last executing test programs: 2m28.253350518s ago: executing program 0 (id=1476): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0x6, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x64342, 0x0) syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080)) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='children\x00') syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x4, 0x100) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m27.634098225s ago: executing program 0 (id=1479): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af00, &(0x7f0000000000)) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x615, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x1600) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), r4) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r5, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe1c5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) 2m26.750154024s ago: executing program 0 (id=1482): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = semget$private(0x0, 0x2, 0x807) semctl$SETVAL(r0, 0x4, 0x10, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r1, 0x2000) 2m26.625198382s ago: executing program 0 (id=1483): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) mknod$loop(&(0x7f00000190c0)='./file0\x00', 0x1000, 0x1) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e) listen(r1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r4 = dup(r3) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0xc0105303, &(0x7f0000001280)={0x200000}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x0, 0xc9, 0x1}}}, 0x7) 2m25.621947331s ago: executing program 0 (id=1485): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = memfd_secret(0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="1964a064d0814696ca09f0cade73af45ac45d1c7", 0x14}, {&(0x7f00000000c0)="7fa27a7362a1604b53fd299118d3191863ba74633c4424a85fd89a97fa8fa9d191ad62f07d89ff0ab503b2e9e4894fd723593530fa5fcd20a4c9a6ff02697e292279307ba2eef08db3be37392935e3ce2c1ede0c9e9eaa981a347bec778c10427681dac80c3b4f742df53231c3622a4c6cffe1390bd0d65c95fcb0b467f722d1038ab1db0426799cff0f6daf1876a0e95926e5e66f8494a3c8756d061b280f12787075", 0xa3}], 0x2}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) read$FUSE(r2, 0x0, 0x0) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3c1e, 0x200020, 0xdc, 0x8, 0xb85, 0x4, 0x0, 0x0, 0x20, 0xffffff81}}, 0x50) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x1) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000200)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) memfd_secret(0x0) (async) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)="1964a064d0814696ca09f0cade73af45ac45d1c7", 0x14}, {&(0x7f00000000c0)="7fa27a7362a1604b53fd299118d3191863ba74633c4424a85fd89a97fa8fa9d191ad62f07d89ff0ab503b2e9e4894fd723593530fa5fcd20a4c9a6ff02697e292279307ba2eef08db3be37392935e3ce2c1ede0c9e9eaa981a347bec778c10427681dac80c3b4f742df53231c3622a4c6cffe1390bd0d65c95fcb0b467f722d1038ab1db0426799cff0f6daf1876a0e95926e5e66f8494a3c8756d061b280f12787075", 0xa3}], 0x2}, 0x40) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x42) (async) read$FUSE(r2, 0x0, 0x0) (async) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x29, 0x3c1e, 0x200020, 0xdc, 0x8, 0xb85, 0x4, 0x0, 0x0, 0x20, 0xffffff81}}, 0x50) (async) read$FUSE(r1, &(0x7f0000001180)={0x2020}, 0x2020) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x1) (async) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000200)) (async) 2m25.233776906s ago: executing program 0 (id=1487): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='Q3M'], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f0000001040)=[0x8, 0x9, 0x4, 0x81, 0x1, 0x6, 0x0, 0x97f, 0x1000, 0xa0010000, 0xf2, 0x2, 0x3e, 0x2, 0x2, 0x3, 0x8, 0x8, 0x9, 0x1000, 0x3, 0x5, 0x0, 0x200000, 0xc, 0xfffffffa, 0x7a, 0x80, 0x5d4, 0x37, 0x7, 0x79b, 0x0, 0x3, 0x2, 0x6, 0x8000, 0xfffffffe, 0x200, 0x400, 0xa435, 0x8, 0xfffffffa, 0x7, 0x3ff, 0x91, 0x4, 0x6, 0x4f10, 0x8, 0x9, 0x7, 0x8, 0x3, 0x800, 0x400, 0x9, 0x5, 0x2, 0x1, 0xfff, 0x2, 0x7, 0x5, 0x4, 0xfffffff8, 0xfff, 0x7, 0x2, 0x1, 0x7, 0xb0c, 0x0, 0x6, 0x7, 0x7, 0x800, 0x7, 0x3, 0x71c, 0x0, 0x7, 0x2, 0x987b, 0x6b, 0xb, 0x5, 0x1ff, 0x7f000, 0xfffffffc, 0x7ff, 0x2, 0x3, 0xfff, 0x3, 0x9, 0x5, 0x3, 0x3, 0x4, 0x6, 0x2, 0x6d, 0x4, 0x6, 0xf, 0x5, 0x1, 0xf5a, 0x3, 0x800, 0x1, 0x6, 0x75e, 0x9, 0x3, 0x4, 0x81, 0x784d, 0x858, 0x3, 0x40, 0x5, 0x40, 0x81, 0x3, 0x4, 0xcc5, 0x7, 0xfffffff9, 0x9, 0x1, 0x4, 0xa20, 0x8, 0x7fffffff, 0x7f, 0x6, 0x8, 0x7, 0xfff, 0x6, 0x261e, 0x8000, 0x7, 0x5, 0x8, 0x1000, 0x7ff, 0xff, 0x0, 0x4, 0x909f, 0x3, 0xff, 0x8, 0x5, 0x0, 0x1, 0x7, 0x8, 0x0, 0x9, 0x80000001, 0x0, 0xffffffff, 0xfffffffc, 0x7, 0x7, 0x4, 0xf, 0x80000000, 0x10001, 0xe6, 0xfffffffc, 0xfffffffb, 0x4000000, 0x2, 0x4, 0x9b8, 0x80000001, 0x5, 0x3, 0xfaa1, 0x7, 0x5, 0x689, 0x7, 0x2, 0x5, 0x2, 0x1, 0x6, 0x2, 0xe, 0x100, 0x7ff, 0x23d3, 0x6, 0x1, 0xde, 0x2, 0xffff, 0x40, 0x6, 0x7, 0x7, 0xa26, 0x101, 0x1, 0x6, 0x5, 0x8000, 0x2, 0x7, 0x80000000, 0x2, 0x26, 0x1, 0x0, 0x10001, 0x9, 0xf, 0x18, 0x3, 0xe3, 0xc0ba, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0x486, 0x8, 0x6, 0x6, 0x8, 0xb, 0x0, 0x5, 0x100, 0xfffffffc, 0x737, 0xfffffff7, 0xe, 0x6, 0x8, 0xc7c, 0x100, 0x92d9, 0x5, 0x4, 0x1, 0x7, 0x7fff, 0x0, 0x1, 0x4, 0xa38, 0x3, 0x9, 0x6, 0x2, 0x5, 0x4e26, 0x6, 0xffffffff, 0x0, 0x1, 0x5, 0x5, 0xa1, 0x4, 0x0, 0x3, 0x7fffffff, 0x8001, 0x46f3, 0x8d9, 0x692, 0x200, 0x7, 0x8, 0x7, 0xb4, 0x7, 0xfffffffb, 0x1, 0x8, 0x9, 0x6, 0x3, 0xfffffff4, 0x5, 0x4, 0xe, 0x3, 0xbff, 0x1, 0xfe8, 0x91d3, 0x4, 0x549, 0xa77c, 0x0, 0x6, 0x400, 0x8, 0xfffffffd, 0xdd3, 0x9, 0x6, 0x4, 0x401, 0x1, 0x10, 0x0, 0xff, 0x7, 0x2, 0x1, 0x9, 0x1, 0x40, 0x5, 0x4, 0xd81b, 0x3, 0x2, 0x6, 0x7ff, 0x8, 0x7, 0x5, 0x0, 0xfffff5a0, 0x100, 0x5, 0xd, 0xeb2d, 0x8, 0x8, 0x0, 0x2, 0x4, 0x9, 0x2, 0x2, 0x9, 0x90, 0x80, 0xedd, 0x5, 0x0, 0x4, 0xa52, 0x8, 0x1, 0x230, 0x28, 0xe, 0xe8, 0x1, 0x10000, 0x9, 0x3, 0x4, 0x10, 0x8, 0xb673, 0x100, 0x4, 0x4, 0x2, 0xfff, 0x7, 0x7f, 0x1, 0x174, 0x40, 0x9, 0x7, 0x8, 0x8, 0x0, 0x10001, 0x9, 0xb, 0x9, 0x9, 0xd5e00, 0x5, 0x800, 0xb, 0xa, 0xfff, 0x8, 0xa72, 0x7, 0x2, 0xf00, 0x4, 0x9, 0x1, 0x5, 0xfffffff3, 0x10001, 0xfffffffe, 0x9, 0x22, 0x3ba, 0xe35, 0xb9, 0x4, 0x8538, 0xfffffc00, 0xb5f7, 0xe, 0x101, 0x7, 0x6, 0x7, 0x8, 0x9, 0x3, 0x2, 0x3, 0x3, 0x5, 0x10, 0xfb7, 0x400, 0x400, 0x7, 0xf, 0xb, 0x5, 0x7fffffff, 0x3ff, 0x1, 0x40, 0x200, 0x1, 0x4, 0x5e42, 0x101, 0xa, 0x101, 0x80000000, 0x9, 0x8, 0x5, 0x9, 0x5, 0x7, 0x7, 0x58, 0x7, 0x8, 0x4, 0x5, 0x1cb06be8, 0x3, 0x9, 0x4, 0x9, 0x4, 0x1, 0x3, 0x9, 0xa, 0x3, 0x0, 0xfffffffd, 0xfffffffb, 0xffffffff, 0x7, 0x43, 0x9, 0x5, 0x0, 0x6, 0x0, 0x10, 0x7, 0x3, 0x4, 0x9, 0x7, 0x3, 0x0, 0x100, 0x1000000, 0x10000, 0x0, 0x9, 0xa7d8, 0x3, 0xb59d, 0x800, 0xffff, 0x3ff, 0x8, 0x4, 0x9, 0x4, 0x6, 0x0, 0x200, 0x8000, 0x5, 0x5, 0x7, 0x9, 0xffffffff, 0x7, 0x3, 0xfffffffd, 0x9, 0x7, 0x1000, 0x5, 0x0, 0x0, 0x6c1, 0x9, 0x6, 0x0, 0x6, 0x6, 0x9, 0x1, 0xea, 0xb, 0x3, 0x9, 0x8, 0x9, 0x8, 0x5, 0x3, 0x68, 0x0, 0xffff8000, 0x8, 0x2, 0x4, 0xffff7c50, 0x1, 0x5, 0x4, 0x3e98, 0x80, 0x9, 0x0, 0x3, 0x3, 0x0, 0x4, 0x8, 0x9, 0x80000001, 0x6, 0x5, 0xffff, 0x5, 0xe, 0xfa, 0xfffffff3, 0x5, 0x6, 0x8, 0x741e, 0x7, 0x4f7, 0x7c50, 0xe1, 0x3, 0x7, 0x6264, 0x19, 0x4, 0x7, 0x400, 0x1, 0x3, 0x7, 0xae, 0xfff, 0x8, 0x8001, 0x4, 0x8001, 0x20c0, 0x9, 0x2, 0xb51, 0xd3, 0x6, 0x40, 0x4, 0x80000000, 0x2, 0x0, 0x763, 0xfffff801, 0x7, 0x7, 0x4, 0x4, 0x0, 0xc, 0xe0df, 0xffffffff, 0x5, 0x0, 0x8, 0xc, 0x7, 0xc, 0x1, 0x52b, 0x2, 0xf, 0xffff, 0x100, 0x9, 0x9, 0x7fff, 0x8, 0x3, 0xfffff3a8, 0x0, 0x6, 0x7, 0xe, 0x7, 0x224, 0x5b, 0x2, 0xfffffffa, 0x9, 0x83cd, 0x2, 0x5d, 0x2, 0x3, 0x8, 0x6, 0xe, 0x4, 0x50db04c6, 0x0, 0x8, 0x8, 0xb994, 0x2b62, 0x4, 0x6, 0x15f9, 0x2580000, 0x9, 0x5, 0x3, 0x77, 0x1, 0x3, 0x2, 0x9, 0x87f, 0x7f, 0x1ff80000, 0x7fff, 0x8, 0x4, 0x9, 0x9ee6, 0x2, 0x748000, 0xfff, 0xfffffffa, 0x650, 0x7, 0x48, 0x4b, 0x9, 0x70ee1e0b, 0x9, 0x10001, 0xf, 0x818d, 0x1a36, 0x9, 0x4dc, 0x1ff, 0x3839, 0x8000, 0xfffffff4, 0x3c5aa5dc, 0xf7, 0x8, 0xfffffffe, 0x7fff, 0x3, 0x8, 0x5, 0xff, 0x55b6, 0x6b3, 0x400, 0x238f, 0x8079, 0xfffffff7, 0x0, 0x2, 0x101, 0x7fff, 0xf, 0xf, 0x400, 0x101, 0x0, 0x8, 0x5, 0x1, 0x8001, 0x8, 0x3, 0x0, 0x2, 0xa39, 0xf, 0xce, 0x8, 0xffff, 0x8, 0x9, 0x0, 0x9, 0x6, 0x3, 0x9, 0x8, 0x0, 0xa, 0x0, 0x8, 0x3, 0x9, 0x7, 0x4880, 0x2, 0x4, 0x10000, 0x8f3, 0xfffffff8, 0x1, 0x7, 0x2b2, 0x100, 0x9, 0xdd, 0x41f2, 0xfffffffa, 0x6, 0x55be, 0x7fff, 0x8, 0x63, 0x3, 0x80000001, 0x3, 0x9, 0x6, 0x0, 0x5, 0x1, 0x0, 0x4, 0x7fff, 0x3, 0x9, 0xa, 0x5, 0xea, 0x5e, 0x6, 0x10, 0x6e3fb12c, 0xee7, 0xf, 0xb, 0x0, 0x0, 0x3, 0x80000000, 0xa, 0xe, 0x4, 0xfffffff9, 0xfff, 0xe, 0xfffffffe, 0x7, 0x81, 0x3, 0x9, 0x0, 0x9, 0x51, 0x1, 0x8001, 0x4, 0x8, 0x7, 0x9, 0x1, 0x8, 0xff, 0x9, 0x7, 0x0, 0x80000000, 0x0, 0x3, 0x9, 0xff, 0x3, 0x6, 0xa, 0x4, 0x3, 0x5, 0x4, 0xffffffff, 0x6, 0x8, 0x7fff, 0x9, 0x5, 0x7, 0x1ff, 0x5, 0x311, 0xe40d, 0x7, 0x0, 0x29, 0x5, 0x2, 0x100, 0x9, 0x8, 0x9, 0xa3, 0x5, 0x8, 0x7, 0x50000, 0x9, 0x34f, 0x4, 0x7ff, 0x1, 0x1, 0x5aec, 0x75fb, 0x1, 0x6, 0x0, 0xf, 0x18eb, 0x6, 0x401, 0xd746, 0x7, 0x4, 0x615, 0xa, 0x7, 0x9, 0x7, 0x3, 0x4, 0x2, 0x3, 0x6, 0x401, 0x9, 0x1ff, 0x3, 0x40, 0x84, 0xb, 0x0, 0x3, 0x81, 0x8, 0x0, 0x2, 0x5, 0x1ff, 0x7, 0x6, 0x3, 0x10001, 0x6, 0x1000, 0x101, 0xfffffff9, 0x40, 0x2, 0xffffffff, 0x4, 0x9, 0xb6, 0x4ea9, 0x6, 0x6, 0xe71, 0x8000, 0x6, 0x1, 0x5, 0x2, 0x6, 0x5, 0x100, 0x0, 0x81, 0xa4, 0x7000, 0x69, 0x0, 0x2, 0x101, 0x9, 0x4, 0xcd1fc1b6, 0x5, 0x22e, 0x5, 0x4, 0xe, 0x8, 0x4, 0x2, 0xf3, 0x2, 0xe, 0xfffffff7, 0x800, 0x6, 0xffffff64, 0x7, 0x81, 0xd, 0x2, 0x8000000, 0x2, 0x121, 0x7fffffff, 0xdf, 0x12b3, 0x9, 0x49, 0xffff, 0x800, 0x20000000, 0x0, 0x3ff, 0x6, 0xa, 0x100, 0x9, 0x0, 0xa, 0xffffffff, 0x1ff, 0x6, 0x3, 0x97, 0xfffffffd, 0x6, 0x0, 0x3, 0xffffdc03, 0x9, 0x19, 0x6, 0x1, 0x9, 0x400, 0x4, 0x7, 0x5, 0x8, 0x8000, 0x5, 0x6, 0x180b8346, 0x6, 0xfffffff9, 0x2f20, 0x800, 0xfffffff7, 0x2, 0x10001, 0x5, 0x25c0, 0x4, 0x8, 0xcc26, 0x4e2c91be, 0x6, 0xfb7, 0x101, 0x3, 0x80000001, 0x6, 0x1, 0x9, 0x10001, 0x81, 0x1], 0x3, 0x400, 0x4}) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f000056d000/0x2000)=nil, &(0x7f0000239000/0x1000)=nil, &(0x7f0000191000/0x2000)=nil, &(0x7f0000241000/0x1000)=nil, &(0x7f0000906000/0x1000)=nil, &(0x7f000015f000/0x1000)=nil, &(0x7f0000ad4000/0x2000)=nil, &(0x7f000019e000/0x4000)=nil, &(0x7f0000ac7000/0x1000)=nil, &(0x7f00002f2000/0x2000)=nil, &(0x7f0000a8d000/0x2000)=nil, &(0x7f0000000240)="4202e8e7c657512c578f22c24036e5dd209b31e47d57b08e92dadfad74cf95ed93fb48a292678bd9a5ffb43a1b83a2f0610917571f699ac4791008aa96be62", 0x3f, r3}, 0x68) 2m10.081772586s ago: executing program 32 (id=1487): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$unlink(0x9, r0, 0xfffffffffffffffd) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB='Q3M'], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000080)={&(0x7f0000001040)=[0x8, 0x9, 0x4, 0x81, 0x1, 0x6, 0x0, 0x97f, 0x1000, 0xa0010000, 0xf2, 0x2, 0x3e, 0x2, 0x2, 0x3, 0x8, 0x8, 0x9, 0x1000, 0x3, 0x5, 0x0, 0x200000, 0xc, 0xfffffffa, 0x7a, 0x80, 0x5d4, 0x37, 0x7, 0x79b, 0x0, 0x3, 0x2, 0x6, 0x8000, 0xfffffffe, 0x200, 0x400, 0xa435, 0x8, 0xfffffffa, 0x7, 0x3ff, 0x91, 0x4, 0x6, 0x4f10, 0x8, 0x9, 0x7, 0x8, 0x3, 0x800, 0x400, 0x9, 0x5, 0x2, 0x1, 0xfff, 0x2, 0x7, 0x5, 0x4, 0xfffffff8, 0xfff, 0x7, 0x2, 0x1, 0x7, 0xb0c, 0x0, 0x6, 0x7, 0x7, 0x800, 0x7, 0x3, 0x71c, 0x0, 0x7, 0x2, 0x987b, 0x6b, 0xb, 0x5, 0x1ff, 0x7f000, 0xfffffffc, 0x7ff, 0x2, 0x3, 0xfff, 0x3, 0x9, 0x5, 0x3, 0x3, 0x4, 0x6, 0x2, 0x6d, 0x4, 0x6, 0xf, 0x5, 0x1, 0xf5a, 0x3, 0x800, 0x1, 0x6, 0x75e, 0x9, 0x3, 0x4, 0x81, 0x784d, 0x858, 0x3, 0x40, 0x5, 0x40, 0x81, 0x3, 0x4, 0xcc5, 0x7, 0xfffffff9, 0x9, 0x1, 0x4, 0xa20, 0x8, 0x7fffffff, 0x7f, 0x6, 0x8, 0x7, 0xfff, 0x6, 0x261e, 0x8000, 0x7, 0x5, 0x8, 0x1000, 0x7ff, 0xff, 0x0, 0x4, 0x909f, 0x3, 0xff, 0x8, 0x5, 0x0, 0x1, 0x7, 0x8, 0x0, 0x9, 0x80000001, 0x0, 0xffffffff, 0xfffffffc, 0x7, 0x7, 0x4, 0xf, 0x80000000, 0x10001, 0xe6, 0xfffffffc, 0xfffffffb, 0x4000000, 0x2, 0x4, 0x9b8, 0x80000001, 0x5, 0x3, 0xfaa1, 0x7, 0x5, 0x689, 0x7, 0x2, 0x5, 0x2, 0x1, 0x6, 0x2, 0xe, 0x100, 0x7ff, 0x23d3, 0x6, 0x1, 0xde, 0x2, 0xffff, 0x40, 0x6, 0x7, 0x7, 0xa26, 0x101, 0x1, 0x6, 0x5, 0x8000, 0x2, 0x7, 0x80000000, 0x2, 0x26, 0x1, 0x0, 0x10001, 0x9, 0xf, 0x18, 0x3, 0xe3, 0xc0ba, 0x0, 0xffffffff, 0x0, 0xfffffff8, 0x486, 0x8, 0x6, 0x6, 0x8, 0xb, 0x0, 0x5, 0x100, 0xfffffffc, 0x737, 0xfffffff7, 0xe, 0x6, 0x8, 0xc7c, 0x100, 0x92d9, 0x5, 0x4, 0x1, 0x7, 0x7fff, 0x0, 0x1, 0x4, 0xa38, 0x3, 0x9, 0x6, 0x2, 0x5, 0x4e26, 0x6, 0xffffffff, 0x0, 0x1, 0x5, 0x5, 0xa1, 0x4, 0x0, 0x3, 0x7fffffff, 0x8001, 0x46f3, 0x8d9, 0x692, 0x200, 0x7, 0x8, 0x7, 0xb4, 0x7, 0xfffffffb, 0x1, 0x8, 0x9, 0x6, 0x3, 0xfffffff4, 0x5, 0x4, 0xe, 0x3, 0xbff, 0x1, 0xfe8, 0x91d3, 0x4, 0x549, 0xa77c, 0x0, 0x6, 0x400, 0x8, 0xfffffffd, 0xdd3, 0x9, 0x6, 0x4, 0x401, 0x1, 0x10, 0x0, 0xff, 0x7, 0x2, 0x1, 0x9, 0x1, 0x40, 0x5, 0x4, 0xd81b, 0x3, 0x2, 0x6, 0x7ff, 0x8, 0x7, 0x5, 0x0, 0xfffff5a0, 0x100, 0x5, 0xd, 0xeb2d, 0x8, 0x8, 0x0, 0x2, 0x4, 0x9, 0x2, 0x2, 0x9, 0x90, 0x80, 0xedd, 0x5, 0x0, 0x4, 0xa52, 0x8, 0x1, 0x230, 0x28, 0xe, 0xe8, 0x1, 0x10000, 0x9, 0x3, 0x4, 0x10, 0x8, 0xb673, 0x100, 0x4, 0x4, 0x2, 0xfff, 0x7, 0x7f, 0x1, 0x174, 0x40, 0x9, 0x7, 0x8, 0x8, 0x0, 0x10001, 0x9, 0xb, 0x9, 0x9, 0xd5e00, 0x5, 0x800, 0xb, 0xa, 0xfff, 0x8, 0xa72, 0x7, 0x2, 0xf00, 0x4, 0x9, 0x1, 0x5, 0xfffffff3, 0x10001, 0xfffffffe, 0x9, 0x22, 0x3ba, 0xe35, 0xb9, 0x4, 0x8538, 0xfffffc00, 0xb5f7, 0xe, 0x101, 0x7, 0x6, 0x7, 0x8, 0x9, 0x3, 0x2, 0x3, 0x3, 0x5, 0x10, 0xfb7, 0x400, 0x400, 0x7, 0xf, 0xb, 0x5, 0x7fffffff, 0x3ff, 0x1, 0x40, 0x200, 0x1, 0x4, 0x5e42, 0x101, 0xa, 0x101, 0x80000000, 0x9, 0x8, 0x5, 0x9, 0x5, 0x7, 0x7, 0x58, 0x7, 0x8, 0x4, 0x5, 0x1cb06be8, 0x3, 0x9, 0x4, 0x9, 0x4, 0x1, 0x3, 0x9, 0xa, 0x3, 0x0, 0xfffffffd, 0xfffffffb, 0xffffffff, 0x7, 0x43, 0x9, 0x5, 0x0, 0x6, 0x0, 0x10, 0x7, 0x3, 0x4, 0x9, 0x7, 0x3, 0x0, 0x100, 0x1000000, 0x10000, 0x0, 0x9, 0xa7d8, 0x3, 0xb59d, 0x800, 0xffff, 0x3ff, 0x8, 0x4, 0x9, 0x4, 0x6, 0x0, 0x200, 0x8000, 0x5, 0x5, 0x7, 0x9, 0xffffffff, 0x7, 0x3, 0xfffffffd, 0x9, 0x7, 0x1000, 0x5, 0x0, 0x0, 0x6c1, 0x9, 0x6, 0x0, 0x6, 0x6, 0x9, 0x1, 0xea, 0xb, 0x3, 0x9, 0x8, 0x9, 0x8, 0x5, 0x3, 0x68, 0x0, 0xffff8000, 0x8, 0x2, 0x4, 0xffff7c50, 0x1, 0x5, 0x4, 0x3e98, 0x80, 0x9, 0x0, 0x3, 0x3, 0x0, 0x4, 0x8, 0x9, 0x80000001, 0x6, 0x5, 0xffff, 0x5, 0xe, 0xfa, 0xfffffff3, 0x5, 0x6, 0x8, 0x741e, 0x7, 0x4f7, 0x7c50, 0xe1, 0x3, 0x7, 0x6264, 0x19, 0x4, 0x7, 0x400, 0x1, 0x3, 0x7, 0xae, 0xfff, 0x8, 0x8001, 0x4, 0x8001, 0x20c0, 0x9, 0x2, 0xb51, 0xd3, 0x6, 0x40, 0x4, 0x80000000, 0x2, 0x0, 0x763, 0xfffff801, 0x7, 0x7, 0x4, 0x4, 0x0, 0xc, 0xe0df, 0xffffffff, 0x5, 0x0, 0x8, 0xc, 0x7, 0xc, 0x1, 0x52b, 0x2, 0xf, 0xffff, 0x100, 0x9, 0x9, 0x7fff, 0x8, 0x3, 0xfffff3a8, 0x0, 0x6, 0x7, 0xe, 0x7, 0x224, 0x5b, 0x2, 0xfffffffa, 0x9, 0x83cd, 0x2, 0x5d, 0x2, 0x3, 0x8, 0x6, 0xe, 0x4, 0x50db04c6, 0x0, 0x8, 0x8, 0xb994, 0x2b62, 0x4, 0x6, 0x15f9, 0x2580000, 0x9, 0x5, 0x3, 0x77, 0x1, 0x3, 0x2, 0x9, 0x87f, 0x7f, 0x1ff80000, 0x7fff, 0x8, 0x4, 0x9, 0x9ee6, 0x2, 0x748000, 0xfff, 0xfffffffa, 0x650, 0x7, 0x48, 0x4b, 0x9, 0x70ee1e0b, 0x9, 0x10001, 0xf, 0x818d, 0x1a36, 0x9, 0x4dc, 0x1ff, 0x3839, 0x8000, 0xfffffff4, 0x3c5aa5dc, 0xf7, 0x8, 0xfffffffe, 0x7fff, 0x3, 0x8, 0x5, 0xff, 0x55b6, 0x6b3, 0x400, 0x238f, 0x8079, 0xfffffff7, 0x0, 0x2, 0x101, 0x7fff, 0xf, 0xf, 0x400, 0x101, 0x0, 0x8, 0x5, 0x1, 0x8001, 0x8, 0x3, 0x0, 0x2, 0xa39, 0xf, 0xce, 0x8, 0xffff, 0x8, 0x9, 0x0, 0x9, 0x6, 0x3, 0x9, 0x8, 0x0, 0xa, 0x0, 0x8, 0x3, 0x9, 0x7, 0x4880, 0x2, 0x4, 0x10000, 0x8f3, 0xfffffff8, 0x1, 0x7, 0x2b2, 0x100, 0x9, 0xdd, 0x41f2, 0xfffffffa, 0x6, 0x55be, 0x7fff, 0x8, 0x63, 0x3, 0x80000001, 0x3, 0x9, 0x6, 0x0, 0x5, 0x1, 0x0, 0x4, 0x7fff, 0x3, 0x9, 0xa, 0x5, 0xea, 0x5e, 0x6, 0x10, 0x6e3fb12c, 0xee7, 0xf, 0xb, 0x0, 0x0, 0x3, 0x80000000, 0xa, 0xe, 0x4, 0xfffffff9, 0xfff, 0xe, 0xfffffffe, 0x7, 0x81, 0x3, 0x9, 0x0, 0x9, 0x51, 0x1, 0x8001, 0x4, 0x8, 0x7, 0x9, 0x1, 0x8, 0xff, 0x9, 0x7, 0x0, 0x80000000, 0x0, 0x3, 0x9, 0xff, 0x3, 0x6, 0xa, 0x4, 0x3, 0x5, 0x4, 0xffffffff, 0x6, 0x8, 0x7fff, 0x9, 0x5, 0x7, 0x1ff, 0x5, 0x311, 0xe40d, 0x7, 0x0, 0x29, 0x5, 0x2, 0x100, 0x9, 0x8, 0x9, 0xa3, 0x5, 0x8, 0x7, 0x50000, 0x9, 0x34f, 0x4, 0x7ff, 0x1, 0x1, 0x5aec, 0x75fb, 0x1, 0x6, 0x0, 0xf, 0x18eb, 0x6, 0x401, 0xd746, 0x7, 0x4, 0x615, 0xa, 0x7, 0x9, 0x7, 0x3, 0x4, 0x2, 0x3, 0x6, 0x401, 0x9, 0x1ff, 0x3, 0x40, 0x84, 0xb, 0x0, 0x3, 0x81, 0x8, 0x0, 0x2, 0x5, 0x1ff, 0x7, 0x6, 0x3, 0x10001, 0x6, 0x1000, 0x101, 0xfffffff9, 0x40, 0x2, 0xffffffff, 0x4, 0x9, 0xb6, 0x4ea9, 0x6, 0x6, 0xe71, 0x8000, 0x6, 0x1, 0x5, 0x2, 0x6, 0x5, 0x100, 0x0, 0x81, 0xa4, 0x7000, 0x69, 0x0, 0x2, 0x101, 0x9, 0x4, 0xcd1fc1b6, 0x5, 0x22e, 0x5, 0x4, 0xe, 0x8, 0x4, 0x2, 0xf3, 0x2, 0xe, 0xfffffff7, 0x800, 0x6, 0xffffff64, 0x7, 0x81, 0xd, 0x2, 0x8000000, 0x2, 0x121, 0x7fffffff, 0xdf, 0x12b3, 0x9, 0x49, 0xffff, 0x800, 0x20000000, 0x0, 0x3ff, 0x6, 0xa, 0x100, 0x9, 0x0, 0xa, 0xffffffff, 0x1ff, 0x6, 0x3, 0x97, 0xfffffffd, 0x6, 0x0, 0x3, 0xffffdc03, 0x9, 0x19, 0x6, 0x1, 0x9, 0x400, 0x4, 0x7, 0x5, 0x8, 0x8000, 0x5, 0x6, 0x180b8346, 0x6, 0xfffffff9, 0x2f20, 0x800, 0xfffffff7, 0x2, 0x10001, 0x5, 0x25c0, 0x4, 0x8, 0xcc26, 0x4e2c91be, 0x6, 0xfb7, 0x101, 0x3, 0x80000001, 0x6, 0x1, 0x9, 0x10001, 0x81, 0x1], 0x3, 0x400, 0x4}) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$SNDCTL_SEQ_SYNC(r4, 0x5101) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000280)={&(0x7f000056d000/0x2000)=nil, &(0x7f0000239000/0x1000)=nil, &(0x7f0000191000/0x2000)=nil, &(0x7f0000241000/0x1000)=nil, &(0x7f0000906000/0x1000)=nil, &(0x7f000015f000/0x1000)=nil, &(0x7f0000ad4000/0x2000)=nil, &(0x7f000019e000/0x4000)=nil, &(0x7f0000ac7000/0x1000)=nil, &(0x7f00002f2000/0x2000)=nil, &(0x7f0000a8d000/0x2000)=nil, &(0x7f0000000240)="4202e8e7c657512c578f22c24036e5dd209b31e47d57b08e92dadfad74cf95ed93fb48a292678bd9a5ffb43a1b83a2f0610917571f699ac4791008aa96be62", 0x3f, r3}, 0x68) 10.436663589s ago: executing program 1 (id=2480): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x1080) r1 = socket(0x1d, 0x2, 0x6) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x6a, 0x4, 0x4, 0x4) r2 = socket$unix(0x1, 0x29fe45c2ff877b02, 0x0) sendmmsg$unix(r2, &(0x7f00000001c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000000140)="9c32130cfc92c160faaa6ca9ebd84e86ad067687b0631e1d157a1915ad95ac3dbd7e90cad2176fbddf9b2506960176237c040d035f132048bc0b00c4ce907f4083001df2f42e32916b8c9221ef92a66dcb0c0b2bfa953e83a049422e360693cd966fbf931467ce133c058e", 0xfffffffffffffe05}], 0x1, 0x0, 0x0, 0x24008880}}], 0x1, 0x80) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r1) sendmsg$SMC_PNETID_GET(r1, &(0x7f00000005c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0xb35efe257877fc10}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x94, r4, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wg0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x94}, 0x1, 0x0, 0x0, 0x44}, 0x200400a0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "a73be44c1c579c46", "204a87e41376590dfac2645539cd44add8a89d124d59e96a6fcdd7b1ea9213a5", "9f36f2b2", "4bcee5537a37462f"}, 0x38) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000040)=0x4, 0x4) write$P9_RSTATu(r0, &(0x7f00000001c0)=ANY=[], 0x260) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000128bd7000fddbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x48}, 0x4) 6.385750044s ago: executing program 3 (id=2506): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/209, 0xd1}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f00000001c0)}], 0x3, 0x4, 0x80000000) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 5.490157718s ago: executing program 3 (id=2507): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$l2tp6(0xa, 0x2, 0x73) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011100ddd40f085e047507c14d0102030109021200010913b00609045c8100ff"], 0x0) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="12015002b8005108101407a0683e010203010902ea01030e00300309040309027f54cc00090502040004040403800109661bede31b6d40ffd5a6457d3483a7c64a2cf09c6b30e3"], 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xf21, 0x0) write$P9_RSTATu(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="600200007d020000051f0103"], 0x260) 3.918108306s ago: executing program 3 (id=2520): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) rt_sigtimedwait(&(0x7f0000001300)={[0xfffffff9]}, 0x0, 0x0, 0x8) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='omfs\x00', 0x200800, 0x0) 3.916348882s ago: executing program 1 (id=2481): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='freezer.parent_freezing\x00', 0x275a, 0x0) fchmod(r0, 0x20049549e2a2d659) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x202) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r3, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r1, &(0x7f00000001c0)={0xb, 0x10, 0xfa00, {&(0x7f0000000100), r3, 0x5}}, 0x18) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0xfffffffffffffffe, 0x0, {0x7}}, 0x28) creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd890010490d1070900c010303010902120001000000080904"], 0x0) socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 3.841498222s ago: executing program 4 (id=2522): r0 = syz_open_dev$video4linux(0x0, 0x3, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000140)) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pwritev2(r1, 0x0, 0x0, 0x7, 0x4, 0x19) (async) r2 = socket$inet(0x2, 0x801, 0x0) (async) r3 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[@ANYBLOB="40010000c947"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r3, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)={0x40, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, 0x0, 0x0) (async) shutdown(r2, 0x1) r4 = socket(0x29, 0x800, 0x0) (async) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r5, 0x1) ioctl$EXT4_IOC_GETSTATE(r4, 0x40046629, 0x0) (async) connect$bt_rfcomm(r5, &(0x7f0000000540)={0x1f, @none, 0x15}, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) (async) io_setup(0x0, &(0x7f0000000740)=0x0) io_cancel(r6, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, &(0x7f0000000780), 0x0, 0x4, 0x0, 0x2}, &(0x7f0000000800)) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000006c0)={'ip6gretap0\x00', &(0x7f0000000680)=@ethtool_rxfh={0x46, 0x3, 0x400000, 0x0, 0xff, "8330c0", 0x9, [0x8, 0xd]}}) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r8, 0xc0c89425, &(0x7f0000000580)={"35e54bd5b4ec808d8c3f4cfebfd7582f", 0x0, 0x0, {0x4, 0x8}, {0xc000000}, 0x2, [0x8, 0x9, 0x800, 0xdb7, 0xffffffffffffff56, 0xfffffffffffffff9, 0x210, 0x5, 0xffffffffdffffdce, 0x6cd, 0x5, 0x7f, 0x2, 0x7f, 0x1, 0x7]}) 2.587577172s ago: executing program 1 (id=2530): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001000)={{0x12, 0x1, 0x0, 0x6f, 0xfd, 0x90, 0x10, 0x525, 0x2888, 0x5369, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x3, [{{0x9, 0x4, 0x3, 0x3d, 0x0, 0x1a, 0x22, 0xf5}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x30, 0x0, 0x8, 0x801, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6558}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$nl_xfrm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0x134, 0x15, 0x1, 0x0, 0x25dfdbfb, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@loopback, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x10}, {0x8, 0xb69, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffff, 0x11}, {0x0, 0xfffffffffffffffa, 0x4}, 0x4, 0x0, 0x0, 0x1, 0x3, 0x3}, [@algo_crypt={0x7b, 0x2, {{'xts-camellia-asm\x00'}, 0x198, "f1949b4c35b13431eb8f11afa53b95eb58e95c97b579baba86b3ea1f3a0ff8ab605778ca2c91e62d0cf417c989a19cf7a7e303"}}]}, 0x134}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc714, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xd, 0xd0, 0x5, [{{0x9, 0x4, 0x0, 0x63, 0x1, 0x3, 0x1, 0x2, 0x2, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x36b}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2b, 0xf3, 0x5}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x201, 0x2, 0x0, 0x4, 0xff, 0x6}, 0xbb, &(0x7f00000005c0)=ANY=[@ANYBLOB="050fbb00039b100bfb95a10e4c4a1a5e2ead34fee9a3f975f40520f99bbdf28643b761b2fd9ea2058f957a9a6f830777ae7e15e4471d13c79f0d6a91fb043d72c1ba6e369619d94d950bca66254ba4c1dc152f6e0c03e1adb0fbd200d7d9763ed165d6e4d971b2c8a95b7cf5d46212ac12ccb7ac2cdc9ddbbb57db18813079899c14bcd79e62f8c2f3a60906a53515e1c026a9222e74884471f65b790710020225030014100a402280ffff0f0f09000ffffe0100ffff0000000000"], 0x3, [{0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x100a}}, {0xb3, &(0x7f00000006c0)=@string={0xb3, 0x3, "e4a42439e4cedd61b8ae1577ac0df6a281ed0c964d65e70d45c700693484a295de6ee8ba0a6e8211e64d962b007b596d988faefedaa5e35b8983a648e317a0bffa2883bef78718e28250f821d0555ccaae4d3e149d6eb963e2cad2d9fc721b859e7d6e4f11cd421642cc9785d3b89cabf1b028d3d9156ec920e104fdbe9b175ebc48f4ddf6181a8f4cbfaf54e4b2b3605beca6324be15c0d473676df6bbe9f7c2044494184b44d88774f0ef9b37546ca8b"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x430}}]}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0xd, 0x0, 0x400, 0x0, 0x175f, 0x9, 0x3, 0x7, 0x8, 0x7fff, 0x4, 0x5, 0x200, 0x9, 0xec, 0x6], 0xffff1000, 0x1}) mount(&(0x7f0000000180)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='efs\x00', 0x208002, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r4, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x12) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000300)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000340)) ioctl$SIOCX25SCUDMATCHLEN(r4, 0x89e7, &(0x7f0000000140)={0xe}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r6 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r7 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r7, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f00000004c0)={{0x7250, 0x2}, {0x5f4, 0x8}, 0x4efc, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) creat(&(0x7f0000001380)='./file0\x00', 0x29) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000800)=ANY=[@ANYRES32=r7, @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r8, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r8, &(0x7f0000000100)={0x50, 0x0, r9, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r8, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x2b) ioctl$sock_inet_SIOCSARP(r10, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {0x0, @random="89a08d8ed953"}, 0x8, {0x2, 0x4e20, @private=0xa010101}, 'tunl0\x00'}) 2.345582789s ago: executing program 4 (id=2533): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x480001, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20048080) (async) pread64(r0, &(0x7f00000001c0)=""/61, 0x3d, 0xf) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x40003, 0x0) write$evdev(r3, &(0x7f0000000240)=[{{0x77359400}, 0x17, 0xff, 0x4}, {{0x77359400}, 0x15, 0xfff, 0x1}], 0x30) (async) readv(r3, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/207, 0xcf}, {&(0x7f0000000380)=""/14, 0xe}, {&(0x7f00000003c0)=""/164, 0xa4}, {&(0x7f0000000480)=""/40, 0x28}], 0x4) (async) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000500)) (async) ioctl$TCFLSH(r0, 0x540b, 0x2) (async) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000540)={0x0, 0x0, 0x1, 0x0, '\x00', [{0xfffffff8, 0x7, 0x6, 0x5, 0x9, 0xffff}, {0x6, 0x0, 0x0, 0x6d00000000, 0x0, 0xa}], ['\x00']}) (async) ioctl$PIO_FONT(r3, 0x4b61, &(0x7f0000000640)="6a5101f6dc8ece38ce1cff7f2dc9f6c47bdc1b5388e1819469bd8046a2bea71c9deee707f759b51ceeaab64e22cf7659a6324cfc5d327423c028626e65fae2e4c703d7b4ed347dc16ff30e4818a3c80c421cf156b6fc7277a3a00803ebf3a4a188eec5cbac7d200180c5009386407bc1d356efd2d0cb8534dae3311d96ba1ad4d0a1546424c8fdbf04ae015aa10bbcf1b51b5836a680c642445f6a33f75a3d156121af2ac8dd2ec85e70caaeacbf5a261aab75cc136493ada0149f3138bf5385b089563927d675c333ee4699371364d50f344eb5826fffd9f6b74ff936ce402d2a109347599ead74f50820d7d31e") (async) ioctl$MEDIA_REQUEST_IOC_QUEUE(r0, 0x7c80, 0x0) ioctl$KDADDIO(r3, 0x4b34, 0x3) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) (async) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x10000) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000740)={0x8, 0x200, 0x400000, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f0000000780)={r4}) fcntl$setlease(r3, 0x400, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xe000, 0x60}}}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xd7d}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x44840) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000008c0)=0x0) write$cgroup_pid(r0, &(0x7f0000000900)=r5, 0x12) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000940)={0xd, 0x9, 0xf2}) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000000980)={0x0, @reserved}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000a40)) (async) timer_create(0x0, &(0x7f0000001b00)={0x0, 0x15, 0x0, @thr={&(0x7f0000000a80)="0a2c26c698f2607b06eb1a72060d2cfc2e799c4922705e840f9b1da2861e8e637e7893e78ec3b7e9f44d38ac0ed0c9afd787da510ed4148d33f3299c0d0c1fbd053a169a3855207c3e0f2b", &(0x7f0000000b00)="c23a0b88aaaf82b648af6ca28c8f34d0e6a59b54ae780985d9214e485760994defbcb1f8f1bfac2d01c7384b31621519affa5806ef7bc4cd2aba5651b5ff458e204a401eb640da7b4d4f7d8f232f6aaa143230abac0586e67021bef00151bb60833497c4ec1e68a515919d527ebf99b852cfbd50a407b63863c46bb613170d7eca5c73d87b5e6dd9d816d2c60bde2040381823dbbe9fc011ef6365959b6c51e6a24ea743584e3b83f3117e8b2013e425cad4f70f7e3a7c6b8c6bf3e16bdec87a68a59f90ddb01dd11936f0c91f08b8a0453f610489d098d8f3cd83e891d4f27f545da3aca3a37ad51d5597684341cce5a4e89515509b771f9d96ded045a43e5d86cd33d497c4f0dc53f85be74e23d23e93ce68d7e3bf9a69501869ee4263663e30d0ffe72df589d44470d51b6b1f5e46792336032c46e530fce1d14f80132fcbbb26d881f87def6d4fbb5bdf213158f5d7bb8a9d9f75adfa19b70defc473e8474fa466cc99dd56c5b3230f6108089eb86a5e88688a1229d62745d356b1494dc39a001806c875d33e1a91b9429933d35ddc054ab1db42be88d9a6ca0d236ddab0a8d7820c704f59e65e68c11648f90392d9c5b2d7e631b84f01440f782344e0736758a6a8d6e4cd74500ea427bdcc136ad36c505ca852636ba5203c1fe9059fc6072f47e66d65197b76462590cf457fe6e98354d039fcceae25e0173a82bb5fe2828d4b241cef147e7fd060a8f98fd424a991f95a9a2fb7505759e475595430fe3ac2480420062ff8ed5fb38791c982f5a1af4892cebbb940be38be0ec77af027f650ab10543b1bf9bd30d5fbeb8e1f4f88c061ef1b30d310e98dca865323d91b30e343354c222bf5aa86599a7ef843cfedeaf81445a2622fe7026b66c1a1568d741c577a27373f2b9d609004b8c662fcbef20707818d42fef971e26f41dec2f3a71c2401f1b5be0cd75635ed3d8e18efe3d8822e12f635ca071c58c267035a86c7718a9ef64ed6cde09f968e38bcfd334324a94aaf8c1d3138bcc4b83fca4bdec64744ccba162c3b8177e747fe0945d8de2a0b06862d7608dedcdbc1fc212c223490c7ac1f747fc1bfa36b384e67e129b6799cc95e985ba0ea72b2cc87c10a3cca4821d60ab701d0864723037e12f5753e9cc6d2d5b8de23c67147445c8348d752445bec364890d79655a10150945f950f8c65fbaccc5ab8909c001a9f2aeca61cbc94f8b30b0c2609457518a926616dea98ba27f4e68b7c0d13749cfde536749fecd1250ace77a7a0bc1dd7861fe8cfb0ab1f84c00c683c0d6fb01118e8921d229774ff8570fa91b9545103a09ad399ae32bac4769eb0d8c4e546fa6126d6679349a51b0c68bce9ed177d60cb06bcc5e54fd915b11f24fd13b4f548d7858097335b2b71bf83ca38c2f2fe5deb122727e311f91f0e799e05e14b850bb5d8baedaf60377c55e014d5709ff224ba00b405e8e668adddd7c48005cf1b8e7d2fdb48825c2272ae2c0dacaf8f9a6f989a2bdda91aa4c9296e22a7f1c3670c081ed8fca586833337ee335469eb02178adb69315aa61494e804f6b5b7ad9023bdaf76e2225ab081ebc14bd989f144f9aa744e953716172f286a5c6480edbacf6dda259c2f329ddb2d24df79dbc19b056580dad723e87ea0e0c30f35df5ecbe4527647df205bbb74bfdb06266ce26a9c9f38371bde8486902f5880e41f83dba4277ab5037cf26706e6a2945a5e1d7fc5f2a5f5c3528c5eeabd6f98a3eb597d3f02219331e13cc9004cf14bc15ea3b9ae0e3a813f8a3a62acff0281c4aaa461403cae06cf440812ebd5cd86765c1739c399cdc79dc6328f49728baa1cf1c8625a2715867b7772855ffbb3a5a5209c5e534b7a621e6d2ba7d1ffcc5d46687348da3ae378f225ede65fe055a9a41ed90b65164ef7b726b08c0a61aef7123045adfe39b6fd9dc22152340967c6b65922e6de8b9ed92d5cbe240f1a4662364c3bbdccbbb4b118de58ed21e72a3be3aba4f039e2624f6339f60472940b48a5eb2305f789ad572c1b7ed4b4e8719aa58a80601b79b10c566b85576841199396c26dfd09c68bdf54d8737c3a9c3c7f892a949c85cb89e79f9c361a5ced721ea26ed3b97daa291995af24b168b9341638600931045febf144dc01c18a0db42d58310fb4d296a158a4d6ff3ae81cfa933b18fba802da0f47b501fecc898a85a54a5ba2119ae96f345be66b4d9cb12f7498336f292d60e4da6ccb5088367e1fb1b85a15e435d8cc129679989d6755ca04203867d034ed620b5c031e0df5d97e5b8befa4e4c03ed03ca6185e2ce1ea768368b1236a68ffeebce5842bcf2f0bcee8cc8674b1630d66e75c8a7e31d33b28f311c6e6ab5566e6925a33832217900ad12da613b0f957ba5ef5e9bd2a3b61c760b291ee3b90d2f2dfb2d23013bcb9df2751521aa41dcbef932eb11b07422a8cf21d870667a77d1521166aefa2a5a5f8a00077e5640a5ff02517d23a124780cdecfa6309d91efd84003d7e2ec4922bc86af5972bee837ba6ca119f9876806513da9a3a9bab540bcdbc36285c8f69409ddfb2bff4a0cf7d9013c3a76805b32c1ee00467db67043fdf3387e744550a0b4ad35ff1b1ae2c4ff415bba99551d427c9e1105c13c3f3705a0b9dd0dc459c69d78eaec49aa70de2f33150641509e3c260f4b7a328677e8e056d02d8a7a79f6c95927531147d927d856a3358098acae3b1730968e4c8fcdd70845588315030a0996e5b840ec1e539dfd9b7471ae3026c39aeef06b279c7474f7285a576c78cea59da91f83fec7446d090a1d425641c247f95807339f92fbca41cf0ecd62b22898cc23f5844d3225b2f2dff6f58118acfe1db4ca4681e466caf545f0ed6aca653c973d81d690062cc55b01cbc52e3ac03c66df476f747673587fc3697f700b799f9aa9d0837a571dfea2294aaa5972ca5c02709475b796b59652fb0fac2c5f3264ac14ed72158122d5874e2ab98ad0f3f2182336923b50d184038f2bd6a1f5e895522121f11e65994c8fee19c0ac56297fc12a7aa6d9d821c29a9324e319f936868aa505ab5c350eec361546d264359cfe12dc6e45b42de7657f23584e04009ea946acd1e4d19a0c9f006feee2599a5fba5b9a7c25542ae47453bdcd6550fbd81c8c59e94eb73b79883f68ae3d257b2026dc28bb462a7ec6202b614cda35570eb0d4b1bf5249c0796a301a66e1eaa674b7c9d8826039a3909ed896183926fa194a00e825f55617601cba43d1c38120e6eb47b05c658f9d355ab08834dcf0f9c8b2b18c00f1a151256c9b5ae519f392a448c1631a46fde228600018c844c4a3c2546c09eeeab65d95b7f7c01ea0c0945c013452558b04056962e96f2106f2bd8d7a917195f57a630b4e351d88a33ea857164f05cadca65f12751ff273e2c7406ff76afd19b4a3d1a1230ed519b54e5cbb2496c122cc2b9022f214a4898c3314fa3a2401f77938891d28c139bcbd5b568d3cca4c7e1e2418afad48dd7db33c2027c89547e426a6224a279959ff2e038d11d767f69c7fb6a01bd0585ce328b72c44794e2f4a032f42571cc360f1e576e38215e16b4ffbd217a771af889d8bf4f4a01b9d82297e7e8d418e2a5d17b6695dbdb42901534d81ca9c573504ab3e4c4fd6848457344b3cd40a3e54ddca8b1ec331c21ac8bf9094ad1b773b9a2847dc1c3b707cc6e7677913a52b40070e495d6191d009264060df2d288b0de8ad897b35d0f33eb638e58130cac474a5245f41c2f9f449e8e11a7bedcb7b119e9cf8beb847e1b01f894523b45dc49e6a9ccd6581ac6277ff62d14b5967f42e0e81360470b167498443385d4e75ba404f5e145d2707126d6aa422da1a0d20a7ed105eb333ebef5dfc3d8c73cd552f9b629e2a09559ff8f30feecdfec7f4e4cace4d19174a13ac7c7d91e8a4b58c41e5af3f576e541a5745bc74fe2106b7c6402baef5f6059cc8c2c3502195eea6a7d18e7ae71644aefbb619a78d996301953bf7c268a2316a3a0e02400a790b42cbbfd341c0b96c66a2ad4fad5eb9f2f435afa1a80fd21d741683ca1b09610e075b81928c02fe40c3f5590f27210b09b28db15840354366bba2c83f1ba6883f39d2dedfbc3eba521118a38b2bc882b68b8b5ca97225490a85ab705aea826b915a56c5f6b8809b63011944da5687275c246ddd66bf617127d6087c66ea293ed1115fc43cbf51da6071e5b99f0f474dc6a15f19715650c1eaa1989403601e95d558424e30805f070a5a3ae518c8e3eb964275220f55556a695d0ae60cb4829faffb03b9d4739b65d27eaa6d9f39bd88d7b7a0f66f3b726c589e3e694d25ad873e3f790ffcd8fa5c7332571530d1743a359bff754f41a7173e1d34439a405dbfe38a9aff3b15c5e5c418c2309a81f6aa94dbab28a30c08fd0de5b4d1e742dca1011fc79691872ee354336571c3b5fd21087fa6e41f1e70f7ae5c6187827d95be5c97dcdac91eb983011ad4a41b8cad7114967ee77a1df87e80e6957fd7c6589c8cf4e069173490e88adc90643feb7f3f871885e0ee4e849cc6d37dd03c31cfaadc777464ebb00cd30307ef2eccd7b956576c1f4871c62a87ab53a0abe2849088089b16044dc09813bbeeeb81751ddbfc615069d0db293f074efc1a4a7e5dfca8395ad0efcedcbad706cbd50a58ee0febf7a419123b1a880c1739b83ea0d7870bfe81f7e054839899637b0ba90d7fffb7946ed756105b9c3e4852804352bd55419f65376213694b0cb727004422584f15b4c855593c443d1ff960853fd28326bc36d6c15a67fa6a6d07553b6146e563e358d75fe335977d24802cf628d1e55bdbd7b051355f0624b596aa028b2f001708bfe1d3c49d21b0eaed4b28e6f415f5a8b3e05652394ad764e53383d52d36805b90b29482112706be6c91505a8f394c8d36d29a186cf13cd560cc2c7cf75d4cd95d5a38cca510f3738eb5c01e4a635ff8903a3afef4b0708c98c4073bc7ab07571393e7cf866319a2a9575f366c07797d46b82650895bc492085830e4a0f58558dca728479f204de2bd1f383be4821ce0fd577845c18ce4e88e0ce3473df8154dad5dab6936a545833b0c0f0f091c15d51fd6ad17e66f52a6887347a91c36a8eb84048746c768d3a459b21d1d08a4e7ef10b87229dcc7aa0f8ea3ce2469800c0e63e7dd3085da66b2fb45ce7896f47ca212c1d74ccc3fe3f066e732270a462f8167d7259086f61d62c2daedaccb8cbffa935ad10eea63178503bf7bc368eac09a846f19095e3237d54aaa057b27f9d7916b58592609301a6ae1c21324107c6a54fcedc6b936ede8eb31d243aeea9d1ba9613a24f1db5ea3f49e6369dbaae7d4748f0f11b50cfd2f01633e43def22047944bf3fcfef4174b947f39cb9f21db370085cca904af0de89b7586387d2660a051d0410c13f7ac0350ea9c4e0503add8745d0c9fea1bec14904c3eb8d5cbde702dd8c351e939dec8f162268d741cd518772579a7784125669192a2cdc60718eee24654f44613824fea702ecc65fb0880ef9329cabd3454d3c14936d27f0bf09bfa806bd821b41e73da2e06eecbe886ac0100fa27f798687e2c52f72a94e46f87bee69f394909c1f2c499d31f00050aa264b2e8b41d53277310e588ef4e569fa7076145b98103b8af4f2a860b5c609bdd3078cb3b8ebd86649a87d7fae5197c4832055e2315bf6b938f85445d72bf0195cb8b350ec2239c49813fc74a5df1a0909854d5614b0fd4521434f7136115827bd856e0760e15fad5b835df944ac87e687dd32fe51605e"}}, &(0x7f0000001b40)) (async) syz_usb_connect(0x6, 0x797, &(0x7f0000001b80)={{0x12, 0x1, 0x201, 0x2f, 0x7c, 0x31, 0x20, 0xdf6, 0x36, 0x6ae9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x785, 0x3, 0x3, 0x3, 0x0, 0x1, [{{0x9, 0x4, 0x34, 0xa, 0xa, 0x1e, 0x23, 0x6d, 0x4, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfe01}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x9, 0x1ff, 0x4}, [@mdlm={0x15, 0x24, 0x12, 0xfffc}]}], [{{0x9, 0x5, 0x9, 0x3, 0x40, 0x1, 0xa0, 0x1, [@generic={0x23, 0xc, "21e56fb0f069faa9046db8d5b0bc37dd600a1ed765c86a6e027b4fcf9b32d35029"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x200, 0x40, 0x6, 0x1}}, {{0x9, 0x5, 0x16, 0xc, 0x40, 0x9, 0x8, 0x17}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x0, 0x9, 0xb, [@generic={0x8f, 0xe, "732c3555ba9e91bf3eec7152bab40edcce61c9b27d10ae91fd8efbde5609655704cd81577c04d0871c99ddbeba8226ca0c8776177bebf870f97d7f09c24509ec4b296d82bd850793ebc912cf53240cdcf5bee51fc8582943f79b25f9947bd6e4ed09c469ac6f58b885eb99990870259eee74f270caa250eed9ffb03d563a112bcf07581357f264333cd9c91a96"}]}}, {{0x9, 0x5, 0x8b, 0x6, 0x8, 0x80, 0xd3, 0x7, [@generic={0x2e, 0x0, "8fcee4eda3a37b0603ccdd9c2ac6ee364c2e7e45f4273f87c1ea168497972f62391d3af01ea899710984c06d"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x8, 0x21, 0xc1, [@generic={0x51, 0x21, "887977e4c59792dffef52b1a7d036a32e85695a2f853fce87f600d53cfae91b4cecd3ddc2d2ff1937ef1c90ce51fdccd581d5501dc0307f290d2d207a0800fe56651205f8cef8522b4109599a6b0a4"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x4, 0x78, 0x1, [@generic={0x3b, 0x8, "25d2cb90f5fa4dd0fafea48fb4c967530cc1c23d165e9000d4b3a5af7eec19ee5f4150329c413884c843c60332a9cacb6a799da97a3a56a5bc"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0xc, 0x81, 0xe4, [@generic={0x6b, 0xd, "99127f32d54f0e4147b7e945789f0ca8398d843f10aa8eac1005a4cf3d70bdd215bd7c015382fdcba740d758c7e3cc7ae7a79561ecf6e13a228db7555fdd8af4a922d6edb8bd814142fc85996b6aadb1ff3073a2115dcbad9a8a884a6809c1d453a8424f2f3c16e687"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0xa15}]}}, {{0x9, 0x5, 0x1, 0x10, 0x200, 0xfb, 0xb, 0x2}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0xff, 0x3, 0x6, [@generic={0xa1, 0xa, "e96ea2831c8c5fe9b781233627e92a17ab41d4778095c4442e59f606eea8dd80c8b29ccbb23bf10967119cea05f8f5ab3d71ef3537e87ca18ad6b25ee25132f7c5c3800eccad4fa52e4d0513f63162ed627adc8e67b3c14c17ddfaa21e8d66b613752c7c297fd3ce242912f81605aeb6e1971ad787f921884c4ae54025a146ad43a336640e92681df3c4e031ea087aaa4ea16be37421240c5cf428a8db29da"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x7}]}}]}}, {{0x9, 0x4, 0x57, 0x35, 0xa, 0xc3, 0xb8, 0xd1, 0x40, [@uac_control={{0xa, 0x24, 0x1, 0xa85e, 0x60}, [@processing_unit={0xa, 0x24, 0x7, 0x5, 0x1, 0xab, "5aa267"}]}], [{{0x9, 0x5, 0xf, 0x3, 0x3ff, 0x6, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xff}, @generic={0x9a, 0x24, "d9aec2aa64fd1f0ad12c962b895cba47327fd0ff2fdc50d786798ce861d86f12e345ac9614cae4089ce066f67dc7f4127eb41e3327e7d02cb9461ff74793f870789e64689dd26820f5d978c742fdb3f0e297d5450fe92a306437da0daa3dc50f28f0af95543f3bd8087554edd60e34a33e314437ea23e1c3f87eaa6681063bd3546e1acb831adf3f924ac1757e4b17be826f4725c4091aab"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0x4, 0x49, 0x8}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x7a, 0xfb, 0xc}}, {{0x9, 0x5, 0xc, 0x0, 0x20, 0x7, 0x80, 0x10, [@generic={0x3f, 0x5, "022dfe56aa4036795da7f0da91dd3adf210defa4d566419c76267eade66ed83c30f788d2076a394528fda874c1c22793067bd37f3fe28f497158e68c42"}, @uac_iso={0x7, 0x25, 0x1, 0x42, 0x35, 0x9d}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x1, 0x1, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1000}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x200}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x7, 0xb, 0x55, [@generic={0xfe, 0xc, "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"}, @generic={0x8a, 0xd, "533c41bd890d8033629504f8488401004e9dab5f55a144115af8d292edfa150f1cb3d522bef787a250fda6049684f289ab3d658a5769920bc46e32d76b8925af81ac6078db4e22168f7ccdad061f662a45f77406c8e61683628fd3e3c6eafb6ae85eb0fb7f40e2f7abfce469d7edc1fcc8e14dc1fe900ae04fa6a2928eed9458d79bf6c0b170d258"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x1, 0xf8, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0x1}, @generic={0x6a, 0x5, "6187cb309781dee5aaaaff2323e45e574af196430138e12e02dbcf20fcf026a21f89fdae8daace741a03a2e9fa5763c73932940ef3b1b2715ffdf687a910a0baf074b0039565c6d0f5a74a6fee710f68bd51b1d864b030e14452e57b517c6acb1179c597992b2f95"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x20, 0x9, 0x8, 0xf0}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x1, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x20, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0xb8, 0xd0}]}}, {{0x9, 0x5, 0x5, 0xc, 0x40, 0x26, 0xb3, 0x8, [@generic={0x2b, 0x8, "27fe5b6f68640d85e21a9fb0bbfb6038da7b4e8d207532b235d0b10ebb410a8d2ab51beede162c2a1b"}]}}]}}, {{0x9, 0x4, 0x98, 0x9, 0x6, 0xce, 0x58, 0xa7, 0x6, [], [{{0x9, 0x5, 0x7, 0x1, 0x8, 0x7, 0x8, 0x7, [@generic={0x29, 0xe, "91907f280b476a1108ca9fccc60aa955f2ad966def23f94f42c7bb612e7b3a72dc8594feefa9b5"}]}}, {{0x9, 0x5, 0x4, 0x8, 0x8, 0x7, 0xf7, 0x7}}, {{0x9, 0x5, 0x6, 0x3, 0x10, 0x0, 0x40, 0xd}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x81, 0x3, 0x72}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x1, 0x9, 0x6}}, {{0x9, 0x5, 0x6, 0x1, 0x10, 0x9, 0x3a, 0xd, [@generic={0x62, 0xf, "747095abb579c084d06eb6d00e45432c4b7a31b2d812ec909ea986168827f9c19555af24cd5d48b734bb7f1e13ef2d91d1ce2f3bf6ccbc62a5b8bf26e7f011351bced50b1e8b2e76efd772fddeae1240abcecea2d9c951e3d4388d7821a8ddec"}]}}]}}]}}]}}, &(0x7f0000002480)={0xa, &(0x7f0000002340)={0xa, 0x6, 0x300, 0x4, 0x40, 0x4, 0x0, 0xc}, 0x1e, &(0x7f0000002380)={0x5, 0xf, 0x1e, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0x41, 0x3, 0xfe, 0x6, 0x12}, @wireless={0xb, 0x10, 0x1, 0x0, 0x28, 0x2, 0xb, 0x2, 0xff}]}, 0x1, [{0xaf, &(0x7f00000023c0)=@string={0xaf, 0x3, "5188c005404db58d8b7696e37ecf07fafc12ef539abbefdb53c8ca5a1251ddeb86767c37b777b0ed1a8a4c782a8d66f8252d053f3303faa5c27112e86fb6902ae78221750fab717eeb37560496def345e09b1aa24605ccdd914d2918592b0bc651140ad92de0f77e9e2528155b9b35e371198f022a60e25c72b545a112644dc2de4f1c67291645aac6f8c934c70537001cfbc3b80dc46730d93ecb92abef85f548aa0068da7904c8377c263540"}}]}) ioctl$KVM_GET_STATS_FD_vm(r0, 0xaece) socket$alg(0x26, 0x5, 0x0) accept4$nfc_llcp(r3, &(0x7f00000024c0), &(0x7f0000002540)=0x60, 0x800) 2.150042947s ago: executing program 2 (id=2534): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_COALESCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80d1}, 0x4040) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r3, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 2.11870181s ago: executing program 2 (id=2535): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) (async) r1 = syz_pidfd_open(0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 32) ptrace(0x10, r2) (async) ptrace(0x11, r2) (async) preadv(r1, &(0x7f0000001380)=[{&(0x7f0000000180)=""/219, 0xdb}, {&(0x7f0000000080)=""/155, 0x9b}, {&(0x7f0000000280)=""/4086, 0xff6}, {&(0x7f0000001280)=""/170, 0xaa}, {&(0x7f0000001340)=""/38, 0x26}], 0x5, 0x2, 0x4) (async, rerun: 64) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (rerun: 64) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) 1.919328653s ago: executing program 2 (id=2536): r0 = syz_open_dev$vcsu(&(0x7f0000000000), 0x5, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0x13}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "1ff4078e58175fe3e465ea89e7"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x60}, 0x1, 0x0, 0x0, 0x8800}, 0x4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000240)={0x218, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x514, 0x45}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_IE={0x1d6, 0x2a, [@measure_req={0x26, 0x97, {0x40, 0x9, 0x4, "7d2295aa59a7e4ab9369831c1f575615e70debf8da49b535745cebaa4bf4477a6492ff31426ce48d59e02dfdde85c98e4de64df8700e5751ee0d7cf300185fa127f3de2a6d43084551b494f1a3746a3accf87ebf676771200178ccce47f13e4f1c0754d5f135ef5bf4419f1541614c70db4707439a2066ad20b63a20985572218c173877ba6aa7c468845c3ab6e799ebbfc89046"}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @fast_bss_trans={0x37, 0x8e, {0x8, 0x4, "3fdcc15e8cfdfe2100a961d1fd2b24b5", "e131f4968544013657c9ddb928b70983fe44fe9d5a8fc5cba5e29362410209e7", "9f91145cf8e31057f4ecd7881ea9f0b7f63ef36896b3ab682c4589dffda1b555", [{0x3, 0xb, "1f45077f972cfa3e9f6562"}, {0x4, 0x2, "6c9c"}, {0x3, 0x4, "20f1f57e"}, {0x4, 0x23, "ad505081628ed1964942c9124d8f27e1954142320a1efdbb492bd78f3f7fa87a08de17"}]}}, @tim={0x5, 0x79, {0x81, 0x5a, 0x40, "36927c1a8d693a8358cc769313651d8bbaae6ed2097fe657a02172de4225491312f5ec06e178569d07e1a628d588f9588687e5a0c43c65100b681d687b65076b8aa11cf198f421417163e9aae88d08b186b2a2ffe649d5c22bb61156752bc237e4bdde83a65b71235d05644504feee505bfd7ebf4a16"}}, @ssid={0x0, 0x18, @random="048c93b400d13e4eb8f2ae3b303bfd7bce41fd9c79e29f12"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}]}, 0x218}, 0x1, 0x0, 0x0, 0x4000080}, 0x48000) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f00000005c0)={r0, r0, 0xfffc, 0x99, &(0x7f0000000500)="0d9ffd1c25af430ff538f98471292b8bb635ad61aa22f473301482c2f48cd178a95ac055b2d5290122ed8aab51692b646873b143e623803fb451d9c88e16b2d30392f5fac891ad5cf94ec8dc39f97472992eacd8a1fb674218d63745ad9d66df5a84ea3a05d4167425819cefbb7597cc4af334247f06a5082cae86118334ecb06da4578791f5f1e2cde47c36b202ffec49da788cceb9e59906", 0x5, 0x9a, 0x7, 0xc0, 0x10, 0x3, 0x3, 'syz0\x00'}) socket$kcm(0x29, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x6f}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1685}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd8}]}, 0x38}, 0x1, 0x0, 0x0, 0x44011}, 0x4000010) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000780)=""/4096) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x3c, r3, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0xd}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x3c}}, 0x44050) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000001980)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xff, 0x55}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x80) ioctl$KIOCSOUND(r0, 0x4b2f, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x28, r1, 0x10, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x5f}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0xc084) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f0000001bc0)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x48, r1, 0x4, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xe9, 0xe}}}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xc5}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x2}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x8}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x7fff}]}, 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x4004004) recvmsg$can_raw(r0, &(0x7f0000002f00)={&(0x7f0000001c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x80, &(0x7f0000002e80)=[{&(0x7f0000001c80)=""/223, 0xdf}, {&(0x7f0000001d80)=""/4096, 0x1000}, {&(0x7f0000002d80)=""/254, 0xfe}], 0x3, &(0x7f0000002ec0)}, 0x41) r4 = creat(&(0x7f0000002f40)='./file0\x00', 0xe0) ioctl$BTRFS_IOC_QGROUP_CREATE(r4, 0x4010942a, &(0x7f0000002f80)={0x0, 0xfffffffffffffffc}) shutdown(r4, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000002fc0), 0x604802, 0x0) r6 = syz_open_dev$vcsa(&(0x7f0000003000), 0x3, 0x4840) getsockopt$EBT_SO_GET_INIT_INFO(r6, 0x0, 0x82, &(0x7f0000003040)={'nat\x00', 0x0, 0x0, 0x0, [0x5, 0xfffffffffffffffc, 0x4, 0x101, 0x4, 0x8]}, &(0x7f00000030c0)=0x78) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000003140)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000003180)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000003240)={'syztnl2\x00', &(0x7f00000031c0)={'ip6gre0\x00', 0x0, 0x4, 0x6, 0xc, 0x1, 0x40, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, 0x1, 0x80, 0x0, 0x5}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000003300)={'syztnl2\x00', &(0x7f0000003280)={'ip6gre0\x00', 0x0, 0x29, 0x6, 0x6, 0x800, 0x43, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8000, 0x10, 0x7fffffff, 0x2}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000003340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000003380)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000033c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000003680)={&(0x7f0000003100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003640)={&(0x7f0000003480)={0x1bc, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7986e86e1676fef1}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x8000}, 0x40000c0) 1.918677832s ago: executing program 2 (id=2537): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') sendfile(r0, r0, 0x0, 0x7ffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x2) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000480), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) (async) unlink(&(0x7f0000000280)='./file1\x00') (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 1.831959559s ago: executing program 2 (id=2538): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) r1 = socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) request_key(&(0x7f0000000040)='encrypted\x00', 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x2, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f00000000c0)={0x7, 0x2, 0x2, r6, 0xb}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x2, 0x5, 0x0, 0x4002004c5, 0x1000, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2], 0x8080000, 0x1144}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r8, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r8, &(0x7f0000000100)=ANY=[@ANYRESDEC=r8], 0xfdef) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYRES8=r2, @ANYRES16=r3, @ANYRESHEX=r4], 0x2ac}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r9) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r11, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r11, 0x0) 1.689977133s ago: executing program 4 (id=2539): ioctl$SG_GET_SCSI_ID(0xffffffffffffffff, 0x2276, &(0x7f0000000000)) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}}, 0x20000850) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x9, 0x301, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4840}, 0x4000) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x2, 0x70bd2a, 0x25dfdbfe, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8854}, 0x8800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x20000804) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000680), r2) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x40095) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0xca) accept4$ax25(r5, &(0x7f0000000780)={{0x3, @bcast}, [@null, @bcast, @rose, @netrom, @remote, @netrom, @default, @null]}, &(0x7f0000000800)=0x48, 0x800) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000840), r6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r2, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r3, 0x200, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "4603052bb68e0871286d8b838f0992f7"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x400}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x6}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000e0}, 0x40040) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000a40), r6) sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x20, r8, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044800) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b80), r6) sendmsg$NLBL_UNLABEL_C_STATICADD(r6, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa0, r9, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @empty}, @NLBL_UNLABEL_A_SECCTX={0x23, 0x7, 'system_u:object_r:var_log_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_team\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @loopback}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'dvmrp1\x00'}]}, 0xa0}}, 0x8010) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000d40), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x34, r10, 0x211, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r2) r12 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_NOOP(r2, &(0x7f0000000f80)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f40)={&(0x7f0000000ec0)={0x64, r11, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6=r12}]}, 0x64}, 0x1, 0x0, 0x0, 0x48000}, 0x4) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r13, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x74, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xcde}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x13}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x74}}, 0x4005) 1.59338982s ago: executing program 4 (id=2540): syz_usb_connect(0x1, 0x3f, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058da2"], 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) 1.039520941s ago: executing program 1 (id=2541): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbb5, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0xaea3, 0x0) madvise(&(0x7f000035c000/0x2000)=nil, 0x2000, 0x64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) pipe(&(0x7f0000000000)) 858.079794ms ago: executing program 1 (id=2542): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x800) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000000100)={{r3}, 0x0, 0x8, @unused=[0xaa, 0x10, 0x8, 0x4], @name="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"}) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ocfs2_dlmfs\x00', 0x1200074, 0x0) 821.536282ms ago: executing program 1 (id=2543): r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x1, @pix={0x0, 0x0, 0x34565559}}) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a0006000000000026b900000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x79, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002020000102505a1a440f1ffff00010902670001010000000904000012020600000b2406000002f332ac000005240000000d240f010000000087000600001524120600a317a88b045e4f01a607c0ffcb7e392a07241400000100032402"], 0x0) (async) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000000c0)={0xf}) (async, rerun: 64) sendmsg$key(r1, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005000000cc580a"], 0x80}}, 0x4000000) (rerun: 64) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='cifs\x00', 0x120006b, 0x0) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r3, 0x128, 0x70bd2b, 0xe5, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x440}, 0x8000) (async) socket$nl_xfrm(0x10, 0x3, 0x6) 448.933706ms ago: executing program 3 (id=2528): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'bond_slave_1\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0x7, 0x5, 0x7ff, 0x3, 0x3, 0x2, 0x3}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x800c0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000240)={0x60, 0x0, &(0x7f000025e000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x8, &(0x7f0000000180)=[{0x2, 0x9, 0x2}, {0x8, 0x3, 0xd0e0}, {0x7, 0x9, 0x6fc4b09e}, {0xdfc3, 0x1, 0x8}, {0x8, 0x0, 0x1}, {0x3, 0x1, 0x2}, {0x5, 0x1, 0x5}], 0x7, 0x7, 0x41, 0x38, 0xa, 0x4b}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84400, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r4, 0x3) listen(r4, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 190.248435ms ago: executing program 2 (id=2544): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_dev$sndctrl(&(0x7f0000000000), 0x750779b5, 0x4080) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x750779b5, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) 154.519399ms ago: executing program 4 (id=2545): creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x52, 0x1, 0x0, "600000eef2000020000000ddee4f9100000000000000000000ff0057e31e9400"}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 135.908514ms ago: executing program 3 (id=2546): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) write(r0, &(0x7f0000001400)="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", 0x1000) 1.974662ms ago: executing program 4 (id=2547): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES16=0x0, @ANYBLOB="1000"], 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000240)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$KVM_SET_XCRS(r6, 0x4188aea7, &(0x7f0000000480)={0x10, 0x5, [{0x1, 0x0, 0x8001}, {0x8, 0x0, 0x6}, {0x6, 0x0, 0x4}, {0x7, 0x0, 0x3f}, {0xffff, 0x0, 0x2}, {0x102b06b, 0x0, 0x1}, {0x0, 0x0, 0xb}, {0x6, 0x0, 0x4}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x8}, {0x7e4c, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x5, 0x0, 0xfffffffffffffffc}, {0x7fffffff, 0x0, 0x6}, {0xb33, 0x0, 0x4}, {0x401, 0x0, 0xd}]}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r7, 0xd3b43000) syz_usb_connect$uac1(0x2, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000206b1d01014000010203010902810003013140070904000000010120"], &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0}) renameat2(0xffffffffffffffff, 0x0, r4, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r7, @ANYRES8=r9], 0x7c}, 0x1, 0x0, 0x0, 0x4046080}, 0x8c884) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) 0s ago: executing program 3 (id=2548): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x20}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x40, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x7, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x4, 0x5, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x8, 0xb, 0x4, 0x9, 0x4, 0xd, 0xffff8001, 0x47, 0x8000, 0x1, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x10005, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x80000005, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x5, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x3, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x150, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x1ff, 0x0, 0x4, 0x2, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000eb6000/0x3000)=nil, 0x3000, 0x2000001, 0x4022810, 0xffffffffffffffff, 0xf02db000) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x4, 0x4, 0xffffffffffffffff}) getdents64(r1, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x40000, 0x0) fcntl$notify(r5, 0x402, 0x1a) fanotify_init(0x2, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r7 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x240000, 0x145) r9 = fanotify_init(0xf00, 0x0) fanotify_mark(r9, 0x1, 0x5000003a, r8, 0x0) mkdirat(r7, &(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(r10, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', r10, &(0x7f00000002c0)='./file0\x00', 0x2) kernel console output (not intermixed with test programs): acturer: syz [ 326.429301][ T94] usb 2-1: SerialNumber: syz [ 326.532311][T12561] /dev/rnullb0: Can't open blockdev [ 326.642121][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.659544][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.681617][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.711177][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.744295][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.774029][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.824435][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.849946][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.861863][T12572] __nla_validate_parse: 57 callbacks suppressed [ 326.861879][T12572] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2004'. [ 326.883275][T12515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.903769][T12515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.063037][ T94] usb 2-1: 0:2 : does not exist [ 327.088046][ T94] usb 2-1: 1:0: cannot get min/max values for control 4 (id 1) [ 327.124993][ T94] usb 2-1: USB disconnect, device number 118 [ 327.164886][T12579] /dev/rnullb0: Can't open blockdev [ 327.165878][ T7877] udevd[7877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 327.173920][T12582] /dev/rnullb0: Can't open blockdev [ 327.296077][T12577] can0: slcan on ttyS3. [ 327.336197][T12589] /dev/rnullb0: Can't open blockdev [ 327.342812][T12573] can0 (unregistered): slcan off ttyS3. [ 327.624505][T12602] /dev/rnullb0: Can't open blockdev [ 328.004293][ T5927] usbhid 5-1:0.0: can't add hid device: -71 [ 328.028560][ T5927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 328.063825][ T5927] usb 5-1: USB disconnect, device number 17 [ 328.071634][T12616] netlink: 'syz.4.2016': attribute type 8 has an invalid length. [ 328.099316][T12615] ptm ptm13: ldisc open failed (-12), clearing slot 13 [ 328.118057][T12619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2017'. [ 328.151822][T12619] /dev/rnullb0: Can't open blockdev [ 328.206590][T12625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.217825][T12625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.731514][T12644] /dev/rnullb0: Can't open blockdev [ 328.920808][ T94] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 329.137270][ T94] usb 3-1: Using ep0 maxpacket: 8 [ 329.201465][ T94] usb 3-1: config 0 has no interfaces? [ 329.286242][ T94] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 329.399053][ T94] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.407280][ T94] usb 3-1: Product: syz [ 329.411507][ T94] usb 3-1: Manufacturer: syz [ 329.416154][ T94] usb 3-1: SerialNumber: syz [ 329.425224][ T94] usb 3-1: config 0 descriptor?? [ 329.617254][ T10] usb 4-1: new full-speed USB device number 106 using dummy_hcd [ 329.778330][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 329.829414][ T10] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 329.841645][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.843700][ T24] usb 3-1: USB disconnect, device number 91 [ 329.860500][ T10] usb 4-1: config 0 descriptor?? [ 329.867349][T12649] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 329.954127][T12676] /dev/rnullb0: Can't open blockdev [ 330.097145][ T94] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 330.267201][ T94] usb 5-1: Using ep0 maxpacket: 32 [ 330.277948][ T94] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.289164][ T94] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.291386][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 330.299318][ T94] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 330.308428][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 330.318479][ T94] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.334283][ T94] usb 5-1: config 0 descriptor?? [ 330.337855][ T5907] usb 2-1: new low-speed USB device number 119 using dummy_hcd [ 330.350363][ T94] hub 5-1:0.0: USB hub found [ 330.361334][ T10] usb 4-1: USB disconnect, device number 106 [ 330.493330][T12691] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 330.502657][T12691] PKCS7: Only support pkcs7_signedData type [ 330.513965][T12691] /dev/rnullb0: Can't open blockdev [ 330.519288][ T5907] usb 2-1: Invalid ep0 maxpacket: 64 [ 330.558162][T12693] /dev/rnullb0: Can't open blockdev [ 330.564751][ T94] hub 5-1:0.0: 1 port detected [ 330.657129][ T5907] usb 2-1: new low-speed USB device number 120 using dummy_hcd [ 330.827135][ T5907] usb 2-1: Invalid ep0 maxpacket: 64 [ 330.832788][ T5907] usb usb2-port1: attempt power cycle [ 331.097252][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 331.178543][T12670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.190251][T12670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.198210][ T5907] usb 2-1: new low-speed USB device number 121 using dummy_hcd [ 331.209226][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2031'. [ 331.219706][ T5907] usb 2-1: Invalid ep0 maxpacket: 64 [ 331.228558][ T10] usb 5-1: USB disconnect, device number 18 [ 331.237232][ T94] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 331.257157][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 331.263516][ T24] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 331.275327][ T24] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 331.288949][ T24] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 331.300814][ T24] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 331.315029][ T24] usb 4-1: config 0 interface 0 has no altsetting 0 [ 331.324248][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 331.334531][ T24] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 331.344129][ T24] usb 4-1: Product: syz [ 331.351450][ T24] usb 4-1: Manufacturer: syz [ 331.356095][ T24] usb 4-1: SerialNumber: syz [ 331.358510][ T5907] usb 2-1: new low-speed USB device number 122 using dummy_hcd [ 331.369616][ T24] usb 4-1: config 0 descriptor?? [ 331.388381][ T5907] usb 2-1: Invalid ep0 maxpacket: 64 [ 331.400132][ T24] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 331.404185][ T5907] usb usb2-port1: unable to enumerate USB device [ 331.418436][ T24] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 331.627840][T12698] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 331.686648][T12698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.698332][T12698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.716841][ T5926] usb 4-1: USB disconnect, device number 107 [ 331.724184][ T5926] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 331.927772][ T24] usb 3-1: new low-speed USB device number 92 using dummy_hcd [ 332.104899][ T24] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 332.115986][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.145318][ T24] usb 3-1: config 0 descriptor?? [ 332.589540][ T24] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 332.638955][ T24] asix 3-1:0.0: probe with driver asix failed with error -71 [ 332.662162][ T24] usb 3-1: USB disconnect, device number 92 [ 332.764236][T12726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.783263][T12726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.792019][T12728] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2048'. [ 332.909291][T12732] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2048'. [ 332.962777][T12732] nbd: device at index 64 is going down [ 332.997147][ T94] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 333.029314][ T7877] udevd[7877]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 333.147230][ T94] usb 5-1: device descriptor read/64, error -71 [ 333.159705][T12738] /dev/rnullb0: Can't open blockdev [ 333.769853][T12753] /dev/rnullb0: Can't open blockdev [ 333.937162][ T94] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 334.067309][ T94] usb 5-1: device descriptor read/64, error -71 [ 334.080668][T12763] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2059'. [ 334.130652][T12761] /dev/rnullb0: Can't open blockdev [ 334.152803][T12768] /dev/rnullb0: Can't open blockdev [ 334.177434][ T94] usb usb5-port1: attempt power cycle [ 334.299755][T12780] /dev/rnullb0: Can't open blockdev [ 334.397195][ T24] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 334.487135][ T5907] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 334.527277][ T94] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 334.547496][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 334.553367][ T94] usb 5-1: device descriptor read/8, error -71 [ 334.564482][ T24] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 334.573986][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.582329][ T24] usb 2-1: Product: syz [ 334.590938][ T24] usb 2-1: Manufacturer: syz [ 334.598923][ T24] usb 2-1: SerialNumber: syz [ 334.607814][ T24] usb 2-1: config 0 descriptor?? [ 334.618021][ T24] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 334.657781][ T5907] usb 3-1: Using ep0 maxpacket: 16 [ 334.667610][ T5907] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 334.675639][ T5907] usb 3-1: config 0 has no interface number 0 [ 334.686333][ T5907] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 334.700507][ T5907] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 334.713007][ T5907] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 334.727180][ T5907] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 334.745530][ T5907] usb 3-1: Product: syz [ 334.749792][ T5907] usb 3-1: SerialNumber: syz [ 334.756213][ T5907] usb 3-1: config 0 descriptor?? [ 334.770056][ T5907] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 334.788556][ T5907] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input25 [ 334.797481][ T94] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 334.818330][ T94] usb 5-1: device descriptor read/8, error -71 [ 334.927677][ T94] usb usb5-port1: unable to enumerate USB device [ 334.968454][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 335.010184][ T5907] usb 3-1: USB disconnect, device number 93 [ 335.041723][T12796] netlink: 'syz.2.2070': attribute type 21 has an invalid length. [ 335.077267][T12796] netlink: 'syz.2.2070': attribute type 1 has an invalid length. [ 335.085737][ T5907] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 335.118108][T12799] /dev/rnullb0: Can't open blockdev [ 335.127871][ T24] gspca_ov534_9: reg_w failed -71 [ 335.159910][ T30] audit: type=1800 audit(1755963476.675:15): pid=12801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2072" name="nullb0" dev="devtmpfs" ino=2798 res=0 errno=0 [ 335.207578][ T30] audit: type=1326 audit(1755963476.725:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12802 comm="syz.1.2073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f051238ebe9 code=0x0 [ 335.417180][ T24] gspca_ov534_9: Unknown sensor 0000 [ 335.417255][ T24] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 335.441432][ T24] usb 2-1: USB disconnect, device number 123 [ 335.588584][T12818] /dev/rnullb0: Can't open blockdev [ 335.967155][ T5907] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 336.128413][ T5907] usb 3-1: config 0 has an invalid interface number: 6 but max is 0 [ 336.136535][ T5907] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.284511][T12830] /dev/rnullb0: Can't open blockdev [ 336.290330][T12829] /dev/rnullb0: Can't open blockdev [ 336.351558][ T10] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 336.383829][ T5907] usb 3-1: config 0 has no interface number 0 [ 336.390106][ T5907] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 336.413271][ T5907] usb 3-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 336.430379][ T5907] usb 3-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 336.439843][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.459537][ T5907] usb 3-1: Product: syz [ 336.463833][ T5907] usb 3-1: Manufacturer: syz [ 336.468644][ T5907] usb 3-1: SerialNumber: syz [ 336.474718][ T5907] usb 3-1: config 0 descriptor?? [ 336.481666][T12823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.489271][T12823] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 336.501450][ T5907] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 336.511449][ T10] usb 5-1: device descriptor read/64, error -71 [ 336.596525][ T30] audit: type=1326 audit(1755963478.115:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12838 comm="syz.3.2083" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5dc9b8ebe9 code=0x0 [ 336.659178][T12845] /dev/rnullb0: Can't open blockdev [ 336.758882][ T5907] usb 3-1: USB disconnect, device number 94 [ 336.777264][ T10] usb 5-1: new low-speed USB device number 24 using dummy_hcd [ 336.917154][ T10] usb 5-1: device descriptor read/64, error -71 [ 337.028183][ T10] usb usb5-port1: attempt power cycle [ 337.057143][ T55] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 337.207190][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 337.217024][ T55] usb 2-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.229949][ T55] usb 2-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 337.243407][ T55] usb 2-1: config 0 interface 0 has no altsetting 0 [ 337.251756][ T55] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 337.261443][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.278804][ T55] usb 2-1: config 0 descriptor?? [ 337.378615][ T10] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 337.409922][ T10] usb 5-1: device descriptor read/8, error -71 [ 337.528919][ T55] usbhid 2-1:0.0: can't add hid device: -71 [ 337.535280][ T55] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 337.549838][T12863] /dev/rnullb0: Can't open blockdev [ 337.562603][ T55] usb 2-1: USB disconnect, device number 124 [ 337.677225][ T10] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 337.717688][ T10] usb 5-1: device descriptor read/8, error -71 [ 337.834753][ T10] usb usb5-port1: unable to enumerate USB device [ 337.994556][T12890] netlink: 'syz.2.2100': attribute type 1 has an invalid length. [ 338.003764][T12890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2100'. [ 338.016266][T12890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2100'. [ 338.034098][T12890] /dev/rnullb0: Can't open blockdev [ 338.040796][ T55] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 338.177145][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 338.183314][T12897] netlink: 180 bytes leftover after parsing attributes in process `syz.2.2103'. [ 338.196880][T12897] /dev/rnullb0: Can't open blockdev [ 338.207200][ T55] usb 2-1: Using ep0 maxpacket: 8 [ 338.217340][ T55] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 338.225549][ T55] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.247424][ T55] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.265630][ T55] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.291066][ T55] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.304201][ T55] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.313518][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.341960][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 338.348816][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 338.358558][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.376759][ T10] usb 4-1: config 0 descriptor?? [ 338.409549][T12901] ./cgroup: Can't lookup blockdev [ 338.452246][T12903] /dev/rnullb0: Can't open blockdev [ 338.535427][ T55] usb 2-1: usb_control_msg returned -32 [ 338.565522][ T55] usbtmc 2-1:16.0: can't read capabilities [ 338.601130][T12917] /dev/rnullb0: Can't open blockdev [ 338.691323][ T10] (null): keene_cmd_main failed (-71) [ 338.700502][ T10] video4linux radio48: keene_cmd_main failed (-71) [ 338.707039][ T10] radio-keene 4-1:0.0: V4L2 device registered as radio48 [ 338.719504][ T10] usb 4-1: USB disconnect, device number 108 [ 338.896067][T12928] /dev/sg0: Can't lookup blockdev [ 338.902873][ T5926] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 339.059208][ T5926] usb 3-1: Using ep0 maxpacket: 32 [ 339.070537][ T5926] usb 3-1: unable to get BOS descriptor or descriptor too short [ 339.087934][ T5926] usb 3-1: config 128 has an invalid interface number: 127 but max is 3 [ 339.096570][ T5926] usb 3-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 339.107867][ T5926] usb 3-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 339.116950][ T5926] usb 3-1: config 128 has no interface number 0 [ 339.142617][ T5926] usb 3-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 339.167620][ T5926] usb 3-1: config 128 interface 127 has no altsetting 0 [ 339.188078][ T5926] usb 3-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 339.197422][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.205487][ T5926] usb 3-1: Product: syz [ 339.227371][ T5926] usb 3-1: Manufacturer: syz [ 339.233707][ T5926] usb 3-1: SerialNumber: syz [ 339.313299][T12937] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 339.452350][ T24] usb 2-1: USB disconnect, device number 125 [ 339.562840][ T5926] usb 3-1: USB disconnect, device number 95 [ 339.586893][ T7877] udevd[7877]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.615418][T12947] /dev/rnullb0: Can't open blockdev [ 340.191270][T12965] virtio-fs: tag not found [ 340.209472][T12965] virtio-fs: tag not found [ 340.215363][T12965] virtio-fs: tag not found [ 340.217247][ T5926] usb 4-1: new low-speed USB device number 109 using dummy_hcd [ 340.247373][T12965] virtio-fs: tag not found [ 340.256166][T12965] virtio-fs: tag not found [ 340.273617][T12965] virtio-fs: tag not found [ 340.306507][T12965] virtio-fs: tag not found [ 340.322800][T12965] virtio-fs: tag not found [ 340.331608][T12965] virtio-fs: tag not found [ 340.352539][T12965] virtio-fs: tag not found [ 340.357226][ T5926] usb 4-1: device descriptor read/64, error -71 [ 340.372658][T12965] virtio-fs: tag not found [ 340.380234][T12965] virtio-fs: tag not found [ 340.386406][T12965] virtio-fs: tag not found [ 340.393579][T12965] virtio-fs: tag not found [ 340.401194][T12965] virtio-fs: tag not found [ 340.408348][T12965] virtio-fs: tag not found [ 340.414226][T12965] virtio-fs: tag not found [ 340.421989][T12965] virtio-fs: tag not found [ 340.428063][T12965] virtio-fs: tag not found [ 340.434172][T12965] virtio-fs: tag not found [ 340.441623][T12965] virtio-fs: tag not found [ 340.447827][T12965] virtio-fs: tag not found [ 340.453656][T12965] virtio-fs: tag not found [ 340.462428][T12965] virtio-fs: tag not found [ 340.469059][T12965] virtio-fs: tag not found [ 340.475129][T12965] virtio-fs: tag not found [ 340.483214][T12965] virtio-fs: tag not found [ 340.489596][T12965] virtio-fs: tag not found [ 340.495426][T12965] virtio-fs: tag not found [ 340.503113][T12965] virtio-fs: tag not found [ 340.509243][T12965] virtio-fs: tag not found [ 340.515227][T12965] virtio-fs: tag not found [ 340.523793][T12965] virtio-fs: tag not found [ 340.530101][T12965] virtio-fs: tag not found [ 340.536053][T12965] virtio-fs: tag not found [ 340.544157][T12965] virtio-fs: tag not found [ 340.551195][T12965] virtio-fs: tag not found [ 340.559456][T12965] virtio-fs: tag not found [ 340.565395][T12965] virtio-fs: tag not found [ 340.573524][T12965] virtio-fs: tag not found [ 340.586896][T12965] virtio-fs: tag not found [ 340.593763][T12965] virtio-fs: tag not found [ 340.599681][ T5926] usb 4-1: new low-speed USB device number 110 using dummy_hcd [ 340.607368][ T5894] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 340.618205][T12965] virtio-fs: tag not found [ 340.624187][T12965] virtio-fs: tag not found [ 340.632765][T12965] virtio-fs: tag not found [ 340.639147][T12965] virtio-fs: tag not found [ 340.645160][T12965] virtio-fs: tag not found [ 340.652555][T12965] virtio-fs: tag not found [ 340.658700][T12965] virtio-fs: tag not found [ 340.664524][T12965] virtio-fs: tag not found [ 340.672484][T12965] virtio-fs: tag not found [ 340.679772][T12965] virtio-fs: tag not found [ 340.685719][T12965] virtio-fs: tag not found [ 340.694271][T12965] virtio-fs: tag not found [ 340.700452][T12965] virtio-fs: tag not found [ 340.706286][T12965] virtio-fs: tag not found [ 340.714900][T12965] virtio-fs: tag not found [ 340.721069][T12965] virtio-fs: tag not found [ 340.740495][T12965] virtio-fs: tag not found [ 340.746659][T12965] virtio-fs: tag not found [ 340.752425][ T5926] usb 4-1: device descriptor read/64, error -71 [ 340.761252][T12965] virtio-fs: tag not found [ 340.767958][T12965] virtio-fs: tag not found [ 340.773941][T12965] virtio-fs: tag not found [ 340.780936][ T5894] usb 2-1: Using ep0 maxpacket: 16 [ 340.789048][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.801464][ T5894] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.812351][T12965] virtio-fs: tag not found [ 340.823335][T12965] virtio-fs: tag not found [ 340.833414][ T5894] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 340.870966][ T5926] usb usb4-port1: attempt power cycle [ 340.889748][ T5894] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 340.900362][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.937852][ T5894] usb 2-1: config 0 descriptor?? [ 341.075766][ T94] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 341.094407][ T94] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 341.107538][ T94] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 341.115195][ T94] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 341.134662][ T94] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 341.153958][ T94] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 341.164752][ T5894] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 341.174817][ T94] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 341.185489][ T5894] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 341.193324][ T5894] shield 0003:0955:7214.0017: unknown main item tag 0x0 [ 341.203195][ T94] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 341.222029][ T5894] input: HID 0955:7214 Haptics as /devices/virtual/input/input26 [ 341.237159][ T5926] usb 4-1: new low-speed USB device number 111 using dummy_hcd [ 341.264561][T13014] ./cgroup: Can't lookup blockdev [ 341.280038][ T5926] usb 4-1: device descriptor read/8, error -71 [ 341.293810][ T5894] shield 0003:0955:7214.0017: Registered Thunderstrike controller [ 341.324525][ T5894] shield 0003:0955:7214.0017: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 341.344611][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 341.375606][T13015] fido_id[13015]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 341.421923][T13021] /dev/rnullb0: Can't open blockdev [ 341.423770][T13023] /dev/rnullb0: Can't open blockdev [ 341.515983][T13025] netlink: 'syz.1.2127': attribute type 2 has an invalid length. [ 341.525642][T13025] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2127'. [ 341.547172][ T5926] usb 4-1: new low-speed USB device number 112 using dummy_hcd [ 341.578807][ T7183] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 341.579670][ T10] usb 2-1: USB disconnect, device number 126 [ 341.597273][ T5926] usb 4-1: device descriptor read/8, error -71 [ 341.613201][ T7183] shield 0003:0955:7214.0017: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 341.737362][ T5926] usb usb4-port1: unable to enumerate USB device [ 341.819728][ T5927] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 342.127131][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 342.138288][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.167143][ T5927] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 342.176335][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.199044][ T5927] usb 3-1: config 0 descriptor?? [ 342.207218][ T7183] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 342.207232][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 342.409347][ T7183] usb 2-1: unable to get BOS descriptor or descriptor too short [ 342.431605][ T7183] usb 2-1: not running at top speed; connect to a high speed hub [ 342.444395][ T7183] usb 2-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=93.dd [ 342.454783][ T7183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.469008][ T7183] usb 2-1: Product: syz [ 342.473242][ T7183] usb 2-1: Manufacturer: syz [ 342.485760][ T7183] usb 2-1: SerialNumber: syz [ 342.588835][T13047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.598141][T13047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.616847][T13045] /dev/rnullb0: Can't open blockdev [ 342.723286][ T7183] kalmia 2-1:106.0: probe with driver kalmia failed with error -22 [ 342.740944][ T7183] usb 2-1: USB disconnect, device number 127 [ 343.124333][T13054] nfs: Deprecated parameter 'intr' [ 343.184226][T13055] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2150'. [ 343.194192][T13054] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2150'. [ 343.205315][T13055] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2150'. [ 343.241158][ T5219] bcm5974 3-1:0.0: could not read from device [ 343.258411][ T5927] bcm5974 3-1:0.0: could not read from device [ 343.272073][ T5219] bcm5974 3-1:0.0: could not read from device [ 343.302811][ T5927] input: failed to attach handler mousedev to device input27, error: -5 [ 343.323866][ T5219] bcm5974 3-1:0.0: could not read from device [ 343.335900][ T5219] bcm5974 3-1:0.0: could not read from device [ 343.351121][ T5927] usb 3-1: USB disconnect, device number 96 [ 343.477825][T13073] sctp: [Deprecated]: syz.1.2155 (pid 13073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.477825][T13073] Use struct sctp_sack_info instead [ 343.827239][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 344.000125][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 344.011178][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 344.028818][ T10] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 344.040854][ T10] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 344.058272][ T10] usb 5-1: Product: syz [ 344.064033][ T10] usb 5-1: Manufacturer: syz [ 344.074031][ T10] usb 5-1: SerialNumber: syz [ 344.285368][ T10] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 344.295369][ T10] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 344.314037][ T10] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2 [ 344.494158][ T10] usb 5-1: palm_os_3_probe - error -71 getting bytes available request [ 344.516630][ T10] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 344.532117][ T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 344.544855][ T10] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 344.558772][ T10] usb 5-1: USB disconnect, device number 27 [ 344.570277][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 344.591557][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 344.608802][ T10] visor 5-1:1.0: device disconnected [ 344.757136][ T7183] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 344.857256][ T5927] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 344.907126][ T7183] usb 2-1: Using ep0 maxpacket: 16 [ 344.912770][ T7183] usb 2-1: no configurations [ 344.917891][ T7183] usb 2-1: can't read configurations, error -22 [ 345.008323][ T5927] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 345.022939][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.032806][ T5927] usb 4-1: config 0 descriptor?? [ 345.049452][ T7183] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 345.051617][ T5927] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 345.207127][ T10] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 345.217233][ T7183] usb 2-1: Using ep0 maxpacket: 16 [ 345.223952][ T7183] usb 2-1: no configurations [ 345.232855][ T7183] usb 2-1: can't read configurations, error -22 [ 345.248737][ T7183] usb usb2-port1: attempt power cycle [ 345.255723][T13104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.266940][T13104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.313860][T13109] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 345.347146][ T10] usb 3-1: device descriptor read/64, error -71 [ 345.587151][ T10] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 345.597141][ T7183] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 345.618169][ T7183] usb 2-1: Using ep0 maxpacket: 16 [ 345.623809][ T7183] usb 2-1: no configurations [ 345.630200][ T7183] usb 2-1: can't read configurations, error -22 [ 345.682345][T13104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.693701][T13104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.727149][ T10] usb 3-1: device descriptor read/64, error -71 [ 345.757180][ T7183] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 345.785130][ T7183] usb 2-1: Using ep0 maxpacket: 16 [ 345.791502][ T7183] usb 2-1: no configurations [ 345.796110][ T7183] usb 2-1: can't read configurations, error -22 [ 345.803049][ T7183] usb usb2-port1: unable to enumerate USB device [ 345.847339][ T10] usb usb3-port1: attempt power cycle [ 345.985350][T13113] ./cgroup: Can't lookup blockdev [ 346.028351][T13116] /dev/rnullb0: Can't open blockdev [ 346.107605][T13104] /dev/rnullb0: Can't open blockdev [ 346.113899][ T5927] gspca_stv06xx: I2C: Read error writing address: -71 [ 346.122939][ T5927] usb 4-1: USB disconnect, device number 113 [ 346.188404][ T10] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 346.206329][T13125] /dev/rnullb0: Can't open blockdev [ 346.217675][ T10] usb 3-1: device descriptor read/8, error -71 [ 346.253478][T13127] /dev/rnullb0: Can't open blockdev [ 346.469376][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 346.508189][ T10] usb 3-1: device descriptor read/8, error -71 [ 346.617260][ T10] usb usb3-port1: unable to enumerate USB device [ 346.967332][ T7183] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 347.140047][ T7183] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 347.149261][ T7183] usb 4-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 347.157838][ T7183] usb 4-1: Product: syz [ 347.162003][ T7183] usb 4-1: Manufacturer: syz [ 347.166587][ T7183] usb 4-1: SerialNumber: syz [ 347.171561][ T94] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 347.181241][ T7183] usb 4-1: config 0 descriptor?? [ 347.337235][ T94] usb 5-1: Using ep0 maxpacket: 8 [ 347.345830][ T94] usb 5-1: unable to get BOS descriptor or descriptor too short [ 347.355701][ T94] usb 5-1: config 8 has an invalid interface number: 255 but max is 0 [ 347.365879][ T94] usb 5-1: config 8 has no interface number 0 [ 347.372989][ T94] usb 5-1: config 8 interface 255 has no altsetting 0 [ 347.384307][ T94] usb 5-1: string descriptor 0 read error: -22 [ 347.392974][ T94] usb 5-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 347.402922][ T94] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.558235][T13137] /dev/rnullb0: Can't open blockdev [ 347.599081][ T7183] usb 4-1: Firmware version (0.0) predates our first public release. [ 347.612571][ T7183] usb 4-1: Please update to version 0.2 or newer [ 347.622867][ T7183] usb 4-1: Firmware: build [ 347.828655][T13135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.838438][T13135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.902222][ T7183] usb 4-1: USB disconnect, device number 114 [ 347.968897][ T5926] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 348.001445][ T94] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.4-1, 00:00:00:00:00:00. [ 348.026330][ T94] usb 5-1: USB disconnect, device number 28 [ 348.137254][ T5926] usb 2-1: Using ep0 maxpacket: 16 [ 348.143741][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.155066][ T5926] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.165074][ T5926] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 348.175314][T13151] /dev/rnullb0: Can't open blockdev [ 348.180937][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.193109][ T5926] usb 2-1: config 0 descriptor?? [ 348.322864][T13153] netlink: 165 bytes leftover after parsing attributes in process `syz.2.2183'. [ 348.333933][T13153] /dev/rnullb0: Can't open blockdev [ 348.616095][T13166] comedi comedi0: comedi_config --init_data is deprecated [ 348.617264][ T5927] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 348.628151][T13166] /dev/rnullb0: Can't open blockdev [ 348.637441][T13140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.646027][T13140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.707638][T13173] 9p: Unknown parameter 'trans' [ 348.714762][ T5926] usbhid 2-1:0.0: can't add hid device: -71 [ 348.733087][ T5926] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 348.756830][ T5926] usb 2-1: USB disconnect, device number 6 [ 348.798963][T13179] /dev/rnullb0: Can't open blockdev [ 348.808153][ T5927] usb 3-1: device descriptor read/64, error -71 [ 348.855708][T13181] /dev/rnullb0: Can't open blockdev [ 348.866483][T13183] ./cgroup: Can't lookup blockdev [ 348.987350][T13191] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.2197'. [ 349.002343][T13191] openvswitch: netlink: Message has 512 unknown bytes. [ 349.057368][ T5927] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 349.187238][ T5927] usb 3-1: device descriptor read/64, error -71 [ 349.257219][ T94] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 349.299423][ T5927] usb usb3-port1: attempt power cycle [ 349.309201][ T5865] Bluetooth: hci1: unexpected event for opcode 0x2029 [ 349.429217][ T94] usb 5-1: unable to get BOS descriptor or descriptor too short [ 349.439250][ T94] usb 5-1: config 14 has an invalid interface number: 2 but max is 0 [ 349.451859][ T94] usb 5-1: config 14 has an invalid descriptor of length 36, skipping remainder of the config [ 349.478140][ T94] usb 5-1: config 14 has no interface number 0 [ 349.487426][ T94] usb 5-1: too many endpoints for config 14 interface 2 altsetting 5: 36, using maximum allowed: 30 [ 349.513320][ T94] usb 5-1: config 14 interface 2 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 349.541945][ T94] usb 5-1: config 14 interface 2 has no altsetting 0 [ 349.570701][ T94] usb 5-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc [ 349.580676][ T94] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.599222][ T94] usb 5-1: Product: syz [ 349.610930][ T94] usb 5-1: Manufacturer: syz [ 349.620336][ T94] usb 5-1: SerialNumber: syz [ 349.658368][ T5927] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 349.697667][ T5927] usb 3-1: device descriptor read/8, error -71 [ 349.852120][ T94] usb 5-1: USB disconnect, device number 29 [ 349.945925][ T5927] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 349.978903][ T5927] usb 3-1: device descriptor read/8, error -71 [ 350.090398][ T5927] usb usb3-port1: unable to enumerate USB device [ 350.161689][T13211] /dev/rnullb0: Can't open blockdev [ 350.228749][T13213] /dev/rnullb0: Can't open blockdev [ 350.322310][T13217] tmpfs: Unknown parameter 'G' [ 350.330960][T13217] /dev/rnullb0: Can't open blockdev [ 350.373079][T13220] netlink: 328 bytes leftover after parsing attributes in process `syz.1.2207'. [ 350.386062][T13220] /dev/rnullb0: Can't open blockdev [ 350.428352][T13223] program syz.1.2208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.476222][ T5865] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 350.486558][T13227] /dev/rnullb0: Can't open blockdev [ 350.524819][T13229] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 350.594095][T13233] erofs (device nbd4): cannot find valid erofs superblock [ 350.765981][T13241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2215'. [ 351.250832][T13238] /dev/rnullb0: Can't open blockdev [ 351.388518][ T5927] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 351.448997][T13261] fuse: Unknown parameter 'ePaY8c^a*lro00000000000000000000' [ 351.464634][T13264] /dev/rnullb0: Can't open blockdev [ 351.537198][ T5927] usb 5-1: device descriptor read/64, error -71 [ 351.581146][T13268] /dev/rnullb0: Can't open blockdev [ 351.790478][ T5927] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 351.799617][T13271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 351.957174][ T5927] usb 5-1: device descriptor read/64, error -71 [ 352.077244][ T5927] usb usb5-port1: attempt power cycle [ 352.427199][ T5927] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 352.448516][ T5927] usb 5-1: device descriptor read/8, error -71 [ 352.559393][T13289] random: crng reseeded on system resumption [ 352.572769][T13289] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 352.583288][T13289] SQUASHFS error: Failed to read block 0x0: -5 [ 352.590687][T13289] unable to read squashfs_super_block [ 352.653291][T13290] comedi comedi3: pcl812: I/O port conflict (0x4f29,16) [ 352.667196][ T94] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 352.687281][ T5927] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 352.711489][ T5927] usb 5-1: device descriptor read/8, error -71 [ 352.818535][ T94] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 352.826646][ T94] usb 3-1: config 0 has no interface number 0 [ 352.829226][ T5927] usb usb5-port1: unable to enumerate USB device [ 352.832944][ T94] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.850128][ T94] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.859999][ T94] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00 [ 352.869179][ T94] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.883543][ T94] usb 3-1: config 0 descriptor?? [ 353.347205][ T5865] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 353.355521][ T5865] Bluetooth: hci1: Injecting HCI hardware error event [ 353.362539][ T5870] Bluetooth: hci1: hardware error 0x00 [ 353.487168][ T7183] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 353.505715][ T94] usbhid 3-1:0.32: can't add hid device: -71 [ 353.515690][ T94] usbhid 3-1:0.32: probe with driver usbhid failed with error -71 [ 353.547389][ T94] usb 3-1: USB disconnect, device number 105 [ 353.647187][ T7183] usb 4-1: Using ep0 maxpacket: 8 [ 353.669305][ T7183] usb 4-1: config 3 has an invalid interface number: 86 but max is 1 [ 353.677822][ T7183] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 353.686506][ T7183] usb 4-1: config 3 has an invalid interface number: 12 but max is 1 [ 353.704891][ T7183] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 353.727107][ T7183] usb 4-1: config 3 has no interface number 0 [ 353.733222][ T7183] usb 4-1: config 3 has no interface number 1 [ 353.739618][ T7183] usb 4-1: config 3 interface 86 altsetting 219 has an endpoint descriptor with address 0x46, changing to 0x6 [ 353.751796][ T7183] usb 4-1: config 3 interface 86 altsetting 219 endpoint 0x6 has an invalid bInterval 28, changing to 7 [ 353.769333][ T7183] usb 4-1: config 3 interface 86 altsetting 219 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 353.794364][ T7183] usb 4-1: config 3 interface 86 altsetting 219 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 353.830249][ T7183] usb 4-1: config 3 interface 12 altsetting 11 endpoint 0x1 has an invalid bInterval 160, changing to 11 [ 353.844629][ T7183] usb 4-1: config 3 interface 12 altsetting 11 endpoint 0x1 has invalid maxpacket 1536, setting to 1024 [ 353.846537][T13306] overlayfs: failed to resolve './bus': -2 [ 353.856209][ T7183] usb 4-1: config 3 interface 12 altsetting 11 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 353.862648][T13309] /dev/rnullb0: Can't open blockdev [ 353.873119][ T7183] usb 4-1: config 3 interface 12 altsetting 11 has an invalid descriptor for endpoint zero, skipping [ 353.890164][ T7183] usb 4-1: config 3 interface 12 altsetting 11 has a duplicate endpoint with address 0x1, skipping [ 353.936801][ T7183] usb 4-1: config 3 interface 12 altsetting 11 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 353.984567][ T7183] usb 4-1: config 3 interface 12 altsetting 11 has a duplicate endpoint with address 0xF, skipping [ 353.999076][ T7183] usb 4-1: config 3 interface 12 altsetting 11 has a duplicate endpoint with address 0xA, skipping [ 354.012875][ T7183] usb 4-1: config 3 interface 86 has no altsetting 0 [ 354.048886][ T7183] usb 4-1: config 3 interface 12 has no altsetting 0 [ 354.062987][ T7183] usb 4-1: New USB device found, idVendor=06f8, idProduct=3003, bcdDevice=b9.41 [ 354.072472][ T7183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.074799][T13323] /dev/rnullb0: Can't open blockdev [ 354.080620][ T7183] usb 4-1: Product: 䐲霥싖燄膷熧蔧읦흗ﾞ橮ᙅﭛӂ抦鹜玨ꊎ닉渫幅刾臘죂問칂ꯖ鰍ꅝ憉ⴛ楯⦤擞쬷왊盝嵡衝쏡鴴퇫橏䇫䴪褆ㄊ풙匊蓲ꨕ袖먥䌖ٌ﫤飔꫚飞֦䟚Ｓ᧟꭬턞鄗ᯘ톯꞉퍸噒Փ⢴雐멤긹셫섿ꏾ༳踲쌀낶廋 [ 354.114224][ T7183] usb 4-1: Manufacturer: 法犼锴ዊ㝪᜝鹭贒㮹ﰭ賴鴵㞌嗎ᤖ勷Ⲟ쬼配΅䑷拵ᇌ貙ᦨ盯鞀흇稓図뾸敖㏟趞ㅟ뮯뙆ݒ㇣>᫅릫髥볣ꖡ⨣췚澍쑒ךּ묩螖쒑ƴ☑艽蕽࿤譀앬ꓑ降䆥慸뎂뒐읰熪ꑷ [ 354.132031][T13327] /dev/rnullb0: Can't open blockdev [ 354.141743][ T7183] usb 4-1: SerialNumber: ᰁ [ 354.395415][ T7183] usb 4-1: USB disconnect, device number 115 [ 354.407574][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 354.568529][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 354.581524][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=501b, bcdDevice= 0.00 [ 354.590978][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.600875][ T10] usb 5-1: config 0 descriptor?? [ 354.853537][T13331] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2241'. [ 355.028602][ T10] kye 0003:0458:501B.0018: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 355.059165][ T10] kye 0003:0458:501B.0018: hidraw0: USB HID v1.01 Device [HID 0458:501b] on usb-dummy_hcd.4-1/input0 [ 355.076940][ T10] kye 0003:0458:501B.0018: tablet-enabling feature report not found [ 355.096270][ T10] kye 0003:0458:501B.0018: tablet enabling failed [ 355.244727][T13329] /dev/rnullb0: Can't open blockdev [ 355.338602][ T5927] usb 5-1: USB disconnect, device number 34 [ 355.427408][ T5870] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 355.568094][T13343] sd 0:0:1:0: PR command failed: 1026 [ 355.573542][T13343] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 355.618365][T13344] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 355.625514][T13344] /dev/rnullb0: Can't open blockdev [ 355.627140][T13343] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 355.741251][T13346] /dev/rnullb0: Can't open blockdev [ 355.834202][T13351] netlink: 57 bytes leftover after parsing attributes in process `syz.1.2248'. [ 355.921782][T13354] 9p: Bad value for 'port' [ 355.928632][T13354] /dev/rnullb0: Can't open blockdev [ 356.291010][T13364] random: crng reseeded on system resumption [ 356.327201][T13338] comedi comedi2: reset error (fatal) [ 356.457180][ T7183] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 356.476219][T13368] /dev/rnullb0: Can't open blockdev [ 356.492188][T13368] /dev/rnullb0: Can't open blockdev [ 356.518374][T13368] /dev/rnullb0: Can't open blockdev [ 356.524102][T13368] /dev/rnullb0: Can't open blockdev [ 356.564608][T13367] IPVS: set_ctl: invalid protocol: 50 100.1.1.2:20001 [ 356.582281][T13368] /dev/rnullb0: Can't open blockdev [ 356.592357][T13368] /dev/rnullb0: Can't open blockdev [ 356.608935][T13368] /dev/rnullb0: Can't open blockdev [ 356.618770][ T7183] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 356.630706][T13368] /dev/rnullb0: Can't open blockdev [ 356.635967][ T7183] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 356.661007][T13368] /dev/rnullb0: Can't open blockdev [ 356.670903][T13368] /dev/rnullb0: Can't open blockdev [ 356.676201][ T7183] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 356.697501][T13368] /dev/rnullb0: Can't open blockdev [ 356.705210][ T7183] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 356.718179][T13368] /dev/rnullb0: Can't open blockdev [ 356.728073][ T7183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.748290][T13368] /dev/rnullb0: Can't open blockdev [ 356.754061][T13368] /dev/rnullb0: Can't open blockdev [ 356.760647][T13368] /dev/rnullb0: Can't open blockdev [ 356.765976][ T7183] usb 3-1: Product: syz [ 356.777247][ T7183] usb 3-1: Manufacturer: syz [ 356.778123][T13368] /dev/rnullb0: Can't open blockdev [ 356.784137][ T7183] usb 3-1: SerialNumber: syz [ 356.799269][ T7183] usb 3-1: config 0 descriptor?? [ 356.806310][T13368] /dev/rnullb0: Can't open blockdev [ 356.809827][T13363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 356.818989][T13363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 356.823010][T13368] /dev/rnullb0: Can't open blockdev [ 356.834277][ T7183] usb 3-1: ucan: probing device on interface #0 [ 356.849912][T13368] /dev/rnullb0: Can't open blockdev [ 356.863942][T13368] /dev/rnullb0: Can't open blockdev [ 356.887858][T13368] /dev/rnullb0: Can't open blockdev [ 356.893699][T13368] /dev/rnullb0: Can't open blockdev [ 356.907756][T13368] /dev/rnullb0: Can't open blockdev [ 356.923776][T13368] /dev/rnullb0: Can't open blockdev [ 356.937993][T13368] /dev/rnullb0: Can't open blockdev [ 356.950137][T13368] /dev/rnullb0: Can't open blockdev [ 356.966693][T13368] /dev/rnullb0: Can't open blockdev [ 356.989273][T13368] /dev/rnullb0: Can't open blockdev [ 356.994999][T13368] /dev/rnullb0: Can't open blockdev [ 357.027756][T13368] /dev/rnullb0: Can't open blockdev [ 357.033557][T13368] /dev/rnullb0: Can't open blockdev [ 357.057866][T13368] /dev/rnullb0: Can't open blockdev [ 357.067651][T13368] /dev/rnullb0: Can't open blockdev [ 357.083694][T13368] /dev/rnullb0: Can't open blockdev [ 357.094082][T13368] /dev/rnullb0: Can't open blockdev [ 357.107879][T13368] /dev/rnullb0: Can't open blockdev [ 357.113657][T13368] /dev/rnullb0: Can't open blockdev [ 357.134527][T13368] /dev/rnullb0: Can't open blockdev [ 357.148988][T13368] /dev/rnullb0: Can't open blockdev [ 357.160668][T13376] /dev/sg0: Can't lookup blockdev [ 357.166365][T13368] /dev/rnullb0: Can't open blockdev [ 357.176411][T13368] /dev/rnullb0: Can't open blockdev [ 357.187963][T13368] /dev/rnullb0: Can't open blockdev [ 357.204643][T13368] /dev/rnullb0: Can't open blockdev [ 357.210843][T13368] /dev/rnullb0: Can't open blockdev [ 357.216646][T13368] /dev/rnullb0: Can't open blockdev [ 357.233131][T13368] /dev/rnullb0: Can't open blockdev [ 357.243267][T13368] /dev/rnullb0: Can't open blockdev [ 357.256775][T13368] /dev/rnullb0: Can't open blockdev [ 357.267656][T13368] /dev/rnullb0: Can't open blockdev [ 357.273859][T13368] /dev/rnullb0: Can't open blockdev [ 357.280606][T13368] /dev/rnullb0: Can't open blockdev [ 357.286911][T13368] /dev/rnullb0: Can't open blockdev [ 357.294846][T13368] /dev/rnullb0: Can't open blockdev [ 357.301200][T13368] /dev/rnullb0: Can't open blockdev [ 357.369772][T13389] /dev/rnullb0: Can't open blockdev [ 357.483640][T13383] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2261'. [ 357.553917][ T7183] ucan 3-1:0.0: probe with driver ucan failed with error -71 [ 357.568039][ T7183] usb 3-1: USB disconnect, device number 106 [ 357.963835][T13413] GUP no longer grows the stack in syz.1.2268 (13413): 200000005000-200000008000 (200000004000) [ 357.987895][T13413] CPU: 1 UID: 0 PID: 13413 Comm: syz.1.2268 Not tainted syzkaller #0 PREEMPT(full) [ 357.987923][T13413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 357.987936][T13413] Call Trace: [ 357.987944][T13413] [ 357.987952][T13413] dump_stack_lvl+0x189/0x250 [ 357.987983][T13413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.988006][T13413] ? __pfx__printk+0x10/0x10 [ 357.988026][T13413] ? find_vma+0xe7/0x160 [ 357.988061][T13413] fixup_user_fault+0x661/0x720 [ 357.988086][T13413] fault_in_user_writeable+0x72/0xe0 [ 357.988108][T13413] futex_lock_pi+0x773/0xa90 [ 357.988129][T13413] ? __pfx_futex_lock_pi+0x10/0x10 [ 357.988144][T13413] ? futex_private_hash_get+0x43/0x290 [ 357.988174][T13413] ? __pfx_futex_wake_mark+0x10/0x10 [ 357.988196][T13413] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 357.988217][T13413] do_futex+0x292/0x420 [ 357.988240][T13413] ? __pfx_do_futex+0x10/0x10 [ 357.988260][T13413] ? __vm_munmap+0x301/0x3d0 [ 357.988283][T13413] __se_sys_futex+0x36f/0x400 [ 357.988307][T13413] ? __pfx___se_sys_futex+0x10/0x10 [ 357.988330][T13413] ? __x64_sys_futex+0x21/0xf0 [ 357.988355][T13413] do_syscall_64+0xfa/0xfa0 [ 357.988377][T13413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.988394][T13413] ? clear_bhb_loop+0x60/0xb0 [ 357.988412][T13413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.988430][T13413] RIP: 0033:0x7f051238ebe9 [ 357.988446][T13413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.988463][T13413] RSP: 002b:00007f05105f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 357.988483][T13413] RAX: ffffffffffffffda RBX: 00007f05125b5fa0 RCX: 00007f051238ebe9 [ 357.988497][T13413] RDX: 0000000000000000 RSI: 000000000000008d RDI: 0000200000004000 [ 357.988509][T13413] RBP: 00007f0512411e19 R08: 0000000000000000 R09: 0000000000000000 [ 357.988521][T13413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 357.988532][T13413] R13: 00007f05125b6038 R14: 00007f05125b5fa0 R15: 00007fff5a92ef18 [ 357.988552][T13413] [ 358.202576][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.251937][T13415] netlink: 'syz.3.2269': attribute type 4 has an invalid length. [ 358.263289][T13415] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2269'. [ 358.273504][T13415] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 358.291114][T13415] /dev/rnullb0: Can't open blockdev [ 358.375090][ T7183] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 358.397395][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 358.529545][ T7183] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 358.539268][ T7183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.547204][ T10] usb 5-1: device descriptor read/64, error -71 [ 358.554680][ T7183] usb 2-1: config 0 descriptor?? [ 358.569745][ T7183] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 358.687159][ T5927] usb 3-1: new full-speed USB device number 107 using dummy_hcd [ 358.747150][ T94] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 358.797143][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 358.839757][ T5927] usb 3-1: config 202 has an invalid interface number: 113 but max is 0 [ 358.848296][ T5927] usb 3-1: config 202 has no interface number 0 [ 358.854572][ T5927] usb 3-1: config 202 interface 113 has no altsetting 0 [ 358.863598][ T5927] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=7e.5f [ 358.873339][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.881570][ T5927] usb 3-1: Product: syz [ 358.885736][ T5927] usb 3-1: Manufacturer: syz [ 358.890943][ T5927] usb 3-1: SerialNumber: syz [ 358.900281][ T94] usb 4-1: Using ep0 maxpacket: 16 [ 358.908644][ T94] usb 4-1: config 14 has an invalid interface number: 183 but max is 0 [ 358.918382][ T94] usb 4-1: config 14 has no interface number 0 [ 358.924593][ T94] usb 4-1: config 14 interface 183 altsetting 8 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 358.927194][ T10] usb 5-1: device descriptor read/64, error -71 [ 358.936422][ T94] usb 4-1: config 14 interface 183 has no altsetting 0 [ 358.952947][ T94] usb 4-1: New USB device found, idVendor=12d1, idProduct=e54f, bcdDevice=a3.40 [ 358.962440][ T94] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.972331][ T94] usb 4-1: Product: syz [ 358.976521][ T94] usb 4-1: Manufacturer: syz [ 358.981320][ T94] usb 4-1: SerialNumber: syz [ 359.077999][ T10] usb usb5-port1: attempt power cycle [ 359.110947][T13421] /dev/rnullb0: Can't open blockdev [ 359.190077][ T5927] usb 3-1: NFC: intf ffff88807c387000 id ffffffff8ef6c9e0 [ 359.203097][T13413] /dev/rnullb0: Can't open blockdev [ 359.209602][ T5927] usb 3-1: USB disconnect, device number 107 [ 359.221374][T13423] /dev/rnullb0: Can't open blockdev [ 359.224659][ T7183] gspca_sunplus: reg_w_riv err -71 [ 359.232844][ T7183] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 359.244166][ T94] option 4-1:14.183: GSM modem (1-port) converter detected [ 359.258795][ T7183] usb 2-1: USB disconnect, device number 7 [ 359.267670][ T94] usb 4-1: USB disconnect, device number 116 [ 359.278771][ T94] option 4-1:14.183: device disconnected [ 359.427218][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 359.448390][ T10] usb 5-1: device descriptor read/8, error -71 [ 359.707162][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 359.749499][ T10] usb 5-1: device descriptor read/8, error -71 [ 359.818678][T13428] /dev/rnullb0: Can't open blockdev [ 359.826922][T13431] No source specified [ 359.875794][ T10] usb usb5-port1: unable to enumerate USB device [ 359.914601][ T5870] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 359.939823][T13437] /dev/rnullb0: Can't open blockdev [ 360.101507][T13450] /dev/rnullb0: Can't open blockdev [ 360.332337][T13458] team_slave_0: entered allmulticast mode [ 360.374392][T13458] team_slave_0: entered promiscuous mode [ 360.483821][T13461] overlay: ./file0 is not a directory [ 360.501121][T13461] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 360.507623][T13461] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 360.538968][T13465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.545791][T13462] /dev/rnullb0: Can't open blockdev [ 361.120495][T13483] block nbd3: Attempted send on invalid socket [ 361.126698][T13483] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.179766][T13483] FAT-fs (nbd3): unable to read boot sector [ 361.258895][T13487] block nbd3: Attempted send on invalid socket [ 361.300433][T13487] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 361.320609][T13487] FAT-fs (nbd3): unable to read boot sector [ 361.849360][ T5865] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 361.859558][ T5865] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 361.880896][ T5865] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 361.900537][ T5865] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 361.909166][ T5865] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 361.936970][T13501] /dev/rnullb0: Can't open blockdev [ 361.974392][T13503] 9p: Bad value for 'rfdno' [ 362.287197][ T10] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 362.332942][T13494] chnl_net:caif_netlink_parms(): no params data found [ 362.367133][ T7183] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 362.375951][ T7923] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.422426][T13494] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.431934][T13494] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.439484][T13494] bridge_slave_0: entered allmulticast mode [ 362.446436][T13494] bridge_slave_0: entered promiscuous mode [ 362.460127][ T7923] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.467169][ T94] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 362.473144][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 362.485147][T13494] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.498188][T13494] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.506180][T13494] bridge_slave_1: entered allmulticast mode [ 362.517120][ T7183] usb 2-1: Using ep0 maxpacket: 16 [ 362.518866][ T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 362.528367][ T7183] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 362.535214][T13494] bridge_slave_1: entered promiscuous mode [ 362.545702][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.547210][ T7183] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.560246][ T10] usb 4-1: Product: syz [ 362.573461][ T7923] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.577122][ T7183] usb 2-1: config 0 has no interface number 0 [ 362.584437][ T10] usb 4-1: Manufacturer: syz [ 362.602021][ T7183] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 362.604423][ T10] usb 4-1: SerialNumber: syz [ 362.611383][ T7183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.624683][ T10] usb 4-1: config 0 descriptor?? [ 362.633674][ T7183] usb 2-1: Product: syz [ 362.647160][ T94] usb 5-1: Using ep0 maxpacket: 32 [ 362.652596][ T7183] usb 2-1: Manufacturer: syz [ 362.657495][ T7183] usb 2-1: SerialNumber: syz [ 362.665050][ T94] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 362.665509][T13494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.675408][ T94] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.692647][ T7183] usb 2-1: config 0 descriptor?? [ 362.698672][ T94] usb 5-1: Product: syz [ 362.705153][ T94] usb 5-1: Manufacturer: syz [ 362.706337][ T7923] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.710911][ T94] usb 5-1: SerialNumber: syz [ 362.728309][ T94] usb 5-1: config 0 descriptor?? [ 362.732231][T13494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.748911][ T94] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 362.774713][T13494] team0: Port device team_slave_0 added [ 362.822862][T13494] team0: Port device team_slave_1 added [ 362.902905][T13494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.912388][T13494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.948755][ T7183] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 362.955210][ T7183] usb 2-1: No valid video chain found. [ 362.969253][ T7183] usb 2-1: USB disconnect, device number 8 [ 362.975923][T13494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.984093][ T10] snd-usb-6fire 4-1:0.0: unable to receive device firmware state. [ 362.990018][ T7923] bridge0: port 3(team0) entered disabled state [ 363.008937][ T7923] bridge_slave_1: left allmulticast mode [ 363.013535][ T10] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -71 [ 363.014719][ T7923] bridge_slave_1: left promiscuous mode [ 363.033532][ T7923] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.051289][ T7923] bridge_slave_0: left allmulticast mode [ 363.056996][ T7923] bridge_slave_0: left promiscuous mode [ 363.057360][ T10] usb 4-1: USB disconnect, device number 117 [ 363.063435][ T7923] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.267574][ T7923] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.300496][ T7923] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.320818][ T7923] bond0 (unregistering): Released all slaves [ 363.362181][T13494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.371504][T13494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.426895][T13494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.489822][ T7923] : left promiscuous mode [ 363.544024][T13494] hsr_slave_0: entered promiscuous mode [ 363.551513][T13494] hsr_slave_1: entered promiscuous mode [ 363.561930][T13494] debugfs: 'hsr0' already exists in 'hsr' [ 363.568354][T13554] /dev/rnullb0: Can't open blockdev [ 363.573608][T13494] Cannot create hsr debugfs directory [ 363.906892][T13567] netlink: 'syz.3.2313': attribute type 2 has an invalid length. [ 363.979309][ T7923] hsr_slave_0: left promiscuous mode [ 363.985714][ T7923] hsr_slave_1: left promiscuous mode [ 363.992199][ T5865] Bluetooth: hci5: command tx timeout [ 364.009798][ T7923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.027117][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.137936][ T7923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.145391][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.164512][ T7923] veth1_macvtap: left promiscuous mode [ 364.173069][ T7923] veth0_macvtap: left promiscuous mode [ 364.199422][ T7923] veth1_vlan: left allmulticast mode [ 364.215156][ T7923] veth1_vlan: left promiscuous mode [ 364.225162][ T7923] veth0_vlan: left promiscuous mode [ 364.539373][ T7923] macvlan1 (unregistering): left promiscuous mode [ 364.569059][ T7923] team0 (unregistering): Port device macvlan1 removed [ 364.743209][ T7923] team_slave_1 (unregistering): left promiscuous mode [ 364.758688][ T7923] team_slave_1 (unregistering): left allmulticast mode [ 364.790098][ T7923] team0 (unregistering): Port device team_slave_1 removed [ 364.863468][ T7923] team0 (unregistering): Port device team_slave_0 removed [ 365.211414][T13494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.289358][T13494] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.317841][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.325012][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.378080][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.385246][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.538255][ T94] gspca_stk1135: reg_w 0x300 err -110 [ 365.544695][ T94] gspca_stk1135: serial bus timeout: status=0x00 [ 365.559876][ T94] gspca_stk1135: Sensor write failed [ 365.565335][ T94] gspca_stk1135: serial bus timeout: status=0x00 [ 365.601708][ T94] gspca_stk1135: Sensor write failed [ 365.610349][ T94] gspca_stk1135: serial bus timeout: status=0x00 [ 365.616778][ T94] gspca_stk1135: Sensor read failed [ 365.644867][ T94] gspca_stk1135: serial bus timeout: status=0x00 [ 365.662980][ T94] gspca_stk1135: Sensor read failed [ 365.688589][ T94] gspca_stk1135: Detected sensor type unknown (0x0) [ 365.695833][ T94] gspca_stk1135: serial bus timeout: status=0x00 [ 365.714304][T13618] /dev/rnullb0: Can't open blockdev [ 365.727288][ T94] gspca_stk1135: Sensor read failed [ 365.732550][ T94] gspca_stk1135: serial bus timeout: status=0x00 [ 365.762378][ T94] gspca_stk1135: Sensor read failed [ 365.778824][ T94] gspca_stk1135: serial bus timeout: status=0x00 [ 365.785203][ T94] gspca_stk1135: Sensor write failed [ 365.827984][ T94] gspca_stk1135: serial bus timeout: status=0x00 [ 365.834354][ T94] gspca_stk1135: Sensor write failed [ 365.862887][ T94] stk1135 5-1:0.0: probe with driver stk1135 failed with error -110 [ 365.895427][T13494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.068120][ T5865] Bluetooth: hci5: command tx timeout [ 366.239080][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 366.331019][ T94] usb 5-1: USB disconnect, device number 39 [ 366.414920][T13494] veth0_vlan: entered promiscuous mode [ 366.429214][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 366.439287][ T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 366.446123][T13494] veth1_vlan: entered promiscuous mode [ 366.486851][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.514325][ T10] usb 4-1: config 0 has no interface number 0 [ 366.532128][T13494] veth0_macvtap: entered promiscuous mode [ 366.536799][ T10] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.565275][T13494] veth1_macvtap: entered promiscuous mode [ 366.580020][ T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 366.595367][ T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 366.606230][ T10] usb 4-1: Product: syz [ 366.610500][ T10] usb 4-1: SerialNumber: syz [ 366.623393][ T10] usb 4-1: config 0 descriptor?? [ 366.632013][T13494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.651286][ T10] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 366.674475][T13494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.797370][ T24] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 366.896610][ T55] usb 4-1: USB disconnect, device number 118 [ 366.913118][ T7926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.958609][ T7926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.029357][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.097223][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.397164][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 367.547213][ T10] usb 2-1: device descriptor read/64, error -71 [ 367.860259][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 367.907581][T13672] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 367.919734][ T5926] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 367.940724][T13672] File: /dev/rnullb0 PID: 13672 Comm: syz.2.2327 [ 368.007293][ T10] usb 2-1: device descriptor read/64, error -71 [ 368.107201][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 368.118752][ T10] usb usb2-port1: attempt power cycle [ 368.130705][ T5926] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 368.147338][ T5865] Bluetooth: hci5: command tx timeout [ 368.153150][ T5926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.163512][ T5926] usb 4-1: Product: syz [ 368.172761][ T5926] usb 4-1: Manufacturer: syz [ 368.178322][ T5926] usb 4-1: SerialNumber: syz [ 368.188632][ T5926] r8152-cfgselector 4-1: Unknown version 0x0000 [ 368.189944][T13686] /dev/rnullb0: Can't open blockdev [ 368.200680][ T5926] r8152-cfgselector 4-1: config 0 descriptor?? [ 368.238811][T13689] /dev/rnullb0: Can't open blockdev [ 368.274387][T13690] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2331'. [ 368.297044][T13690] team0: Port device team_slave_0 removed [ 368.478270][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 368.517626][ T10] usb 2-1: device descriptor read/8, error -71 [ 368.600255][T13706] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 368.609682][T13706] hfs: can't find a HFS filesystem on dev loop4 [ 368.657860][T13708] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2337'. [ 368.777147][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 368.808014][ T10] usb 2-1: device descriptor read/8, error -71 [ 368.918745][ T10] usb usb2-port1: unable to enumerate USB device [ 369.247491][ T24] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 369.323270][T13719] overlayfs: failed to resolve './file1': -2 [ 369.345899][T13719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.371490][T13719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.394001][T13719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.415687][T13719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.440169][ T24] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 369.457118][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.465243][ T24] usb 5-1: Product: syz [ 369.477174][ T24] usb 5-1: Manufacturer: syz [ 369.481807][ T24] usb 5-1: SerialNumber: syz [ 369.498141][ T24] usb 5-1: config 0 descriptor?? [ 370.227590][ T5926] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 370.230871][ T5865] Bluetooth: hci5: command tx timeout [ 370.458811][ T5926] usb 3-1: Using ep0 maxpacket: 16 [ 370.474519][ T5926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 370.491074][ T5926] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 370.510329][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.528739][ T5926] usb 3-1: Product: syz [ 370.538687][ T5926] usb 3-1: Manufacturer: syz [ 370.550031][ T5926] usb 3-1: SerialNumber: syz [ 370.565263][ T5926] usb 3-1: config 0 descriptor?? [ 370.587521][ T5926] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 370.638491][ T5926] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 370.646541][ T5927] r8152-cfgselector 4-1: USB disconnect, device number 119 [ 371.238674][ T5926] em28xx 3-1:0.0: chip ID is em2710/2820 [ 371.725179][ T5926] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 371.725209][ T5926] em28xx 3-1:0.0: board has no eeprom [ 371.791316][ T5926] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 371.811534][ T5926] em28xx 3-1:0.0: dvb set to bulk mode. [ 371.831372][ T94] em28xx 3-1:0.0: Binding DVB extension [ 371.853615][ T5926] usb 3-1: USB disconnect, device number 109 [ 371.890995][ T5926] em28xx 3-1:0.0: Disconnecting em28xx [ 371.935688][ T94] em28xx 3-1:0.0: Registering input extension [ 371.954630][ T5926] em28xx 3-1:0.0: Closing input extension [ 371.972703][ T5926] em28xx 3-1:0.0: Freeing device [ 371.994845][ T24] cx82310_eth 5-1:0.0: probe with driver cx82310_eth failed with error -22 [ 372.014910][ T24] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 372.045586][ T24] usb 5-1: USB disconnect, device number 41 [ 372.183837][T13760] /dev/rnullb0: Can't open blockdev [ 372.242101][T13764] /dev/rnullb0: Can't open blockdev [ 372.255850][T13766] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2353'. [ 372.325505][T13771] netlink: 'syz.2.2356': attribute type 2 has an invalid length. [ 372.346249][T13771] netlink: 'syz.2.2356': attribute type 8 has an invalid length. [ 372.355901][T13766] team0: Port device team_slave_0 removed [ 372.367189][T13771] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2356'. [ 372.470606][T13778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 372.599271][T13783] /dev/rnullb0: Can't open blockdev [ 373.099723][T13785] /dev/rnullb0: Can't open blockdev [ 373.391995][T13807] /dev/rnullb0: Can't open blockdev [ 373.454249][T13810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.467011][T13810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.677178][ T24] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 373.697178][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 373.799426][T13819] /dev/rnullb0: Can't open blockdev [ 373.838242][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 373.854546][ T24] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 373.864082][ T24] usb 3-1: config 0 has no interface number 0 [ 373.873308][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 373.887712][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.907717][ T24] usb 3-1: Product: syz [ 373.921842][T13826] netlink: 17223 bytes leftover after parsing attributes in process `syz.1.2375'. [ 373.937252][ T24] usb 3-1: Manufacturer: syz [ 373.952153][ T24] usb 3-1: SerialNumber: syz [ 373.968704][ T24] usb 3-1: config 0 descriptor?? [ 374.001902][ T24] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 374.210070][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 374.272015][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 374.301638][ T24] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 374.375900][ T24] usb 3-1: USB disconnect, device number 110 [ 374.448288][ T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 374.528084][ T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 374.591684][ T24] quatech2 3-1:0.51: device disconnected [ 374.718880][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 374.747127][ T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 374.756499][ T10] usb 4-1: config 179 has no interface number 0 [ 374.762935][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 374.774036][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 374.785330][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 374.796545][ T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 374.819775][ T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 374.945075][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 374.977293][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.006956][T13812] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 375.026141][T13838] /dev/rnullb0: Can't open blockdev [ 375.488812][T13853] /dev/rnullb0: Can't open blockdev [ 375.613320][T13810] /dev/rnullb0: Can't open blockdev [ 375.645453][ T5926] usb 4-1: USB disconnect, device number 120 [ 375.645515][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 375.660095][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 375.668513][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.802536][T13865] /dev/rnullb0: Can't open blockdev [ 375.813927][T13865] /dev/rnullb0: Can't open blockdev [ 375.911019][T13876] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 375.920775][T13876] block device autoloading is deprecated and will be removed. [ 375.937403][T13868] md: md2 stopped. [ 375.990177][T13884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2390'. [ 375.999656][T13884] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2390'. [ 376.072005][T13888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.088833][T13888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.268944][T13894] /dev/rnullb0: Can't open blockdev [ 376.328106][ T55] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 376.477495][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 376.487126][ T55] usb 2-1: config 4 has an invalid interface number: 150 but max is 1 [ 376.496982][T13901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.505623][ T55] usb 2-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 376.505647][ T55] usb 2-1: config 4 has an invalid interface number: 196 but max is 1 [ 376.505664][ T55] usb 2-1: config 4 has an invalid interface number: 5 but max is 1 [ 376.505683][ T55] usb 2-1: config 4 has an invalid interface number: 48 but max is 1 [ 376.505700][ T55] usb 2-1: config 4 has an invalid interface number: 20 but max is 1 [ 376.505717][ T55] usb 2-1: config 4 has 5 interfaces, different from the descriptor's value: 2 [ 376.505734][ T55] usb 2-1: config 4 has no interface number 0 [ 376.529501][T13901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.611027][T13901] netlink: 536 bytes leftover after parsing attributes in process `syz.2.2395'. [ 376.620557][T13901] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2395'. [ 376.658328][ T55] usb 2-1: config 4 has no interface number 1 [ 376.664451][ T55] usb 2-1: config 4 has no interface number 2 [ 376.674448][ T55] usb 2-1: config 4 has no interface number 3 [ 376.685781][ T55] usb 2-1: config 4 has no interface number 4 [ 376.698637][ T55] usb 2-1: config 4 interface 150 altsetting 6 endpoint 0x8 has an invalid bInterval 39, changing to 7 [ 376.717533][ T55] usb 2-1: config 4 interface 150 altsetting 6 endpoint 0x8 has invalid wMaxPacketSize 0 [ 376.739820][ T55] usb 2-1: config 4 interface 150 altsetting 6 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 376.758371][ T55] usb 2-1: config 4 interface 150 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 376.899776][ T5927] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 377.139346][ T55] usb 2-1: config 4 interface 150 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 377.151034][ T55] usb 2-1: config 4 interface 150 altsetting 6 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 377.162912][ T55] usb 2-1: config 4 interface 150 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 377.174042][ T55] usb 2-1: config 4 interface 196 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 377.207411][ T55] usb 2-1: too many endpoints for config 4 interface 5 altsetting 0: 99, using maximum allowed: 30 [ 377.225400][ T5865] Bluetooth: hci3: unexpected event for opcode 0x080b [ 377.227166][ T55] usb 2-1: config 4 interface 5 altsetting 0 endpoint 0xA has an invalid bInterval 129, changing to 7 [ 377.237737][T13914] /dev/nullb0: Can't lookup blockdev [ 377.248951][ T55] usb 2-1: config 4 interface 5 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 377.267168][ T5927] usb 3-1: device descriptor read/64, error -71 [ 377.273631][ T55] usb 2-1: config 4 interface 5 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 377.280190][ T5865] Bluetooth: hci3: unexpected event for opcode 0x080b [ 377.313328][T13918] /dev/rnullb0: Can't open blockdev [ 377.321456][ T55] usb 2-1: config 4 interface 5 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 377.355879][ T55] usb 2-1: config 4 interface 5 altsetting 0 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 377.392339][T13921] /dev/rnullb0: Can't open blockdev [ 377.401306][ T55] usb 2-1: config 4 interface 5 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 377.424750][ T55] usb 2-1: config 4 interface 5 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 377.438424][ T55] usb 2-1: config 4 interface 5 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 377.449851][ T55] usb 2-1: config 4 interface 5 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 99 [ 377.464217][ T55] usb 2-1: too many endpoints for config 4 interface 48 altsetting 237: 245, using maximum allowed: 30 [ 377.477560][T13924] /dev/rnullb0: Can't open blockdev [ 377.483317][ T55] usb 2-1: config 4 interface 48 altsetting 237 has 1 endpoint descriptor, different from the interface descriptor's value: 245 [ 377.499623][ T55] usb 2-1: too many endpoints for config 4 interface 20 altsetting 139: 134, using maximum allowed: 30 [ 377.527265][ T5927] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 377.545291][ T55] usb 2-1: config 4 interface 20 altsetting 139 has an invalid descriptor for endpoint zero, skipping [ 377.549284][T13928] FAULT_INJECTION: forcing a failure. [ 377.549284][T13928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.565043][ T55] usb 2-1: config 4 interface 20 altsetting 139 bulk endpoint 0xC has invalid maxpacket 64 [ 377.584178][ T55] usb 2-1: config 4 interface 20 altsetting 139 has a duplicate endpoint with address 0x2, skipping [ 377.596610][ T55] usb 2-1: config 4 interface 20 altsetting 139 has 3 endpoint descriptors, different from the interface descriptor's value: 134 [ 377.597346][T13928] CPU: 1 UID: 0 PID: 13928 Comm: syz.3.2404 Not tainted syzkaller #0 PREEMPT(full) [ 377.597368][T13928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 377.597380][T13928] Call Trace: [ 377.597387][T13928] [ 377.597394][T13928] dump_stack_lvl+0x189/0x250 [ 377.597421][T13928] ? __pfx____ratelimit+0x10/0x10 [ 377.597442][T13928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.597463][T13928] ? __pfx__printk+0x10/0x10 [ 377.597484][T13928] ? __might_fault+0xb0/0x130 [ 377.597507][T13928] ? snd_seq_oss_process_event+0x16c7/0x2a80 [ 377.597527][T13928] ? rcu_is_watching+0x15/0xb0 [ 377.597546][T13928] should_fail_ex+0x414/0x560 [ 377.597568][T13928] _copy_from_user+0x2d/0xb0 [ 377.597587][T13928] snd_seq_oss_write+0x515/0x930 [ 377.597605][T13928] ? get_pid_task+0x20/0x1f0 [ 377.597629][T13928] ? __pfx_snd_seq_oss_write+0x10/0x10 [ 377.597650][T13928] ? security_file_permission+0x75/0x290 [ 377.597669][T13928] odev_write+0x5a/0x80 [ 377.597683][T13928] ? __pfx_odev_write+0x10/0x10 [ 377.597698][T13928] vfs_write+0x27b/0xb30 [ 377.597717][T13928] ? __pfx_vfs_write+0x10/0x10 [ 377.597732][T13928] ? lock_release+0x4b/0x3e0 [ 377.597749][T13928] ? __fget_files+0x2a/0x420 [ 377.597767][T13928] ? __fget_files+0x3a0/0x420 [ 377.597784][T13928] ? __fget_files+0x2a/0x420 [ 377.597804][T13928] ksys_write+0x145/0x250 [ 377.597821][T13928] ? __pfx_ksys_write+0x10/0x10 [ 377.597837][T13928] ? rcu_is_watching+0x15/0xb0 [ 377.597856][T13928] do_syscall_64+0xfa/0xfa0 [ 377.597876][T13928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.597892][T13928] ? clear_bhb_loop+0x60/0xb0 [ 377.597909][T13928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.597925][T13928] RIP: 0033:0x7f5dc9b8ebe9 [ 377.597945][T13928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.597959][T13928] RSP: 002b:00007f5dca956038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 377.597977][T13928] RAX: ffffffffffffffda RBX: 00007f5dc9db5fa0 RCX: 00007f5dc9b8ebe9 [ 377.597990][T13928] RDX: 0000000000000260 RSI: 0000200000000080 RDI: 0000000000000003 [ 377.598001][T13928] RBP: 00007f5dca956090 R08: 0000000000000000 R09: 0000000000000000 [ 377.598011][T13928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 377.598021][T13928] R13: 00007f5dc9db6038 R14: 00007f5dc9db5fa0 R15: 00007ffdba6771f8 [ 377.598039][T13928] [ 377.823752][ T94] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 377.937128][ T5927] usb 3-1: device descriptor read/64, error -71 [ 377.950182][ T55] usb 2-1: config 4 interface 150 has no altsetting 0 [ 377.957000][ T55] usb 2-1: config 4 interface 196 has no altsetting 0 [ 377.967152][ T55] usb 2-1: config 4 interface 48 has no altsetting 0 [ 377.973872][ T55] usb 2-1: config 4 interface 20 has no altsetting 0 [ 377.989587][ T55] usb 2-1: New USB device found, idVendor=084b, idProduct=a001, bcdDevice=25.73 [ 377.998917][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.007051][ T55] usb 2-1: Product: syz [ 378.011344][ T55] usb 2-1: Manufacturer: 퐼秺ᶭᗺ˕严ⷕ䙺ﲖ邈랿Ｊ쮤⚼읔怹會譍踧⚲dz䙱ꈴ綌ඣႶ뽑Ḳ␯켾댩íঽ攨䉍戎셲뺷ⅱꬆ螗᪳徜஧貏딘잢ͮ䆶떠㳃沶ᙂ蜸峢㗨蠜⛓⛟嚰ꔌ蛠ꪘ祑ꁫ槑㯫䖗糡㱏⥌乪率㏻躶䃫릙ￛ芜눣冡劗झꫝ尟衃々 [ 378.044898][ T94] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1 [ 378.056849][ T94] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 4 [ 378.062273][ T55] usb 2-1: SerialNumber: syz [ 378.073808][ T5927] usb usb3-port1: attempt power cycle [ 378.086784][ T94] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1023 [ 378.112230][ T94] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 378.122629][ T94] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.130942][ T94] usb 5-1: Product: syz [ 378.137463][ T94] usb 5-1: Manufacturer: syz [ 378.142126][ T94] usb 5-1: SerialNumber: syz [ 378.167494][ T94] usb 5-1: config 0 descriptor?? [ 378.176896][ T94] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0201 [ 378.300196][T13933] 9p: Bad value for 'rfdno' [ 378.306419][ T55] usb-storage 2-1:4.150: USB Mass Storage device detected [ 378.330034][ T55] usb-storage 2-1:4.150: Quirks match for vid 084b pid a001: 4 [ 378.368994][T13944] IPVS: length: 76 != 8 [ 378.369954][ T55] usb-storage 2-1:4.196: USB Mass Storage device detected [ 378.387271][ T94] usb 5-1: USB disconnect, device number 42 [ 378.399464][ T55] usb-storage 2-1:4.196: Quirks match for vid 084b pid a001: 4 [ 378.432607][ T55] usb-storage 2-1:4.5: USB Mass Storage device detected [ 378.439810][ T5927] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 378.456088][ T55] usb-storage 2-1:4.5: Quirks match for vid 084b pid a001: 4 [ 378.467723][ T5927] usb 3-1: device descriptor read/8, error -71 [ 378.492786][ T55] usb-storage 2-1:4.48: USB Mass Storage device detected [ 378.503402][ T55] usb-storage 2-1:4.48: Quirks match for vid 084b pid a001: 4 [ 378.574907][ T55] usb-storage 2-1:4.20: USB Mass Storage device detected [ 378.588497][ T55] usb-storage 2-1:4.20: Quirks match for vid 084b pid a001: 4 [ 378.622176][ T55] usb 2-1: USB disconnect, device number 13 [ 378.710381][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.717000][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.731523][ T5927] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 378.768263][ T5927] usb 3-1: device descriptor read/8, error -71 [ 378.890911][ T5927] usb usb3-port1: unable to enumerate USB device [ 378.964320][T13977] /dev/rnullb0: Can't open blockdev [ 378.974617][T13977] /dev/rnullb0: Can't open blockdev [ 379.107326][ T55] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 379.268618][ T55] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.280515][ T55] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.290927][ T55] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 379.301800][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 379.309863][ T5927] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 379.320848][ T55] usb 2-1: SerialNumber: syz [ 379.331595][ T55] usb 2-1: 0:2 : does not exist [ 379.447239][ T5927] usb 5-1: device descriptor read/64, error -71 [ 379.556535][T13996] /dev/rnullb0: Can't open blockdev [ 379.661674][ T55] usb 2-1: USB disconnect, device number 14 [ 379.692988][ T7877] udevd[7877]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.729712][ T5927] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 379.734038][T14006] /dev/rnullb0: Can't open blockdev [ 379.826980][T14010] /dev/rnullb0: Can't open blockdev [ 379.890621][ T5927] usb 5-1: device descriptor read/64, error -71 [ 379.907935][ T10] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 380.017479][ T5927] usb usb5-port1: attempt power cycle [ 380.077162][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 380.085870][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.117150][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.132552][ T10] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 380.152446][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.179729][ T10] usb 3-1: config 0 descriptor?? [ 380.377152][ T5927] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 380.401710][ T5927] usb 5-1: device descriptor read/8, error -71 [ 380.413974][T14051] netlink: 'syz.1.2425': attribute type 1 has an invalid length. [ 380.414050][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 380.438462][T14051] netlink: 'syz.1.2425': attribute type 101 has an invalid length. [ 380.452907][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 380.463779][ T10] usb 3-1: USB disconnect, device number 115 [ 380.470259][T14051] netlink: 564 bytes leftover after parsing attributes in process `syz.1.2425'. [ 380.487907][T14057] /dev/rnullb0: Can't open blockdev [ 380.517890][T14055] syzkaller1: entered allmulticast mode [ 380.667829][ T5927] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 380.708036][ T5927] usb 5-1: device descriptor read/8, error -71 [ 380.817437][ T5927] usb usb5-port1: unable to enumerate USB device [ 380.967216][ T10] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 381.119029][ T10] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.146705][ T10] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.157322][ T94] usb 4-1: new low-speed USB device number 121 using dummy_hcd [ 381.159806][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 381.174150][ T10] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 381.186650][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.205750][ T10] usb 2-1: config 0 descriptor?? [ 381.239415][T14082] /dev/rnullb0: Can't open blockdev [ 381.267181][ T5870] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 381.275544][ T5870] Bluetooth: hci3: Injecting HCI hardware error event [ 381.282841][ T5870] Bluetooth: hci3: hardware error 0x00 [ 381.297278][ T94] usb 4-1: device descriptor read/64, error -71 [ 381.537154][ T94] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 381.677140][ T94] usb 4-1: device descriptor read/64, error -71 [ 381.797153][ T94] usb usb4-port1: attempt power cycle [ 382.137120][ T94] usb 4-1: new low-speed USB device number 123 using dummy_hcd [ 382.188914][T14091] /dev/rnullb0: Can't open blockdev [ 382.199991][ T94] usb 4-1: device descriptor read/8, error -71 [ 382.437050][ T94] usb 4-1: new low-speed USB device number 124 using dummy_hcd [ 382.457320][ T94] usb 4-1: device descriptor read/8, error -71 [ 382.566904][ T5927] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 382.568273][ T94] usb usb4-port1: unable to enumerate USB device [ 382.736770][ T5927] usb 5-1: Using ep0 maxpacket: 8 [ 382.744218][ T5927] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 25, changing to 8 [ 382.766752][ T5927] usb 5-1: config 1 interface 0 has no altsetting 0 [ 382.778066][ T5927] usb 5-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 382.796728][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.804812][ T5927] usb 5-1: Product: ࠧ [ 382.815070][T14096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.815639][ T5927] usb 5-1: Manufacturer: Щ [ 382.828991][T14096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.846881][ T5927] usb 5-1: SerialNumber: Ⰱ [ 382.925119][T14097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.937578][T14097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.164760][ T5927] usbhid 5-1:1.0: can't add hid device: -71 [ 383.170936][ T5927] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 383.196737][ T5927] usb 5-1: USB disconnect, device number 47 [ 383.348051][ T5870] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 383.899560][T14114] /dev/rnullb0: Can't open blockdev [ 384.229695][T14125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.258631][T14128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.266507][T14125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.277472][T14128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.295698][T14128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.307000][T14128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.353637][T14134] /dev/rnullb0: Can't open blockdev [ 384.602615][T14154] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 384.620013][T14154] /dev/rnullb0: Can't open blockdev [ 384.655862][ T5927] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 384.727605][T14159] netlink: 340 bytes leftover after parsing attributes in process `syz.1.2456'. [ 384.748467][T14159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2456'. [ 384.787180][ T5927] usb 4-1: device descriptor read/64, error -71 [ 384.996921][T14172] comedi comedi3: pcmda12: I/O port conflict (0x4f27,16) [ 385.045949][ T5927] usb 4-1: new full-speed USB device number 126 using dummy_hcd [ 385.073910][T14174] syzkaller1: entered promiscuous mode [ 385.083465][T14174] syzkaller1: entered allmulticast mode [ 385.130850][T14174] /dev/rnullb0: Can't open blockdev [ 385.205972][ T5927] usb 4-1: device descriptor read/64, error -71 [ 385.326822][ T5927] usb usb4-port1: attempt power cycle [ 385.756728][ T5927] usb 4-1: new full-speed USB device number 127 using dummy_hcd [ 385.790631][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.800185][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.805621][ T5927] usb 4-1: device descriptor read/8, error -71 [ 385.833680][T14181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.850503][T14181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.855342][ T55] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 385.861915][T14181] /dev/rnullb0: Can't open blockdev [ 386.025907][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 386.035361][ T55] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 386.050864][ T55] usb 3-1: New USB device found, idVendor=0c48, idProduct=9375, bcdDevice=1a.9e [ 386.060762][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.068996][ T5927] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 386.082675][ T55] usb 3-1: config 0 descriptor?? [ 386.111093][ T5927] usb 4-1: device descriptor read/8, error -71 [ 386.118726][T14189] comedi comedi0: driver 'ni_daq_700' does not support attach using comedi_config [ 386.245211][ T5927] usb usb4-port1: unable to enumerate USB device [ 386.405072][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 386.566496][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 386.578386][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 386.594307][ T24] usb 5-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 386.604618][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.613108][ T24] usb 5-1: Product: syz [ 386.618492][ T24] usb 5-1: Manufacturer: syz [ 386.623096][ T24] usb 5-1: SerialNumber: syz [ 386.630323][ T24] usb 5-1: config 0 descriptor?? [ 386.842263][T14191] /dev/rnullb0: Can't open blockdev [ 386.850281][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 386.875100][ T10] uclogic 0003:256C:006D.0019: interface is invalid, ignoring [ 386.899932][ T6686] udevd[6686]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 387.022034][T14193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.033806][T14193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.055354][ T24] usb 5-1: USB disconnect, device number 48 [ 387.864200][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 388.013594][T14220] /dev/rnullb0: Can't open blockdev [ 388.020570][ T24] usb 5-1: config index 0 descriptor too short (expected 8192, got 36) [ 388.030537][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.046332][ T24] usb 5-1: config 0 has no interfaces? [ 388.053035][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 388.070691][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.083685][ T24] usb 5-1: config 0 descriptor?? [ 388.175375][T14237] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2476'. [ 388.198063][T14237] ubi7: attaching mtd0 [ 388.203153][T14237] ubi7: scanning is finished [ 388.207859][T14237] ubi7: empty MTD device detected [ 388.297381][T14202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.311966][T14202] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.326777][ T24] usb 5-1: string descriptor 0 read error: -71 [ 388.333053][T14215] cgroup: fork rejected by pids controller in /syz3 [ 388.339981][T14237] ubi7: attached mtd0 (name "mtdram test device", size 0 MiB) [ 388.348632][T14237] ubi7: PEB size: 4096 bytes (4 KiB), LEB size: 3519 bytes [ 388.359581][ T24] usb 5-1: USB disconnect, device number 49 [ 388.364046][T14237] ubi7: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 388.372480][T14237] ubi7: VID header offset: 513 (aligned 513), data offset: 577 [ 388.380798][T14237] ubi7: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 388.390919][T14237] ubi7: user volume: 0, internal volumes: 1, max. volumes count: 20 [ 388.404008][T14237] ubi7: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2500190116 [ 388.418528][T14237] ubi7: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 388.503871][T14243] ubi7: background thread "ubi_bgt7d" started, PID 14243 [ 388.645046][T14252] : Can't lookup blockdev [ 388.654556][ T94] usb 3-1: USB disconnect, device number 116 [ 388.783950][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 388.966531][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 388.977720][ T24] usb 5-1: config index 0 descriptor too short (expected 64774, got 36) [ 388.997712][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 389.025252][T14272] ./cgroup: Can't lookup blockdev [ 389.036876][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 389.058055][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.083756][ T24] usb 5-1: Product: syz [ 389.087955][ T24] usb 5-1: Manufacturer: syz [ 389.092549][ T24] usb 5-1: SerialNumber: syz [ 389.188768][ T10] usb 2-1: USB disconnect, device number 15 [ 389.428801][ T5865] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 389.445724][ T5865] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 389.453263][ T5865] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 389.465229][ T24] usb 5-1: USB disconnect, device number 50 [ 389.472809][ T5865] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 389.482411][ T5865] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 389.693666][ T43] syz1: Port: 1 Link DOWN [ 389.761914][ T3359] smc: removing ib device syz1 [ 390.442938][ T55] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 390.474786][T14279] chnl_net:caif_netlink_parms(): no params data found [ 390.667435][T14317] /dev/rnullb0: Can't open blockdev [ 390.723346][ T55] usb 4-1: config 7 interface 0 has no altsetting 0 [ 390.736063][ T55] usb 4-1: string descriptor 0 read error: -22 [ 390.744759][ T55] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 390.754246][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.762401][T14320] /dev/rnullb0: Can't open blockdev [ 390.762402][T14314] /dev/rnullb0: Can't open blockdev [ 390.819152][T14312] syzkaller0: entered promiscuous mode [ 390.826785][ T55] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 390.844301][ T55] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 390.847000][T14312] syzkaller0: entered allmulticast mode [ 390.867481][ T55] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 390.885750][ T55] usb 4-1: media controller created [ 390.917082][ T55] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 391.110497][ T55] usb 4-1: USB disconnect, device number 3 [ 391.199016][T14279] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.235231][T14279] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.252819][T14279] bridge_slave_0: entered allmulticast mode [ 391.273499][T14279] bridge_slave_0: entered promiscuous mode [ 391.287737][T14279] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.295287][ T24] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 391.316219][T14279] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.328725][T14279] bridge_slave_1: entered allmulticast mode [ 391.335826][T14279] bridge_slave_1: entered promiscuous mode [ 391.375338][T14279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.404710][T14279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.442446][ T24] usb 5-1: device descriptor read/64, error -71 [ 391.451415][T14279] team0: Port device team_slave_0 added [ 391.464491][T14279] team0: Port device team_slave_1 added [ 391.502943][ T5870] Bluetooth: hci2: command tx timeout [ 391.512868][T14279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.519857][T14279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.547744][T14279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.561720][T14279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.571270][T14279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.606610][T14279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.631512][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.662629][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 391.683615][ T24] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 391.746753][T14279] hsr_slave_0: entered promiscuous mode [ 391.766319][T14279] hsr_slave_1: entered promiscuous mode [ 391.781659][T14279] debugfs: 'hsr0' already exists in 'hsr' [ 391.794344][T14279] Cannot create hsr debugfs directory [ 391.804092][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.822514][ T24] usb 5-1: device descriptor read/64, error -71 [ 391.827829][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 391.835953][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 391.850227][ T10] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 391.864117][ T10] usb 4-1: config 13 has no interface number 0 [ 391.878382][ T10] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 391.901097][ T10] usb 4-1: config 13 interface 50 has no altsetting 0 [ 391.916031][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.925506][ T10] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 391.941922][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.950308][ T24] usb usb5-port1: attempt power cycle [ 391.967107][ T10] usb 4-1: Product: syz [ 391.979239][ T10] usb 4-1: Manufacturer: syz [ 391.991110][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.992316][ T10] usb 4-1: SerialNumber: syz [ 392.026617][T14339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 392.219568][ T60] bridge_slave_1: left allmulticast mode [ 392.236144][ T60] bridge_slave_1: left promiscuous mode [ 392.253724][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.262325][ T60] bridge_slave_0: left allmulticast mode [ 392.267986][ T60] bridge_slave_0: left promiscuous mode [ 392.282074][ T24] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 392.292274][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.307322][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 392.322564][ T24] usb 5-1: device descriptor read/8, error -71 [ 392.323175][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 392.380796][ T10] usb 4-1: USB disconnect, device number 4 [ 392.417609][ T6686] udevd[6686]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 392.561893][ T24] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 392.580794][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.592706][ T24] usb 5-1: device descriptor read/8, error -71 [ 392.603415][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.636087][ T60] bond0 (unregistering): Released all slaves [ 392.690791][T14279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.712565][ T24] usb usb5-port1: unable to enumerate USB device [ 392.744683][T14279] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.768865][ T3359] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.776069][ T3359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.826331][ T7917] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.833515][ T7917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.974456][T14279] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 393.196758][ T60] hsr_slave_0: left promiscuous mode [ 393.207154][ T60] hsr_slave_1: left promiscuous mode [ 393.217116][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.235155][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.253449][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.265922][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.286268][ T60] veth1_macvtap: left promiscuous mode [ 393.296778][ T60] veth0_macvtap: left promiscuous mode [ 393.309244][ T60] veth1_vlan: left promiscuous mode [ 393.333197][ T60] veth0_vlan: left promiscuous mode [ 393.581456][ T5870] Bluetooth: hci2: command tx timeout [ 393.809305][T14389] /dev/rnullb0: Can't open blockdev [ 393.848041][ T60] team0 (unregistering): Port device team_slave_1 removed [ 393.868607][ T60] team0 (unregistering): Port device team_slave_0 removed [ 394.011576][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 394.085423][T14394] netlink: 'syz.2.2510': attribute type 44 has an invalid length. [ 394.095581][T14279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.113822][T14394] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 394.120782][T14394] /dev/rnullb0: Can't open blockdev [ 394.203538][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 394.265251][ T10] usb 4-1: config 9 has an invalid interface number: 92 but max is 0 [ 394.283602][ T10] usb 4-1: config 9 has no interface number 0 [ 394.306880][ T10] usb 4-1: config 9 interface 92 has no altsetting 0 [ 394.332972][ T10] usb 4-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=4d.c1 [ 394.368056][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.401281][ T10] usb 4-1: Product: syz [ 394.417828][ T10] usb 4-1: Manufacturer: syz [ 394.436900][ T10] usb 4-1: SerialNumber: syz [ 394.683124][ T10] usb 4-1: USB disconnect, device number 5 [ 394.706493][ T5865] Bluetooth: hci5: unexpected event 0x2f length: 509 > 260 [ 394.724367][T14279] veth0_vlan: entered promiscuous mode [ 394.803517][T14279] veth1_vlan: entered promiscuous mode [ 394.883653][T14279] veth0_macvtap: entered promiscuous mode [ 394.912568][T14279] veth1_macvtap: entered promiscuous mode [ 394.962973][T14279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.994534][T14279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.039243][T14438] /dev/rnullb0: Can't open blockdev [ 395.055632][T14440] /dev/rnullb0: Can't open blockdev [ 395.162471][ T7921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.203739][ T7921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.255310][ T7923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.284994][ T7923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.298440][T14450] hfs: unable to load iocharset "io#harset" [ 395.301889][T14447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2518'. [ 395.533490][T14478] /dev/rnullb0: Can't open blockdev [ 395.551257][T14478] /dev/rnullb0: Can't open blockdev [ 395.556968][T14478] /dev/rnullb0: Can't open blockdev [ 395.591630][T14478] /dev/rnullb0: Can't open blockdev [ 395.597285][T14478] /dev/rnullb0: Can't open blockdev [ 395.618150][T14478] /dev/rnullb0: Can't open blockdev [ 395.626079][T14478] /dev/rnullb0: Can't open blockdev [ 395.633690][T14478] /dev/rnullb0: Can't open blockdev [ 395.639367][T14478] /dev/rnullb0: Can't open blockdev [ 395.646537][T14478] /dev/rnullb0: Can't open blockdev [ 395.652738][T14478] /dev/rnullb0: Can't open blockdev [ 395.658512][T14478] /dev/rnullb0: Can't open blockdev [ 395.663856][ T5865] Bluetooth: hci2: command tx timeout [ 395.671732][ T55] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 395.681442][T14478] /dev/rnullb0: Can't open blockdev [ 395.687199][T14478] /dev/rnullb0: Can't open blockdev [ 395.711002][T14478] /dev/rnullb0: Can't open blockdev [ 395.716827][T14478] /dev/rnullb0: Can't open blockdev [ 395.724297][T14478] /dev/rnullb0: Can't open blockdev [ 395.740106][T14478] /dev/rnullb0: Can't open blockdev [ 395.750330][ T43] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 395.762496][T14478] /dev/rnullb0: Can't open blockdev [ 395.768215][T14478] /dev/rnullb0: Can't open blockdev [ 395.789001][T14478] /dev/rnullb0: Can't open blockdev [ 395.813904][T14478] /dev/rnullb0: Can't open blockdev [ 395.823516][T14478] /dev/rnullb0: Can't open blockdev [ 395.829243][T14478] /dev/rnullb0: Can't open blockdev [ 395.834981][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 395.841022][T14478] /dev/rnullb0: Can't open blockdev [ 395.849372][ T55] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 395.859176][ T55] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 395.870451][T14478] /dev/rnullb0: Can't open blockdev [ 395.876137][T14478] /dev/rnullb0: Can't open blockdev [ 395.890199][ T55] usb 2-1: Product: syz [ 395.894384][ T55] usb 2-1: Manufacturer: syz [ 395.899222][ T55] usb 2-1: SerialNumber: syz [ 395.911082][T14478] /dev/rnullb0: Can't open blockdev [ 395.916746][T14478] /dev/rnullb0: Can't open blockdev [ 395.924784][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 395.932603][T14478] /dev/rnullb0: Can't open blockdev [ 395.941526][ T55] usb 2-1: config 0 descriptor?? [ 395.944329][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.957977][ T55] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 395.972802][T14478] /dev/rnullb0: Can't open blockdev [ 395.973462][ T43] usb 5-1: Product: syz [ 395.978513][T14478] /dev/rnullb0: Can't open blockdev [ 396.001932][ T43] usb 5-1: Manufacturer: syz [ 396.011370][T14478] /dev/rnullb0: Can't open blockdev [ 396.013172][ T43] usb 5-1: SerialNumber: syz [ 396.119984][T14493] syzkaller1: entered promiscuous mode [ 396.140497][ T5865] Bluetooth: hci4: command 0x0405 tx timeout [ 396.150835][T14463] /dev/rnullb0: Can't open blockdev [ 396.156577][T14493] syzkaller1: entered allmulticast mode [ 396.163596][ T5907] usb 2-1: USB disconnect, device number 16 [ 396.193876][T14494] /dev/rnullb0: Can't open blockdev [ 396.458847][T14502] /dev/rnullb0: Can't open blockdev [ 396.640100][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 396.652536][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 396.859538][ T5865] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.867018][ T5865] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.876133][ T5865] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.888597][ T5865] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.896869][ T5865] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 396.924394][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 396.937823][T14517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2532'. [ 396.948786][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 396.960050][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 396.968862][ T55] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 397.009968][ T43] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 397.011783][T14517] /dev/rnullb0: Can't open blockdev [ 397.032305][ T43] usb 5-1: USB disconnect, device number 55 [ 397.152026][ T55] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 397.166062][ T55] usb 2-1: config 0 has no interface number 0 [ 397.187882][ T55] usb 2-1: config 0 interface 3 has no altsetting 0 [ 397.197594][ T55] usb 2-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice=53.69 [ 397.199181][T14513] chnl_net:caif_netlink_parms(): no params data found [ 397.217087][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.236338][ T55] usb 2-1: Product: syz [ 397.242225][ T55] usb 2-1: Manufacturer: syz [ 397.247025][ T55] usb 2-1: SerialNumber: syz [ 397.254631][ T55] usb 2-1: config 0 descriptor?? [ 397.302030][T14513] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.309196][T14513] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.317561][T14513] bridge_slave_0: entered allmulticast mode [ 397.325479][T14513] bridge_slave_0: entered promiscuous mode [ 397.334400][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.342157][T14513] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.349372][T14513] bridge_slave_1: entered allmulticast mode [ 397.357808][T14513] bridge_slave_1: entered promiscuous mode [ 397.410587][T14513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.435915][T14513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.469414][ T55] cdc_subset 2-1:0.3: probe with driver cdc_subset failed with error -22 [ 397.495319][T14513] team0: Port device team_slave_0 added [ 397.503354][T14513] team0: Port device team_slave_1 added [ 397.538785][T14513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.552266][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.592102][T14513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.604827][T14513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.614416][T14513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.640437][ C1] vkms_vblank_simulate: vblank timer overrun [ 397.647865][T14513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.670858][T14510] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2530'. [ 397.693258][T14510] fuse: Unknown parameter ' ' [ 397.717501][ T24] usb 2-1: USB disconnect, device number 17 [ 397.739590][ T5870] Bluetooth: hci2: command tx timeout [ 397.750831][T14513] hsr_slave_0: entered promiscuous mode [ 397.757264][T14513] hsr_slave_1: entered promiscuous mode [ 397.766951][T14513] debugfs: 'hsr0' already exists in 'hsr' [ 397.774599][T14513] Cannot create hsr debugfs directory [ 397.886276][T14513] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.893466][T14513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 397.900889][T14513] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.908009][T14513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 397.939263][ T5907] usb 5-1: new low-speed USB device number 56 using dummy_hcd [ 397.954491][T14513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.973852][ T7917] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.982349][ T7917] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.007157][T14513] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.019260][ T7917] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.026421][ T7917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.038803][ T7923] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.045947][ T7923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.111513][ T5907] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.129084][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D is Bulk; changing to Interrupt [ 398.149057][ T5907] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 398.169624][ T5907] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 398.199073][ T5907] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 398.218482][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.262750][ T5907] usb 5-1: config 0 descriptor?? [ 398.312072][T14513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.582596][T14513] veth0_vlan: entered promiscuous mode [ 398.612955][ T5907] usb 5-1: USB disconnect, device number 56 [ 398.627922][T14513] veth1_vlan: entered promiscuous mode [ 398.655124][T14513] veth0_macvtap: entered promiscuous mode [ 398.667940][T14513] veth1_macvtap: entered promiscuous mode [ 398.685062][T14513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.698042][T14513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.751673][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.766986][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.779098][ T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 398.795928][ T7921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.804373][ T7921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.879885][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2538'. [ 398.918680][ T24] usb 2-1: device descriptor read/64, error -71 [ 398.939923][ T5870] Bluetooth: hci1: command tx timeout [ 399.169218][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 399.189962][T14590] /dev/rnullb0: Can't open blockdev [ 399.257869][ T30] audit: type=1326 audit(1755963797.780:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14595 comm="syz.3.2548" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbd0758ebe9 code=0x0 [ 399.300093][ C1] ------------[ cut here ]------------ [ 399.305643][ C1] WARNING: ./include/linux/skbuff.h:1165 at nf_reject_fill_skb_dst+0x2a4/0x330, CPU#1: kworker/1:1/43 [ 399.316695][ C1] Modules linked in: [ 399.320642][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 399.329866][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.339993][ C1] Workqueue: mld mld_ifc_work [ 399.344707][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 399.350930][ C1] Code: 8b 0d 90 6d c4 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d 7c 9f f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 399.370590][ C1] RSP: 0018:ffffc90000a08360 EFLAGS: 00010246 [ 399.376729][ C1] RAX: ffffffff8a2152b3 RBX: ffff888075f6fb40 RCX: ffff8880212a0000 [ 399.384767][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 399.392775][ C1] RBP: ffffc90000a08490 R08: ffffffff8fe52d37 R09: 1ffffffff1fca5a6 [ 399.400817][ C1] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: ffff8880798ee101 [ 399.408826][ C1] R13: dffffc0000000001 R14: 1ffff92000141070 R15: 0000000000000000 [ 399.416826][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 399.425806][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 399.432455][ C1] CR2: 0000200000001140 CR3: 0000000026fb6000 CR4: 00000000003526f0 [ 399.440597][ C1] Call Trace: [ 399.443891][ C1] [ 399.446743][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 399.452713][ C1] ? __irq_exit_rcu+0xd8/0x1f0 [ 399.457488][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 399.462750][ C1] nf_send_unreach+0x17b/0x6e0 [ 399.467558][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 399.472917][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 399.478209][ C1] nft_do_chain+0x40c/0x1920 [ 399.482886][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 399.488012][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 399.492934][ C1] ? hsr_addr_is_self+0x26/0x410 [ 399.497937][ C1] ? hsr_handle_frame+0x6fa/0x9a0 [ 399.503034][ C1] nft_do_chain_inet+0x25d/0x340 [ 399.508004][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 399.513509][ C1] ? NF_HOOK+0x9a/0x3a0 [ 399.517708][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.522538][ C1] ? lock_acquire+0x5f/0x360 [ 399.527142][ C1] ? ip_sabotage_in+0x57/0x270 [ 399.531954][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 399.537455][ C1] nf_hook_slow+0xc5/0x220 [ 399.541953][ C1] NF_HOOK+0x206/0x3a0 [ 399.546042][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 399.551208][ C1] ? NF_HOOK+0x9a/0x3a0 [ 399.555391][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 399.560019][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 399.564619][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 399.569780][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 399.574301][ C1] __netif_receive_skb+0x143/0x380 [ 399.579455][ C1] ? process_backlog+0x2d5/0x14f0 [ 399.584517][ C1] process_backlog+0x60e/0x14f0 [ 399.589421][ C1] ? __pfx_process_backlog+0x10/0x10 [ 399.594731][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 399.600156][ C1] __napi_poll+0xc4/0x360 [ 399.604499][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.609301][ C1] net_rx_action+0x707/0xe30 [ 399.613909][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 399.619067][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 399.624286][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 399.629618][ C1] handle_softirqs+0x283/0x870 [ 399.634436][ C1] ? do_softirq+0xec/0x180 [ 399.638897][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 399.644205][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 399.649367][ C1] do_softirq+0xec/0x180 [ 399.653632][ C1] [ 399.656568][ C1] [ 399.659529][ C1] ? __pfx_do_softirq+0x10/0x10 [ 399.664394][ C1] ? unwind_next_frame+0xa5/0x2390 [ 399.669560][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.674337][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 399.679563][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 399.685343][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 399.690568][ C1] ? lock_release+0x4b/0x3e0 [ 399.695186][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 399.700351][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 399.705478][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 399.710625][ C1] ? lock_release+0x4b/0x3e0 [ 399.715227][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 399.720386][ C1] ? fib_rules_lookup+0x96/0xe90 [ 399.725342][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 399.730754][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 399.736159][ C1] ? l3mdev_update_flow+0x4d1/0x640 [ 399.741414][ C1] ? l3mdev_update_flow+0x29/0x640 [ 399.746544][ C1] ? mroute6_is_socket+0x20b/0x300 [ 399.751687][ C1] ? __pfx_mroute6_is_socket+0x10/0x10 [ 399.757149][ C1] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 399.762360][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.767142][ C1] ? NF_HOOK+0x9e/0x380 [ 399.771317][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.776146][ C1] ? NF_HOOK+0x9e/0x380 [ 399.780326][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.785108][ C1] ? NF_HOOK+0x9e/0x380 [ 399.789295][ C1] ? ip6_finish_output2+0xf99/0x16a0 [ 399.794598][ C1] ip6_finish_output2+0x11bc/0x16a0 [ 399.799884][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 399.805209][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 399.810792][ C1] ? ip6_mtu+0x7d/0x3f0 [ 399.814965][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 399.820204][ C1] NF_HOOK+0x9e/0x380 [ 399.824203][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 399.828832][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 399.834762][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 399.839998][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 399.844931][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 399.849933][ C1] mld_sendpack+0x8d4/0xe60 [ 399.854449][ C1] ? mld_sendpack+0x1e7/0xe60 [ 399.859149][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 399.864210][ C1] mld_ifc_work+0x83e/0xd60 [ 399.868762][ C1] ? rcu_is_watching+0x15/0xb0 [ 399.873533][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 399.879281][ C1] process_scheduled_works+0xae1/0x17b0 [ 399.884856][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 399.890858][ C1] worker_thread+0x8a0/0xda0 [ 399.895463][ C1] kthread+0x711/0x8a0 [ 399.899574][ C1] ? __pfx_worker_thread+0x10/0x10 [ 399.904696][ C1] ? __pfx_kthread+0x10/0x10 [ 399.909329][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 399.914539][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 399.919760][ C1] ? __pfx_kthread+0x10/0x10 [ 399.924355][ C1] ret_from_fork+0x47c/0x820 [ 399.928303][ T5907] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 399.928967][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 399.941768][ C1] ? __switch_to_asm+0x39/0x70 [ 399.946535][ C1] ? __switch_to_asm+0x33/0x70 [ 399.951332][ C1] ? __pfx_kthread+0x10/0x10 [ 399.955933][ C1] ret_from_fork_asm+0x1a/0x30 [ 399.960732][ C1] [ 399.963769][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 399.971059][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 399.980240][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 399.990300][ C1] Workqueue: mld mld_ifc_work [ 399.994995][ C1] Call Trace: [ 399.998262][ C1] [ 400.001100][ C1] dump_stack_lvl+0x99/0x250 [ 400.005689][ C1] ? __asan_memcpy+0x40/0x70 [ 400.010316][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 400.015504][ C1] ? __pfx__printk+0x10/0x10 [ 400.020095][ C1] vpanic+0x281/0x750 [ 400.024106][ C1] ? __pfx_vpanic+0x10/0x10 [ 400.028601][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 400.033923][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 400.039110][ C1] panic+0xb9/0xc0 [ 400.042822][ C1] ? __pfx_panic+0x10/0x10 [ 400.047228][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 400.052158][ C1] __warn+0x334/0x4c0 [ 400.056129][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 400.061670][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 400.067268][ C1] report_bug+0x2be/0x4f0 [ 400.071596][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 400.077146][ C1] ? nf_reject_fill_skb_dst+0x2a4/0x330 [ 400.082710][ C1] ? nf_reject_fill_skb_dst+0x2a6/0x330 [ 400.088255][ C1] handle_bug+0x84/0x160 [ 400.092489][ C1] exc_invalid_op+0x1a/0x50 [ 400.096982][ C1] asm_exc_invalid_op+0x1a/0x20 [ 400.101821][ C1] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 400.107971][ C1] Code: 8b 0d 90 6d c4 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d 7c 9f f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 400.127569][ C1] RSP: 0018:ffffc90000a08360 EFLAGS: 00010246 [ 400.133805][ C1] RAX: ffffffff8a2152b3 RBX: ffff888075f6fb40 RCX: ffff8880212a0000 [ 400.141769][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 400.149730][ C1] RBP: ffffc90000a08490 R08: ffffffff8fe52d37 R09: 1ffffffff1fca5a6 [ 400.157689][ C1] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: ffff8880798ee101 [ 400.165650][ C1] R13: dffffc0000000001 R14: 1ffff92000141070 R15: 0000000000000000 [ 400.173613][ C1] ? nf_reject_fill_skb_dst+0x2a3/0x330 [ 400.179155][ C1] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 400.185039][ C1] ? __irq_exit_rcu+0xd8/0x1f0 [ 400.189812][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 400.195004][ C1] nf_send_unreach+0x17b/0x6e0 [ 400.199953][ C1] ? __pfx_nf_send_unreach+0x10/0x10 [ 400.205228][ C1] nft_reject_inet_eval+0x4bc/0x690 [ 400.210415][ C1] nft_do_chain+0x40c/0x1920 [ 400.214994][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 400.220000][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 400.224849][ C1] ? hsr_addr_is_self+0x26/0x410 [ 400.229779][ C1] ? hsr_handle_frame+0x6fa/0x9a0 [ 400.234797][ C1] nft_do_chain_inet+0x25d/0x340 [ 400.239729][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 400.245182][ C1] ? NF_HOOK+0x9a/0x3a0 [ 400.249331][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.254084][ C1] ? lock_acquire+0x5f/0x360 [ 400.258658][ C1] ? ip_sabotage_in+0x57/0x270 [ 400.263419][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 400.268868][ C1] nf_hook_slow+0xc5/0x220 [ 400.273279][ C1] NF_HOOK+0x206/0x3a0 [ 400.277341][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 400.282444][ C1] ? NF_HOOK+0x9a/0x3a0 [ 400.286588][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 400.291170][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 400.295750][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 400.300865][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 400.305369][ C1] __netif_receive_skb+0x143/0x380 [ 400.310489][ C1] ? process_backlog+0x2d5/0x14f0 [ 400.315514][ C1] process_backlog+0x60e/0x14f0 [ 400.320458][ C1] ? __pfx_process_backlog+0x10/0x10 [ 400.325830][ C1] ? xdp_do_check_flushed+0x21b/0x240 [ 400.331203][ C1] __napi_poll+0xc4/0x360 [ 400.335530][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.340289][ C1] net_rx_action+0x707/0xe30 [ 400.344915][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 400.350030][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 400.355231][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 400.360504][ C1] handle_softirqs+0x283/0x870 [ 400.365258][ C1] ? do_softirq+0xec/0x180 [ 400.369683][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 400.374955][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 400.380077][ C1] do_softirq+0xec/0x180 [ 400.384318][ C1] [ 400.387232][ C1] [ 400.390148][ C1] ? __pfx_do_softirq+0x10/0x10 [ 400.394989][ C1] ? unwind_next_frame+0xa5/0x2390 [ 400.400095][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.404853][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 400.410042][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 400.415753][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 400.420853][ C1] ? lock_release+0x4b/0x3e0 [ 400.425432][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 400.430528][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 400.435623][ C1] __dev_queue_xmit+0x1d79/0x3b50 [ 400.440634][ C1] ? lock_release+0x4b/0x3e0 [ 400.445211][ C1] ? __dev_queue_xmit+0x27b/0x3b50 [ 400.450311][ C1] ? fib_rules_lookup+0x96/0xe90 [ 400.455238][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 400.460604][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 400.465963][ C1] ? l3mdev_update_flow+0x4d1/0x640 [ 400.471160][ C1] ? l3mdev_update_flow+0x29/0x640 [ 400.476264][ C1] ? mroute6_is_socket+0x20b/0x300 [ 400.481364][ C1] ? __pfx_mroute6_is_socket+0x10/0x10 [ 400.486811][ C1] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 400.491996][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.496855][ C1] ? NF_HOOK+0x9e/0x380 [ 400.501001][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.505757][ C1] ? NF_HOOK+0x9e/0x380 [ 400.509904][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.514689][ C1] ? NF_HOOK+0x9e/0x380 [ 400.518837][ C1] ? ip6_finish_output2+0xf99/0x16a0 [ 400.524120][ C1] ip6_finish_output2+0x11bc/0x16a0 [ 400.529312][ C1] ? ip6_finish_output2+0x701/0x16a0 [ 400.534590][ C1] ? __pfx_ip6_finish_output2+0x10/0x10 [ 400.540124][ C1] ? ip6_mtu+0x7d/0x3f0 [ 400.544269][ C1] ? ip6_finish_output+0x2ef/0x4e0 [ 400.549404][ C1] NF_HOOK+0x9e/0x380 [ 400.553377][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 400.557957][ C1] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 400.563751][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 400.568960][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 400.573888][ C1] ? icmp6_dst_alloc+0x3a5/0x420 [ 400.578816][ C1] mld_sendpack+0x8d4/0xe60 [ 400.583316][ C1] ? mld_sendpack+0x1e7/0xe60 [ 400.587985][ C1] ? __pfx_mld_sendpack+0x10/0x10 [ 400.593012][ C1] mld_ifc_work+0x83e/0xd60 [ 400.597505][ C1] ? rcu_is_watching+0x15/0xb0 [ 400.602259][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 400.607972][ C1] process_scheduled_works+0xae1/0x17b0 [ 400.613532][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.619508][ C1] worker_thread+0x8a0/0xda0 [ 400.624103][ C1] kthread+0x711/0x8a0 [ 400.628179][ C1] ? __pfx_worker_thread+0x10/0x10 [ 400.633282][ C1] ? __pfx_kthread+0x10/0x10 [ 400.637864][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 400.643071][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 400.648261][ C1] ? __pfx_kthread+0x10/0x10 [ 400.652851][ C1] ret_from_fork+0x47c/0x820 [ 400.657432][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 400.662538][ C1] ? __switch_to_asm+0x39/0x70 [ 400.667290][ C1] ? __switch_to_asm+0x33/0x70 [ 400.672043][ C1] ? __pfx_kthread+0x10/0x10 [ 400.676632][ C1] ret_from_fork_asm+0x1a/0x30 [ 400.681392][ C1] [ 400.684700][ C1] Kernel Offset: disabled [ 400.689009][ C1] Rebooting in 86400 seconds..