last executing test programs: 3m26.72301018s ago: executing program 2 (id=81): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000978000/0x3000)=nil, 0x3000, 0x1d, 0x28011, r0, 0x296b1000) sendfile(r0, r0, &(0x7f0000000000)=0x7fffffff, 0x40000007ffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000978000/0x3000)=nil, 0x3000, 0x1d, 0x28011, r0, 0x296b1000) (async) sendfile(r0, r0, &(0x7f0000000000)=0x7fffffff, 0x40000007ffff000) (async) 3m26.501695313s ago: executing program 2 (id=84): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) mmap(&(0x7f0000758000/0x1000)=nil, 0x1000, 0x0, 0x4010, r0, 0xb9010000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x502, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) r4 = openat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', &(0x7f0000000280)={0x4000, 0x21, 0x33}, 0x18) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge0\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdirat(r4, &(0x7f00000000c0)='./file1/file0\x00', 0x2c) mount(0x0, &(0x7f0000000100)='./file1/file0\x00', &(0x7f0000000380)='rpc_pipefs\x00', 0x884000, &(0x7f0000000240)='usrquo\x05\x00') r6 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$6lowpan_control(r6, 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="540000001200010000000000000000001d00000000004e2300000000ffffffffff0700000000000000000000000000000000000009000000", @ANYRES32=0x0, @ANYBLOB="0100000003000000000000000000000008000300110000000100000001000000f1399c5f5c6ce53a9d058c983bcbaeee563843545cf19b987fceae3da5488934b8bf39b0de2bf991da1110e832f6a4ce1aeb6ed9151b92b3634d81951ff0d740cdd3ff49336b68f816993e34012afd331c6a6edfa0ad376be840c211b2fb6f031e7e6b26d2ccb801292f18cc6fabceda42ee263add98adfa3e2c2c6d26494560d6a741641788696a16cb0e8c5f924c40caac4855c4b586b368c5605793b809a6f99c4b4585d6c3579f1ce00a75c6f76e25"], 0x54}}, 0x20004010) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r9 = syz_clone(0x80000200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r4, &(0x7f0000000500)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000080)=r9, 0x12) quotactl_fd$Q_QUOTAON(r7, 0xffffffff80000200, 0x0, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000013c0)=0x3) sendto$packet(r2, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) capset(&(0x7f0000000340)={0x20071026, r9}, &(0x7f0000000140)={0x1, 0x0, 0x0, 0x0, 0x800000, 0x4}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="888e4d4815f51783209b7db224c5f642da98cfabe1b3e9d4698297c010864b2b5c0c42da9392993f272cf828e242c2575f419d8175a542cfc8fc9dea84fb4a0aca25e16591c483d182ab91df36a18767e0b4b4e0bb9e930cd0a6b18334c5301ba1eff523bad8ea6e8b48ca622d149e3e256a7c7ebdc0e682d739583a212fedd0b27ca16fc3c8b91781127224c1bf2628594775cd28fe8494baf0a5074ef8ea5051fe38687b02f75bf15816d4"], 0x18, 0x4000000}, 0x34044800) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) 3m26.309480684s ago: executing program 2 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf252c00007308000300", @ANYRES32=r3], 0x2c}, 0x1, 0x0, 0x0, 0x8850}, 0x20048090) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r4, 0xa0e52000) openat$uhid(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m26.056790837s ago: executing program 2 (id=86): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x22004800}, 0x814) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0x100000001) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000180)={0x3, 0x7, 0x3}) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, 0x140e, 0x100, 0x70bd25, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8, 0x3c, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4044011}, 0x20000044) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000480), r0) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x68, r4, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @broadcast}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xce}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @private=0xa010102}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x3}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x3}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x7f}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8010) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000001680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001640)={&(0x7f0000000600)={0x1018, 0x14, 0x20, 0x70bd25, 0x25dfdbfb, {0x1d, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "175f7cf3d5cf982d7331cf19e9429e2000c3339b6b1c9dcbaeb72f3e435b21f6ceeaef7583a6745a9a41386bdcbf7ea8180013303f5accca88f0650d3b5a62ded9509ffc67174afc7b0fb6ec78c9884d2aacfe24077013f360d57a77bc231ebd07085b9df45e21f00d66f90ab7aba612cf6d387f5fde6b09ac076d1b2bde2beb267426f336faba14e03d329c8381293b8949f0ae43a8c0bb1eb26124c9e81f9038c56d535387bc3a81f0c05f68b844f1bef8d7610dd005112d292191f48be354c634a86742fe990a059a22041ffd62211d445a46137d50d031af2692e062a6549a942811e8d9c2248c0d95ee20d3506763d5af372fad5ffaf587a13483acf12243000ed9d728018a1d28b9a99472cc81f13c0884b35f0d23af8b9babb68be913db9894b96761fbd15765c011ae77acc2a1bd194580154406a76f1d200610dfbc00a3ffe126380f17b7d3b05ac16585b852c033aca010b535a0e1e6e4eae780ce41b56792271b6c521a3690c6f270284f04f7cce4d7cf2a3f40ab6f0f056236bb1457d71294a6a32f21ab94cc79dabae31e3050508140b05ad94441bb39af3d29d1fa448eae88ab76e8822134eb0e615a67e984a332a097ad7875a9d37e49c74308da0c8893e1afe7315362a99a615de1cdc373f1989d1e078003258e602424851f4b6608a6e4fbd648bd1eff8e5672e75a9dbc5c864cf03344dae33392114863b1a3646e6eacad35e3aaa470d2e5c2f33a53f27e7d5ae3246efa4cff24a864a9f04bff0e5fa0d99baf967ee1fdd4c8ae0f42c1527077d5eceedce561313473948178ab84cdb234049de26df822456b249cf54f859d8e6fb157469c46826f449d17ceb3087b393d286670facf26880781927451d3afc5e61a0a4a74d4221366f639f36c508b4b29c48179164cce830a4fbc2888166d60702c2087b8d026dcb89334be2db868cb3d2b6a9031ba85c2fc67d6d01e4cffc27b0b4b63fade580acc6863c28678025391a413727f617e255c97b140596b67ffeb5cef9e6e8e88c64c8356f3b6aaeb52b1ff44b3a0a8108a60aece0ff9a9b067a01a88a9e2e8e8ade7abadc8f110e343867124043a4cecd603065b8805713f74bddb5f053b99fbb53a8828e3ba347d1764e9bf90fe6cfd87ca82ed4a91128cb0700b4bd5295e43a42863423854a92c329b61f984cb0535829cd76a31b0da312cac298b3f16f1a41367af24aace27ae9f198cda10ef31b84ff135da20536668895dedb4021bb15a0f9be31a272db834aa973e7fca5b234bcfd507b45339ec66d052d0349e991c5cae400af3bb0aae4f7d772700d0e27a36ab950b54676bcdc91e01dd0c50741ba105913d1d3d6346686b149542dc29ec4e8059d15f30a75e472d93d24f838184c3b5e071ef8853ed120a2e0d08846ae76842a96bb4a74337ea9bad8b44856fda574db331a8139ea8325bdd889daadecdf64a084e94316c23b17af0ffe6cdd7b896b31a0ce068119853ee5bee2ec2aed5fa5897074b9bd453d19c1ee5ede41f5f91210ce9cd535338f68786b8c869d5b7b4b68b8300ff94dbf61c66e03cddb75d177de54d7acf9f1e86de6290d330afe8d66606a10217294c8292c48786270f14d91df8e180d92fb20742240c8432e4198623beab26db7a9e2f0996851a642c8d58bf63577f5fd7069f9ad4efb2a296bc61c7d2dcff4341a73dbe2ecf6e9d1664e97a49acd90770e6070646684e071f9ba3a88723b26e11120b4e851edfb6b04c00b57793c5cc8032a971f1144b65cf5008cd049d9a779fc04d82374f94c15490c321d6de2ae15fac0327c6171b753ff49c54b48901c65f9d6aad6728eb978937d8c3b36b111aa96e77421e0371662e56ddf24bcb4d3ad478983e4b4a8d9c50369b47dbedfa0245bfa5839b63988d8d2fe9f1cfdaf9c7fd039f96a10e62aa51be649c61384cf20f781e7c8e8ae47629a4341b8441d67f40df9243bac1950fc9aa9e11ef2e85bd4ba763e67c831885930c9ba49fe52c12ebbb63774d70e2ad9128bdaf8600e37a84a6d0cb6b9009e56a620ff596ce882f3908334cc45f2ec9933acfc976f787ce6aef47574a09df5ececfb3dab023cd2d6ed96f64f4fb6b69b87aab3f8ca14be02745bda28d05e93bdafc1cd6bd2be6feb9e602fb4226b2e5822bfe48d8f858a426ee3ec5aa371f763b8a3c582c2a4695af28ca0405d3679091e1fa2d92d2c7640dc7087f43a9041583d8b83295139bb879f19b0a146e86f2eaf20cbe643a54a028e683c64b53cef784b97845b28f953e39305a520edfe90867e57c9c2278ed976f2f5e7c1f3fb9417848086deaf569b816c1f20e7c7557bc2fbf584e2765a9e71894cdee32e88343e5c40235183bca59101d4381cc6a6837e4252ea88d6d397f4ae243e93015dab86546de4932870078557ac336aca76dc14381dff542119d284ec0e795dc9890deb16aa1d66b790eb11aed820bdfd130ef72a8ecacbc30fdfce0751b9470792e4f833f9d69eab27cc57e574e5428a76a16c933bb802d3d8abe045881d6ebf5c848a1e4f3d125d73b994c64ad6c9419d436db240486050631b77bb62f116c53db872b348981514441d87718168e9e2360b561848d2fc65adf1bea23628d1e60d45642f3bf115bfeb1f4617569ba15e015238847db4f23dd71f5eb3c57216a2a5528fc043a3126243e4d35d9dcc6a50ad64378510cbbd8fc1012278e041112eddb86130db2a31a749f7d5fb0d21939bf85d47a810cde23133d1018b6a0dee465f8f566cd16fe8387343682ea79e5f893c02b76cae23f817f7910f074f751c1901e9765779c63361990de07e104a15771a75988507b9105f0375a587dd4ff8ef757c4fc0e4c8c91e843e8b843ed68055326bf7741ee236ace2c016b4e23bae4318dd578d928524eb66dc4c638a5453619be5b8371ad6ac8ada6a68993bbf8767477a3058fffb4aad333a090eb1a240dd8bd9401d67416239c24691e35bba394885e3bb27d5a4b5bad599802ed1fa5b3d1455681413c9809b4a2d8e39f3b13f1355650adc5a007796972201eb5415df5d1bae609f631cc03ee894b153e59206faa1f5a1b3183a1cf74b48904c399188099e0c5781fcc16dd6f15c764e2771d6d08b7098ef3c6bf6eb95176407309afbecd6d60dbe36a3976711fa365e1679824b1d439747f37cd34ea3890d1e38273c6194d4e57bdc6c4c9e001a972d5cf368adab58c1e8b8693cccf4948779bffa069f72f3be92ab6daf9ca678ecbfb2c1e7edf0b8c05558a21aa6a47827c2f85cf6152f3d05658ce6b63ebdebb85adcd81ddc6f870c5254718e3d75ec1930c9e9acaa763e94bf13bbbe5a7d01416ab808b9d3b2741d39f3f5fc89f62a2c06d89e34bff9e286e6dfe8788e66b5ef183c40a9a7c1ae63a74126170454dee3c900cd02dc66b3275b14ca60eab20eed64dc7aeb0d058e61b9378831044c700642ccdf743d06081dea8614afcae909fac6650b77854ef23b8383027148f63763dcd9d8dfd822b40516942ea9cdfae3cb3979573da13f66a641514915db5be557d42a80ca2faf54d8a803b10c944fd5f1ed5f59561a19f605b0960e139695e605a44ef08f60fae2f0d2a6aaaa609df62fe1779e40661ec960900293a622d01ea7844e025b13f0b8156e8950ba0247a38f67480466080e95848f3bc0585f3cae69c894f24f3852080c041b74d081a31b63e670b2d92216c5ff8987dcda4298f8857031486dec4fa9f82c1c3aa2ef5a1cef1e4276e15d8d4170197bf4c3ef5aa329696c9fb2459d89e57e8dfdb0f16ebd782f7898344a46970c17566f679424bb1daf172d4866e645abc8fa99b1f35aee53520d0617fa20b12ff38f3bcf75547928dcb0c0489beab7064f4d13adcb767471679e18ec254d2d806f270bb540effccf2f4f48b4595f9006196e2187fe701d493d66318b7c254107e0e220a847ece0122b7ee752e4167188027203e504e30c243d1625c10ad193d22d4e9d863f88020d508c737b273c1c8797339a0ab81d167cce0dd04d685787f008eb5c9f6d8b44c1c79e84660adce40160eb785e5869d3cbc6cc0d9ffa9113e0c47d4831d5162a8513e087424c15c568aaf7276980cb75b8484219265ea5000f50ce26e1475771dfd77b489c108a92a70cf0323381cb130e06318a7c11cc99ec49f00c2b36dd77fe32092532aa78eb461fd314c9d4956615c5b7d0f0fadaf38fafcef723b82d76e52bf031b601eca797ffdc07ca262b4381651d6a681a3a4e5e57756417f2aa6a3d823490e542d86488a52987f6774fdd61ab9a2a55b9d7b1494d919f25d46e7660060cea6e8174432b9df581eb8141d7b68736f67ca1d652051b04f35cdb4c56e8fe05e60de3cee6ba665be86b8123433b76b7ba14ba9dd26de8e0497556ad64fa974ed80ffccd202003b9e7f0ef438d321120e49e8ff0e2a4a77eff1ee44e7f781ab75b6e9aed81f6976f17b8cfdb361c0cb230ed611586656b3e9d5a499f730a064a9d2d1706ca7e98a1783928fae6d917dbe1409aa61f11e2cd5881602034eb92f880c2ce29d8adf7bed08dde42316e7ef4e24749607864ddfcad5752dd2ae6570e15cd40a4d31f9bda61d67dc50c9537a2e19f43536cb113f4afe714d954acfe04cfaff5941fccec45265576b01289b61a68db2be9e48bdf14812c1b226d7c78c8d2813c0f838a43e7539270b2c1d86d1c24d48f32a436bad9b5074ffa6aa477578f825758ec91522ea2bec34fbdbe7716f21b4b114f45e17201294b7de2628acf6c03744aa3ebcc0a6837e573e6a260c8ca44253dc5111224622fdddf65b8b10873d8b50188e516bb5403f1f062ac9e307866403ebfbf3534f54730c1d89698803d58298dad1d9905395567600c3107d6980584af06d359f540e5c47dbcae779c41ec2d8eb78ffd6b2bb0eb43fbfba7a0987b53e21a9d1b3fe0a5a408d7555f06472e6d1ec9136c05662e12d88563387034646240b423edc2bbb93defa4d400703ef229d60a69b1462821b237d75aee7880e17c9f7059cce8705d32feae5492db4d03540730046ee3de55c18148232449c9dd6c3f9f33593b0b0bbff7a7edc8aec236c126daa412c293eb32838bdfc1d1bf99cca5b74406c646a5592d8d3ff307fc44f3bf99f46f6968787928df9e0cb51525eb2583e18d6b203ca66be3fcaf4b375bc878695306940fe361b585fcffa77525af0706a3fa1a082f4048e960b2844e6c2536f9160b2d90766a840d5f5e52a4e7f60bfb860de27a9ff2dc6aa38fdfd694c2b4df0a9d31e6302941bfddcf6c3ad1ed10236efefc7a0fff5abc06a2f31f3358e5e8b20c32f8a070ea14e4178fe3a843e3742451f95fbfcd95d28bbdc5ad5b7b2ccf4cd555fbe4a414c8ccbfe1b0d9a838e7ed2719c79841e7137a436f3b5f1b453d68089d764eaf746d2d4975228673cc7c0df10c3b3122fc67af313a070a723f5f3b0dcb0178d0cc8cdf80aa3e058a2de7ee98b2b9b8c4873079d49181b53dec7293993d1bcd557bb7334a5be3282ed84b7908e09573aad6955856ef3651357ebfd7c8d0fda0ff68344108c42fb68e6cbf242ccbab5feddc69fd448f39dc7e9ba858d2acd8cb7f0e075077a49f897d647cda881c46ebf45ce6881eba56192299f7b780662a6003e97ecb7c5a240bc297d5e12eff61c40f8f0a60d64334ffd376054a1a52f06c0062075a471b696f7208951de6f18a29724980bd6444e80d35e1011d398b4ec71fd9c6ea5255db31fa71f01932164bc06260c33058f1ddee686fb8e55842caa2ec3"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x4040}, 0x4000000) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000016c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2cf6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x0, 0xe, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0xf7, {0x9, 0x21, 0x7, 0x9, 0x1, {0x22, 0xccb}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x4, 0x5, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x9, 0x0, 0x9a}}]}}}]}}]}}, &(0x7f0000001a00)={0xa, &(0x7f0000001700)={0xa, 0x6, 0x310, 0xf9, 0x7, 0x56, 0xff, 0x1a}, 0x12, &(0x7f0000001740)={0x5, 0xf, 0x12, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0xf, 0xfff9}]}, 0x6, [{0xbb, &(0x7f0000001780)=@string={0xbb, 0x3, "9c2b9de85778e966b2ea03b7777f4ad8f98df00193cde1921670effa41b41938a7d56ca28ea9de6c98c8d5b18466502123e929c93d3bafe8bcea7e1c252ba0da84475be3a2f436529d7de9b90a9b4046c6ae14c1738f773296131d1531707e3ec341d65ccc129961a733892f9be28642132507f00994490d371beb2fc692652f416258e2da49e3382164edcf25849c3292109cf411dd303ab5cddb6981869436ca24b03b91b3ed1efffbfc4144cbd7a2566d6b72de0850ed55"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f0000001880)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f00000018c0)=@lang_id={0x4, 0x3, 0x1466}}, {0xa2, &(0x7f0000001900)=@string={0xa2, 0x3, "e8e44562051a2290038fef2266a3469236017a8209ec0afd382c0795227e77faf32fc9c3cfdf13ecc4a4a6e6e1ef4f30335a6cc82636c419407b79956226f6800e8f7751a142f2b1245e9a0ee24bd35bcbabb8cbcec55f40c8304e5c183a720f3d5e8fad23e631c04f28b911799915c0a37ced015ca1c0d8519df3624146ed874369abd201a36d1bac6967330fecb9b9623a54edeba108927619b525ceef1a44"}}, {0x4, &(0x7f00000019c0)=@lang_id={0x4, 0x3, 0x459}}]}) syz_clone3(&(0x7f0000001c40)={0x300000000, &(0x7f0000001a80), &(0x7f0000001ac0)=0x0, &(0x7f0000001b00), {0x9}, &(0x7f0000001b40)=""/38, 0x26, &(0x7f0000001b80)=""/83, &(0x7f0000001c00)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2, {r0}}, 0x58) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000001cc0)=r5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000001d00)=0xffffffffffffffff, 0x4) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000001d40)) r7 = accept4$bt_l2cap(r0, &(0x7f0000001d80)={0x1f, 0x0, @none}, &(0x7f0000001dc0)=0xe, 0x0) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000001e00)) r8 = openat$cgroup_freezer_state(r0, &(0x7f0000001e40), 0x2, 0x0) write(r8, &(0x7f0000001e80)="bef79a7515268303c8744eb79a77125e3760ba827dae01701405c9d46daa8f910993ffa6f8055eb60069b504ea58a815af33a0b7d12f34ceecec11118a63ffc7aba7346480a679b966419e863022d904f83264ed861bdb15f0180bf5ddee58528238ecd9533cc32b7ba0e3f2607ed8d72f1aa9c5437bcedb8ab7d7b20bc220f9be4765ed1d4111c3b7e316bc36a43ec711554c34bf8da0e55c0629e81dbc870e86dbfe73760b7d6656b31b73f98169f7b453188d38f5f5e3d4cb0f39ace72801b681137d", 0xc4) r9 = openat$cgroup_ro(r0, &(0x7f0000001f80)='blkio.bfq.time\x00', 0x0, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000001fc0), 0x2, 0x0) r10 = syz_io_uring_complete(0x0) setsockopt$bt_BT_POWER(r10, 0x112, 0x9, &(0x7f0000002000)=0x3, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000002080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x50, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2b}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x5}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x36}]}]}, 0x50}}, 0x40000) sendmsg$NL80211_CMD_SET_WDS_PEER(r10, &(0x7f0000002340)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002240)={0x98, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x80, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="32c3ac1269f1"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @random="4c3a9662ad10"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="da1b000b05ef"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="dd5e05bce764"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x98}, 0x1, 0x0, 0x0, 0x10}, 0x40) 3m24.689627876s ago: executing program 2 (id=91): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0xfc, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc038563b, &(0x7f00000000c0)={0x2}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 3m24.590873717s ago: executing program 2 (id=92): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x18, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregset(0x4211, r3, 0x200, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wlan0\x00'}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x100, 0x9b02}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x10) (async) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m9.292374125s ago: executing program 32 (id=92): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x18, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) ptrace$setregset(0x4211, r3, 0x200, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wlan0\x00'}) (async) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x100, 0x9b02}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x10) (async) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m30.406125866s ago: executing program 4 (id=459): mount$tmpfs(0x0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), 0x1, &(0x7f0000002180)={[{@mpol={'mpol', 0x3d, {'local', '=relative', @val={0x3a, [0x33, 0x2d, 0x37]}}}}]}) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa0481, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 2m30.394405889s ago: executing program 4 (id=460): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m30.118021984s ago: executing program 4 (id=462): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x1, 0x28800) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r1, 0xc0984124, 0x0) ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) ioctl$UI_SET_MSCBIT(0xffffffffffffffff, 0x40045568, 0x1d) syz_emit_vhci(&(0x7f0000001cc0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x1d}, @hci_evt_le_cis_established={{}, {0x6, 0x0, '/sE', "156deb", "43de12", "2d82ef", 0x4, 0x4, 0x1, 0xd, 0xa, 0x0, 0x0, 0x1, 0x33, 0x40}}}}, 0x20) mmap(&(0x7f0000472000/0x1000)=nil, 0x1000, 0x9, 0x110, 0xffffffffffffffff, 0x4d590000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x60140, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000180)=0x1) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r4, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) r5 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000200), &(0x7f0000000240)=0x14) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x40000000, 0x0, 0xb5315258, 0x8, 0xfffffffd, 0x0, 0x0, 0x6, 0x0, 0x7}}) sendto$inet6(r4, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@netrom={'nr', 0x0}, 0x10) splice(r4, 0x0, r3, 0x0, 0x406f413, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) epoll_pwait2(r3, &(0x7f0000000040)=[{}, {}, {}], 0x3, &(0x7f00000000c0), &(0x7f0000000100)={[0x2]}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r0, 0x2000) 2m29.602651231s ago: executing program 4 (id=463): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) write(r0, &(0x7f0000000400)="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", 0x1f000) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x4100, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088018000c8014000b80080009000000000008000a000009"], 0x44}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x3103406, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendfile(r4, r4, 0x0, 0x10000) write$cgroup_subtree(r4, &(0x7f0000000200)={[{0x2d, 'freezer'}, {0x2d, 'net_cls'}, {0x2b, 'cpuacct'}, {0x2d, 'cpuacct'}, {0x2d, 'freezer'}, {0x2b, 'devices'}, {0x2d, 'rdma'}, {0x0, 'net_cls'}]}, 0x45) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x25) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000500)='./file0/file0\x00', 0x8) mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x2, 0x12, r1, 0x6511f000) 2m29.543596152s ago: executing program 4 (id=464): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in={{0x2, 0x4e20, @multicast2}}, [0x13, 0xffffffffffffa112, 0x1, 0xfffffffffffffffe, 0x8, 0x66ac, 0x1000, 0x2, 0x3c39, 0x6, 0x1c, 0x3, 0xbc27, 0xc, 0x8000000000000000]}, &(0x7f0000000280)=0x100) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x6c, 0xff, 0x4, 0x68, 0x0, 0x0, 0xb5, 0x0, 0x0, 0x1c, 0xff, 0x3, 0x0, 0x93}, 0xe) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 2m28.849863284s ago: executing program 4 (id=469): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0xf4, 0xdd, 0x8, 0x46d, 0x8b1, 0x6d2a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xb3, 0x83}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0xd, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000100)={0xd0, &(0x7f0000000240)="b68686829cf7c50df06f488a8a6eb0348d002877ef2be7e41209726bddbb86906205681be6e5a119dd8fa133c8211412afd28bd25ff6a4c3ac4caafdb0a7c0ce5aeba9248ce88f0d09d6d0534b03c228e4c808fa75a25ac3c633e633de4d071babed432d7321a03ba3a24f419ff94a6a8cb0110c8a79f05bc4abcd4ca8f4b4260d614803d39246fb9a0846721e7e8887c1ca638fb91fbdd8cb13b5dcce254426ec2090ac889d59df4b70c10787aaeb391ee93f16451a380cfa89b604ad4721dbd164123d92731415b96d5863130c861e"}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x0, 0xa3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "004b0a8bf150"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6145, 0xc}, {0x6, 0x24, 0x1a, 0x6, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe9, 0x9f, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6d, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0x0, 0x1, 0x40, 0x9b}, 0x4f, &(0x7f00000003c0)={0x5, 0xf, 0x4f, 0x1, [@generic={0x4a, 0x10, 0x3, "5aae2cb8d35a8445f10a56f91a4382ec0b1604c653435e81575f67f154139652e5b5afd52ad8c558e7c503f112fcb9f27086a64bbe66f4a76f8d15fce7be8a68a19c46149c2cec"}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x820}}]}) (async) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x0, 0xa3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "004b0a8bf150"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6145, 0xc}, {0x6, 0x24, 0x1a, 0x6, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe9, 0x9f, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6d, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0x0, 0x1, 0x40, 0x9b}, 0x4f, &(0x7f00000003c0)={0x5, 0xf, 0x4f, 0x1, [@generic={0x4a, 0x10, 0x3, "5aae2cb8d35a8445f10a56f91a4382ec0b1604c653435e81575f67f154139652e5b5afd52ad8c558e7c503f112fcb9f27086a64bbe66f4a76f8d15fce7be8a68a19c46149c2cec"}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x820}}]}) listen(r4, 0x5) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000200590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x488980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) 2m28.716527256s ago: executing program 33 (id=469): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_usb_connect(0x1, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xa8, 0xf4, 0xdd, 0x8, 0x46d, 0x8b1, 0x6d2a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x15, 0xb3, 0x83}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0xd, 0xd, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000100)={0xd0, &(0x7f0000000240)="b68686829cf7c50df06f488a8a6eb0348d002877ef2be7e41209726bddbb86906205681be6e5a119dd8fa133c8211412afd28bd25ff6a4c3ac4caafdb0a7c0ce5aeba9248ce88f0d09d6d0534b03c228e4c808fa75a25ac3c633e633de4d071babed432d7321a03ba3a24f419ff94a6a8cb0110c8a79f05bc4abcd4ca8f4b4260d614803d39246fb9a0846721e7e8887c1ca638fb91fbdd8cb13b5dcce254426ec2090ac889d59df4b70c10787aaeb391ee93f16451a380cfa89b604ad4721dbd164123d92731415b96d5863130c861e"}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x0, 0xa3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "004b0a8bf150"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6145, 0xc}, {0x6, 0x24, 0x1a, 0x6, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe9, 0x9f, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6d, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0x0, 0x1, 0x40, 0x9b}, 0x4f, &(0x7f00000003c0)={0x5, 0xf, 0x4f, 0x1, [@generic={0x4a, 0x10, 0x3, "5aae2cb8d35a8445f10a56f91a4382ec0b1604c653435e81575f67f154139652e5b5afd52ad8c558e7c503f112fcb9f27086a64bbe66f4a76f8d15fce7be8a68a19c46149c2cec"}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x820}}]}) (async) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x62, 0x2, 0x1, 0x3, 0x0, 0xa3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "004b0a8bf150"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6145, 0xc}, {0x6, 0x24, 0x1a, 0x6, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xe9, 0x9f, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6d, 0x5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x310, 0x6, 0x0, 0x1, 0x40, 0x9b}, 0x4f, &(0x7f00000003c0)={0x5, 0xf, 0x4f, 0x1, [@generic={0x4a, 0x10, 0x3, "5aae2cb8d35a8445f10a56f91a4382ec0b1604c653435e81575f67f154139652e5b5afd52ad8c558e7c503f112fcb9f27086a64bbe66f4a76f8d15fce7be8a68a19c46149c2cec"}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x820}}]}) listen(r4, 0x5) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000200590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x488980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r6, 0x5708e000) 2m16.770848593s ago: executing program 5 (id=532): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0), 0x10080004, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r2, 0x4, 0x42000) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x10280, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='cgroup.stat\x00', 0x275a, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=""/176, 0xb0}], 0x1}, 0x8}], 0x1, 0x2, 0x0) r5 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) write$UHID_INPUT(r4, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x612, 0x4) sendmsg$can_bcm(r5, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x70) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0xc352911b280b55c7, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000800"}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r6 = memfd_create(&(0x7f0000000040)='\'\x94\xa1N9\x13\x81\xde\xcc\x0f\xbd\xf8\x9b\x00', 0x5) read(r6, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r4, 0xc058534b, &(0x7f00000001c0)={0x6, 0x7, 0x6, 0x2, 0x9, 0x3}) 2m15.796391148s ago: executing program 5 (id=535): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) r1 = socket$tipc(0x1e, 0x2, 0x0) fremovexattr(r1, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000018140)=ANY=[@ANYBLOB="12010102f9a72a08480b091044d801074301090212020102090003090441070027be1100"], &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0}) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac000904000001070000090905", @ANYBLOB="c1"], 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mlock(&(0x7f000028d000/0x1000)=nil, 0x1000) (async) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) (async) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000a0000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970100040000", 0xd8}], 0x1}, 0x0) (async) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0100009660199304fe1b081aba770003ece1e40ad8871461ab087e2e6b7a4e39e7d3664709984e1b21be74b0e64412a150705dfde4e578521140db7da76be0f27ef8d23c842fffc3990d48a011f7487967f8c8a503ad3804287022410438559c58bbbaf1eb89461fa2ca61f21cfadf7c34575b99507279e6380f50e34713467433493a1f31ca08229a3d65a63927dafb9f176d", @ANYRES64=r4, @ANYRES64=0x0, @ANYRES32=r0, @ANYRES64=0x0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) read$FUSE(r0, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0}, 0x2020) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, r7, 0x73976972ba3f4b55, 0x0, 0xffffffff, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x7, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x0, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0x0, 0x7, {0x2, 0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x0, 0x8, 0x400}, @IPVS_SVC_ATTR_PROTOCOL={0x0, 0x2, 0x2f}, @IPVS_SVC_ATTR_ADDR={0x0, 0x3, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7cb5}]}, 0x58}}, 0x0) (async) statx(r0, &(0x7f0000000240)='./file0\x00', 0x0, 0x100, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x2200000, &(0x7f0000000380)={[{@xino_on}, {@xino_auto}], [{@seclabel}, {@uid_gt={'uid>', r5}}, {@fowner_gt={'fowner>', r8}}, {@smackfstransmute={'smackfstransmute', 0x3d, '.'}}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@subj_user={'subj_user', 0x3d, '/dev/rnullb0\x00'}}]}) (async) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) 2m15.670396726s ago: executing program 5 (id=536): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x181282, 0x0) fadvise64(r0, 0xb, 0x8000000001ff, 0x1) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 2m14.796182131s ago: executing program 5 (id=540): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000000040)=@filename='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x4000, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x28) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) 2m14.748444441s ago: executing program 5 (id=541): r0 = open(&(0x7f0000000300)='.\x00', 0x180, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='romfs\x00', 0x208402, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r1, 0xf, &(0x7f0000000140)={0x2}) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8d}, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) syz_usb_connect(0x5, 0x35, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000545e0d209904b76b2f680102030109022300010000c0050904970001ff7079000824bb05278426ff0905850308"], 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) gettid() r5 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r5, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000"], 0x30}], 0x1, 0x0) sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf2506000000180001800c000700020000002300000008000500000012bfa5bd0462d7ec267fc86447af10db6b49"], 0x3c}}, 0x4) timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000340)="825f49ad07725187b93abd24c144da17ea28437fed7bd3ee0d826ce619c11c73f87f000162", &(0x7f0000000600)="21c7860eb8966274f91bc2e22f11b50e9e08455abf33548745620b11cb4c143dee3be703727e01953789b086ad14da580ad72f6d000000000000ef624873125d6d5c84e16a8989375e3329b3354ce2ca2359172b77c0787656bac3d5a3f1046e33e092617c2024ffd93a4ee31e0ea2f84a0000000000000000002230c4f47c"}}, &(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x5, &(0x7f0000000100)={0x0, 0x35, 0x0, @thr={&(0x7f0000000240)="e34f3b01d40264609e19ef56c555c777466abfad66b361aa5703c1ba10ff375f80fec59f37c587bac50a00000000000000355302d8485d36fec4f8040d05e5bb3af9e1b2d2c1f4ff7006bbfe95d5013838", &(0x7f0000000380)="f00bdd894d6a23ceee7aaa744586dd1e40646747e9a7f0a00314c54abcb6ace0129a34d8a41529bff3c49b3bb473f670825c30364f03000000463e477af64e13031e629f88f4b138a0037212ca9295e82d81629f49187e461d51bba059c02a09c53cae1df8743f8d3c27b64da47a2192085e9c"}}, &(0x7f0000000180)) splice(r1, 0x0, r6, 0x0, 0xf39, 0x8) write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000540)=ANY=[@ANYBLOB="20b94d0000001f33d5292456039a430a703902d3f8ce"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r7, 0x720, &(0x7f0000000180)={0x1, 0x3, 0x5, &(0x7f0000000100)={0x48, "c6c103007a04bc517b5452b3b94bce47509d00"}}) 2m13.315564396s ago: executing program 5 (id=550): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x7, 0x1ff, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4100}, 0x4000000) getsockname$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0xfd, &(0x7f0000000000)="e4f7948a478e24691a4fbab94347692a41f3aa2d9ba4fd3615352d0d55c9ad4058f27cee3c2282d23616bb26997eeee07b06ad111bbefbc5059500e302cd522d0aeea19a47e81c25c1801a0011ebe7977263c37a613a3add3ec45c6d1e3f578bcff97fddf1b80ef0e1a17113deddafdc9f2a4e5c6ad053a676b03ff95dbaabf2465fd7d654a92c8ed474f74b90d391f9323528e455a5f4c1712619c11e49cd235e9e4e0be9e78bbae69d349ef6f44a45f954c8729708ad0516276079f269159ea1035fd036e89b0d43748b53b2a9991c5ca024c6493dde97b484458383bce726490ee89facf53a6b96bed22f379d3e02905a606d82d3e95aba7c97ec39", 0x80, 0x0, &(0x7f0000000100)="5ec301a9be0a055d10f84de5dcba2fb66cdb9849204892a5979a04913260eb2d8d7bb9cac5e605fbdb72713530c6a895ec0fdb1eb84aa711312f32884583dc2c98f5f6807dec097f0846c17b7e5b94058fd1e24d24222518c2aad3f2a90582ecba58811557c5f9bdeb31092e1938bdbfe88c085e9177466e6588f005e052a67f"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0xffffe000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="60000000020605020000200000000000000000001400078008001340040000000800124000060000050001000700000013000300686173683a6e65742c6966616365000005000440000000000900020073797a3100000000050005000aa6fa76f080f601de771796fa836e741c257928ce19c9f15b2114b3d642fbb230da6d32bff68d00837e5a15cfdf309d8d38993aef9c72a5008eb95b7861d5de9198d8ba12df9f1e74bf946f83001aeb7ba512fecc1ada15d38cb2ad54b2b05b1c67c033831f2e7defd2c30e221116a9bcdddbeeaca23b1ae7380c92d5fa2ac4a6224398a3262620e65b49d85f155ae2fc4b0da56a8ebc961a92b22dd423d2562333bc091414a662cacf3d91ffe80a6e7182bc2e715ad7c865ee570c763f6053", @ANYBLOB="0abbc7b4eb541b7b7a0a0204375d7d9d66e9f9453829c4bd520f4b06d0c6cb1e62d84e6c51a32d667b", @ANYRESDEC=r3, @ANYRES16=r1], 0x60}}, 0x40000) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) unshare(0x2040400) r6 = syz_open_dev$audion(&(0x7f00000001c0), 0x1ff, 0xa0202) ioctl$SNDCTL_DSP_SETDUPLEX(r6, 0x5016, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) fcntl$lock(r4, 0x25, &(0x7f0000000680)={0x0, 0x3, 0x4, 0x1fd, r7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000200), 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) 1m57.747234482s ago: executing program 34 (id=550): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x7, 0x1ff, 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1cc}, 0x1, 0x0, 0x0, 0x4100}, 0x4000000) getsockname$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @loopback}, &(0x7f0000000340)=0x10) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000180)={0x1, 0x2, 0x1000, 0xfd, &(0x7f0000000000)="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", 0x80, 0x0, &(0x7f0000000100)="5ec301a9be0a055d10f84de5dcba2fb66cdb9849204892a5979a04913260eb2d8d7bb9cac5e605fbdb72713530c6a895ec0fdb1eb84aa711312f32884583dc2c98f5f6807dec097f0846c17b7e5b94058fd1e24d24222518c2aad3f2a90582ecba58811557c5f9bdeb31092e1938bdbfe88c085e9177466e6588f005e052a67f"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0xffffe000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYBLOB="0abbc7b4eb541b7b7a0a0204375d7d9d66e9f9453829c4bd520f4b06d0c6cb1e62d84e6c51a32d667b", @ANYRESDEC=r3, @ANYRES16=r1], 0x60}}, 0x40000) fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) unshare(0x2040400) r6 = syz_open_dev$audion(&(0x7f00000001c0), 0x1ff, 0xa0202) ioctl$SNDCTL_DSP_SETDUPLEX(r6, 0x5016, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) fcntl$lock(r4, 0x25, &(0x7f0000000680)={0x0, 0x3, 0x4, 0x1fd, r7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x4, 0xb4d, 0x2c83, 0x4, 0x1, 0x9, 0x94}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r9 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000000200), 0x2) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x4) 6.565908156s ago: executing program 0 (id=889): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000180)={r2, 0x6}, 0x8) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0585605, &(0x7f00000005c0)={0x0, 0x0, @start={0x0, 0x1}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003780), 0x240, 0x0) fsetxattr$security_capability(r4, &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x0, 0xbd}, {0x9, 0x1c5}], 0xffffffffffffffff}, 0x18, 0x1) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000140)={0xc9, 0x0, 0xc}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000400)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write(r8, &(0x7f0000000100)="3b000100010000", 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r7, 0x52fbb000) ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f00000001c0)={'\x00', 0xa0, 0x1e6, 0x23, 0x0, 0x6154, 0x2, 0xffff1000, '\x00', 0x9}) ioctl$KVM_SET_XSAVE(r6, 0x5000aea5, &(0x7f0000001180)={[0x6, 0x1, 0x49d6069d, 0x3f5, 0x2, 0x0, 0x5, 0x3, 0x3df, 0x1, 0x4, 0x4, 0xe, 0x1000, 0x0, 0x2, 0x4, 0x6, 0xffff, 0x1, 0xd, 0xb, 0x9, 0x3, 0x75d6, 0x3, 0x4, 0xffff, 0x10001, 0x0, 0x553, 0x3, 0x7, 0xda, 0x1, 0xa99d, 0xfffffffa, 0x0, 0xa, 0x2, 0x8, 0xffffffff, 0xffff2cd5, 0x3, 0x3, 0x8, 0x3, 0xbc1, 0x1, 0x0, 0x5620, 0x7, 0xa4b, 0xffff, 0x5, 0x9, 0x2, 0x4, 0x8000, 0x4, 0x400, 0x6, 0x4a, 0x3, 0x401, 0x0, 0x80000000, 0x62, 0xfff, 0x6, 0x8, 0x800000, 0x5, 0x1, 0x3, 0xc, 0x900, 0x9, 0xfffff801, 0xd14, 0xffffffff, 0x7f, 0x9, 0x7, 0x6, 0x7, 0x5, 0x5, 0x1, 0xfab7, 0x4, 0x8, 0x8, 0x5ab6, 0x80000000, 0x0, 0x99, 0x6, 0x9, 0x1ff, 0x6, 0x80, 0x915f, 0x1, 0xdcde, 0x2, 0x450, 0x2, 0x1, 0x8, 0x1, 0x0, 0x9, 0x6, 0x9, 0xfff00000, 0x0, 0x4, 0x4, 0x9, 0x7, 0x2dec, 0x2, 0x8073, 0x6, 0xa, 0x2, 0xfffffff9, 0x0, 0x7d3, 0x4, 0x1, 0x80000000, 0x4, 0xe, 0xe, 0x0, 0x6, 0x7fffffff, 0x9, 0x6, 0xfffffff3, 0x40, 0xee, 0xadb, 0x5, 0x2, 0xa00, 0xd13, 0x55de, 0x8, 0x2, 0x0, 0x4, 0x6bbe, 0xb18, 0x6, 0x800, 0x8, 0x8, 0xda3f, 0xaf, 0x4, 0x2, 0x100, 0x80, 0x7, 0x5, 0x4, 0x2, 0x80000001, 0x400, 0xffff2826, 0x9, 0x7, 0x2, 0x487f4171, 0x3, 0x5, 0x800, 0x80000000, 0x7, 0x4, 0x871, 0x50, 0x0, 0xff, 0x0, 0x7, 0x5, 0x1, 0x10000, 0xfffffffe, 0x5, 0x200, 0xb0, 0xfffffff5, 0x319, 0x2392, 0xbfd, 0x7, 0x80, 0x13, 0x6, 0x448, 0xeb48, 0x6, 0x5, 0x6c, 0x100, 0x84, 0x4, 0x5, 0x0, 0xe3a1, 0xffff, 0x17f, 0x4, 0x2, 0x6, 0x32c, 0x1000, 0x5, 0x4, 0xfffffff0, 0x3, 0x6, 0x7, 0x8, 0x9, 0x10, 0x6, 0x9, 0x915e, 0x7, 0x7, 0x738d, 0x10, 0x7, 0x1, 0xf, 0x7446, 0xfffffff9, 0x1, 0x7, 0xfffffff8, 0x9, 0xff, 0x0, 0x3, 0x100000e5, 0x2e2, 0x26210000, 0x3, 0x9, 0x40, 0xe, 0x7fffffff, 0x1, 0x4, 0x1, 0x75ee915a, 0x0, 0x1, 0x6, 0xa8ba, 0x0, 0x2, 0x5, 0x6, 0x7fff, 0x7ff, 0x4, 0x565, 0x80000000, 0x81, 0x7, 0xc, 0x0, 0xffffffff, 0x10, 0x2, 0xe, 0x5, 0x3, 0x8, 0x6, 0x9, 0x7, 0x2, 0x2, 0x3, 0x8, 0x6, 0x9, 0xb, 0x3, 0xb58d, 0x4, 0xfffffff8, 0xa9, 0x4, 0x9, 0xffff0000, 0x8, 0x7, 0x9, 0xfffffffa, 0x1, 0x7, 0x1, 0x7fffffff, 0x5, 0x8, 0x7b, 0xf, 0xc, 0xb08f, 0x5, 0x7ff, 0x2, 0xcaab, 0x9, 0x5, 0x7ff, 0x9, 0x5, 0x6, 0xffffff01, 0xd12, 0x3, 0x8, 0x6, 0x400, 0x3, 0x7, 0xa935, 0x300000, 0xa3, 0xc, 0x5, 0x5, 0x7ff, 0x7, 0x10000, 0x2, 0x8, 0x10001, 0x3ff, 0x3, 0x3, 0x3, 0x66a, 0x3, 0xff, 0x1ff, 0x6, 0x6, 0x6, 0x2, 0x80, 0x0, 0x8, 0x88c, 0x56c, 0x7, 0x98, 0x5, 0x2, 0x8, 0x8, 0x1, 0x7ff, 0x0, 0x5a3c, 0x7fffffff, 0x9, 0x9c, 0x1ff, 0xa00000, 0xffff, 0xd, 0xc6ea, 0xfff, 0x7ff, 0xc594, 0x3, 0x18, 0xa, 0x726c, 0x8, 0x3, 0xd71, 0xc, 0x9, 0x8, 0x2, 0x5, 0x0, 0x10, 0x0, 0xb9, 0x4, 0x9, 0xfff, 0x12, 0x7fff, 0x9, 0x8, 0x7fff, 0x9, 0xb4b, 0x6, 0x1, 0xa312, 0x553, 0x1, 0x0, 0xfffffffc, 0x2, 0xf, 0xe, 0x0, 0x3, 0x48, 0xf2, 0xa28, 0x4, 0xb3c, 0x4, 0xfffffffe, 0xf726, 0x0, 0x4, 0x80000000, 0x1, 0x8, 0xf4, 0x9, 0x2, 0x3, 0x8, 0x4, 0xfffffffe, 0x7, 0x7, 0x48, 0xf, 0xbab, 0xfffffe00, 0x2, 0x7fffffff, 0xfffffffc, 0x10000, 0x4, 0x36c, 0x1, 0x100, 0x3, 0x101, 0x7, 0x0, 0x6, 0x2, 0x5, 0x1, 0x800000, 0x4, 0x5, 0x100, 0x1000, 0x9, 0xde5c, 0x200, 0x80000001, 0xff, 0x0, 0xd, 0x4, 0x0, 0x7cbe8276, 0x3d4, 0x186, 0x1, 0x4, 0x6, 0xfffffffa, 0x1, 0xa000, 0x8, 0x3ad3125e, 0xfffff491, 0x81, 0x2, 0xffffff01, 0x800, 0x3ff, 0x39ae, 0xdf3, 0xe1d2, 0xffffee22, 0x1, 0x1000, 0x1a2f91b4, 0x6, 0x8, 0xfb3, 0x8, 0x3, 0x8001, 0xc, 0x1, 0x152, 0xfffffff9, 0x2a, 0x5, 0xfff, 0x7fffffff, 0x4, 0x3000, 0x9, 0x8, 0x7fff, 0x10, 0x3, 0x8, 0x10, 0x57, 0xf, 0x8, 0x2, 0xff, 0xe1, 0xa9, 0x8, 0x8, 0x8c, 0x69e8, 0x130a, 0x4, 0x9, 0x80, 0x2, 0x8, 0x9, 0xfff, 0x7fff, 0x10000, 0x7ff80, 0x8, 0x2, 0x4, 0x90000000, 0x1, 0x7, 0xfffffffd, 0xa12, 0x7, 0xea8, 0x5bf8, 0x2, 0x6ab, 0x3, 0xf, 0xffff, 0x1, 0xfffffffb, 0x20d, 0x80000001, 0x5, 0x0, 0x10, 0x8, 0x0, 0x0, 0x8001, 0x1, 0x6, 0x4, 0x7, 0x6, 0x400, 0x1, 0xb72, 0x0, 0x4800, 0xdd7f, 0x7, 0x6, 0x9, 0xe, 0x95f, 0x1ff, 0xe5, 0x37ae, 0x0, 0xa92, 0x4, 0x5, 0x9, 0x1, 0x6, 0x2, 0x3ff, 0x3b, 0xb, 0x4, 0x1, 0x12e7, 0x2, 0x10001, 0x7, 0xc5, 0x6, 0x5, 0x1, 0x1, 0x7fffffff, 0x5, 0xa1, 0xffffffff, 0x1, 0x1, 0x743, 0x1, 0x7, 0xffffe9fb, 0xb, 0x7, 0x1, 0x0, 0x100, 0xfffffff7, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1, 0x9, 0x5, 0x10001, 0x3, 0x8, 0x4, 0x3, 0xb4, 0x80000001, 0x1, 0xbe8b, 0x0, 0x9, 0x3, 0x81, 0x3, 0xdf8, 0x4, 0x71, 0x3, 0x3, 0x9, 0x4edc, 0x100, 0x8, 0x0, 0x2, 0x10, 0x8, 0x7, 0x7f, 0xa58, 0x6, 0x81, 0xfffffffa, 0x3, 0xff, 0xfffff000, 0x1237, 0x71a66a2a, 0x6, 0x1, 0x1, 0xcf0c, 0x4, 0x81, 0xff, 0x1, 0x698fdd79, 0xfffffffc, 0x8, 0x6, 0x7, 0x7f9a, 0x0, 0x0, 0x3, 0x6f5, 0xa, 0x6, 0xfffffffd, 0x2, 0x3, 0xffffffff, 0xfffffff3, 0x3, 0x6, 0x0, 0x200, 0x3cf5dd3d, 0x7, 0x1, 0xa, 0x200, 0x200, 0x92fe25b, 0xc, 0x1, 0x9, 0x81, 0x7, 0x7, 0x1000, 0xc651, 0xf, 0x3, 0x8, 0x6, 0x0, 0x0, 0x7fffffff, 0xffffffff, 0xffffffff, 0x5, 0xd02, 0x2, 0x7, 0x10001, 0x0, 0x9, 0x7, 0xfffffffb, 0x64e, 0x4403c5ae, 0xc, 0xfffffffc, 0x0, 0x3, 0x7f, 0x1, 0x4, 0x1, 0xfffffff6, 0x516, 0x5, 0x2, 0x200, 0xc3, 0x2b1c, 0x6, 0x4, 0x0, 0x81, 0x5, 0x6fa, 0x6, 0x2, 0x80000000, 0x6e7, 0x7f, 0x7, 0x8, 0xfffffff9, 0x3, 0x7f, 0x10000, 0x3, 0x6, 0x37, 0x89, 0x2, 0x2, 0x89a, 0xb, 0x80000000, 0x4, 0x10, 0x6, 0x1, 0x0, 0x5, 0xf8d9, 0x5, 0x2, 0x2, 0x9, 0x2, 0xb8, 0x74e2, 0x2, 0x3ff, 0x1, 0x9, 0x2, 0x1, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x2, 0x6, 0x1, 0x8, 0x7, 0x3, 0x7, 0x7, 0xf, 0x7ff, 0xffffffc6, 0x9, 0xcc9, 0x7, 0x5, 0xb0, 0xe4, 0x5, 0x80000001, 0xc410, 0x8000, 0x7fffffff, 0x3, 0x6, 0x1c000000, 0x101, 0x79, 0xfffffffb, 0x3, 0x1, 0xff, 0x6, 0x81, 0xfffffffc, 0x6, 0x30000, 0x6, 0x7, 0x6, 0x8, 0xc0e1, 0x5, 0x3, 0x6f, 0x5, 0x5, 0x800, 0x1, 0x80000000, 0x8, 0x81, 0x2, 0x9, 0x0, 0x7a8, 0x8e, 0x4, 0x1358, 0x3, 0x80000000, 0x8, 0x7, 0x81, 0x8, 0x1, 0x0, 0x5, 0xa, 0x1d, 0xa22, 0x5, 0xffffffc5, 0xc, 0xa, 0x7, 0x81, 0x2d063505, 0x223, 0x83, 0x80000001, 0x5, 0xff, 0x4800000, 0x80000000, 0x8001, 0x8, 0x10, 0x9, 0x200, 0x5, 0xfffffffa, 0xd093, 0x3, 0x1, 0x3, 0x5, 0x5, 0x5, 0x589c1fd7, 0xd0f, 0x4, 0x0, 0xb55d, 0x920, 0x7f, 0x3ff, 0x4, 0x7, 0xfffffffd, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x5, 0x1, 0xffff4bfc, 0x1, 0x10001, 0xfe05, 0x5, 0x79, 0x1000, 0x9, 0x10000, 0xf8b9, 0x4, 0x203832, 0x1, 0xd, 0x81, 0x8, 0x5, 0xbd, 0x4, 0x800, 0x5, 0x826, 0xffffed29, 0x7f, 0x60b8, 0x200, 0x7, 0x6, 0x9, 0x101, 0x0, 0xfffffff8, 0x8, 0x8, 0x401, 0x5, 0x4d800000, 0xa44, 0x3, 0x6, 0xc00, 0x5, 0x2, 0x0, 0x3, 0x200, 0x1fc000, 0x3, 0x3, 0x5, 0x2, 0x8, 0xd, 0x1, 0x80000000, 0xbd1a, 0x0, 0x1, 0xfc4, 0x3, 0xfb1c, 0x42, 0x0, 0x400, 0x7, 0x8d7, 0xd, 0xfffffff9, 0x1, 0xc27a, 0x2, 0x5, 0x5, 0x101, 0x7, 0x0, 0x5, 0x7f, 0x2, 0x8, 0x8, 0x4, 0x8, 0x4, 0x7, 0x9, 0x1, 0x3, 0x3ff, 0x4b6, 0x9, 0x9, 0xfffffff7, 0x0, 0x5]}) 6.330270224s ago: executing program 0 (id=892): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendfile(r3, r0, 0x0, 0x7ffff000) 6.250320114s ago: executing program 0 (id=893): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa1, 0xd8, 0xff, 0x20, 0xcf2, 0x6250, 0x4642, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x10, 0x0, [{{0x9, 0x4, 0x36, 0x10, 0x2, 0xc7, 0x3, 0xe8, 0x8, [], [{{0x9, 0x5, 0x6, 0x2, 0x3ff}}, {{0x9, 0x5, 0x82, 0x2, 0x8}}]}}]}}]}}, 0x0) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x25, 0x0, 0x9, 0xc, 0x0, 0x0, 0x2000000, [@sadb_address={0x3, 0x6, 0x2b, 0x0, 0xe, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sec_ctx={0x2, 0x18, 0x9, 0x3, 0x1, "a4"}, @sadb_address={0x5, 0x6, 0x32, 0x0, 0x0, @in6={0xa, 0x4e23, 0x6, @mcast2, 0x727}}]}, 0x60}}, 0x20004800) r2 = syz_open_dev$swradio(0x0, 0x0, 0x2) syz_usb_connect(0x3, 0x48, &(0x7f0000000600)={{0x12, 0x1, 0x110, 0xfc, 0xbd, 0x8f, 0x8, 0x12d1, 0x35f3, 0xd63c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0xa2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x51, 0x1, 0x4, 0x3, 0x98, 0x2, 0x3, [], [{{0x9, 0x5, 0x9, 0x0, 0x0, 0x3, 0x0, 0x4}}, {{0x9, 0x5, 0x2, 0x2, 0x200, 0xf7, 0x81, 0x6}}, {{0x9, 0x5, 0x3, 0x3, 0x3ff, 0x8, 0x40, 0x4}}, {{0x9, 0x5, 0x85, 0x3, 0x40, 0xb, 0x2, 0xb}}]}}]}}]}}, 0x0) pipe2(0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x18, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x24008094) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup(r2, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000340)={'wg1\x00', &(0x7f0000000300)=@ethtool_cmd={0x17, 0x6, 0x6, 0x907, 0x7, 0x40, 0x8, 0x3, 0x42, 0x8c, 0x2d8a52ea, 0x2000000, 0x5, 0x56, 0x7f, 0x6eace88a, [0x4, 0x4]}}) r6 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r6, 0x4014563c, &(0x7f0000000040)={0x9, {0x40, 0x7, 0xff}}) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x33, 0x8, 0xe, 0x5, 0x5, 0x2, 0x6, 0x0, 0xfc, 0x5, 0x2, 0x3, 0x28, 0x6}, 0xe) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000006}) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$peeksig(0x1a, r8, 0x0, &(0x7f0000000040)) recvmmsg(r7, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc61}, 0xffff}], 0x1, 0x162, 0x0) sendfile(r5, r0, 0x0, 0x7fffefff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r9 = userfaultfd(0x80001) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) 3.206210825s ago: executing program 0 (id=913): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000380)={0xffffffffffffffff}, 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r2, &(0x7f0000000580)={0x8, 0x120, 0xfa00, {0x0, {0x1, 0x3, "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", 0xd, 0x1, 0x8, 0x9, 0x6, 0x8, 0x4}, r3}}, 0x128) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc1, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r4, 0xc0d05640, &(0x7f0000000180)={0x0, @win={{0x8000, 0x1, 0x3, 0xfffffff8}, 0x9, 0x9, &(0x7f0000000100)={{0x0, 0x7, 0x4, 0xf64}}, 0xffff8001, &(0x7f00000002c0)="6d72749a15e5b0f7cc1013847bfdb40d1ac5b589d68ebf45dd49e7988284fdb390c82c6fabfdfee0b5f2e0511214017f6d83724f6fea570bb148f53fd79d5541d489b6f2aed490bf1159a4839d05ec9af6eedd5f258818296d46174ced5b460b628efd1c2a3835146012662fd2d6f90c3f411eba10c05ee4f3da7b2a5f3479cab58a530236ee2ac2d3f650ddbc76e0aba74448885f6447fb4acddb5c8fc17a8c6ba1e7e9af01a9c9dc3d358bba9dbd73", 0x7f}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r6, 0x4018aebd, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x1}) pipe2$watch_queue(&(0x7f00000000c0), 0x80) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000000080)=0x202810, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) bind$xdp(r0, &(0x7f0000000540)={0x2c, 0xd, r7, 0x34}, 0x10) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 3.179441301s ago: executing program 1 (id=914): prlimit64(0x0, 0x9, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x7f, 0x0, 0x0) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) io_setup(0x6, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.060762989s ago: executing program 0 (id=917): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) setuid(0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000a7", @ANYRES16=r1, @ANYBLOB="000100000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050003000000"], 0x24}, 0x1, 0x0, 0x0, 0x24004810}, 0x24000041) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x40000000004000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x4}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x3, @pix_mp={0x9, 0x40, 0x34324948, 0x6, 0x4, [{0x100, 0x400}, {0x5, 0xffff7fff}, {0xff, 0x6}, {0x5, 0x7}, {0x1, 0xd8}, {0x4, 0x2}, {0xc, 0xffffff4a}, {0x9, 0x10000}], 0x2, 0xb9, 0x2, 0x0, 0x2}}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="fd5e4162e58888819ea6ce469fdd689fef6b3b5281cf11fde9d72495237df116a7823fda292201e1bec91116008f083416e6cc6fc66db92c1673a3643f6ac73188c4fd5e08d5f3d9f49f4f38c44984087037efdc71f53f64e18bf26ec4045ee2c4cdfd"], 0x1c}, 0x1, 0x0, 0x0, 0x2400c080}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f000010d000/0x3000)=nil, 0x3000, 0x300000b, 0x12, r4, 0xa0e51000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/159) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x70, 0x8000, 'syz0\x00', 0xffffffff}, 0x3, 0x20000000, 0x7, 0x0, 0x1, 0xfffffffc, 'syz0\x00', &(0x7f0000000180)=['/dev/snd/controlC#\x00'], 0x13}) madvise(&(0x7f00002a3000/0x4000)=nil, 0x4000, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000380)={0x0, &(0x7f0000000180)}) ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f0000683000/0x2000)=nil) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregset(0x4205, r8, 0x204, &(0x7f0000000140)={0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.985370068s ago: executing program 1 (id=918): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) madvise(&(0x7f0000454000/0x1000)=nil, 0x1000, 0x2) (async) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x84, 0x6d}, 0x2c) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x2000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f00000000c0)) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/50, 0x304000, 0x800, 0x0, 0x1}, 0x20) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a32000000000500010007000000140007800800134000000000080012"], 0x64}}, 0x0) (async) bind$bt_l2cap(r4, &(0x7f0000000a80)={0x1f, 0x5, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0xfffb, 0x1}, 0xe) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x6, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0xfffffffa, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000000, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fff, 0x4c74, 0xfbf5, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0xfffff000, 0xfffffffe, 0x8, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x83, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x387d, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x80002, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x20005, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x6, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x2000008, 0x2], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x100, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x5, 0xffffffff, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x3, 0x80ffff, 0x200003, 0x5, 0x80000000, 0x9602, 0xa, 0x2, 0x4, 0x10, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x8, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x80400) (async) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r7, &(0x7f0000000040)="e2", 0x918) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x2c, &(0x7f0000000ac0)=[@in6={0xa, 0x4e1f, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) execveat(r6, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000880)={[&(0x7f0000000380)='/dev/snd/timer\x00', &(0x7f00000003c0)='syz0\x00']}, &(0x7f0000000a40)={[&(0x7f00000008c0)='syz0\x00', &(0x7f0000000900)='.\'\x00', &(0x7f0000000940)='syz0\x00', &(0x7f0000000980)='/dev/input/event#\x00', &(0x7f00000009c0)='\x00', &(0x7f0000000a00)='syz0\x00']}, 0x100) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000000)={r8, 0x208}, 0x8) (async) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r8, 0x8, 0x1, 0x5}, &(0x7f0000000180)=0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x10280) fsetxattr$security_evm(r9, &(0x7f0000000200), &(0x7f0000000280)=@md5={0x1, "f6d734d5efd43c5ef7d5a3323eeeb3bf"}, 0x11, 0x3e0eef7b8d2a6937) 2.84231972s ago: executing program 0 (id=920): vmsplice(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000004c0)="c26abb248a1b89f07f6e19df0390e1de41ec72218f5712faffffffdd166dbbb4dd22e49e28f1f8bc5e6c29f2b30135eb8d43cf90358d1650bd3a7020b512ad829148d9c991a397a6afbd60a0552019d96ac396da0bd63062135b061f97f5e8d527", 0x61}, {&(0x7f0000000540)="96ae5c9ff4c933674dbb6907117fb6250746e0568d60720e6d099a273a1ec391ad59668f5aab7dc162679d5e6a75152103b79f217335f12fe138e001ea380a453137db11eb8ed7249c7627b43239230b7b315ca26381fc03180dbde8d9d633c62ae1ca0c646fddf4a6484e5c98b6cf80b38b769d94e3892feec3fb852d3d76a8fc66c25de89894443b10c04d3b2cf61fa77f68e967d0a95daa68c7f5", 0x9c}], 0x2, 0x4) r0 = socket$inet6(0xa, 0x80000, 0x3) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaabbaabb86dd6d002000001311ff00000000000000000000000000000000ff0200000003000000000000e9ffff004f194e20"], 0x4b) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0xfffffffe}}, 0xfedd) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) r6 = accept(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)='W@', 0x2}], 0x1}], 0x1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000100)={0xfffffffffffffdaa, 0x0, &(0x7f00000003c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f000008e000/0x2000)=nil, 0x2000, 0x0, 0x20010, r8, 0x8000000) syz_usb_connect(0x4, 0x46, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000400102a70301090212000100000100a80000000000f83f0016e086a563fe558c7454fa949a4b2a2d42482c59f21ab700000040"], 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) 2.83730267s ago: executing program 1 (id=921): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00150207"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="22310f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x30, r2, 0x1, 0x20, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r5) mount$nfs(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800441, &(0x7f0000000140)=ANY=[@ANYBLOB="2d292d2c2c2f64672f726e75686c6230002c2c2f6465762f726e756c6c6230002c252c2f6465762f726e756c6c62307569643dfb9cdba545b97fe20dc225b427114b31ed4bc8f4605bc179098efdef0a217a267fbe63ac69f4fe2a38065b19e00fc65f3b6fc3dbe7b758a203f90000d9064ed31c9929565e24dc5f4363d37902dea154d432c45f017c4ed0d9f6f371beebe76694fea2cb4f0000", @ANYRESDEC=r5, @ANYBLOB=',appraise,\x00']) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x6, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x2, &(0x7f00000001c0)=ANY=[]}]}) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x97, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="00150207"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="22310f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x30, r2, 0x1, 0x20, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x4}]}, 0x30}}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) fstat(r4, &(0x7f00000000c0)) (async) setreuid(0x0, r5) (async) mount$nfs(&(0x7f0000000000)='\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x800441, &(0x7f0000000140)=ANY=[@ANYBLOB="2d292d2c2c2f64672f726e75686c6230002c2c2f6465762f726e756c6c6230002c252c2f6465762f726e756c6c62307569643dfb9cdba545b97fe20dc225b427114b31ed4bc8f4605bc179098efdef0a217a267fbe63ac69f4fe2a38065b19e00fc65f3b6fc3dbe7b758a203f90000d9064ed31c9929565e24dc5f4363d37902dea154d432c45f017c4ed0d9f6f371beebe76694fea2cb4f0000", @ANYRESDEC=r5, @ANYBLOB=',appraise,\x00']) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) (async) 2.060960098s ago: executing program 6 (id=926): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv2(r0, &(0x7f0000001040)=[{&(0x7f0000000040)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x3, 0x7a, 0x5, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r1, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.952940382s ago: executing program 6 (id=927): r0 = creat(&(0x7f00000000c0)='./cgroup\x00', 0xca) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0x9, 0x20, 0x3, 0xfff}, &(0x7f0000000140)=0x18) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 1.952501131s ago: executing program 6 (id=928): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvfrom$inet(r1, 0x0, 0x30, 0x40000020, 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000180)=0x6, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x6) ioprio_get$pid(0x3, 0x0) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, 0x0) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f00000000c0)={&(0x7f0000000000/0xc00000)=nil, 0xc00000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r2, 0xebe3b000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.893578025s ago: executing program 6 (id=929): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0xc7, @dev={0xfe, 0x80, '\x00', 0x1c}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) shutdown(r0, 0x0) poll(&(0x7f0000000200)=[{r0, 0x2000}], 0x1, 0x80000001) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x3) iopl(0x3) prctl$PR_SET_SECCOMP(0x3a, 0x1, 0x0) unshare(0x2040600) r1 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) ftruncate(r1, 0xffff) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r2, 0x52fbf000) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r5, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) 1.809324266s ago: executing program 3 (id=930): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) getsockname(r0, &(0x7f0000000080)=@sco, &(0x7f0000000100)=0x80) 1.722329935s ago: executing program 3 (id=931): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000000)={'caif0\x00'}) r0 = socket$packet(0x11, 0xa, 0x300) write$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1, @set_reserved_lt_addr={{0xc74, 0x1}, {0x7}}}, 0x5) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f00000004c0)=[{0x80000006, 0x0, 0x12, 0xf9}]}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r1, &(0x7f0000000100)=ANY=[@ANYBLOB='unlock '], 0xe) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = socket$netlink(0x10, 0x3, 0x4) lsm_set_self_attr(0xe, &(0x7f0000000380)={0x68, 0x1, 0x20}, 0x20, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22052, r4, 0xa4717000) 1.716078358s ago: executing program 3 (id=932): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r0, 0x7, 0x1ff, 0x1) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r1) (async) r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5016, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x40, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x9, 0x0, 0x1, {0x22, 0xa0}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r3, 0x400, 0x1) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) socket(0x11, 0xa, 0x0) (async) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000880)=""/187, 0xbb) (async) syz_usb_ep_write(r1, 0x81, 0x1, &(0x7f00000000c0)="10") (async) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1.474251047s ago: executing program 1 (id=933): getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff}) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x5}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x8, 0x9, 0x1, 0x7fffffff, 0x5}, &(0x7f00000001c0)=0x14) (async) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x3, 0x0, 0x2}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000240)={0x0, 0x6, 0x0, [0x4, 0x4c, 0x3, 0x9, 0x2b6], [0xffffffffffffffff, 0xa, 0x1, 0x5, 0xb58, 0xfffffffffffffffd, 0x8, 0xb, 0x2734, 0xd72, 0xcb37, 0x5, 0x2, 0x4, 0x4, 0x5140000000000000, 0x63a6, 0x3, 0x9, 0x8, 0x101, 0x1, 0x50000, 0x164, 0x6, 0x400c, 0x3, 0x0, 0x2, 0x2, 0xfffffffffffffc01, 0x0, 0x4, 0x3, 0x3, 0x7ff, 0x2, 0xbc01, 0xd, 0x3ff, 0x7, 0x7, 0xd, 0x9, 0x1, 0x7ae80e9c, 0x8, 0x6, 0x4, 0x5, 0x4, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x0, 0x888, 0x100000000, 0x5, 0x9, 0x1, 0x5, 0x9, 0x2, 0xffffffffffffff53, 0x7fffffff, 0xfcd8, 0x3, 0x6, 0x9, 0x1, 0x9, 0x100000000, 0x89a, 0x80000000, 0x8, 0x8, 0x3, 0x505, 0x6, 0x3, 0x8000000000000000, 0x0, 0x0, 0xef, 0x9, 0x7f, 0x6, 0xfffffffffffffffe, 0x1e, 0x3, 0x3, 0xa, 0x311, 0x7fffffff, 0x4, 0x3, 0x8d, 0x100000000, 0x8, 0x7, 0xa, 0x8, 0xfffffffffffffffa, 0x7, 0x8, 0x8, 0xffffffffffffffff, 0x9, 0x8000, 0xffffffff, 0x1, 0xb5c, 0x5, 0x2, 0x347a, 0x1, 0x6, 0xfffffffffffffff9, 0x4, 0x4, 0x1]}) r3 = socket$isdn(0x22, 0x3, 0x2) sendto$isdn(r3, &(0x7f0000000680)={0x9, 0xc, "0b00ad2600717fc31134c9b8f590f0f204a583d852901359026760c93af016a81c18a8c4f61b071b357490d1f9e35a43ac480205737852c67121bf83d8de42668ab2397f41caef01f182b676a59d8cb0647233d85e92110d684139fdc206b0de5fc5e0691f50faa9b6511456cc36079d56"}, 0x79, 0x2004c011, &(0x7f0000000700)={0x22, 0xd, 0xdf, 0x7f, 0xf6}, 0x6) (async) mount$nfs(&(0x7f0000000740)='({-\x00', &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0), 0x100800, &(0x7f0000000800)={[{'@'}, {'\\@/}![]'}, {}, {}, {']\'(@'}, {}, {'-.}!,&['}, {'\'/\x86'}, {'-):'}, {'[.,'}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}, {@subj_role={'subj_role', 0x3d, '\'%^'}}, {@appraise_type}]}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000940)={&(0x7f0000000880)="eb72d9131255b1cd67efd9e5703d3b3d8e0b08e11509b82d5d7aaa46e2380c29a8bb6321c0a306ffa7e4f72f872ba4ce1a40b4772b76c43ddfa7ecd4a2e2d76484e592e35cbfadbe17d9e083bcdcd3207c2e593fbc02b425a126ecf8988d1b1337360b527b34b12eab8e69a17443209925733a09a6b2bcebbef424b41d34aa76adb98c7d03b16f", 0x87}) (async) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r4, &(0x7f0000000980)={'#! ', './file0', [{0x20, '-.}!,&['}], 0xa, "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"}, 0x1013) (async) futimesat(r1, &(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={{}, {0x0, 0x2710}}) connect$inet6(r1, &(0x7f0000001a40)={0xa, 0x4e24, 0x1, @private2={0xfc, 0x2, '\x00', 0xd}, 0x1ff}, 0x1c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000001b40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xb}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xf1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008}, 0x10) (async) stat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r1) setuid(r6) (async) fsetxattr$trusted_overlay_nlink(r5, &(0x7f0000001c80), &(0x7f0000001cc0)={'L+', 0x10}, 0x16, 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001d00)={r2, 0x6, 0x7ff}, 0x8) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000001e40)={&(0x7f0000001d40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001d80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001dc0)=[0x0, 0x0, 0x0], &(0x7f0000001e00)=[0x0], 0xa, 0xa, 0x3, 0x1}) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000002140)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x63ba3871b19f5693}, 0xc, &(0x7f0000002100)={&(0x7f0000001ec0)={0x224, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1000}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_TX_RATES={0x1e4, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x88, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x48, 0x2, 0x12, 0x1b, 0x17, 0x1b, 0x20, 0x5, 0x60, 0x16, 0x5, 0x36, 0x1b, 0x48, 0x12, 0x36, 0x24, 0x16, 0x0, 0xb, 0x12, 0x3, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x101, 0x8, 0x4, 0x5, 0x101, 0x3, 0x3, 0x7]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x6, 0x5}, {0x4, 0x9}, {0x1, 0x9}, {0x4, 0x4}, {0x5}, {}, {0x6, 0x2}, {0x4, 0x2}, {0x4, 0x7}, {0x6}, {0x3, 0x8}, {0x1, 0x3}, {0x7, 0x6}, {0x0, 0x2}, {0x3, 0x4}, {0x5}, {0x5, 0x8}, {0x5, 0x7}, {0x0, 0x6}, {0x0, 0x1}, {}, {0x2, 0x2}, {0x1}, {0x4, 0x1}, {0x2, 0x7}, {0x2, 0x5}, {0x0, 0xa}, {0x4, 0x4}, {0x3, 0xa}, {0x7, 0x3}, {0x3, 0x6}, {0x2, 0x9}, {0x2, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x1}, {0x4, 0x6}, {0x6, 0x4}, {0x4, 0x7}, {0x2, 0x5}, {0x4, 0x3}, {0x0, 0x3}, {0x0, 0x6}, {0x2, 0x4}, {0x0, 0x6}, {0x0, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x1, 0x8}, {0x1, 0x2}, {0x3, 0x3}, {}, {0x7, 0x2}, {0x6, 0x7}, {0x2}, {0x2, 0x5}, {0x2}, {0x2, 0x5}, {0x3, 0x8}, {0x3, 0x5}, {0x0, 0x2}, {0x3, 0x4}, {0x3, 0xa}, {0x6}, {0x4, 0x8}, {0x4, 0x9}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0x7}, {0x4, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x34, 0x2, [{0x4, 0x4}, {0x4, 0x1}, {0x1, 0x4}, {0x5, 0x6}, {0x2, 0xa}, {0x5, 0x7}, {0x1, 0x1}, {0x1, 0x6}, {0x2, 0xa}, {0x3, 0x4}, {0x2, 0x5}, {0x7, 0x4}, {0x7, 0x6}, {0x1, 0x7}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x1}, {0x2, 0x9}, {0x4, 0x1}, {0x2, 0x8}, {0x0, 0x1}, {0x2}, {0x0, 0x5}, {0x5, 0x1}, {0x6, 0x1}, {0x7, 0x6}, {0x2, 0xa}, {0x7, 0x5}, {0x1, 0x9}, {0x6, 0x7}, {}, {0x0, 0x7}, {0x0, 0x8}, {0x0, 0x7}, {0x3, 0xa}, {0x6, 0xa}, {0x4, 0x9}, {0x6, 0x6}, {0x5, 0x6}, {0x2, 0x4}, {0x6}, {0x4, 0x1}, {0x3, 0x4}, {0x6, 0x4}, {0x4, 0x5}, {0x1, 0x9}, {0x2, 0x1}, {0x2, 0xa}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7ff, 0x2000, 0x5, 0x8, 0x3ff, 0x6, 0x40, 0x3]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x0, 0x8, 0x1160, 0x9fbc, 0x1, 0x1, 0x401]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x24, 0x12, 0x3, 0x3, 0x48, 0xb, 0x2, 0x3, 0x1, 0x12, 0x4, 0x4, 0x2, 0xc, 0xc, 0x4, 0x1b, 0x1b, 0x36, 0x56]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x21, 0x1, [0x60, 0x36, 0x18, 0x6c, 0x48, 0x6, 0xc, 0x4f, 0x36, 0x9, 0x42, 0x2, 0x4, 0x4, 0xc, 0x6c, 0x1, 0x36, 0x1, 0x1b, 0x18, 0x16, 0x12, 0x16, 0x3, 0x48, 0x6, 0x16, 0x24]}]}, @NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x8}, {0x1, 0x7}, {0x5}, {0x7, 0x5}, {0x5, 0x4}, {0x1, 0x4}, {0x2, 0x2}, {0x6, 0x7}, {0x2, 0x8}, {0x2, 0xa}, {0x3, 0x3}, {0x7, 0x9}, {0x0, 0xa}, {0x0, 0x3}, {0x0, 0xa}, {0x7, 0xa}, {0x7, 0x7}, {0x4, 0x1}, {0x2}, {0x7, 0x6}, {0x5, 0x6}, {0x4, 0x1}, {0x3, 0x3}, {0x0, 0x5}, {0x0, 0x5}, {0x5, 0x4}, {0x1, 0x1}, {0x5, 0x4}, {0x1, 0x2}, {0x2, 0x8}, {0x4, 0x4}, {0x1, 0x4}, {0x1, 0x2}, {0x6, 0x1}, {0x3, 0x5}, {0x1, 0x4}, {0x0, 0x8}, {0x2, 0x3}, {0x4, 0xa}, {0x3, 0x4}, {0x0, 0x4}, {0x5, 0x5}, {0x6, 0x5}, {0x5, 0x6}, {0x2, 0xa}, {0x1, 0x4}, {0x5}, {0x4, 0x8}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x8}, {0x7, 0x4}, {0x5, 0x6}, {0x7, 0xa}, {0x1, 0x9}, {0x3, 0x5}, {0x2, 0xa}, {0x3, 0x3}, {}, {0x6, 0xa}, {0x3, 0x5}, {0x5, 0x3}, {0x7}, {0x1}, {0x7, 0x2}, {0x3, 0xa}, {0x1, 0x1}, {0x7, 0x9}, {0x7, 0x9}, {0x3}, {0x2, 0x3}, {0x2, 0x6}, {0x3, 0x7}, {0x7, 0x8}, {0x2, 0x2}]}, @NL80211_TXRATE_HT={0x17, 0x2, [{0x6, 0x3}, {0x4}, {0x1, 0x7}, {0x5, 0x9}, {0x2, 0x5}, {0x3, 0x3}, {0x2, 0x2}, {0x7, 0x6}, {0x1, 0x4}, {0x2, 0x5}, {0x1, 0x4}, {0x6, 0x3}, {0x3, 0x8}, {0x0, 0x9}, {0x4, 0x4}, {0x3, 0x1}, {0x0, 0x9}, {0x0, 0x5}, {0x1, 0x6}]}]}, @NL80211_BAND_60GHZ={0x2c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1e9, 0xb, 0x2, 0x4, 0x7, 0x8001, 0x101]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x81, 0x3, 0x7, 0xfffd, 0x3, 0x6]}}]}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x80000001}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x224}}, 0x4801) (async) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1800000, 0x110, r1, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000002180)) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000003400)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000033c0)={&(0x7f0000002200)={0x1198, r7, 0x2, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x2, 0x2e}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x7c, 0x3, 0x0, 0x1, [{0x78, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x73, 0x2, "37cd3ec204ae1ecf83168b3f7883d557e156e304c24269ebafb7dd06311230bfdee9e24d9c261d6d627bf5cc2811d01c6b72cbe785a42b58caafbaf87504e41f69082374ed4824f7681cbe610724fff0384d28fbef28505e20784d955a7ae855a214554968d3d048780178f4d9e3e9"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8bb0}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10cc, 0x3, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xaf, 0x1, "42bdcaeaceb585824ddaeff7d13cc6ede4804dd44ff3ab544527519302222605539ce69751ca65f0b17866a2f7af209b584fada4d66ed0621defa46980231b6d5a1aae728608a648baaa1fa7d47c7093d7a62e950e26de51247f88201247fb1d700c5a69cada76ba9abe13f2fcd69e86a8e25ec08900f3c539d1f7ed701badbedd7db228a282a5f92effab0f9c972e828ecb9574cc24f58e27fd286e31c9d30e66f5647233e0d782b352da"}}, {0x1008, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}}, {0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xd220}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xff}]}, 0x1198}, 0x1, 0x0, 0x0, 0x11}, 0x4000800) mount$nfs(&(0x7f0000003440)='%}@\xc9-.\'{\x00', &(0x7f0000003480)='./file0\x00', &(0x7f00000034c0), 0x11000, &(0x7f0000003500)={[{'}.-\xbf:,:(]$(@+'}, {'}\\j\'@/.&!\'\x19)\x00'}, {'@'}], [{@audit}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@hash}]}) 1.414546174s ago: executing program 1 (id=934): syz_usb_connect(0x0, 0xf5, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505240600010524007f000d240f0104000000080000000006241a03000a05240401", @ANYRESDEC], 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setuid(0xee01) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000578000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x488, 0x0, 0x7fffffff}]}) tkill(r0, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, 0xffffffffffffffff, 0xa4717000) 1.244537592s ago: executing program 6 (id=935): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001000)={0x14, 0x3b, 0x400, 0x70bd29, 0x25dfdbfb, {0x18}}, 0x14}}, 0xc814) accept4$bt_l2cap(r1, 0x0, 0x0, 0x800) r2 = getpgrp(0x0) ioprio_set$pid(0x3, r2, 0x4007) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendfile(r3, r3, 0x0, 0x7ffff000) 978.000971ms ago: executing program 3 (id=936): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000080)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x2}, @loopback, 0x1, 0x2, 0xc, 0x900, 0x7fffffffffffffff, 0xc80032, r2}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000978000/0x3000)=nil, 0x3000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) connect$netlink(r0, &(0x7f0000000000)=@unspec, 0xc) 358.417985ms ago: executing program 6 (id=937): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000340)=0x15) poll(&(0x7f0000000240)=[{r1, 0x4001}], 0x1, 0x5) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/212, 0xd4}], 0x1, 0x33, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000001040)=ANY=[@ANYBLOB="12015002b54e1e107c2c1205ce910102030109022400010f00c0400904356322ffffff"], &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r0, 0x2c39000) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40046f41, 0x0) name_to_handle_at(r3, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="2000000061000000070000000000e600070000000020000000060000000000000001000000000000"], &(0x7f0000000080), 0x1000) 38.487121ms ago: executing program 3 (id=938): syz_open_dev$dri(&(0x7f0000000000), 0x57, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCSMAXCID(r0, 0x4010744d, &(0x7f0000000000)=0x20000002) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x9, &(0x7f0000000000)=0x4065, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x400, 0x490002) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f00000001c0)=""/4096) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 34.700826ms ago: executing program 1 (id=939): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0)={0x1f, 0x0, @none}, &(0x7f0000000400)=0xe, 0x0) recvmsg(r3, &(0x7f0000000880)={&(0x7f0000000440)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/120, 0x78}, {&(0x7f0000000540)=""/106, 0x6a}, {&(0x7f00000005c0)=""/175, 0xaf}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000680)=""/207, 0xcf}], 0x5, &(0x7f0000000800)=""/111, 0x6f}, 0x100) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x802, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa0,\xc1\x8d\\Rxt\'\xb6\xbf\xc8*\n\xaf\x1b\xec\xfd\xbbY\x99\xb3\x06c\xd6\xf6\xb0\xcd=\xf3\x03`\x93\xff\x05e\xaa$\x00\xeaw\xd9\x10\x0f\x1d\x888\x8cS\x12?R\x99\xda7\xce)\x8f\xcc\x87\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd32J\xd7\x9f\xea:=\xcc\x17(|L\xda\xc3\x1ca\xe8s\xb6\xebw\xc7\xabS\xd7pJ\xd2\xa1\xcf\xae\x1f2\x9f\x98\xa80\r\x85\xb4\x86\xbc\xd0\xea\xbf\xb1Z\xb7e$\xcf<\ra\x9b\xa5\xdc\v\x1e\xfd\xc7\x91\xf22\xcf\x96\x99\xc1\xbb\xa1j\xe5\xa8\x7f\a\xa9\xa7G\xad\xa3\x8b\xf1\xdb\\]R\x8cf\xac1\xd7V\xaf\xb5\x8e\x10\x95\x9f=2\xd0-\xe1K:\xc3b\x89\x15OS\xa5\x98Ky\x12\xe7Qt#\xeb\x99\a\x10\x1c\xb3N\x85\xeb\x80\x05\x82_\x15\xdc\xbc\xf93\xdd\xf5g\x98\xd4\x8az\xe4`\xa5\x00\x00\x00\x00\xcd\x13\xfc+\xac\xe5\x8bI\f\xd6\x89\xc7HY\xcf\x00O\x88\xe6\x8b\x8bF/\x82u\xffCnG\x02\x82\xfc\xe9Od\x92\x06\xdeg@y\xa6=4\xb1}\xa8Yr\xad9\xb9b)\xec}\x87=\x91:IV\xab\xdf\xa2\xba+6D\x1fuf\xdeJYw$L\xa1\x83NH\xe3\xf2\x91\x8cW\xb7\b\x04\x12\x8b\x8bV\x19\xf1\r\xcb\x94\xa3\xf4\xe4\x97$\x99c\rG\xd7#\xe2\xfd\x80\xadR\x83\xdc\xb8d\x15|\xac\xb8g$\x0f@\xca3\x9f\xb1\xea\xc6vQ\x1b\xdb#\xa3\"\x9f\x9e\xd8\xba\x13d\x9bx\x9a\xbf\xee\xf2kQ\xe0\xc4/~7\xcd\xd1\x06\xe5\x17\x9b\bW|\xbc\x86D\x05\xaf<\xdfy,I2f\xa7G\xe3Qp<\'6 x\n\x94f\xf8\xa2\xea\xf4\xa5\x9eY\xf80C\x91\x7f\x16u\x8c(Xl\x90\xd2\x9f\xa9\xb9kJy[\x93\xfe{\xe5\x1a\xe9\xb7T\x19;\xb9\t\xe7\x0ei\xfaZ\xfbS:\x9b\xc1r\xcbM.\xf8\xb8wR\xb3p~b\xcb\v1-\a-\x8a#\xaa1\xa9\x9a\x88\a\xc5\xb9*\xd3?\xac\n\x9c\xcd\xe2\xc9\xbd\xeb\xb3\xf65\xbdaP\t\xd6\x06\x1c\xeeNg\x92>\x92>\xaf\b3\x05\xfdM\xd2F\v\xbd\xeb\x83 \x9d\x90S\x11w\xefg\\\xca\xe2\xfc~w\xbe\xefh#\x96\xa5h\xec\xbfr\xc8Bi\x90\"(\xf2\xc6\xcc\xfbX\x14{\x9e5\x87\x91\xe2\x9b\xd4\xc6\xc2whk+\x0f\x82\xca\xc1@\xcb~P\xe4\x18\xf9E\'\xab\xc7z\xd7\x05V{\xa1X\xa3\x10\x13.]tlz\x12\xde\xf2\xa43\xee#\x92J~\xda \x9b\xc4\xc0V\xb3\x9dCO\x1fu\x1c4\x1d\v}\x1b\xe5>w\xfbsm\xa3\fI|\x96-p\x86\xd3O\xfa\x9a\x8f\xb2\x8e\x88qGEG', 0x6) fallocate(r4, 0x3, 0x1, 0xfffffffb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r2, 0x1a1c1000) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x2) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000008c0)={0x0, 0x8, 0x2, [0x8, 0x0]}, &(0x7f0000000900)=0xc) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000940)={r6, 0x8}, 0x8) ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, &(0x7f0000000080)={0x939, 0x17, [{0xa, 0x1}, {0xf, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0xe}, {0x5, 0x1}, {0xb}, {0x4, 0x1}, {0xb, 0x1}, {0x4, 0x1}, {0x7, 0x1}, {0x4, 0x1}, {0x4}, {0x2, 0x1}, {0xe}, {0x5, 0x1}, {0xc, 0x1}, {0xb, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0xf, 0x1}]}) 0s ago: executing program 3 (id=940): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x80000000100004, 0xfffffffffffffffa, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 0s ago: executing program 1 (id=941): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@multicast1, 0xfffd, 0x0, 0x4e20, 0x0, 0x2}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x9}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0xc15, 0x32}, 0xa, @in6=@private0, 0x3502, 0x1, 0x0, 0x0, 0x6, 0x2}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x212001, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) kernel console output (not intermixed with test programs): e: -22 [ 134.042696][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 134.240664][ T7189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.249767][ T7189] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.262993][ T5908] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 134.268513][ T1218] usb 4-1: USB disconnect, device number 19 [ 134.424252][ T5908] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 134.430684][ T7204] netlink: 52 bytes leftover after parsing attributes in process `syz.0.347'. [ 134.432753][ T5908] usb 5-1: config 0 has no interface number 0 [ 134.458207][ T5908] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.473518][ T5908] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 134.488769][ T5908] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 134.503054][ T5908] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 134.514977][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.525431][ T5908] usb 5-1: Product: syz [ 134.529995][ T5908] usb 5-1: Manufacturer: syz [ 134.544103][ T5908] usb 5-1: SerialNumber: syz [ 134.567106][ T5908] usb 5-1: config 0 descriptor?? [ 134.578623][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 134.586644][ T7201] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 134.595950][ T7209] /dev/rnullb0: Can't open blockdev [ 134.648051][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 134.660668][ T7211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.350'. [ 134.810336][ T7201] /dev/rnullb0: Can't open blockdev [ 134.825032][ T7215] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 134.903049][ T5908] usb 5-1: USB disconnect, device number 10 [ 134.964023][ T7227] /dev/rnullb0: Can't open blockdev [ 135.012556][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 135.175666][ T43] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 213 [ 135.197247][ T43] usb 1-1: config 0 has an invalid descriptor of length 163, skipping remainder of the config [ 135.202716][ T7183] syz.1.340 (7183): drop_caches: 1 [ 135.210355][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 135.233259][ T43] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 135.244717][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.246731][ T5946] wlan1 speed is unknown, defaulting to 1000 [ 135.252874][ T43] usb 1-1: Product: syz [ 135.252894][ T43] usb 1-1: Manufacturer: syz [ 135.252908][ T43] usb 1-1: SerialNumber: syz [ 135.273712][ T43] usb 1-1: config 0 descriptor?? [ 135.276013][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.357'. [ 135.283933][ T43] usb-storage 1-1:0.0: USB Mass Storage device detected [ 135.295718][ T5946] syz0: Port: 1 Link DOWN [ 135.300391][ T1218] wlan1 speed is unknown, defaulting to 1000 [ 135.322093][ T43] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 135.417269][ T7241] netlink: 'syz.1.358': attribute type 11 has an invalid length. [ 135.486182][ T7242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.495103][ T7242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.519952][ T43] usb 1-1: USB disconnect, device number 21 [ 135.562687][ T1218] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 135.702578][ T1218] usb 5-1: device descriptor read/64, error -71 [ 135.776845][ T7255] netlink: 'syz.3.361': attribute type 5 has an invalid length. [ 135.832788][ T7255] netlink: 'syz.3.361': attribute type 9 has an invalid length. [ 135.851518][ T7263] /dev/rnullb0: Can't open blockdev [ 135.858384][ T7255] /dev/rnullb0: Can't open blockdev [ 136.039596][ T7267] /dev/rnullb0: Can't open blockdev [ 136.074682][ T7269] /dev/rnullb0: Can't open blockdev [ 136.222748][ T1218] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 136.353908][ T1218] usb 5-1: device descriptor read/64, error -71 [ 136.484452][ T1218] usb usb5-port1: attempt power cycle [ 136.822864][ T1218] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 136.853424][ T1218] usb 5-1: device descriptor read/8, error -71 [ 137.112918][ T1218] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 137.133385][ T1218] usb 5-1: device descriptor read/8, error -71 [ 137.172700][ T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 137.242795][ T1218] usb usb5-port1: unable to enumerate USB device [ 137.332752][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 137.341120][ T24] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 137.356324][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.364720][ T24] usb 1-1: Product: syz [ 137.372656][ T24] usb 1-1: Manufacturer: syz [ 137.377320][ T24] usb 1-1: SerialNumber: syz [ 137.389788][ T24] usb 1-1: config 0 descriptor?? [ 137.403029][ T24] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 137.615284][ T7314] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 137.624775][ T7314] /dev/rnullb0: Can't open blockdev [ 137.635767][ T24] gspca_topro: reg_w err -71 [ 137.661262][ T7319] netlink: 128 bytes leftover after parsing attributes in process `syz.0.380'. [ 137.682614][ T24] gspca_topro: Sensor soi763a [ 137.701013][ T24] usb 1-1: USB disconnect, device number 22 [ 137.826453][ T7322] /dev/rnullb0: Can't open blockdev [ 137.837793][ T7319] netlink: 128 bytes leftover after parsing attributes in process `syz.0.380'. [ 138.065616][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.077076][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.374391][ T7329] overlayfs: conflicting lowerdir path [ 138.393398][ T7329] /dev/rnullb0: Can't open blockdev [ 138.565747][ T7341] /dev/rnullb0: Can't open blockdev [ 138.714808][ T7347] netlink: 100 bytes leftover after parsing attributes in process `syz.3.389'. [ 138.903634][ T7352] /dev/rnullb0: Can't open blockdev [ 138.950236][ T7355] netlink: 104 bytes leftover after parsing attributes in process `syz.3.395'. [ 138.980867][ T7357] netlink: 'syz.4.394': attribute type 11 has an invalid length. [ 139.153685][ T5908] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 139.392815][ T5908] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 139.402728][ T5908] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 139.410362][ T5908] usb 1-1: can't read configurations, error -61 [ 139.533194][ T7369] /dev/rnullb0: Can't open blockdev [ 139.543000][ T5908] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 139.600679][ T7372] netlink: 'syz.1.399': attribute type 1 has an invalid length. [ 139.610644][ T7372] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 139.703230][ T5908] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 139.714735][ T5908] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 139.726879][ T7376] /dev/rnullb0: Can't open blockdev [ 139.734864][ T5908] usb 1-1: can't read configurations, error -61 [ 139.753862][ T5908] usb usb1-port1: attempt power cycle [ 140.124434][ T5908] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 140.153597][ T5908] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 140.154934][ T5908] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 140.173761][ T5908] usb 1-1: can't read configurations, error -61 [ 140.260743][ T7393] /dev/rnullb0: Can't open blockdev [ 140.303794][ T5908] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 140.323594][ T5908] usb 1-1: too many configurations: 85, using maximum allowed: 8 [ 140.333171][ T5908] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 140.342350][ T5908] usb 1-1: can't read configurations, error -61 [ 140.349278][ T5908] usb usb1-port1: unable to enumerate USB device [ 140.754436][ T5946] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 140.892969][ T5946] usb 2-1: device descriptor read/64, error -71 [ 141.162693][ T5946] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 141.276588][ T7424] wlan1 speed is unknown, defaulting to 1000 [ 141.312741][ T5946] usb 2-1: device descriptor read/64, error -71 [ 141.432910][ T5946] usb usb2-port1: attempt power cycle [ 141.612199][ T7444] comedi comedi1: pcl812: I/O port conflict (0x4f27,16) [ 141.772544][ T5946] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 141.805792][ T5946] usb 2-1: device descriptor read/8, error -71 [ 142.112933][ T5946] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 142.155156][ T5946] usb 2-1: device descriptor read/8, error -71 [ 142.263391][ T5946] usb usb2-port1: unable to enumerate USB device [ 142.326136][ T43] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 142.413388][ T7471] No control pipe specified [ 142.420805][ T7471] /dev/rnullb0: Can't open blockdev [ 142.499608][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 142.507991][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 142.518940][ T43] usb 1-1: config 6 has an invalid interface number: 150 but max is 0 [ 142.529362][ T43] usb 1-1: config 6 has an invalid interface association descriptor of length 2, skipping [ 142.539649][ T43] usb 1-1: config 6 has no interface number 0 [ 142.548102][ T43] usb 1-1: config 6 interface 150 altsetting 3 endpoint 0x6 has an invalid bInterval 0, changing to 4 [ 142.559563][ T43] usb 1-1: config 6 interface 150 has no altsetting 0 [ 142.570102][ T43] usb 1-1: New USB device found, idVendor=12d1, idProduct=76d8, bcdDevice=5d.76 [ 142.580666][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.590804][ T43] usb 1-1: Product: syz [ 142.595338][ T43] usb 1-1: Manufacturer: syz [ 142.600066][ T43] usb 1-1: SerialNumber: syz [ 142.877405][ T7476] /dev/rnullb0: Can't open blockdev [ 142.970519][ T43] usb 1-1: USB disconnect, device number 27 [ 143.102592][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 143.122601][ T5946] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 143.215801][ T7479] /dev/rnullb0: Can't open blockdev [ 143.282574][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 143.296293][ T5946] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 143.304470][ T5946] usb 4-1: config 0 has no interface number 0 [ 143.310580][ T5946] usb 4-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 143.320459][ T5946] usb 4-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 143.330502][ T5946] usb 4-1: config 0 interface 12 has no altsetting 0 [ 143.339060][ T5946] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 143.350433][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.358590][ T5946] usb 4-1: Product: syz [ 143.363155][ T5946] usb 4-1: Manufacturer: syz [ 143.367795][ T5946] usb 4-1: SerialNumber: syz [ 143.374442][ T5946] usb 4-1: config 0 descriptor?? [ 143.383612][ T5946] f81534 4-1:0.12: unsupported endpoint max packet size [ 143.412681][ T7484] /dev/rnullb0: Can't open blockdev [ 143.480744][ T7491] netlink: 'syz.4.436': attribute type 12 has an invalid length. [ 143.488886][ T7491] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.436'. [ 143.606036][ T7497] tipc: Started in network mode [ 143.611093][ T7497] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 143.622352][ T7497] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 143.631581][ T7497] tipc: Enabled bearer , priority 10 [ 143.643810][ T7497] netlink: 277 bytes leftover after parsing attributes in process `syz.1.438'. [ 143.660561][ T5908] usb 4-1: USB disconnect, device number 20 [ 143.664760][ T7497] /dev/rnullb0: Can't open blockdev [ 143.782147][ T7507] netlink: 'syz.1.439': attribute type 5 has an invalid length. [ 143.789950][ T7507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.439'. [ 143.799321][ T7507] netlink: 'syz.1.439': attribute type 1 has an invalid length. [ 143.812365][ T7507] /dev/rnullb0: Can't open blockdev [ 143.905015][ T7514] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 143.938961][ T7516] 9p: Unknown parameter 'n' [ 144.007257][ T7525] netlink: 56 bytes leftover after parsing attributes in process `syz.1.446'. [ 144.057799][ T7528] /dev/rnullb0: Can't open blockdev [ 144.243098][ T5860] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 144.251485][ T5860] Bluetooth: hci4: Injecting HCI hardware error event [ 144.259401][ T5860] Bluetooth: hci4: hardware error 0x00 [ 144.294972][ T7538] netlink: 'syz.3.451': attribute type 83 has an invalid length. [ 144.507195][ T7545] /dev/rnullb0: Can't open blockdev [ 144.518928][ T7557] /dev/rnullb0: Can't open blockdev [ 144.652080][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.667027][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.679084][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.691207][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.752620][ T5946] tipc: Node number set to 1 [ 144.922999][ T7568] tmpfs: Bad value for 'mpol' [ 145.082535][ T5946] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 145.204336][ T51] Bluetooth: hci4: Unable to find connection with handle 0x0000 [ 145.256364][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.269959][ T5946] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.285742][ T5946] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 145.297966][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.307213][ T5946] usb 2-1: Product: syz [ 145.311434][ T5946] usb 2-1: Manufacturer: syz [ 145.321309][ T5946] usb 2-1: SerialNumber: syz [ 145.334448][ T5946] usb 2-1: config 0 descriptor?? [ 146.180870][ T7590] /dev/rnullb0: Can't open blockdev [ 146.312661][ T5860] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 146.530732][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.589725][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.659615][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.708668][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.824117][ T13] bridge_slave_1: left allmulticast mode [ 146.836600][ T13] bridge_slave_1: left promiscuous mode [ 146.845443][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.856165][ T13] bridge_slave_0: left allmulticast mode [ 146.861871][ T13] bridge_slave_0: left promiscuous mode [ 146.870013][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.892633][ T5859] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 146.921834][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.929241][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.937019][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.945166][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.954705][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 147.021329][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.031883][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.041977][ T13] bond0 (unregistering): Released all slaves [ 147.059720][ T5859] usb 1-1: config 1 interface 0 altsetting 200 endpoint 0x81 has an invalid bInterval 181, changing to 11 [ 147.078182][ T5859] usb 1-1: config 1 interface 0 has no altsetting 0 [ 147.086975][ T5859] usb 1-1: New USB device found, idVendor=0461, idProduct=4e05, bcdDevice= 0.40 [ 147.092447][ T7599] wlan1 speed is unknown, defaulting to 1000 [ 147.108187][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.127607][ T5859] usb 1-1: Product: syz [ 147.131916][ T5859] usb 1-1: Manufacturer: syz [ 147.138596][ T5859] usb 1-1: SerialNumber: syz [ 147.178059][ T7603] binder: 7602:7603 ioctl 401070cd 200000000180 returned -22 [ 147.281320][ T9] wlan1 speed is unknown, defaulting to 1000 [ 147.310215][ T194] smc: removing ib device syz0 [ 147.360413][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.378434][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.481486][ T5859] usbhid 1-1:1.0: can't add hid device: -71 [ 147.515158][ T5859] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 147.622602][ T5859] usb 1-1: USB disconnect, device number 28 [ 147.742698][ T5908] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 147.846514][ T5859] usb 2-1: USB disconnect, device number 26 [ 147.905673][ T7599] chnl_net:caif_netlink_parms(): no params data found [ 148.179767][ T7635] CIFS mount error: No usable UNC path provided in device string! [ 148.179767][ T7635] [ 148.242529][ T7635] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.338008][ T7635] input: syz0 as /devices/virtual/input/input12 [ 148.376100][ T7599] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.390839][ T7599] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.412533][ T7599] bridge_slave_0: entered allmulticast mode [ 148.421346][ T7645] netlink: 4 bytes leftover after parsing attributes in process `syz.3.477'. [ 148.437023][ T7599] bridge_slave_0: entered promiscuous mode [ 148.453419][ T7599] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.461017][ T7599] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.478831][ T7599] bridge_slave_1: entered allmulticast mode [ 148.525304][ T7599] bridge_slave_1: entered promiscuous mode [ 148.631865][ T7647] loop6: detected capacity change from 0 to 7 [ 148.656431][ T7647] Dev loop6: unable to read RDB block 7 [ 148.675664][ T7647] loop6: AHDI p3 p4 [ 148.691476][ T7647] loop6: partition table partially beyond EOD, truncated [ 148.712990][ T7647] loop6: p3 start 1886353253 is beyond EOD, truncated [ 148.778135][ T7599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.821669][ T13] hsr_slave_0: left promiscuous mode [ 148.828688][ T13] hsr_slave_1: left promiscuous mode [ 148.835152][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.843334][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.851301][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.861199][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.879129][ T13] veth1_macvtap: left promiscuous mode [ 148.885233][ T13] veth0_macvtap: left promiscuous mode [ 148.890893][ T13] veth1_vlan: left promiscuous mode [ 148.896836][ T13] veth0_vlan: left promiscuous mode [ 149.022732][ T5860] Bluetooth: hci4: command tx timeout [ 149.046640][ T13] team0 (unregistering): Port device team_slave_1 removed [ 149.061766][ T13] team0 (unregistering): Port device team_slave_0 removed [ 149.131004][ T7599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.341811][ T7599] team0: Port device team_slave_0 added [ 149.352396][ T7599] team0: Port device team_slave_1 added [ 149.388895][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.396006][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.425305][ T7599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.439873][ T7599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.459945][ T7599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.491872][ T7599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.542781][ T43] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 149.569937][ T7599] hsr_slave_0: entered promiscuous mode [ 149.578456][ T7599] hsr_slave_1: entered promiscuous mode [ 149.584827][ T7599] debugfs: 'hsr0' already exists in 'hsr' [ 149.590769][ T7599] Cannot create hsr debugfs directory [ 149.688974][ T7682] /dev/rnullb0: Can't open blockdev [ 149.696582][ T43] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 149.718363][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.741043][ T43] usb 1-1: config 0 descriptor?? [ 149.760651][ T43] cp210x 1-1:0.0: cp210x converter detected [ 149.891486][ T7599] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 149.908026][ T7599] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 149.967688][ T7599] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 150.029594][ T7599] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 150.250418][ T7599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.296692][ T7599] 8021q: adding VLAN 0 to HW filter on device team0 [ 150.316266][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.323459][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 150.364233][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.371587][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.702717][ T43] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 150.738488][ T43] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 150.752542][ T43] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 150.785125][ T43] usb 1-1: cp210x converter now attached to ttyUSB0 [ 150.815217][ T43] usb 1-1: USB disconnect, device number 29 [ 150.851448][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 150.873385][ T43] cp210x 1-1:0.0: device disconnected [ 150.936066][ T7599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.103085][ T5860] Bluetooth: hci4: command tx timeout [ 151.464919][ T7599] veth0_vlan: entered promiscuous mode [ 151.508193][ T7599] veth1_vlan: entered promiscuous mode [ 151.616931][ T7599] veth0_macvtap: entered promiscuous mode [ 151.640741][ T7599] veth1_macvtap: entered promiscuous mode [ 151.688163][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.718147][ T7599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.732557][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 151.757172][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.795010][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.816928][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.835537][ T7753] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.853564][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.872812][ T7753] I/O error, dev loop1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 151.880331][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.892852][ T9] usb 1-1: device descriptor read/64, error -71 [ 151.908814][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.939545][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.951988][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.132534][ T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 152.269437][ T7772] /dev/rnullb0: Can't open blockdev [ 152.292678][ T9] usb 1-1: device descriptor read/64, error -71 [ 152.416099][ T7779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.497'. [ 152.423521][ T9] usb usb1-port1: attempt power cycle [ 152.435963][ T7779] /dev/rnullb0: Can't open blockdev [ 152.602598][ T5859] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 152.722983][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 152.762594][ T5859] usb 6-1: Using ep0 maxpacket: 8 [ 152.769877][ T5859] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.779228][ T5859] usb 6-1: config 17 has an invalid interface number: 8 but max is 1 [ 152.787854][ T5859] usb 6-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 152.797263][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 152.797779][ T5859] usb 6-1: config 17 has no interface number 0 [ 152.811490][ T5859] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 144, changing to 7 [ 152.823878][ T5859] usb 6-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 57893, setting to 1024 [ 152.835332][ T9] usb 1-1: device descriptor read/8, error -71 [ 152.835496][ T5859] usb 6-1: config 17 interface 8 has no altsetting 0 [ 152.851101][ T5859] usb 6-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 152.860741][ T5859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.869909][ T5859] usb 6-1: Product: syz [ 152.874557][ T5859] usb 6-1: Manufacturer: syz [ 152.879183][ T5859] usb 6-1: SerialNumber: syz [ 152.885345][ T43] usb 2-1: config 0 has an invalid interface number: 74 but max is 0 [ 152.894473][ T43] usb 2-1: config 0 has no interface number 0 [ 152.909767][ T43] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 152.920288][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.928745][ T43] usb 2-1: Product: syz [ 152.933453][ T43] usb 2-1: Manufacturer: syz [ 152.938174][ T43] usb 2-1: SerialNumber: syz [ 152.946355][ T43] usb 2-1: config 0 descriptor?? [ 153.084861][ T9] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 153.123053][ T9] usb 1-1: device descriptor read/8, error -71 [ 153.124087][ T5859] usb 6-1: selecting invalid altsetting 0 [ 153.141836][ T5859] usb 6-1: 8:6 : no UAC_FORMAT_TYPE desc [ 153.148473][ T5859] usb 6-1: selecting invalid altsetting 0 [ 153.182660][ T5860] Bluetooth: hci4: command tx timeout [ 153.200543][ T5859] usb 6-1: USB disconnect, device number 2 [ 153.242639][ T9] usb usb1-port1: unable to enumerate USB device [ 153.364078][ T7781] /dev/rnullb0: Can't open blockdev [ 153.370749][ T43] usb 2-1: USB disconnect, device number 27 [ 153.383517][ T43] f81534a_ctrl 2-1:0.74: failed to set register 0x116: -19 [ 153.390753][ T43] f81534a_ctrl 2-1:0.74: failed to enable ports: -19 [ 153.936805][ T7790] /dev/rnullb0: Can't open blockdev [ 153.972636][ T1218] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 154.154154][ T1218] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.175403][ T1218] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 154.196496][ T1218] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 154.206789][ T1218] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.223163][ T1218] usb 6-1: config 0 descriptor?? [ 154.237485][ T1218] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 154.573808][ T7797] tipc: Trying to set illegal importance in message [ 155.132805][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 155.263720][ T5860] Bluetooth: hci4: command tx timeout [ 155.528714][ T43] usb 6-1: USB disconnect, device number 3 [ 155.576335][ T7819] /dev/sg0: Can't lookup blockdev [ 155.594270][ T7819] /dev/sg0: Can't lookup blockdev [ 155.767699][ T7834] /dev/rnullb0: Can't open blockdev [ 156.029196][ T7844] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.057893][ T7844] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 156.077672][ T7844] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.087840][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 156.111042][ T7844] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 156.344004][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 156.442617][ T5946] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 156.485634][ T7851] capability: warning: `syz.5.518' uses 32-bit capabilities (legacy support in use) [ 156.504142][ T9] usb 1-1: config 0 has an invalid descriptor of length 78, skipping remainder of the config [ 156.504188][ T7851] kvm: pic: non byte write [ 156.515231][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.533953][ T9] usb 1-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice= 9.99 [ 156.552706][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.560776][ T9] usb 1-1: Product: syz [ 156.565785][ T9] usb 1-1: Manufacturer: syz [ 156.570417][ T9] usb 1-1: SerialNumber: syz [ 156.584124][ T9] usb 1-1: config 0 descriptor?? [ 156.594307][ T5946] usb 4-1: Using ep0 maxpacket: 8 [ 156.608701][ T5946] usb 4-1: too many endpoints for config 0 interface 0 altsetting 250: 255, using maximum allowed: 30 [ 156.620012][ T5946] usb 4-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 156.635965][ T5946] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.642907][ T5946] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 156.652101][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.671901][ T5946] usb 4-1: config 0 descriptor?? [ 156.772741][ T5908] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.808280][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.516'. [ 156.842805][ T9] usb 1-1: USB disconnect, device number 34 [ 156.932573][ T5908] usb 6-1: Using ep0 maxpacket: 8 [ 156.984778][ T5908] usb 6-1: too many configurations: 248, using maximum allowed: 8 [ 157.013005][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.051950][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.079444][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.116855][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.141987][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.165309][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.188216][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.208000][ T5908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.234576][ T5908] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 157.252975][ T5908] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.278275][ T5908] usb 6-1: config 0 descriptor?? [ 157.307439][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.359615][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.744365][ T5946] usbhid 4-1:0.0: can't add hid device: -71 [ 157.750534][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 157.760042][ T5946] usb 4-1: USB disconnect, device number 22 [ 157.956153][ T5908] usbhid 6-1:0.0: can't add hid device: -71 [ 157.969942][ T5908] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 157.987535][ T5908] usb 6-1: USB disconnect, device number 4 [ 158.005259][ T7884] syzkaller1: entered promiscuous mode [ 158.010891][ T7884] syzkaller1: entered allmulticast mode [ 158.128121][ T9] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 158.158118][ T7889] 9p: Bad value for 'wfdno' [ 158.165558][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.528'. [ 158.175371][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.528'. [ 158.185640][ T7889] netlink: 60 bytes leftover after parsing attributes in process `syz.1.528'. [ 158.289616][ T7894] /dev/rnullb0: Can't open blockdev [ 158.295080][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 158.301643][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.313035][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.324476][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 158.338318][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 158.348546][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.358400][ T9] usb 1-1: config 0 descriptor?? [ 158.776307][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.800210][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.822253][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.844569][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.859938][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.883966][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.894859][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.904868][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.915662][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.944150][ T9] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 158.965706][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 158.981058][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input13 [ 159.020578][ T9] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 159.092667][ T43] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 159.109589][ T7910] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 159.132722][ T7910] block device autoloading is deprecated and will be removed. [ 159.156151][ T5908] usb 1-1: USB disconnect, device number 35 [ 159.249786][ T7911] fido_id[7911]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 159.276711][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.292134][ T5945] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 159.309135][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 159.338198][ T43] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 159.351133][ T43] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 159.365461][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.379156][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.389087][ T43] usb 2-1: Product: syz [ 159.393971][ T43] usb 2-1: Manufacturer: syz [ 159.398606][ T43] usb 2-1: SerialNumber: syz [ 159.414297][ T7906] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.428835][ T43] cdc_mbim 2-1:1.0: skipping garbage [ 159.483839][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 159.490677][ T5945] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 159.503059][ T5945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 159.516309][ T5945] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 159.525644][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.534096][ T5945] usb 4-1: Product: syz [ 159.538383][ T5945] usb 4-1: Manufacturer: syz [ 159.543521][ T5945] usb 4-1: SerialNumber: syz [ 159.579805][ T7913] /dev/rnullb0: Can't open blockdev [ 159.592308][ T7914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.604399][ T7914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.870085][ T43] cdc_mbim 2-1:1.0: bind() failure [ 159.888519][ T43] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 159.898553][ T43] cdc_ncm 2-1:1.1: bind() failure [ 159.927450][ T43] usb 2-1: USB disconnect, device number 28 [ 160.034553][ T7933] /dev/rnullb0: Can't open blockdev [ 160.638600][ T7937] block nbd5: Attempted send on invalid socket [ 160.646993][ T7937] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 160.688113][ T7928] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 160.694985][ T7928] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 160.703705][ T7928] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 160.711479][ T7928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 160.718130][ T7928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.726228][ T7928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 160.733028][ T7928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 160.739156][ T7928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 160.746733][ T7928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 160.753931][ T7928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 160.760623][ T7928] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 160.767016][ T7928] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 160.774903][ T7928] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 160.786089][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.805756][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.815131][ T7909] gfs2: gfs2 mount does not exist [ 160.886198][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.910780][ T7941] Bluetooth: hci5: Frame reassembly failed (-84) [ 160.930462][ T5945] usb 4-1: 0:2 : does not exist [ 160.949549][ T5945] usb 4-1: USB disconnect, device number 23 [ 160.979331][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.987493][ T7944] kvm: emulating exchange as write [ 161.046403][ T5946] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.202545][ T5946] usb 6-1: Using ep0 maxpacket: 32 [ 161.210572][ T5946] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 161.222225][ T5946] usb 6-1: config 0 has no interface number 0 [ 161.229597][ T5946] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 161.245961][ T5946] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 161.257294][ T5946] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.266585][ T5946] usb 6-1: Product: syz [ 161.270889][ T5946] usb 6-1: Manufacturer: syz [ 161.276573][ T5946] usb 6-1: SerialNumber: syz [ 161.284577][ T5946] usb 6-1: config 0 descriptor?? [ 161.315092][ T7955] /dev/rnullb0: Can't open blockdev [ 161.526780][ T5946] usb 6-1: USB disconnect, device number 5 [ 161.540465][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.652645][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 161.744172][ T5945] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 161.804762][ T9] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 161.813761][ T9] usb 1-1: config 0 has no interface number 0 [ 161.819872][ T9] usb 1-1: config 0 interface 122 has no altsetting 0 [ 161.829241][ T9] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 161.838499][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.846546][ T9] usb 1-1: Product: syz [ 161.850797][ T9] usb 1-1: Manufacturer: syz [ 161.855467][ T9] usb 1-1: SerialNumber: syz [ 161.861327][ T9] usb 1-1: config 0 descriptor?? [ 161.906140][ T5945] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 161.915516][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.923906][ T5945] usb 4-1: Product: syz [ 161.929522][ T5945] usb 4-1: Manufacturer: syz [ 161.934540][ T5945] usb 4-1: SerialNumber: syz [ 161.940665][ T5945] usb 4-1: config 0 descriptor?? [ 161.982652][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 162.129451][ T5859] usb 1-1: USB disconnect, device number 36 [ 162.140201][ T5859] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 162.259208][ T7967] /dev/rnullb0: Can't open blockdev [ 162.362162][ T7963] /dev/rnullb0: Can't open blockdev [ 162.371507][ T5945] usb 4-1: f81604_write: reg: 105 data: 0 failed: -EPROTO [ 162.391109][ T5945] f81604 4-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 162.404076][ T5945] f81604 4-1:0.0: probe with driver f81604 failed with error -71 [ 162.425087][ T5945] usb 4-1: USB disconnect, device number 24 [ 162.783260][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 162.789409][ T5185] Bluetooth: hci3: command 0x0c1a tx timeout [ 162.795632][ T5869] Bluetooth: hci2: command 0x0406 tx timeout [ 162.795645][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 162.943086][ T5872] Bluetooth: hci5: command 0x1003 tx timeout [ 162.946629][ T5860] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 163.156926][ T7994] netlink: 'syz.1.557': attribute type 11 has an invalid length. [ 163.196005][ T7994] /dev/rnullb0: Can't open blockdev [ 163.338920][ T8003] syz.1.558 uses old SIOCAX25GETINFO [ 163.806108][ T30] audit: type=1326 audit(1756707480.398:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7985 comm="syz.3.555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41d658ebe9 code=0x7fc00000 [ 163.904096][ T8024] CUSE: info not properly terminated [ 163.920628][ T8024] netlink: 56 bytes leftover after parsing attributes in process `syz.3.562'. [ 163.954666][ T43] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 164.065026][ T5860] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.135824][ T43] usb 1-1: config 7 has an invalid interface number: 252 but max is 0 [ 164.148509][ T43] usb 1-1: config 7 has no interface number 0 [ 164.177183][ T43] usb 1-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 164.188095][ T5945] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 164.207947][ T43] usb 1-1: config 7 interface 252 has no altsetting 0 [ 164.220321][ T43] usb 1-1: string descriptor 0 read error: -22 [ 164.227236][ T43] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 164.249903][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.286252][ T43] idmouse 1-1:7.252: Unable to find bulk-in endpoint. [ 164.352548][ T5945] usb 4-1: Using ep0 maxpacket: 16 [ 164.364711][ T5945] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 164.382530][ T5945] usb 4-1: config 1 has no interface number 0 [ 164.396307][ T5945] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 164.427430][ T5945] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 164.446361][ T5945] usb 4-1: config 1 interface 105 has no altsetting 0 [ 164.457238][ T5945] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 164.479363][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.488835][ T8016] /dev/rnullb0: Can't open blockdev [ 164.499679][ T43] usb 1-1: USB disconnect, device number 37 [ 164.513998][ T5945] usb 4-1: Product: syz [ 164.528476][ T5945] usb 4-1: Manufacturer: syz [ 164.538581][ T5945] usb 4-1: SerialNumber: syz [ 164.551215][ T8024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.561406][ T8024] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 164.771839][ T8024] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 164.791397][ T8024] /dev/rnullb0: Can't open blockdev [ 164.862657][ T5860] Bluetooth: hci3: command 0x0c1a tx timeout [ 164.862697][ T5872] Bluetooth: hci1: command 0x0c1a tx timeout [ 164.868818][ T5185] Bluetooth: hci4: command 0x0c1a tx timeout [ 165.113178][ T8068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.153074][ T8068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.321603][ T8074] /dev/rnullb0: Can't open blockdev [ 165.344603][ T8074] /dev/rnullb0: Can't open blockdev [ 165.358619][ T8074] /dev/rnullb0: Can't open blockdev [ 165.376839][ T8074] /dev/rnullb0: Can't open blockdev [ 165.405259][ T8074] /dev/rnullb0: Can't open blockdev [ 165.424302][ T8074] /dev/rnullb0: Can't open blockdev [ 165.430123][ T8074] /dev/rnullb0: Can't open blockdev [ 165.458120][ T8074] /dev/rnullb0: Can't open blockdev [ 165.464727][ T8077] netlink: 'syz.1.568': attribute type 3 has an invalid length. [ 165.475004][ T8077] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.568'. [ 165.484292][ T8074] /dev/rnullb0: Can't open blockdev [ 165.484803][ T8074] /dev/rnullb0: Can't open blockdev [ 165.511061][ T8074] /dev/rnullb0: Can't open blockdev [ 165.537841][ T8077] Unknown status report in ack skb [ 165.543249][ T8074] /dev/rnullb0: Can't open blockdev [ 165.549101][ T8074] /dev/rnullb0: Can't open blockdev [ 165.573964][ T8074] /dev/rnullb0: Can't open blockdev [ 165.579768][ T8074] /dev/rnullb0: Can't open blockdev [ 165.603393][ T8074] /dev/rnullb0: Can't open blockdev [ 165.609509][ T8074] /dev/rnullb0: Can't open blockdev [ 165.645666][ T8074] /dev/rnullb0: Can't open blockdev [ 165.651539][ T8074] /dev/rnullb0: Can't open blockdev [ 165.674695][ T8074] /dev/rnullb0: Can't open blockdev [ 165.680598][ T8074] /dev/rnullb0: Can't open blockdev [ 165.705663][ T8074] /dev/rnullb0: Can't open blockdev [ 165.711535][ T8074] /dev/rnullb0: Can't open blockdev [ 165.734807][ T8074] /dev/rnullb0: Can't open blockdev [ 165.740617][ T8074] /dev/rnullb0: Can't open blockdev [ 165.764757][ T8074] /dev/rnullb0: Can't open blockdev [ 165.770586][ T8074] /dev/rnullb0: Can't open blockdev [ 165.805683][ T8074] /dev/rnullb0: Can't open blockdev [ 165.811534][ T8074] /dev/rnullb0: Can't open blockdev [ 165.833656][ T8074] /dev/rnullb0: Can't open blockdev [ 165.839467][ T8074] /dev/rnullb0: Can't open blockdev [ 165.865260][ T8074] /dev/rnullb0: Can't open blockdev [ 165.871237][ T8074] /dev/rnullb0: Can't open blockdev [ 166.146402][ T5185] Bluetooth: hci0: command 0x0c1a tx timeout [ 166.889158][ T8090] netlink: 'syz.0.572': attribute type 9 has an invalid length. [ 166.916220][ T8090] netlink: 44 bytes leftover after parsing attributes in process `syz.0.572'. [ 166.942660][ T5185] Bluetooth: hci4: command 0x0c1a tx timeout [ 166.949449][ T5860] Bluetooth: hci1: command 0x0c1a tx timeout [ 166.949482][ T5872] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.061397][ T5945] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 167.120329][ T5945] usb 4-1: USB disconnect, device number 25 [ 167.188856][ T8101] /dev/rnullb0: Can't open blockdev [ 167.596496][ T30] audit: type=1326 audit(1756707484.188:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8104 comm="syz.3.576" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f41d658ebe9 code=0x0 [ 167.742127][ T8115] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.578'. [ 167.818639][ T8120] /dev/rnullb0: Can't open blockdev [ 168.104495][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.131922][ T5926] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 168.322607][ T5926] usb 1-1: Using ep0 maxpacket: 8 [ 168.347644][ T5926] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.371792][ T5926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.394486][ T5926] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.422531][ T5926] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.452620][ T5926] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.480855][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.706651][ T5926] usb 1-1: GET_CAPABILITIES returned 0 [ 168.723331][ T5926] usbtmc 1-1:16.0: can't read capabilities [ 168.909086][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.918244][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.927356][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.936474][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.945598][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.954779][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.961274][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.970386][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.979495][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.988593][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.997788][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.007010][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.021281][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.030688][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.039872][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.048967][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.058069][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.067167][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 169.076245][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.165478][ T5926] usb 1-1: USB disconnect, device number 38 [ 169.414191][ T8148] /dev/rnullb0: Can't open blockdev [ 169.524423][ T8157] pvfs2: Unknown parameter '' [ 169.777629][ T8163] /dev/rnullb0: Can't open blockdev [ 169.900837][ T8148] netlink: 'syz.3.587': attribute type 10 has an invalid length. [ 169.910084][ T8148] netlink: 156 bytes leftover after parsing attributes in process `syz.3.587'. [ 170.052691][ T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 170.102902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.111726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.223206][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 170.239367][ T9] usb 1-1: config 4 has 0 interfaces, different from the descriptor's value: 9 [ 170.271861][ T9] usb 1-1: New USB device found, idVendor=10b9, idProduct=8000, bcdDevice=c0.fa [ 170.281890][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.302887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 170.325900][ T9] usb 1-1: Product: syz [ 170.330126][ T9] usb 1-1: Manufacturer: syz [ 170.349963][ T9] usb 1-1: SerialNumber: syz [ 170.467836][ T8173] /dev/rnullb0: Can't open blockdev [ 170.561388][ T43] usb 1-1: USB disconnect, device number 39 [ 170.673267][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 170.842653][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 170.851761][ T9] usb 2-1: config 1 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.871371][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 [ 170.888115][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice= 0.40 [ 170.901145][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.918316][ T9] usb 2-1: Product: syz [ 170.926254][ T9] usb 2-1: Manufacturer: syz [ 170.936513][ T9] usb 2-1: SerialNumber: syz [ 171.158633][ T5872] Bluetooth: hci1: unexpected subevent 0x0e length: 30 > 15 [ 171.166232][ T5872] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 171.266690][ T8193] /dev/rnullb0: Can't open blockdev [ 171.274631][ T8188] block nbd1: Attempted send on invalid socket [ 171.274671][ T8193] /dev/rnullb0: Can't open blockdev [ 171.280856][ T8188] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 171.332606][ T8188] XFS (nbd1): SB validate failed with error -5. [ 171.397806][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input14 [ 171.427497][ T5219] bcm5974 2-1:1.0: could not read from device [ 171.435680][ T9] usb 2-1: USB disconnect, device number 29 [ 172.905699][ T8216] /dev/rnullb0: Can't open blockdev [ 173.093569][ T8221] /dev/rnullb0: Can't open blockdev [ 173.205791][ T8225] program syz.1.608 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.578804][ T8229] /dev/rnullb0: Can't open blockdev [ 174.238035][ T8244] /dev/rnullb0: Can't open blockdev [ 174.620721][ T8259] /dev/rnullb0: Can't open blockdev [ 174.781425][ T8267] virtiofs: Unknown parameter 'always 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 18 nlmon0 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 20 batadv0 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 21 vxcan0 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 22 vxcan1 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 23 veth0 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 24 veth1 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 25 wg0 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 26 wg1 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 27 wg2 : 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 28 veth0_to_bridge: 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 29 bridge_slave_0: 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 31 bridge_slave_1: 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 32 veth0_to_bond: 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 33 bond_slave_0: 1 V3 [ 174.781425][ T8267] 010000E0 1 0:00000000 0 [ 174.781425][ T8267] 34 veth1_to_bond: 1 V3 [ 174.781425][ T8267] 010000E0 1 0:000 [ 174.908044][ T8275] /dev/rnullb0: Can't open blockdev [ 174.943545][ T8270] /dev/rnullb0: Can't open blockdev [ 175.453124][ T1218] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 175.638844][ T1218] usb 1-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 175.658443][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.673689][ T1218] usb 1-1: Product: syz [ 175.674602][ T5945] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 175.682577][ T1218] usb 1-1: Manufacturer: syz [ 175.700692][ T1218] usb 1-1: SerialNumber: syz [ 175.713840][ T1218] usb 1-1: config 0 descriptor?? [ 175.845851][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 175.862904][ T5945] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 175.880542][ T5945] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 175.893343][ T5945] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.925158][ T5945] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.934639][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.940074][ T8283] /dev/rnullb0: Can't open blockdev [ 175.952626][ T5945] usb 2-1: Product: syz [ 175.957766][ T5945] usb 2-1: Manufacturer: syz [ 175.961785][ T1218] cx82310_eth 1-1:0.0: probe with driver cx82310_eth failed with error -22 [ 175.962397][ T5945] usb 2-1: SerialNumber: syz [ 175.994209][ T1218] cxacru 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 176.016520][ T1218] usb 1-1: USB disconnect, device number 40 [ 176.413066][ T5945] usb 2-1: 0:2 : does not exist [ 176.448449][ T8214] syz.3.605 (8214) used greatest stack depth: 17168 bytes left [ 176.534292][ T8291] sctp: [Deprecated]: syz.0.627 (pid 8291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.534292][ T8291] Use struct sctp_sack_info instead [ 176.700267][ T8293] /dev/rnullb0: Can't open blockdev [ 176.897204][ T8297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.911449][ T8297] bond0: (slave rose0): Enslaving as an active interface with an up link [ 177.617878][ T8318] /dev/rnullb0: Can't open blockdev [ 177.717911][ T8324] /dev/rnullb0: Can't open blockdev [ 178.427148][ T5860] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 178.435491][ T5860] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 178.446649][ T5860] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 178.456562][ T5860] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 178.477138][ T5860] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 178.732640][ T5945] usb 2-1: USB disconnect, device number 30 [ 178.810877][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.847239][ T8345] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 178.883165][ T8345] /dev/rnullb0: Can't open blockdev [ 179.264840][ T194] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.450279][ T8365] /dev/rnullb0: Can't open blockdev [ 179.657332][ T194] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.683469][ T8338] chnl_net:caif_netlink_parms(): no params data found [ 179.712134][ T8372] /dev/rnullb0: Can't open blockdev [ 179.772066][ T194] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.870451][ T194] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.882018][ T8384] /dev/rnullb0: Can't open blockdev [ 179.928405][ T8389] /dev/rnullb0: Can't open blockdev [ 179.936195][ T30] audit: type=1326 audit(1756707496.528:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8388 comm="syz.1.646" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f438898ebe9 code=0x0 [ 179.992870][ T8338] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.010273][ T8338] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.022701][ T8338] bridge_slave_0: entered allmulticast mode [ 180.029984][ T8338] bridge_slave_0: entered promiscuous mode [ 180.057613][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.064888][ T8338] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.072352][ T8338] bridge_slave_1: entered allmulticast mode [ 180.081039][ T8338] bridge_slave_1: entered promiscuous mode [ 180.109920][ T8338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.138544][ T8338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.195921][ T8338] team0: Port device team_slave_0 added [ 180.216534][ T8338] team0: Port device team_slave_1 added [ 180.222902][ T5945] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 180.260670][ T194] bridge_slave_1: left allmulticast mode [ 180.269702][ T194] bridge_slave_1: left promiscuous mode [ 180.275976][ T194] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.291256][ T194] bridge_slave_0: left allmulticast mode [ 180.299482][ T194] bridge_slave_0: left promiscuous mode [ 180.306028][ T194] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.325104][ T8407] netlink: 244 bytes leftover after parsing attributes in process `syz.0.649'. [ 180.355387][ T5945] usb 4-1: device descriptor read/64, error -71 [ 180.489087][ T194] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.501053][ T194] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.511624][ T194] bond0 (unregistering): Released all slaves [ 180.554332][ T5872] Bluetooth: hci5: command tx timeout [ 180.561402][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.569654][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.597442][ T8338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.616422][ T8338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.617729][ T5945] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 180.624452][ T8338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.656938][ C0] vkms_vblank_simulate: vblank timer overrun [ 180.663897][ T8338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.709028][ T8338] hsr_slave_0: entered promiscuous mode [ 180.715649][ T8338] hsr_slave_1: entered promiscuous mode [ 180.721740][ T8338] debugfs: 'hsr0' already exists in 'hsr' [ 180.727640][ T8338] Cannot create hsr debugfs directory [ 180.753398][ T5945] usb 4-1: device descriptor read/64, error -71 [ 180.820066][ T194] hsr_slave_0: left promiscuous mode [ 180.829140][ T194] hsr_slave_1: left promiscuous mode [ 180.835352][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.844406][ T194] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.853890][ T194] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.861848][ T194] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.873451][ T5945] usb usb4-port1: attempt power cycle [ 180.879277][ T194] veth1_macvtap: left promiscuous mode [ 180.885835][ T194] veth0_macvtap: left promiscuous mode [ 180.891537][ T194] veth1_vlan: left promiscuous mode [ 180.900641][ T194] veth0_vlan: left promiscuous mode [ 181.132002][ T194] team0 (unregistering): Port device team_slave_1 removed [ 181.165861][ T194] team0 (unregistering): Port device team_slave_0 removed [ 181.215127][ T5945] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 181.243311][ T5945] usb 4-1: device descriptor read/8, error -71 [ 181.465739][ T8338] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 181.481649][ T8338] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 181.505674][ T5945] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 181.521069][ T8338] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 181.544858][ T43] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 181.559345][ T5945] usb 4-1: device descriptor read/8, error -71 [ 181.567215][ T8338] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.694139][ T5945] usb usb4-port1: unable to enumerate USB device [ 181.747278][ T43] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 181.774176][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.803846][ T8338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.815429][ T43] usb 1-1: Product: syz [ 181.828696][ T43] usb 1-1: Manufacturer: syz [ 181.852286][ T43] usb 1-1: SerialNumber: syz [ 181.865863][ T8338] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.880078][ T43] usb 1-1: config 0 descriptor?? [ 181.909917][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 181.931691][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.939173][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.994787][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.002014][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.622658][ T5872] Bluetooth: hci5: command tx timeout [ 182.647199][ T8338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.145981][ T8473] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 183.187926][ T8474] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 183.227552][ T8473] /dev/rnullb0: Can't open blockdev [ 183.289556][ T8474] /dev/rnullb0: Can't open blockdev [ 183.360129][ T8483] /dev/rnullb0: Can't open blockdev [ 183.657360][ T8338] veth0_vlan: entered promiscuous mode [ 183.715033][ T8338] veth1_vlan: entered promiscuous mode [ 183.818598][ T8338] veth0_macvtap: entered promiscuous mode [ 183.870498][ T8338] veth1_macvtap: entered promiscuous mode [ 183.902655][ T5859] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 183.945806][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.008731][ T8338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.073439][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.103627][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.113108][ T5859] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 184.121425][ T5859] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 184.179894][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.206390][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.221670][ T5859] usb 2-1: config 220 has no interface number 2 [ 184.222221][ T1218] usb 1-1: USB disconnect, device number 41 [ 184.258013][ T5859] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 184.311456][ T5859] usb 2-1: config 220 interface 0 has no altsetting 0 [ 184.343244][ T5859] usb 2-1: config 220 interface 76 has no altsetting 0 [ 184.361532][ T5859] usb 2-1: config 220 interface 1 has no altsetting 0 [ 184.363105][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.397776][ T5859] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 184.406918][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.434096][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.446526][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.452779][ T5859] usb 2-1: Product: syz [ 184.463077][ T5859] usb 2-1: Manufacturer: syz [ 184.467408][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.467902][ T5859] usb 2-1: SerialNumber: syz [ 184.535320][ T8504] deleting an unspecified loop device is not supported. [ 184.668499][ T8508] /dev/rnullb0: Can't open blockdev [ 184.713729][ T5872] Bluetooth: hci5: command tx timeout [ 184.793308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 184.802567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 184.822855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 184.830742][ T8490] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 184.862712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 184.883649][ T8490] /dev/rnullb0: Can't open blockdev [ 184.992532][ T1218] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 185.004495][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 185.013848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 185.163882][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 10106, setting to 64 [ 185.193208][ T1218] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 185.206688][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.223244][ T1218] usb 4-1: Product: syz [ 185.234364][ T1218] usb 4-1: Manufacturer: syz [ 185.244350][ T1218] usb 4-1: SerialNumber: syz [ 185.258169][ T1218] usb 4-1: config 0 descriptor?? [ 185.374816][ T5926] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 185.532625][ T5926] usb 1-1: Using ep0 maxpacket: 32 [ 185.556744][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.630826][ T5926] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.756298][ T5926] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 185.786187][ T5926] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.844097][ T5926] usb 1-1: config 0 descriptor?? [ 185.885611][ T5926] hub 1-1:0.0: USB hub found [ 186.084868][ T5926] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 186.512269][ T5926] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1 [ 186.534418][ T5926] hid-generic 0003:046D:C31C.0007: probe with driver hid-generic failed with error -22 [ 186.559947][ T5859] usb 2-1: selecting invalid altsetting 0 [ 186.575909][ T5859] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 186.582955][ T5859] usb 2-1: No valid video chain found. [ 186.598701][ T5859] usb 2-1: selecting invalid altsetting 0 [ 186.607146][ T5859] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 186.621273][ T5859] usb 2-1: USB disconnect, device number 31 [ 186.643127][ T30] audit: type=1326 audit(1756707503.228:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8553 comm="syz.6.661" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e16b8ebe9 code=0x0 [ 186.695177][ T5872] Bluetooth: hci5: Unknown advertising packet type: 0x31 [ 186.709975][ T8564] /dev/rnullb0: Can't open blockdev [ 186.730358][ T8565] /dev/rnullb0: Can't open blockdev [ 186.782804][ T5872] Bluetooth: hci5: command tx timeout [ 187.039688][ T8572] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 187.049243][ T5908] usb 1-1: USB disconnect, device number 42 [ 187.300245][ T8580] netlink: 132 bytes leftover after parsing attributes in process `syz.6.665'. [ 187.324106][ T8579] netlink: 76 bytes leftover after parsing attributes in process `syz.6.665'. [ 188.270083][ T8610] /dev/rnullb0: Can't open blockdev [ 188.418303][ T1218] usb 4-1: USB disconnect, device number 30 [ 188.443473][ T5859] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 188.477411][ T8614] netlink: 14560 bytes leftover after parsing attributes in process `syz.6.676'. [ 188.506392][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 188.622605][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 188.630119][ T5859] usb 2-1: unable to get BOS descriptor or descriptor too short [ 188.639735][ T5859] usb 2-1: config 255 has an invalid interface number: 243 but max is 0 [ 188.648346][ T5859] usb 2-1: config 255 has no interface number 0 [ 188.658416][ T5859] usb 2-1: config 255 interface 243 has no altsetting 0 [ 188.674462][ T5859] usb 2-1: New USB device found, idVendor=5050, idProduct=8004, bcdDevice=80.4a [ 188.683867][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.691887][ T5859] usb 2-1: Product: syz [ 188.699859][ T5859] usb 2-1: Manufacturer: syz [ 188.704907][ T5859] usb 2-1: SerialNumber: syz [ 188.883961][ T8631] Scaler: ================= START STATUS ================= [ 188.891572][ T8631] Scaler: ================== END STATUS ================== [ 188.938028][ T5859] ftdi_sio 2-1:255.243: FTDI USB Serial Device converter detected [ 188.967044][ T5859] ftdi_sio ttyUSB0: unknown device type: 0x804a [ 188.967976][ T8633] netlink: 40 bytes leftover after parsing attributes in process `syz.6.682'. [ 188.975741][ T5859] usb 2-1: USB disconnect, device number 32 [ 188.986942][ T8633] tipc: Invalid UDP bearer configuration [ 188.988230][ T8633] tipc: Enabling of bearer rejected, failed to enable media [ 188.995069][ T5859] ftdi_sio 2-1:255.243: device disconnected [ 189.046384][ T8634] /dev/rnullb0: Can't open blockdev [ 189.572586][ T5859] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 189.733382][ T5859] usb 7-1: Using ep0 maxpacket: 8 [ 189.741514][ T5859] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.774398][ T5859] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 189.791408][ T5859] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.807301][ T5859] usb 7-1: config 0 descriptor?? [ 189.815186][ T5859] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 189.953177][ T5908] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 190.038070][ T8686] block nbd0: Attempted send on invalid socket [ 190.045486][ T8686] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.056861][ T8686] block nbd0: Attempted send on invalid socket [ 190.063775][ T8686] I/O error, dev nbd0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.074131][ T8686] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 190.086403][ T8686] block nbd0: Attempted send on invalid socket [ 190.094030][ T8686] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.104289][ T8686] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 190.114093][ T5908] usb 4-1: Using ep0 maxpacket: 32 [ 190.119878][ T8686] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 190.129629][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.141226][ T8686] UDF-fs: Scanning with blocksize 512 failed [ 190.148012][ T5908] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 190.158403][ T8686] block nbd0: Attempted send on invalid socket [ 190.165024][ T8686] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.174795][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.183585][ T8686] block nbd0: Attempted send on invalid socket [ 190.192378][ T5908] usb 4-1: config 0 descriptor?? [ 190.205845][ T8686] I/O error, dev nbd0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.220101][ T8686] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 190.230687][ T8686] block nbd0: Attempted send on invalid socket [ 190.237370][ T8686] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.253273][ T8686] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 190.263394][ T8686] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 190.271117][ T8686] UDF-fs: Scanning with blocksize 1024 failed [ 190.278419][ T8686] block nbd0: Attempted send on invalid socket [ 190.285030][ T8686] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.295557][ T8686] block nbd0: Attempted send on invalid socket [ 190.301885][ T8686] I/O error, dev nbd0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.312210][ T8686] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 190.322981][ T8686] block nbd0: Attempted send on invalid socket [ 190.329363][ T8686] I/O error, dev nbd0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.340991][ T8686] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 190.351399][ T8686] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 190.359489][ T8686] UDF-fs: Scanning with blocksize 2048 failed [ 190.367312][ T8686] block nbd0: Attempted send on invalid socket [ 190.374105][ T8686] I/O error, dev nbd0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 190.384423][ T8686] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 190.395577][ T8686] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 190.410561][ T8686] UDF-fs: warning (device nbd0): udf_load_vrs: No anchor found [ 190.421471][ T8686] UDF-fs: Scanning with blocksize 4096 failed [ 190.428103][ T8686] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 190.616208][ T5908] mcp2200 0003:04D8:00DF.0008: item fetching failed at offset 0/2 [ 190.631076][ T5908] mcp2200 0003:04D8:00DF.0008: can't parse reports [ 190.640182][ T5908] mcp2200 0003:04D8:00DF.0008: probe with driver mcp2200 failed with error -22 [ 190.834047][ T8677] /dev/rnullb0: Can't open blockdev [ 190.840459][ T5908] usb 4-1: USB disconnect, device number 31 [ 191.033755][ T5859] gspca_vc032x: reg_w err -71 [ 191.042645][ T5859] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 191.064620][ T5859] usb 7-1: USB disconnect, device number 2 [ 191.383330][ T43] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 191.560474][ T8696] cgroup: fork rejected by pids controller in /syz1 [ 191.642530][ T5946] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 191.653813][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 191.680229][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.701039][ T43] usb 2-1: New USB device found, idVendor=09da, idProduct=000a, bcdDevice= 0.00 [ 191.711202][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.726618][ T43] usb 2-1: config 0 descriptor?? [ 191.734121][ T8735] netlink: 124 bytes leftover after parsing attributes in process `syz.6.704'. [ 191.815995][ T5946] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 191.837431][ T5946] usb 4-1: config 0 has no interface number 0 [ 191.844146][ T5946] usb 4-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.855600][ T5946] usb 4-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.865989][ T5946] usb 4-1: config 0 interface 85 has no altsetting 0 [ 191.872952][ T5946] usb 4-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 191.882067][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.892921][ T5946] usb 4-1: config 0 descriptor?? [ 191.973145][ T8745] /dev/rnullb0: Can't open blockdev [ 192.142223][ T8696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.153208][ T8696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.177909][ T43] a4tech 0003:09DA:000A.0009: item fetching failed at offset 10/11 [ 192.194075][ T43] a4tech 0003:09DA:000A.0009: parse failed [ 192.200284][ T43] a4tech 0003:09DA:000A.0009: probe with driver a4tech failed with error -22 [ 192.262878][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 192.304033][ T5926] usb 2-1: USB disconnect, device number 33 [ 192.324613][ T5946] hid-led 0003:1D34:0004.000A: collection stack underflow [ 192.354570][ T5946] hid-led 0003:1D34:0004.000A: item 0 1 0 12 parsing failed [ 192.383449][ T5946] hid-led 0003:1D34:0004.000A: probe with driver hid-led failed with error -22 [ 192.424836][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 192.437890][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.449722][ T9] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 192.467598][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.486556][ T9] usb 7-1: config 0 descriptor?? [ 192.518451][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.530622][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.555667][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.564368][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.586871][ T8724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.615987][ T8724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.718647][ T9] isku 0003:1E7D:319C.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.6-1/input0 [ 192.788028][ T8886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.799586][ T9] isku 0003:1E7D:319C.000B: couldn't init struct isku_device [ 192.809310][ T9] isku 0003:1E7D:319C.000B: couldn't install keyboard [ 192.818108][ T8886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.840115][ T9] isku 0003:1E7D:319C.000B: probe with driver isku failed with error -71 [ 192.879509][ T9] usb 7-1: USB disconnect, device number 3 [ 192.903019][ T8885] fido_id[8885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 192.927754][ T8890] netlink: 'syz.6.713': attribute type 11 has an invalid length. [ 192.970887][ T1218] usb 4-1: USB disconnect, device number 32 [ 193.003441][ T5908] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 193.145311][ T5908] usb 1-1: device descriptor read/64, error -71 [ 193.212615][ T5926] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 193.372667][ T5926] usb 2-1: Using ep0 maxpacket: 32 [ 193.380232][ T5926] usb 2-1: config 2 has an invalid interface number: 84 but max is 0 [ 193.382640][ T5908] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 193.389337][ T5926] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 1 [ 193.405515][ T5926] usb 2-1: config 2 has no interface number 1 [ 193.414083][ T5926] usb 2-1: New USB device found, idVendor=0471, idProduct=0312, bcdDevice=33.92 [ 193.423388][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.431412][ T5926] usb 2-1: Product: syz [ 193.435791][ T5926] usb 2-1: Manufacturer: syz [ 193.440426][ T5926] usb 2-1: SerialNumber: syz [ 193.453406][ T5926] pwc: Philips PCVC750K (ToUCam Pro Scan) USB webcam detected. [ 193.522609][ T5908] usb 1-1: device descriptor read/64, error -71 [ 193.568205][ T8896] /dev/rnullb0: Can't open blockdev [ 193.633520][ T5908] usb usb1-port1: attempt power cycle [ 193.859649][ T8893] syzkaller1: entered promiscuous mode [ 193.868638][ T8893] syzkaller1: entered allmulticast mode [ 193.972657][ T5908] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 194.003104][ T5908] usb 1-1: device descriptor read/8, error -71 [ 194.179435][ T5926] pwc: send_video_command error -71 [ 194.186965][ T5926] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 194.196655][ T5926] Philips webcam 2-1:2.0: probe with driver Philips webcam failed with error -71 [ 194.210014][ T5926] usb 2-1: USB disconnect, device number 34 [ 194.252825][ T5908] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 194.277772][ T5908] usb 1-1: device descriptor read/8, error -71 [ 194.393723][ T5908] usb usb1-port1: unable to enumerate USB device [ 194.568467][ T8909] netlink: 'syz.3.720': attribute type 33 has an invalid length. [ 194.579780][ T8909] netlink: 164 bytes leftover after parsing attributes in process `syz.3.720'. [ 194.739038][ T8914] netlink: 140 bytes leftover after parsing attributes in process `syz.1.721'. [ 194.821580][ T8917] netlink: 20 bytes leftover after parsing attributes in process `syz.1.722'. [ 194.832134][ T8917] /dev/rnullb0: Can't open blockdev [ 195.101803][ T8924] /dev/rnullb0: Can't open blockdev [ 195.109051][ T8924] /dev/rnullb0: Can't open blockdev [ 195.412712][ T5908] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 195.574499][ T5908] usb 2-1: config 7 has an invalid interface number: 252 but max is 0 [ 195.590712][ T5908] usb 2-1: config 7 has no interface number 0 [ 195.603764][ T5908] usb 2-1: config 7 interface 252 altsetting 8 endpoint 0xF has invalid wMaxPacketSize 0 [ 195.623078][ T5908] usb 2-1: config 7 interface 252 has no altsetting 0 [ 195.640066][ T5908] usb 2-1: string descriptor 0 read error: -22 [ 195.648673][ T5908] usb 2-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 195.682518][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.699128][ T5908] idmouse 2-1:7.252: Unable to find bulk-in endpoint. [ 196.133596][ T8928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.202822][ T8928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.703273][ T9] usb 2-1: USB disconnect, device number 35 [ 196.851088][ T8959] /dev/rnullb0: Can't open blockdev [ 196.868410][ T8959] /dev/rnullb0: Can't open blockdev [ 197.246032][ T5908] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 197.272610][ T1218] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 197.317725][ T8980] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.739'. [ 197.346458][ T8980] openvswitch: netlink: Message has 512 unknown bytes. [ 197.418392][ T5908] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 197.438041][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.451494][ T1218] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 197.459271][ T5908] usb 2-1: Product: syz [ 197.472483][ T5908] usb 2-1: Manufacturer: syz [ 197.476818][ T1218] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.482836][ T5908] usb 2-1: SerialNumber: syz [ 197.503449][ T1218] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 197.509296][ T5908] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 197.533943][ T1218] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= d.cd [ 197.552857][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.561419][ T5859] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 197.588102][ T1218] usb 4-1: config 0 descriptor?? [ 197.621068][ T8985] 9p: Bad value for 'rfdno' [ 197.734406][ T8987] netlink: 'syz.0.741': attribute type 6 has an invalid length. [ 198.005180][ T1218] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 198.025345][ T1218] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 198.047195][ T1218] holtek_kbd 0003:04D9:A055.000C: unknown main item tag 0x0 [ 198.062549][ T1218] holtek_kbd 0003:04D9:A055.000C: item fetching failed at offset 5/7 [ 198.071166][ T1218] holtek_kbd 0003:04D9:A055.000C: probe with driver holtek_kbd failed with error -22 [ 198.321025][ T1218] usb 2-1: USB disconnect, device number 36 [ 198.335700][ T5926] usb 4-1: USB disconnect, device number 33 [ 198.626496][ T5859] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 198.642648][ T5859] ath9k_htc: Failed to initialize the device [ 198.662508][ T1218] usb 2-1: ath9k_htc: USB layer deinitialized [ 198.936073][ T9019] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 198.944504][ T9019] /dev/rnullb0: Can't open blockdev [ 199.001647][ T9023] wlan1 speed is unknown, defaulting to 1000 [ 199.014489][ T9023] wlan1 speed is unknown, defaulting to 1000 [ 199.021050][ T9023] wlan1 speed is unknown, defaulting to 1000 [ 199.107206][ T9031] /dev/rnullb0: Can't open blockdev [ 199.187617][ T9035] /dev/rnullb0: Can't open blockdev [ 199.509159][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.515679][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.600839][ T9023] infiniband syz0: set active [ 199.605784][ T43] wlan1 speed is unknown, defaulting to 1000 [ 199.656041][ T9023] infiniband syz0: added wlan1 [ 199.721283][ T9023] RDS/IB: syz0: added [ 199.733380][ T9023] smc: adding ib device syz0 with port count 1 [ 199.752256][ T9023] smc: ib device syz0 port 1 has pnetid [ 199.772348][ T5859] wlan1 speed is unknown, defaulting to 1000 [ 199.781916][ T9023] wlan1 speed is unknown, defaulting to 1000 [ 200.150139][ T9023] wlan1 speed is unknown, defaulting to 1000 [ 200.495950][ T9023] wlan1 speed is unknown, defaulting to 1000 [ 200.592723][ T43] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 200.744765][ T43] usb 4-1: device descriptor read/64, error -71 [ 200.769921][ T9023] wlan1 speed is unknown, defaulting to 1000 [ 200.892686][ T5859] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 200.941269][ T9023] wlan1 speed is unknown, defaulting to 1000 [ 201.002668][ T43] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 201.032684][ T5859] usb 2-1: device descriptor read/64, error -71 [ 201.152625][ T43] usb 4-1: device descriptor read/64, error -71 [ 201.163636][ T9097] comedi comedi0: dt2801: I/O port conflict (0x4f27,2) [ 201.218420][ T9103] /dev/rnullb0: Can't open blockdev [ 201.224788][ T9103] /dev/rnullb0: Can't open blockdev [ 201.230745][ T9103] /dev/rnullb0: Can't open blockdev [ 201.246542][ T9103] /dev/rnullb0: Can't open blockdev [ 201.264580][ T43] usb usb4-port1: attempt power cycle [ 201.265802][ T9103] /dev/rnullb0: Can't open blockdev [ 201.278694][ T9103] /dev/rnullb0: Can't open blockdev [ 201.284766][ T9103] /dev/rnullb0: Can't open blockdev [ 201.290710][ T9103] /dev/rnullb0: Can't open blockdev [ 201.297318][ T9103] /dev/rnullb0: Can't open blockdev [ 201.305806][ T9103] /dev/rnullb0: Can't open blockdev [ 201.311666][ T9103] /dev/rnullb0: Can't open blockdev [ 201.312787][ T5859] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 201.320958][ T9103] /dev/rnullb0: Can't open blockdev [ 201.331073][ T9103] /dev/rnullb0: Can't open blockdev [ 201.338968][ T9103] /dev/rnullb0: Can't open blockdev [ 201.346030][ T9103] /dev/rnullb0: Can't open blockdev [ 201.355053][ T9103] /dev/rnullb0: Can't open blockdev [ 201.361014][ T9103] /dev/rnullb0: Can't open blockdev [ 201.367335][ T9103] /dev/rnullb0: Can't open blockdev [ 201.375697][ T9103] /dev/rnullb0: Can't open blockdev [ 201.381707][ T9103] /dev/rnullb0: Can't open blockdev [ 201.388591][ T9103] /dev/rnullb0: Can't open blockdev [ 201.397083][ T9103] /dev/rnullb0: Can't open blockdev [ 201.404273][ T9103] /dev/rnullb0: Can't open blockdev [ 201.410313][ T9103] /dev/rnullb0: Can't open blockdev [ 201.418123][ T9103] /dev/rnullb0: Can't open blockdev [ 201.426073][ T9103] /dev/rnullb0: Can't open blockdev [ 201.431975][ T9103] /dev/rnullb0: Can't open blockdev [ 201.438285][ T9103] /dev/rnullb0: Can't open blockdev [ 201.444290][ T9103] /dev/rnullb0: Can't open blockdev [ 201.450144][ T9103] /dev/rnullb0: Can't open blockdev [ 201.458855][ T9103] /dev/rnullb0: Can't open blockdev [ 201.466711][ T9103] /dev/rnullb0: Can't open blockdev [ 201.472773][ T5859] usb 2-1: device descriptor read/64, error -71 [ 201.472782][ T9103] /dev/rnullb0: Can't open blockdev [ 201.515047][ T9107] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 201.522255][ T9107] /dev/rnullb0: Can't open blockdev [ 201.593016][ T5859] usb usb2-port1: attempt power cycle [ 201.610773][ T43] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 201.650917][ T43] usb 4-1: device descriptor read/8, error -71 [ 201.902580][ T43] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 201.933504][ T43] usb 4-1: device descriptor read/8, error -71 [ 201.962536][ T5859] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 201.972766][ T1218] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 201.993878][ T5859] usb 2-1: device descriptor read/8, error -71 [ 202.042882][ T43] usb usb4-port1: unable to enumerate USB device [ 202.123813][ T1218] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 202.135477][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 202.146680][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 202.156511][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 202.170831][ T1218] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 202.180027][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.188230][ T1218] usb 1-1: Product: syz [ 202.192382][ T1218] usb 1-1: Manufacturer: syz [ 202.197105][ T1218] usb 1-1: SerialNumber: syz [ 202.203112][ T1218] usb 1-1: config 0 descriptor?? [ 202.242737][ T5859] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 202.262991][ T5859] usb 2-1: device descriptor read/8, error -71 [ 202.292496][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 202.373303][ T5859] usb usb2-port1: unable to enumerate USB device [ 202.411628][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.421286][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.431554][ T9114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.440432][ T9114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.462552][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 202.467797][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.474777][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.482510][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.488790][ T10] usb 7-1: config 0 has an invalid interface number: 232 but max is 0 [ 202.497404][ T10] usb 7-1: config 0 has no interface number 0 [ 202.503690][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.510368][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.516911][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.523908][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.530293][ T10] usb 7-1: New USB device found, idVendor=0403, idProduct=fc82, bcdDevice=48.ee [ 202.539465][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.545675][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.553943][ T10] usb 7-1: Product: syz [ 202.558190][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.564267][ T10] usb 7-1: Manufacturer: syz [ 202.568919][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.574979][ T10] usb 7-1: SerialNumber: syz [ 202.580645][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.588060][ T10] usb 7-1: config 0 descriptor?? [ 202.593146][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.599392][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.605800][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.612834][ T10] ftdi_sio 7-1:0.232: FTDI USB Serial Device converter detected [ 202.621104][ T10] ftdi_sio ttyUSB0: unknown device type: 0x48ee [ 202.627773][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.634363][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.641622][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.648043][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.654413][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.660697][ T1218] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 202.666843][ T1218] input input17: Timeout waiting for response from device. [ 202.676297][ T1218] usb 1-1: USB disconnect, device number 47 [ 202.820143][ T9118] /dev/rnullb0: Can't open blockdev [ 202.826379][ T5859] usb 7-1: USB disconnect, device number 4 [ 202.833312][ T5859] ftdi_sio 7-1:0.232: device disconnected [ 203.292871][ T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 203.464152][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 203.476590][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 203.502792][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 203.523427][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 203.533403][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 203.550477][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 203.573033][ T10] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 203.586052][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.594200][ T10] usb 1-1: Product: syz [ 203.598383][ T10] usb 1-1: Manufacturer: syz [ 203.605350][ T10] usb 1-1: SerialNumber: syz [ 203.616669][ T10] usb 1-1: config 0 descriptor?? [ 204.204638][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 204.210710][ T10] input input18: Device does not respond to id packet M [ 204.233638][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 204.239701][ T10] input input18: Device does not respond to id packet P [ 204.262745][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 204.268798][ T10] input input18: Device does not respond to id packet B [ 204.288060][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 204.295741][ T10] input input18: Device does not respond to id packet N [ 204.304914][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 204.323861][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 204.339020][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 204.352842][ T10] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 204.359251][ T10] iforce 1-1:0.0: usb_submit_urb failed -90 [ 204.369114][ T10] iforce 1-1:0.0: usb_submit_urb failed -90 [ 204.383579][ T10] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 204.432765][ T10] usb 1-1: USB disconnect, device number 48 [ 204.568757][ T9171] /dev/rnullb0: Can't open blockdev [ 204.579037][ T9172] /dev/rnullb0: Can't open blockdev [ 204.851518][ T9184] syzkaller1: entered promiscuous mode [ 204.858263][ T9184] syzkaller1: entered allmulticast mode [ 205.142639][ T43] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 205.307072][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 205.316280][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.324609][ T43] usb 1-1: Product: syz [ 205.328790][ T43] usb 1-1: Manufacturer: syz [ 205.333536][ T43] usb 1-1: SerialNumber: syz [ 205.343775][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 205.361724][ T5859] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 205.829245][ T43] usb 1-1: USB disconnect, device number 49 [ 206.382858][ T5859] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 206.389933][ T5859] ath9k_htc: Failed to initialize the device [ 206.397209][ T43] usb 1-1: ath9k_htc: USB layer deinitialized [ 260.944851][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.951557][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 274.766289][ T9204] /dev/rnullb0: Can't open blockdev [ 274.782116][ T9209] /dev/rnullb0: Can't open blockdev [ 275.262621][ T1218] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 275.284176][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 275.459921][ T5872] Bluetooth: hci5: link tx timeout [ 275.465404][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 275.470602][ T5872] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 275.478640][ T1218] usb 1-1: Using ep0 maxpacket: 16 [ 275.490958][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.512388][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 275.531835][ T10] usb 7-1: config 2 has an invalid interface number: 227 but max is 0 [ 275.553008][ T1218] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.564481][ T10] usb 7-1: config 2 has no interface number 0 [ 275.574471][ T1218] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 275.592930][ T10] usb 7-1: config 2 interface 227 has no altsetting 0 [ 275.626622][ T10] usb 7-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=60.04 [ 275.647563][ T1218] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 275.663683][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.681984][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.693281][ T10] usb 7-1: Product: syz [ 275.703863][ T10] usb 7-1: Manufacturer: syz [ 275.714965][ T10] usb 7-1: SerialNumber: syz [ 275.733391][ T1218] usb 1-1: config 0 descriptor?? [ 275.813363][ T9237] /dev/rnullb0: Can't open blockdev [ 275.915038][ T9239] /dev/rnullb0: Can't open blockdev [ 276.036599][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.068028][ T9240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.091871][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.120109][ T9240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.141920][ T9220] /dev/rnullb0: Can't open blockdev [ 276.160804][ T9220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.181330][ T1218] microsoft 0003:045E:07DA.000D: report is too long [ 276.200742][ T9220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.219899][ T1218] microsoft 0003:045E:07DA.000D: item 0 4 0 8 parsing failed [ 276.249747][ T1218] microsoft 0003:045E:07DA.000D: parse failed [ 276.277261][ T1218] microsoft 0003:045E:07DA.000D: probe with driver microsoft failed with error -22 [ 276.385276][ T10] usb 7-1: USB disconnect, device number 5 [ 277.592677][ T5872] Bluetooth: hci5: command 0x0406 tx timeout [ 277.924072][ T9266] /dev/rnullb0: Can't open blockdev [ 278.134601][ T9277] wlan1 speed is unknown, defaulting to 1000 [ 278.262599][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 278.295420][ T9283] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 278.337289][ T9283] /dev/rnullb0: Can't open blockdev [ 278.452681][ T10] usb 4-1: device descriptor read/64, error -71 [ 278.619868][ T1218] usb 1-1: USB disconnect, device number 50 [ 278.707694][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 278.883726][ T10] usb 4-1: device descriptor read/64, error -71 [ 279.002633][ T10] usb usb4-port1: attempt power cycle [ 279.016281][ T9302] binder: binder_mmap: 9301 200000001000-20000000b000 bad vm_flags failed -1 [ 279.108105][ T9304] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 279.124035][ T9304] /dev/rnullb0: Can't open blockdev [ 279.197076][ T9311] netlink: 'syz.6.815': attribute type 6 has an invalid length. [ 279.212958][ T1218] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 279.260724][ T9314] netlink: 244 bytes leftover after parsing attributes in process `syz.6.815'. [ 279.364108][ T10] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 279.371837][ T1218] usb 1-1: device descriptor read/64, error -71 [ 279.394131][ T10] usb 4-1: device descriptor read/8, error -71 [ 279.634178][ T10] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 279.641901][ T1218] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 279.649829][ T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 279.672895][ T10] usb 4-1: device descriptor read/8, error -71 [ 279.783027][ T1218] usb 1-1: device descriptor read/64, error -71 [ 279.800674][ T10] usb usb4-port1: unable to enumerate USB device [ 279.808519][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 279.832462][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 279.863041][ T9] usb 7-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 279.872207][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.887604][ T9323] wlan1 speed is unknown, defaulting to 1000 [ 279.891868][ T9] usb 7-1: config 0 descriptor?? [ 279.899763][ T9318] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 279.923077][ T1218] usb usb1-port1: attempt power cycle [ 280.116806][ T9318] program syz.6.817 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.192876][ T9318] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 280.438103][ T9] hid-udraw 0003:20D6:CB17.000E: item fetching failed at offset 5/7 [ 280.446726][ T9] hid-udraw 0003:20D6:CB17.000E: parse failed [ 280.453129][ T1218] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 280.462627][ T9] hid-udraw 0003:20D6:CB17.000E: probe with driver hid-udraw failed with error -22 [ 280.483745][ T1218] usb 1-1: device descriptor read/8, error -71 [ 280.649201][ T9318] netlink: 14568 bytes leftover after parsing attributes in process `syz.6.817'. [ 280.733464][ T1218] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 280.768490][ T1218] usb 1-1: device descriptor read/8, error -71 [ 280.853401][ T9318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.862099][ T9318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.886409][ T1218] usb usb1-port1: unable to enumerate USB device [ 281.248126][ T9339] /dev/rnullb0: Can't open blockdev [ 281.366183][ T9341] /dev/rnullb0: Can't open blockdev [ 281.684758][ T9346] syzkaller1: entered promiscuous mode [ 281.700765][ T9346] syzkaller1: entered allmulticast mode [ 282.004379][ T9362] /dev/rnullb0: Can't open blockdev [ 282.156324][ T9369] /dev/rnullb0: Can't open blockdev [ 282.302561][ T5859] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 282.402828][ T5945] usb 7-1: USB disconnect, device number 6 [ 282.464279][ T5859] usb 2-1: Using ep0 maxpacket: 16 [ 282.561158][ T5859] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 282.570577][ T5859] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.588869][ T5859] usb 2-1: Product: syz [ 282.593395][ T5859] usb 2-1: Manufacturer: syz [ 282.598025][ T5859] usb 2-1: SerialNumber: syz [ 282.623467][ T5859] r8152-cfgselector 2-1: Unknown version 0x0000 [ 282.634833][ T9385] /dev/rnullb0: Can't open blockdev [ 282.639903][ T5859] r8152-cfgselector 2-1: config 0 descriptor?? [ 282.774760][ T5945] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 282.775461][ T9387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.836'. [ 282.893515][ T5859] r8152-cfgselector 2-1: USB disconnect, device number 41 [ 282.963270][ T5945] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 282.977100][ T5945] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 282.991887][ T5945] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 283.029458][ T5945] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 283.050063][ T5945] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.060179][ T5945] usb 7-1: Product: syz [ 283.067217][ T5945] usb 7-1: Manufacturer: syz [ 283.071930][ T5945] usb 7-1: SerialNumber: syz [ 283.079080][ T5945] usb 7-1: config 0 descriptor?? [ 283.085511][ T9380] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 283.095329][ T9380] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 283.124530][ T5945] usb 7-1: ucan: probing device on interface #0 [ 283.268826][ T9399] /dev/rnullb0: Can't open blockdev [ 283.562191][ T9380] input: syz0 as /devices/virtual/input/input19 [ 283.664293][ T5945] usb 7-1: ucan: device reported invalid device info [ 283.671460][ T5945] usb 7-1: ucan: probe failed; try to update the device firmware [ 283.888671][ T1218] usb 7-1: USB disconnect, device number 7 [ 283.952487][ T5945] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 284.105102][ T5945] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.123760][ T5945] usb 4-1: config 0 has no interface number 0 [ 284.130236][ T5945] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 284.130641][ T9419] netlink: 'syz.1.843': attribute type 1 has an invalid length. [ 284.153055][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.165269][ T5945] usb 4-1: config 0 descriptor?? [ 284.172906][ T5945] usb 4-1: selecting invalid altsetting 1 [ 284.187541][ T5945] dvb_ttusb_budget: ttusb_init_controller: error [ 284.195545][ T5945] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 284.290258][ T5945] DVB: Unable to find symbol cx22700_attach() [ 284.325473][ T5945] DVB: Unable to find symbol tda10046_attach() [ 284.331905][ T5945] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 284.380726][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.393738][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.405733][ T9414] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.415864][ T9414] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.426861][ T1218] usb 4-1: USB disconnect, device number 42 [ 284.513856][ T5908] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 284.531891][ T9430] /dev/rnullb0: Can't open blockdev [ 284.683868][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 284.708026][ T5908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 284.732643][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.752476][ T5908] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 284.781066][ T5908] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16 [ 284.791100][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.799591][ T5908] usb 2-1: Product: syz [ 284.806838][ T5908] usb 2-1: Manufacturer: syz [ 284.811466][ T5908] usb 2-1: SerialNumber: syz [ 284.818699][ T5908] usb 2-1: config 0 descriptor?? [ 284.825643][ T5908] kvaser_usb 2-1:0.0: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 284.842640][ T5908] kvaser_usb 2-1:0.0: error -EMSGSIZE: Failed to initialize card [ 284.850579][ T5908] kvaser_usb 2-1:0.0: probe with driver kvaser_usb failed with error -90 [ 285.040653][ T9423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.054458][ T9423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.104545][ T24] usb 2-1: USB disconnect, device number 42 [ 285.118425][ T5908] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 285.125917][ T9464] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 285.187341][ T9469] netlink: 'syz.1.860': attribute type 4 has an invalid length. [ 285.198095][ T9468] netlink: 'syz.1.860': attribute type 4 has an invalid length. [ 285.294506][ T5908] usb 1-1: Using ep0 maxpacket: 32 [ 285.310106][ T5908] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 285.320887][ T5908] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 285.361258][ T5908] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 285.387574][ T5908] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 285.402669][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 285.424239][ T5908] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 285.450458][ T5908] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 285.468953][ T5908] usb 1-1: Product: syz [ 285.479670][ T5908] usb 1-1: Manufacturer: syz [ 285.489139][ T5908] usb 1-1: SerialNumber: syz [ 285.502072][ T9480] /dev/rnullb0: Can't open blockdev [ 285.513224][ T5908] usb 1-1: config 0 descriptor?? [ 285.524411][ T5908] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 285.539274][ T5908] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 286.039805][ T9] usb 1-1: USB disconnect, device number 55 [ 286.053168][ T5908] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 286.074119][ T9] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 286.089499][ T9504] netlink: 20 bytes leftover after parsing attributes in process `syz.1.868'. [ 286.111771][ T9504] batadv_slave_0: entered promiscuous mode [ 286.141895][ T9504] /dev/rnullb0: Can't open blockdev [ 286.152387][ T9502] batadv_slave_0: left promiscuous mode [ 286.159812][ T9508] /dev/rnullb0: Can't open blockdev [ 286.215832][ T9512] /dev/rnullb0: Can't open blockdev [ 286.228212][ T9513] /dev/rnullb0: Can't open blockdev [ 286.235892][ T5908] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.248015][ T5908] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 286.259053][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.284503][ T5908] usb 4-1: config 0 descriptor?? [ 286.320410][ T9515] netlink: 7551 bytes leftover after parsing attributes in process `syz.1.872'. [ 286.549651][ T9522] Invalid ELF header magic: != ELF [ 286.572533][ T5908] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 286.620252][ T9527] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 286.628816][ T9526] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 286.629083][ T5872] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 286.680358][ T24] usb 4-1: USB disconnect, device number 43 [ 286.726224][ T5908] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 286.734643][ T5908] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 286.745189][ T5908] usb 2-1: config 8 has no interface number 0 [ 286.751848][ T5908] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 286.763474][ T5908] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 286.773401][ T5908] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 286.786702][ T5908] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 286.795936][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.804116][ T5859] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 286.821147][ T5908] usb 2-1: NFC: intf ffff888071bbe000 id ffffffff8ef6c9e0 [ 286.932652][ T5859] usb 7-1: device descriptor read/64, error -71 [ 287.021256][ T9] usb 2-1: USB disconnect, device number 43 [ 287.140231][ T9537] /dev/rnullb0: Can't open blockdev [ 287.184286][ T5859] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 287.352161][ T5859] usb 7-1: device descriptor read/64, error -71 [ 287.512508][ T5859] usb usb7-port1: attempt power cycle [ 287.962630][ T5859] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 287.984108][ T5859] usb 7-1: device descriptor read/8, error -71 [ 288.062550][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 288.182564][ T5945] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 288.222792][ T5859] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 288.227155][ T9] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 288.238972][ T9] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 288.243204][ T5859] usb 7-1: device descriptor read/8, error -71 [ 288.247991][ T9] usb 4-1: config 220 has an invalid descriptor of length 229, skipping remainder of the config [ 288.265512][ T9] usb 4-1: config 220 has no interface number 2 [ 288.271788][ T9] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 288.285014][ T9] usb 4-1: config 220 interface 0 has no altsetting 0 [ 288.292578][ T9] usb 4-1: config 220 interface 76 has no altsetting 0 [ 288.299459][ T9] usb 4-1: config 220 interface 1 has no altsetting 0 [ 288.309321][ T9] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 288.318417][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.326485][ T9] usb 4-1: Product: syz [ 288.330658][ T9] usb 4-1: Manufacturer: syz [ 288.332580][ T5945] usb 1-1: Using ep0 maxpacket: 8 [ 288.335280][ T9] usb 4-1: SerialNumber: syz [ 288.346338][ T5945] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 288.356907][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.365848][ T5859] usb usb7-port1: unable to enumerate USB device [ 288.372304][ T5945] usb 1-1: Product: syz [ 288.378824][ T5945] usb 1-1: Manufacturer: syz [ 288.383674][ T5945] usb 1-1: SerialNumber: syz [ 288.391316][ T5945] usb 1-1: config 0 descriptor?? [ 288.399524][ T5945] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 288.519136][ T9569] binder: 9568:9569 ioctl c0306201 200000000640 returned -22 [ 288.675545][ T5945] gspca_sonixj: reg_w1 err -71 [ 288.683245][ T5945] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 288.700507][ T5945] usb 1-1: USB disconnect, device number 56 [ 288.763499][ T10] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 288.790738][ T9] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 288.803294][ T9] usb 4-1: No valid video chain found. [ 288.810307][ T9] usb 4-1: selecting invalid altsetting 0 [ 288.846738][ T9581] Bluetooth: MGMT ver 1.23 [ 288.852909][ T9] usb 4-1: selecting invalid altsetting 0 [ 288.858678][ T9] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 288.894383][ T10] usb 2-1: device descriptor read/64, error -71 [ 288.916247][ T9] usb 4-1: USB disconnect, device number 44 [ 289.144121][ T10] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 289.282630][ T10] usb 2-1: device descriptor read/64, error -71 [ 289.302695][ T5945] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 289.392839][ T10] usb usb2-port1: attempt power cycle [ 289.463403][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 289.470109][ T5945] usb 1-1: config 0 has an invalid interface number: 54 but max is 0 [ 289.480328][ T5945] usb 1-1: config 0 has no interface number 0 [ 289.502350][ T5945] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 289.515345][ T5945] usb 1-1: config 0 interface 54 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 289.526298][ T5945] usb 1-1: config 0 interface 54 has no altsetting 0 [ 289.535560][ T5945] usb 1-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice=46.42 [ 289.547059][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.555698][ T5945] usb 1-1: Product: syz [ 289.560097][ T5945] usb 1-1: Manufacturer: syz [ 289.583677][ T5945] usb 1-1: SerialNumber: syz [ 289.594892][ T5945] usb 1-1: config 0 descriptor?? [ 289.600939][ T9597] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.611110][ T9597] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 289.742799][ T10] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 289.773074][ T10] usb 2-1: device descriptor read/8, error -71 [ 289.831224][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.851354][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.014195][ T10] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 290.053804][ T10] usb 2-1: device descriptor read/8, error -71 [ 290.124939][ T9611] netlink: 48 bytes leftover after parsing attributes in process `syz.3.897'. [ 290.172908][ T10] usb usb2-port1: unable to enumerate USB device [ 290.408439][ T9614] /dev/rnullb0: Can't open blockdev [ 291.945713][ T9648] /dev/rnullb0: Can't open blockdev [ 292.103307][ T5945] ums_eneub6250 1-1:0.54: USB Mass Storage device detected [ 292.119906][ T5945] scsi host1: usb-storage 1-1:0.54 [ 292.147441][ T9661] /dev/rnullb0: Can't open blockdev [ 292.201950][ T5945] ums_eneub6250 1-1:0.54: probe with driver ums_eneub6250 failed with error 3 [ 292.246080][ T5945] usb 1-1: USB disconnect, device number 57 [ 292.540385][ T9691] syzkaller1: entered allmulticast mode [ 292.552789][ T10] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 292.725960][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 292.734986][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.748492][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 292.762678][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0057, bcdDevice= 0.40 [ 292.772135][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.782976][ T10] usb 4-1: Product: syz [ 292.787234][ T10] usb 4-1: SerialNumber: syz [ 292.822619][ T5945] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 292.915764][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 292.925985][ T9] usb 2-1: config 0 has no interface number 0 [ 292.933618][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 292.945934][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.952520][ T5945] usb 1-1: device descriptor read/64, error -71 [ 292.961716][ T9] usb 2-1: config 0 descriptor?? [ 292.978308][ T9] cp210x 2-1:0.1: cp210x converter detected [ 292.984924][ T9698] /dev/rnullb0: Can't open blockdev [ 292.992352][ T9699] /dev/rnullb0: Can't open blockdev [ 293.021109][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 293.033789][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 293.047642][ T10] usb 4-1: USB disconnect, device number 45 [ 293.192998][ T5945] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 293.256723][ T9704] /dev/sg0: Can't lookup blockdev [ 293.322497][ T5945] usb 1-1: device descriptor read/64, error -71 [ 293.358809][ T9709] /dev/rnullb0: Can't open blockdev [ 293.386478][ T9] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 293.432715][ T5945] usb usb1-port1: attempt power cycle [ 293.468096][ T5872] Bluetooth: hci5: unexpected event for opcode 0x0c5b [ 293.550550][ T9715] /dev/rnullb0: Can't open blockdev [ 293.603043][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 293.772566][ T5945] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 293.793056][ T5945] usb 1-1: device descriptor read/8, error -71 [ 293.828406][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.837309][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.858802][ T9] usb 2-1: USB disconnect, device number 48 [ 293.868637][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 293.872539][ T5859] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 293.887132][ T9] cp210x 2-1:0.1: device disconnected [ 294.034516][ T5945] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 294.052844][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.069869][ T5859] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 294.079739][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.079854][ T5945] usb 1-1: device descriptor read/8, error -71 [ 294.097248][ T5859] usb 4-1: config 0 descriptor?? [ 294.217000][ T5945] usb usb1-port1: unable to enumerate USB device [ 294.252617][ T9] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 294.307166][ T5859] usbhid 4-1:0.0: can't add hid device: -71 [ 294.318794][ T5859] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 294.337236][ T5859] usb 4-1: USB disconnect, device number 46 [ 294.426770][ T9] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 294.452529][ T9] usb 2-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 294.461663][ T9] usb 2-1: config 220 interface 0 has no altsetting 0 [ 294.471277][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 294.492486][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.500539][ T9] usb 2-1: Product: syz [ 294.513142][ T9] usb 2-1: Manufacturer: syz [ 294.517785][ T9] usb 2-1: SerialNumber: syz [ 294.961208][ T9] usb 2-1: Found UVC 0.00 device syz (8086:0b07) [ 294.973689][ T9] usb 2-1: No valid video chain found. [ 294.984237][ T9] usb 2-1: USB disconnect, device number 49 [ 295.262611][ T5859] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 295.281920][ T9743] /dev/rnullb0: Can't open blockdev [ 295.434638][ T5859] usb 7-1: Using ep0 maxpacket: 16 [ 295.446250][ T9755] ================================================================== [ 295.454379][ T9755] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2cf2/0x5400 [ 295.462311][ T9755] Read of size 1 at addr ffff88804e9131f0 by task syz.1.941/9755 [ 295.470063][ T9755] [ 295.472435][ T9755] CPU: 1 UID: 0 PID: 9755 Comm: syz.1.941 Not tainted syzkaller #0 PREEMPT(full) [ 295.472460][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.472478][ T9755] Call Trace: [ 295.472486][ T9755] [ 295.472493][ T9755] dump_stack_lvl+0x189/0x250 [ 295.472529][ T9755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 295.472559][ T9755] ? lock_release+0x4b/0x3e0 [ 295.472581][ T9755] ? __virt_addr_valid+0x4a5/0x5c0 [ 295.472611][ T9755] print_report+0xca/0x240 [ 295.472630][ T9755] ? xfrm_state_find+0x2cf2/0x5400 [ 295.472657][ T9755] kasan_report+0x118/0x150 [ 295.472677][ T9755] ? xfrm_state_find+0x2cf2/0x5400 [ 295.472709][ T9755] xfrm_state_find+0x2cf2/0x5400 [ 295.472749][ T9755] ? xfrm_state_find+0x1da/0x5400 [ 295.472780][ T9755] ? __pfx_xfrm_state_find+0x10/0x10 [ 295.472809][ T9755] ? lock_release+0x4b/0x3e0 [ 295.472826][ T9755] ? lock_release+0x4b/0x3e0 [ 295.472849][ T9755] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 295.472881][ T9755] ? __ip_dev_find+0xa2/0x4e0 [ 295.472907][ T9755] ? rcu_is_watching+0x15/0xb0 [ 295.472930][ T9755] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 295.472954][ T9755] ? rcu_is_watching+0x15/0xb0 [ 295.472976][ T9755] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 295.472995][ T9755] ? rcu_is_watching+0x15/0xb0 [ 295.473017][ T9755] ? rcu_is_watching+0x15/0xb0 [ 295.473038][ T9755] ? lock_release+0x4b/0x3e0 [ 295.473057][ T9755] ? xfrm_selector_match+0xbcf/0x1140 [ 295.473088][ T9755] ? lock_release+0x4b/0x3e0 [ 295.473107][ T9755] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 295.473130][ T9755] ? rcu_is_watching+0x15/0xb0 [ 295.473150][ T9755] ? xfrm_expand_policies+0x41f/0x6a0 [ 295.473173][ T9755] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 295.473307][ T9755] ? ip_route_output_key_hash+0xde/0x2e0 [ 295.473335][ T9755] ? ip_route_output_key_hash+0x24e/0x2e0 [ 295.473355][ T9755] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 295.473376][ T9755] ? rcuref_put+0x1b7/0x210 [ 295.473393][ T9755] ? __pfx_rcuref_put+0x10/0x10 [ 295.473502][ T9755] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 295.473532][ T9755] xfrm_lookup_route+0x3c/0x1c0 [ 295.473555][ T9755] __ip4_datagram_connect+0x9a5/0x1270 [ 295.473595][ T9755] __ip6_datagram_connect+0x9f0/0x1150 [ 295.473624][ T9755] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 295.473648][ T9755] ? __local_bh_enable_ip+0x12d/0x1c0 [ 295.473676][ T9755] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 295.473702][ T9755] ip6_datagram_connect_v6_only+0x63/0xa0 [ 295.473732][ T9755] __sys_connect+0x316/0x440 [ 295.473759][ T9755] ? __pfx___sys_connect+0x10/0x10 [ 295.473801][ T9755] ? rcu_is_watching+0x15/0xb0 [ 295.473831][ T9755] __x64_sys_connect+0x7a/0x90 [ 295.473858][ T9755] do_syscall_64+0xfa/0xfa0 [ 295.473900][ T9755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.473920][ T9755] ? clear_bhb_loop+0x60/0xb0 [ 295.473955][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.473995][ T9755] RIP: 0033:0x7f438898ebe9 [ 295.474026][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.474045][ T9755] RSP: 002b:00007f43898ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 295.474071][ T9755] RAX: ffffffffffffffda RBX: 00007f4388bc5fa0 RCX: 00007f438898ebe9 [ 295.474090][ T9755] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 295.474108][ T9755] RBP: 00007f4388a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 295.474124][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.474149][ T9755] R13: 00007f4388bc6038 R14: 00007f4388bc5fa0 R15: 00007ffd462e4738 [ 295.474272][ T9755] [ 295.474280][ T9755] [ 295.828956][ T9755] Allocated by task 8124: [ 295.833286][ T9755] kasan_save_track+0x3e/0x80 [ 295.837990][ T9755] __kasan_slab_alloc+0x6c/0x80 [ 295.842853][ T9755] kmem_cache_alloc_noprof+0x1ad/0x390 [ 295.848325][ T9755] xfrm_state_alloc+0x24/0x2f0 [ 295.853095][ T9755] __find_acq_core+0x8a7/0x1c00 [ 295.857954][ T9755] xfrm_find_acq+0x78/0xa0 [ 295.862370][ T9755] xfrm_alloc_userspi+0x6b3/0xc90 [ 295.867408][ T9755] xfrm_user_rcv_msg+0x7a3/0xab0 [ 295.872353][ T9755] netlink_rcv_skb+0x205/0x470 [ 295.877127][ T9755] xfrm_netlink_rcv+0x79/0x90 [ 295.881808][ T9755] netlink_unicast+0x82f/0x9e0 [ 295.886577][ T9755] netlink_sendmsg+0x805/0xb30 [ 295.891348][ T9755] __sock_sendmsg+0x21c/0x270 [ 295.896057][ T9755] ____sys_sendmsg+0x505/0x830 [ 295.900831][ T9755] ___sys_sendmsg+0x21f/0x2a0 [ 295.905521][ T9755] __x64_sys_sendmsg+0x19b/0x260 [ 295.910484][ T9755] do_syscall_64+0xfa/0xfa0 [ 295.914995][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.920911][ T9755] [ 295.923238][ T9755] Freed by task 5926: [ 295.927217][ T9755] kasan_save_track+0x3e/0x80 [ 295.931905][ T9755] __kasan_save_free_info+0x46/0x50 [ 295.937124][ T9755] __kasan_slab_free+0x5b/0x80 [ 295.941900][ T9755] kmem_cache_free+0x18f/0x400 [ 295.946721][ T9755] xfrm_state_gc_task+0x52d/0x6b0 [ 295.951749][ T9755] process_scheduled_works+0xae1/0x17b0 [ 295.957302][ T9755] worker_thread+0x8a0/0xda0 [ 295.961900][ T9755] kthread+0x711/0x8a0 [ 295.965978][ T9755] ret_from_fork+0x47c/0x820 [ 295.970572][ T9755] ret_from_fork_asm+0x1a/0x30 [ 295.975373][ T9755] [ 295.977702][ T9755] The buggy address belongs to the object at ffff88804e912ec0 [ 295.977702][ T9755] which belongs to the cache xfrm_state of size 928 [ 295.991672][ T9755] The buggy address is located 816 bytes inside of [ 295.991672][ T9755] freed 928-byte region [ffff88804e912ec0, ffff88804e913260) [ 296.005473][ T9755] [ 296.007799][ T9755] The buggy address belongs to the physical page: [ 296.014219][ T9755] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88804e910000 pfn:0x4e910 [ 296.024286][ T9755] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 296.032786][ T9755] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 296.040330][ T9755] page_type: f5(slab) [ 296.044317][ T9755] raw: 00fff00000000040 ffff8880202e0dc0 dead000000000122 0000000000000000 [ 296.052907][ T9755] raw: ffff88804e910000 00000000800f0006 00000000f5000000 0000000000000000 [ 296.061923][ T9755] head: 00fff00000000040 ffff8880202e0dc0 dead000000000122 0000000000000000 [ 296.070598][ T9755] head: ffff88804e910000 00000000800f0006 00000000f5000000 0000000000000000 [ 296.079278][ T9755] head: 00fff00000000002 ffffea00013a4401 00000000ffffffff 00000000ffffffff [ 296.087958][ T9755] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 296.096630][ T9755] page dumped because: kasan: bad access detected [ 296.103061][ T9755] page_owner tracks the page as allocated [ 296.108776][ T9755] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6518, tgid 6517 (syz.0.149), ts 100251666614, free_ts 97040853049 [ 296.127886][ T9755] post_alloc_hook+0x240/0x2a0 [ 296.132665][ T9755] get_page_from_freelist+0x21e4/0x22c0 [ 296.138248][ T9755] __alloc_frozen_pages_noprof+0x181/0x370 [ 296.144061][ T9755] alloc_pages_mpol+0x232/0x4a0 [ 296.148912][ T9755] allocate_slab+0x8a/0x330 [ 296.153423][ T9755] ___slab_alloc+0xbd1/0x13e0 [ 296.158113][ T9755] kmem_cache_alloc_noprof+0x26f/0x390 [ 296.163585][ T9755] xfrm_state_alloc+0x24/0x2f0 [ 296.168362][ T9755] xfrm_state_find+0x37d4/0x5400 [ 296.173314][ T9755] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 296.179516][ T9755] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 296.184896][ T9755] xfrm_lookup_route+0x3c/0x1c0 [ 296.189775][ T9755] rawv6_sendmsg+0xdab/0x1820 [ 296.194472][ T9755] __sock_sendmsg+0x19c/0x270 [ 296.199153][ T9755] ____sys_sendmsg+0x52d/0x830 [ 296.203932][ T9755] ___sys_sendmsg+0x21f/0x2a0 [ 296.208631][ T9755] page last free pid 6442 tgid 6439 stack trace: [ 296.214956][ T9755] free_unref_folios+0xdb3/0x14f0 [ 296.220005][ T9755] folios_put_refs+0x559/0x640 [ 296.224778][ T9755] mapping_try_invalidate+0x324/0x410 [ 296.230189][ T9755] bdev_disk_changed+0x203/0x14b0 [ 296.235223][ T9755] blkdev_get_whole+0x380/0x510 [ 296.240081][ T9755] bdev_open+0x31e/0xd30 [ 296.244329][ T9755] bdev_file_open_by_dev+0x1be/0x240 [ 296.249624][ T9755] disk_scan_partitions+0x1c1/0x2c0 [ 296.254831][ T9755] blkdev_common_ioctl+0x1686/0x2550 [ 296.260128][ T9755] blkdev_ioctl+0x4ef/0x6d0 [ 296.264641][ T9755] __se_sys_ioctl+0xf9/0x170 [ 296.269241][ T9755] do_syscall_64+0xfa/0xfa0 [ 296.273755][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.279664][ T9755] [ 296.282006][ T9755] Memory state around the buggy address: [ 296.287641][ T9755] ffff88804e913080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.295721][ T9755] ffff88804e913100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.303892][ T9755] >ffff88804e913180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 296.312004][ T9755] ^ [ 296.319773][ T9755] ffff88804e913200: fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 296.327959][ T9755] ffff88804e913280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 296.336203][ T9755] ================================================================== [ 296.381773][ T9755] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 296.389039][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.1.941 Not tainted syzkaller #0 PREEMPT(full) [ 296.398290][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.408418][ T9755] Call Trace: [ 296.411724][ T9755] [ 296.414722][ T9755] dump_stack_lvl+0x99/0x250 [ 296.419416][ T9755] ? __asan_memcpy+0x40/0x70 [ 296.424092][ T9755] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.429334][ T9755] ? __pfx__printk+0x10/0x10 [ 296.433961][ T9755] vpanic+0x281/0x750 [ 296.437967][ T9755] ? preempt_schedule+0xae/0xc0 [ 296.442851][ T9755] ? __pfx_vpanic+0x10/0x10 [ 296.447367][ T9755] ? preempt_schedule_common+0x83/0xd0 [ 296.452873][ T9755] ? preempt_schedule+0xae/0xc0 [ 296.457753][ T9755] ? __pfx_preempt_schedule+0x10/0x10 [ 296.463157][ T9755] panic+0xb9/0xc0 [ 296.466927][ T9755] ? __pfx_panic+0x10/0x10 [ 296.471374][ T9755] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 296.477295][ T9755] ? xfrm_state_find+0x2cf2/0x5400 [ 296.482437][ T9755] check_panic_on_warn+0x89/0xb0 [ 296.487410][ T9755] ? xfrm_state_find+0x2cf2/0x5400 [ 296.492548][ T9755] end_report+0x78/0x160 [ 296.496853][ T9755] kasan_report+0x129/0x150 [ 296.501380][ T9755] ? xfrm_state_find+0x2cf2/0x5400 [ 296.506528][ T9755] xfrm_state_find+0x2cf2/0x5400 [ 296.511503][ T9755] ? xfrm_state_find+0x1da/0x5400 [ 296.516579][ T9755] ? __pfx_xfrm_state_find+0x10/0x10 [ 296.521896][ T9755] ? lock_release+0x4b/0x3e0 [ 296.526498][ T9755] ? lock_release+0x4b/0x3e0 [ 296.531104][ T9755] xfrm_resolve_and_create_bundle+0x768/0x2f80 [ 296.537294][ T9755] ? __ip_dev_find+0xa2/0x4e0 [ 296.542028][ T9755] ? rcu_is_watching+0x15/0xb0 [ 296.546817][ T9755] ? __pfx_xfrm_resolve_and_create_bundle+0x10/0x10 [ 296.553432][ T9755] ? rcu_is_watching+0x15/0xb0 [ 296.558217][ T9755] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 296.563603][ T9755] ? rcu_is_watching+0x15/0xb0 [ 296.568440][ T9755] ? rcu_is_watching+0x15/0xb0 [ 296.573232][ T9755] ? lock_release+0x4b/0x3e0 [ 296.577851][ T9755] ? xfrm_selector_match+0xbcf/0x1140 [ 296.583257][ T9755] ? lock_release+0x4b/0x3e0 [ 296.587874][ T9755] ? xfrm_sk_policy_lookup+0x9d/0x750 [ 296.593269][ T9755] ? rcu_is_watching+0x15/0xb0 [ 296.598050][ T9755] ? xfrm_expand_policies+0x41f/0x6a0 [ 296.603448][ T9755] xfrm_lookup_with_ifid+0x2a7/0x1a70 [ 296.608841][ T9755] ? ip_route_output_key_hash+0xde/0x2e0 [ 296.614502][ T9755] ? ip_route_output_key_hash+0x24e/0x2e0 [ 296.620348][ T9755] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 296.626176][ T9755] ? rcuref_put+0x1b7/0x210 [ 296.630701][ T9755] ? __pfx_rcuref_put+0x10/0x10 [ 296.635561][ T9755] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 296.640974][ T9755] xfrm_lookup_route+0x3c/0x1c0 [ 296.645839][ T9755] __ip4_datagram_connect+0x9a5/0x1270 [ 296.651343][ T9755] __ip6_datagram_connect+0x9f0/0x1150 [ 296.656818][ T9755] ? __pfx___ip6_datagram_connect+0x10/0x10 [ 296.662719][ T9755] ? __local_bh_enable_ip+0x12d/0x1c0 [ 296.668102][ T9755] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 296.673845][ T9755] ip6_datagram_connect_v6_only+0x63/0xa0 [ 296.679581][ T9755] __sys_connect+0x316/0x440 [ 296.684179][ T9755] ? __pfx___sys_connect+0x10/0x10 [ 296.689389][ T9755] ? rcu_is_watching+0x15/0xb0 [ 296.694169][ T9755] __x64_sys_connect+0x7a/0x90 [ 296.698951][ T9755] do_syscall_64+0xfa/0xfa0 [ 296.703474][ T9755] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.709554][ T9755] ? clear_bhb_loop+0x60/0xb0 [ 296.714237][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.720144][ T9755] RIP: 0033:0x7f438898ebe9 [ 296.724566][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.744176][ T9755] RSP: 002b:00007f43898ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 296.752601][ T9755] RAX: ffffffffffffffda RBX: 00007f4388bc5fa0 RCX: 00007f438898ebe9 [ 296.760586][ T9755] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 296.768561][ T9755] RBP: 00007f4388a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 296.776557][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.784549][ T9755] R13: 00007f4388bc6038 R14: 00007f4388bc5fa0 R15: 00007ffd462e4738 [ 296.792555][ T9755] [ 296.795890][ T9755] Kernel Offset: disabled [ 296.800229][ T9755] Rebooting in 86400 seconds..