi0: attaching mtd0 [ 449.440693][T13790] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 449.760097][T13797] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2277'. [ 449.771895][T13797] /dev/rnullb0: Can't open blockdev [ 449.958395][ T6028] usb 2-1: USB disconnect, device number 100 [ 450.100196][T13809] /dev/rnullb0: Can't open blockdev [ 450.115590][ T43] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 450.124061][ T5867] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 450.149415][ T5860] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 450.180122][T13811] sctp: [Deprecated]: syz.1.2282 (pid 13811) Use of int in maxseg socket option. [ 450.180122][T13811] Use struct sctp_assoc_value instead [ 450.198440][T13811] /dev/rnullb0: Can't open blockdev [ 450.287672][ T43] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 450.297987][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.299630][T13813] netlink: 'syz.1.2283': attribute type 6 has an invalid length. [ 450.308544][ T43] usb 6-1: config 0 descriptor?? [ 450.314899][T13813] netlink: 'syz.1.2283': attribute type 4 has an invalid length. [ 450.326733][T13813] netlink: 'syz.1.2283': attribute type 6 has an invalid length. [ 450.332484][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 450.335100][T13813] netlink: 'syz.1.2283': attribute type 13 has an invalid length. [ 450.351572][T13813] netlink: 'syz.1.2283': attribute type 15 has an invalid length. [ 450.351955][ T5860] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.360269][T13813] netlink: 'syz.1.2283': attribute type 19 has an invalid length. [ 450.371979][ T5860] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 450.378326][T13813] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.2283'. [ 450.398593][ T5860] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 450.408606][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 450.416873][ T5860] usb 5-1: SerialNumber: syz [ 450.543725][T13822] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 450.717164][ T5860] usb 5-1: 0:2 : does not exist [ 450.736202][ T5860] usb 5-1: USB disconnect, device number 32 [ 450.782234][ T43] gp8psk: usb in 128 operation failed. [ 450.811406][ T9635] udevd[9635]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 450.811438][ T43] gp8psk: usb in 137 operation failed. [ 450.850253][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 450.870152][ T43] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 450.896663][ T43] usb 6-1: media controller created [ 450.935706][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 451.093684][ T5861] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.111515][ T5861] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.129203][ T5861] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.154865][ T5861] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.174946][ T5861] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.215088][ T43] gp8psk_fe: Frontend attached [ 451.219905][ T43] usb 6-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 451.234802][ T43] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 451.267057][T13831] wg0 speed is unknown, defaulting to 1000 [ 451.276566][ T43] gp8psk: usb in 138 operation failed. [ 451.282307][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 451.299117][ T43] gp8psk: found Genpix USB device pID = 203 (hex) [ 451.310757][ T43] usb 6-1: USB disconnect, device number 19 [ 451.367260][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 451.527377][T13831] chnl_net:caif_netlink_parms(): no params data found [ 451.625755][T13831] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.632958][T13831] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.643704][T13831] bridge_slave_0: entered allmulticast mode [ 451.650591][T13831] bridge_slave_0: entered promiscuous mode [ 451.664302][ T43] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 451.680290][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.697349][T13831] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.706812][T13831] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.713988][T13831] bridge_slave_1: entered allmulticast mode [ 451.753309][T13831] bridge_slave_1: entered promiscuous mode [ 451.790510][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.818188][T13831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.831986][T13831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.841422][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 451.851237][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.867306][ T43] usb 6-1: config 0 has no interface number 0 [ 451.884234][ T43] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 451.898485][ T43] usb 6-1: config 0 interface 1 has no altsetting 0 [ 451.910151][ T43] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 451.920233][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.929640][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.940329][ T43] usb 6-1: Product: syz [ 451.955743][T13831] team0: Port device team_slave_0 added [ 451.963156][T13831] team0: Port device team_slave_1 added [ 451.969095][ T43] usb 6-1: Manufacturer: syz [ 451.973721][ T43] usb 6-1: SerialNumber: syz [ 451.990446][ T43] usb 6-1: config 0 descriptor?? [ 452.001993][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.052158][T13831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.062378][T13831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.104824][T13831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.125671][T13831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.132661][T13831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.235435][ T43] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 452.244484][T13831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.255507][ T43] cx231xx 6-1:0.1: Failed to read PCB config [ 452.261724][ T43] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 452.318492][ T43] usb 6-1: USB disconnect, device number 20 [ 452.392036][T13831] hsr_slave_0: entered promiscuous mode [ 452.406204][T13831] hsr_slave_1: entered promiscuous mode [ 452.412180][T13831] debugfs: 'hsr0' already exists in 'hsr' [ 452.422049][T13831] Cannot create hsr debugfs directory [ 452.445005][ T59] bridge_slave_1: left allmulticast mode [ 452.450728][ T59] bridge_slave_1: left promiscuous mode [ 452.463372][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.480032][ T59] bridge_slave_0: left allmulticast mode [ 452.494339][ T59] bridge_slave_0: left promiscuous mode [ 452.513709][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.678889][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 452.697242][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 452.704203][ T43] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 452.718821][ T59] bond0 (unregistering): Released all slaves [ 452.883300][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 452.891632][ T43] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 452.909232][ T43] usb 6-1: config 0 has no interface number 0 [ 452.924093][ T43] usb 6-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 452.943629][ T43] usb 6-1: config 0 interface 1 has no altsetting 0 [ 452.955932][ T43] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 452.968512][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.983247][ T43] usb 6-1: Product: syz [ 452.989188][ T43] usb 6-1: Manufacturer: syz [ 452.994714][ T43] usb 6-1: SerialNumber: syz [ 453.005223][ T43] usb 6-1: config 0 descriptor?? [ 453.045849][ T59] hsr_slave_0: left promiscuous mode [ 453.091704][ T59] hsr_slave_1: left promiscuous mode [ 453.112488][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.132232][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.150829][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.159209][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.173631][ T59] veth1_macvtap: left promiscuous mode [ 453.182510][ T59] veth0_macvtap: left promiscuous mode [ 453.190883][ T59] veth1_vlan: left promiscuous mode [ 453.196206][ T59] veth0_vlan: left promiscuous mode [ 453.216416][ T43] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 453.226153][ T5867] Bluetooth: hci5: command tx timeout [ 453.242358][ T43] cx231xx 6-1:0.1: bad config in buspower!!!! [ 453.242358][ T43] config_info=40 [ 453.255988][ T43] cx231xx 6-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 453.383046][ T6028] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 453.400850][ T43] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 453.412570][ T43] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 453.425244][ T43] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 453.440861][ T59] team0 (unregistering): Port device team_slave_1 removed [ 453.443447][T13834] /dev/rnullb0: Can't open blockdev [ 453.455927][ T43] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 453.469503][ T43] cx231xx 6-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 453.480478][ T43] cx231xx 6-1:0.1: Failed to set devmode to analog: error: -71 [ 453.488785][ T59] team0 (unregistering): Port device C removed [ 453.509661][ T43] i2c i2c-2: Added multiplexed i2c bus 4 [ 453.524218][ T43] i2c i2c-2: Added multiplexed i2c bus 5 [ 453.539038][ T43] cx231xx 6-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 453.547750][ T43] cx231xx 6-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 453.559005][ T6028] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 453.567175][ T6028] usb 5-1: config 0 has no interface number 0 [ 453.579689][ T6028] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 453.595012][ T6028] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 453.595613][ T43] cx231xx 6-1:0.1: probe with driver cx231xx failed with error -71 [ 453.614578][ T6028] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 453.630089][ T6028] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 453.644552][ T43] usb 6-1: USB disconnect, device number 21 [ 453.654980][ T6028] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 453.670892][ T6028] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 453.685461][ T6028] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 453.694688][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.706147][ T6028] usb 5-1: config 0 descriptor?? [ 453.714630][T13868] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 453.729054][ T6028] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 453.932687][T13868] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 453.968399][T13831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 453.995405][T13831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 454.025011][T13831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 454.049029][T13831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 454.051068][T13889] /dev/rnullb0: Can't open blockdev [ 454.064451][T13890] /dev/rnullb0: Can't open blockdev [ 454.118665][ T59] IPVS: stop unused estimator thread 0... [ 454.197729][T13831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.231979][T13831] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.258334][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.261833][ T5860] usb 5-1: USB disconnect, device number 33 [ 454.265502][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.273383][ T5860] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 454.322966][ T3959] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.330280][ T3959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.624152][T13831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.669890][T13831] veth0_vlan: entered promiscuous mode [ 454.681321][T13831] veth1_vlan: entered promiscuous mode [ 454.705696][T13831] veth0_macvtap: entered promiscuous mode [ 454.714563][T13831] veth1_macvtap: entered promiscuous mode [ 454.732543][T13831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.747465][T13831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.758548][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.767520][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.776780][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.786402][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.839185][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.860572][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.904101][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 454.913560][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.998076][T13927] netlink: 'syz.5.2298': attribute type 16 has an invalid length. [ 455.009714][T13927] /dev/rnullb0: Can't open blockdev [ 455.094534][T13929] No control pipe specified [ 455.132990][ T5860] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 455.220432][T13939] /dev/rnullb0: Can't open blockdev [ 455.281695][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 455.298296][ T5860] usb 5-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 455.301768][ T5867] Bluetooth: hci5: command tx timeout [ 455.316322][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.324944][ T5860] usb 5-1: Product: syz [ 455.329100][ T5860] usb 5-1: Manufacturer: syz [ 455.335181][ T5860] usb 5-1: SerialNumber: syz [ 455.340822][ T5860] usb 5-1: config 0 descriptor?? [ 455.343306][ T43] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 455.529103][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 455.538411][ T43] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 455.546385][ T43] usb 2-1: can't read configurations, error -71 [ 455.553257][T13921] /dev/rnullb0: Can't open blockdev [ 455.560648][ T5860] speedtch 5-1:0.0: speedtch_bind: data interface not found! [ 455.568499][ T5860] speedtch 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 455.576950][ T5860] usb 5-1: USB disconnect, device number 34 [ 455.810483][ T5860] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 455.823987][ T5860] hid-generic 0000:0000:0000.0039: hidraw0: HID v0.00 Device [syz1] on syz0 [ 455.868963][T13951] fido_id[13951]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 455.937236][T13954] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2306'. [ 455.948231][T13953] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2306'. [ 455.999145][T13953] /dev/rnullb0: Can't open blockdev [ 457.017911][T13977] /dev/rnullb0: Can't open blockdev [ 457.058274][T13977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2313'. [ 457.164628][T13985] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 457.253075][T13989] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 457.339147][T13989] input: syz0 as /devices/virtual/input/input43 [ 457.366583][T13989] /dev/rnullb0: Can't open blockdev [ 457.379891][ T5867] Bluetooth: hci5: command tx timeout [ 457.737265][ T43] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 457.891567][ T43] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.917107][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 457.938597][ T43] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 457.958163][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 457.975008][ T43] usb 2-1: SerialNumber: syz [ 457.993812][T14004] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2322'. [ 458.379920][ T43] usb 2-1: 0:2 : does not exist [ 458.388025][ T43] usb 2-1: unit 5 not found! [ 458.402831][ T981] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 458.433611][ T981] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.446299][ T43] usb 2-1: USB disconnect, device number 103 [ 458.502787][ T9635] udevd[9635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 458.923740][T14021] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2327'. [ 459.005310][T14025] program syz.6.2328 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 459.045232][T14027] /dev/rnullb0: Can't open blockdev [ 459.150274][T14030] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2330'. [ 459.376938][T14048] /dev/rnullb0: Can't open blockdev [ 459.458153][ T5867] Bluetooth: hci5: command tx timeout [ 459.595267][T14055] overlayfs: failed to resolve '/X]-bca6NJl}6;tGeY޸ eEX-3щ1=s.Ի'9' [ 459.595267][T14055] 7c&bDwa!|_ZI1 .HZ}k$#+-krkH.?j#M@i ]th]ܼ2^P(L2#i0Uzb[C-&(8‡s噴Xj ?)`R&*'-Įm5-1bK ܰ`x|íQ-œciGv4وIK^WҘ2<Gg}TkеyVQ [ 459.595267][T14055] ?y|': -36 [ 459.649496][T14055] netlink: zone id is out of range [ 459.654732][T14055] netlink: zone id is out of range [ 459.684411][T14055] netlink: zone id is out of range [ 459.690003][T14055] netlink: zone id is out of range [ 459.695225][T14055] netlink: zone id is out of range [ 459.703905][T14055] netlink: zone id is out of range [ 459.710363][T14055] netlink: zone id is out of range [ 459.715483][T14055] netlink: zone id is out of range [ 459.722549][T14055] netlink: zone id is out of range [ 460.054953][T14068] /dev/rnullb0: Can't open blockdev [ 460.522434][T14087] /dev/rnullb0: Can't open blockdev [ 460.629005][T14097] ubi0: attaching mtd0 [ 460.633174][T14097] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 460.717694][T14105] /dev/rnullb0: Can't open blockdev [ 460.763874][T14113] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 460.851674][T14115] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 461.146436][ T6028] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 461.236479][ T5912] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 461.297621][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 461.307581][ T6028] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 461.317328][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 461.327119][ T6028] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 461.336995][ T6028] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 461.346026][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.356001][ T6028] usb 5-1: config 0 descriptor?? [ 461.387967][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.399026][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.408864][ T5912] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 461.418158][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.428061][ T5912] usb 6-1: config 0 descriptor?? [ 461.439925][ T30] audit: type=1326 audit(1755546244.522:19992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14094 comm="syz.1.2350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc0898ebe9 code=0x7fc00000 [ 461.562981][ T6028] hdpvr 5-1:0.0: unexpected answer of status request, len 0 [ 461.570551][ T6028] hdpvr 5-1:0.0: device init failed [ 461.575809][ T6028] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 461.635709][ T5912] usbhid 6-1:0.0: can't add hid device: -71 [ 461.649389][ T5912] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 461.665030][ T5912] usb 6-1: USB disconnect, device number 22 [ 461.845601][T14125] /dev/rnullb0: Can't open blockdev [ 461.931035][ T5912] usb 5-1: USB disconnect, device number 35 [ 461.977239][ T6028] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 461.985434][T14136] ubi0: attaching mtd0 [ 461.995164][T14136] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 462.150544][ T6028] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 462.172243][ T6028] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 462.197845][ T6028] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 462.230034][ T6028] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 462.245547][ T6028] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.263784][ T6028] usb 2-1: Product: syz [ 462.272252][ T6028] usb 2-1: Manufacturer:  [ 462.285514][ T6028] usb 2-1: SerialNumber: syz [ 462.434975][T14142] /dev/rnullb0: Can't open blockdev [ 462.459914][T14142] /dev/rnullb0: Can't open blockdev [ 463.064929][T11800] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 463.224860][T11800] usb 6-1: Using ep0 maxpacket: 16 [ 463.237320][T11800] usb 6-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 463.250742][T11800] usb 6-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 463.290148][T11800] usb 6-1: config 0 interface 0 has no altsetting 0 [ 463.299396][T11800] usb 6-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 463.311418][T11800] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.323523][T11800] usb 6-1: config 0 descriptor?? [ 463.738895][T11800] elecom 0003:056E:011C.003B: unknown main item tag 0x0 [ 463.756743][T11800] elecom 0003:056E:011C.003B: unknown main item tag 0x0 [ 463.775611][T11800] elecom 0003:056E:011C.003B: unknown main item tag 0x0 [ 463.791595][T11800] elecom 0003:056E:011C.003B: unknown main item tag 0x0 [ 463.801515][T11800] elecom 0003:056E:011C.003B: unknown main item tag 0x0 [ 463.822649][T11800] elecom 0003:056E:011C.003B: hidraw0: USB HID v0.05 Device [HID 056e:011c] on usb-dummy_hcd.5-1/input0 [ 463.942429][T11800] usb 6-1: USB disconnect, device number 23 [ 463.962561][T14160] fido_id[14160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 464.435401][ T5912] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 464.595769][ T5912] usb 5-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 464.614727][ T5912] usb 5-1: config 1 interface 0 has no altsetting 0 [ 464.631006][ T5912] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c08, bcdDevice= 0.40 [ 464.648942][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.676691][ T5912] usb 5-1: Product: 囬班쌆殡Ⳁ靰쾑迤툷醩ꝝ궱샡綾け䚨桾슐㘙赟훬뾚࣌굋䜦堉偊ල귫遁ꤰ茫ꫩဓ塬蝷㪎䴐♾ꁻ綾ᗐῸ썲쫫ֳϐ펼숝玲Ꮕ嫣势弹嗸㐖픑虡∫̕鑈坙泓蕆龱ᤊ䍊婠腼㊕枻歷ᰔ鞣㩏圮Ꝛ㽇詇欭䊛卮亵祊諸七씓㡸庺流ᬦ跪㉞쥒얉亣蠌皮礌䖿礄뗫晙 [ 464.720394][ T5912] usb 5-1: Manufacturer: ᖋ巀ብ앞换胔웚䇈耙᜜⊗蛀ꖲ節鼊契굚𣙸镖检緫㧃臚랭ꎮ㻋袀㔂훊쇞羰阨㤹멛ꬅ嬨寣歄Ť⇨婔⨬⥸Ⴤ죻電쿏耢痝ꨥ︨졓ꋽ䄵ᬲᬃᬕ劯ꡩ䐍歗㠥ퟡ썸닅錈ﰥ㩡壵뫆冴ꜛ剂 [ 464.795106][ T5912] usb 5-1: SerialNumber: 㠵뿢持㐇ᅐ撺Үᦺƥ諙鳩뀣ꡝ鿐ⶊ쭊꩙業굽뢳铴㎇ǧı艼વ曤풪䀞㸟௠ [ 464.822796][ T6028] cdc_ncm 2-1:1.0: bind() failure [ 464.831974][T14171] /dev/rnullb0: Can't open blockdev [ 464.845244][ T6028] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 464.857439][T14171] 9p: Unknown parameter 'fowner<00000000000000000000' [ 464.864364][ T6028] cdc_ncm 2-1:1.1: bind() failure [ 464.875996][ T6028] usb 2-1: USB disconnect, device number 104 [ 464.982672][T14178] loop6: detected capacity change from 0 to 63 [ 464.990294][ T9635] buffer_io_error: 6618 callbacks suppressed [ 464.990308][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.025514][T14173] /dev/rnullb0: Can't open blockdev [ 465.028383][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.052161][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.064248][T14178] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.072620][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.092697][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.117258][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.185762][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.208439][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.222867][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 465.223378][T14184] /dev/rnullb0: Can't open blockdev [ 465.312888][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.322218][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.355968][T14165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.374752][T14165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 465.449280][T14190] /dev/rnullb0: Can't open blockdev [ 465.558537][T14187] MTD: Attempt to mount non-MTD device "/dev/nbd1" [ 465.565657][T14187] syz.1.2378: attempt to access beyond end of device [ 465.565657][T14187] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 465.756997][T14202] /dev/rnullb0: Can't open blockdev [ 465.942160][T14204] /dev/rnullb0: Can't open blockdev [ 465.949269][T14204] /dev/rnullb0: Can't open blockdev [ 465.958275][T14204] /dev/rnullb0: Can't open blockdev [ 465.965043][T14204] /dev/rnullb0: Can't open blockdev [ 465.971138][T14204] /dev/rnullb0: Can't open blockdev [ 465.979592][T14204] /dev/rnullb0: Can't open blockdev [ 465.989565][T14204] /dev/rnullb0: Can't open blockdev [ 465.998462][T14204] /dev/rnullb0: Can't open blockdev [ 466.005297][T14204] /dev/rnullb0: Can't open blockdev [ 466.011410][T14204] /dev/rnullb0: Can't open blockdev [ 466.018400][T14204] /dev/rnullb0: Can't open blockdev [ 466.024825][T14204] /dev/rnullb0: Can't open blockdev [ 466.031475][T14204] /dev/rnullb0: Can't open blockdev [ 466.037731][T14204] /dev/rnullb0: Can't open blockdev [ 466.044222][T14204] /dev/rnullb0: Can't open blockdev [ 466.050304][T14204] /dev/rnullb0: Can't open blockdev [ 466.056404][T14204] /dev/rnullb0: Can't open blockdev [ 466.062905][T14204] /dev/rnullb0: Can't open blockdev [ 466.068834][T14204] /dev/rnullb0: Can't open blockdev [ 466.075098][T14204] /dev/rnullb0: Can't open blockdev [ 466.081023][T14204] /dev/rnullb0: Can't open blockdev [ 466.087608][T14204] /dev/rnullb0: Can't open blockdev [ 466.093698][T14204] /dev/rnullb0: Can't open blockdev [ 466.100765][T14204] /dev/rnullb0: Can't open blockdev [ 466.108863][T14204] /dev/rnullb0: Can't open blockdev [ 466.115014][T14204] /dev/rnullb0: Can't open blockdev [ 466.120987][T14204] /dev/rnullb0: Can't open blockdev [ 466.127738][T14204] /dev/rnullb0: Can't open blockdev [ 466.133834][T14204] /dev/rnullb0: Can't open blockdev [ 466.141027][T14204] /dev/rnullb0: Can't open blockdev [ 466.148027][T14204] /dev/rnullb0: Can't open blockdev [ 466.154206][T14204] /dev/rnullb0: Can't open blockdev [ 466.160217][T14204] /dev/rnullb0: Can't open blockdev [ 466.272516][T14207] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2383'. [ 466.560890][T14222] sp0: Synchronizing with TNC [ 466.761230][T14221] [U] [ 467.182727][ T5912] usbhid 5-1:1.0: can't add hid device: -71 [ 467.205569][ T5912] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 467.237043][ T5912] usb 5-1: USB disconnect, device number 36 [ 467.383359][T14264] NILFS (nbd5): device size too small [ 467.601423][ T1212] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 467.690894][ T6028] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 467.721787][ T6028] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 467.762101][ T1212] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 467.784528][ T1212] usb 2-1: config 0 has no interface number 0 [ 467.800818][ T1212] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.821020][ T1212] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 467.822807][ T1212] usb 2-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 467.855976][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.868761][ T1212] usb 2-1: Product: syz [ 467.894178][ T1212] usb 2-1: Manufacturer: syz [ 467.898984][ T1212] usb 2-1: SerialNumber: syz [ 467.922881][ T1212] usb 2-1: config 0 descriptor?? [ 467.930026][T14262] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 468.096474][T14275] netlink: 'syz.4.2401': attribute type 32 has an invalid length. [ 468.118071][T14273] /dev/rnullb0: Can't open blockdev [ 468.176412][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2390'. [ 468.804737][ T1212] usb 2-1: USB disconnect, device number 105 [ 468.875832][ T9635] udevd[9635]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 469.091457][T14293] input: syz0 as /devices/virtual/input/input45 [ 469.591066][ T6028] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 469.752606][ T6028] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 469.769976][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 469.789468][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 469.813778][ T6028] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 469.847796][ T6028] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 469.876882][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.891599][ T6028] usb 5-1: config 0 descriptor?? [ 469.900493][T14305] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 470.312352][ T6028] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 470.329387][ T6028] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 470.346985][ T6028] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 470.367176][ T6028] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 470.387635][ T6028] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 470.639812][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.690721][ T5912] usb 5-1: USB disconnect, device number 37 [ 470.716837][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.754300][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.763044][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.764115][T14329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.837539][T14329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.858976][ T1212] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 470.936248][T14331] /dev/rnullb0: Can't open blockdev [ 471.018471][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 471.025699][ T1212] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 471.038138][ T1212] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 471.050218][ T1212] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 471.061137][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.070645][ T1212] usb 2-1: Product: syz [ 471.074891][ T1212] usb 2-1: Manufacturer: syz [ 471.081524][ T1212] usb 2-1: SerialNumber: syz [ 471.088151][ T1212] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 471.097492][ T1212] usb 2-1: no configuration chosen from 1 choice [ 471.178319][ T5912] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 471.328610][ T5912] usb 6-1: device descriptor read/64, error -71 [ 471.588158][ T5912] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 471.641189][ T5860] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 471.738023][ T5912] usb 6-1: device descriptor read/64, error -71 [ 471.810640][ T5860] usb 5-1: config index 0 descriptor too short (expected 24929, got 36) [ 471.819228][ T5860] usb 5-1: config 97 has too many interfaces: 97, using maximum allowed: 32 [ 471.829312][ T5860] usb 5-1: config 97 has an invalid descriptor of length 97, skipping remainder of the config [ 471.839911][ T5860] usb 5-1: config 97 has 0 interfaces, different from the descriptor's value: 97 [ 471.849644][ T5912] usb usb6-port1: attempt power cycle [ 471.856886][ T5860] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 471.866452][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.874670][ T5860] usb 5-1: Product: syz [ 471.879139][ T5860] usb 5-1: Manufacturer: syz [ 471.883797][ T5860] usb 5-1: SerialNumber: syz [ 472.207626][ T5912] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 472.245619][ T5860] usb 5-1: USB disconnect, device number 38 [ 472.257511][ T5912] usb 6-1: device descriptor read/8, error -71 [ 472.508094][ T5912] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 472.527820][ T5912] usb 6-1: device descriptor read/8, error -71 [ 472.637447][ T5912] usb usb6-port1: unable to enumerate USB device [ 473.106776][ T5912] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 473.246696][ T5912] usb 5-1: device descriptor read/64, error -71 [ 473.355947][T14349] /dev/rnullb0: Can't open blockdev [ 473.423863][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 473.433965][T14353] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2427'. [ 473.486655][ T5912] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 473.616704][ T5912] usb 5-1: device descriptor read/64, error -71 [ 473.641151][ T981] usb 2-1: USB disconnect, device number 106 [ 473.746433][ T5912] usb usb5-port1: attempt power cycle [ 474.086051][ T5912] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 474.116369][T14369] /dev/rnullb0: Can't open blockdev [ 474.118684][ T5912] usb 5-1: device descriptor read/8, error -71 [ 474.122044][T14369] /dev/rnullb0: Can't open blockdev [ 474.164834][T14370] sctp: [Deprecated]: syz.1.2433 (pid 14370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 474.164834][T14370] Use struct sctp_sack_info instead [ 474.167496][T14369] /dev/rnullb0: Can't open blockdev [ 474.202976][T14369] /dev/rnullb0: Can't open blockdev [ 474.209024][T14369] /dev/rnullb0: Can't open blockdev [ 474.214650][T14369] /dev/rnullb0: Can't open blockdev [ 474.222243][T14369] /dev/rnullb0: Can't open blockdev [ 474.228052][T14369] /dev/rnullb0: Can't open blockdev [ 474.233749][T14369] /dev/rnullb0: Can't open blockdev [ 474.241949][T14369] /dev/rnullb0: Can't open blockdev [ 474.251711][T14369] /dev/rnullb0: Can't open blockdev [ 474.258544][T14369] /dev/rnullb0: Can't open blockdev [ 474.264371][T14369] /dev/rnullb0: Can't open blockdev [ 474.270242][T14369] /dev/rnullb0: Can't open blockdev [ 474.276977][T14369] /dev/rnullb0: Can't open blockdev [ 474.283023][T14369] /dev/rnullb0: Can't open blockdev [ 474.288943][T14369] /dev/rnullb0: Can't open blockdev [ 474.294693][T14369] /dev/rnullb0: Can't open blockdev [ 474.300597][T14369] /dev/rnullb0: Can't open blockdev [ 474.312035][T14369] /dev/rnullb0: Can't open blockdev [ 474.317985][T14369] /dev/rnullb0: Can't open blockdev [ 474.325630][T14369] /dev/rnullb0: Can't open blockdev [ 474.332213][T14369] /dev/rnullb0: Can't open blockdev [ 474.338251][T14369] /dev/rnullb0: Can't open blockdev [ 474.343848][T14369] /dev/rnullb0: Can't open blockdev [ 474.350147][T14369] /dev/rnullb0: Can't open blockdev [ 474.356763][T14369] /dev/rnullb0: Can't open blockdev [ 474.367993][T14369] /dev/rnullb0: Can't open blockdev [ 474.373971][T14369] /dev/rnullb0: Can't open blockdev [ 474.377704][ T5912] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 474.380183][T14369] /dev/rnullb0: Can't open blockdev [ 474.392662][T14369] /dev/rnullb0: Can't open blockdev [ 474.398690][T14369] /dev/rnullb0: Can't open blockdev [ 474.404399][T14369] /dev/rnullb0: Can't open blockdev [ 474.408774][ T5912] usb 5-1: device descriptor read/8, error -71 [ 474.411095][T14369] /dev/rnullb0: Can't open blockdev [ 474.421690][T14369] /dev/rnullb0: Can't open blockdev [ 474.428086][T14369] /dev/rnullb0: Can't open blockdev [ 474.433789][T14369] /dev/rnullb0: Can't open blockdev [ 474.440130][T14369] /dev/rnullb0: Can't open blockdev [ 474.446595][T14369] /dev/rnullb0: Can't open blockdev [ 474.452241][T14369] /dev/rnullb0: Can't open blockdev [ 474.469447][T14369] /dev/rnullb0: Can't open blockdev [ 474.475099][T14369] /dev/rnullb0: Can't open blockdev [ 474.475894][T14375] net_ratelimit: 169 callbacks suppressed [ 474.475913][T14375] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 474.481317][T14369] /dev/rnullb0: Can't open blockdev [ 474.486106][T14375] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 474.491343][T14375] /dev/rnullb0: Can't open blockdev [ 474.493859][T14369] /dev/rnullb0: Can't open blockdev [ 474.517100][T14369] /dev/rnullb0: Can't open blockdev [ 474.522685][T14369] /dev/rnullb0: Can't open blockdev [ 474.528944][T14369] /dev/rnullb0: Can't open blockdev [ 474.534552][T14369] /dev/rnullb0: Can't open blockdev [ 474.536110][ T5912] usb usb5-port1: unable to enumerate USB device [ 474.540717][T14369] /dev/rnullb0: Can't open blockdev [ 474.551757][T14369] /dev/rnullb0: Can't open blockdev [ 474.557517][T14369] /dev/rnullb0: Can't open blockdev [ 474.568056][T14369] /dev/rnullb0: Can't open blockdev [ 474.573772][T14369] /dev/rnullb0: Can't open blockdev [ 474.579873][ T1212] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 474.597501][T14369] /dev/rnullb0: Can't open blockdev [ 474.615130][T14369] /dev/rnullb0: Can't open blockdev [ 474.621424][T14369] /dev/rnullb0: Can't open blockdev [ 474.630778][T14369] /dev/rnullb0: Can't open blockdev [ 474.636995][T14369] /dev/rnullb0: Can't open blockdev [ 474.642646][T14369] /dev/rnullb0: Can't open blockdev [ 474.648959][T14369] /dev/rnullb0: Can't open blockdev [ 474.654612][T14369] /dev/rnullb0: Can't open blockdev [ 474.660772][T14369] /dev/rnullb0: Can't open blockdev [ 474.675920][T14369] /dev/rnullb0: Can't open blockdev [ 474.683880][T14369] /dev/rnullb0: Can't open blockdev [ 474.693400][T14369] /dev/rnullb0: Can't open blockdev [ 474.725617][ T1212] usb 6-1: device descriptor read/64, error -71 [ 474.736359][T14385] ubi0: attaching mtd0 [ 474.740475][T14385] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 474.755002][T14385] binder: 14384:14385 ioctl c0306201 200000000680 returned -14 [ 474.802047][T14388] /dev/rnullb0: Can't open blockdev [ 474.894282][T14391] /dev/rnullb0: Can't open blockdev [ 474.975290][ T1212] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 475.105336][ T1212] usb 6-1: device descriptor read/64, error -71 [ 475.215431][ T1212] usb usb6-port1: attempt power cycle [ 475.550171][T14393] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 475.559499][ T1212] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 475.585664][ T1212] usb 6-1: device descriptor read/8, error -71 [ 475.824636][ T1212] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 475.858862][ T1212] usb 6-1: device descriptor read/8, error -71 [ 475.942221][T14407] /dev/rnullb0: Can't open blockdev [ 475.986135][ T1212] usb usb6-port1: unable to enumerate USB device [ 476.156179][T14413] /dev/rnullb0: Can't open blockdev [ 477.006833][T14417] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2451'. [ 477.022266][T14417] /dev/rnullb0: Can't open blockdev [ 477.064967][T14419] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 477.654580][ T1212] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 477.813333][ T1212] usb 5-1: Using ep0 maxpacket: 8 [ 477.830508][ T1212] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 477.841415][ T1212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.851671][ T1212] usb 5-1: Product: syz [ 477.869312][ T1212] usb 5-1: Manufacturer: syz [ 477.875136][ T1212] usb 5-1: SerialNumber: syz [ 477.915534][ T1212] usb 5-1: config 0 descriptor?? [ 478.137119][ T1212] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 478.150122][T14441] can0: slcan on ttyS3. [ 478.217992][T14442] can0 (unregistered): slcan off ttyS3. [ 478.342642][ T43] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 478.351973][T14428] syz.4.2455: attempt to access beyond end of device [ 478.351973][T14428] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 478.370952][ T6028] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 478.375058][T14428] EXT4-fs (loop4): unable to read superblock [ 478.407910][ T1212] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 478.438550][ T1212] usb 5-1: USB disconnect, device number 43 [ 478.527096][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.539615][ T6028] usb 2-1: Using ep0 maxpacket: 8 [ 478.552253][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.583436][ T6028] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 478.591886][ T43] usb 6-1: New USB device found, idVendor=d77d, idProduct=2c4e, bcdDevice= 0.00 [ 478.601313][ T6028] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.619886][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.628898][ T6028] usb 2-1: config 0 has no interface number 0 [ 478.629542][ T5860] hid-generic 0000:0000:0000.003E: unknown main item tag 0x0 [ 478.636420][ T6028] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 478.655812][ T43] usb 6-1: config 0 descriptor?? [ 478.671485][ T5860] hid-generic 0000:0000:0000.003E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 478.673458][ T43] usbhid 6-1:0.0: can't add hid device: -22 [ 478.697251][ T6028] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.740852][ T43] usbhid 6-1:0.0: probe with driver usbhid failed with error -22 [ 478.751702][ T6028] usb 2-1: config 0 interface 52 has no altsetting 0 [ 478.768871][ T6028] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 478.778477][ T6028] usb 2-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 478.798371][ T6028] usb 2-1: Manufacturer: syz [ 478.804769][ T6028] usb 2-1: config 0 descriptor?? [ 478.813923][ T6028] hub 2-1:0.52: bad descriptor, ignoring hub [ 478.820139][ T6028] hub 2-1:0.52: probe with driver hub failed with error -5 [ 478.867161][T14438] /dev/rnullb0: Can't open blockdev [ 478.881133][ T5860] usb 6-1: USB disconnect, device number 32 [ 479.016680][T14481] FAULT_INJECTION: forcing a failure. [ 479.016680][T14481] name failslab, interval 1, probability 0, space 0, times 0 [ 479.043609][T14481] CPU: 1 UID: 0 PID: 14481 Comm: syz.4.2463 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 479.043648][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 479.043664][T14481] Call Trace: [ 479.043671][T14481] [ 479.043679][T14481] dump_stack_lvl+0x189/0x250 [ 479.043709][T14481] ? __pfx____ratelimit+0x10/0x10 [ 479.043730][T14481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 479.043756][T14481] ? __pfx__printk+0x10/0x10 [ 479.043779][T14481] ? read_seqbegin+0x1ac/0x250 [ 479.043800][T14481] ? __pfx___might_resched+0x10/0x10 [ 479.043824][T14481] ? lock_acquire+0x5f/0x360 [ 479.043846][T14481] should_fail_ex+0x414/0x560 [ 479.043891][T14481] should_failslab+0xa8/0x100 [ 479.043914][T14481] __kmalloc_noprof+0xcb/0x4f0 [ 479.043933][T14481] ? tomoyo_encode+0x28b/0x550 [ 479.043962][T14481] tomoyo_encode+0x28b/0x550 [ 479.044001][T14481] tomoyo_realpath_from_path+0x58d/0x5d0 [ 479.044032][T14481] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 479.044055][T14481] tomoyo_path_number_perm+0x1e8/0x5a0 [ 479.044076][T14481] ? lock_release+0x4b/0x3e0 [ 479.044096][T14481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 479.044137][T14481] ? rcu_is_watching+0x15/0xb0 [ 479.044162][T14481] ? lock_release+0x4b/0x3e0 [ 479.044181][T14481] ? vfs_write+0x956/0xb30 [ 479.044206][T14481] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 479.044236][T14481] ? lock_release+0x4b/0x3e0 [ 479.044259][T14481] ? __fget_files+0x2a/0x420 [ 479.044282][T14481] ? __fget_files+0x3a0/0x420 [ 479.044306][T14481] ? __fget_files+0x2a/0x420 [ 479.044331][T14481] security_file_ioctl+0xcb/0x2d0 [ 479.044360][T14481] __se_sys_ioctl+0x47/0x170 [ 479.044381][T14481] do_syscall_64+0xfa/0x3b0 [ 479.044406][T14481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.044424][T14481] ? clear_bhb_loop+0x60/0xb0 [ 479.044445][T14481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.044468][T14481] RIP: 0033:0x7fb99b18ebe9 [ 479.044484][T14481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.044513][T14481] RSP: 002b:00007fb99c029038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 479.044533][T14481] RAX: ffffffffffffffda RBX: 00007fb99b3b5fa0 RCX: 00007fb99b18ebe9 [ 479.044546][T14481] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 479.044557][T14481] RBP: 00007fb99c029090 R08: 0000000000000000 R09: 0000000000000000 [ 479.044567][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.044577][T14481] R13: 00007fb99b3b6038 R14: 00007fb99b3b5fa0 R15: 00007ffe80515a28 [ 479.044596][T14481] [ 479.044609][T14481] ERROR: Out of memory at tomoyo_realpath_from_path. [ 479.131682][T14486] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 479.461400][T14491] comedi: valid board names for 8255 driver are: [ 479.479135][T14491] 8255 [ 479.491752][T14491] comedi: valid board names for vmk80xx driver are: [ 479.504531][T14491] vmk80xx [ 479.509410][T14491] comedi: valid board names for usbduxsigma driver are: [ 479.521390][T14491] usbduxsigma [ 479.525393][T14491] comedi: valid board names for usbduxfast driver are: [ 479.535318][T14491] usbduxfast [ 479.538760][T14491] comedi: valid board names for usbdux driver are: [ 479.545922][T14497] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2468'. [ 479.546054][ T6028] usb 2-1: USB disconnect, device number 107 [ 479.565127][T14491] usbdux [ 479.568083][T14491] comedi: valid board names for ni6501 driver are: [ 479.578421][T14491] ni6501 [ 479.581379][T14491] comedi: valid board names for dt9812 driver are: [ 479.590738][T14491] dt9812 [ 479.594171][T14491] comedi: valid board names for ni_labpc_cs driver are: [ 479.606918][T14499] /dev/rnullb0: Can't open blockdev [ 479.613333][T14491] ni_labpc_cs [ 479.616794][T14491] comedi: valid board names for ni_daq_700 driver are: [ 479.625636][T14491] ni_daq_700 [ 479.629030][T14491] comedi: valid board names for labpc_pci driver are: [ 479.637305][T14497] xt_socket: unknown flags 0xd0 [ 479.641219][T14491] labpc_pci [ 479.650126][T14491] comedi: valid board names for adl_pci9118 driver are: [ 479.657372][T14491] pci9118dg [ 479.660622][T14491] pci9118hg [ 479.665598][T14491] pci9118hr [ 479.668893][T14491] comedi: valid board names for 8255_pci driver are: [ 479.689065][T14491] 8255_pci [ 479.693239][T14491] comedi: valid board names for s526 driver are: [ 479.699671][T14491] s526 [ 479.711143][T14491] comedi: valid board names for multiq3 driver are: [ 479.729449][T14491] multiq3 [ 479.733215][T14491] comedi: valid board names for pcmuio driver are: [ 479.739856][T14491] pcmuio48 [ 479.745452][T14491] pcmuio96 [ 479.749409][T14491] comedi: valid board names for pcmmio driver are: [ 479.756078][T14491] pcmmio [ 479.759018][T14491] comedi: valid board names for pcmda12 driver are: [ 479.765812][T14491] pcmda12 [ 479.768970][T14491] comedi: valid board names for pcmad driver are: [ 479.775698][T14491] pcmad12 [ 479.778919][T14491] pcmad16 [ 479.782174][T14491] comedi: valid board names for ni_labpc driver are: [ 479.788900][T14491] lab-pc-1200 [ 479.794711][T14491] lab-pc-1200ai [ 479.798302][T14491] lab-pc+ [ 479.801386][T14491] comedi: valid board names for atmio16 driver are: [ 479.809783][T14491] atmio16 [ 479.813106][T14491] atmio16d [ 479.816236][T14491] comedi: valid board names for ni_at_ao driver are: [ 479.823240][T14491] at-ao-6 [ 479.826279][T14491] at-ao-10 [ 479.829704][T14491] comedi: valid board names for ni_at_a2150 driver are: [ 479.836951][T14491] ni_at_a2150 [ 479.840362][T14491] comedi: valid board names for adq12b driver are: [ 479.847214][T14491] adq12b [ 479.850170][T14491] comedi: valid board names for mpc624 driver are: [ 479.857487][T14491] mpc624 [ 479.860608][T14491] comedi: valid board names for c6xdigio driver are: [ 479.867572][T14491] c6xdigio [ 479.870690][T14491] comedi: valid board names for aio_iiro_16 driver are: [ 479.877862][T14491] aio_iiro_16 [ 479.881244][T14491] comedi: valid board names for aio_aio12_8 driver are: [ 479.888396][T14491] aio_aio12_8 [ 479.891937][T14491] aio_ai12_8 [ 479.895226][T14491] aio_ao12_4 [ 479.898558][T14491] comedi: valid board names for fl512 driver are: [ 479.905338][T14491] fl512 [ 479.908293][T14491] comedi: valid board names for dmm32at driver are: [ 479.915132][T14491] dmm32at [ 479.918163][T14491] comedi: valid board names for dt282x driver are: [ 479.924898][T14491] dt2821 [ 479.927883][T14491] dt2821-f [ 479.931235][T14491] dt2821-g [ 479.934549][T14491] dt2823 [ 479.937491][T14491] dt2824-pgh [ 479.940817][T14491] dt2824-pgl [ 479.941426][ T5860] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 479.944642][T14491] dt2825 [ 479.956337][T14491] dt2827 [ 479.959363][T14491] dt2828 [ 479.963341][T14491] dt2829 [ 479.966336][T14491] dt21-ez [ 479.969419][T14491] dt23-ez [ 479.974642][T14491] dt24-ez [ 479.977719][T14491] dt24-ez-pgl [ 479.981133][T14491] comedi: valid board names for dt2817 driver are: [ 479.987914][ T5945] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 480.000014][T14491] dt2817 [ 480.003230][T14491] comedi: valid board names for dt2815 driver are: [ 480.010456][T14491] dt2815 [ 480.022363][T14491] comedi: valid board names for dt2814 driver are: [ 480.028950][T14491] dt2814 [ 480.032912][T14491] comedi: valid board names for dt2811 driver are: [ 480.039519][T14491] dt2811-pgh [ 480.043198][T14491] dt2811-pgl [ 480.046555][T14491] comedi: valid board names for dt2801 driver are: [ 480.053511][T14491] dt2801 [ 480.056541][T14491] comedi: valid board names for das6402 driver are: [ 480.063863][T14491] das6402-12 [ 480.067222][T14491] das6402-16 [ 480.070687][T14491] comedi: valid board names for das1800 driver are: [ 480.078282][T14491] das-1701st [ 480.081960][T14491] das-1701st-da [ 480.085577][T14491] das-1702st [ 480.089040][T14491] das-1702st-da [ 480.093149][T14491] das-1702hr [ 480.096522][T14491] das-1702hr-da [ 480.100210][T14491] das-1701ao [ 480.103846][T14491] das-1702ao [ 480.107220][T14491] das-1801st [ 480.110666][T14491] das-1801st-da [ 480.114675][ T5860] usb 5-1: Using ep0 maxpacket: 16 [ 480.120217][T14491] das-1802st [ 480.124620][T14491] das-1802st-da [ 480.129056][T14491] das-1802hr [ 480.129139][ T5860] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 480.141222][ T5860] usb 5-1: config 0 has no interface number 0 [ 480.147373][T14491] das-1802hr-da [ 480.150976][T14491] das-1801hc [ 480.154671][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 480.159950][ T5860] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 480.170571][T14491] das-1802hc [ 480.174388][T14491] das-1801ao [ 480.177827][T14491] das-1802ao [ 480.181258][ T5945] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 480.190997][ T5945] usb 6-1: config 0 interface 0 has no altsetting 0 [ 480.198079][ T5860] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 480.208316][ T5945] usb 6-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 480.217880][T14491] comedi: valid board names for das800 driver are: [ 480.224634][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.233430][T14491] das-800 [ 480.239612][ T5860] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 480.249138][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.257858][T14491] cio-das800 [ 480.262004][ T5945] usb 6-1: config 0 descriptor?? [ 480.267171][ T5860] usb 5-1: Product: syz [ 480.272235][ T5860] usb 5-1: Manufacturer: syz [ 480.276919][ T5860] usb 5-1: SerialNumber: syz [ 480.284115][T14491] das-801 [ 480.287193][T14491] cio-das801 [ 480.290518][T14491] das-802 [ 480.295096][ T5860] usb 5-1: config 0 descriptor?? [ 480.300869][T14502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.308582][T14502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.316083][T14491] cio-das802 [ 480.319875][T14491] cio-das802/16 [ 480.323942][T14491] comedi: valid board names for isa-das08 driver are: [ 480.332483][T14491] isa-das08 [ 480.335718][T14491] das08-pgm [ 480.339014][T14491] das08-pgh [ 480.343313][T14491] das08-pgl [ 480.346547][T14491] das08-aoh [ 480.349783][T14491] das08-aol [ 480.353522][T14491] das08-aom [ 480.356775][T14491] das08/jr-ao [ 480.360182][T14491] das08jr-16-ao [ 480.366165][T14491] pc104-das08 [ 480.369579][T14491] das08jr/16 [ 480.373270][T14491] comedi: valid board names for das16m1 driver are: [ 480.379907][T14491] das16m1 [ 480.383223][T14491] comedi: valid board names for dac02 driver are: [ 480.389696][T14491] dac02 [ 480.392924][T14491] comedi: valid board names for rti802 driver are: [ 480.399469][T14491] rti802 [ 480.402826][T14491] comedi: valid board names for rti800 driver are: [ 480.409388][T14491] rti800 [ 480.412709][T14491] rti815 [ 480.415689][T14491] comedi: valid board names for pcm3724 driver are: [ 480.423103][T14491] pcm3724 [ 480.426167][T14491] comedi: valid board names for pcl818 driver are: [ 480.433060][T14491] pcl818l [ 480.436122][T14491] pcl818h [ 480.439173][T14491] pcl818hd [ 480.442861][T14491] pcl818hg [ 480.446024][T14491] pcl818 [ 480.448997][T14491] pcl718 [ 480.452408][T14491] pcm3718 [ 480.455481][T14491] comedi: valid board names for pcl816 driver are: [ 480.462364][T14491] pcl816 [ 480.465365][T14491] pcl814b [ 480.468413][T14491] comedi: valid board names for pcl812 driver are: [ 480.492961][ T5945] cougar 0003:060B:500A.003F: usage count exceeds max: fixing up report descriptor [ 480.507630][ T5945] cougar 0003:060B:500A.003F: unexpected long global item [ 480.515832][T14491] pcl812 [ 480.518807][T14491] pcl812pg [ 480.522959][ T5945] cougar 0003:060B:500A.003F: parse failed [ 480.528871][ T5945] cougar 0003:060B:500A.003F: probe with driver cougar failed with error -22 [ 480.537803][T14491] acl8112pg [ 480.545116][T14502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.552341][T14491] acl8112dg [ 480.555569][T14491] acl8112hg [ 480.558877][T14491] a821pgl [ 480.562396][T14502] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 480.571013][T14491] a821pglnda [ 480.574334][T14491] a821pgh [ 480.577376][T14491] a822pgl [ 480.580419][T14491] a822pgh [ 480.592080][ T5945] usb 6-1: USB disconnect, device number 33 [ 480.605562][T14491] a823pgl [ 480.613106][T14491] a823pgh [ 480.616189][T14491] pcl813 [ 480.619152][T14491] pcl813b [ 480.624369][T14491] acl8113 [ 480.627443][T14491] iso813 [ 480.630684][T14491] acl8216 [ 480.634899][T14491] a826pg [ 480.637876][T14491] comedi: valid board names for pcl730 driver are: [ 480.646564][T14491] pcl730 [ 480.649540][T14491] iso730 [ 480.652544][T14491] acl7130 [ 480.655706][T14491] pcm3730 [ 480.658776][T14491] pcl725 [ 480.661993][T14491] p8r8dio [ 480.665043][T14491] acl7225b [ 480.669118][T14491] p16r16dio [ 480.679798][T14491] pcl733 [ 480.682871][T14491] pcl734 [ 480.685866][T14491] opmm-1616-xt [ 480.689335][T14491] pearl-mm-p [ 480.700814][T14491] ir104-pbf [ 480.704028][T14491] comedi: valid board names for pcl726 driver are: [ 480.717005][T14491] pcl726 [ 480.719972][T14491] pcl727 [ 480.726959][T14491] pcl728 [ 480.730307][T14491] acl6126 [ 480.735534][T14491] acl6128 [ 480.738858][T14491] comedi: valid board names for pcl724 driver are: [ 480.745897][T14491] pcl724 [ 480.749211][T14491] pcl722 [ 480.754262][T14491] pcl731 [ 480.757334][T14491] acl7122 [ 480.760359][T14491] acl7124 [ 480.769137][T14491] pet48dio [ 480.773378][T14491] pcmio48 [ 480.776528][T14491] onyx-mm-dio [ 480.780018][T14491] comedi: valid board names for pcl711 driver are: [ 480.786906][T14491] pcl711 [ 480.791661][T14491] pcl711b [ 480.794739][T14491] acl8112hg [ 480.797972][T14491] acl8112dg [ 480.806899][T14491] comedi: valid board names for amplc_pc263 driver are: [ 480.814946][T14491] pc263 [ 480.817843][T14491] comedi: valid board names for amplc_pc236 driver are: [ 480.827112][T14491] pc36at [ 480.830447][T14491] comedi: valid board names for amplc_dio200 driver are: [ 480.837814][T14491] pc212e [ 480.840954][T14491] pc214e [ 480.843923][T14491] pc215e [ 480.846938][T14491] pc218e [ 480.849888][T14491] pc272e [ 480.855208][T14491] comedi: valid board names for comedi_parport driver are: [ 480.857312][T14520] No control pipe specified [ 480.862535][T14491] comedi_parport [ 480.869025][T14520] /dev/rnullb0: Can't open blockdev [ 480.875147][T14491] comedi: valid board names for comedi_test driver are: [ 480.884399][T14491] comedi_test [ 480.887885][T14491] comedi: valid board names for comedi_bond driver are: [ 480.899492][T14491] comedi_bond [ 480.955592][T14524] /dev/rnullb0: Can't open blockdev [ 480.964091][T14525] netlink: 'syz.1.2478': attribute type 11 has an invalid length. [ 480.975094][T14525] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2478'. [ 481.193078][ T5860] asix 5-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0x9d [ 481.397704][T14502] /dev/rnullb0: Can't open blockdev [ 481.423151][ T43] usb 5-1: USB disconnect, device number 44 [ 481.473313][T14552] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 481.604207][T14561] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 481.697819][T14567] /dev/rnullb0: Can't open blockdev [ 482.043343][T14580] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 482.129174][ T30] audit: type=1326 audit(1755546265.229:19993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14584 comm="syz.5.2497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc44478ebe9 code=0x0 [ 482.662442][T14590] /dev/rnullb0: Can't open blockdev [ 482.730178][ T6028] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 482.859151][ T6028] usb 2-1: device descriptor read/64, error -71 [ 483.046504][T14606] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2504'. [ 483.098960][ T6028] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 483.221593][T14615] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 483.251075][ T6028] usb 2-1: device descriptor read/64, error -71 [ 483.359238][ T6028] usb usb2-port1: attempt power cycle [ 483.698517][ T43] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 483.708573][ T6028] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 483.751321][ T6028] usb 2-1: device descriptor read/8, error -71 [ 483.858591][ T43] usb 5-1: device descriptor read/64, error -71 [ 483.988227][ T6028] usb 2-1: new full-speed USB device number 111 using dummy_hcd [ 484.012046][ T6028] usb 2-1: device descriptor read/8, error -71 [ 484.098113][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 484.130175][ T6028] usb usb2-port1: unable to enumerate USB device [ 484.228092][ T43] usb 5-1: device descriptor read/64, error -71 [ 484.348036][ T43] usb usb5-port1: attempt power cycle [ 484.572457][T14664] ubi0: attaching mtd0 [ 484.576668][T14664] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 484.614602][T14667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 484.623874][T14667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 484.687687][ T43] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 484.707989][ T43] usb 5-1: device descriptor read/8, error -71 [ 484.847531][ T5945] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 484.947486][ T43] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 484.968246][ T43] usb 5-1: device descriptor read/8, error -71 [ 484.997477][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 485.005319][ T5945] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 485.014530][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.022661][ T5945] usb 6-1: Product: syz [ 485.027178][ T5945] usb 6-1: Manufacturer: syz [ 485.031860][ T5945] usb 6-1: SerialNumber: syz [ 485.037919][ T5945] usb 6-1: config 0 descriptor?? [ 485.044878][ T5945] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 485.078154][ T43] usb usb5-port1: unable to enumerate USB device [ 485.246393][ T5945] gspca_stk1135: reg_w 0x2 err -71 [ 485.253516][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 485.260153][ T5945] gspca_stk1135: Sensor write failed [ 485.265529][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 485.271943][ T5945] gspca_stk1135: Sensor write failed [ 485.278843][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 485.285168][ T5945] gspca_stk1135: Sensor read failed [ 485.290434][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 485.296757][ T5945] gspca_stk1135: Sensor read failed [ 485.302003][ T5945] gspca_stk1135: Detected sensor type unknown (0x0) [ 485.308697][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 485.315038][ T5945] gspca_stk1135: Sensor read failed [ 485.320327][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 485.326670][ T5945] gspca_stk1135: Sensor read failed [ 485.333456][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 485.339833][ T5945] gspca_stk1135: Sensor write failed [ 485.345134][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 485.352527][ T5945] gspca_stk1135: Sensor write failed [ 485.357940][ T5945] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 485.367555][ T5945] usb 6-1: USB disconnect, device number 34 [ 485.514559][T14670] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 485.876730][ T43] usb 2-1: new low-speed USB device number 112 using dummy_hcd [ 486.016644][ T5945] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 486.047443][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 486.168101][ T5945] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 486.180227][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.186862][ T43] usb 2-1: new low-speed USB device number 113 using dummy_hcd [ 486.191456][ T5945] usb 6-1: config 0 descriptor?? [ 486.213903][ T5945] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 486.366413][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 486.372012][ T43] usb usb2-port1: attempt power cycle [ 486.541461][T14681] /dev/rnullb0: Can't open blockdev [ 486.581614][T14683] /dev/rnullb0: Can't open blockdev [ 486.643442][T14687] ubi0: attaching mtd0 [ 486.648773][T14687] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 486.691321][T14690] input: syz0 as /devices/virtual/input/input48 [ 486.726847][ T43] usb 2-1: new low-speed USB device number 114 using dummy_hcd [ 486.756798][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 486.767948][T14694] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 486.818572][T14696] /dev/rnullb0: Can't open blockdev [ 486.886310][ T43] usb 2-1: new low-speed USB device number 115 using dummy_hcd [ 486.906368][ T43] usb 2-1: Invalid ep0 maxpacket: 64 [ 486.911932][ T43] usb usb2-port1: unable to enumerate USB device [ 487.224332][ T5945] usb 6-1: USB disconnect, device number 35 [ 487.714687][T14704] /dev/rnullb0: Can't open blockdev [ 487.750034][T14706] loop6: detected capacity change from 0 to 63 [ 487.762811][ T9635] buffer_io_error: 1 callbacks suppressed [ 487.762825][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.777251][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.785463][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.793585][T14706] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.802101][T14706] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.810291][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.819477][T14707] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.827774][T14707] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.835883][T14707] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.843755][ T9635] Buffer I/O error on dev loop6, logical block 0, async page read [ 487.975344][ T5945] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 488.157185][ T5945] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 488.169346][ T5945] usb 5-1: config 150 has no interface number 0 [ 488.181939][ T5945] usb 5-1: config 150 interface 204 has no altsetting 0 [ 488.190852][ T5945] usb 5-1: config 150 interface 1 has no altsetting 0 [ 488.200509][ T5945] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 488.211378][ T5945] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.220677][ T5945] usb 5-1: Product: syz [ 488.226420][ T5945] usb 5-1: Manufacturer: syz [ 488.231137][ T5945] usb 5-1: SerialNumber: syz [ 488.455068][ T5945] xr_serial 5-1:150.204: xr_serial converter detected [ 488.606141][T14710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2529'. [ 488.635638][T14710] /dev/rnullb0: Can't open blockdev [ 488.695693][T14717] ubi0: attaching mtd0 [ 488.699794][T14717] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 488.902821][T14723] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2534'. [ 488.914105][T14723] /dev/rnullb0: Can't open blockdev [ 488.940915][T14723] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 489.044515][ T43] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 489.137869][T14735] binder: 14734:14735 ioctl 4018f514 0 returned -22 [ 489.194154][ T43] usb 6-1: Using ep0 maxpacket: 8 [ 489.201225][ T43] usb 6-1: config 4 has an invalid interface number: 168 but max is 1 [ 489.209950][ T43] usb 6-1: config 4 has an invalid interface number: 170 but max is 1 [ 489.218838][ T43] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 489.228041][ T43] usb 6-1: config 4 has an invalid interface number: 165 but max is 1 [ 489.236420][ T43] usb 6-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 489.245588][ T43] usb 6-1: config 4 has 3 interfaces, different from the descriptor's value: 2 [ 489.254754][ T43] usb 6-1: config 4 has no interface number 0 [ 489.260929][ T43] usb 6-1: config 4 has no interface number 1 [ 489.269442][ T5945] xr_serial ttyUSB0: Failed to set reg 0x0e: -71 [ 489.273747][ T43] usb 6-1: config 4 has no interface number 2 [ 489.282387][ T43] usb 6-1: config 4 interface 168 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 489.285803][ T5945] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 489.293906][ T43] usb 6-1: config 4 interface 168 altsetting 128 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 489.313297][ T5945] usb 5-1: USB disconnect, device number 49 [ 489.327326][ T43] usb 6-1: config 4 interface 168 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 489.338655][ T43] usb 6-1: config 4 interface 168 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1023 [ 489.343015][ T5945] xr_serial 5-1:150.204: device disconnected [ 489.349405][ T43] usb 6-1: config 4 interface 168 altsetting 128 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 489.368272][ T43] usb 6-1: config 4 interface 168 altsetting 128 has 6 endpoint descriptors, different from the interface descriptor's value: 15 [ 489.394552][ T43] usb 6-1: too many endpoints for config 4 interface 170 altsetting 43: 69, using maximum allowed: 30 [ 489.405884][ T43] usb 6-1: config 4 interface 170 altsetting 43 has a duplicate endpoint with address 0x5, skipping [ 489.416979][ T43] usb 6-1: config 4 interface 170 altsetting 43 has a duplicate endpoint with address 0x5, skipping [ 489.428078][ T43] usb 6-1: config 4 interface 170 altsetting 43 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 489.443240][ T43] usb 6-1: config 4 interface 170 altsetting 43 endpoint 0x87 has invalid maxpacket 64127, setting to 64 [ 489.455407][ T43] usb 6-1: config 4 interface 170 altsetting 43 bulk endpoint 0xD has invalid maxpacket 8 [ 489.465580][ T43] usb 6-1: config 4 interface 170 altsetting 43 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 489.477612][ T43] usb 6-1: config 4 interface 170 altsetting 43 endpoint 0x84 has an invalid bInterval 81, changing to 10 [ 489.489334][ T43] usb 6-1: config 4 interface 170 altsetting 43 endpoint 0x84 has invalid maxpacket 8880, setting to 1024 [ 489.501022][ T43] usb 6-1: config 4 interface 170 altsetting 43 has a duplicate endpoint with address 0x7, skipping [ 489.512124][ T43] usb 6-1: config 4 interface 170 altsetting 43 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 489.523396][ T43] usb 6-1: config 4 interface 170 altsetting 43 has an invalid descriptor for endpoint zero, skipping [ 489.553858][ T43] usb 6-1: config 4 interface 170 altsetting 43 has a duplicate endpoint with address 0xF, skipping [ 489.565024][ T43] usb 6-1: config 4 interface 170 altsetting 43 has a duplicate endpoint with address 0x87, skipping [ 489.584029][ T43] usb 6-1: config 4 interface 170 altsetting 43 has a duplicate endpoint with address 0x1, skipping [ 489.602230][ T43] usb 6-1: config 4 interface 170 altsetting 43 has a duplicate endpoint with address 0x1, skipping [ 489.621632][ T43] usb 6-1: config 4 interface 170 altsetting 43 has 12 endpoint descriptors, different from the interface descriptor's value: 69 [ 489.642483][ T43] usb 6-1: config 4 interface 165 altsetting 5 has an endpoint descriptor with address 0x5B, changing to 0xB [ 489.662917][ T43] usb 6-1: config 4 interface 165 altsetting 5 endpoint 0xB has an invalid bInterval 182, changing to 11 [ 489.676348][ T43] usb 6-1: config 4 interface 165 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 489.692293][ T43] usb 6-1: config 4 interface 165 altsetting 5 has an endpoint descriptor with address 0x76, changing to 0x6 [ 489.704255][ T43] usb 6-1: config 4 interface 165 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 489.716691][ T43] usb 6-1: config 4 interface 165 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 489.727551][ T43] usb 6-1: config 4 interface 165 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 489.738400][ T43] usb 6-1: config 4 interface 165 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 489.749424][ T43] usb 6-1: config 4 interface 165 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 489.760546][ T43] usb 6-1: config 4 interface 165 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 489.771555][ T43] usb 6-1: config 4 interface 165 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 489.782510][ T43] usb 6-1: config 4 interface 165 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 489.793450][ T43] usb 6-1: config 4 interface 165 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 489.817653][ T43] usb 6-1: config 4 interface 165 altsetting 5 endpoint 0x8 has invalid wMaxPacketSize 0 [ 489.840097][ T43] usb 6-1: config 4 interface 165 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 1024 [ 489.857170][ T5945] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 489.927381][ T43] usb 6-1: config 4 interface 165 altsetting 5 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 489.940879][ T43] usb 6-1: config 4 interface 168 has no altsetting 0 [ 489.948234][ T43] usb 6-1: config 4 interface 170 has no altsetting 0 [ 489.957568][ T43] usb 6-1: config 4 interface 165 has no altsetting 0 [ 489.966975][ T43] usb 6-1: New USB device found, idVendor=12d1, idProduct=1433, bcdDevice= 0.00 [ 489.976309][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.984390][ T43] usb 6-1: Product: ᩩ [ 490.006781][ T43] usb 6-1: Manufacturer: и [ 490.011309][ T43] usb 6-1: SerialNumber: syz [ 490.028193][ T5945] usb 2-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 490.037914][T14719] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 490.048756][ T5945] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.060472][ T5945] usb 2-1: config 0 descriptor?? [ 490.074974][ T5945] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 490.515182][ T5945] gspca_sn9c2028: read1 error 0 [ 490.671749][T14758] bridge0: port 3(syz_tun) entered blocking state [ 490.680291][T14759] /dev/rnullb0: Can't open blockdev [ 490.686183][T14758] bridge0: port 3(syz_tun) entered disabled state [ 490.693746][T14758] syz_tun: entered allmulticast mode [ 490.700256][T14758] syz_tun: entered promiscuous mode [ 490.707093][T14758] bridge0: port 3(syz_tun) entered blocking state [ 490.713612][T14758] bridge0: port 3(syz_tun) entered forwarding state [ 490.729312][ T5945] gspca_sn9c2028: read1 error -71 [ 490.737533][ T5945] sn9c2028 2-1:0.0: probe with driver sn9c2028 failed with error -71 [ 490.760810][ T5945] usb 2-1: USB disconnect, device number 116 [ 490.877024][T14765] /dev/rnullb0: Can't open blockdev [ 490.993821][ T43] usb-storage 6-1:4.168: USB Mass Storage device detected [ 491.048858][ T43] usb-storage 6-1:4.170: USB Mass Storage device detected [ 491.078348][ T43] usb-storage 6-1:4.165: USB Mass Storage device detected [ 491.129944][ T43] usb 6-1: USB disconnect, device number 36 [ 491.157499][T14778] overlay: Unknown parameter 'appraise' [ 491.562335][ T43] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 491.686825][T14792] overlayfs: failed to resolve './file0': -2 [ 491.727318][T14788] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 492.411687][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 492.424408][ T43] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 492.441622][ T43] usb 2-1: config 0 has no interface number 0 [ 492.447724][ T43] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 492.471712][ T43] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 492.483055][ T43] usb 2-1: config 0 interface 85 has no altsetting 0 [ 492.492638][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 492.507688][ T5867] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 492.508129][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.526648][T14807] /dev/rnullb0: Can't open blockdev [ 492.542825][ T43] usb 2-1: Product: syz [ 492.547964][ T43] usb 2-1: Manufacturer: syz [ 492.561778][ T43] usb 2-1: SerialNumber: syz [ 492.567714][ T43] usb 2-1: config 0 descriptor?? [ 492.776099][ T43] appletouch 2-1:0.85: Failed to read mode from device. [ 492.783962][T14783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.795963][ T43] appletouch 2-1:0.85: probe with driver appletouch failed with error -5 [ 492.797910][T14783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.819302][T14783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.830588][T14783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.833374][T14811] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 492.840147][T14813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.856251][ T1212] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 492.857601][T14813] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.905384][ T43] usb 2-1: USB disconnect, device number 117 [ 493.014029][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 493.032448][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 493.061747][ T1212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 493.081618][ T1212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 493.109525][ T1212] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 493.132052][ T1212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.153632][ T1212] usb 5-1: config 0 descriptor?? [ 493.159164][T14809] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 493.183190][T14835] [U]  [ 493.185983][T14835] [U] K{ [ 493.189015][T14835] [U] t 1ŠFfˊ`GJgo/mC [ 493.195966][T14835] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 493.211513][T14835] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 493.221939][T14835] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 493.257585][T14835] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 493.281123][T14835] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 493.292229][T14835] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 493.303770][T14835] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 493.406862][T14835] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 493.415359][T14835] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 493.428882][T14835] [U] 22Ʃx?0;3u [ 493.433033][T14835] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 493.457929][T14835] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 493.467202][T14835] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 493.475777][T14835] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 493.481917][T14835] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 493.494239][T14835] [U] ec [ 493.497344][T14835] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 493.516252][T14844] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2568'. [ 493.526274][T14842] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2568'. [ 493.536620][T14809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.548486][T14809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.764405][ T1212] plantronics 0003:047F:FFFF.0040: reserved main item tag 0xd [ 493.786490][ T1212] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 494.033557][T14834] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 494.068317][T14847] /dev/rnullb0: Can't open blockdev [ 494.659964][ T43] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 494.845121][ T43] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 494.856373][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 494.878466][ T43] usb 6-1: SerialNumber: syz [ 494.887009][ T43] usb 6-1: config 0 descriptor?? [ 495.098929][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.127642][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.139691][ T6028] usb 5-1: reset high-speed USB device number 50 using dummy_hcd [ 495.161850][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.174388][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.193092][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.211663][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.272542][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.299382][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.321094][T14861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.348202][T14861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.608247][ T43] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0f [ 495.627107][ T43] hackrf 6-1:0.0: Could not detect board [ 495.642741][ T43] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 495.670028][ T43] usb 6-1: USB disconnect, device number 37 [ 496.169138][ T9] usb 2-1: new low-speed USB device number 118 using dummy_hcd [ 496.340225][ T9] usb 2-1: No LPM exit latency info found, disabling LPM. [ 496.348893][ T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 496.359944][ T9] usb 2-1: config 1 interface 0 altsetting 4 endpoint 0x82 is Bulk; changing to Interrupt [ 496.370069][ T9] usb 2-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 496.383770][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 496.446864][T14887] /dev/rnullb0: Can't open blockdev [ 496.516541][T14890] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 496.519507][ T1212] usb 5-1: USB disconnect, device number 50 [ 496.563797][T14894] /dev/rnullb0: Can't open blockdev [ 496.637171][T14899] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2587'. [ 496.723121][T14902] /dev/rnullb0: Can't open blockdev [ 498.836753][ T1212] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 498.842929][T14929] random: crng reseeded on system resumption [ 498.934375][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.948773][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.957697][ T9] usb 2-1: Product: ဉ [ 498.962051][ T9] usb 2-1: Manufacturer: 竈뽷䙈䱇훡膟䶖沱窗֟㙣糑埋噏ᓋ讲칿咩朩拾㜄잵ꪂ쬂蜝웇뫉淉ቆ獚낁퉄旤月ⶢ⽙ⱴ㱂啨ꞽ數돉⨨䅉ᩎ徴䏣䍖⩞쿦휞椓劊豘土৏ﵛ쉖桤槛२䊈鄓뢑툞䧳䈧뽟㟳璕墳⥈潆Һ蔹芹ᦅ陒睿ꦞϏ퓞紎〃䃛퀳｝삇䃼샖펞胲醄컖ﮩ뼕䛼뎪콂奔聾鑿킲泽잗ꊷ [ 498.966071][T14931] ubi0: attaching mtd0 [ 499.002549][ T1212] usb 5-1: device descriptor read/64, error -71 [ 499.004725][ T9] usb 2-1: can't set config #1, error -71 [ 499.014974][T14931] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 499.018596][ T9] usb 2-1: USB disconnect, device number 118 [ 499.136587][T11800] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 499.256543][ T1212] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 499.266756][T11800] usb 6-1: device descriptor read/64, error -71 [ 499.386362][ T1212] usb 5-1: device descriptor read/64, error -71 [ 499.506474][ T1212] usb usb5-port1: attempt power cycle [ 499.511934][T11800] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 499.646148][T11800] usb 6-1: device descriptor read/64, error -71 [ 499.768596][T11800] usb usb6-port1: attempt power cycle [ 499.865987][ T1212] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 499.887992][ T1212] usb 5-1: device descriptor read/8, error -71 [ 500.105886][T11800] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 500.125825][ T1212] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 500.133711][T11800] usb 6-1: device descriptor read/8, error -71 [ 500.145972][ T5945] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 500.156150][ T1212] usb 5-1: device descriptor read/8, error -71 [ 500.265890][ T1212] usb usb5-port1: unable to enumerate USB device [ 500.315895][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 500.325418][ T5945] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 500.329779][T14941] netlink: 212388 bytes leftover after parsing attributes in process `syz.6.2603'. [ 500.333698][ T5945] usb 2-1: config 0 has no interface number 0 [ 500.348620][T14941] openvswitch: netlink: Message has 5 unknown bytes. [ 500.349513][ T5945] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 500.367420][ T5945] usb 2-1: config 0 interface 85 has no altsetting 0 [ 500.376675][ T5945] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 500.385744][T11800] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 500.393259][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.401395][ T5945] usb 2-1: Product: syz [ 500.405592][ T5945] usb 2-1: Manufacturer: syz [ 500.406303][T11800] usb 6-1: device descriptor read/8, error -71 [ 500.410181][ T5945] usb 2-1: SerialNumber: syz [ 500.419032][ T5945] usb 2-1: config 0 descriptor?? [ 500.536563][T11800] usb usb6-port1: unable to enumerate USB device [ 500.829405][ T5945] appletouch 2-1:0.85: Geyser mode initialized. [ 500.838031][ T5945] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input52 [ 501.038098][T14936] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2601'. [ 501.187375][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.193767][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.515414][T14962] /dev/rnullb0: Can't open blockdev [ 501.805830][T14992] No control pipe specified [ 501.812413][T14992] /dev/rnullb0: Can't open blockdev [ 501.942424][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.955315][T15004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.963587][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.990286][T15004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.244221][T11800] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 502.394077][T11800] usb 6-1: Using ep0 maxpacket: 16 [ 502.408433][T11800] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 502.421376][T11800] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.434193][T11800] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.446083][T11800] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.455469][T11800] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.464134][T11800] usb 6-1: Product: syz [ 502.468647][T11800] usb 6-1: Manufacturer: syz [ 502.473268][T11800] usb 6-1: SerialNumber: syz [ 502.820384][T15029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2626'. [ 502.839509][T15029] /dev/rnullb0: Can't open blockdev [ 502.892200][T11800] usb 6-1: 0:2 : does not exist [ 503.047400][T15041] /dev/rnullb0: Can't open blockdev [ 503.280671][T15045] netlink: 'syz.1.2632': attribute type 46 has an invalid length. [ 503.291783][T15045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2632'. [ 503.305647][T15045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.315218][T15045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.118768][T14998] /dev/rnullb0: Can't open blockdev [ 504.133967][T11800] usb 6-1: 1:0: failed to get current value for ch 0 (-22) [ 504.152217][T11800] usb 6-1: USB disconnect, device number 42 [ 504.447953][T15055] comedi comedi3: comedi_config --init_data is deprecated [ 504.507843][T15060] /dev/sg0: Can't lookup blockdev [ 504.669581][T15069] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.902228][ T5945] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 505.082063][ T5945] usb 6-1: Using ep0 maxpacket: 32 [ 505.093089][ T5945] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.113558][ T5945] usb 6-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 505.122792][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.130784][ T5945] usb 6-1: Product: syz [ 505.135134][ T5945] usb 6-1: Manufacturer: syz [ 505.139753][ T5945] usb 6-1: SerialNumber: syz [ 505.151677][ T5945] usb 6-1: config 0 descriptor?? [ 505.162872][ T5945] usb 6-1: bad CDC descriptors [ 505.173558][ T5945] usb 6-1: unsupported MDLM descriptors [ 505.382226][T11800] usb 6-1: USB disconnect, device number 43 [ 528.845924][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 554.426950][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 554.916700][ T31] INFO: task syz.0.1940:12565 blocked for more than 143 seconds. [ 554.924540][ T31] Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 [ 554.931761][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.940581][ T31] task:syz.0.1940 state:D stack:24552 pid:12565 tgid:12563 ppid:5857 task_flags:0x400140 flags:0x00004006 [ 554.952811][ T31] Call Trace: [ 554.956099][ T31] [ 554.959373][ T31] __schedule+0x1798/0x4cc0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 554.963916][ T31] ? rcu_is_watching+0x15/0xb0 [ 554.968732][ T31] ? __pfx___schedule+0x10/0x10 [ 554.973717][ T31] ? rcu_is_watching+0x15/0xb0 [ 554.978718][ T31] ? schedule+0x91/0x360 [ 554.982993][ T31] ? rcu_is_watching+0x15/0xb0 [ 554.988060][ T31] ? lock_release+0x4b/0x3e0 [ 554.992685][ T31] schedule+0x165/0x360 [ 554.997095][ T31] __fuse_simple_request+0xf15/0x18d0 [ 555.002499][ T31] ? __pfx___fuse_simple_request+0x10/0x10 [ 555.016386][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 555.022522][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 555.076358][ T31] fuse_flush+0x5d4/0x800 [ 555.080753][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 555.106332][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 555.111224][ T31] ? __fput_deferred+0x215/0x390 [ 555.128027][ T981] usb 2-1: USB disconnect, device number 119 [ 555.128058][ C1] appletouch 2-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 555.146955][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 555.151850][ T31] filp_flush+0xba/0x190 [ 555.176356][ T31] filp_close+0x1d/0x40 [ 555.180535][ T31] __se_sys_close_range+0x359/0x650 [ 555.185754][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 555.196243][ T31] ? __secure_computing+0xe2/0x2a0 [ 555.201397][ T31] do_syscall_64+0xfa/0x3b0 [ 555.205914][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.217009][ T31] ? clear_bhb_loop+0x60/0xb0 [ 555.222539][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.230992][ T31] RIP: 0033:0x7f84c4b8ebe9 [ 555.235430][ T31] RSP: 002b:00007f84c593b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 555.244752][ T31] RAX: ffffffffffffffda RBX: 00007f84c4db6090 RCX: 00007f84c4b8ebe9 [ 555.252923][ T31] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 555.260939][ T31] RBP: 00007f84c4c11e19 R08: 0000000000000000 R09: 0000000000000000 [ 555.268988][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.278120][ T31] R13: 00007f84c4db6128 R14: 00007f84c4db6090 R15: 00007ffe6e73fd68 [ 555.286111][ T31] [ 555.289269][ T31] INFO: lockdep is turned off. [ 555.294042][ T31] NMI backtrace for cpu 0 [ 555.294056][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 555.294076][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.294094][ T31] Call Trace: [ 555.294101][ T31] [ 555.294107][ T31] dump_stack_lvl+0x189/0x250 [ 555.294135][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.294158][ T31] ? __pfx__printk+0x10/0x10 [ 555.294185][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 555.294203][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 555.294219][ T31] ? __pfx__printk+0x10/0x10 [ 555.294242][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 555.294264][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 555.294281][ T31] watchdog+0xf60/0xfa0 [ 555.294299][ T31] ? watchdog+0x1e2/0xfa0 [ 555.294317][ T31] kthread+0x711/0x8a0 [ 555.294333][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.294350][ T31] ? __pfx_kthread+0x10/0x10 [ 555.294364][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.294381][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.294399][ T31] ? __pfx_kthread+0x10/0x10 [ 555.294414][ T31] ret_from_fork+0x3f9/0x770 [ 555.294435][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.294458][ T31] ? __switch_to_asm+0x39/0x70 [ 555.294473][ T31] ? __switch_to_asm+0x33/0x70 [ 555.294488][ T31] ? __pfx_kthread+0x10/0x10 [ 555.294503][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.294528][ T31] [ 555.294534][ T31] Sending NMI from CPU 0 to CPUs 1: [ 555.442621][ C1] NMI backtrace for cpu 1 [ 555.442636][ C1] CPU: 1 UID: 0 PID: 13691 Comm: syz.5.2243 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 555.442655][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.442665][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x37/0x90 [ 555.442687][ C1] Code: 08 00 e5 92 65 8b 15 68 04 25 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 57 83 b9 3c 16 00 00 00 74 4e 8b 91 18 16 00 00 <83> fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c 16 00 00 49 c1 e1 [ 555.442701][ C1] RSP: 0018:ffffc90004d47800 EFLAGS: 00000246 [ 555.442715][ C1] RAX: ffffffff822d1692 RBX: dffffc0000000000 RCX: ffff88802a385a00 [ 555.442727][ C1] RDX: 0000000000000000 RSI: 00000000000020b7 RDI: 0000000000000000 [ 555.442736][ C1] RBP: ffff88801e8a3924 R08: ffff88801e8a38e7 R09: 1ffff11003d1471c [ 555.442747][ C1] R10: dffffc0000000000 R11: ffffed1003d1471d R12: 000000000007a0b7 [ 555.442759][ C1] R13: 000000000000357b R14: 0000000000000000 R15: 000000000007a0b7 [ 555.442768][ C1] FS: 0000000000000000(0000) GS:ffff8881258d0000(0000) knlGS:0000000000000000 [ 555.442780][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.442790][ C1] CR2: 00007f03e4d909c0 CR3: 000000000e336000 CR4: 00000000003526f0 [ 555.442804][ C1] Call Trace: [ 555.442810][ C1] [ 555.442815][ C1] __update_page_owner_free_handle+0x292/0x470 [ 555.442832][ C1] ? __update_page_owner_free_handle+0x2e/0x470 [ 555.442850][ C1] __reset_page_owner+0x85/0x1f0 [ 555.442864][ C1] __free_frozen_pages+0xbc4/0xd30 [ 555.442885][ C1] vfree+0x25a/0x400 [ 555.442900][ C1] ? __pfx_kcov_close+0x10/0x10 [ 555.442916][ C1] kcov_close+0x28/0x50 [ 555.442930][ C1] __fput+0x449/0xa70 [ 555.442947][ C1] task_work_run+0x1d4/0x260 [ 555.442964][ C1] ? __pfx_task_work_run+0x10/0x10 [ 555.442980][ C1] ? kmem_cache_free+0x18f/0x400 [ 555.442997][ C1] do_exit+0x6b5/0x2300 [ 555.443013][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 555.443027][ C1] ? do_raw_spin_lock+0x121/0x290 [ 555.443041][ C1] ? __pfx_do_exit+0x10/0x10 [ 555.443057][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.443078][ C1] do_group_exit+0x21c/0x2d0 [ 555.443095][ C1] get_signal+0x1286/0x1340 [ 555.443120][ C1] arch_do_signal_or_restart+0x9a/0x750 [ 555.443139][ C1] ? __pfx_get_timespec64+0x10/0x10 [ 555.443157][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 555.443178][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 555.443197][ C1] ? rcu_is_watching+0x15/0xb0 [ 555.443217][ C1] exit_to_user_mode_loop+0x75/0x130 [ 555.443234][ C1] do_syscall_64+0x2bd/0x3b0 [ 555.443254][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.443268][ C1] ? clear_bhb_loop+0x60/0xb0 [ 555.443284][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.443298][ C1] RIP: 0033:0x7fc4447c14a5 [ 555.443310][ C1] Code: Unable to access opcode bytes at 0x7fc4447c147b. [ 555.443318][ C1] RSP: 002b:00007fc4429f5f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 555.443337][ C1] RAX: fffffffffffffdfc RBX: 00007fc4449b5fa0 RCX: 00007fc4447c14a5 [ 555.443348][ C1] RDX: 00007fc4429f5fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.443358][ C1] RBP: 00007fc444811e19 R08: 0000000000000000 R09: 0000000000000000 [ 555.443367][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 555.443376][ C1] R13: 00007fc4449b6038 R14: 00007fc4449b5fa0 R15: 00007fff0f293848 [ 555.443392][ C1] [ 555.445008][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 555.782678][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 555.793954][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.804014][ T31] Call Trace: [ 555.807298][ T31] [ 555.810238][ T31] dump_stack_lvl+0x99/0x250 [ 555.814835][ T31] ? __asan_memcpy+0x40/0x70 [ 555.819429][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.824636][ T31] ? __pfx__printk+0x10/0x10 [ 555.829240][ T31] vpanic+0x281/0x750 [ 555.833232][ T31] ? __pfx_vpanic+0x10/0x10 [ 555.837739][ T31] ? rcu_is_watching+0x15/0xb0 [ 555.842505][ T31] ? preempt_schedule+0xae/0xc0 [ 555.847357][ T31] ? preempt_schedule_common+0x83/0xd0 [ 555.852822][ T31] panic+0xb9/0xc0 [ 555.856538][ T31] ? __pfx_panic+0x10/0x10 [ 555.860956][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 555.866325][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 555.872472][ T31] watchdog+0xf9f/0xfa0 [ 555.876645][ T31] ? watchdog+0x1e2/0xfa0 [ 555.880990][ T31] kthread+0x711/0x8a0 [ 555.885062][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.889737][ T31] ? __pfx_kthread+0x10/0x10 [ 555.894336][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.899537][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.904744][ T31] ? __pfx_kthread+0x10/0x10 [ 555.909331][ T31] ret_from_fork+0x3f9/0x770 [ 555.913932][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.919050][ T31] ? __switch_to_asm+0x39/0x70 [ 555.923820][ T31] ? __switch_to_asm+0x33/0x70 [ 555.928584][ T31] ? __pfx_kthread+0x10/0x10 [ 555.933163][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.937927][ T31] [ 555.941302][ T31] Kernel Offset: disabled [ 555.945733][ T31] Rebooting in 86400 seconds..