last executing test programs: 3m3.155758445s ago: executing program 0 (id=1667): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x3, 0x11, r3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "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", "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"}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x28, r9, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8099}, 0x440) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f00000024c0)={{0x1, 0x0, 0xfffffffffffffec0, {0xdddd1000, 0x1000, 0x2}}, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) (async) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r4, 0x3, 0x11, r3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) (async) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000000340)={{0x0, 0x0, 0xfffffffffffffe6d, {0xdddd0000, 0x100000}}, "a9cbc4b723986beb2541731c8831607b6ee747534f2610e68420ac50bde6dad58d04aad3777f18b4f168b3950653ce1d7740b6225b60f102dea41282032f21c3f19760a59ad876506e4e939e80e92248edfd8137e41621c1a490cf3cbb0502fa6deb4cb0efa6bc813cca06ed4828bafa15d1afd8ac82b71d1a7b410eeac6a6f31e4995b05d3f93bf80a053ae74958ed42c6c4b4d0bcaa08d3e6025a166ac6f19973f974613e0d7ca520dd948ed23fcce9f475faa3e49d697324fa1b2cdfef7deb66a190e9185a90f5c54c88895af1a61f8c0722f0c0bf9835d8910449682cc5551ec995aec222238bb28f41ba7f99f93b785dd2d48cf389f27da125b9c3ec7f716d6b6b696a93e625f0e17b4ff3bac5eec8e2dd837254c16d8c9b2a773ac70b8dc7216980fcf1db0cd885a6f3379dfcca516b0b5771d3dfb2212fd569b8f6003dcf8478390e14a5bf73eb1a61a12ce20ea3f5fbd6d9a56a4adf6043190cc7d559e7773668d0498f6c7438917d204ed2ec53da03cc744619be3785cd8cddb678f8e90965f22242bb62fa3590dde45cacad3852a54154a90d7495cc4cfbd7baacc19604efd864cc76a7e867cd7403301f45a3ad20ed8edf412e4aae5f279eada88ee43a436dd3b1f37098b7d81759aff2d81e5593535d44035fdcbae0f45a7163c06b8ed7da27a03e266947d7f11d9e1600f1a88b99643a0b99abad360b8137415f7800f8a5a16ba306778733d5493cc73d0aacebe1cc4618847bd620034cb617c55e47ff8d8000f52c25a6b3e9272c297e6b30bed370dda4c2b56278893a4faefb28a87c40229d3f80814e128eedb7050465e1e00547a1b77ebaef78355d9867ce521138d63f147ec3de6cac38d9eeb1d167494466e00d97a32701117bbe0f95304970e632b9cf8ded044b3f1c01326095b422678d798a9c5f8ab05f4e6549639186723aa3d38927ed4ca94a9e6de3c4f5ce99d090389473455cb366c7dfcb43ebe60271a3693e80ae4948291753007f5032f518ffc832f3e819f3bdac1085a80cdd494cdcac4a874a14818b9dae534559c2c5a542a12949a22fddb9060e8a400f96512aa8eaaa6659932dc8852f5709a808604c2fda229c79933646e36255948baec6e0c2d4fbe056628157ba456603e5cb45761b5aa97c0daceb3e6d7a192d109847057cb4322c9c5e62403c921e9cebeca77d12c3ed05f5e131e3c00d9070618872ea8a1f05e4598c98739d3a9245e537ed992aa4eb8a571e4c7c0dc797f91e3258835f9db1b6501edaaf38c9fd4d718c743d30b6f1e480ce9408aa6b894055768738e3df843301d99b476ba8d30f6483022ad7fd50493e600700ef1b70c72f607feb0df9898b61a38f4f59d23779b7af4a5b5a0e7379877d8c875d1e47a9ddbac19208cd22e05f729a9175b9bf1c96618d63585204eb5ea29e0a0f17c12219fd51bc462dcff6d3ff73b64d2a5f7ebe6ebdefd841698e909cf1018a88afefc1802fc97c22a240f20ce6938ae6b2224f7ca311622695577f3e4cb8f7e87bcf5bcdcc5311815bab1499465f687903b4da5693c83cbe13ba3d94f413bbdf9886241fc1f0b9ea00e7b2d1c2fe29d8921c56919bbfa091d4542c590a18848256b7eca92114c5542356bb15e1cd59b28a5d5b86bb92c30e88ea6edc6efd3c685a7e9b840b61f445bb57d670d3dbba61da442fcdabd4c14b9dd6543aafca5bea6ca16c00bbdc0999cec79272dfd1de86bea7d830ec2deaa339c2fc57d6490ee7cf3bb4e6cb4b8dcaa4279bef0af601f96dc25a3cf926eb6c5eb9529a266e1a9d96fbb5e0ffeb472d40e3853f42d69e725d2dd570b531779a09a5f945a2dce4ddd898be60b9d38f3c305f942f8f8a3ee992de01a0d6b3db1a4174b770681d2470edd2319a9b9d04d3cadd67583a313c071f809c89134b2b714cb2d7247d4d6b5d794302e9408e946bf1cadc767a8ae918a6608f7d2dbb2d825e949c823ac6bda0c46dea864c83222f3c7f7ec020f3a6445f3762dfaae5a28c3857053b2548d11c9b9f4af5366b43012e35d14ba139085493e95ad24bcc92b835f3c72ff762fcbe3d04ee2051e959a9e680f51425d5eeeedd99767fccda20b44bbbac6989e1d6f70f030c2530b83923fbf27fbf24f62ff7a5619b39b338e165dcf66faf6092edd19216fdacfb8eb80bd7d8a7767f538c3021e20f498c8e456bc32af1157b5988950caf1c478047f132c01f53c12929f030e9d78c284e64a521350d72748ef214c05f4c8d2e47384c3cd29c99a2df1abb2e8ff5a363a488feb119e8ad5e3c39a4f24449d00b3772090b499e2c65b50a3e6ce7f1e2f2bac0ae5e58147d1d6887617ca38d12b1cc9a5e3ee47539f40179136698acd9b9e20a4f85335dcb19d4ba4a05bcd84b27a9f1897ab8f67abf78ba3ce4d87b37c129562d33bb0836c8fe830c068e7c8b6728ed585258c7d82b5c407d0532bf5ba60cfb0a6e6f3aa44bdf3bb7ac389023c3db4395c3875a3496d85640d423775d8ac0c4c3ab1831bdd785a5ca0ba2073bdf6970e4b63718944603ab32b83d7c73af090c3a941561a76f08e2235e1ea8a0b721cd6a73466664c411c33fd1a3e46e580c77034cb09ac38b6d1824f642d3354e827b6ddc0ca15c3bd7192882eaece388d428282c859fed7d280e5d81cd0252c149154e2038a3f2535781dc81d7221278c21ee819fb913fc8d97e96f3dbbf0b2cd63a0ceeadec43fca7a760f45aa53de97597b4afb3abf5921125e9f148da377556e6de1a62aab6055b10c1698649515e62c572d62d901ae7fcd417b627db64785fbdc21f0e978eb143d7abb2771de9a912466fb6e6f55a12f209e131732d45a8293f1a36ddddfad54f857016e3ab7fceb97ddfde1a8c8569dfa972ec636e7c93e603d5e1d0e98d6f109dfa6df50ce987abfc291aba0e488ba8f0596fbd1bacd58862b611250a85cd34e7d100f785286d815281b62ef2dfeea5e8ba4ee4a019af0ff59b0f4f3049f8718d0fca57de1cf88763d13ad26c50cccec4faba99d899ef079c3400052d065cc0a44e8f73dc5bef5f8681015b29c96dacd026d920f369a2b0c341b8295f5268e2d9bf80df2d9ea1017b5b41ec2060c2fecc67c040e7c37521b6d6174c4d4ed4accc5479f6fc4ddc0e45a7f8030ff8e23f000315a3565498d07bd0cc6459f5cff23b40ffb80ace2f48fe0c1a337bb4f748bb8c057089de5cd727b278b45d84a8f7df9f898b3cef2ec319b032f888c4953bfe141c8e4b67ab3f95fa133790ea17b27be21c9478da70641265045e81e28229a4dc15f59c2f18b1b9c082d1154bc9565508fc9419912b48f3b1271609006399a844f6ccedb6323ada63d3e0b340fd07cf9e3b98b1d193bd76796c2a185366b25468017d28371d8792eb42304961bc9c1f4ef4025d2814837dacc9f1d777bfeddb30eca1cacd9f5b6619c4000252ecdabf7107dff264046c111c6f5767e3486c37ec175f52bd3460a7ad49e35bb729ba76e2fa5e117c49b750000005e0abf56340740b81ea37c5df26b7c885cc5da412cf4e9932e2561aa7945945dcba0677786c9ea9b9aee47d73454df82048f021b30a817606c96415c22e1e908316f84aae52e050e31176408d35ef33091618df7d38d22bd2b626dc138f423c32362878c8f6538dcf0b96c4298668d4bb35773c952bbebd4778c964b0eae8eac9bef3469ea5da890377c500ea027180f5308585cd7941c7e3305c32d610de49b5c1acce6c285d88a99dcebb2b5972a276d416abf25b44c1712a43d3e30005a1535553e779c0f72ff519d2407214c02e7020ca479e93c3fb2b867ad73e69ba10e92f329cd54c4c80d227d0710cf384fd9a39d444053afce6d1e93b47137843d149e888bd868b1b2179c1fdd8291d15724db10a756300209ae4a2ed91788fe9f980af1bb00d05a8fe1a020fe4bba91fb487c8ea674a6739067a0a86b7f2a4fc141f6c864f065fc6e5effdb5a1f1d063c6888626e13ced52f3669677dad96da1cfff7d700e9f6f74131b8ac0f4fb6c8d5fd675b1ed6001bba7dd0e95567a6d06fe28e756609821312f4725c5909c6353ad385e57fb162e2f65b5e2a0100aaa356a19b9c5c183d195d0134adb8bc8d03415daafd95f3a5e44f201741e22dd905dc12469664040ce714a5d9042f58db392d6c6af1eaa4c82cd9b4996252b44334be627708463ffe52a80d8d1c8a5b1a23f9c68144c4a6c6387e542b3cb9de7765faf05fda086986d3c6a1f0906b2ea0eba741abb9514ccd57f2d8ea1d67145c5d71749b560f85093ecc265a24239078253fa0bd39bf67f8e1d78f07e167c05d808771c7b0146af368e8859273ef76f9feedf7fc69640b5e95a25076c477338e31cc9a7348b8a31a0f8d4dd9e6c46f18126279c5d1192ddee08a7057195689954b26a19dcfd2a59febb6556c18c18abc85527372919196b29a737f8bb3b97bebaf3e6c43099064e067f12772c2333be19dd4e803289430a660d68963a26ff1b1c8c664c0318a2558dec140d984837a936651906ab960b6bff8bc8b32704f3e0769e6c85c9f5bd50270bc1030ea71f2db5c43116bd0641ed31ab6db12514aec68febe59e04d2b872c9fc2173017ee6e75a18d6832c9992d1ed2ead9452dce9b2efa01dc97ea31ee5c3f5743760f2589615f45738140d0f8c148f1858d0897094a34727493e607132bc1eefa0d0ff236f9ac5a2a0f0bf06719c1d5061846e427fa36138c808741ccbd10ad3f6f54470804e656a8ab1a9ee9a523bed87cb2fd4d6db8aa6d6b80d1e9886dc12b915665101b9094a22f444379182f5356fed797ebd97ec6493bd681f69321f9735ae6d3d6822818c7cfb21c5f3a0f9d5b8ef070c916fe9ccbbf04128a27e7928e3572f125b986c52ec0de078b40135b922a2feb294b0349df06d1c3e2c9d2ed2ee88b7a1673423c6baedb51beb8f8cb1b3b986d1b9632fedfaec8e9a237311beb89cb0dd7efaa5b68537641d06b7cbfda581344c87452b4d3fe96cea6143378c4dd7586a9d55c666cce828ef91a35f3f0a5c9c369bd20c1bc7cc77fcf316a567fa21863b12c43faf3b9588dce4caa151937c6ee699cf49dba041775773ae062c69783758513a178bf46d2d40e24afe8975dd768a466755af2ffbb9fa728724a18fc9f427672ad5867a72ae8caca60fcc90cf817c291a2025b5243ae36e200b5e5c9ee4e90eac775c3b29fe1df8c35716f37d11961084fc28b0f8855376ec85d7741535f88db7977629dd832f06bb258e9a88cfc8671df2763fd9383a777f768c7aaecb9a7af9e76bb719767767c3d5178e2a10765c6b2ae80753f403125a9203ede6ed44eb96a1a010842f88f020dbb7f8df8bcbea0b60f1b99dd9b9aae2dbc995edc8ed82ec5e21e8d5e4d8d9fd0bfab342db38d12bb24c20c2a579069d74624db16bb9ec501312d8de0e653e9e74668d0ed05ccb0eb99db410c0000000fc246302635630b295ccf849e45944a25baa7f4651fa37f147e0fa977c0304e7cf25fa78260ca03abe8dc32cfb461f019f7d82194a98daae521ec4eaf3e138bb95b09d8ff2f106febcc126743abc8f8b707cd2cae1548c6fe54f64bf46c9ff03975e0c37eda3d485ff76ea5ae71fa5a2ca0d9293ea0cd4186e6e2e26fc2ba5e2cdde9400d9c1717058157a8410c9cd7ca4e679f41d8932576e7b292f28dfb9775b0ac5eb5788a8ddf797e32919e7a41c305af2e4e37eb4d5600", "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"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000980)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000009c0)={0x28, r9, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x8099}, 0x440) (async) ioctl$KVM_GET_NESTED_STATE(r7, 0xc080aebe, &(0x7f00000024c0)={{0x1, 0x0, 0xfffffffffffffec0, {0xdddd1000, 0x1000, 0x2}}, "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001700", "000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000"}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r11, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) (async) 3m2.658652685s ago: executing program 0 (id=1668): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000000c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socket$alg(0x26, 0x5, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'security.', 'group_id'}) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 3m1.646422024s ago: executing program 0 (id=1673): mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000029"], 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x2000000, 0x0, 0x0, 0x1, 0x4, 0x1}}, 0xb8}}, 0x4040000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x1, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) setxattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)=@random={'user.', '@\\\x00'}, &(0x7f0000000100)='/dev/rnullb0\x00', 0xd, 0x1) 3m1.32449285s ago: executing program 0 (id=1675): mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x401, "4f954bc017c4c443cb7c92003ae74d9ebe0ba3c2a6c2cf0535e61884587ac9e1", 0x2, 0xfffffffa, 0x0, 0x50007}) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @empty}, @multicast2, 0x10, 0x8}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e12090018", 0x27}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000006000000080003000000", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x64}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0xa06006, 0x0) (async) ioctl$VIDIOC_ENUMOUTPUT(0xffffffffffffffff, 0xc0485630, &(0x7f0000000000)={0x401, "4f954bc017c4c443cb7c92003ae74d9ebe0ba3c2a6c2cf0535e61884587ac9e1", 0x2, 0xfffffffa, 0x0, 0x50007}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000014c0)={'sit0\x00', &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @empty}, @multicast2, 0x10, 0x8}}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e12090018", 0x27}], 0x1}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000006000000080003000000", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)={0x64, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16f8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_PROBE_RESP={0x5, 0x91, 'n'}]]}, 0x64}}, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x400, 0x0) (async) 3m0.976323088s ago: executing program 0 (id=1678): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x7fffffff]}, 0x8) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000040)={'veth0_virt_wifi\x00'}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'veth0_macvtap\x00', 0x300}) write$nci(r0, &(0x7f00000000c0)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x9, @f={0xf2, 0x5, 0x2, 0x52, {0x4, 0x99, "fd775513c16c3ea91e9f7d9984b2f06ec44b66ebfed44512c14fcb6ba9bfd7a8568c1b36c2657a91923e6c9ea455e0e343df1b066b38c8bb2041d549761cbc1dfbfd6a691e419d7ba3dc65c004904f7811de1ab1d0cf59dd852113613d98196c3c9ebeb0f1dde986cfcf3771680a8be39747181a9bb895ffd262105dd475c1fa4b25d7c4cdb2008ef727f475b2441adcd0521a8c7a0764f14b"}, 0x2}}, 0xa3) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000180)) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000001840)={0xa, &(0x7f0000001700)=[{0x8, 0x3b, &(0x7f00000001c0)="c78ea33f78e8c56b54e9cdc9a84a0759b367b4a0d7c3e4084adfeafd11b6bf81b2af6cfc5d70deb6e40dc6eca14cf030125aeb271ab90b8ba2b771", 0x0, 0x1}, {0x5, 0x5f, &(0x7f0000000200)="db396dc5db43f7dc08e83ffc6f2fd6e9a1cb87c308041a0de3506f3cb3df4e7935716191668d7414a36d09d57d3082e8bd79bb0a8f7089b3d428adf9b826378f6a7f868cf036de46fc9873e1d2a71931ac57cc71fa84a2eed49099624e0803"}, {0x3, 0xda, &(0x7f0000000280)="a5c493acf13e90adbde47c66efe040a7c8d56e569618a19328e32ff50314ff9c86c882109eb2dd9bd2599d25a2f8734b8a0a654b2de11dee6bf3c2cae00ca962fd5230a69334f5ebb11c48c8db13008219316f4bf23e257f8e07cde315b961a0385b34bafc393776f3c92f1556cf98434cbfec2621d1fb1f4a7932e85e0d0f073282860f93fa41874a7398e5bb90968ba7b5d222208ddf84346928fcd65b5f162da737a1b7bcf94dc759cafcbbc04888d1593b079f976278e175bbeade5a2d4ba008dc1759748e352d259aafb3cf6f212ea256e483e7c9a8cec0", 0x1, 0x1}, {0x6, 0xd5, &(0x7f0000000380)="5e7682058cdd41d9b32f23acdf3266c34c0d740e32e600f8714ab21d2bbff2a6b556dfcac416e3b14e1b1fc72700f6274f76bbd38d849587ab194d719d84d95be40470cb4c8b1b59a3c4807b07d01e394efd7a8b62fc049b021b4365deb1ed474978e3de4249417c6a8ecf654426d2d537ec17004c7c0b0dfcc9b6640cdadd158dda2ff3728dd76232a65a91c006e97681c15709cb82dd5d29903f41ad4b03833cc43b759158222f382d09c553fdc70e3e5e419b385bc780ac310deaaf311efc1d2f9351bf2828bf77af91541f709a248b3ed2469b", 0x1}, {0xd, 0xce, &(0x7f0000000480)="eb201aedecf80d29b360b550e73126516b40dd860d0feb8e2bd17f204022dab8568917e50553f6390f73f2eedd47b57e74bcb42a7b7fb7e7b4e44d73a79c7cb0c11234792ee3ac4484b933074a225fb548f499cb6ec7d72a579789a9fc7723b48cb4bb25f22b9fda61d36220587c77519ef4a44d05fa90f1758b730d0dde96dcd96bff8a02b95b04833f5482d748d150011cef0510167f0df5f1e4b7519edcf840f444e07c5260ce059f02c14483de44f20f149fe443440c6f5cd84214a7634f7d170ce7c374bd205f9bb7f64506"}, {0x1ff, 0x39, &(0x7f0000000580)="559cba75f8eff7234c0f2ebf26c900444db25f6183f331abca8b95646454a095a2dfdef60586ae3a8eb46e4ed70839b27fdef2539c73fb8c07", 0x1}, {0x4, 0x6d, &(0x7f00000005c0)="b006e9483cf835176cb6bf1da70bb3335d3b4bb8da0275c7fd8d0d66821e4f492cc6c32f917ad6de0db23d56453c20d2bae759a2f9d62f2469233b21534abef300664a282127efa911ded5ae675fcfd574a9c196da82032fdfcd587d29a77024dc4ebf1a81ecc9c3da6371d5b5", 0x0, 0x1}, {0x5, 0x1000, &(0x7f0000000640)="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"}, {0x1, 0x75, &(0x7f0000001640)="1d0c04547624362ce63fbc1ca7f1ffdbc8550f6e541b9597ee776291e9ab4f94dd5dc90a5f2d8d29f181b06936f14fadbfcbbaaf5ecd30526e9acdb30018ac839c39b1bbe770255cc6f681cfa1d645f03ca2c20f303f4d73b458c0d77543ec6780e2da8afc4b1c903f58a9ce31d80f88fe8dc858e7", 0x1, 0x1}, {0x40, 0x1, &(0x7f00000016c0)="8b"}]}) r1 = openat2(0xffffffffffffffff, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x22000, 0x80, 0x3e}, 0x18) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000001940)={0x6, &(0x7f0000001900)=[{}, {}, {}, {}, {}, {}]}) rt_sigtimedwait(&(0x7f0000001980)={[0x1]}, &(0x7f00000019c0), &(0x7f0000001a40)={0x77359400}, 0x8) write$proc_mixer(r1, &(0x7f0000001a80)=[{'IMIX', @void}, {'SPEAKER', @val={' \'', 'Capture Volume'}}, {'PCM', @val={' \'', 'Synth Capture'}}, {'RADIO', @void}, {'LINE', @void}, {'LINE', @val={' \'', 'Master Capture Switch'}}, {'MIC', @void}], 0x9d) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xff) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x1000) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000001b40)={0x1, 0x3, 0x2, 0x5, 0xdfd, 0x400}) close(r3) ioctl$KDENABIO(r1, 0x4b36) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000001b80)={0x2, 0x5, 0x7, 0x2, 0x5, "9479ba30b90af1e04dfb45fd98388b4f1d1c6f", 0x4b2, 0x4}) ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f0000001c00)={{r2}, 0x2, &(0x7f0000001bc0)=[0xffffffffffffffff, 0xfffffffffffff944], 0x3, 0x16, 0x1}) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000001c80)={0x0, 0x7, 0x1, 0x0, 0x1b, "4416065c4ccfd2a3e15efc7b3f2f218ef6209f"}) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r1, 0x8008f513, &(0x7f0000001cc0)) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$TCSETSF2(r3, 0x402c542d, &(0x7f0000001d00)={0x8, 0x80000001, 0x0, 0xd, 0x2, "0aa6df9af6695f620678f92a171257512c19f8", 0x4, 0x100}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001d40), 0x8000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x28, 0x0, 0x121, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1ff, 0x55}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x4008b100, &(0x7f0000001ec0)={0x18, 0x0, {0x3, @remote, 'pim6reg0\x00'}}) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000001f00)=0x7fff) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000001f80)) 3m0.640662799s ago: executing program 0 (id=1680): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 'id0\x00'}) sendto$ax25(r0, &(0x7f0000000080)="886050acc00b236c60dfeddbcf3220b3979b44719c2476a8f0f07877a6ad1a890bbc8635d794888bca16b68a51f0e294bbb52b449dac7953bb121e0b6b1a4f58eb4b2643b030445d5b6be2c77968a0daf28a3ba85d0612b2a3e52fcc0c68989645f0a280004a28cb4d8cae64ecc57a253b6c3e42206989a97b22ee825e04eafa18bd86e4edfd5798a3c4ad45592b18750a07099f70ee1ed2fde46cb604e2b97bdfad93c7029aea1eed9b4d00e4bc516e0c421bf770", 0xb5, 0x8000, 0x0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0x4, &(0x7f0000000140)="6cacf376"}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x3, 'vlan0\x00', {0x200}, 0x2}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000200)={0x80000000}) (async, rerun: 32) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f0000000280), 0x16f6434e, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000002c0)={{r3}, "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"}) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x150, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff801}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9cb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "690ad9180b4929cfdf31bd973c5ea52d7d70841ac854497e071071f072c427d40e28525e4f5c8db86771f210c48ddc8baa9a685de58432d48c34c37453fd00cc1e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) (async, rerun: 64) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = syz_usb_connect(0x4, 0x97e, &(0x7f0000001500)={{0x12, 0x1, 0x250, 0xbf, 0x7e, 0x79, 0x20, 0x6cd, 0x103, 0xea48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96c, 0x4, 0xcc, 0x2, 0x40, 0x4c, [{{0x9, 0x4, 0x89, 0x2, 0xf, 0x7b, 0x10, 0x6e, 0x9, [@hid_hid={0x9, 0x21, 0xb, 0x1, 0x1, {0x22, 0x381}}, @hid_hid={0x9, 0x21, 0xffff, 0xbe, 0x1, {0x22, 0x6f4}}], [{{0x9, 0x5, 0x9, 0x10, 0x1f7, 0x9, 0xd1, 0x3, [@generic={0xb, 0x24, "20e6d97d41bd18e72d"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x5, 0x2, 0x3e}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x66, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0xa52}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x1, 0x2, 0x6, [@generic={0x4, 0x22, "15f0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x1, 0x1, 0xa8, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x12, 0xc0f5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x6, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x9, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x0, 0xb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x100}, @generic={0x21, 0x23, "1c0b953a3cce425f195f74e6cb2f8d1e68d5587053031cc88e22356be5706b"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x9, 0x7, 0x7a, [@generic={0x2d, 0x10, "90c3bdedd911c9edd9d95f7845025c13966fd30d999acd37d6860db1f04e6e5ca1bc597f67a610b47fcb75"}, @generic={0x2f, 0x2, "d9dd7622200468f75fe94d9f6919a3a1f881cbdc874726da3b572dec69124da43fc2f4407f63ddb7832032f697"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x7, 0x4, 0x36, [@generic={0x55, 0x0, "9cc7c87cdfc92900ce6eb7981a02f6be5607deea626412f2be0ee0a754a38da24cbd8e0652deb0fe8f7c351371f42d80c26dec641c03e5acf2b0a61b7b38f93f189a9f6533fea4e3dc237260fbab37ad5fc075"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xa, 0x4, 0x5, [@generic={0xd, 0x9, "4afb1b97ea664542b405da"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xc}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x4f, 0x0, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x6, 0x2d, 0x6d}}]}}, {{0x9, 0x4, 0x3f, 0x1, 0x2, 0x3d, 0x6, 0x7c, 0x2, [], [{{0x9, 0x5, 0x7, 0x10, 0x3bf, 0x52, 0x9, 0x1}}, {{0x9, 0x5, 0x85, 0x1, 0x200, 0x5, 0x8, 0x0, [@generic={0x40, 0x20, "a613c73c02f98ad32486e9fbe2e3e7c5822c2c2cbf2314e4569155d3b8a8a55c1479c022f7348a7645b5d2ab63800a139ccb7da784beb1e7af91c3363824"}, @generic={0xf4, 0xb, "5f4ae51708bb6a5194da043247579391b526048f8a22b5434ce3506688962c0d6f8543f0d12b3d48bd4a880ed6d81f072cbacda87507891962533fe6b44f991fd5f24c1406f648abe13decd3bec9fee0bce50bf3c55e765e3cd8242f3ce222f3329616e81615460f827872303089f8ed24a0dd6bc38cfc0c914225a9f5147bdb2dc44cf14c6a0a614e890b2bc6f90cc20a3c41488e5dff364c4d3c17213a0269e45a8f7f27e4d65eaea750a8e466848fa1bea4de62a0d8a54db48f1d06429e65f78f3f8ea0a5317196e32e6880b3a01efd707f17378f175e1be0049ac6cb91f221b9c732b4c834b454dc09743a352c49487e"}]}}]}}, {{0x9, 0x4, 0x8b, 0x8, 0xa, 0xc7, 0x92, 0xf, 0xe6, [], [{{0x9, 0x5, 0xc, 0x10, 0x200, 0x7f, 0xcb}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x5, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x28a}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x3, 0x2, 0x74}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x1, 0x6, 0x5, [@generic={0x80, 0x23, "92278cdb9d5777c21b07043916e91fd98271bad3dc53d5bf7e95c155e8d2f920f11ecdce19b4ed9e315d8979a4e23ea1f341148a963a752051e7c381d272f470f874e546a6ba910e6673d7fa68d2e8958068dac35bd0e36b6e71f90413d987fbb42029df47397824d47d0c3865d45ff0087d5eb792a7870144f3243f3343"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9e}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x18, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xa}, @generic={0xa2, 0x9, "85d2ef4de932317c3b062e4ac19cd13be54df84410bd29e0b6e0246a44a753a8c3d1e799c08e12ed8c515de492a9dd2fb4cf3fba352e63d869c81ea8bfa1a9054ecd8801bb092ca41681adabd58e02fdf88549e93b5ac385a2d91e642a536d57d9457ae6abf467c6baec709ba02a8e61c7ad5cb023bbcb1e10519ad94756228c974e9ef792f514959e4634886e25b68e5278d7260ad3688843a2792c2d25b60d"}]}}, {{0x9, 0x5, 0xf, 0xa, 0x3ff, 0x18, 0x0, 0xff}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0xa6, 0x0, 0x7, [@generic={0x82, 0x11, "9b34b558f6e9398d6fe79b5d392893875921966c2c7ae97515cf13075c43b595d59dcff5185cc54f06f7fd31f084c39f5821c124d1ad14ddb6c821eb2ef64483f486451b06a23f8a65ac2936a9a01246b5a396522a9497632a2d147daa6db79e6d1ec297b2067d768a5d5ab9301abe336a40eefde83c29c490a317d41bd6952a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa2, 0x200d}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x3, 0xe5, [@generic={0x51, 0xb, "6b4bfaf4d0c2fa4fec8a4e6b1e5ef61dff301cf22f7a314dc03a56b7e74ffbd6f0d4892d94a4ef8f6c28cf6814dec1bd31e2d54e9ccfe89fe9a4046e104e62a5cddd9574cec41f01329ac970cfeb22"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x1ff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x4, 0x5, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xa, 0x6, 0x2, [@generic={0xcd, 0x5, "f5e9d137a87534f4a00f0122dd7edbe054eb707eeff823400d1081e438fab1918ba57bcdecf918b838320da565097a70c88219c22a3dee3d6742c7b750a10117bc249a6419266ffca459f6c6453d7774454c8aceaad9808d6c10ccc32c3b46ac2c69f545fd26f0192b1174b08050cb2a79a1edbfb852cd153ce1fae0f214260bcf91be2abf7db9ddd6e2707b0575c838e9d51d47f715c4e342e721613c65075a134a2b569864a115a70ea9bc0c8cb2b2c88fd2f294a2827e7f4bc6251546284cf711f13ba03bdb2ab20f4a"}, @generic={0x79, 0x9, "77c11f45152a5559fd3c1473604902544655bb90276fabcc07fc9264c684f1612a5e755e7043d8bb30668d26dd2743e5c8f5b2531a20a2093245d0cd25a62f1165be0296cb60cc89eb98f34eeee8b12f2513c496f335256c46343ef1afc37c293e6d441bdadc0ae022831cd29b5cf7785d461ec333596e"}]}}]}}, {{0x9, 0x4, 0x9a, 0x0, 0x6, 0xb0, 0xbe, 0x5a, 0x0, [@hid_hid={0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0x319}}, @uac_control={{0xa, 0x24, 0x1, 0x100, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x2, 0x6, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x6, 0x2, 0x30}]}], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0xff, 0x15, 0x6, [@generic={0xe5, 0x24, "9bb437a556c334a5967d296650f2351e7ae42a94f28b79c6584fd0750ce1c66c51cff69f2c3a7d72767284a0367849c6fb4be1e7f2f60fd1bc8d17aa05834d303602464d5327372df15c9186d18bd748a3c4eab108b90fb4d12589cf50a926a5585313f7012ad6d8d505578566788be3bc808f7baae67053522646ecccfe4313209d6e22dfc46a1450f1cb0c0450bf77636da83a90580453a5044e44eb482445e12b70ae911fa01124b9b3a6ef80bc651857a1c0d8613ab9e31d6f5056cf308cafeee7dc53e987b2933409120226e1b88de481cafb4467e3c1c013f3d813112e700f42"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x6d, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5a3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xd}, @generic={0xdc, 0x1b, "32d4da9dea19a6412f28ba80d8221c34172e180683b28855716eae93056ce4ac439fcfc8847642cfc407125c846b16baf2a47224855c70b9aa25369e3c8abe5af33871a688816dd0848d2ac0ec388d369a0ca06f2099b5c96cfcaaf2473dcf798bdcb3dd759dc0830cbba89eea5f259e811e96515c99b7a6593856a0215d787e8e19d172ce519ac23e6987fa0bfaca8c79796fb32488a9e11f5b86285f225bb99586f609e6deb7f22a96067e77a0819e1f53fe7ede06ed6d3f4afab3be7801b3c0243b270b5e63483d2e03027f8922733226cfc59e20a8d5fe55"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x2, 0x4, [@generic={0x52, 0x2, "67be1a753ca529cae115541a29c70ee70ab055ea982f504fbfc77f0b31baf6810a504e2efefb847fe8fc22dec2d3e4e52118a6a25cf50a9b1ba96c6839de95c3a0732f719a0722db746bd2af97f0d816"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8, 0x3, 0xc}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x17, 0x7b, 0x9}}]}}]}}]}}, &(0x7f0000001f40)={0xa, &(0x7f0000001e80)={0xa, 0x6, 0x200, 0x35, 0x1, 0x7b, 0xff, 0xa}, 0x28, &(0x7f0000001ec0)={0x5, 0xf, 0x28, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b11fa9d659a8af21efc4157361368461"}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x0, 0xff00, 0x7}]}, 0x1, [{0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0xc07}}]}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002000)={'batadv_slave_1\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x28, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c08c}, 0x800) (async) readv(r2, &(0x7f0000002180)=[{&(0x7f0000002100)=""/42, 0x2a}, {&(0x7f0000002140)=""/1, 0x1}], 0x2) r8 = signalfd4(r1, &(0x7f0000002200)={[0x4]}, 0x8, 0x80800) syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), r8) (async, rerun: 64) ioctl$PTP_SYS_OFFSET_EXTENDED(r8, 0xc4c03d09, &(0x7f0000002240)={0x8}) (async, rerun: 64) timer_create(0x3, &(0x7f0000002700)={0x0, 0x7, 0x2}, &(0x7f0000002740)=0x0) timer_settime(r9, 0x1, &(0x7f0000002780)={{0x0, 0x989680}}, &(0x7f00000027c0)) socket(0x31, 0x4, 0x4) (async, rerun: 32) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002840), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000002a00)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x120, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x28}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000800) syz_usb_control_io$printer(r4, &(0x7f0000002b80)={0x14, &(0x7f0000002a40)={0x0, 0xa, 0xad, {0xad, 0x9, "fbae8e03167bd6ca4f2c682172b84d7be680ab4bacaf57990e9f73fd119112645b07218591ec2d0abffeab91386cb7dcc7a5cc2a6a10b42f4f211d418df76f2d57822c36ec3c0cbf19d930d75afd2091fc95ae1b031a50159512df4d34d48ad3cf0af3b0155b4e9525982b5ef852183301136a7d12b4cfee23add8600f62f92fa98cb496beb697be6a3012e81c79617e2743f68daa3c8fb93ebcb4c9ffc43378591c11f1e4570c56f02b7f"}}, &(0x7f0000002b00)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "85329b00930cea90dff1b6d0fb619e576b951255b74876708741cb3bf994edb8257bfc5f4823fc1ddf63e133cc11378cf9690ea564eb096ab63e20f1946ee9939d71d5dc21fb01b43d1d5796951dd5d246b3e49644781891c966d1da864125ad7b7fbae1625c800add6d504ac6"}}}, &(0x7f0000002ec0)={0x34, &(0x7f0000002bc0)={0x0, 0x17, 0xbc, "c20d9010bf0162e818de2c97757f40202acc539db65ccf773fd7b9a29f35abcdd1e6506974800231bf93214b62755365c983a0c37d28cde244ffeb7fc83b78489171d464e188b4edb05f6cdd81b42e80b69d57f41ae3503769becb8f0870c1963a59d04357389342c671f103b166159c1057f8c35df3de5f301d4d341415e5337d4dd11b0a0fb16d131d3288d1a9ff1b3c7c317aba36cd93cf168f9c03e400ac6ace3708189be87ad2f9fe6020c47fd01fd9ef1268da9c7e3ab1b63f"}, &(0x7f0000002cc0)={0x0, 0xa, 0x1}, &(0x7f0000002d00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002d40)={0x20, 0x0, 0xcf, {0xcd, "d466e107c367e47bae9d842f5030383f815671bcba3d72aeae4b237ebfb80cea022f33186cd1f0744a7fdc32b757d8fd526c5245499e9331bfa63fc5cbb3c954cc0f57a27b6d39f26ef63975446124d5a19526d938f772a9ead9d78681e276075d7bb3cb3ced77a577dcf2702e9034d50ef815b2a1bc863c3cee3f64a8792ef0af4319d7dbec45a303e6c83d90d573424b99e741b3d912ef090ed0e2891d62d4ce7fbf5891ded8c7503f70afbac078b3aefec3cb4045736b54185459888c7b34389e4aaa28c481b2225cefd919"}}, &(0x7f0000002e40)={0x20, 0x1, 0x1, 0x97}, &(0x7f0000002e80)={0x20, 0x0, 0x1, 0x1}}) (async) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000003040)={0x1, 0x1, &(0x7f0000002f00)=""/11, &(0x7f0000002f40)=""/70, &(0x7f0000002fc0)=""/115, 0x3000}) (async) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r11, 0x89e8) 3m0.0712127s ago: executing program 32 (id=1680): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x9, 0xffffffffffffffff, 'id0\x00'}) sendto$ax25(r0, &(0x7f0000000080)="886050acc00b236c60dfeddbcf3220b3979b44719c2476a8f0f07877a6ad1a890bbc8635d794888bca16b68a51f0e294bbb52b449dac7953bb121e0b6b1a4f58eb4b2643b030445d5b6be2c77968a0daf28a3ba85d0612b2a3e52fcc0c68989645f0a280004a28cb4d8cae64ecc57a253b6c3e42206989a97b22ee825e04eafa18bd86e4edfd5798a3c4ad45592b18750a07099f70ee1ed2fde46cb604e2b97bdfad93c7029aea1eed9b4d00e4bc516e0c421bf770", 0xb5, 0x8000, 0x0, 0x0) (async, rerun: 64) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f0000000180)=@buf={0x4, &(0x7f0000000140)="6cacf376"}) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f00000001c0)={0x3, 'vlan0\x00', {0x200}, 0x2}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000200)={0x80000000}) (async, rerun: 32) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async, rerun: 32) r3 = syz_open_dev$usbfs(&(0x7f0000000280), 0x16f6434e, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f00000002c0)={{r3}, "a7e6b520babde363276f426d57dafe848c8be924519118df8941c4d6bdc0b54f5c91352c0e874dfc29329896677f9e80e3d4b9388903c7c918de07af881b8d4678047468b9315ff7bfd8aa37a506fec722a3a65787b3026054a8928d70d11f2e9e0975ceeabc86c145964c872a7dda0720beba04042a827573f770e57d184da4420d485b7e46d8f47328c78f21e7a4daf616140e6dd6c3a1543ea8e56a9b03df27190af2896350f42bebf59661522915abc129b4cea534e6e5660ffd9349f7b3334dffb40f785f8143522c43283cd3d2f4c408e0b16c9e272f53b223f542df040e2e9d2c90c329417d65f94d5deac9f99beb39ecdb455240c3f5c340cf6543c424d882ad33ab3cfc5179fb238285d9a80ca418a7cf9b362f219d36b8da754303af8dbf6cb94997df9e015486c48b35856f99a0a985dc929cb9dc6a14d0984591fe6d0fad7e134a44ccef939010d8c84e519b71d448a70d2e29e08c41d3e9789aec994c9647ff2aa90d6f329d4af606f7c3279440e5a147d8b1272b083c55c277b49a1275172335ed8fc3505c30a35bfed5866aa4c7600e515d1403b91a5c8f01e009c8b8f39da3d009edd5edd50d1c042a50e4587e38c73cbaa6113003a0944a7f346aa5d7bd2892ead06028bb192de5b08be6a279bcbeb8ac5bc8374b31dc43c0139706c51e22a209e9ce92d1880ae19ff84d8ac7ddc40dfecfd3069079e13958951bc750c641cfd4d7f15e08afc86395cfc5502df4afa9a845ef1f09813bd238186b889357c62fe762c44b2d81edb8846896eab0672fbd0bffc16e7f87155c645e70221c1052d8491fd54c02ef04bc48185a97c8d9f2fc83bb01701fac176f3407bc2b922c0a349e6c4ee31cd16e0426d5bd9e2760dfb3ead146ef5e00456389f853a3c8329d710a4abe9388dbd5a54c6dd29b79deec4dcb9772d878bee9d30249ef23d62658ce29084ba8c01824b2a58660506bf6fdf8799c7b45bff53bbb0ea01ecf1504fa0dd3062e3baedda8b50939396ecf59339b8a5bb5dd4108be6ff2f9e764e951b131e174eaea1eef0bd35ad52205dd88bf77e1b2ce392ed56831faa9ead6ee18d2f0f9f4653558ba8e8dfa8149ea6d84ac2735e3d584a70062fcb09484d4c98c75f3fcd489175bdd53309741f91cf4317ef6839a86b98e0c86fce7219526aed9a9ad23054c1e594980b0479e4a4b676e5015cd0d5fa4b246b42995cac68d4305d544757ede83f5f85524144daf8bc6c85c2cd1d52429595fd41d92e64276e7be3f7db43f580b7a9485b5fc29a2d9805acf574d745e8e2ccd6cd4135b1a50aec323b93c5f2883b1400c3b6f741e38cbe35482afb64a1e9238b2104bf21da84f969f0a68ab3ac53cc5ecfee2a3e004705cdcab34ff0f6b9070555c4f1baf51920447c25edbb7e6819d0693f65d9eaec4f8a20f45e42d0447adf1ecdc238e15a28059c965b6a0a4464ad99282df01680eb6558c970a2469d6ed050ec2652621a8951797f7960c909ed4e613879637fd918745224ec40cd449382114442e47be3a17d487df512c574199ee25f434ac5d0472e7a77cf70bdd973a82d84563659a12a83e25ecbe6b68547aaa49f85a1af481f3ae7e89659ee80431ca8e3c7fd542e38df8438e952151aa4718588628d0f3dd177c4b7d76aed8928ff0ea136d4bbee9d232197623c0617e308ab4ec6df3e32aa1c0a7743dd04730c9b041432c9fb064d517f3eefe9966f0013dd9e6089044082f498adbae9a99c5822875f63646a8370ecde7f6f29297466615a1ca22b628307e51135ad1b32fa46b7109dde68174d41cc6cc17918dee1c6b5f97733d73fa0c9f78d266e0fc5f998106e832a0af166d08c32893c546d2467fa20e48fbd4f57adb31a2f2ac744e985d44d90d6efb214e43b9269638af2ac3550b7bea66342446fa8fb53aae8a5a2ca9cae8cfdf0b9b75d662e19be22d649726c77d598f4dd31fbfd07409c1431269b7775ade7c2fe480f7e6aa52127df9c5586162cf359cc97461837bdd154faf5d3143007a1c4e7ecc87c4a051c9940721123f38895eb9b32d3ae7ff26d6c872a832591f7eb3fa36e9ffe5352552c1c63f85edc48ef2b76679c002e9c91227f3c6c51fcfbf297e780348adfeca34b9142d4b37259f990fc70206661b5b5581be65b33a29fce57365ec53378e7282546470b0a7e17dfb1e4c57299e768361b02027cf7caa8990e5c390acaae07ea0a638248680e88b13a51f734ab4f828a230d7439bdcf22af74d66fac19e907daa92f6eb9ff13b36ab1cbf19f152ff0ac43cf6d7b541e79f787cd6a5a0c4f46cda52d1a5063c4dc8d0481951ca63faecc04b04519c3489e380b0f6683757c70a1552e2e74fcbfef11679c06bc61a346f5ee6c632e66da59116f3d7e149e963cd0a6c91484b563735277953f1b42e40975ca72b42a3ea859beef9cc5b6c5fd4be913e1ced527c527a99a77c29987d6f9bc43ac6f70a13294364359af37203917fea64d23adf1ea6f8901c5c8f80942a74780c4ca31d364b92ea58f9993520dc3e1cb7ffefef682696efc99d07acfaaccc42ca852d20f1ea0d1dac82216e1c8d741cc8a12164a863b319d5eef3d936858f183a6bbb4dfc771fd2bbdc2e4031aaebba39773d593ca615e1207de54bd4f96130d937615ca9ce21b71ff1dce0be699197b25962374cb424137288761e722ad56839ec52abee6fee77e7b52214f2f6bf32939183f4ab7c85b7762bd199d949737f63ea3f2c29d86ded37c80325ecb16d1e89aa1b3d62570bc53b3ad270fe23115865993b1334251640c2ee295495ca23c5c03f520a214415e9c2188b2be0699601a4a7d464ad5bcea97d28741043d08118be001f586de35fe02eaafc77eee1a6ce9ac1037de098c2460ee8e35420e5f4087f2d5ee355bfa94c9d8534803446b3068f5f31490fe7da9126b39dede220fe8d080a0b1be480dcc48326432358e59f9c0f8f664134678c3192d936a0d700ba482d67b6f2729b102f99bee3945c8dff6c799f2b7782398c88470cd11cd9477bb6954ae7083d27ca4003771a7b5641cb41b8d928dee2d5450ad7023420fef0cb7ba15d73d2947a8293975a00d70c1a99f009d62d5fe6d674d21e70ec702a56f306754f8a30675f848aad51ba5625f775a91561605c2502cf879ce1da96646bfd64290a9f7760fdf65e5a14b88d4e818b6ec911dc869304c4c6df2a4fe2f3ea7ee8e38cf7a0639f71486ae9ee8f44b32f68def0e68cfefef952b70ff3e5dbbbec125fe20d5ab515c03b99009d1294b8419b34c1d14969f1aea218f9f19455f2d8f2237db2ad9b8a80810d504b1b5c7de4395300141e4428e4125f779946b5d7d0036e496e84e72cf8a88e215acaca4c78c695d185ec3e0586682833f303719aa9b76c698e939e182955254eb9cbc8a58a463bc36ad9f24a4477c325e63708cb5e94e2d93ed14195ef1bf9cadc6ba68e0905e65cab6f49b34d3e6fc69b3182f7d5d368462f6a06fbb7945003bbc1698b87cd3dd6ab33ff8917a37b893178c0b68f28037798ac114a15421012ff4dc139d337507bb68ee74e74dd147d28ab840db41e004c06870319bc3af2b1c4282c6769e2d322b82078d18ca9116e0edb40b1d2b913f92e49e409c4358d8a7ff209ec1451ac9af64180cb56832ac35432ddb77d02da86cbf28d7fda70bba325d2fdebf47c99f8e260086a33fea982608fecdd95a23972588201a40812bc5cef87285ba56ac572c74f1da973079072757ab0be54f8f3f3b5dbace75124ee5db3284924a139169eb29e7a78a94f08c33b9becc733935046de4f59cf0fc89d06493e1da8676e23481a7339cdc782f42f6ab36c60d7376d9d4f1d0b5ae2e7fd525af7bf82644f7293beb2a39283fea121209509e5421c1825dee95ac9ca1a1b960587ba8bf847022c567a825654ec444433fe3e8cb47594c34e4a0969e20c37145435c61dfebdf52dacec5d77ecdaaadf21ee7f206ddf315d532080fd5b39facbc433d2b55be71a7356534bb39160166720e45d06503d5b4c12573f762ab197e351a2b468264714b60d5ff65246ba9a0b8618bd7cd4d709919845007ab29ee79811a5421c46749320ff5680fbf6c021af41ca43146e054dd2cd7c64dde50d072e850a33f15a89b9c53d1ecc5a8a6a1ee0f1091b2116c5b6c94c4e28fbfab79f54de9719d1018693656523783de16f40374dfe15eeacd6b892cd029f317555a34efa35ffe4266c08f38a8d2392c20b1af156cc926839d0b901275ccacde8a94d5aede93b932b7ee082fed1349f408e4001ce0e531820da2140fd970f71724db720b0da8c47929bd13f3398fe57a851d2d346d62c9cf166042597b2e8150c3cde66a08b7a06eeabb5dd9152aa97a1d7c32b4484ea61dd5f5eb21f689d61f6a27316b4e21e313da1b811daf9a6b4543f2ebf8fd5b0688726931a3e1179b28c386b5f33b280275ea7fac2b211178d23c30cf673515615d5596dc16ae3604431834ba0a14ab757651aa044144d48bb6010d15b6162c2b1f4341085b7ca9ea7ca450d44b2eef5109eb0bd982a55b85cfaa33affe4ca75ae743bf9ece767c7814f9dcb30bf7659bb5872487fe1eaab133806c819c9aaf354dd1a5fbdce367574b7b068ce1a9ff133a24f6f6ba0a1d5741cf16c89f5d9b16f267bc5bed257a04467de948a3fecb7ba8644233cb33665d6f3667d21d41c3a637e0039215d3ff2e03ea5a42dca065891eb63fac2d73b446c14ad5dfffcaa70bd2206d094c7ec1b75b2bc6ec9b3fe10e2a9df8bb42da1bff24d3ae6a614f26ed2a6d265075ce46388c08c5483f555f2af267d543f079c89658d37188d4eb3d3ed0690054de2320e73c71e8fd12a4506b2fcefccc414b697f2a448eb6b85ff510794c166b39b53c4726cf8f322fe15cbe8f808eb1ee4ad1ce5616550945d6f6bc9e7a74255de2acf6bfbe23c4ba427e6bb23085cf8436763be41714d0dfa028bc7c1a54416fb46c891203f354d24fc9c4dde97df9cdc9b90ffded5905ad735c108f85819bbbac89dcf2cbc454b210eabb2f6bae12be14a9582b3a815e28855da63903ed6f03e5367db2c97b57856d40161cf87f3c3ae80d1b5ec5896fafa5c6f9162a465211fa2082c1661074ae8383d9c3b0289cf65fb8b5c03f2bd3dd8061730bdca20884c3d133140045b9780a03a016e781298a05a3b0cda935f9b5a22f1e4162ba2ebf2efb195a26b9eb918c9b9c199bb6e97a08dcaaf4b8a4ad45614a7e4115ba2eb2cb2178d94185ea04da3308fa94dd241ad420719b29bb882f7af7e530f8b23292f5d60a91ecdc48447dd96ca71e269f566f5b8f32f08d8af9cfb3cbb1491c9c6dca4ac95428d12ef58b15af0e262ea5963430128a2f19b96b0e7ad9082ee1c97677a425a45ec1a4349cc465fb8b6f043107325977366bc2a1696bd20eeefa6c893a9cbe4207fd8d459e21033d5d9beb8dbea66a0e2f4b17e234a29de7c2f44c2fa24f588665426b09aeb9011e1d11005c3f417251d82ebfd249aa7641801c15b260640f33a987cfc2a8fc19e75e006d4bfb2140797be2630b3bb04b902a79a70d7933b79b17fc129a1b2b3dd4710ee7a27365cc542006a9a638986dcc76a4f3583bc027c6bb954fed366f651c49d10cf8deba565c87bbe7393bc76d7620e552e2510cbc8a5061fadd8ea5ea4d063cb2ac5b8c3ede1365a13371acb9c5a76304c2874697f11bfd903f5a3ae39abe055de7c739651dd2df997eea9b9efb1481586ad28b66e2195149aab7cd0a6"}) (async, rerun: 64) sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f00000014c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001300)={0x150, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff801}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffc1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa9cb}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x45, 0x3, "690ad9180b4929cfdf31bd973c5ea52d7d70841ac854497e071071f072c427d40e28525e4f5c8db86771f210c48ddc8baa9a685de58432d48c34c37453fd00cc1e"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) (async, rerun: 64) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) r4 = syz_usb_connect(0x4, 0x97e, &(0x7f0000001500)={{0x12, 0x1, 0x250, 0xbf, 0x7e, 0x79, 0x20, 0x6cd, 0x103, 0xea48, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96c, 0x4, 0xcc, 0x2, 0x40, 0x4c, [{{0x9, 0x4, 0x89, 0x2, 0xf, 0x7b, 0x10, 0x6e, 0x9, [@hid_hid={0x9, 0x21, 0xb, 0x1, 0x1, {0x22, 0x381}}, @hid_hid={0x9, 0x21, 0xffff, 0xbe, 0x1, {0x22, 0x6f4}}], [{{0x9, 0x5, 0x9, 0x10, 0x1f7, 0x9, 0xd1, 0x3, [@generic={0xb, 0x24, "20e6d97d41bd18e72d"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x5, 0x2, 0x3e}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0x66, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xd, 0xa52}]}}, {{0x9, 0x5, 0x7, 0x2, 0x400, 0x1, 0x2, 0x6, [@generic={0x4, 0x22, "15f0"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0xffff}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x1, 0x1, 0xa8, [@uac_iso={0x7, 0x25, 0x1, 0x40, 0x12, 0xc0f5}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x6, 0x0, 0x5}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x9, 0x5, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x20, 0x9, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1}]}}, {{0x9, 0x5, 0x0, 0x2, 0x40, 0x0, 0xb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x100}, @generic={0x21, 0x23, "1c0b953a3cce425f195f74e6cb2f8d1e68d5587053031cc88e22356be5706b"}]}}, {{0x9, 0x5, 0x4, 0x2, 0x400, 0x9, 0x7, 0x7a, [@generic={0x2d, 0x10, "90c3bdedd911c9edd9d95f7845025c13966fd30d999acd37d6860db1f04e6e5ca1bc597f67a610b47fcb75"}, @generic={0x2f, 0x2, "d9dd7622200468f75fe94d9f6919a3a1f881cbdc874726da3b572dec69124da43fc2f4407f63ddb7832032f697"}]}}, {{0x9, 0x5, 0xd, 0x1, 0x8, 0x7, 0x4, 0x36, [@generic={0x55, 0x0, "9cc7c87cdfc92900ce6eb7981a02f6be5607deea626412f2be0ee0a754a38da24cbd8e0652deb0fe8f7c351371f42d80c26dec641c03e5acf2b0a61b7b38f93f189a9f6533fea4e3dc237260fbab37ad5fc075"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3}]}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0xa, 0x4, 0x5, [@generic={0xd, 0x9, "4afb1b97ea664542b405da"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x4, 0x3}]}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x4, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0xc}]}}, {{0x9, 0x5, 0x0, 0x3, 0x200, 0x4f, 0x0, 0x81}}, {{0x9, 0x5, 0xe, 0x8, 0x10, 0x6, 0x2d, 0x6d}}]}}, {{0x9, 0x4, 0x3f, 0x1, 0x2, 0x3d, 0x6, 0x7c, 0x2, [], [{{0x9, 0x5, 0x7, 0x10, 0x3bf, 0x52, 0x9, 0x1}}, {{0x9, 0x5, 0x85, 0x1, 0x200, 0x5, 0x8, 0x0, [@generic={0x40, 0x20, "a613c73c02f98ad32486e9fbe2e3e7c5822c2c2cbf2314e4569155d3b8a8a55c1479c022f7348a7645b5d2ab63800a139ccb7da784beb1e7af91c3363824"}, @generic={0xf4, 0xb, "5f4ae51708bb6a5194da043247579391b526048f8a22b5434ce3506688962c0d6f8543f0d12b3d48bd4a880ed6d81f072cbacda87507891962533fe6b44f991fd5f24c1406f648abe13decd3bec9fee0bce50bf3c55e765e3cd8242f3ce222f3329616e81615460f827872303089f8ed24a0dd6bc38cfc0c914225a9f5147bdb2dc44cf14c6a0a614e890b2bc6f90cc20a3c41488e5dff364c4d3c17213a0269e45a8f7f27e4d65eaea750a8e466848fa1bea4de62a0d8a54db48f1d06429e65f78f3f8ea0a5317196e32e6880b3a01efd707f17378f175e1be0049ac6cb91f221b9c732b4c834b454dc09743a352c49487e"}]}}]}}, {{0x9, 0x4, 0x8b, 0x8, 0xa, 0xc7, 0x92, 0xf, 0xe6, [], [{{0x9, 0x5, 0xc, 0x10, 0x200, 0x7f, 0xcb}}, {{0x9, 0x5, 0x0, 0x4, 0x8, 0x5, 0x9, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x28a}]}}, {{0x9, 0x5, 0xe, 0xc, 0x20, 0x3, 0x2, 0x74}}, {{0x9, 0x5, 0xe, 0x2, 0x8, 0x1, 0x6, 0x5, [@generic={0x80, 0x23, "92278cdb9d5777c21b07043916e91fd98271bad3dc53d5bf7e95c155e8d2f920f11ecdce19b4ed9e315d8979a4e23ea1f341148a963a752051e7c381d272f470f874e546a6ba910e6673d7fa68d2e8958068dac35bd0e36b6e71f90413d987fbb42029df47397824d47d0c3865d45ff0087d5eb792a7870144f3243f3343"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x9e}]}}, {{0x9, 0x5, 0xa, 0x0, 0x20, 0x18, 0x7, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0xa}, @generic={0xa2, 0x9, "85d2ef4de932317c3b062e4ac19cd13be54df84410bd29e0b6e0246a44a753a8c3d1e799c08e12ed8c515de492a9dd2fb4cf3fba352e63d869c81ea8bfa1a9054ecd8801bb092ca41681adabd58e02fdf88549e93b5ac385a2d91e642a536d57d9457ae6abf467c6baec709ba02a8e61c7ad5cb023bbcb1e10519ad94756228c974e9ef792f514959e4634886e25b68e5278d7260ad3688843a2792c2d25b60d"}]}}, {{0x9, 0x5, 0xf, 0xa, 0x3ff, 0x18, 0x0, 0xff}}, {{0x9, 0x5, 0xf, 0x4, 0x200, 0xa6, 0x0, 0x7, [@generic={0x82, 0x11, "9b34b558f6e9398d6fe79b5d392893875921966c2c7ae97515cf13075c43b595d59dcff5185cc54f06f7fd31f084c39f5821c124d1ad14ddb6c821eb2ef64483f486451b06a23f8a65ac2936a9a01246b5a396522a9497632a2d147daa6db79e6d1ec297b2067d768a5d5ab9301abe336a40eefde83c29c490a317d41bd6952a"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa2, 0x200d}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x3, 0xe5, [@generic={0x51, 0xb, "6b4bfaf4d0c2fa4fec8a4e6b1e5ef61dff301cf22f7a314dc03a56b7e74ffbd6f0d4892d94a4ef8f6c28cf6814dec1bd31e2d54e9ccfe89fe9a4046e104e62a5cddd9574cec41f01329ac970cfeb22"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x1ff}]}}, {{0x9, 0x5, 0x4, 0x10, 0x40, 0x4, 0x5, 0x1}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0xa, 0x6, 0x2, [@generic={0xcd, 0x5, "f5e9d137a87534f4a00f0122dd7edbe054eb707eeff823400d1081e438fab1918ba57bcdecf918b838320da565097a70c88219c22a3dee3d6742c7b750a10117bc249a6419266ffca459f6c6453d7774454c8aceaad9808d6c10ccc32c3b46ac2c69f545fd26f0192b1174b08050cb2a79a1edbfb852cd153ce1fae0f214260bcf91be2abf7db9ddd6e2707b0575c838e9d51d47f715c4e342e721613c65075a134a2b569864a115a70ea9bc0c8cb2b2c88fd2f294a2827e7f4bc6251546284cf711f13ba03bdb2ab20f4a"}, @generic={0x79, 0x9, "77c11f45152a5559fd3c1473604902544655bb90276fabcc07fc9264c684f1612a5e755e7043d8bb30668d26dd2743e5c8f5b2531a20a2093245d0cd25a62f1165be0296cb60cc89eb98f34eeee8b12f2513c496f335256c46343ef1afc37c293e6d441bdadc0ae022831cd29b5cf7785d461ec333596e"}]}}]}}, {{0x9, 0x4, 0x9a, 0x0, 0x6, 0xb0, 0xbe, 0x5a, 0x0, [@hid_hid={0x9, 0x21, 0x8001, 0x7, 0x1, {0x22, 0x319}}, @uac_control={{0xa, 0x24, 0x1, 0x100, 0x9}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x101, 0x2, 0x6, 0x3}, @output_terminal={0x9, 0x24, 0x3, 0x3, 0x300, 0x6, 0x2, 0x30}]}], [{{0x9, 0x5, 0xc, 0x0, 0x400, 0xff, 0x15, 0x6, [@generic={0xe5, 0x24, "9bb437a556c334a5967d296650f2351e7ae42a94f28b79c6584fd0750ce1c66c51cff69f2c3a7d72767284a0367849c6fb4be1e7f2f60fd1bc8d17aa05834d303602464d5327372df15c9186d18bd748a3c4eab108b90fb4d12589cf50a926a5585313f7012ad6d8d505578566788be3bc808f7baae67053522646ecccfe4313209d6e22dfc46a1450f1cb0c0450bf77636da83a90580453a5044e44eb482445e12b70ae911fa01124b9b3a6ef80bc651857a1c0d8613ab9e31d6f5056cf308cafeee7dc53e987b2933409120226e1b88de481cafb4467e3c1c013f3d813112e700f42"}]}}, {{0x9, 0x5, 0x0, 0x8, 0x8, 0x6d, 0x5, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x9, 0x5a3}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0x1, 0x81, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xd}, @generic={0xdc, 0x1b, "32d4da9dea19a6412f28ba80d8221c34172e180683b28855716eae93056ce4ac439fcfc8847642cfc407125c846b16baf2a47224855c70b9aa25369e3c8abe5af33871a688816dd0848d2ac0ec388d369a0ca06f2099b5c96cfcaaf2473dcf798bdcb3dd759dc0830cbba89eea5f259e811e96515c99b7a6593856a0215d787e8e19d172ce519ac23e6987fa0bfaca8c79796fb32488a9e11f5b86285f225bb99586f609e6deb7f22a96067e77a0819e1f53fe7ede06ed6d3f4afab3be7801b3c0243b270b5e63483d2e03027f8922733226cfc59e20a8d5fe55"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x5, 0x2, 0x4, [@generic={0x52, 0x2, "67be1a753ca529cae115541a29c70ee70ab055ea982f504fbfc77f0b31baf6810a504e2efefb847fe8fc22dec2d3e4e52118a6a25cf50a9b1ba96c6839de95c3a0732f719a0722db746bd2af97f0d816"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x8, 0x3, 0xc}}, {{0x9, 0x5, 0x0, 0x4, 0x200, 0x17, 0x7b, 0x9}}]}}]}}]}}, &(0x7f0000001f40)={0xa, &(0x7f0000001e80)={0xa, 0x6, 0x200, 0x35, 0x1, 0x7b, 0xff, 0xa}, 0x28, &(0x7f0000001ec0)={0x5, 0xf, 0x28, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b11fa9d659a8af21efc4157361368461"}, @ssp_cap={0xc, 0x10, 0xa, 0xb, 0x0, 0x0, 0xff00, 0x7}]}, 0x1, [{0x4, &(0x7f0000001f00)=@lang_id={0x4, 0x3, 0xc07}}]}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001fc0), 0xffffffffffffffff) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000002000)={'batadv_slave_1\x00', 0x0}) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r5, &(0x7f00000020c0)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002080)={&(0x7f0000002040)={0x28, r6, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c08c}, 0x800) (async) readv(r2, &(0x7f0000002180)=[{&(0x7f0000002100)=""/42, 0x2a}, {&(0x7f0000002140)=""/1, 0x1}], 0x2) r8 = signalfd4(r1, &(0x7f0000002200)={[0x4]}, 0x8, 0x80800) syz_genetlink_get_family_id$tipc2(&(0x7f00000021c0), r8) (async, rerun: 64) ioctl$PTP_SYS_OFFSET_EXTENDED(r8, 0xc4c03d09, &(0x7f0000002240)={0x8}) (async, rerun: 64) timer_create(0x3, &(0x7f0000002700)={0x0, 0x7, 0x2}, &(0x7f0000002740)=0x0) timer_settime(r9, 0x1, &(0x7f0000002780)={{0x0, 0x989680}}, &(0x7f00000027c0)) socket(0x31, 0x4, 0x4) (async, rerun: 32) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000002840), 0xffffffffffffffff) (rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000002a00)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000029c0)={&(0x7f0000002880)={0x120, r10, 0x2, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1f}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x14}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1b}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa8}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x28}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}]}, 0x120}, 0x1, 0x0, 0x0, 0x400c0}, 0x4000800) syz_usb_control_io$printer(r4, &(0x7f0000002b80)={0x14, &(0x7f0000002a40)={0x0, 0xa, 0xad, {0xad, 0x9, "fbae8e03167bd6ca4f2c682172b84d7be680ab4bacaf57990e9f73fd119112645b07218591ec2d0abffeab91386cb7dcc7a5cc2a6a10b42f4f211d418df76f2d57822c36ec3c0cbf19d930d75afd2091fc95ae1b031a50159512df4d34d48ad3cf0af3b0155b4e9525982b5ef852183301136a7d12b4cfee23add8600f62f92fa98cb496beb697be6a3012e81c79617e2743f68daa3c8fb93ebcb4c9ffc43378591c11f1e4570c56f02b7f"}}, &(0x7f0000002b00)={0x0, 0x3, 0x6f, @string={0x6f, 0x3, "85329b00930cea90dff1b6d0fb619e576b951255b74876708741cb3bf994edb8257bfc5f4823fc1ddf63e133cc11378cf9690ea564eb096ab63e20f1946ee9939d71d5dc21fb01b43d1d5796951dd5d246b3e49644781891c966d1da864125ad7b7fbae1625c800add6d504ac6"}}}, &(0x7f0000002ec0)={0x34, &(0x7f0000002bc0)={0x0, 0x17, 0xbc, "c20d9010bf0162e818de2c97757f40202acc539db65ccf773fd7b9a29f35abcdd1e6506974800231bf93214b62755365c983a0c37d28cde244ffeb7fc83b78489171d464e188b4edb05f6cdd81b42e80b69d57f41ae3503769becb8f0870c1963a59d04357389342c671f103b166159c1057f8c35df3de5f301d4d341415e5337d4dd11b0a0fb16d131d3288d1a9ff1b3c7c317aba36cd93cf168f9c03e400ac6ace3708189be87ad2f9fe6020c47fd01fd9ef1268da9c7e3ab1b63f"}, &(0x7f0000002cc0)={0x0, 0xa, 0x1}, &(0x7f0000002d00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000002d40)={0x20, 0x0, 0xcf, {0xcd, "d466e107c367e47bae9d842f5030383f815671bcba3d72aeae4b237ebfb80cea022f33186cd1f0744a7fdc32b757d8fd526c5245499e9331bfa63fc5cbb3c954cc0f57a27b6d39f26ef63975446124d5a19526d938f772a9ead9d78681e276075d7bb3cb3ced77a577dcf2702e9034d50ef815b2a1bc863c3cee3f64a8792ef0af4319d7dbec45a303e6c83d90d573424b99e741b3d912ef090ed0e2891d62d4ce7fbf5891ded8c7503f70afbac078b3aefec3cb4045736b54185459888c7b34389e4aaa28c481b2225cefd919"}}, &(0x7f0000002e40)={0x20, 0x1, 0x1, 0x97}, &(0x7f0000002e80)={0x20, 0x0, 0x1, 0x1}}) (async) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000003040)={0x1, 0x1, &(0x7f0000002f00)=""/11, &(0x7f0000002f40)=""/70, &(0x7f0000002fc0)=""/115, 0x3000}) (async) r11 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r11, 0x89e8) 5.164630063s ago: executing program 4 (id=2443): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r2, 0x96d6a000) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r3, 0x93774000) sendfile(r2, r2, 0x0, 0x7ffff000) r4 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x400) ioctl$SIOCRSSCAUSE(r4, 0x89e1, 0x0) 4.158460546s ago: executing program 2 (id=2453): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8f1bc000) (async, rerun: 64) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 64) r1 = dup(r0) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) openat$kvm(0x0, 0x0, 0x80, 0x0) ioctl$IOCTL_START_ACCEL_DEV(r1, 0x40096102, &(0x7f00000001c0)={{&(0x7f0000000380)={'KERNEL\x00', {&(0x7f0000000040)=@adf_dec={@format={'Cy', '4', 'RingAsymRx\x00'}, {0xa}}}, {&(0x7f0000000300)={'KERNEL\x00', {&(0x7f0000000240)=@adf_hex={@normal='NumberDcInstances\x00', {0xffffffffffffffff}, {&(0x7f0000000100)=@adf_str={@bank={'Bank', '1', 'InterruptCoalescingEnabled\x00'}, {"d1c02e792d2c24722f781c1e9eb1355de1aca789fc89968a5a31e0c8a6e6e2de927dad9566ecdcbe07cb83dcd72192280f8f4378a4f85e98d7586d92d92b259b"}}}}}}}}}, 0x2}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.086705741s ago: executing program 2 (id=2454): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) read$FUSE(r0, &(0x7f0000001180)={0x2020}, 0x2020) r1 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r2 = syz_usb_connect(0x3, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000047482908951300037581000000010902360001000000000904960102502f7e0009050f10200001ff08090470e96808dcdad3090503101000740406090403"], 0x0) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 2.592988228s ago: executing program 3 (id=2460): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 2.47252751s ago: executing program 3 (id=2461): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@my=0x0}, 0x0, 0x1}) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000340)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000040)={{@host, 0xff}, 0x1, 0x1, 0x9}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000007300)={{@my=0x0, 0xf45}, 0x1, 0x2, 0xd6}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$NBD_CLEAR_SOCK(r5, 0xab04) fadvise64(r5, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r5, 0x5708e000) 2.155106448s ago: executing program 3 (id=2462): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x0, 0x59455247, 0x640, 0x7, 0x0, @stepwise={{0x1955, 0x6}, {0x9, 0xa}, {0xcebb, 0xbdc}}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'syzkaller0\x00', &(0x7f0000000000)=@ethtool_drvinfo={0x3, "73f708f5d0874e34af1e56680aae316e08715fed57aa9447103bf6d45f607452", "ffd8b61907b32667575d9c3140c7660d1b671334f990f06e0d1ada6af68c686d", "e57827633247fc14acc37b26210c1a8d48c5a52d64ff9b75f94a1f22c63d546a", "4203e526ab0aef0472ffb67772e3f4ceeafb5380bac65d7a50a8d3a1d0838f8d", "ecf26e4379eb8cc3c3e6065be63288c782a90e860d20410e509816a45ca3aea9", "d59b3c64066d621fde8480ad", 0x7fffffff, 0x8, 0xeb5, 0x8, 0xd}}) r4 = msgget$private(0x0, 0xc4) msgctl$MSG_STAT_ANY(r4, 0xd, &(0x7f00000000c0)=""/206) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x55, 0xa, 0x0, "3258c546dacccfae1e008faa00000000f4ff4000"}) getsockopt(0xffffffffffffffff, 0x107f, 0x2, &(0x7f00000001c0)=""/219, &(0x7f0000000080)=0xdb) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x80542, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300000a, 0x10, r1, 0x93771000) 1.952835061s ago: executing program 3 (id=2463): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_queued\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @void}}}]}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, 0x0, 0x2, 0x70bd2e, 0x25dfdbfc}, 0x14}}, 0x80) syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a", 0x2, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @loopback, 0x0, 0x0, 0x3, 0x0, 0x0, 0xa0022}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000005e40)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_coalesce={0xe, 0x7, 0xfd, 0x200, 0xa, 0x3, 0x32b, 0x8001, 0x2, 0x81, 0x7ff, 0x4, 0xec, 0x1, 0x8000, 0x6, 0x8000, 0x7, 0x2, 0x1000, 0x9, 0x4}}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000880)={{r5}, 0x0, 0x10, @unused=[0x8, 0x7, 0x1, 0x81], @devid}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x100000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) 1.836317354s ago: executing program 4 (id=2464): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x8a, 0x2) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000040)=']\x00', 0x0, r1) r2 = syz_open_dev$hidraw(&(0x7f00000000c0), 0x1, 0x4000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x14400, 0x0) bind$rds(r3, &(0x7f0000000180)={0x2, 0x4e23, @private=0xa010100}, 0x10) move_mount(r3, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x144) r5 = openat$cgroup_ro(r3, &(0x7f0000000240)='freezer.state\x00', 0x0, 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./file0/file0\x00') ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000300)={0x4, 0x1, {0x3000000000, @usage=0x6, 0x0, 0x7, 0x8, 0x2, 0xfffffffffffffffb, 0x7, 0x5, @usage=0x10001, 0xfffffffa, 0x2, [0x3, 0x101, 0x6, 0x400, 0x8c]}, {0x5c, @struct={0x4, 0x7}, 0x0, 0xfffffffffffffff9, 0x7fffffff, 0x0, 0x0, 0x80000000, 0x40, @usage=0x2c, 0x5, 0xb, [0x80000000, 0x100000000, 0x1000, 0x2, 0x5, 0x2]}, {0x3, @struct={0x75, 0xfffffff9}, 0x0, 0x2, 0x80000000, 0x9, 0x8000, 0xffffffffffffffff, 0x4c0, @struct={0x3, 0x5b}, 0x8, 0x10000000, [0x7, 0x80000000, 0x5, 0xdf5e, 0x80000000, 0x100]}, {0xf08d, 0x8, 0x8}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000700)={r6, 0x3, 0x7ff, 0x1}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b00), r5) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x50, r7, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xb}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xef73}]}, 0x50}, 0x1, 0x0, 0x0, 0x81}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000c80)='./file0\x00', 0x0, 0xaa) r8 = open$dir(&(0x7f0000000cc0)='./file0/file0\x00', 0x262100, 0x80) unlinkat(r8, &(0x7f0000000d00)='./file0/file0\x00', 0x200) r9 = fsmount(r5, 0x0, 0x8b) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r2, 0x8002f515, &(0x7f0000000d40)) fanotify_mark(r3, 0x2, 0x40000001, r8, &(0x7f0000000d80)='./file0\x00') r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r9, 0x40045109, &(0x7f0000000dc0)=0x400) getdents64(r4, &(0x7f0000000e00)=""/206, 0xce) ioctl$PTP_EXTTS_REQUEST(r3, 0x40103d02, &(0x7f0000000f00)={0x0, 0xe}) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000f40)={0x6000000c}) mount$nfs4(&(0x7f0000000f80)='*(-*@}..[\x00', &(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000), 0x1202000, &(0x7f0000001040)={[{'{!\''}], [{@smackfsroot={'smackfsroot', 0x3d, 'dh\x00'}}, {@obj_user={'obj_user', 0x3d, 'freezer.state\x00'}}]}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r9, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40004002}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x20, 0x1412, 0x200, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000002180)={r5, r10, 0x9, 0x1000, &(0x7f0000001180)="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", 0x2e, 0x3, 0x0, 0x3, 0x2, 0x1, 0xffff6af1, 'syz1\x00'}) accept(r3, 0x0, &(0x7f0000002240)) 1.726911933s ago: executing program 4 (id=2465): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0xb8303) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x1, 0x73b, &(0x7f0000000000)='8'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x96d6a000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet(0x2, 0x2, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r3], 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) 1.608568212s ago: executing program 3 (id=2466): move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x64) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 1.566782887s ago: executing program 4 (id=2467): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0xb8303) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x1, 0x73b, &(0x7f0000000000)='8'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x96d6a000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x4000000053d2) 1.480512222s ago: executing program 3 (id=2468): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0xfffe, @remote}, 0x10) sendmsg$rds(r2, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, 0x0, 0x0, &(0x7f00000005c0)=[@cswp={0x57, 0x114, 0x7, {{0x800, 0x10}, 0x0, 0x0, 0x9, 0x7, 0x3, 0x8, 0xa, 0xf}}], 0x58, 0x8004}, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07ad08828"], 0x0) r5 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000840)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) (async) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0x93, 0x0, 0x0) (async) syz_usb_connect$uac1(0x0, 0x93, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000600)={0x6, 0x0, @pic={0x9, 0x0, 0x7, 0x4, 0x7, 0x7, 0x2f, 0x7, 0x4, 0x15, 0x1, 0xff, 0x43, 0x8, 0x2, 0x7f}}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000140)={r3}, &(0x7f0000000240)=0x8) syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000a4d2ff40f3054002241b0102030109021b00010000000009040000014eaf32000905", @ANYRES16], 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0xfffffe2c, 0x0, 0xff, 0x8, 0x5, 0x3}, 0x20) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x201) ioctl$I2C_RETRIES(r9, 0x701, 0x1) userfaultfd(0x80001) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000004100)={0x2020}, 0x2020) (async) read$FUSE(r10, &(0x7f0000004100)={0x2020}, 0x2020) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 1.479950507s ago: executing program 1 (id=2469): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="20010000160001040000000000000000fc000000000000000000000000000000ac14140a00000000000000000000000000040000000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8000000000000000000000000000242000000033000000ac1414bb000000000000000000000000030000000000000000000000000000000500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000003000000feffffff0000000000000000d00000000000000008000000fdffffff04001b00240009"], 0x120}}, 0x20004808) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r2, &(0x7f0000001040)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4) ioctl$sock_proto_private(r2, 0x89eb, &(0x7f0000000000)="e3ec4b2fda46636696834f26aa690343b5f4c07304f9b6f74d10edf381bca1b7ee6ec2ed62f4223090143961508ac575b5f93fca365dd43c39583685392817b70b98bc8aa4b744da20da29160d5b5e76caa27f4be6dff2ca259822f2d270e499b112f2d9c8164ff5e87e11c404d38408c9a8a09abf3c23e06e3971ef8bbdeeef1aa808c92c32cc016b0294c6ea6d8e7bb0ed5d2ba15a4f0eef") madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat(r3, &(0x7f0000000140)='./file0\x00', 0x800, 0x20) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x34, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x2}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @rand_addr=0x64010100}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008001}, 0x4800) 1.44810102s ago: executing program 4 (id=2470): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000580), 0x0, 0x0) (async) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x44000, 0x0) lsm_get_self_attr(0x64, 0x0, 0xfffffffffffffffd, 0x1) (async) mlock2(&(0x7f00009e0000/0x3000)=nil, 0x3000, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000180)={0x0, @bt={0x0, 0x0, 0x0, 0x0, 0x0, 0xd055, 0x0, 0x0, 0x0, 0x0, 0x2}}) (async) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="2d401a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x18}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) (async) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='aio\x00', 0x401, &(0x7f00000000c0)='\x00') creat(&(0x7f0000000540)='./file0\x00', 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setregid(r6, 0x0) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000011c0)='./file0\x00', 0x0, 0x4000) (async) munmap(&(0x7f00004ff000/0x4000)=nil, 0x4000) 1.328378068s ago: executing program 1 (id=2471): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) socket$rds(0x15, 0x5, 0x0) 1.100547249s ago: executing program 2 (id=2472): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getuid() r2 = getgid() lstat(&(0x7f0000000340)='./cgroup\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000400)=0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r6, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000100)={0x50, 0x0, r7}, 0x50) write$FUSE_CREATE_OPEN(r5, &(0x7f00000005c0)={0xa0, 0xfffffffffffffffe, r7, {{0x3, 0x0, 0x3, 0x9, 0x8, 0x3, {0x4, 0x44, 0x91, 0xc, 0xd8e, 0x90, 0x9, 0x7fffffff, 0xfa13, 0x6000, 0x0, r4, r2, 0x8, 0x1}}}}, 0xa0) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080), 0x1, &(0x7f0000000440)={[{@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x5a3f}}, {@gid={'gid', 0x3d, r1}}, {@uid={'uid', 0x3d, r0}}, {@mode={'mode', 0x3d, 0x5}}, {@uid={'uid', 0x3d, r3}}, {@gid={'gid', 0x3d, 0xee00}}, {@gid={'gid', 0x3d, 0xffffffffffffffff}}], [{@smackfsdef={'smackfsdef', 0x3d, '\':[,%!'}}, {@permit_directio}, {@permit_directio}, {@euid_eq={'euid', 0x3d, r4}}, {@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@dont_hash}, {@obj_type={'obj_type', 0x3d, '()'}}]}) 1.063089698s ago: executing program 2 (id=2473): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x3, &(0x7f0000000000)=0x4, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x24, r2, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x24}, 0x1, 0x0, 0x0, 0x44151}, 0x0) (async) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) syz_open_dev$vcsa(&(0x7f0000000040), 0x3f, 0x80000) 1.041811219s ago: executing program 1 (id=2474): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x2000001, 0x0, 'queue0\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) close_range(r0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) ioctl$TIOCGPGRP(r5, 0x540f, &(0x7f0000000080)=0x0) r7 = openat$cgroup_procs(r3, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000000c0)=r6, 0x12) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ext3\x00', 0x3892872, 0x0) 706.87807ms ago: executing program 1 (id=2475): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0xb8303) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x1, 0x73b, &(0x7f0000000000)='8'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x96d6a000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) r4 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r3], 0x2b) sendfile(r5, r3, 0x0, 0x4000000053d2) 423.577503ms ago: executing program 4 (id=2476): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) (async) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc0585609, &(0x7f0000000e80)={0x0, 0xa, 0x0, {0x2, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1b7f000001bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) 391.536157ms ago: executing program 1 (id=2477): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000040)="140000001d000b63d25a80648c2594f90524fc60", 0x14}, {&(0x7f0000001040)="9e95170ca43e336d01981b7fa19222cc6fc8e44e06349edc765817c37db1187d1fdcbe8c2eb9a21f897b5b2080993f20ba357087674b5e6d276023a1653b7bb21e2f14662196c70b066791a95d65af597688cf03fad4dabfdc37be7aa420c90fb5e15544d8fca8dc0bc6d8b6076a8bf1ad9227d1ed6f13a98403bd7a42a4161114b18fcfc861c823cb92b9e5d53cf127092cc99ab53d42d266abf3ffe71d99472c925202cc48f6a0323cbf0c291b0dc100228105ef15d5d58d2de7b58898c9c6ec470625b515f9824f8168e3b894c28efd44a2184ae9f954ec3fafc2a808d087bef339d02c304b006d0006e92ba72b9accf0e27a14a0b9a3", 0xf8}, {0xffffffffffffffff}], 0x3, 0x0, 0x0, 0x4000}, 0x0) r2 = dup(r0) write$UHID_INPUT(r2, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) move_mount(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x247) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) r5 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000011c0), 0x400000, 0x0) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000001600)={0x1, 0x0, 0x10, 0x5, 0x197, &(0x7f0000001200)}) sendfile(r4, r3, 0x0, 0x7ffff000) readahead(r3, 0x8000000000000000, 0x7) 108.346306ms ago: executing program 2 (id=2478): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0xb8303) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000180)={0x80, 0x0, 0x0, 0x0, 0x1, 0x73b, &(0x7f0000000000)='8'}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x96d6a000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x240, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x84) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r5, r4, 0x0, 0x4000000053d2) 70.852674ms ago: executing program 2 (id=2479): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r1, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x44854}, 0x40080) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='squashfs\x00', 0x200002, 0x0) (async, rerun: 32) lsetxattr(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)=@random={'trusted.', '\x00'}, &(0x7f0000000100), 0x0, 0x0) (rerun: 32) 0s ago: executing program 1 (id=2480): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) sendmmsg$inet(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="f6c4c90563f2", 0x6}], 0x1}}], 0x1, 0x8004) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff004) kernel console output (not intermixed with test programs): 02.221162][T12865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.500534][ T5900] usb 3-1: 0:2 : does not exist [ 502.535935][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1911'. [ 502.552380][ T5900] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 502.657934][ T5900] usb 3-1: USB disconnect, device number 111 [ 502.726107][ T43] usb 5-1: USB disconnect, device number 5 [ 502.781589][T12887] /dev/rnullb0: Can't open blockdev [ 502.876828][T12886] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1912'. [ 503.001219][T12387] udevd[12387]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 503.456437][T11810] Bluetooth: hci4: command tx timeout [ 503.764686][T12750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 503.912015][T12750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 503.966024][T12750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 504.002806][T12890] /dev/rnullb0: Can't open blockdev [ 504.011009][T12910] /dev/rnullb0: Can't open blockdev [ 504.076090][T12912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1918'. [ 504.097732][T12750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 504.139158][T12913] /dev/rnullb0: Can't open blockdev [ 504.244272][T12920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 504.257908][T12923] /dev/sg0: Can't lookup blockdev [ 504.274852][T12923] /dev/sg0: Can't lookup blockdev [ 504.317832][T12920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 504.518975][T12750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.614001][T12750] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.740778][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.748054][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.804239][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.811543][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.855066][T12943] netlink: 'syz.4.1923': attribute type 13 has an invalid length. [ 504.916922][T12939] /dev/rnullb0: Can't open blockdev [ 505.135338][T12948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 505.170199][T12948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 505.619242][ T1214] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 505.752615][T12750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.811896][ T1214] usb 3-1: Using ep0 maxpacket: 8 [ 505.821889][ T1214] usb 3-1: unable to get BOS descriptor or descriptor too short [ 505.841375][ T1214] usb 3-1: config 16 interface 0 has no altsetting 0 [ 505.852340][ T1214] usb 3-1: New USB device found, idVendor=2207, idProduct=425b, bcdDevice=1a.35 [ 505.863660][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.897169][ T1214] usb 3-1: Product: syz [ 505.901400][ T1214] usb 3-1: Manufacturer: syz [ 505.908859][T12750] veth0_vlan: entered promiscuous mode [ 505.914833][ T1214] usb 3-1: SerialNumber: syz [ 505.961621][T12750] veth1_vlan: entered promiscuous mode [ 506.055395][T12750] veth0_macvtap: entered promiscuous mode [ 506.115833][T12750] veth1_macvtap: entered promiscuous mode [ 506.178250][T12750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.243214][T12750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.334594][ T331] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.338295][T12980] /dev/rnullb0: Can't open blockdev [ 506.361641][ T331] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.386833][ T331] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.412892][ T331] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.676868][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.714555][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.772965][T12991] /dev/rnullb0: Can't open blockdev [ 506.779552][T12991] /dev/rnullb0: Can't open blockdev [ 506.786110][T12991] /dev/rnullb0: Can't open blockdev [ 506.793094][T12991] /dev/rnullb0: Can't open blockdev [ 506.799643][T12991] /dev/rnullb0: Can't open blockdev [ 506.806049][T12991] /dev/rnullb0: Can't open blockdev [ 506.812526][T12991] /dev/rnullb0: Can't open blockdev [ 506.853981][ T1214] usb 3-1: USB disconnect, device number 112 [ 506.857125][T12991] /dev/rnullb0: Can't open blockdev [ 506.891948][ T331] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.907487][T12991] /dev/rnullb0: Can't open blockdev [ 506.913284][ T331] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.935107][T12991] /dev/rnullb0: Can't open blockdev [ 506.948290][T12991] /dev/rnullb0: Can't open blockdev [ 506.969937][T12991] /dev/rnullb0: Can't open blockdev [ 506.997674][T12991] /dev/rnullb0: Can't open blockdev [ 507.003775][T12991] /dev/rnullb0: Can't open blockdev [ 507.032521][T12991] /dev/rnullb0: Can't open blockdev [ 507.049981][T12991] /dev/rnullb0: Can't open blockdev [ 507.070784][T12991] /dev/rnullb0: Can't open blockdev [ 507.088114][T12991] /dev/rnullb0: Can't open blockdev [ 507.094113][T12997] /dev/rnullb0: Can't open blockdev [ 507.124168][T12998] /dev/rnullb0: Can't open blockdev [ 507.130887][T12991] /dev/rnullb0: Can't open blockdev [ 507.142664][T12991] /dev/rnullb0: Can't open blockdev [ 507.152534][T12991] /dev/rnullb0: Can't open blockdev [ 507.161497][T12989] netlink: 'syz.4.1930': attribute type 1 has an invalid length. [ 507.173064][T12991] /dev/rnullb0: Can't open blockdev [ 507.187513][T12991] /dev/rnullb0: Can't open blockdev [ 507.198545][T12991] /dev/rnullb0: Can't open blockdev [ 507.215038][T12991] /dev/rnullb0: Can't open blockdev [ 507.235279][T12991] /dev/rnullb0: Can't open blockdev [ 507.246785][T12989] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1930'. [ 507.263113][T12991] /dev/rnullb0: Can't open blockdev [ 507.289525][T12991] /dev/rnullb0: Can't open blockdev [ 507.306085][T12991] /dev/rnullb0: Can't open blockdev [ 507.326952][T12991] /dev/rnullb0: Can't open blockdev [ 507.343690][T12991] /dev/rnullb0: Can't open blockdev [ 507.351847][T13004] xt_limit: Overflow, try lower: 604147548/4200216962 [ 507.357277][T12991] /dev/rnullb0: Can't open blockdev [ 507.375309][T12991] /dev/rnullb0: Can't open blockdev [ 507.606836][T13011] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1935'. [ 507.652414][T13011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.679226][T13011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.810674][ T43] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 507.818421][T13018] /dev/rnullb0: Can't open blockdev [ 507.969990][ T43] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 507.980056][ T43] usb 5-1: config 0 has no interface number 0 [ 507.988170][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 508.002217][ T43] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 508.012775][ T43] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 508.023362][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.031648][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888031f2d000: rx timeout, send abort [ 508.042592][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888031f2d000: 0x0ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 508.087128][ T1214] usb 3-1: new full-speed USB device number 113 using dummy_hcd [ 508.133124][ T43] usb 5-1: config 0 descriptor?? [ 508.151074][ T43] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 508.186876][ T985] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 508.259041][ T1214] usb 3-1: too many configurations: 91, using maximum allowed: 8 [ 508.269713][ T1214] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 508.286514][ T1214] usb 3-1: can't read configurations, error -22 [ 508.310933][T13032] /dev/rnullb0: Can't open blockdev [ 508.346827][T13007] trusted_key: encrypted_key: master key parameter '$¡H›þ' is invalid [ 508.367800][ T985] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 508.387829][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.397109][ T985] usb 2-1: Product: syz [ 508.402440][ T985] usb 2-1: Manufacturer: syz [ 508.413617][ T985] usb 2-1: SerialNumber: syz [ 508.425521][ T985] usb 2-1: config 0 descriptor?? [ 508.430682][ T1214] usb 3-1: new full-speed USB device number 114 using dummy_hcd [ 508.462301][ T985] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 508.503362][T13007] Bluetooth: MGMT ver 1.23 [ 508.599856][ T1214] usb 3-1: too many configurations: 91, using maximum allowed: 8 [ 508.627571][ T1214] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 508.636164][ T1214] usb 3-1: can't read configurations, error -22 [ 508.662026][ T1214] usb usb3-port1: attempt power cycle [ 508.847533][T13021] /dev/rnullb0: Can't open blockdev [ 508.857794][ T985] sonixb 2-1:0.0: Error writing register 01: -71 [ 508.876415][ T985] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 508.920011][ T985] usb 2-1: USB disconnect, device number 10 [ 509.126495][ T1214] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 509.208958][T13046] syzkaller1: entered promiscuous mode [ 509.225617][T13046] syzkaller1: entered allmulticast mode [ 509.653314][T13050] /dev/rnullb0: Can't open blockdev [ 509.766727][ T1214] usb 3-1: too many configurations: 91, using maximum allowed: 8 [ 509.785138][ T1214] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 509.802936][ T1214] usb 3-1: can't read configurations, error -22 [ 509.970338][ T1214] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 510.020868][ T1214] usb 3-1: too many configurations: 91, using maximum allowed: 8 [ 510.055391][ T1214] usb 3-1: invalid descriptor for config index 0: type = 0x2, length = 44 [ 510.514857][ T1214] usb 3-1: can't read configurations, error -22 [ 510.522203][ T1214] usb usb3-port1: unable to enumerate USB device [ 510.745080][ T985] usb 5-1: USB disconnect, device number 6 [ 510.823435][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 510.874198][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 510.957455][T13061] syzkaller1: entered promiscuous mode [ 510.962995][T13061] syzkaller1: entered allmulticast mode [ 511.255515][T13072] /dev/rnullb0: Can't open blockdev [ 511.456606][ T985] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 511.575069][T13087] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 511.592742][T13087] /dev/rnullb0: Can't open blockdev [ 511.607595][ T985] usb 3-1: device descriptor read/64, error -71 [ 511.871886][ T985] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 512.030105][ T985] usb 3-1: device descriptor read/64, error -71 [ 512.160287][ T985] usb usb3-port1: attempt power cycle [ 512.318075][T13115] /dev/rnullb0: Can't open blockdev [ 512.406540][ T120] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 512.516651][ T985] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 512.527962][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.546754][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.566880][ T985] usb 3-1: device descriptor read/8, error -71 [ 512.580508][T13121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.589638][ T120] usb 5-1: Invalid ep0 maxpacket: 64 [ 512.603720][T13121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.736376][ T120] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 512.836505][ T985] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 512.867071][ T985] usb 3-1: device descriptor read/8, error -71 [ 512.896364][ T120] usb 5-1: Invalid ep0 maxpacket: 64 [ 512.903405][ T120] usb usb5-port1: attempt power cycle [ 512.987493][ T985] usb usb3-port1: unable to enumerate USB device [ 513.203157][T13134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.212826][T13134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.266498][ T120] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 513.297614][ T120] usb 5-1: Invalid ep0 maxpacket: 64 [ 513.396437][ T5900] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 513.436499][ T120] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 513.469244][ T120] usb 5-1: Invalid ep0 maxpacket: 64 [ 513.474997][ T120] usb usb5-port1: unable to enumerate USB device [ 513.546490][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 513.553670][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 513.562693][ T5900] usb 2-1: config 8 has an invalid interface number: 205 but max is 0 [ 513.571183][ T5900] usb 2-1: config 8 has no interface number 0 [ 513.580556][ T5900] usb 2-1: New USB device found, idVendor=19d2, idProduct=0020, bcdDevice=10.0d [ 513.589756][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.597877][ T5900] usb 2-1: Product: syz [ 513.602079][ T5900] usb 2-1: Manufacturer: syz [ 513.606774][ T5900] usb 2-1: SerialNumber: syz [ 513.930488][ T5900] usb 2-1: bad CDC descriptors [ 513.977257][ T5900] usb 2-1: USB disconnect, device number 11 [ 514.025706][T13139] /dev/rnullb0: Can't open blockdev [ 514.095605][ T30] audit: type=1326 audit(1754268283.592:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.120174][ T30] audit: type=1326 audit(1754268283.592:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.146373][ T30] audit: type=1326 audit(1754268283.592:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.170392][ T30] audit: type=1326 audit(1754268283.592:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.205502][ T30] audit: type=1326 audit(1754268283.592:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.231231][ T30] audit: type=1326 audit(1754268283.592:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.255879][ T30] audit: type=1326 audit(1754268283.592:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.279865][ T30] audit: type=1326 audit(1754268283.592:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.303124][ T30] audit: type=1326 audit(1754268283.592:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.355873][ T30] audit: type=1326 audit(1754268283.592:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13140 comm="syz.3.1968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc06758eb69 code=0x7ffc0000 [ 514.378422][ T5900] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 514.393695][T13147] sctp: [Deprecated]: syz.2.1970 (pid 13147) Use of struct sctp_assoc_value in delayed_ack socket option. [ 514.393695][T13147] Use struct sctp_sack_info instead [ 514.414348][T13146] /dev/rnullb0: Can't open blockdev [ 514.427993][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 514.439067][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.540231][ T5900] usb 2-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 514.549774][ T5900] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.570941][ T5900] usb 2-1: config 0 descriptor?? [ 514.622739][T13154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1973'. [ 514.646723][T13154] /dev/rnullb0: Can't open blockdev [ 515.007333][ T5900] hid-alps 0003:044E:120C.0010: hidraw0: USB HID v0.06 Device [HID 044e:120c] on usb-dummy_hcd.1-1/input0 [ 515.324122][ T5900] usb 2-1: USB disconnect, device number 12 [ 515.409557][T13172] /dev/rnullb0: Can't open blockdev [ 515.576526][T13175] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1979'. [ 515.603003][T13175] binder: 13174:13175 ioctl c0306201 200000000240 returned -11 [ 515.626995][T13177] netlink: 'syz.2.1980': attribute type 2 has an invalid length. [ 515.646059][T13177] netlink: 'syz.2.1980': attribute type 8 has an invalid length. [ 515.666477][T13177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1980'. [ 516.133793][T13189] /dev/rnullb0: Can't open blockdev [ 516.819601][T13200] netlink: 'syz.3.1987': attribute type 1 has an invalid length. [ 517.146670][ T985] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 517.316388][ T985] usb 2-1: Using ep0 maxpacket: 16 [ 517.324210][ T985] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 517.332673][ T985] usb 2-1: config 0 has no interface number 0 [ 517.341016][ T985] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 517.349250][ T5900] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 517.350468][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.368095][ T985] usb 2-1: Product: syz [ 517.372296][ T985] usb 2-1: Manufacturer: syz [ 517.377049][ T985] usb 2-1: SerialNumber: syz [ 517.384017][ T985] usb 2-1: config 0 descriptor?? [ 517.486385][ T5900] usb 5-1: device descriptor read/64, error -71 [ 517.742334][ T5900] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 517.825681][T13219] ceph: Path missing in source [ 517.848092][T13219] netlink: 'syz.2.1992': attribute type 2 has an invalid length. [ 517.866041][T13219] netlink: 'syz.2.1992': attribute type 1 has an invalid length. [ 517.876424][ T5900] usb 5-1: device descriptor read/64, error -71 [ 517.953634][ T1214] usb 2-1: USB disconnect, device number 13 [ 517.998274][ T5900] usb usb5-port1: attempt power cycle [ 518.027867][T13221] /dev/rnullb0: Can't open blockdev [ 518.319362][T13227] 9pnet_fd: Insufficient options for proto=fd [ 518.336404][ T5900] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 518.357154][ T5900] usb 5-1: device descriptor read/8, error -71 [ 518.596433][ T5900] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 518.635506][ T1214] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 518.646065][ T5900] usb 5-1: device descriptor read/8, error -71 [ 518.742930][T13243] netlink: 'syz.1.2000': attribute type 10 has an invalid length. [ 518.763778][T13246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.772100][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.776880][ T5900] usb usb5-port1: unable to enumerate USB device [ 518.783581][T13243] bridge_slave_1: left allmulticast mode [ 518.792036][T13243] bridge_slave_1: left promiscuous mode [ 518.805838][T13243] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.812472][T13246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.817594][T13247] /dev/rnullb0: Can't open blockdev [ 518.835409][ T1214] usb 3-1: config 4 has an invalid interface number: 24 but max is 0 [ 518.844106][ T1214] usb 3-1: config 4 has no interface number 0 [ 518.856236][ T1214] usb 3-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=99.3c [ 518.865855][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.877718][T13243] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 518.887235][ T1214] usb 3-1: Product: syz [ 518.891433][ T1214] usb 3-1: Manufacturer: syz [ 518.896138][ T1214] usb 3-1: SerialNumber: syz [ 518.914984][ T1214] r8152-cfgselector 3-1: Unknown version 0x0000 [ 518.926148][T13246] /dev/rnullb0: Can't open blockdev [ 519.069217][ T985] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 519.226376][ T985] usb 2-1: Invalid ep0 maxpacket: 16 [ 519.227416][ T1214] r8152-cfgselector 3-1: USB disconnect, device number 121 [ 519.366381][ T985] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 519.539174][ T985] usb 2-1: Invalid ep0 maxpacket: 16 [ 519.546080][ T985] usb usb2-port1: attempt power cycle [ 519.594377][T13253] block nbd3: Unsupported socket: shutdown callout must be supported. [ 519.874928][T13256] netlink: 'syz.2.2005': attribute type 1 has an invalid length. [ 519.893597][T13256] /dev/rnullb0: Can't open blockdev [ 519.916673][ T985] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 519.938266][ T985] usb 2-1: Invalid ep0 maxpacket: 16 [ 519.990672][T13260] libceph: resolve '400' (ret=-3): failed [ 520.066445][ T985] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 520.089659][ T985] usb 2-1: Invalid ep0 maxpacket: 16 [ 520.105012][ T985] usb usb2-port1: unable to enumerate USB device [ 520.141537][T13265] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2008'. [ 520.173779][T13265] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2008'. [ 520.198883][T13265] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2008'. [ 520.208902][T13265] netlink: 'syz.3.2008': attribute type 2 has an invalid length. [ 520.220730][T13265] netlink: 31 bytes leftover after parsing attributes in process `syz.3.2008'. [ 520.334812][T13274] /dev/rnullb0: Can't open blockdev [ 520.796815][ T5899] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 520.963724][ T5899] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 520.989326][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.009571][ T5899] usb 5-1: Product: syz [ 521.013835][ T5899] usb 5-1: Manufacturer: syz [ 521.018791][ T5899] usb 5-1: SerialNumber: syz [ 521.034018][ T5899] usb 5-1: config 0 descriptor?? [ 521.050070][ T5899] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 521.176582][ T5943] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 521.352013][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 521.396466][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 521.410148][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 521.421650][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 521.434938][ T5943] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 521.444136][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.611069][ T5943] usb 3-1: config 0 descriptor?? [ 521.624661][T13286] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 521.764465][ T5899] gspca_sunplus: reg_w_riv err -110 [ 521.780765][ T5899] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 521.924097][T13289] /dev/rnullb0: Can't open blockdev [ 522.104864][ T5943] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 523.172512][T13304] ptrace attach of "./syz-executor exec"[12750] was attempted by "./syz-executor exec"[13304] [ 523.508692][ T985] usb 5-1: USB disconnect, device number 15 [ 523.578133][T13307] /dev/rnullb0: Can't open blockdev [ 523.630498][T13312] IPVS: set_ctl: invalid protocol: 92 172.20.20.187:20003 [ 523.663342][T13314] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2023'. [ 524.138612][ T1214] usb 3-1: USB disconnect, device number 122 [ 524.756406][ T5899] usb 3-1: new low-speed USB device number 123 using dummy_hcd [ 524.836833][ T5900] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 525.002481][ T5900] usb 2-1: Using ep0 maxpacket: 16 [ 525.010707][ T5900] usb 2-1: unable to get BOS descriptor or descriptor too short [ 525.021452][ T5900] usb 2-1: config 1 has an invalid interface number: 160 but max is 0 [ 525.046419][ T5900] usb 2-1: config 1 has no interface number 0 [ 525.059531][ T5900] usb 2-1: config 1 interface 160 has no altsetting 0 [ 525.088651][ T5900] usb 2-1: New USB device found, idVendor=40d6, idProduct=0021, bcdDevice=19.47 [ 525.106353][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.119661][ T5900] usb 2-1: Product: syz [ 525.130479][ T5900] usb 2-1: Manufacturer: syz [ 525.140384][ T5900] usb 2-1: SerialNumber: syz [ 525.366906][T13338] Invalid source name [ 525.399100][ T5900] usb 2-1: USB disconnect, device number 18 [ 525.472012][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 525.472033][ T30] audit: type=1326 audit(1754268294.972:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13349 comm="syz.3.2031" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc06758eb69 code=0x0 [ 525.516488][ T985] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 525.676357][ T985] usb 5-1: Using ep0 maxpacket: 16 [ 525.683483][ T985] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 525.695686][ T985] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.713698][ T985] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.727891][ T985] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 525.741201][ T985] usb 5-1: config 7 interface 0 has no altsetting 0 [ 525.748397][ T985] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 525.761582][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.042782][ T985] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0012/input/input34 [ 526.124989][T13356] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2033'. [ 526.197029][ T985] kye 0003:0458:5010.0012: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0 [ 526.514809][T13356] bond0: (slave bond_slave_0): Releasing backup interface [ 527.146339][ C1] kye 0003:0458:5010.0012: usb_submit_urb(ctrl) failed: -1 [ 527.306484][T13383] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 527.576378][ T985] usb 3-1: new low-speed USB device number 124 using dummy_hcd [ 527.621999][T13398] /dev/rnullb0: Can't open blockdev [ 527.746751][ T985] usb 3-1: device descriptor read/64, error -71 [ 527.979274][ T5943] usb 5-1: USB disconnect, device number 16 [ 527.986474][ T985] usb 3-1: new low-speed USB device number 125 using dummy_hcd [ 528.166851][ T985] usb 3-1: device descriptor read/64, error -71 [ 528.307206][ T985] usb usb3-port1: attempt power cycle [ 528.434987][ T5899] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 528.468100][ T5899] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 528.646725][ T985] usb 3-1: new low-speed USB device number 126 using dummy_hcd [ 528.699531][ T985] usb 3-1: device descriptor read/8, error -71 [ 528.946831][ T985] usb 3-1: new low-speed USB device number 127 using dummy_hcd [ 528.979291][ T985] usb 3-1: device descriptor read/8, error -71 [ 529.097175][ T985] usb usb3-port1: unable to enumerate USB device [ 529.420125][T13427] /dev/rnullb0: Can't open blockdev [ 529.588140][T13431] /dev/nullb0: Can't lookup blockdev [ 529.815067][T13440] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 530.234900][T13452] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2059'. [ 530.311293][T13454] /dev/rnullb0: Can't open blockdev [ 530.316785][T13452] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2059'. [ 530.329877][T13452] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2059'. [ 530.362078][T13463] /dev/rnullb0: Can't open blockdev [ 531.374728][T13487] /dev/rnullb0: Can't open blockdev [ 531.397230][T13485] syzkaller1: entered promiscuous mode [ 531.402764][T13485] syzkaller1: entered allmulticast mode [ 531.502867][T13492] /dev/rnullb0: Can't open blockdev [ 531.740731][T13500] /dev/rnullb0: Can't open blockdev [ 532.056532][ T5943] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 532.206386][ T5943] usb 2-1: Using ep0 maxpacket: 8 [ 532.221693][T13520] sctp: [Deprecated]: syz.2.2078 (pid 13520) Use of int in max_burst socket option deprecated. [ 532.221693][T13520] Use struct sctp_assoc_value instead [ 532.223168][ T5943] usb 2-1: config 127 has an invalid interface number: 199 but max is 1 [ 532.240365][T13520] /dev/rnullb0: Can't open blockdev [ 532.256064][ T5943] usb 2-1: config 127 has an invalid interface number: 12 but max is 1 [ 532.264827][ T5943] usb 2-1: config 127 has no interface number 0 [ 532.273609][ T5943] usb 2-1: config 127 has no interface number 1 [ 532.280249][ T5943] usb 2-1: config 127 interface 199 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 532.294193][ T5943] usb 2-1: config 127 interface 199 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 532.305710][ T5943] usb 2-1: config 127 interface 199 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 532.331280][ T5943] usb 2-1: config 127 interface 199 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 532.349956][ T5943] usb 2-1: config 127 interface 199 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 532.364372][ T5943] usb 2-1: config 127 interface 12 altsetting 149 has a duplicate endpoint with address 0xA, skipping [ 532.380008][ T5943] usb 2-1: config 127 interface 12 altsetting 149 endpoint 0x8 has invalid maxpacket 57738, setting to 64 [ 532.391968][ T5943] usb 2-1: config 127 interface 12 altsetting 149 has a duplicate endpoint with address 0x8, skipping [ 532.412040][ T5943] usb 2-1: config 127 interface 12 has no altsetting 0 [ 532.413868][T13522] /dev/rnullb0: Can't open blockdev [ 532.438854][T13522] nfs: Unknown parameter '#${' [ 532.444778][ T5943] usb 2-1: New USB device found, idVendor=0499, idProduct=1029, bcdDevice=b0.3c [ 532.465222][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.485681][ T5943] usb 2-1: Product: í€ã‹¥å¸‹ä‚£ç·›å¿œåš†å§ é†®æ›¾Î½ìŽ€Ù¶ê¨ ì²”é‹ê‡ªì˜¿æ­ã¾±å°™â€î„žâ‚®è•žê¦©íŸ£ì«„Å—ï–çš¬â´æ¶æ–î¥îª‡é¥®å•—⧧焠侙쌦蜣㎠[ 532.522526][ T5943] usb 2-1: Manufacturer: ট᫶嚤ëªî¤¤î‹Œì¹ªå‡£à „긌厈뮓䫸⺨뺶暠톜ïšä”–ᩩ䅬ⵑ律ꗀ궖匪鵩㪔ӂᮮ륄欗モ뻑袶㲚䢡î¿ã¸Ÿâ™Žî¶ç™…⟡窆䣛蔳ᔕ勧ê»ë±‰ [ 532.575772][ T5943] usb 2-1: SerialNumber: ä€ [ 532.610566][T13503] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 532.838366][ T985] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 532.902498][ T5943] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 532.921510][ T5943] snd-usb-audio 2-1:127.199: probe with driver snd-usb-audio failed with error -2 [ 532.993880][ T5943] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 533.039830][ T985] usb 5-1: config index 0 descriptor too short (expected 1051, got 27) [ 533.061212][ T985] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 533.095928][ T985] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 533.099432][ T5943] snd-usb-audio 2-1:127.12: probe with driver snd-usb-audio failed with error -2 [ 533.124663][ T985] usb 5-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 533.144141][ T985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 533.155484][ T985] usb 5-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 533.159216][T12387] udevd[12387]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:127.12/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.169174][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.181173][ T5943] usb 2-1: USB disconnect, device number 19 [ 533.200839][ T985] usb 5-1: Product: syz [ 533.205204][ T985] usb 5-1: Manufacturer: syz [ 533.212591][ T985] usb 5-1: SerialNumber: syz [ 533.233395][ T985] usb 5-1: config 0 descriptor?? [ 533.250474][T13525] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 533.588028][T13525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 533.685170][T13525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 533.810112][ T985] keyspan 5-1:0.0: Keyspan 4 port adapter converter detected [ 533.830922][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 533.860873][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 533.883594][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 533.942761][ T985] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 533.982488][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 82 [ 534.019616][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 534.086075][ T985] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 534.143826][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 534.167198][T13540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.185129][T13540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.192101][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 534.215862][ T985] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 534.217219][T13547] /dev/rnullb0: Can't open blockdev [ 534.231301][T13542] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 534.238657][T13542] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 534.239507][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 84 [ 534.265067][ T985] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 534.285081][ T985] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 534.285358][T13542] vhci_hcd vhci_hcd.0: Device attached [ 534.370025][ T985] usb 5-1: USB disconnect, device number 17 [ 534.414561][ T985] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 534.454266][ T985] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 534.482694][ T985] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 534.516225][ T985] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 534.516844][ T5943] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 534.531616][T13556] /dev/rnullb0: Can't open blockdev [ 534.542862][ T985] keyspan 5-1:0.0: device disconnected [ 534.543007][T13557] /dev/rnullb0: Can't open blockdev [ 534.835072][T13546] vhci_hcd: connection reset by peer [ 534.844235][ T13] vhci_hcd: stop threads [ 534.849132][ T13] vhci_hcd: release socket [ 534.854832][ T13] vhci_hcd: disconnect device [ 534.898247][ T985] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 535.027628][T13570] /dev/rnullb0: Can't open blockdev [ 535.086378][ T985] usb 5-1: Using ep0 maxpacket: 8 [ 535.097740][ T985] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 535.117977][ T985] usb 5-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice=56.c0 [ 535.127717][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.141227][ T985] usb 5-1: Product: syz [ 535.145436][ T985] usb 5-1: Manufacturer: syz [ 535.171021][ T985] usb 5-1: SerialNumber: syz [ 535.416903][ T985] usb 5-1: USB disconnect, device number 18 [ 535.956410][ T985] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 535.991243][T13582] /dev/rnullb0: Can't open blockdev [ 535.991400][T13580] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 536.004186][T13580] /dev/rnullb0: Can't open blockdev [ 536.030989][T13585] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 536.052358][T13585] /dev/rnullb0: Can't open blockdev [ 536.110454][ T985] usb 2-1: device descriptor read/64, error -71 [ 536.229468][T13597] /dev/rnullb0: Can't open blockdev [ 536.368633][ T985] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 536.538870][ T985] usb 2-1: device descriptor read/64, error -71 [ 536.637223][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 536.650336][ T985] usb usb2-port1: attempt power cycle [ 536.686406][ T5900] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 536.786744][ T10] usb 5-1: device descriptor read/64, error -71 [ 536.850718][ T5900] usb 3-1: config 2 has an invalid interface number: 174 but max is 0 [ 536.859303][ T5900] usb 3-1: config 2 has no interface number 0 [ 536.865473][ T5900] usb 3-1: config 2 interface 174 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 536.884931][ T5900] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 536.894925][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.905390][ T5900] usb 3-1: Product: syz [ 536.913337][ T5900] usb 3-1: Manufacturer: syz [ 536.919896][ T5900] usb 3-1: SerialNumber: syz [ 536.939309][T13603] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 537.016449][ T985] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 537.026534][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 537.057513][ T985] usb 2-1: device descriptor read/8, error -71 [ 537.074785][T13606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.084290][T13606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.159561][ T5900] usb 3-1: probing VID:PID(0424:012C) [ 537.170746][ T10] usb 5-1: device descriptor read/64, error -71 [ 537.179567][ T5900] usb 3-1: vub300 testing BULK IN EndPoint(0) 82 [ 537.190940][ T5900] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 537.200239][ T5900] vub300 3-1:2.174: probe with driver vub300 failed with error -22 [ 537.212773][ T5900] usb 3-1: USB disconnect, device number 2 [ 537.274763][T13611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.290652][T13611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.298380][ T10] usb usb5-port1: attempt power cycle [ 537.303967][ T985] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 537.334987][ T985] usb 2-1: device descriptor read/8, error -71 [ 537.446757][ T985] usb usb2-port1: unable to enumerate USB device [ 537.646364][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 537.689274][ T10] usb 5-1: device descriptor read/8, error -71 [ 537.739686][T13616] /dev/rnullb0: Can't open blockdev [ 537.926379][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 537.947676][ T10] usb 5-1: device descriptor read/8, error -71 [ 537.996373][ T1214] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 538.066535][ T10] usb usb5-port1: unable to enumerate USB device [ 538.159323][ T1214] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 538.172888][ T1214] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 538.195699][ T1214] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 538.205319][ T1214] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 538.213433][ T1214] usb 3-1: Manufacturer: syz [ 538.227488][ T1214] usb 3-1: config 0 descriptor?? [ 538.240462][ T1214] igorplugusb 3-1:0.0: incorrect number of endpoints [ 538.553370][ T1214] usb 3-1: USB disconnect, device number 3 [ 539.525452][T13625] /dev/rnullb0: Can't open blockdev [ 539.552268][T13625] /dev/rnullb0: Can't open blockdev [ 539.586064][T13625] /dev/rnullb0: Can't open blockdev [ 539.615379][T13625] /dev/rnullb0: Can't open blockdev [ 539.631109][T13625] /dev/rnullb0: Can't open blockdev [ 539.648061][T13625] /dev/rnullb0: Can't open blockdev [ 539.670816][T13625] /dev/rnullb0: Can't open blockdev [ 539.684376][T13625] /dev/rnullb0: Can't open blockdev [ 539.696864][ T5943] vhci_hcd: vhci_device speed not set [ 539.700558][T13625] /dev/rnullb0: Can't open blockdev [ 539.721385][T13625] /dev/rnullb0: Can't open blockdev [ 539.739260][T13625] /dev/rnullb0: Can't open blockdev [ 539.753305][T13625] /dev/rnullb0: Can't open blockdev [ 539.857822][T13625] /dev/rnullb0: Can't open blockdev [ 539.864146][T13625] /dev/rnullb0: Can't open blockdev [ 539.870871][T13625] /dev/rnullb0: Can't open blockdev [ 539.889167][T13625] /dev/rnullb0: Can't open blockdev [ 539.909362][T13625] /dev/rnullb0: Can't open blockdev [ 539.915543][T13625] /dev/rnullb0: Can't open blockdev [ 539.930475][T13625] /dev/rnullb0: Can't open blockdev [ 539.938757][T13625] /dev/rnullb0: Can't open blockdev [ 539.947072][T13625] /dev/rnullb0: Can't open blockdev [ 539.953363][T13625] /dev/rnullb0: Can't open blockdev [ 539.960651][T13625] /dev/rnullb0: Can't open blockdev [ 539.980055][T13625] /dev/rnullb0: Can't open blockdev [ 540.025085][T13625] /dev/rnullb0: Can't open blockdev [ 540.061394][T13631] /dev/sg0: Can't lookup blockdev [ 540.119612][T13625] /dev/rnullb0: Can't open blockdev [ 540.129415][T13625] /dev/rnullb0: Can't open blockdev [ 540.136132][T13625] /dev/rnullb0: Can't open blockdev [ 540.147448][T13625] /dev/rnullb0: Can't open blockdev [ 540.181912][T13625] /dev/rnullb0: Can't open blockdev [ 540.207621][T13625] /dev/rnullb0: Can't open blockdev [ 540.258906][T13625] /dev/rnullb0: Can't open blockdev [ 540.293432][T13625] /dev/rnullb0: Can't open blockdev [ 540.369717][T13633] syzkaller1: entered promiscuous mode [ 540.375256][T13633] syzkaller1: entered allmulticast mode [ 540.541767][T13633] /dev/rnullb0: Can't open blockdev [ 540.579627][T13641] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 540.586304][T13641] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 540.624117][T13641] vhci_hcd vhci_hcd.0: Device attached [ 540.792003][T13642] vhci_hcd: connection closed [ 540.792946][ T331] vhci_hcd: stop threads [ 540.843297][ T331] vhci_hcd: release socket [ 540.852596][ T331] vhci_hcd: disconnect device [ 541.249834][T13664] /dev/rnullb0: Can't open blockdev [ 541.375090][T13666] netlink: 'syz.4.2122': attribute type 6 has an invalid length. [ 541.422687][T13666] netlink: 'syz.4.2122': attribute type 6 has an invalid length. [ 541.639687][T13673] netlink: 'syz.2.2124': attribute type 8 has an invalid length. [ 542.431851][T13689] /dev/rnullb0: Can't open blockdev [ 542.456513][ T5943] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 542.621634][ T5943] usb 2-1: config 201 has an invalid interface number: 249 but max is 0 [ 542.644516][ T5943] usb 2-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config [ 542.669780][ T5943] usb 2-1: config 201 has no interface number 0 [ 542.686648][ T5943] usb 2-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 542.727740][ T5943] usb 2-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 19455, setting to 64 [ 542.755749][ T5943] usb 2-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 542.781616][T13695] /dev/rnullb0: Can't open blockdev [ 542.782553][ T5943] usb 2-1: config 201 interface 249 has no altsetting 0 [ 542.844287][ T5943] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 542.866377][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.896365][ T5943] usb 2-1: Product: syz [ 542.900600][ T5943] usb 2-1: Manufacturer: syz [ 542.921221][ T5943] usb 2-1: SerialNumber: syz [ 542.936726][ T5899] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 542.940271][T13681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 543.099117][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 543.113905][ T5899] usb 3-1: config 9 has an invalid interface number: 226 but max is 0 [ 543.129734][ T5899] usb 3-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 543.156304][ T5899] usb 3-1: config 9 has no interface number 0 [ 543.165399][ T5899] usb 3-1: config 9 interface 226 altsetting 8 endpoint 0x6 has invalid maxpacket 16, setting to 8 [ 543.220985][ T5899] usb 3-1: config 9 interface 226 altsetting 8 endpoint 0x8 has invalid maxpacket 1024, setting to 8 [ 543.261555][ T5899] usb 3-1: config 9 interface 226 altsetting 8 has an endpoint descriptor with address 0x51, changing to 0x1 [ 543.308075][ T5943] ath6kl: Failed to submit usb control message: -71 [ 543.314794][ T5943] ath6kl: unable to send the bmi data to the device: -71 [ 543.320192][ T5899] usb 3-1: config 9 interface 226 altsetting 8 endpoint 0x1 has invalid maxpacket 18441, setting to 8 [ 543.353482][ T5899] usb 3-1: config 9 interface 226 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 543.373171][ T5943] ath6kl: Unable to send get target info: -71 [ 543.378040][ T5899] usb 3-1: config 9 interface 226 has no altsetting 0 [ 543.427494][ T5943] ath6kl: Failed to init ath6kl core: -71 [ 543.448222][ T5943] ath6kl_usb 2-1:201.249: probe with driver ath6kl_usb failed with error -71 [ 543.488322][ T5943] usb 2-1: USB disconnect, device number 24 [ 543.606509][ T1214] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 543.654134][T13723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.667864][T13723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.683490][T13723] /dev/rnullb0: Can't open blockdev [ 543.769161][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.780373][ T1214] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.791194][ T1214] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 543.800357][ T5943] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 543.808116][ T1214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.821962][ T1214] usb 5-1: config 0 descriptor?? [ 543.956530][ T5943] usb 2-1: device descriptor read/64, error -71 [ 544.033085][T13715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.042197][T13715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.054477][T13726] bridge0: entered allmulticast mode [ 544.058440][ T1214] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 544.072373][ T1214] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 544.080449][ T1214] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 544.089174][ T1214] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 544.096186][ T1214] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 544.116509][ T1214] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 544.123387][ T1214] arvo 0003:1E7D:30D4.0014: unknown main item tag 0x0 [ 544.142892][ T1214] arvo 0003:1E7D:30D4.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 544.175228][ T1214] arvo 0003:1E7D:30D4.0014: couldn't init struct arvo_device [ 544.196632][ T5943] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 544.225541][ T1214] arvo 0003:1E7D:30D4.0014: couldn't install keyboard [ 544.255552][ T1214] arvo 0003:1E7D:30D4.0014: probe with driver arvo failed with error -71 [ 544.291822][ T1214] usb 5-1: USB disconnect, device number 23 [ 544.327398][T13732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.336919][T13732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.367141][ T5943] usb 2-1: device descriptor read/64, error -71 [ 544.476626][ T5943] usb usb2-port1: attempt power cycle [ 544.507541][T13736] random: crng reseeded on system resumption [ 544.557682][T13738] block device autoloading is deprecated and will be removed. [ 544.766618][ T120] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 544.826516][ T5943] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 544.848220][ T5943] usb 2-1: device descriptor read/8, error -71 [ 544.955509][T13740] /dev/rnullb0: Can't open blockdev [ 545.108096][ T5943] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 545.127753][ T5943] usb 2-1: device descriptor read/8, error -71 [ 545.151864][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.168513][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.182806][T13743] /dev/rnullb0: Can't open blockdev [ 545.250525][ T5943] usb usb2-port1: unable to enumerate USB device [ 545.517533][ T5899] usb 3-1: New USB device found, idVendor=050d, idProduct=5055, bcdDevice=2a.d1 [ 545.540292][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.558784][ T5899] usb 3-1: can't set config #9, error -71 [ 545.568835][ T5899] usb 3-1: USB disconnect, device number 4 [ 545.936427][ T5899] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 546.076550][ T5899] usb 3-1: device descriptor read/64, error -71 [ 546.346513][ T5899] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 546.425852][T13752] /dev/rnullb0: Can't open blockdev [ 546.478559][T13752] 9pnet: Could not find request transport: d¶ d [ 546.486508][ T5899] usb 3-1: device descriptor read/64, error -71 [ 546.610114][ T5899] usb usb3-port1: attempt power cycle [ 546.975536][ T5899] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 546.987486][ T12] Bluetooth: hci3: Frame reassembly failed (-84) [ 547.004248][T13762] netlink: 'syz.3.2148': attribute type 11 has an invalid length. [ 547.027323][ T5899] usb 3-1: device descriptor read/8, error -71 [ 547.276511][ T5899] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 547.312227][ T5899] usb 3-1: device descriptor read/8, error -71 [ 547.426972][ T5899] usb usb3-port1: unable to enumerate USB device [ 547.780972][T13767] syzkaller1: entered promiscuous mode [ 547.790896][T13767] syzkaller1: entered allmulticast mode [ 548.066669][T13786] /dev/rnullb0: Can't open blockdev [ 548.372186][T13788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2153'. [ 548.399951][T13788] binder: 13787:13788 ioctl c0306201 200000000040 returned -22 [ 548.408427][T13788] binder: 13787:13788 ioctl c0101282 2000000001c0 returned -22 [ 548.816562][ T120] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 548.978805][T11810] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 548.988617][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 549.009846][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.036440][ T120] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 549.051723][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.081586][ T120] usb 2-1: config 0 descriptor?? [ 549.177092][T13796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.194794][T13796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.511495][ T120] hid-alps 0003:044E:121E.0015: unknown main item tag 0x0 [ 549.537696][ T120] hid-alps 0003:044E:121E.0015: unknown main item tag 0x0 [ 549.554818][ T120] hid-alps 0003:044E:121E.0015: unknown main item tag 0x0 [ 549.563805][ T120] hid-alps 0003:044E:121E.0015: unknown main item tag 0x0 [ 549.582259][ T120] hid-alps 0003:044E:121E.0015: unknown main item tag 0x0 [ 549.595135][ T120] hid-alps 0003:044E:121E.0015: hidraw0: USB HID v0.95 Device [HID 044e:121e] on usb-dummy_hcd.1-1/input0 [ 549.769738][T13812] /dev/rnullb0: Can't open blockdev [ 549.901705][ T120] usb 2-1: USB disconnect, device number 29 [ 551.666018][T13844] /dev/rnullb0: Can't open blockdev [ 551.714660][T13844] /dev/rnullb0: Can't open blockdev [ 551.801917][T13849] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 552.051644][T13849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.085351][T13849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.326622][ T5943] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 552.366381][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 552.466349][ T5943] usb 2-1: device descriptor read/64, error -71 [ 552.524102][ T10] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 552.546354][ T10] usb 3-1: config 0 has no interface number 0 [ 552.553085][ T10] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 552.574531][ T10] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 552.603872][ T10] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 552.616203][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.651620][ T10] usb 3-1: Product: syz [ 552.655940][ T10] usb 3-1: Manufacturer: syz [ 552.666042][ T10] usb 3-1: SerialNumber: syz [ 552.716544][ T5943] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 552.727898][ T10] usb 3-1: config 0 descriptor?? [ 552.747739][T13864] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 552.765555][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2178'. [ 552.781717][ T10] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 552.836058][ T10] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 552.866592][ T5943] usb 2-1: device descriptor read/64, error -71 [ 552.908257][T13875] netlink: 'syz.3.2179': attribute type 40 has an invalid length. [ 552.968389][T13875] devpts: Unknown parameter 'trans' [ 552.987256][ T5943] usb usb2-port1: attempt power cycle [ 553.003905][T13864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.029178][T13864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.255199][ T10] usb 3-1: USB disconnect, device number 9 [ 553.282362][ T10] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 553.322443][ T10] cyberjack 3-1:0.69: device disconnected [ 553.376680][ T5943] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 553.418830][ T5943] usb 2-1: device descriptor read/8, error -71 [ 553.667456][ T5943] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 553.731912][ T5943] usb 2-1: device descriptor read/8, error -71 [ 553.859587][ T5943] usb usb2-port1: unable to enumerate USB device [ 554.016726][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 554.188820][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.216550][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.241986][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 554.261470][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.398788][ T10] usb 5-1: config 0 descriptor?? [ 554.629212][ T10] keytouch 0003:0926:3333.0016: fixing up Keytouch IEC report descriptor [ 554.664004][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0016/input/input35 [ 554.810467][ T10] keytouch 0003:0926:3333.0016: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 555.536068][T13906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.556707][T13906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.804199][T13906] netlink: 'syz.3.2188': attribute type 16 has an invalid length. [ 555.812422][T13906] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2188'. [ 555.841803][T13906] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.849627][T13907] netlink: 'syz.3.2188': attribute type 1 has an invalid length. [ 556.006511][ T10] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 556.276384][ T5899] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 556.426475][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 556.439140][ T5899] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 556.452781][ T5899] usb 2-1: config 0 has no interface number 0 [ 556.459480][ T5899] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 556.471313][ T5899] usb 2-1: config 0 interface 85 has no altsetting 0 [ 556.484192][ T5899] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 556.494430][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.503279][ T5899] usb 2-1: Product: syz [ 556.508008][ T5899] usb 2-1: Manufacturer: syz [ 556.512738][ T5899] usb 2-1: SerialNumber: syz [ 556.522725][ T5899] usb 2-1: config 0 descriptor?? [ 556.543760][T13915] FAULT_INJECTION: forcing a failure. [ 556.543760][T13915] name failslab, interval 1, probability 0, space 0, times 1 [ 556.557162][T13915] CPU: 1 UID: 0 PID: 13915 Comm: syz.3.2191 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 556.557192][T13915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 556.557204][T13915] Call Trace: [ 556.557212][T13915] [ 556.557222][T13915] dump_stack_lvl+0x189/0x250 [ 556.557260][T13915] ? __pfx____ratelimit+0x10/0x10 [ 556.557288][T13915] ? __pfx_dump_stack_lvl+0x10/0x10 [ 556.557315][T13915] ? __pfx__printk+0x10/0x10 [ 556.557349][T13915] ? __pfx___might_resched+0x10/0x10 [ 556.557371][T13915] ? fs_reclaim_acquire+0x7d/0x100 [ 556.557398][T13915] should_fail_ex+0x414/0x560 [ 556.557427][T13915] should_failslab+0xa8/0x100 [ 556.557449][T13915] __kmalloc_noprof+0xcb/0x4f0 [ 556.557476][T13915] ? kfree+0x4d/0x440 [ 556.557500][T13915] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 556.557541][T13915] tomoyo_realpath_from_path+0xe3/0x5d0 [ 556.557567][T13915] ? tomoyo_domain+0xd9/0x130 [ 556.557598][T13915] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 556.557620][T13915] tomoyo_path_number_perm+0x1e8/0x5a0 [ 556.557643][T13915] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 556.557684][T13915] ? __lock_acquire+0xab9/0xd20 [ 556.557727][T13915] ? __fget_files+0x2a/0x420 [ 556.557755][T13915] ? __fget_files+0x2a/0x420 [ 556.557778][T13915] ? __fget_files+0x3a0/0x420 [ 556.557799][T13915] ? __fget_files+0x2a/0x420 [ 556.557829][T13915] security_file_ioctl+0xcb/0x2d0 [ 556.557861][T13915] __se_sys_ioctl+0x47/0x170 [ 556.557895][T13915] do_syscall_64+0xfa/0x3b0 [ 556.557912][T13915] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.557940][T13915] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.557960][T13915] ? clear_bhb_loop+0x60/0xb0 [ 556.557984][T13915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.558003][T13915] RIP: 0033:0x7fc06758eb69 [ 556.558022][T13915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.558039][T13915] RSP: 002b:00007fc0683a4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.558062][T13915] RAX: ffffffffffffffda RBX: 00007fc0677b5fa0 RCX: 00007fc06758eb69 [ 556.558076][T13915] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 556.558090][T13915] RBP: 00007fc0683a4090 R08: 0000000000000000 R09: 0000000000000000 [ 556.558102][T13915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.558114][T13915] R13: 0000000000000000 R14: 00007fc0677b5fa0 R15: 00007ffdffdcbf38 [ 556.558146][T13915] [ 556.558181][T13915] ERROR: Out of memory at tomoyo_realpath_from_path. [ 556.893878][T13917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.905756][T13917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.983141][T13922] /dev/rnullb0: Can't open blockdev [ 557.016181][T13924] Bluetooth: Invalid esc byte 0x0d [ 557.028836][T13925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.038472][T13925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.045273][T13926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.062981][T13926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.110212][ T13] Bluetooth: (null): Invalid header checksum [ 557.156443][ T5899] appletouch 2-1:0.85: Geyser mode initialized. [ 557.157742][ T13] Bluetooth: (null): Invalid header checksum [ 557.165212][ T5899] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input36 [ 557.219772][ T13] Bluetooth: (null): Invalid header checksum [ 557.233484][ T1214] IPVS: starting estimator thread 0... [ 557.360960][T13933] IPVS: using max 24 ests per chain, 57600 per kthread [ 557.530925][ T5900] usb 2-1: USB disconnect, device number 34 [ 557.540005][ T1214] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 557.613780][ T5900] appletouch 2-1:0.85: input: appletouch disconnected [ 557.626919][ T5943] usb 5-1: USB disconnect, device number 25 [ 557.718562][ T1214] usb 3-1: Using ep0 maxpacket: 16 [ 557.747265][ T1214] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 557.771533][ T1214] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.818375][ T1214] usb 3-1: Product: syz [ 557.831127][ T1214] usb 3-1: Manufacturer: syz [ 557.839315][ T1214] usb 3-1: SerialNumber: syz [ 557.849391][ T1214] usb 3-1: config 0 descriptor?? [ 557.858438][ T1214] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 557.923079][ T1214] usb 3-1: Detected FT232H [ 558.168262][T13948] FAULT_INJECTION: forcing a failure. [ 558.168262][T13948] name failslab, interval 1, probability 0, space 0, times 0 [ 558.231329][T13948] CPU: 0 UID: 0 PID: 13948 Comm: syz.1.2200 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 558.231365][T13948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 558.231379][T13948] Call Trace: [ 558.231387][T13948] [ 558.231397][T13948] dump_stack_lvl+0x189/0x250 [ 558.231431][T13948] ? __pfx____ratelimit+0x10/0x10 [ 558.231460][T13948] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.231487][T13948] ? __pfx__printk+0x10/0x10 [ 558.231518][T13948] ? __pfx___might_resched+0x10/0x10 [ 558.231541][T13948] ? fs_reclaim_acquire+0x7d/0x100 [ 558.231568][T13948] should_fail_ex+0x414/0x560 [ 558.231598][T13948] should_failslab+0xa8/0x100 [ 558.231620][T13948] __kmalloc_noprof+0xcb/0x4f0 [ 558.231650][T13948] ? tomoyo_encode+0x28b/0x550 [ 558.231680][T13948] tomoyo_encode+0x28b/0x550 [ 558.231712][T13948] tomoyo_realpath_from_path+0x58d/0x5d0 [ 558.231750][T13948] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 558.231772][T13948] tomoyo_path_number_perm+0x1e8/0x5a0 [ 558.231794][T13948] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 558.231834][T13948] ? __lock_acquire+0xab9/0xd20 [ 558.231877][T13948] ? __fget_files+0x2a/0x420 [ 558.231905][T13948] ? __fget_files+0x2a/0x420 [ 558.231925][T13948] ? __fget_files+0x3a0/0x420 [ 558.231946][T13948] ? __fget_files+0x2a/0x420 [ 558.231973][T13948] security_file_ioctl+0xcb/0x2d0 [ 558.232004][T13948] __se_sys_ioctl+0x47/0x170 [ 558.232038][T13948] do_syscall_64+0xfa/0x3b0 [ 558.232063][T13948] ? lockdep_hardirqs_on+0x9c/0x150 [ 558.232090][T13948] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.232108][T13948] ? clear_bhb_loop+0x60/0xb0 [ 558.232132][T13948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.232151][T13948] RIP: 0033:0x7ff267d8eb69 [ 558.232170][T13948] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.232188][T13948] RSP: 002b:00007ff268b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 558.232219][T13948] RAX: ffffffffffffffda RBX: 00007ff267fb5fa0 RCX: 00007ff267d8eb69 [ 558.232234][T13948] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 558.232247][T13948] RBP: 00007ff268b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 558.232259][T13948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.232271][T13948] R13: 0000000000000000 R14: 00007ff267fb5fa0 R15: 00007ffe01d9fe18 [ 558.232305][T13948] [ 558.232358][T13948] ERROR: Out of memory at tomoyo_realpath_from_path. [ 558.312756][T13951] fuse: Unknown parameter '' [ 558.740075][T13959] /dev/rnullb0: Can't open blockdev [ 558.764390][ T1214] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 558.777574][ T1214] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 558.791583][ T1214] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 558.807952][ T1214] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 558.835735][ T1214] usb 3-1: USB disconnect, device number 10 [ 558.849210][ T1214] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 558.864991][ T1214] ftdi_sio 3-1:0.0: device disconnected [ 559.405739][T13981] FAULT_INJECTION: forcing a failure. [ 559.405739][T13981] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 559.422467][T13981] CPU: 0 UID: 0 PID: 13981 Comm: syz.1.2212 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 559.422496][T13981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.422508][T13981] Call Trace: [ 559.422525][T13981] [ 559.422534][T13981] dump_stack_lvl+0x189/0x250 [ 559.422569][T13981] ? __pfx____ratelimit+0x10/0x10 [ 559.422598][T13981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 559.422626][T13981] ? __pfx__printk+0x10/0x10 [ 559.422653][T13981] ? __might_fault+0xb0/0x130 [ 559.422697][T13981] should_fail_ex+0x414/0x560 [ 559.422726][T13981] _copy_from_user+0x2d/0xb0 [ 559.422748][T13981] comedi_unlocked_ioctl+0x495/0x1020 [ 559.422784][T13981] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 559.422807][T13981] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 559.422833][T13981] ? do_vfs_ioctl+0xbe8/0x1430 [ 559.422855][T13981] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 559.422890][T13981] ? __lock_acquire+0xab9/0xd20 [ 559.422937][T13981] ? __fget_files+0x2a/0x420 [ 559.422971][T13981] ? __fget_files+0x2a/0x420 [ 559.423000][T13981] ? bpf_lsm_file_ioctl+0x9/0x20 [ 559.423028][T13981] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 559.423051][T13981] __se_sys_ioctl+0xfc/0x170 [ 559.423085][T13981] do_syscall_64+0xfa/0x3b0 [ 559.423103][T13981] ? lockdep_hardirqs_on+0x9c/0x150 [ 559.423130][T13981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.423151][T13981] ? clear_bhb_loop+0x60/0xb0 [ 559.423176][T13981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.423212][T13981] RIP: 0033:0x7ff267d8eb69 [ 559.423230][T13981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.423248][T13981] RSP: 002b:00007ff268b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 559.423270][T13981] RAX: ffffffffffffffda RBX: 00007ff267fb5fa0 RCX: 00007ff267d8eb69 [ 559.423284][T13981] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 559.423297][T13981] RBP: 00007ff268b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 559.423310][T13981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.423322][T13981] R13: 0000000000000000 R14: 00007ff267fb5fa0 R15: 00007ffe01d9fe18 [ 559.423356][T13981] [ 559.646233][ C0] vkms_vblank_simulate: vblank timer overrun [ 559.832403][T13987] dvmrp1: entered allmulticast mode [ 559.951643][T13991] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2217'. [ 560.051961][T13995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.062240][T13995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.086530][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 560.240512][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 560.262650][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 560.263904][T14000] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x800) [ 560.288904][T13995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.289834][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.305626][T13995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.314679][T14000] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 560.321228][T14000] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 560.322178][ T10] usb 2-1: config 0 descriptor?? [ 560.336839][ T1214] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 560.344565][T14000] vhci_hcd vhci_hcd.0: Device attached [ 560.350486][T14001] vhci_hcd: cannot find the pending unlink 1342177280 [ 560.506858][ T1214] usb 3-1: Invalid ep0 maxpacket: 16 [ 560.586517][ T5899] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 560.594174][ T120] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 560.636581][ T1214] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 560.756332][ T120] usb 5-1: Using ep0 maxpacket: 16 [ 560.763600][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.769155][T13987] Invalid logical block size (2) [ 560.782866][ T120] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 560.792548][ T1214] usb 3-1: Invalid ep0 maxpacket: 16 [ 560.795042][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.808751][ T1214] usb usb3-port1: attempt power cycle [ 560.819900][ T120] usb 5-1: config 0 descriptor?? [ 560.821397][T13987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.851577][T13987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.869546][T13987] /dev/rnullb0: Can't open blockdev [ 560.907791][ T10] video4linux radio48: keene_cmd_main failed (-71) [ 560.915029][ T10] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 560.961182][ T10] usb 2-1: USB disconnect, device number 35 [ 561.082298][T14008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.093034][T14008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.104464][T14008] netlink: 'syz.3.2222': attribute type 29 has an invalid length. [ 561.115068][T14008] netlink: 'syz.3.2222': attribute type 29 has an invalid length. [ 561.125224][T14008] overlay: Unknown parameter 'permit_directio' [ 561.138564][T14008] /dev/rnullb0: Can't open blockdev [ 561.166590][ T1214] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 561.188006][ T1214] usb 3-1: Invalid ep0 maxpacket: 16 [ 561.308230][ T120] cypress 0003:04B4:07B1.0017: item fetching failed at offset 2/5 [ 561.316646][ T1214] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 561.317379][ T120] cypress 0003:04B4:07B1.0017: parse failed [ 561.330516][ T120] cypress 0003:04B4:07B1.0017: probe with driver cypress failed with error -22 [ 561.339344][ T1214] usb 3-1: Invalid ep0 maxpacket: 16 [ 561.346073][ T1214] usb usb3-port1: unable to enumerate USB device [ 561.529377][T14001] vhci_hcd: connection reset by peer [ 561.538080][ T331] vhci_hcd: stop threads [ 561.540970][ T1214] usb 5-1: USB disconnect, device number 26 [ 561.542824][ T331] vhci_hcd: release socket [ 561.565742][ T331] vhci_hcd: disconnect device [ 561.574018][T14010] FAULT_INJECTION: forcing a failure. [ 561.574018][T14010] name failslab, interval 1, probability 0, space 0, times 0 [ 561.589296][T14010] CPU: 1 UID: 0 PID: 14010 Comm: syz.1.2223 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 561.589326][T14010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 561.589338][T14010] Call Trace: [ 561.589346][T14010] [ 561.589356][T14010] dump_stack_lvl+0x189/0x250 [ 561.589388][T14010] ? __pfx____ratelimit+0x10/0x10 [ 561.589418][T14010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.589445][T14010] ? __pfx__printk+0x10/0x10 [ 561.589475][T14010] ? __pfx___might_resched+0x10/0x10 [ 561.589497][T14010] ? fs_reclaim_acquire+0x7d/0x100 [ 561.589532][T14010] should_fail_ex+0x414/0x560 [ 561.589561][T14010] should_failslab+0xa8/0x100 [ 561.589584][T14010] __kmalloc_noprof+0xcb/0x4f0 [ 561.589613][T14010] ? do_insn_ioctl+0x100/0x580 [ 561.589641][T14010] do_insn_ioctl+0x100/0x580 [ 561.589672][T14010] comedi_unlocked_ioctl+0x8b0/0x1020 [ 561.589705][T14010] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 561.589729][T14010] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 561.589755][T14010] ? do_vfs_ioctl+0xbe8/0x1430 [ 561.589778][T14010] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 561.589813][T14010] ? __lock_acquire+0xab9/0xd20 [ 561.589858][T14010] ? __fget_files+0x2a/0x420 [ 561.589885][T14010] ? __fget_files+0x2a/0x420 [ 561.589912][T14010] ? bpf_lsm_file_ioctl+0x9/0x20 [ 561.589938][T14010] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 561.589958][T14010] __se_sys_ioctl+0xfc/0x170 [ 561.589980][T14010] do_syscall_64+0xfa/0x3b0 [ 561.589991][T14010] ? lockdep_hardirqs_on+0x9c/0x150 [ 561.590007][T14010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.590019][T14010] ? clear_bhb_loop+0x60/0xb0 [ 561.590034][T14010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.590045][T14010] RIP: 0033:0x7ff267d8eb69 [ 561.590058][T14010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.590068][T14010] RSP: 002b:00007ff268b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.590083][T14010] RAX: ffffffffffffffda RBX: 00007ff267fb5fa0 RCX: 00007ff267d8eb69 [ 561.590092][T14010] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 561.590100][T14010] RBP: 00007ff268b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 561.590108][T14010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.590115][T14010] R13: 0000000000000000 R14: 00007ff267fb5fa0 R15: 00007ffe01d9fe18 [ 561.590133][T14010] [ 561.919450][T14012] /dev/rnullb0: Can't open blockdev [ 562.005390][T14018] /dev/rnullb0: Can't open blockdev [ 562.191653][T14025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2229'. [ 562.821510][T14035] FAULT_INJECTION: forcing a failure. [ 562.821510][T14035] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 562.839429][T14035] CPU: 1 UID: 0 PID: 14035 Comm: syz.1.2233 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 562.839468][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 562.839481][T14035] Call Trace: [ 562.839490][T14035] [ 562.839498][T14035] dump_stack_lvl+0x189/0x250 [ 562.839537][T14035] ? __pfx____ratelimit+0x10/0x10 [ 562.839567][T14035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 562.839593][T14035] ? __pfx__printk+0x10/0x10 [ 562.839637][T14035] should_fail_ex+0x414/0x560 [ 562.839666][T14035] _copy_to_user+0x31/0xb0 [ 562.839689][T14035] do_insn_ioctl+0x2b8/0x580 [ 562.839720][T14035] comedi_unlocked_ioctl+0x8b0/0x1020 [ 562.839754][T14035] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 562.839777][T14035] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 562.839804][T14035] ? do_vfs_ioctl+0xbe8/0x1430 [ 562.839828][T14035] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 562.839863][T14035] ? __lock_acquire+0xab9/0xd20 [ 562.839910][T14035] ? __fget_files+0x2a/0x420 [ 562.839941][T14035] ? __fget_files+0x2a/0x420 [ 562.839970][T14035] ? bpf_lsm_file_ioctl+0x9/0x20 [ 562.839998][T14035] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 562.840020][T14035] __se_sys_ioctl+0xfc/0x170 [ 562.840053][T14035] do_syscall_64+0xfa/0x3b0 [ 562.840070][T14035] ? lockdep_hardirqs_on+0x9c/0x150 [ 562.840098][T14035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.840118][T14035] ? clear_bhb_loop+0x60/0xb0 [ 562.840143][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.840162][T14035] RIP: 0033:0x7ff267d8eb69 [ 562.840181][T14035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.840199][T14035] RSP: 002b:00007ff268b5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.840222][T14035] RAX: ffffffffffffffda RBX: 00007ff267fb5fa0 RCX: 00007ff267d8eb69 [ 562.840236][T14035] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 562.840249][T14035] RBP: 00007ff268b5a090 R08: 0000000000000000 R09: 0000000000000000 [ 562.840262][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.840275][T14035] R13: 0000000000000000 R14: 00007ff267fb5fa0 R15: 00007ffe01d9fe18 [ 562.840307][T14035] [ 563.070819][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.077264][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.362800][T14044] /dev/rnullb0: Can't open blockdev [ 563.806327][ T10] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 563.826472][T12982] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 563.975348][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 563.986439][ T10] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 563.995594][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.007692][ T10] usb 2-1: config 0 descriptor?? [ 564.014355][T14055] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 564.014767][T12982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 564.049041][T12982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 564.062049][T12982] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 564.074104][T12982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.098144][T12982] usb 3-1: config 0 descriptor?? [ 564.458341][ T10] elan 0003:04F3:0755.0018: unknown main item tag 0x0 [ 564.480178][ T10] elan 0003:04F3:0755.0018: item fetching failed at offset 3/5 [ 564.482191][T14062] FAULT_INJECTION: forcing a failure. [ 564.482191][T14062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.490414][ T10] elan 0003:04F3:0755.0018: Hid Parse failed [ 564.514304][ T10] elan 0003:04F3:0755.0018: probe with driver elan failed with error -22 [ 564.526954][T14062] CPU: 1 UID: 0 PID: 14062 Comm: syz.4.2243 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 564.526984][T14062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.526995][T14062] Call Trace: [ 564.527004][T14062] [ 564.527012][T14062] dump_stack_lvl+0x189/0x250 [ 564.527045][T14062] ? __pfx____ratelimit+0x10/0x10 [ 564.527073][T14062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.527100][T14062] ? __pfx__printk+0x10/0x10 [ 564.527142][T14062] should_fail_ex+0x414/0x560 [ 564.527172][T14062] _copy_to_user+0x31/0xb0 [ 564.527195][T14062] simple_read_from_buffer+0xe1/0x170 [ 564.527224][T14062] proc_fail_nth_read+0x1b3/0x220 [ 564.527250][T14062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.527279][T14062] ? rw_verify_area+0x2a6/0x4d0 [ 564.527299][T14062] ? __lock_acquire+0xab9/0xd20 [ 564.527317][T14062] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.527348][T14062] vfs_read+0x200/0x980 [ 564.527368][T14062] ? fdget_pos+0x247/0x320 [ 564.527397][T14062] ? __pfx___mutex_lock+0x10/0x10 [ 564.527428][T14062] ? __pfx_vfs_read+0x10/0x10 [ 564.527451][T14062] ? __fget_files+0x2a/0x420 [ 564.527503][T14062] ? __fget_files+0x3a0/0x420 [ 564.527524][T14062] ? __fget_files+0x2a/0x420 [ 564.527558][T14062] ksys_read+0x145/0x250 [ 564.527580][T14062] ? __pfx_ksys_read+0x10/0x10 [ 564.527607][T14062] ? do_syscall_64+0xbe/0x3b0 [ 564.527629][T14062] do_syscall_64+0xfa/0x3b0 [ 564.527645][T14062] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.527673][T14062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.527693][T14062] ? clear_bhb_loop+0x60/0xb0 [ 564.527719][T14062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.527737][T14062] RIP: 0033:0x7f932fd8d57c [ 564.527757][T14062] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 564.527774][T14062] RSP: 002b:00007f9330c5e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.527797][T14062] RAX: ffffffffffffffda RBX: 00007f932ffb5fa0 RCX: 00007f932fd8d57c [ 564.527812][T14062] RDX: 000000000000000f RSI: 00007f9330c5e0a0 RDI: 0000000000000004 [ 564.527824][T14062] RBP: 00007f9330c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 564.527837][T14062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.527849][T14062] R13: 0000000000000000 R14: 00007f932ffb5fa0 R15: 00007ffe66b0ccb8 [ 564.527882][T14062] [ 564.775110][T12982] cp2112 0003:10C4:EA90.0019: unknown main item tag 0x0 [ 564.775808][T14055] /dev/rnullb0: Can't open blockdev [ 564.823963][T12982] cp2112 0003:10C4:EA90.0019: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 564.830076][ T10] usb 2-1: USB disconnect, device number 36 [ 564.905786][T12982] cp2112 0003:10C4:EA90.0019: Part Number: 0x00 Device Version: 0x4D [ 565.200735][ T5900] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 565.369158][ T5900] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 565.378705][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.417433][ T5900] usb 5-1: config 0 descriptor?? [ 565.445560][ T5900] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 565.544590][T12982] cp2112 0003:10C4:EA90.0019: error reading lock byte: -71 [ 565.583786][T12982] usb 3-1: USB disconnect, device number 15 [ 565.640466][ T5900] gp8psk: usb in 128 operation failed. [ 565.686374][ T5899] vhci_hcd: vhci_device speed not set [ 565.758975][T14075] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2246'. [ 565.861623][ T5900] gp8psk: usb in 146 operation failed. [ 565.872625][ T5900] gp8psk: failed to get FW version [ 565.932871][ T5900] gp8psk: FPGA Version = 196 [ 566.012316][T14083] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 566.032755][T14084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.053642][T14084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.115795][T14083] /dev/rnullb0: Can't open blockdev [ 566.138701][T14068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.161156][T14068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.215719][T14088] /dev/rnullb0: Can't open blockdev [ 566.223963][T14087] /dev/rnullb0: Can't open blockdev [ 566.328649][T14092] /dev/rnullb0: Can't open blockdev [ 566.507970][T14096] program syz.1.2250 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 566.928697][T14113] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 567.254907][T14127] /dev/rnullb0: Can't open blockdev [ 567.319228][T14132] /dev/rnullb0: Can't open blockdev [ 567.441107][T14139] /dev/rnullb0: Can't open blockdev [ 567.446767][ T1214] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 567.454073][T14140] /dev/rnullb0: Can't open blockdev [ 567.604058][ T1214] usb 3-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 567.618994][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.644147][ T1214] usb 3-1: config 0 descriptor?? [ 567.841393][T14151] 9pnet_fd: Insufficient options for proto=fd [ 567.851048][T14151] 9pnet_fd: Insufficient options for proto=fd [ 567.855800][ T1214] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 567.858623][T14151] 9pnet_fd: Insufficient options for proto=fd [ 567.879495][T14151] 9pnet_fd: Insufficient options for proto=fd [ 567.886207][T14151] 9pnet_fd: Insufficient options for proto=fd [ 567.896959][ T1214] asix 3-1:0.0: probe with driver asix failed with error -71 [ 567.903902][ T1214] usb 3-1: USB disconnect, device number 16 [ 567.921810][ T5900] gp8psk: usb in 138 operation failed. [ 567.930043][T14151] 9pnet_fd: Insufficient options for proto=fd [ 567.934610][ T5900] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 567.963439][ T5900] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 567.990784][ T5900] usb 5-1: USB disconnect, device number 27 [ 568.304014][T14156] netlink: 'syz.4.2269': attribute type 1 has an invalid length. [ 568.420296][T14169] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 568.446038][T14168] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 568.535640][T14171] syz.2.2273: attempt to access beyond end of device [ 568.535640][T14171] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 568.761422][T14180] netlink: 'syz.4.2276': attribute type 6 has an invalid length. [ 568.783769][T14182] /dev/rnullb0: Can't open blockdev [ 568.796484][T14180] netlink: 88 bytes leftover after parsing attributes in process `syz.4.2276'. [ 568.843717][T14184] /dev/rnullb0: Can't open blockdev [ 568.983730][T14187] binder_alloc: 14186: binder_alloc_buf, no vma [ 569.001610][T14187] /dev/rnullb0: Can't open blockdev [ 569.158398][T14196] /dev/sg0: Can't lookup blockdev [ 569.511079][T14202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2284'. [ 569.664507][T14205] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 569.675953][T14206] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 569.905044][T14214] /dev/rnullb0: Can't open blockdev [ 569.936804][ T120] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 570.045360][T14219] /dev/rnullb0: Can't open blockdev [ 570.097853][ T120] usb 5-1: Using ep0 maxpacket: 8 [ 570.124711][ T120] usb 5-1: config 127 has an invalid interface number: 227 but max is 1 [ 570.145813][ T120] usb 5-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 570.168868][ T120] usb 5-1: config 127 has an invalid interface number: 244 but max is 1 [ 570.185963][ T120] usb 5-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 570.214031][T14222] netlink: 'syz.3.2292': attribute type 3 has an invalid length. [ 570.224522][ T120] usb 5-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 570.235883][T14222] /dev/rnullb0: Can't open blockdev [ 570.241298][ T120] usb 5-1: config 127 has no interface number 0 [ 570.248073][ T120] usb 5-1: config 127 has no interface number 1 [ 570.254420][ T120] usb 5-1: config 127 interface 227 altsetting 3 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 570.268407][ T120] usb 5-1: config 127 interface 227 altsetting 3 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 570.280313][ T120] usb 5-1: config 127 interface 227 altsetting 3 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 570.306458][ T120] usb 5-1: config 127 interface 244 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 570.331249][ T120] usb 5-1: config 127 interface 244 altsetting 1 endpoint 0x4 has invalid maxpacket 576, setting to 64 [ 570.366309][ T120] usb 5-1: config 127 interface 244 altsetting 1 has a duplicate endpoint with address 0x7, skipping [ 570.396957][T14231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.398702][ T120] usb 5-1: config 127 interface 244 altsetting 1 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 570.436037][ T120] usb 5-1: config 127 interface 244 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 570.447642][ T120] usb 5-1: config 127 interface 244 altsetting 1 endpoint 0xC has an invalid bInterval 255, changing to 7 [ 570.457013][ T5900] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 570.462689][ T120] usb 5-1: config 127 interface 244 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 570.480475][ T120] usb 5-1: config 127 interface 244 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 570.492850][ T120] usb 5-1: config 127 interface 244 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 570.510031][ T120] usb 5-1: config 127 interface 244 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 570.522207][ T120] usb 5-1: config 127 interface 244 altsetting 1 endpoint 0xF has invalid maxpacket 1088, setting to 64 [ 570.541510][ T120] usb 5-1: config 127 interface 244 altsetting 1 has 15 endpoint descriptors, different from the interface descriptor's value: 16 [ 570.558985][ T120] usb 5-1: config 127 interface 227 has no altsetting 0 [ 570.581214][ T120] usb 5-1: config 127 interface 244 has no altsetting 0 [ 570.619429][ T120] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1050, bcdDevice=d7.52 [ 570.629475][ T120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.638111][ T120] usb 5-1: Product: syz [ 570.642413][ T120] usb 5-1: Manufacturer: syz [ 570.650026][ T120] usb 5-1: SerialNumber: syz [ 570.652894][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.677486][ T5900] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 570.689616][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.701062][ T5900] usb 3-1: config 0 descriptor?? [ 570.712115][ T5900] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 570.738690][T14236] syzkaller1: entered promiscuous mode [ 570.744444][T14236] syzkaller1: entered allmulticast mode [ 570.754619][T14236] /dev/rnullb0: Can't open blockdev [ 570.888029][ T120] option 5-1:127.227: GSM modem (1-port) converter detected [ 570.909383][T14226] /dev/rnullb0: Can't open blockdev [ 570.923600][T14226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.944899][ T120] usb 5-1: USB disconnect, device number 28 [ 570.959207][T14241] /dev/rnullb0: Can't open blockdev [ 570.971186][ T120] option 5-1:127.227: device disconnected [ 570.983405][T14226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.011734][ T5900] usb 3-1: USB disconnect, device number 17 [ 571.406556][ T120] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 571.571382][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 571.594271][ T120] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 571.607230][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.621032][ T120] usb 5-1: config 0 descriptor?? [ 572.055457][T14253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.072960][T14253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.220681][T14259] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2302'. [ 572.257625][ T120] usbhid 5-1:0.0: can't add hid device: -71 [ 572.257785][ T120] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 572.264485][ T120] usb 5-1: USB disconnect, device number 29 [ 572.560006][T14271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 572.586044][T14271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 572.796509][ T120] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 572.923421][T14277] /dev/rnullb0: Can't open blockdev [ 572.970896][ T120] usb 3-1: config 0 has an invalid interface number: 157 but max is 0 [ 572.982328][ T120] usb 3-1: config 0 has no interface number 0 [ 572.994359][ T120] usb 3-1: config 0 interface 157 has no altsetting 0 [ 573.007216][ T120] usb 3-1: New USB device found, idVendor=2639, idProduct=0002, bcdDevice=3b.1d [ 573.016755][ T120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.032204][ T120] usb 3-1: config 0 descriptor?? [ 573.249069][ T5900] usb 3-1: USB disconnect, device number 18 [ 573.272805][T14286] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 573.280674][T14286] /dev/rnullb0: Can't open blockdev [ 573.416683][ T120] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 573.580514][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 573.588553][ T120] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 573.600009][ T120] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.610562][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 573.617919][ T120] usb 2-1: New USB device found, idVendor=28de, idProduct=1205, bcdDevice= 0.00 [ 573.627832][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.640942][ T120] usb 2-1: config 0 descriptor?? [ 573.648138][ T5899] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 573.808379][ T5899] usb 5-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0 [ 573.835714][ T5899] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.846358][ T5899] usb 5-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 573.859455][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.889831][ T5899] usb 5-1: config 0 descriptor?? [ 574.094201][ T120] hid-steam 0003:28DE:1205.001A: unknown main item tag 0x0 [ 574.110268][ T120] hid-steam 0003:28DE:1205.001A: unknown main item tag 0x0 [ 574.120359][ T120] hid-steam 0003:28DE:1205.001A: : USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 574.186958][ T120] hid-steam 0003:28DE:1205.001A: Steam Controller 'XXXXXXXXXX' connected [ 574.226772][ T120] input: Steam Deck as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.001A/input/input38 [ 574.285427][ T120] input: Steam Deck Motion Sensors as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28DE:1205.001A/input/input39 [ 574.310990][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.327040][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.427423][ T5899] apple 0003:05AC:027A.001B: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.4-1/input0 [ 574.489774][ T120] hid-steam 0003:28DE:1205.001C: unknown main item tag 0x0 [ 574.527043][ T120] hid-steam 0003:28DE:1205.001C: unknown main item tag 0x0 [ 574.590897][ T120] hid-steam 0003:28DE:1205.001C: hidraw1: USB HID v0.00 Device [HID 28de:1205] on usb-dummy_hcd.1-1/input0 [ 574.633293][T14288] /dev/rnullb0: Can't open blockdev [ 574.648949][T12982] usb 5-1: USB disconnect, device number 30 [ 574.676855][ T120] usb 2-1: USB disconnect, device number 37 [ 574.715418][T14298] fido_id[14298]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 574.821608][ T120] hid-steam 0003:28DE:1205.001A: Steam Controller 'XXXXXXXXXX' disconnected [ 574.824137][T14300] fido_id[14300]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 575.578821][T14315] program syz.3.2322 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 575.828948][ T5900] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 575.925473][T14321] /dev/rnullb0: Can't open blockdev [ 576.040087][ T5900] usb 5-1: Using ep0 maxpacket: 32 [ 576.077889][ T5900] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 576.091751][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.101334][ T5900] usb 5-1: Product: syz [ 576.105578][ T5900] usb 5-1: Manufacturer: syz [ 576.113806][ T5900] usb 5-1: SerialNumber: syz [ 576.134742][ T5900] usb 5-1: config 0 descriptor?? [ 576.376338][T12982] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 576.406485][ T120] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 576.526478][T12982] usb 3-1: Using ep0 maxpacket: 32 [ 576.541257][T12982] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 576.553635][T12982] usb 3-1: config 0 has no interface number 0 [ 576.560999][T12982] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 576.567468][ T5900] airspy 5-1:0.0: Board ID: 00 [ 576.576614][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 576.584494][T12982] usb 3-1: config 0 interface 85 has no altsetting 0 [ 576.589310][ T5900] airspy 5-1:0.0: Firmware version: [ 576.594553][ T120] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 576.615496][ T120] usb 2-1: config 0 interface 0 has no altsetting 0 [ 576.623127][ T120] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 576.634400][T12982] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 576.653143][T12982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.664096][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.673334][T12982] usb 3-1: Product: syz [ 576.682203][T12982] usb 3-1: Manufacturer: syz [ 576.688369][ T120] usb 2-1: config 0 descriptor?? [ 576.696092][T12982] usb 3-1: SerialNumber: syz [ 576.731766][T12982] usb 3-1: config 0 descriptor?? [ 576.969043][ T5900] airspy 5-1:0.0: usb_control_msg() failed -71 request 0e [ 577.001459][ T5900] airspy 5-1:0.0: Registered as swradio24 [ 577.012876][ T5900] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 577.038537][ T5900] usb 5-1: USB disconnect, device number 31 [ 577.348333][T12982] appletouch 3-1:0.85: Geyser mode initialized. [ 577.360992][T12982] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input40 [ 577.566063][T12982] usb 3-1: USB disconnect, device number 19 [ 577.611594][T12982] appletouch 3-1:0.85: input: appletouch disconnected [ 577.811104][T14344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.836818][T14344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.864214][T14344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 577.890390][T14344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.998511][T14344] /dev/rnullb0: Can't open blockdev [ 578.603178][ T120] usbhid 2-1:0.0: can't add hid device: -71 [ 578.623529][ T120] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 578.668835][ T120] usb 2-1: USB disconnect, device number 38 [ 579.176451][ T120] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 579.314160][T14382] /dev/rnullb0: Can't open blockdev [ 579.346825][ T120] usb 2-1: Using ep0 maxpacket: 8 [ 579.358881][T14382] /dev/rnullb0: Can't open blockdev [ 579.361479][ T120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.385058][ T120] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 579.415377][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.435863][ T120] usb 2-1: config 0 descriptor?? [ 579.704343][T14370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 579.725877][T14370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 579.827271][ T120] usb 2-1: USB disconnect, device number 39 [ 579.937351][T14403] /dev/rnullb0: Can't open blockdev [ 580.314830][T14420] program syz.3.2354 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 580.456546][ T5900] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 580.507254][ T985] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 580.617025][ T5900] usb 3-1: device descriptor read/64, error -71 [ 580.679000][ T985] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 580.693070][ T985] usb 5-1: config 0 interface 0 has no altsetting 0 [ 580.701264][ T985] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 580.711512][ T985] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 580.732771][ T985] usb 5-1: config 0 descriptor?? [ 580.856981][ T5900] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 580.998414][ T5900] usb 3-1: device descriptor read/64, error -71 [ 581.126743][ T5900] usb usb3-port1: attempt power cycle [ 581.198154][ T985] razer 0003:1532:011B.001D: collection stack underflow [ 581.210684][ T985] razer 0003:1532:011B.001D: item 0 4 0 12 parsing failed [ 581.219319][ T985] razer 0003:1532:011B.001D: probe with driver razer failed with error -22 [ 581.487241][ T5900] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 581.517111][ T5900] usb 3-1: device descriptor read/8, error -71 [ 581.541488][T14450] /dev/rnullb0: Can't open blockdev [ 581.756401][ T5900] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 581.789496][ T5900] usb 3-1: device descriptor read/8, error -71 [ 581.899548][ T5900] usb usb3-port1: unable to enumerate USB device [ 583.277159][ T5900] usb 5-1: USB disconnect, device number 32 [ 583.616944][T14474] fuse: Unknown parameter 'subj_type' [ 583.630882][T14474] /dev/rnullb0: Can't open blockdev [ 583.653684][T14484] /dev/rnullb0: Can't open blockdev [ 583.958741][ T1214] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 584.126526][ T1214] usb 3-1: Using ep0 maxpacket: 16 [ 584.145355][ T1214] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 584.163948][ T1214] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.181996][ T5900] usb 4-1: USB disconnect, device number 91 [ 584.220466][ T1214] usb 3-1: config 0 descriptor?? [ 584.267563][ T1214] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 584.474426][ T5167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 584.485901][ T5167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 584.503254][ T5167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 584.513762][ T5167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 584.523100][ T5167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 585.252853][T14496] chnl_net:caif_netlink_parms(): no params data found [ 585.366597][ T1214] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 585.451011][T14496] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.467004][T14496] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.477410][T14496] bridge_slave_0: entered allmulticast mode [ 585.496077][T14496] bridge_slave_0: entered promiscuous mode [ 585.505753][T14496] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.513502][T14496] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.521334][T14496] bridge_slave_1: entered allmulticast mode [ 585.528603][ T1214] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 585.529976][T14496] bridge_slave_1: entered promiscuous mode [ 585.553079][ T1214] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 585.580796][ T1214] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.609131][ T1214] usb 2-1: config 0 descriptor?? [ 585.617351][T14496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.621821][ T1214] pwc: Askey VC010 type 2 USB webcam detected. [ 585.652925][T14496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.737425][T14486] XFS (rnullb0): Invalid superblock magic number [ 585.778056][ T985] usb 3-1: USB disconnect, device number 24 [ 585.803588][T14496] team0: Port device team_slave_0 added [ 585.848897][T14496] team0: Port device team_slave_1 added [ 585.995442][T14496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 586.013752][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.044466][T14496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 586.058665][T14496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 586.065809][T14496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 586.095814][T14496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 586.246360][ T1214] pwc: recv_control_msg error -71 req 02 val 2700 [ 586.248266][T14518] /dev/rnullb0: Can't open blockdev [ 586.269668][ T1214] pwc: recv_control_msg error -71 req 02 val 2c00 [ 586.279749][ T1214] pwc: recv_control_msg error -71 req 04 val 1000 [ 586.290976][T14496] hsr_slave_0: entered promiscuous mode [ 586.291766][ T1214] pwc: recv_control_msg error -71 req 04 val 1300 [ 586.315162][T14496] hsr_slave_1: entered promiscuous mode [ 586.315278][ T1214] pwc: recv_control_msg error -71 req 04 val 1400 [ 586.332111][T14496] debugfs: 'hsr0' already exists in 'hsr' [ 586.338368][ T1214] pwc: recv_control_msg error -71 req 02 val 2000 [ 586.344602][T14496] Cannot create hsr debugfs directory [ 586.349969][ T1214] pwc: recv_control_msg error -71 req 02 val 2100 [ 586.363773][ T1214] pwc: recv_control_msg error -71 req 04 val 1500 [ 586.385287][ T1214] pwc: recv_control_msg error -71 req 02 val 2500 [ 586.395785][ T1214] pwc: recv_control_msg error -71 req 02 val 2400 [ 586.411732][ T1214] pwc: recv_control_msg error -71 req 02 val 2600 [ 586.422941][ T1214] pwc: recv_control_msg error -71 req 02 val 2900 [ 586.434045][ T1214] pwc: recv_control_msg error -71 req 02 val 2800 [ 586.453145][ T1214] pwc: recv_control_msg error -71 req 04 val 1100 [ 586.460836][ T1214] pwc: recv_control_msg error -71 req 04 val 1200 [ 586.483916][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.498320][ T1214] pwc: Registered as video103. [ 586.505871][ T1214] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input41 [ 586.576667][T11810] Bluetooth: hci3: command tx timeout [ 586.620555][ T1214] usb 2-1: USB disconnect, device number 40 [ 586.824653][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.025679][T14527] netlink: 'syz.2.2383': attribute type 1 has an invalid length. [ 587.046018][T14527] /dev/rnullb0: Can't open blockdev [ 587.069368][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.140453][T14532] comedi comedi3: bad chanlist[0]=0x00000800 chan=2048 range length=4 [ 587.152551][T14534] /dev/sg0: Can't lookup blockdev [ 587.249411][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.405750][T14541] pim6reg9: entered allmulticast mode [ 587.937316][ T12] bridge_slave_1: left allmulticast mode [ 587.945420][ T12] bridge_slave_1: left promiscuous mode [ 587.959854][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.000895][ T12] bridge_slave_0: left promiscuous mode [ 588.014017][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.187749][T14543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 588.193845][T14543] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 588.395349][T14562] MTD: Couldn't look up '/dev/nullb0': -15 [ 588.456345][ T5899] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 588.493039][T14564] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2397'. [ 588.617881][ T5899] usb 2-1: Using ep0 maxpacket: 32 [ 588.633171][ T5899] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 588.649461][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 588.660976][T11810] Bluetooth: hci3: command tx timeout [ 588.669892][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 588.680014][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 588.693512][ T5899] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 588.706641][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.715373][ T5899] usb 2-1: Product: syz [ 588.719761][ T5899] usb 2-1: Manufacturer: syz [ 588.724432][ T5899] usb 2-1: SerialNumber: syz [ 588.735752][ T5899] usb 2-1: config 0 descriptor?? [ 588.871928][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.887689][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.899303][ T12] bond0 (unregistering): Released all slaves [ 588.971287][T14555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.984397][T14555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 589.029463][T14543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 589.035436][T14543] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 589.260935][T14555] 8021q: VLANs not supported on gre0 [ 589.291429][ T985] usb 2-1: USB disconnect, device number 41 [ 589.346925][T14581] ubi31: attaching mtd0 [ 589.370621][T14581] ubi31: scanning is finished [ 589.375371][T14581] ubi31: empty MTD device detected [ 589.488837][T14581] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 589.536519][ T5900] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 589.569537][ T12] hsr_slave_0: left promiscuous mode [ 589.586166][ T12] hsr_slave_1: left promiscuous mode [ 589.592736][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 589.616272][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 589.644002][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 589.662081][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 589.719492][ T12] veth1_macvtap: left promiscuous mode [ 589.725276][ T5900] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 589.732861][ T12] veth0_macvtap: left promiscuous mode [ 589.745635][ T5900] usb 5-1: config 0 has no interface number 0 [ 589.752068][ T12] veth1_vlan: left promiscuous mode [ 589.752209][ T12] veth0_vlan: left promiscuous mode [ 589.769033][ T5900] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 589.782315][ T5900] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 589.792711][ T5900] usb 5-1: config 0 interface 113 has no altsetting 0 [ 589.802530][ T5900] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 589.813637][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.827282][ T5900] usb 5-1: Product: syz [ 589.831496][ T5900] usb 5-1: Manufacturer: syz [ 589.853172][ T5900] usb 5-1: SerialNumber: syz [ 589.876113][ T5900] usb 5-1: config 0 descriptor?? [ 589.914781][ C0] usb 5-1: NFC: Urb failure (status -71) [ 589.941124][ T5900] usb 5-1: NFC: Unable to get FW version [ 589.967175][ T5900] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 589.996430][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 590.101307][ T5900] usb 5-1: USB disconnect, device number 33 [ 590.191091][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 590.208199][ T10] usb 3-1: config 64 has an invalid interface number: 167 but max is 0 [ 590.226301][ T10] usb 3-1: config 64 has no interface number 0 [ 590.243080][ T10] usb 3-1: config 64 interface 167 has no altsetting 0 [ 590.259018][ T10] usb 3-1: New USB device found, idVendor=04a5, idProduct=3035, bcdDevice=8c.dd [ 590.279413][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.306279][ T10] usb 3-1: Product: syz [ 590.326373][ T10] usb 3-1: Manufacturer: syz [ 590.332994][ T10] usb 3-1: SerialNumber: syz [ 590.348114][ T985] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 590.507443][ T985] usb 2-1: device descriptor read/64, error -71 [ 590.773044][ T985] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 590.934524][ T985] usb 2-1: device descriptor read/64, error -71 [ 591.047324][ T985] usb usb2-port1: attempt power cycle [ 591.405126][ T985] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 591.450226][ T985] usb 2-1: device descriptor read/8, error -71 [ 591.600728][ T12] team0 (unregistering): Port device team_slave_1 removed [ 591.717555][ T985] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 591.721668][ T12] team0 (unregistering): Port device team_slave_0 removed [ 591.737221][ T985] usb 2-1: device descriptor read/8, error -71 [ 591.856942][ T985] usb usb2-port1: unable to enumerate USB device [ 592.321799][T14619] MTD: Couldn't look up './file0': -15 [ 593.199485][T14626] /dev/rnullb0: Can't open blockdev [ 593.293328][ T10] gspca_main: benq-2.14.0 probing 04a5:3035 [ 593.336812][ T10] usb 3-1: USB disconnect, device number 25 [ 593.665888][T14633] syzkaller1: entered promiscuous mode [ 593.697221][T14633] syzkaller1: entered allmulticast mode [ 593.782805][T14496] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 593.899649][T14496] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 593.950716][T14496] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 594.012508][T14496] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 594.355900][T14496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.432452][T14496] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.470459][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.477732][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.509888][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.517138][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.994890][T14496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 595.142809][T14496] veth0_vlan: entered promiscuous mode [ 595.168785][T14496] veth1_vlan: entered promiscuous mode [ 595.281815][T14496] veth0_macvtap: entered promiscuous mode [ 595.318748][T14684] /dev/rnullb0: Can't open blockdev [ 595.345348][T14496] veth1_macvtap: entered promiscuous mode [ 595.356540][ T5900] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 595.375381][T14496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.410741][T14687] program syz.2.2420 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 595.423840][T14496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.444523][ T331] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.474843][ T331] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.495651][ T331] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.511558][ T331] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.526400][ T5900] usb 5-1: Using ep0 maxpacket: 8 [ 595.535514][ T5900] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 595.578707][ T5900] usb 5-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 595.599045][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.621734][ T5900] usb 5-1: Product: syz [ 595.626046][ T5900] usb 5-1: Manufacturer: syz [ 595.632031][ T5900] usb 5-1: SerialNumber: syz [ 595.648071][ T5900] usb 5-1: config 0 descriptor?? [ 595.715610][ T5900] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 595.863039][ T3454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.891055][ T3454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.942477][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.954722][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.451868][T14716] /dev/rnullb0: Can't open blockdev [ 596.796897][ T5900] gspca_zc3xx: reg_w_i err -110 [ 597.406537][ T5900] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 597.413046][ T5900] gspca_zc3xx 5-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 597.505310][ T5900] usb 5-1: USB disconnect, device number 34 [ 597.586057][T14754] FAT-fs (rnullb0): bogus number of reserved sectors [ 597.622803][T14754] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 598.468774][T14763] /dev/rnullb0: Can't open blockdev [ 598.507626][T14764] tipc: MTU too low for tipc bearer [ 598.540371][T14764] /dev/rnullb0: Can't open blockdev [ 598.837306][ T5900] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 598.980527][T14771] /dev/rnullb0: Can't open blockdev [ 598.998808][ T5900] usb 4-1: config 39 has an invalid interface number: 2 but max is 1 [ 599.013936][ T5900] usb 4-1: config 39 has an invalid interface number: 208 but max is 1 [ 599.036350][ T5900] usb 4-1: config 39 has no interface number 0 [ 599.042578][ T5900] usb 4-1: config 39 has no interface number 1 [ 599.054556][ T5900] usb 4-1: config 39 interface 2 has no altsetting 0 [ 599.075733][T14776] /dev/rnullb0: Can't open blockdev [ 599.076416][ T5900] usb 4-1: config 39 interface 208 has no altsetting 0 [ 599.093583][ T5900] usb 4-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=c4.36 [ 599.109502][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.119789][ T5900] usb 4-1: Product: syz [ 599.124804][ T5900] usb 4-1: Manufacturer: syz [ 599.132945][ T5900] usb 4-1: SerialNumber: syz [ 599.275150][T14782] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2449'. [ 599.286311][ T120] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 599.374149][ T5900] mdc800 4-1:39.2: probe fails -> wrong Interface [ 599.391115][T14785] netlink: 'syz.2.2451': attribute type 1 has an invalid length. [ 599.401938][T14785] FAT-fs (rnullb0): bogus number of reserved sectors [ 599.404085][ T5900] mdc800 4-1:39.208: probe fails -> wrong Interface [ 599.410273][T14785] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 599.439668][ T5900] usb 4-1: USB disconnect, device number 92 [ 599.447305][ T120] usb 5-1: Using ep0 maxpacket: 8 [ 599.465183][ T120] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 599.485583][ T120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.500952][ T120] usb 5-1: Product: syz [ 599.505190][ T120] usb 5-1: Manufacturer: syz [ 599.512834][ T120] usb 5-1: SerialNumber: syz [ 599.526009][ T120] usb 5-1: config 0 descriptor?? [ 599.735643][ T120] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 600.167030][ T5900] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 600.436283][ T5900] usb 3-1: Using ep0 maxpacket: 8 [ 600.445968][ T5900] usb 3-1: config 0 has an invalid interface number: 150 but max is 0 [ 600.469963][ T5900] usb 3-1: config 0 has an invalid interface number: 112 but max is 0 [ 600.506489][ T5900] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 600.629407][ T5900] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 1 [ 600.664153][ T5900] usb 3-1: config 0 has no interface number 0 [ 600.679620][ T5900] usb 3-1: config 0 has no interface number 1 [ 600.750023][ T5900] usb 3-1: config 0 has no interface number 2 [ 601.069915][ T120] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 601.282577][T14815] /dev/rnullb0: Can't open blockdev [ 601.338286][ T985] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 601.430099][T14817] /dev/rnullb0: Can't open blockdev [ 601.509037][ T985] usb 2-1: Using ep0 maxpacket: 32 [ 601.531764][ T985] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 601.548480][ T985] usb 2-1: config 0 has no interface number 0 [ 601.562569][ T985] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 601.574006][ T985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.584594][ T985] usb 2-1: Product: syz [ 601.586341][ T5900] usb 3-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 601.605957][ T5900] usb 3-1: too many endpoints for config 0 interface 112 altsetting 233: 104, using maximum allowed: 30 [ 601.646867][ T985] usb 2-1: Manufacturer: syz [ 601.680281][ T985] usb 2-1: SerialNumber: syz [ 601.705142][ T985] usb 2-1: config 0 descriptor?? [ 601.724123][ T985] smsc95xx v2.0.0 [ 601.731405][ T985] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 601.755374][ T5900] usb 3-1: config 0 interface 112 altsetting 233 has 1 endpoint descriptor, different from the interface descriptor's value: 104 [ 601.764046][ T985] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -22 [ 601.770156][ T5900] usb 3-1: config 0 interface 150 has no altsetting 0 [ 601.784594][ T5900] usb 3-1: config 0 interface 112 has no altsetting 0 [ 601.796288][ T5900] usb 3-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75 [ 601.815550][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.838527][ T5900] usb 3-1: config 0 descriptor?? [ 601.943401][ T985] usb 2-1: USB disconnect, device number 46 [ 602.083835][ T10] usb 5-1: USB disconnect, device number 35 [ 602.256006][ T5900] usb 3-1: string descriptor 0 read error: -71 [ 602.288850][ T5900] usb 3-1: USB disconnect, device number 26 [ 602.786385][ T5900] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 602.817393][ T985] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 602.864958][T14848] /dev/rnullb0: Can't open blockdev [ 602.880785][T14848] bpf: Bad value for 'gid' [ 602.946320][ T5900] usb 4-1: Using ep0 maxpacket: 16 [ 602.953616][ T5900] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 602.979613][ T5900] usb 4-1: config 0 has no interface number 0 [ 602.985789][ T5900] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 208, changing to 11 [ 602.998535][ T985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 603.010903][ T5900] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024 [ 603.027333][ T985] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 603.027492][ T5900] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 603.056714][ T985] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 603.066261][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 603.078239][ T985] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 603.085845][ T5900] usb 4-1: Product: syz [ 603.087915][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.092593][ T5900] usb 4-1: SerialNumber: syz [ 603.112613][ T985] usb 5-1: Product: syz [ 603.122784][ T5900] usb 4-1: config 0 descriptor?? [ 603.131088][ T985] usb 5-1: Manufacturer: syz [ 603.135909][ T5900] cm109 4-1:0.8: invalid payload size 1024, expected 4 [ 603.145982][ T5900] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input42 [ 603.148003][ T985] usb 5-1: SerialNumber: syz [ 603.182736][ T985] usb 5-1: config 0 descriptor?? [ 603.202144][T14841] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 603.213157][T14841] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 603.248219][ T985] usb 5-1: ucan: probing device on interface #0 [ 603.539892][ T985] usb 5-1: ucan: failed to retrieve device info [ 603.564260][ T985] usb 5-1: ucan: probe failed; try to update the device firmware [ 603.615344][ T985] usb 5-1: USB disconnect, device number 36 [ 603.938466][T14867] /dev/rnullb0: Can't open blockdev [ 603.944656][T14867] /dev/rnullb0: Can't open blockdev [ 603.962796][T14837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.973981][T14867] /dev/rnullb0: Can't open blockdev [ 603.992675][T14837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 604.027850][T14867] /dev/rnullb0: Can't open blockdev [ 604.048690][T14837] /dev/rnullb0: Can't open blockdev [ 604.067466][T14867] /dev/rnullb0: Can't open blockdev [ 604.073914][T14867] /dev/rnullb0: Can't open blockdev [ 604.087142][T14867] /dev/rnullb0: Can't open blockdev [ 604.095402][T14867] /dev/rnullb0: Can't open blockdev [ 604.101827][T14867] /dev/rnullb0: Can't open blockdev [ 604.108212][T14867] /dev/rnullb0: Can't open blockdev [ 604.114415][T14867] /dev/rnullb0: Can't open blockdev [ 604.122151][T14867] /dev/rnullb0: Can't open blockdev [ 604.128484][T14867] /dev/rnullb0: Can't open blockdev [ 604.134700][T14867] /dev/rnullb0: Can't open blockdev [ 604.141535][ C0] cm109 4-1:0.8: cm109_urb_irq_callback: urb status -71 [ 604.142458][T14867] /dev/rnullb0: Can't open blockdev [ 604.148612][ C0] ------------[ cut here ]------------ [ 604.148707][ C0] URB ffff888029246300 submitted while active [ 604.155526][T14867] /dev/rnullb0: Can't open blockdev [ 604.160826][ C0] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0xfc1/0x1830, CPU#0: syz.3.2468/14836 [ 604.168004][T14867] /dev/rnullb0: Can't open blockdev [ 604.171637][ C0] Modules linked in: [ 604.183745][T14867] /dev/rnullb0: Can't open blockdev [ 604.187941][ C0] CPU: 0 UID: 0 PID: 14836 Comm: syz.3.2468 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 604.187972][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.187986][ C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 604.188014][ C0] Code: 44 89 f2 e8 c1 1c f9 f9 e9 13 fc ff ff e8 47 3a 8c fa c6 05 23 86 99 08 01 90 48 c7 c7 20 9f 56 8c 48 89 de e8 20 d1 4f fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 21 3a 8c fa eb 11 e8 1a 3a 8c fa bd [ 604.188034][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00010046 [ 604.188058][ C0] RAX: 4dd571ee786c1700 RBX: ffff888029246300 RCX: 0000000000040000 [ 604.188074][ C0] RDX: ffffc90002161000 RSI: 0000000000020f70 RDI: 0000000000020f71 [ 604.188089][ C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a [ 604.188107][ C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 604.188126][ C0] R13: ffff888032512830 R14: ffff888029246308 R15: 0000000000000820 [ 604.188144][ C0] FS: 0000555572eed500(0000) GS:ffff88812580a000(0000) knlGS:0000000000000000 [ 604.188165][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.188182][ C0] CR2: 000000110c278369 CR3: 0000000060944000 CR4: 00000000003526f0 [ 604.188204][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000003 [ 604.188219][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 604.330139][ C0] Call Trace: [ 604.333427][ C0] [ 604.336282][ C0] ? kcov_remote_start+0x97/0x7f0 [ 604.341338][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 604.346730][ C0] __usb_hcd_giveback_urb+0x41a/0x690 [ 604.352123][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 604.357941][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 604.363850][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 604.369235][ C0] dummy_timer+0x862/0x4550 [ 604.373770][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.379164][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 604.384920][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 604.389964][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 604.395018][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 604.399992][ C0] __hrtimer_run_queues+0x529/0xc60 [ 604.405218][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 604.410970][ C0] ? read_tsc+0x9/0x20 [ 604.415044][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 604.420883][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 604.426016][ C0] handle_softirqs+0x283/0x870 [ 604.430875][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 604.435653][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 604.440958][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 604.446177][ C0] __irq_exit_rcu+0xca/0x1f0 [ 604.450784][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 604.456004][ C0] irq_exit_rcu+0x9/0x30 [ 604.460256][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 604.465992][ C0] [ 604.468928][ C0] [ 604.471965][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 604.478140][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 604.484666][ C0] Code: 74 05 e8 9b 7a 46 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 20 0f f6 65 8b 05 5c 44 60 07 85 c0 74 40 48 c7 04 24 0e 36 [ 604.504487][ C0] RSP: 0018:ffffc90003397a00 EFLAGS: 00000206 [ 604.510575][ C0] RAX: 4dd571ee786c1700 RBX: 0000000000000a02 RCX: 4dd571ee786c1700 [ 604.518562][ C0] RDX: 0000000000000006 RSI: ffffffff8dc65904 RDI: 0000000000000001 [ 604.526629][ C0] RBP: ffffc90003397a90 R08: ffffffff8fe34337 R09: 1ffffffff1fc6866 [ 604.534790][ C0] R10: dffffc0000000000 R11: fffffbfff1fc6867 R12: dffffc0000000000 [ 604.542769][ C0] R13: ffff888143b0ff00 R14: ffffffff8f1f7f80 R15: 1ffff92000672f40 [ 604.550866][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.557217][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 604.562612][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 604.568012][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 604.573941][ C0] dummy_pullup+0x19b/0x200 [ 604.578458][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 604.583491][ C0] usb_gadget_disconnect_locked+0x140/0x4b0 [ 604.589483][ C0] gadget_unbind_driver+0xc4/0x430 [ 604.594610][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 604.600345][ C0] device_release_driver_internal+0x46c/0x800 [ 604.606430][ C0] driver_detach+0x1f3/0x2d0 [ 604.611055][ C0] bus_remove_driver+0x226/0x2f0 [ 604.616013][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 604.621831][ C0] raw_release+0xd7/0x260 [ 604.626184][ C0] ? __pfx_raw_release+0x10/0x10 [ 604.631225][ C0] __fput+0x44c/0xa70 [ 604.635226][ C0] task_work_run+0x1d4/0x260 [ 604.639843][ C0] ? __pfx_task_work_run+0x10/0x10 [ 604.645198][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 604.650870][ C0] exit_to_user_mode_loop+0xec/0x110 [ 604.656275][ C0] do_syscall_64+0x2bd/0x3b0 [ 604.660974][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.666459][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.672999][ C0] ? clear_bhb_loop+0x60/0xb0 [ 604.677777][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.683677][ C0] RIP: 0033:0x7fb9eb58eb69 [ 604.688129][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 604.707843][ C0] RSP: 002b:00007fffdbe42be8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 604.716358][ C0] RAX: 0000000000000000 RBX: 0000000000093158 RCX: 00007fb9eb58eb69 [ 604.724360][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 604.732600][ C0] RBP: 00007fb9eb7b7ba0 R08: 0000000000000001 R09: 00000026dbe42edf [ 604.740663][ C0] R10: 00007fb9eb400000 R11: 0000000000000246 R12: 00007fb9eb7b5fac [ 604.748645][ C0] R13: 00007fb9eb7b5fa0 R14: ffffffffffffffff R15: 00007fffdbe42d00 [ 604.756645][ C0] [ 604.759756][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 604.767038][ C0] CPU: 0 UID: 0 PID: 14836 Comm: syz.3.2468 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 604.778253][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.788520][ C0] Call Trace: [ 604.791827][ C0] [ 604.794684][ C0] dump_stack_lvl+0x99/0x250 [ 604.799296][ C0] ? __asan_memcpy+0x40/0x70 [ 604.803901][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.809199][ C0] ? __pfx__printk+0x10/0x10 [ 604.813902][ C0] vpanic+0x281/0x750 [ 604.817893][ C0] ? __pfx__printk+0x10/0x10 [ 604.822568][ C0] ? __pfx_vpanic+0x10/0x10 [ 604.827077][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 604.832465][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 604.837675][ C0] panic+0xb9/0xc0 [ 604.841415][ C0] ? __pfx_panic+0x10/0x10 [ 604.845852][ C0] __warn+0x334/0x4c0 [ 604.849851][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 604.854973][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 604.860019][ C0] report_bug+0x2be/0x4f0 [ 604.864357][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 604.869383][ C0] ? usb_submit_urb+0xfc1/0x1830 [ 604.874321][ C0] ? usb_submit_urb+0xfc3/0x1830 [ 604.879264][ C0] handle_bug+0x84/0x160 [ 604.883511][ C0] exc_invalid_op+0x1a/0x50 [ 604.888194][ C0] asm_exc_invalid_op+0x1a/0x20 [ 604.893139][ C0] RIP: 0010:usb_submit_urb+0xfc1/0x1830 [ 604.898832][ C0] Code: 44 89 f2 e8 c1 1c f9 f9 e9 13 fc ff ff e8 47 3a 8c fa c6 05 23 86 99 08 01 90 48 c7 c7 20 9f 56 8c 48 89 de e8 20 d1 4f fa 90 <0f> 0b 90 90 e9 b7 f0 ff ff e8 21 3a 8c fa eb 11 e8 1a 3a 8c fa bd [ 604.918709][ C0] RSP: 0018:ffffc900000077b8 EFLAGS: 00010046 [ 604.924797][ C0] RAX: 4dd571ee786c1700 RBX: ffff888029246300 RCX: 0000000000040000 [ 604.932877][ C0] RDX: ffffc90002161000 RSI: 0000000000020f70 RDI: 0000000000020f71 [ 604.940858][ C0] RBP: 000000000000000f R08: ffff8880b8624253 R09: 1ffff110170c484a [ 604.948919][ C0] R10: dffffc0000000000 R11: ffffed10170c484b R12: dffffc0000000000 [ 604.956992][ C0] R13: ffff888032512830 R14: ffff888029246308 R15: 0000000000000820 [ 604.965019][ C0] ? usb_submit_urb+0xfc0/0x1830 [ 604.970074][ C0] ? kcov_remote_start+0x97/0x7f0 [ 604.975221][ C0] cm109_urb_irq_callback+0x709/0xca0 [ 604.980623][ C0] __usb_hcd_giveback_urb+0x41a/0x690 [ 604.986112][ C0] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 604.992106][ C0] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 604.998018][ C0] ? usb_hcd_giveback_urb+0x10e/0x420 [ 605.003413][ C0] dummy_timer+0x862/0x4550 [ 605.007966][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 605.013351][ C0] ? __pfx_pwq_dec_nr_in_flight+0x10/0x10 [ 605.019191][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 605.024257][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 605.029262][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 605.034359][ C0] __hrtimer_run_queues+0x529/0xc60 [ 605.039588][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 605.045427][ C0] ? read_tsc+0x9/0x20 [ 605.049616][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 605.055457][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 605.060590][ C0] handle_softirqs+0x283/0x870 [ 605.065372][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 605.070150][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 605.075548][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 605.080823][ C0] __irq_exit_rcu+0xca/0x1f0 [ 605.085423][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 605.090641][ C0] irq_exit_rcu+0x9/0x30 [ 605.094913][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 605.100557][ C0] [ 605.103494][ C0] [ 605.106440][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 605.112515][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 605.119036][ C0] Code: 74 05 e8 9b 7a 46 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 20 0f f6 65 8b 05 5c 44 60 07 85 c0 74 40 48 c7 04 24 0e 36 [ 605.138847][ C0] RSP: 0018:ffffc90003397a00 EFLAGS: 00000206 [ 605.144925][ C0] RAX: 4dd571ee786c1700 RBX: 0000000000000a02 RCX: 4dd571ee786c1700 [ 605.152992][ C0] RDX: 0000000000000006 RSI: ffffffff8dc65904 RDI: 0000000000000001 [ 605.160966][ C0] RBP: ffffc90003397a90 R08: ffffffff8fe34337 R09: 1ffffffff1fc6866 [ 605.169212][ C0] R10: dffffc0000000000 R11: fffffbfff1fc6867 R12: dffffc0000000000 [ 605.177200][ C0] R13: ffff888143b0ff00 R14: ffffffff8f1f7f80 R15: 1ffff92000672f40 [ 605.185282][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.191628][ C0] ? usb_hcd_giveback_urb+0x2f8/0x420 [ 605.197021][ C0] usb_hcd_poll_rh_status+0x406/0x620 [ 605.202418][ C0] ? __pfx_usb_hcd_poll_rh_status+0x10/0x10 [ 605.208500][ C0] dummy_pullup+0x19b/0x200 [ 605.213366][ C0] ? __pfx_dummy_pullup+0x10/0x10 [ 605.218672][ C0] usb_gadget_disconnect_locked+0x140/0x4b0 [ 605.224663][ C0] gadget_unbind_driver+0xc4/0x430 [ 605.229791][ C0] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 605.235533][ C0] device_release_driver_internal+0x46c/0x800 [ 605.241718][ C0] driver_detach+0x1f3/0x2d0 [ 605.246512][ C0] bus_remove_driver+0x226/0x2f0 [ 605.251569][ C0] usb_gadget_unregister_driver+0x4e/0x70 [ 605.257317][ C0] raw_release+0xd7/0x260 [ 605.261660][ C0] ? __pfx_raw_release+0x10/0x10 [ 605.266607][ C0] __fput+0x44c/0xa70 [ 605.270709][ C0] task_work_run+0x1d4/0x260 [ 605.275408][ C0] ? __pfx_task_work_run+0x10/0x10 [ 605.280558][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 605.286051][ C0] exit_to_user_mode_loop+0xec/0x110 [ 605.291342][ C0] do_syscall_64+0x2bd/0x3b0 [ 605.295949][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.301164][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.307240][ C0] ? clear_bhb_loop+0x60/0xb0 [ 605.312071][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.317967][ C0] RIP: 0033:0x7fb9eb58eb69 [ 605.322388][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.342097][ C0] RSP: 002b:00007fffdbe42be8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 605.350546][ C0] RAX: 0000000000000000 RBX: 0000000000093158 RCX: 00007fb9eb58eb69 [ 605.358710][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 605.366690][ C0] RBP: 00007fb9eb7b7ba0 R08: 0000000000000001 R09: 00000026dbe42edf [ 605.374739][ C0] R10: 00007fb9eb400000 R11: 0000000000000246 R12: 00007fb9eb7b5fac [ 605.382732][ C0] R13: 00007fb9eb7b5fa0 R14: ffffffffffffffff R15: 00007fffdbe42d00 [ 605.390760][ C0] [ 605.394159][ C0] Kernel Offset: disabled [ 605.398484][ C0] Rebooting in 86400 seconds..