last executing test programs: 3m58.959658398s ago: executing program 1 (id=156): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x0) ioctl$BLKRRPART(r0, 0x125f, 0x0) 3m58.721754672s ago: executing program 1 (id=158): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000400)={0x1, 0x1, 0x1e, 0x17, 0xf1, &(0x7f0000000800)}) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 3m58.677738838s ago: executing program 1 (id=159): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x800, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) (async) syz_io_uring_setup(0x3b48, &(0x7f0000000280)={0x0, 0xc5ba, 0x1, 0x1, 0xc3}, 0x0, 0x0) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 3m58.622859436s ago: executing program 1 (id=160): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x303e02, 0x2f53a08607baf2e7) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) linkat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') removexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.nlink\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r2, r1, 0x0, 0x9) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) open(&(0x7f0000000100)='./file0\x00', 0x303e02, 0x2f53a08607baf2e7) (async) mknodat$loop(r0, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) (async) linkat(r0, &(0x7f0000000200)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) removexattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=@known='trusted.overlay.nlink\x00') (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async) sendfile(r2, r1, 0x0, 0x9) (async) 3m58.564404885s ago: executing program 1 (id=162): r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000086d042fc50000000000010902240001000000000904000001030000000921000000012205200905810300000001", @ANYRES16=r0, @ANYRESDEC=r0, @ANYRES16=r0], 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c0000001600010a00000000000000000a0002"], 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r3 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) write$binfmt_register(r3, &(0x7f0000000080)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0xc0, 0x3a, '^Y\xd2\x1d\xf5\xec\xc8Qu\xd9\xe8\x89C\xee\xce\xcc3\x14W\x05\xbb\\\xb5t\xeb\xaf\xb9\x88\xe3\x11', 0x3a, ']$@K-^{', 0x3a, './file0', 0x3a, [0x43, 0x50]}, 0x4e) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x3d5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000007840)={0x5}) r6 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000040)={'ip6tnl0\x00', r2, 0x29, 0xf, 0x1, 0x1, 0x4, @local, @local, 0x1, 0x7, 0xd5ba, 0x10001}}) r7 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) preadv(r7, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/98, 0xbb}], 0x1, 0x0, 0x0) close(r7) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x5013c2, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000280)=""/78, &(0x7f00000001c0)=0x4e) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r10, r8, 0x0, 0x7fffefff) sendfile(r8, r8, 0x0, 0x7ffff001) 3m57.198975304s ago: executing program 1 (id=173): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) mremap(&(0x7f00000c0000/0xa000)=nil, 0xa000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01018000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000002c000000060a01040000000000000000010000000400048008000b40000000000900010073797a3000000000140000001100010000000000000000000000800a"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 3m56.543710172s ago: executing program 3 (id=178): mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='hpfs\x00', 0x21a002, 0x0) setresuid(0xee01, 0x0, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xf0) r1 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ftruncate(0xffffffffffffffff, 0x796c) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001300)={0x8, {"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", 0x1000}}, 0x1006) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r4) prctl$PR_CAP_AMBIENT(0x2f, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x340000c1) sendmsg$rds(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000008c0)=""/231, 0xe7}, {&(0x7f00000009c0)=""/123, 0x7b}], 0x2, 0x0, 0x0, 0x4000}, 0x0) syz_open_dev$ndb(&(0x7f0000001700), 0x0, 0x80000) r5 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r5, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000000)='{', 0x1}], 0x1}}], 0x1, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000340)=""/191, 0xfffffd90}], 0x1, 0x182, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGLCKTRMIOS(r7, 0x541a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, "c4d44bee3ae115056cd7fd84d0b9ac4ebe041d"}) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000100)=@phonet, 0x80, &(0x7f0000001240)=[{&(0x7f0000000040)=""/34, 0x22}, {&(0x7f0000000180)=""/171, 0xab}, {&(0x7f0000000240)=""/4096, 0x1000}], 0x3}, 0x9}, {{&(0x7f0000001280)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001400)=[{&(0x7f0000001300)=""/193, 0xc1}], 0x1, &(0x7f0000001440)=""/124, 0x7c}, 0x2}, {{&(0x7f00000014c0)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001540)=""/61, 0x3d}, {&(0x7f0000001580)=""/178, 0xb2}, {&(0x7f0000001640)=""/103, 0x67}], 0x3, &(0x7f0000001700)}, 0x5}, {{&(0x7f0000001740)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000002980)=[{&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/155, 0x9b}, {&(0x7f0000002880)=""/57, 0x39}, {&(0x7f00000028c0)=""/184, 0xb8}], 0x4, &(0x7f00000029c0)=""/184, 0xb8}, 0x4}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000002a80)=""/182, 0xb6}, {&(0x7f0000002b40)=""/125, 0x7d}, {&(0x7f0000003980)=""/72, 0x48}, {&(0x7f0000002c00)=""/221, 0xdd}, {&(0x7f0000002d00)=""/185, 0xb9}], 0x5, &(0x7f0000002e40)=""/134, 0x86}, 0x5b2}, {{&(0x7f0000002f00)=@nl, 0x80, &(0x7f0000003200)=[{&(0x7f0000002f80)=""/231, 0xe7}, {&(0x7f0000003080)=""/116, 0x74}, {&(0x7f0000003100)=""/202, 0xca}], 0x3, &(0x7f0000003240)=""/53, 0x35}, 0x4}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003280)=""/84, 0x54}, {&(0x7f0000003300)=""/230, 0xe6}, {&(0x7f0000003400)=""/134, 0x86}, {&(0x7f00000034c0)=""/97, 0x61}, {&(0x7f0000003540)=""/11, 0xb}, {&(0x7f0000003580)=""/142, 0x8e}], 0x6, &(0x7f00000036c0)=""/154, 0x9a}, 0x1}], 0x7, 0xc0000100, &(0x7f0000003940)={0x77359400}) syz_genetlink_get_family_id$nl80211(&(0x7f0000003a00), r4) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21}, 0xd8) 3m55.675846349s ago: executing program 3 (id=182): rt_sigaction(0x5, &(0x7f0000000240)={&(0x7f00000000c0)="c4a1391605000000004785426edd55d836642e2e851bf2ae660f3a604300a7c423396db8af0000000d470f600bc423b17b9b0010000206c422f917bb00000000", 0x8000002, &(0x7f0000000100)="c46181653500800000f2410fe6440b28c4222d929cf5090000002e3ef30fa7e00f01dbc462710c2c5bc4a17ddd0c0965457b00c4a1fb2cac27c00000000f0fc090", {[0x9]}}, &(0x7f0000000300)={&(0x7f0000000280)="36660f3a0f170665e40346db5108440f01fbcd04c4228da8d7f3400fa7d0450f8e2a000000c4a22d089dc80000000f7e08", 0x0, &(0x7f00000002c0)="660f3831b8240c1e10c4a26536897acce2bfc481541480000000008fa978e3d0f2440f104502c461196417c443496c18ff71f5c4e14556251dfa0000640f572e"}, 0x8, &(0x7f0000000340)) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000101401002cbd7000fedbdf25080003000100000008004a0001000000080001000000000008004c00010000000800", @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000100)="2e0f014195f39066b91e03000066b80000000066ba010000000f30baa000ec0f1c6a1e0fc70866b9f50a00000f32baf80c66b8cee6d28666efbafc0ced2e0f770f01c2", 0x43}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x100, 0x3}, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r4, 0xf8177000) ioctl$sock_bt_hci(r2, 0x800448d7, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f00000003c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xc6}, "1b4e37b8ed819ddd4a6df2d1eab0a4306844a827edd9de1dd7f6abf6e47fe9a83931f306d0738f8d693bd8413a153db9f6f2750b36cc77d28ba8aa201eccc21d67343653d9bef7742a36f1db4d6d45a8612aed00ef4a9973f021fe6cc6a6bded519d7c5bfb22000ee021bdcc331369ae0e23762a8c5ac18ab1f0411e7db4a7942aa6228571c4f5bda4baf3d56c282f262b834c55060efcb1f61ee38f50795b0fa7bb2110e82cbd0f85b852527d1a85c7dc5b197aeff163563dc85c8521ea43ffe45d63662a55"}, 0xca) openat$rnullb(0xffffffffffffff9c, 0x0, 0x60a00, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x8, @remote, 0xce}, 0x1c) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, &(0x7f0000000000)) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r7, 0x5, 0x0, 0x0) mmap(&(0x7f0000517000/0x2000)=nil, 0x2000, 0x0, 0x4010, r6, 0x98068000) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) signalfd(r0, &(0x7f0000000380)={[0xe582]}, 0x8) shutdown(r8, 0x0) 3m55.564195454s ago: executing program 3 (id=183): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3m55.427040195s ago: executing program 3 (id=184): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a64000000060a0b040000000000000000020000000900010073797a30000000000900020073797a32000000003800048034000180090001007866726d00000000240002800500030000000000080001400000000008000440000000830800024000000005"], 0x8c}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0xc4, 0x4) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000004f0001000000000008a419d6802777d48e000100", @ANYRES32=r2, @ANYBLOB], 0x1c}}, 0x1) r3 = socket(0x18, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x2, @empty, 'geneve1\x00'}}, 0x1e) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5421, &(0x7f00000002c0)=0x1000) connect$unix(r4, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e21}, 0x6e) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x2000, 0x0) 3m55.394337167s ago: executing program 3 (id=185): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x1}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980901, 0x8}) (async) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r5 = getpid() (async) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0xb, &(0x7f0000000080)={0x0, 0x10, 0x2}) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) (async) r9 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffff9]}, 0x8) read(r9, &(0x7f0000000740)=""/377, 0x179) sendfile(r3, r3, 0x0, 0x7ffff000) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r12, r13, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000380)="64f3466d2e3e672e452f0f070729d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410069e648b80010000000000000440f01c20f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c249dba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x8, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r13, 0x4090ae82, &(0x7f0000000240)={[0xfd, 0x901, 0xfffffffffffffffd, 0x5, 0xfffffffffffffff5, 0x40000000000009e, 0xfffffffffffffffe, 0xffff, 0x3fffffff, 0x3, 0x5, 0x0, 0x9, 0x3a, 0x250, 0xffffffffffffffff], 0x0, 0x400}) ioctl$KVM_RUN(r13, 0xae80, 0x0) 3m55.328279077s ago: executing program 3 (id=186): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x4, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f00000034c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x50) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3m40.288963133s ago: executing program 32 (id=173): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x2000, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000280)={0x2, 0x4e20, @remote}, 0x10) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, 0x0, 0x0) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) mremap(&(0x7f00000c0000/0xa000)=nil, 0xa000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x16, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_usb_connect(0x3, 0x24, &(0x7f0000001c80)=ANY=[@ANYBLOB="12010000941b6508c410c1ea2f700102030109021200010000000009040102"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a01018000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000002c000000060a01040000000000000000010000000400048008000b40000000000900010073797a3000000000140000001100010000000000000000000000800a"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 3m40.141805309s ago: executing program 33 (id=186): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x4, 0x8}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmmsg$inet(r1, &(0x7f00000034c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0}}], 0x1, 0x50) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m46.307139452s ago: executing program 5 (id=523): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m46.067060962s ago: executing program 5 (id=526): creat(&(0x7f0000000080)='./file0\x00', 0xac) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2m46.038085126s ago: executing program 5 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1000}, @CTA_ZONE={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x80001}, 0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x8, 0x70bd2a, 0xe, {}, [@ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x7}]}, 0x1c}}, 0x20048000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'syztnl1\x00', &(0x7f0000000280)={'sit0\x00', 0x0, 0x80, 0x700, 0x1, 0x2b4, {{0x2b, 0x4, 0x2, 0x39, 0xac, 0x66, 0x0, 0xa, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}, @rand_addr=0x64010102, {[@generic={0x86, 0xe, "0a8f20b18dc3c621d9f51b18"}, @ra={0x94, 0x4, 0x1}, @generic={0x86, 0x8, "6fd62073a090"}, @cipso={0x86, 0x11, 0xffffffffffffffff, [{0x2, 0xb, "57f99c6b1ee35987d9"}]}, @timestamp={0x44, 0x10, 0x99, 0x0, 0x3, [0x8, 0xa8, 0xbfca]}, @rr={0x7, 0x23, 0x62, [@empty, @multicast1, @broadcast, @private=0xa010102, @loopback, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @generic={0x83, 0x6, "015e69ef"}, @timestamp_addr={0x44, 0x34, 0x5f, 0x1, 0x0, [{@loopback, 0x2}, {@rand_addr=0x64010102, 0x80}, {@broadcast, 0x8}, {@private=0xa010100}, {@empty, 0xc6e}, {@empty}]}]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000003c0)={0x244, r2, 0x2, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1c0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xec, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe55}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x593}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9a0}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ']*-:\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}, @ETHTOOL_A_BITSET_BITS={0xc8, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x397e3967}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}/\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x4}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}$*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, '%&!):@@+-\\&{\xd4\'\'$\x00'}]}, {0x4}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}]}, 0x244}, 0x1, 0x0, 0x0, 0x845}, 0x480a5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, &(0x7f0000000840)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r6, 0x0, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x23}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6e}]}, 0x58}, 0x1, 0x0, 0x0, 0x40010}, 0x4000083) r8 = geteuid() mount$9p_fd(0x0, &(0x7f0000000880)='./file0\x00', &(0x7f00000008c0), 0x801, &(0x7f0000000900)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@directio}, {@uname={'uname', 0x3d, '\\'}}, {@version_9p2000}, {@version_9p2000}, {@noextend}, {@debug={'debug', 0x3d, 0x1}}, {@afid={'afid', 0x3d, 0x3f1}}, {@posixacl}], [{@subj_type={'subj_type', 0x3d, ',%@$@'}}, {@dont_measure}, {@fsname={'fsname', 0x3d, ')-*...:\\{$'}}, {@subj_type={'subj_type', 0x3d, '\''}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@uid_lt={'uid<', r8}}, {@fowner_lt={'fowner<', 0xee00}}, {@obj_user={'obj_user', 0x3d, '#'}}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, ',]'}}]}}) r9 = syz_pidfd_open(0xffffffffffffffff, 0x0) process_mrelease(r9, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), r3) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000c00)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa0, r10, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000800) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000c40), 0x100, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000c80)={0x101ff, 0x2, 0xd000, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r3) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000e80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000d80)={0x98, r12, 0x8, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x0, 0x68}}}}, [@NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x5]}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x8a6}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0xb}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10001}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x67df}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xe07}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4a8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x9}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b5}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x632}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4fd}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x400c000}, 0x240440c0) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x20, r12, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x13}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000808}, 0x800) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl(r14, 0x8, &(0x7f0000000fc0)="8b81fbdcb328cb71408146788107195c42774eb3d5430f1098457a2731f6ab8a644facdb3a0c678eb6e744b15a") sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xa0, r10, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0xa0}}, 0xc041) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f0000001180)=[@in6={0xa, 0x4e21, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x5, @remote, 0x8000}, @in={0x2, 0x4e24, @local}, @in6={0xa, 0x4e23, 0x6, @mcast1, 0x359b}, @in={0x2, 0x4e23, @empty}], 0x74) syz_open_dev$dri(&(0x7f0000001200), 0xfffffffffffffffd, 0x200100) 2m46.006863984s ago: executing program 5 (id=529): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000140)={0x3, 0x7fff, 0x0, 0x400fdff, 0x1, "4ae23ae1179c12747512700bba94224cbad08f", 0x7, 0x2}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xba) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000280)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) read(r3, &(0x7f00000019c0)=""/4097, 0x1001) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 2m45.414885647s ago: executing program 5 (id=534): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="f80400001e0001032abd7000fedbdf257f000001000000000000000000000000000004d402002b00fc010000000000000000000000000000030000000035000010000a"], 0x4f8}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000002840)=0x902820) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r6, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r6, &(0x7f0000002240)={0xa0, 0x0, r7, {{0x5, 0x2, 0x3cd, 0x7, 0x1, 0x1, {0x3, 0x3, 0x7fff, 0xfae8, 0xd, 0xf, 0x1000, 0xffffffe7, 0xda, 0x2000, 0x7, r8, r9, 0xb, 0x6}}, {0x0, 0x18}}}, 0xa0) getpeername$tipc(r6, &(0x7f0000002380)=@id, &(0x7f00000023c0)=0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r10, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000002340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r11, @ANYBLOB="0001140180000000000000002000"], 0x14}}, 0x10) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x100840, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r9, @ANYBLOB=',blksize=0x0000000000001c00,max_read=0x0000000000000006,subj_type=/dev/rnullb0\x00,uid<', @ANYRESDEC=r12, @ANYBLOB="2c66736d616769633d30784b30303030303030303030303030300000007fccf9bd200cb3614687e43210f3c899b68850176f1ba936ef3cf6e1efe47a8b51a3b222d493a00b959a868544dced5d80af5eb240"]) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e999fcffffffffdbdf25fe80000000000000000000000000003bfe8019b10000000000000000000000bb00000000000004150a"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) sendmsg$nl_xfrm(r13, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002640)={{{@in, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @private}}}, &(0x7f0000002740)=0xe8) write$FUSE_ATTR(r6, &(0x7f0000002780)={0x78, 0xfffffffffffffff5, r4, {0x2, 0xae3, 0x0, {0x3, 0xfffffffffffffff7, 0x5, 0x5, 0x309, 0x6, 0x3, 0xfffffffc, 0x10001, 0x1000, 0x8, r14, r9, 0x1, 0x2}}}, 0x78) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r16 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r16, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000029c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r15, @ANYRES64, @ANYBLOB="34ed7bcf74ea725877797811f1af3f2a342195aa932c4ad37b8405932d", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x48085}, 0x4040000) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000002600)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000025c0)={&(0x7f0000002440)={0x180, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r17}, @void}}, [@NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x1000, 0x0, 0x3, 0x0, {0x7be, 0x9, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, 0x1, 0x8000, 0xf7}}, @NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IE={0x41, 0x2a, [@cf={0x4, 0x6, {0x40, 0x8, 0x0, 0x4}}, @link_id={0x65, 0x12, {@random="cf43f15649b6", @broadcast, @broadcast}}, @ssid={0x0, 0xe, @random="d099158651f1f9bd46988de40525"}, @supported_rates={0x1, 0x4, [{0xb}, {0x42, 0x1}, {0x6c, 0x1}, {0xb, 0x1}]}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1}]}, @NL80211_ATTR_HIDDEN_SSID={0xa, 0x7e, @default_ap_ssid}, @NL80211_ATTR_IE={0xdd, 0x2a, [@random={0x5c, 0x9a, "7c4b77cf5dca2359c1d864733fceb29f51151c76ab5b7c891f208bdc5fb44f837a93a176c4cb021361ca725cef9f9b710480a05180ac61f7f61522685f2ad01fa7ca59d0b6bf00a13e02ae60141323f928faee58c9b3e4fa0a0de1d18e8393f728a318827b04764e32dece17b3d104bd0602989233da412519e398645df76956f8e8f484c511c865e269de2741de502a63ddc97392339957f144"}, @sec_chan_ofs={0x3e, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @rann={0x7e, 0x15, {{0x1, 0x5}, 0xe, 0x4, @device_a, 0x80, 0xc, 0x5}}, @peer_mgmt={0x75, 0x6, {0x0, 0x5, @val=0xba7, @void, @void}}, @link_id={0x65, 0x12, {@random="ea74ca5a3bb5", @broadcast, @broadcast}}, @ibss={0x6, 0x2, 0xfff0}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x81}, 0x801) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 2m45.206218682s ago: executing program 5 (id=535): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) syz_io_uring_setup(0x588b, &(0x7f0000000040)={0x0, 0xd9a1, 0x10000, 0x2, 0x1e6}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) futex(&(0x7f0000000000)=0x2, 0x2, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) 2m45.039290618s ago: executing program 34 (id=535): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) syz_io_uring_setup(0x588b, &(0x7f0000000040)={0x0, 0xd9a1, 0x10000, 0x2, 0x1e6}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) r1 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r1, 0x8b32, &(0x7f0000000040)) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, r0, 0x93771000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000000c0)) futex(&(0x7f0000000000)=0x2, 0x2, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x1) 2m26.542690588s ago: executing program 2 (id=669): setreuid(0xee01, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0xa48a, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r6, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$inet(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f00000002c0)='veth1_virt_wifi\x00', 0x10) sendmsg$inet(r8, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{&(0x7f00000001c0)='\b\x00', 0x2}], 0x1, 0x0, 0x0, 0xe0000000}, 0x810) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) r9 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0x4800000}}, './file0\x00'}) 2m24.694995012s ago: executing program 2 (id=675): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x0, 0x0, 0x30, 0x0, @in6={0x1b, 0x0, 0x7, @empty, 0x3aa7}, @ib={0x1b, 0xffff, 0x0, {}, 0x0, 0xfffffffffffffffc, 0x6}}}, 0x118) (async) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000001c0)={0x13, 0x10, 0xfa00, {&(0x7f00000005c0), r1, 0x2}}, 0x18) pipe(&(0x7f0000000200)={0xffffffffffffffff}) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) close(0xffffffffffffffff) socket$kcm(0x2, 0xa, 0x2) socket$nl_crypto(0x10, 0x3, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r2) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r3], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r6, 0x7dfff000) 2m24.423379904s ago: executing program 2 (id=680): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x9, 0x1, 0x7}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000380)=0x80000) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f00000002c0)={r1, 0x2, &(0x7f0000000200)=[0x7, 0x2], &(0x7f0000000240)=[0x8, 0xb00], &(0x7f0000000280)=[0x5, 0x0]}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$video(&(0x7f0000000300), 0x100000000, 0x101000) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000340)={0x0, 0x645, 0x3006, 0x1}) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x4}, {0x63, 0x2}, @period={0x58, 0x0, 0x0, 0x3, 0x80, {0x1, 0x8001, 0xf, 0x1}, 0x0, 0x0}}) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r6, 0xeeeeeeee}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r7, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000000), 0x3, r6, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r5, 0xc01864ba, &(0x7f0000000300)={0x21, r8, r6}) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) setresuid(0xee00, 0xee00, 0x0) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r9 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(r9, 0xd, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x22052, r2, 0x2000) 2m24.18425201s ago: executing program 2 (id=682): r0 = timerfd_create(0x0, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1a8584c, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f00000002c0)=0xc6c) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2m24.040171281s ago: executing program 2 (id=685): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0xfffffffd}, {0xa, 0x4e24, 0x2, @local, 0x80000000}, r1, 0xfffffe4d}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x200000003, 0x0, 0x111, 0xa}}, 0x20) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x800) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x80049367, &(0x7f0000000100)) 2m23.841713305s ago: executing program 2 (id=687): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m23.648438649s ago: executing program 35 (id=687): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 9.495525814s ago: executing program 0 (id=1640): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000003180)={0x2, 0x0, [{0x0, 0xed, &(0x7f0000000540)=""/237}, {0x8000000, 0x1009, &(0x7f0000003280)=""/4105}]}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000140)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r3, 0xd6bb3000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000740)=ANY=[@ANYBLOB="12010003000000106b1d010140000102030109029300030156c0020904060000000100000a24010101bb02010211240601040507000a00080003000200050524050e0f0724060205000405240402010924060502010600000924030303030505f50904010004010200000904010101010200000905010920009301090725010003480f0904020000010200000904020101010200000905820920000d020407250126080300"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x20, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f0000000300)={0x54, r6, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x34}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "7d54e7aeca3484c4d6eb7ed8b914974c"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x60}, 0x2200c044) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)={0x58, r9, 0x405, 0x70bd27, 0x25dfdbfa, {}, [{{0x8, 0x1, r10}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080) r11 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r11, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) socket$nl_xfrm(0x10, 0x3, 0x6) 6.442177675s ago: executing program 0 (id=1662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x3, 0x7, 0x7) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c0000000e06030000000000000f00000500000905000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x24040040) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_int(r1, 0x6, 0x25, &(0x7f0000000000)=0x40, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000200)=ANY=[@ANYBLOB="60cae568c123469951131c47d0091b15000000", @ANYRES16=r4, @ANYBLOB="010029bd7000fcdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x400c0) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x38, r4, 0x1, 0x7, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5a6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r8, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @media='udp\x00'}}}}, 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r7, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40000}, 0xffffffffffffff3d, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r8, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x10001}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x44805) sendmsg$TIPC_NL_MON_PEER_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030b000000000000007e130000000427623344000980c078f50ef060ffd6e2c33aca3e4639d1155e5a2d6ffc0a3476c5ef8e2a5c3447fc6cabead6aabb33008138e5da3f34a3a736ee444fee2f33a6f8d4287c53ef08bbba60dc008f0717b55cb5a1ad58c5f915f53afaceec05708c84803db06681edfdffbd90d7e5b6df816c9e4dd05205e41ed69fd04d4c43"], 0x18}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) lsetxattr$security_evm(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000280)=@sha1={0x1, "00b300061888933b515649e0cc250911eed36f5e"}, 0x15, 0x2) fsmount(0xffffffffffffffff, 0x0, 0x8) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000540)) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) 5.543373531s ago: executing program 0 (id=1679): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0xffffe000) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x1802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r3, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24004810) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000380)={0x2000000000000112, &(0x7f0000000000)=[{0x6, 0xfe, 0x0, 0x7fc00100}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000340)=[@increfs={0x40046304, 0x2}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @mcast1, 0x8}, 0x1c) recvmmsg(r5, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000003e40)=[{&(0x7f0000003d40)=""/211, 0xd3}], 0x1}, 0x5}], 0x1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000140)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0xa26b1a4fb20b8820, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x200c008, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r6 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) 4.829149552s ago: executing program 0 (id=1686): syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f00000000c0)=ANY=[@ANYRES64], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x90, &(0x7f0000000380)=@string={0x90, 0x3, "c23d38459d0cd3ba24cda92608deb03fe1b1d6def9a4a14cc36465f98890cf73eacd0c43572c1842976aaa025483b4d44987b3f1a34c255caeaa81da5e2ce7f4b6f66a22c5ee2c1211c53d4e70105c058549f75818a04b369de6fd1f1ed4305121441a94a23a32a4c292458c5aed8fe2ae1bc8f19f81a7e07146c6e1bb278dac007867479c2fda29fd9867055494"}}]}) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@index_on}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 2.194571322s ago: executing program 7 (id=1704): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x165a40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.032633064s ago: executing program 6 (id=1707): mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='romfs\x00', 0x810494, 0x0) 1.926984465s ago: executing program 6 (id=1708): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x29) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={'virt_wifi0\x00', {0x2, 0x4e23, @rand_addr=0xac14142f}}) (async) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) socket$rxrpc(0x21, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 1.881270239s ago: executing program 6 (id=1709): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f40)=@acquire={0x128, 0x17, 0x1, 0xfbfffffe, 0x0, {{@in=@private=0xa0100ff}, @in6=@dev={0xfe, 0x80, '\x00', 0x10}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80, 0x84}, {{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x10, 0x4, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x4, 0x4, 0x8000000, 0x9}, {0x10, 0x0, 0x0, 0xa}, 0x9, 0x6e6bba, 0x2, 0x0, 0x0, 0x2}, 0x400}}, 0x128}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f0000000100)='erofs\x00', 0x200004, 0x0) 1.799041277s ago: executing program 6 (id=1711): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=0x60) accept4(r0, &(0x7f0000000100)=@vsock, &(0x7f0000000180)=0x80, 0x80800) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r1, 0x7dfff000) 1.795792551s ago: executing program 7 (id=1713): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010013000000800000000000000a50000000060a090400000000000000000200000024fb0300140002800800014000000009000000000000000069dac57b73797a30000000000900020073797a3200000000140000001100010000000000000000000000000a00"/120], 0x78}}, 0x0) (rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64) r3 = getpid() (rerun: 64) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) (async) r4 = socket$inet(0x2, 0x4000000805, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) r5 = socket(0x10, 0x80003, 0x0) (async, rerun: 32) r6 = socket(0x10, 0x3, 0x0) r7 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) shutdown(r7, 0x0) (async) writev(r7, &(0x7f0000000180)=[{0x0}], 0x1) (async) write(r6, &(0x7f0000000040)="240000001a005f0214f9f507000909000a000000000000000000000004001e0000000000", 0x24) (async, rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'sit0\x00'}) (async, rerun: 64) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000cc0)={&(0x7f0000000440)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000500)=""/9, 0x9}, {&(0x7f0000000540)=""/137, 0x89}, {&(0x7f0000000600)=""/240, 0xf0}, {&(0x7f0000000300)=""/160, 0xa0}], 0x5, &(0x7f0000000b00), 0x0, 0x40810}, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) (async) sched_setscheduler(r3, 0x2, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0xffffe000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) 1.790026436s ago: executing program 0 (id=1714): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f000019a000/0x4000)=nil, 0x4000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$SOCK_DESTROY(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)={0x18, 0x15, 0x12b, 0x70bd28, 0x25dfdbfc, {0xa, 0x8}, [@INET_DIAG_REQ_BYTECODE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='@'], 0x70}, 0x80) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket(0x200000100000011, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f00000002c0)={0x11, 0x9, r7, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000340)={0x100, 0x0, 0x0, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @pid}, @generic="590dde9a7f3a37e26c7e4a3b6de268a707b621dc47d7dce1aa744509637a8e83f21f6cdac09ceccf8f776f8bf32dfd77128354cb08365f05953339000f8b96f288212d62af3d65b5feb4f6b9766154a0dd1ef2b838b9d7219db882b02995dd120a67cee16b09758612a57ed88f0a4d7df417e40cc102fd744ae51bead8d5539d2067494785139f06a54a846ba4e4e1613bf2e9f0ba0e03e697a25317d50ddb806c4d9a929f811861891e77c38e0149c7bec0c2e61a81b8d092270d6800b87ef0d7d1431f5dd3e1353a89c08e01ac39a12a437daa5ed405354629f17ec83f25318423f9d186"]}, 0x100}], 0x2}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) lseek(r6, 0x9, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYRES64=r4, @ANYRES16=r4, @ANYBLOB="31030000f8db0fdd4ed11765708302ca74ab7bc3a89334000000000000000000", @ANYRES32=r8, @ANYBLOB="58c6caa44d12238c6d1159536d0496d86f4fdf2d55d4dc1e142c6a877e297d21b38b22f8951bf9de7143eaf0b5cfe6f8543971904dd838177db866264598ca3ef13f6eab66682f659720fd7864f3f6b78f", @ANYRES64=r1], 0x24}}, 0x0) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r9, 0x2000) 1.713485447s ago: executing program 6 (id=1715): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x2) setsockopt$inet_opts(r1, 0x0, 0x3e65331725225247, &(0x7f0000001180)="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", 0x1000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x1e, 0x1, 0x0) connect$tipc(r3, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0x4e20}}, 0x10) (async, rerun: 32) listen(r2, 0x9) (async, rerun: 32) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendfile(r1, r0, 0x0, 0x7ffff000) 1.614930522s ago: executing program 0 (id=1716): creat(&(0x7f0000000140)='./file0/file0\x00', 0x129) mount(&(0x7f0000000100)=@rnullb, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080)='zonefs\x00', 0xe8008, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) syz_usb_connect(0x3, 0x527, &(0x7f00000018c0)={{0x12, 0x1, 0x200, 0x57, 0xa3, 0xe0, 0x8, 0x46d, 0x823, 0xfcf3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x515, 0x3, 0x5, 0xf8, 0x10, 0x5, [{{0x9, 0x4, 0x8f, 0x1e, 0xb, 0xe, 0x1, 0x0, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x8000}, [@mixer_unit={0xa, 0x24, 0x4, 0x6, 0x7, "7a3a2da561"}, @feature_unit={0xf, 0x24, 0x6, 0x1, 0x6, 0x4, [0x5, 0xa, 0xc, 0x1], 0xf7}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x300, 0x5, 0x5, 0xc}]}], [{{0x9, 0x5, 0x6, 0x10, 0x20, 0x6, 0x2, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x5a4}]}}, {{0x9, 0x5, 0x0, 0x1, 0x3ff, 0x1a, 0x4, 0x9}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x8, 0xa, 0x9}}, {{0x9, 0x5, 0xf, 0x8, 0x400, 0x6, 0x0, 0x3}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xc, 0x7, 0x0, [@generic={0xb6, 0x0, "2796ee955079a2ee5c6ac2b39e0ce2d75ca1cd51a1cb7810f0f6602f393baeb2a872f750879ac3c1c28cec506e6442c8712dc9ffefc1ac096574ba7d114198c4f2c4e8cf3141c593c45c86f65fe28b7099c660f6a2b75e08248dc9bcfc5e55194d0142869dab2536f17ac16f661a1ff27c4f1ee8d9b877b9725f4bbeafdf6921dded9e9edc58c4235d6db5c2adcb1381ed7ef3a7755782e27de3e7d3f8e040e869002b481c25183c9d606b617f1f1c5867d9274c"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0xff}]}}, {{0x9, 0x5, 0x7, 0x3, 0x240, 0x3, 0x11, 0x97, [@generic={0x81, 0x30, "aaf8d2d99212551117bd029f4c868a57670411887cc48c2a4a43804088c7f5a34a790944fb5578c247651ab5649fd631b679a8af93b3ed79ee483094eec20a1cc9d15d9a3489692478e0169b820e7d345360506f241db862336826455492269ab1a8082500643ce7d3ff85c203d187a08601ab4a868f9394860149e6338d96"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x0, 0x1b, 0x6, 0x5}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x81, 0x76, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0xe}, @generic={0xb9, 0x8, "c5d34b66f635d87356684618d45fe96beee8ed81c447794a2de8f51c4049287b8bb0511101597cbf836876cdba0415917b4250d56d63b581c817d5910e4decd33a130f1013720cab8e248ce3bcf492fd37cc7b24e167e4f77f35227f5555020a35951509a58e9c0414ee6a40f76899d2dd91ba6675661524fdd99e1513ef7b06f5150400bac710cca2179112d84260ae17e459cb500c5dc7934a2c73511aafc95805c14f0139a7df96fce1d7983e3768aeae2c12e39f36"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x8, 0x6, 0x27, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbd, 0x5}, @generic={0x7d, 0x7, "d9248acabb91cbf9b21597bd4b6c4c937cf61be1fcf89efe9bf305693087868894d8462fd377ae125bf0aff3c9b17a537e05c356c115cd8d5f8b949bd4d53539fd91f81d6a93c292e4249b2e1b96ca786bcabe2fd5738a585e82eec82135bcbd9c4fb96e627101382ab4bbc7d62506380ff587d5c248daada9d482"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x2, 0x3b, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x4}]}}, {{0x9, 0x5, 0x2, 0x4, 0x60, 0x40, 0x51, 0x1}}]}}, {{0x9, 0x4, 0x3f, 0x8, 0x4, 0x8e, 0xa2, 0xfd, 0x7f, [], [{{0x9, 0x5, 0x4, 0x2, 0x3ff, 0xd, 0x7, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x4, 0x8, 0x5, [@generic={0xb5, 0x27, "2c137ab32b700cb5827fdc6f26e75a66f9bc80cfbea5315ac6296256d189897bdcdf8aa3b3a616e2ab5870d5df1ef878b2a8de42282100d78ce6c48a1d1faf1baedab8df1c2d3db482f92f699ce76467d3415904d224082fb5cccff67c3bcc5e2821ad08ca79f878b285cc336e7a13404637f4685e830e8095aa64c7a9eea28164beb6ec1153c0020a784f304dda76fccf056bb47d41d091e4b0bbeb9135374432a02bb93d135b34eb10b2e43697796bbc82fd"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0xff, 0xe, 0x25, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x7}]}}, {{0x9, 0x5, 0x6, 0x0, 0x3ff, 0x6, 0x2, 0x7}}]}}, {{0x9, 0x4, 0x94, 0x10, 0x4, 0xff, 0xff, 0xff, 0xfe, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "66679727eb"}, {0x5, 0x24, 0x0, 0x3a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x9, 0x2, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x8, 0x6}, @obex={0x5, 0x24, 0x15, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x40}, @mdlm={0x15, 0x24, 0x12, 0xa37}]}], [{{0x9, 0x5, 0xb, 0x0, 0x400, 0x5, 0x10, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x7}]}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0xff, 0xeb, 0x80}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0xf8, 0xf9, 0x3}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x0, 0x6, 0x9, [@generic={0x78, 0x21, "2414f0df8d72904d9a9f65281f085215c10debc54e710be25619acf9d92507a756157f3e327ed987b3a99ada1c5d7eb351a52201a9e50022d7859ede58a466355ed9853a2e748e3938c58b5c1ff0ab0574e63f06c9ce87a4ba4e22fb859b820494c6976306106afafbe6ad84a7ba2f53936c1362e115"}]}}]}}]}}]}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd010000000000140308006000000003088400fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d507df08c410448200dc01020301090212000100000000090400000003"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="200e000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000001c0)=0x1) socket$kcm(0x29, 0x5, 0x0) pipe2$9p(&(0x7f0000000040), 0x4000) 1.591315894s ago: executing program 6 (id=1717): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070296d1ca000905060200020d0006091882020002000110"], 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x40, 0x31, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200108"], 0x0}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_clone(0x10200000, &(0x7f00000004c0)="966bd95500b3228e5d78aafc0b3877a25d09e70bfb367d2c838949f2d2a718c3616acb57bda304663c9ce9ba0698f2dafb947d8215d7c8a8a891d55b74444a12419a9787a70f25b12f585a56571bdd494559a91f4860fa480f6665284b2dd1a1ceab7297f9f06ff9323a43a0a576266828c7eb2607bf9cd5dee84571e39da96b6caa15dad919289d0def84a7073006b795c29fd5ff9fb6333f40d997d7f4", 0x9e, &(0x7f00000000c0), &(0x7f0000000200), &(0x7f0000000280)="555fa9d9e0b60d4bb7330ba67921318fcc9a44574d6566cb1cef75329196512de64c3d9b20f00f7039abf2562bfd1a97420c70408b773c37f7c68d33bff67471bacc1e4083a5b9ed9e2f2e954c5630e701e551597003fc71fcec7cf8a6813abad4a8ab754373c3e2d9374e5e63ee405efbc6d4b4acc53ed4") write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0x200000, 0x0, 0x334e8b, 0x200000a00000}) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r8 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r8, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x1, 0x0, 0x3}, 0xfd}, 0x18) bind$nfc_llcp(r7, &(0x7f0000000380)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a03760760beeab91e8ff0055e5c0d48bd63ffdb93bd43a847a1597c8ef03da5be42200", 0x37}, 0x60) setsockopt$nfc_llcp_NFC_LLCP_RW(r7, 0x118, 0x0, 0x0, 0x0) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00222200000096010006010083000000002a90a027b3ff82e875988b147043022effffb3"], 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r2, 0xd6baf000) mremap(&(0x7f00000c0000/0xa000)=nil, 0xa000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil) 1.517292736s ago: executing program 7 (id=1719): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x180) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000040)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xc92) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) 1.438661986s ago: executing program 7 (id=1721): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, 0xffffffffffffffff, 0xa0e52000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/176) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close(r0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000003, 0x43a1012, r1, 0x6d4bc000) madvise(&(0x7f00002a3000/0x4000)=nil, 0x4000, 0xa) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x204, &(0x7f00000000c0)={0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000140)) 1.354592999s ago: executing program 7 (id=1723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050440c90001"], 0x7) 1.015831321s ago: executing program 4 (id=1727): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x309440, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20201, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) 938.708288ms ago: executing program 4 (id=1728): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) write(r0, &(0x7f0000000400)="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", 0x1f000) socketpair(0x11, 0x6, 0x5, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e400000023dbdf251c000000080025000000000000000000", @ANYRES32=r0, @ANYBLOB="08004a00ffffffffe472d3f3735384c438d146894e92f58f04665813e2a3efdabcc0f6aea237e154b63a8dcc625198b01632eecc34d8b170e285514579d0cc0b542b2afa7a3184b857790ccecb6ba8cdff24b9d428058aa5ab1f9997cd87378bd31138be93c0b60154f2baf1c1aaa683350798515064a27847d30d649addd2f3f25ac91501ea7313d7c6f2e42f1409e98d5eb378adecf69a01c7601b4ff746304b02e42d96a86a0fad6c848885cfb3c0383a89ab9488e27425630392afdbabe1ff54d2e4a7e20b00"], 0xe4}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165342, 0x0) (async) munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) (async) write(r0, &(0x7f0000000400)="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", 0x1f000) (async) socketpair(0x11, 0x6, 0x5, &(0x7f0000000080)) (async) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="e400000023dbdf251c000000080025000000000000000000", @ANYRES32=r0, @ANYBLOB="08004a00ffffffffe472d3f3735384c438d146894e92f58f04665813e2a3efdabcc0f6aea237e154b63a8dcc625198b01632eecc34d8b170e285514579d0cc0b542b2afa7a3184b857790ccecb6ba8cdff24b9d428058aa5ab1f9997cd87378bd31138be93c0b60154f2baf1c1aaa683350798515064a27847d30d649addd2f3f25ac91501ea7313d7c6f2e42f1409e98d5eb378adecf69a01c7601b4ff746304b02e42d96a86a0fad6c848885cfb3c0383a89ab9488e27425630392afdbabe1ff54d2e4a7e20b00"], 0xe4}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) (async) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 938.189265ms ago: executing program 4 (id=1729): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6bb3000) (async, rerun: 32) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f00009f7000/0x2000)=nil) (rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0) 906.063012ms ago: executing program 4 (id=1730): openat$pfkey(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x1090c2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'s526\x00', [0x3, 0x5, 0x9, 0x80, 0x1, 0x0, 0x5, 0xd, 0xffe, 0x1, 0x7, 0x1, 0x1006, 0x4, 0x40ffff, 0xffff, 0xefffffa8, 0x40000007, 0x40a00000, 0x3, 0x426afed8, 0x920e, 0xffff, 0xe2dd, 0x2, 0x1, 0x7f, 0x3, 0x9, 0x0, 0x4ffca555]}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000580)=0x216, 0xfffffffffffffdcf) sendto$inet6(r3, &(0x7f00000005c0)="25efaf64cdb3328ad025e30ca8b7c017dba62718c8bcfba321d94d06bb537fe362d237c88ca1edfce09950496f66c22e169ea63e1ba1c54db03655c68c4eeb52da042b1fcbf92d544ef606e2d5e015089938e846530d17a6cb2e90cb7fe068bd91218d5e1aba4ecd2ccda92a4f0752f2ae6e4ab6a4434f6007a4d77470e77bd8c6624236a516277b09971ca2d46db32c0d1017031898ec75af6f3391a4250aa7f3aade54e43319d714e01bb07b650400000000", 0xb3, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x8000, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x45}, 0x1c) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="680000000714010025bd7000ffdbdf25080001000100000008000100000000000900020073797a32000000000900020073797a3000000000050042000100000008000100010000000900020073797a30000000000900020073797a3000000000080001"], 0x68}}, 0x40044) shutdown(r4, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000480)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0}) r8 = dup3(r4, 0xffffffffffffffff, 0x80000) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000280)={0x44, 0x0, &(0x7f0000000840)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x2, 0x16000000, &(0x7f0000000940)="e3d1"}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x13, r1, 0x100000000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f00000004c0)={0x3}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) 832.996403ms ago: executing program 4 (id=1731): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) (async) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0x4, 'veth1_macvtap\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80e02, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000340)={0x1, 0x0, [{0xc0010117, 0x0, 0x1}]}) r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000180)=0x10, 0x80000) sendto$phonet(r4, &(0x7f0000000280)="2656cc59014a577ab829e1a56592b31699a3d77543d1c5811af955e6c518105d69435ff6f337c326d3c7c337860e8ca6cfda07b720c67c6545c45666d9eda3c5a2fb5d68dac509", 0x47, 0x0, &(0x7f00000001c0)={0x23, 0xd, 0x92, 0x2}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 450.852944ms ago: executing program 7 (id=1732): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) (async) r0 = syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000100), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x3b) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x52, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x3, 0x7, 0x3, 0x8000000000000001, 0x80000001, 0xfffffffffffffffe, 0x200, 0x4, 0xea8, 0x9, 0x10000000003a, 0x6, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0x1}, 0x4008010) (async) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x0, 0x1}, 0x4008010) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FIONCLEX(r7, 0x5450) (async) ioctl$FIONCLEX(r7, 0x5450) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x57789000) syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 4 (id=1733): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000780), 0x401, 0x111000) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000b40)={&(0x7f0000000b80)=[{0x8, 0x4010, 0xbf, &(0x7f00000007c0)="01f7ecf907eee0c0d5b0ba7e873af6551f7da2b5ce7ef7e92a05f90fb5e0e132a826441123968923943f4f8931b748afb09c53b501e91a351e4d459b8c573756f00c85ad42ea860140687ca7506baabc94aeab55edcaf87e366f1022c267d93d0748a279199b7e6987ba947f4ebb0bab6cee306a25f86441ca355ba2f687fab36a8919cfc874f0868fc5e7142f303a5a4c6b605dc01d4ea91bbd5fae780d88b705702b771bad9dc09274f21bd604ba83f90988e613c7b017c2c89b3ca56c39"}, {0x8001, 0x2010, 0x9, &(0x7f0000000880)="7a53dab96c3f1442f7"}, {0x97, 0xd801, 0x1000, &(0x7f00000049c0)="ce56ca0ce1af4a8b61fa09b237d67fec0e6789624b66cb6a77746b389948a0be76730c6aacf175747a24105014a5b0672ff8b7cad1f8de1a9c528a683183a13007a8cb70326d22c816414925eef33bf106cc7d67cf84dd768ae543485541f96e4e5554eb714a1e5c784acf15cb88653211440902e0c0356cb6c75532961b0e8794bb4dce891e3b3c8f37168d430d7d5d3949eef87dd2df75c357837bd5fceca354b631377a66eb83bbfe0ca9f79e844a789cdd4942f293ab0d329913678708b3ed1326ee2c9266f7a538c122f1225a79ad4baeb7131fd38b039c944be7f1cdd57724c6ee787193ac99ad9322c93a426d31925e825e98bb64adac1b0afe5afe4fab1081281d36a0601b6689eb98f1e8d49ab6644d71dbe5616638cfc3193495f3eeccaf51cec598137edf450551e3d871073e79058cdaa3e31ac943315be95bc8d3dae4093e40bd9a694232fa49a6149419dcaaefb5de1a57638d7a4de5efeb28eb0eba5d27a43598f4121f3a9e74be9b231cd34cd49c4f186b2d2ab14774aea94435db9326750085f5e77f9de246b8613c95a46804a76b81d71b8f4de33319030b7b3375fabd3b5c1d14c22e3869aa98f941812ab6b0d6fca57e66e5e7fee727c391385cb2caac282b5ceda5bfd476391d130c8a30f7c8c1999bbfbbd65cab734875c09f3da3e5ba9f33cdcea6335c2d3337411598932ef35b11bb1bdaceab6de44c3ffc42f00dae7f84b0d58ef8638635bed8323fdffe3b9dc1d2c39823095610a3a9a7097f6bad19fe6adfd74ba2d6ed29758c18a1d5ea273fe8c0582c9c45b01b817120f3fa1e2962a9a6740a2b4719ba1ce07af6db42f5c6d507f81451e3ebe4e88b9e006a7c516d3fb22464dbf990747005c4f30fac0c5f4bb9833f33340f2f87803d4910c93c7c7d3f57f8dbdea2fbffac8b05909cd77f50b1218377bf0a0705d7d6267081c221417e411f2520cf89e303f9d733c541615d176f31d7f8ed4d2cf274d40d4e467593316e4c30f86ccd94181de83662f0808f84c0cd5b0af46be295a96b3458f9af2802c853bae4bd366d3d711d19a81122aea2cb92d7b0e4646fbb7b8317eaf167bbb2ba5f192309c29682eed69c1ae01997185d96ab519a5cac05c5a6d6a3735fe3c4e5f29cb7a1be5abcc6dc0b6f49ae4952d0a42019fbb417eefeab4e6e97ba61b2fa9b99ced70e9ddf0adc57a7ca446da7007259d6589ae339171b56f7a87fb16df8e0e8eb994f325a678461d0b4213159e6b958cac53fc53ecb5c078e8c51659c9c5bb03a738935135be02d2b937fadd829b2c0afb886053ded499ffadf0a7a99573618919cb4f7bab5f17ed40f3c6f276d2c48102e89e60aa82e6f27d8619cfc8c2dcdfb15c199018fc4ed787b7126dba61df6742e4760ba8e1d6d2c4a701e71cb792e979f98d3e63d14ec0b7489fc0c36e256c660f0ac67faac7936bdd451e70b752bd0f2668f266c527fbd68584da2b0a287dcb4411e484c9afec877cebe56ecd3cfc965a6e6dcfc8d67703e331ab9209166e52c625d9760ac96aaa2167def852dd254513cc9af822d9ea98052d63c81a5087e1b170ae0d0178ad62b7b1afb9f64f98f9430cd22191556f4b87b4249900237f88e42f63cd9d2317bce1f0108a4889046f33bccdde0a1462ecd7412bec939a16156f4fa550655ff568d3c2622e254fad96ad5678034c88c95c0b41172ada8190376844096bb1f6dcf414eee938b4925d8859e8fabfeb7db7b87231a1f3bbf62dd2b9c41d74b9f8e29f5f9b07dd382fb986f2df3ecbf1eba44ac9a213ff54339399fa56faa0dad96af2db6073e2c5b02264f43f3a53f2e72bb981becc019e36e181e1f5904fa79a0c632fb8abbefe09bf3aa485a3c3083fdef4806527f2348dec434473c904830e6611f6736e30ddb76231b9a9fcfb47955a8cd51b948825cdeb7b9c1f74533991790103c04919b9ac81240b19af8b66d316bf0c29378914bb694eb413592c8f0b8ca539b3f283c2db9d8b7e8ffbd18e5427a291871d1acc5a18bfa0b2acb892e10dee82f270d596307796ff4d404325efcc99bfae427953c2a52744d0f7e9b8bc03414712109539694b353a9dea71a1cef21f173a8d44ce313eb184add5a07054667cdedc0b67aebfad56660b09cb778cb21a9a2d1d9309331b41e756be0355f19994f263479750dd4d5ed9660259b8b82a6eb9cdd756a746c30af364e9cd4ae564b1c341778ede6de84dab820e8c8e8f21b3758d630d8e554c93a0a02e8599eb0485f67771ef851df7d5c082d79a5343c5aea1c746dc664a1d614c7029a7c2eb0127d1e38c5beae2dd11d48e76497b35680e95ddeb53322777d535ffae793b535a839ae18804b61141b3bd21e311f3060f7fe6e5560baa212e63a15805f6aaf8fe591a608f7ff7f19f3c7c4bbacf828d79031be6ba9b361e123907ad5a41bbc352845b6f5848b8ecbbf82416f2993f27f78b057bbb20c8a8f23f64ae5b87a4b97be41f27b4c5ddc290727e528bdfc4e3313dce0ab89f01c4d51ca61b6b7f2b7cf585ecfc4b42d2a6c9c8986f59fa9c1f4d94d6099e1218f114b5a2e2d1b45085bc4f4da3068bf904df1cf3fe14d53b02add6e3653523850c30a211b8f6b885712e714e7d5a9b2d37dc4f72ef6c20714e35ce281a76c61318b7f23ccb23b273be36a10f25aa0c9c98af01a086d41c8efe9482d69de51a82cc64bf0774de2dd3779887c7318cd95ce1521c5ae9c2b6a90a57dae8c2d3cc829264863776266620592805f3552623c30c62e80dae535d9bf575d364aef8b54dd37d3b4bf0aee4510b9e7cc364f07437c7322d52a738b114d2825ebd82e87cf4222b601b7d338194cbdd314ef7ff8dfc563460cf608fd9dbcc6c1d6b2c42812ff67241351b0b2eb0c2d1c4304ed05edf895bd459e66e815ef806a5343f75af0587ce1e99904912a69f6094b6f6aec78b54265f439d6473735294d379caf7c4cd37b663cac9ae9529a17f8cb2eedce3e32262a6ad1b847e45379bb8ae6c1063de4879c39620f2c2220ad328217fa1d7a3606781683f24dc6a9e1cf06ed67c51535f93a2669a442f01e3a067d45e2cc3887b0a004115f15cad053b1e152a4f1b2ea98502cc897f5c91bd904e526aa258ea8a7835191f1079b9f607c9dd3a218c7dd06daf68274616389d2d47c6f10ad3981ae541c9c23a2a29c90a245abeb832abbf9c782cf12074146f662d303597ae9e45e5e881fe9f3687a44bc416950399af2ac9e5b8c5572ac2da15868deaac3a82bf22fe8cefea9dbc29d5edbaeada166cf1b25371a4382a54a17c62149c782e8bc17ff2259c29884aae2a6600721767707d939b0daf15093cff36b3fb2e90c5976daa34b6569963886adf4d976b8deea8b83f08b2188aafeb3abd78b4f9aee30aa8011222f02b8ee16fafb921bf91bac8c8160a7439f3755226dd6a9375626556226c87908b6f8f21bfba83cd1981a1dfc91d2bc937de76cdcb86799b6fc56c430ae8f7e238a9e0aac77bb858c930c561927cb4f03cc18437f09706ef7746be151ce21e364c43c514dd2ff3e5bc1b8daffcd9fcb697e01da1c240d165e79815140dcbe751efb7c98e6c4a5ee014021a40f2cc1d5ea854cf9fafba3f193cc8c6a61212c7840c12f32048bd8a25769fea1dfffa7eff2bd43ba95aa6a952ab6f11ddaf1f150aba655cfcd6f029e50d197c50b7318b7f691dce5427df696e0ff013cdb4de52fb8d88f0d5990c91d04dbfb0bc19aedf5fb1755a265a3f0f9c77ba5d67f49c98ff10a9e9a7f1eff1b82a98b47ad8b6aaa27c12d22e51f456afd0871d1eff176997d8bd76d7f6fa57359b3a2f9d1c8637513f109920a14c6d72a9fd64c4327fca375da613ae598424e5abd3a3b4ccce8f28d50acbfb7defad380aa0d425d913e4f425193c2254e105ed6bd89a0db8cf58a87a6b45a8b5350442028fa408ba0d1b12b7e48d22dcd065fba4f2c6bea9009860c14c49871ebaacc9926cec94c937d52c7f221eb5977987693ac946a703c17afeda225b904d90748b305a28050331b4313945fe04b37f01580ade0ac16a274c162b2e89cc62f4306f8cbba7b2369fb38a0e9fa5629febf60e71a9af3e87aa971852b84bdafb1f9a8c7c88327fef183bcf3a5f31840c47e9fa668e274f2a580e4d274b0e8b1453f48e20592485facaec36cbf45d7058b804c8c748078aa28a1508bcd1ea660eaae575c650d19d37413c8deaa298f40ffed3d8f088a62d034b21e2c1fd915e6bd2491e849ede4bb5dee17f4463ec3bab37116cc9c569ac4bd3982ee7aa7b530fbf847b4fc12ebc7a405fd408098d056349021dc3a45f7d25d5d652e12eb258a9566bd5c11145c1a790e2c11ab1e700f2d71365fa57de7f117e2811edf35a0f5c9e690eaff8ee638921f7b7429f3738c031763096bdfa24df0ff84c1146f7b05584d4f8f02ff2089d51792bcdf4bcf616c1e4446196fcaa7e43fe6beede2f551ccf0532d7484fb1415f3ea33b45d894987545012c6696226a5e0767a375f88c2aa59a8559885bd66e3f62c8b27437e58b4e4901979ca9dbb7863a55549a48755fb22604b8db05cc690585a281bdb77372a08b3335770cfb3c16a0fe0344d8f3231f8b4b935df0aab9ac3a428caba5833e5d8a63b74909a70250815d9216823e3ff1d6e1f3d6d468b3a56b60dc5e72624d56e51fb57f5e3b42a1919ef4912a3e41d0cbbc1b387881ece00d240904dd1becde3c07a974c6028026c9c7cbe6bd64e0a00f1e16de7da792f6725d2b1a25aee0527bc4d74a06a722e1ca72229847fc7dc48378b04ac6a431fa12b030ae79c490bb8089ebb6de9b0925c24a78078bcba0b38b86b14e2bc5d253606d9dfd83b6dea4383ffc1def5372cc5e08c596d616251d00756b546ba9641e8f30bd917aac0b3c0da5635449c5fdaa459df73c40aae9bbadc5bd4f4ee07b7b0048f4f9fcd86145c097ae58199d66f01dd85add88a2930d3d07bb67e6fc0377e5db4d34c8d53b1d09f1c9baad1af2c7e9618d8b26b9d732dbbaccdbdef471fe975d51ef96daf634baae29fb6186f2d8be1842b6c4811d22dcbb60970c958c8f2f8c319d953a2d15b9bc44b1658bcd1ec2df219a5338fe25ecc0a677b08be171a60e2ba812589c020cc8d3707ac98b2b1559f7966d256e74ddcb95f60670e782b5d27bbf9dab458fd2572d0fb7ec7a084cf3dee307131afc81419b3178863bfbe6dd0c6f187e92c42975de9fcd4d340a755e60e7fce05537a2e838ea7178756a8390a80cdf9657ab4da73355794aa96c6aa087a551c020e024fdc5656ce71776d61392a422576ccdf01f5ca9e9cd2479e6ef17145f1997667897dfee196afc9593592e33722127d81e597e518a514a0adf894145c0e37ad592637a25910b4a65909bd5c570b1f82034734776b7867aac43ebe79a64e69d1c3973793fc7ca8c788b4fd5fa3a4721a86602227d8248bc2d8d22c10a80c849a8614d1a355c2f27f7515f7ac72d91868899a409b02eb2ec62cf3824bde6424a72e3f09fb7e93e7ee68be1b86a08aa7c5384834ae43149228911ba73a5eddf8c013bed9f958194dc872c5608bc0ee3e157042ab6614408acf5b3b2b3b9c4091e91d230445c475033a65790789686ed32d10c7a223f81a45a4fecb638e0094d6aeb13fde1fa09bb34bc1c9b4ef169f27ba16a10b4a400660cd9c14e1b1e6fd30af844b16d886fcc1094d774dcaadb2dcddfa674b5bf318c274aae68f00449a73e285d79add9faee6fc94b8d2abbe1cc2f887b05c7c3eb9ea5900"}, {0x5, 0x808, 0x5e, &(0x7f0000000a00)="472d63c6da3e7db82cd2ecaaa50e62d5eaccd445eb0116a196985c09208da6789efcbd553aa3b07b7405ef70168eeeaa17104c46233668fd8b490a173b01127bb98dc8705111dfbf14edc173d0edea88cfb25dd590ef51a5789cdd852155"}, {0x100, 0x9df4c3d788084450, 0x15, &(0x7f00000008c0)="ea3af664de06be50d19de17ba9276fd257a5303df6"}, {0x0, 0x1201, 0xbf, &(0x7f0000000a80)="56200ac927028b0792710125865c69b4ecd3d3240fd99e683b381bffb8e561484eefcf305423d2a3c61f3a6cdad239d0297246e23412ac5a3d695f3485cd98b306560b7df5f3737b6f6baeb4675cfaaa1427bcf80df2714a45ada69c3327c8c02ac4486406b24baf3158ba3962bfa7ded286db5329bac538bace86a0c5d350e1a3ca50573c5e4edc9c45e037f19af8fd4a562b82e72f46ab390901b5a10287d6a9177b7246098b29ac487ad3ea45b537924f8e58add376f2f4cf56fa7bb9ca"}, {0x0, 0xc00, 0x1000, &(0x7f00000059c0)="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"}, {0x1000, 0xc10, 0x0, &(0x7f0000000b40)}], 0x8}) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r3, &(0x7f0000000740)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x14, 0x3, 0x3, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4044) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x8094) io_setup(0x5, &(0x7f0000000e80)=0x0) r6 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fsetxattr$system_posix_acl(r6, &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) syz_io_uring_setup(0x4, &(0x7f0000000580), &(0x7f0000000080), 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/184, 0xb8}, {&(0x7f0000000600)=""/210, 0xd2}, {&(0x7f0000001a40)=""/4086, 0xff6}, {&(0x7f0000003980)=""/4123, 0x101b}, {&(0x7f0000000000)=""/52, 0x34}, {&(0x7f0000000340)=""/158, 0x9e}, {&(0x7f0000000240)=""/107, 0x6b}, {&(0x7f0000000940)=""/187, 0xbb}], 0x8}, 0x40012100) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) io_pgetevents(r5, 0x403, 0x80000f0, &(0x7f0000000600)=[{}, {}], 0x0, 0x0) r8 = openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) io_submit(r5, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0x0, r8, &(0x7f0000000080)="8c", 0x1}]) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'wlan1\x00', @local}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setuid(0xee01) fchmod(r9, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) kernel console output (not intermixed with test programs): 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.257987][T10263] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 233.270330][T10263] block nbd6: Attempted send on invalid socket [ 233.276604][T10263] I/O error, dev nbd6, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.286395][ T9] usb usb1-port1: unable to enumerate USB device [ 233.295020][T10263] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 233.305887][T10263] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 233.314828][T10263] UDF-fs: Scanning with blocksize 2048 failed [ 233.321935][T10263] block nbd6: Attempted send on invalid socket [ 233.328223][T10263] I/O error, dev nbd6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 233.342195][T10263] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 233.354343][T10263] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 233.365227][T10263] UDF-fs: warning (device nbd6): udf_load_vrs: No anchor found [ 233.373990][T10263] UDF-fs: Scanning with blocksize 4096 failed [ 233.383600][T10263] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 233.688673][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 233.838652][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 233.845569][ T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 233.863128][T10268] /dev/rnullb0: Can't open blockdev [ 233.868743][ T9] usb 7-1: config 0 has no interface number 0 [ 233.877699][ T9] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 233.888413][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.908589][ T43] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 233.933660][ T9] usb 7-1: Product: syz [ 233.937870][ T9] usb 7-1: Manufacturer: syz [ 233.943386][ T9] usb 7-1: SerialNumber: syz [ 233.950960][ T9] usb 7-1: config 0 descriptor?? [ 233.958043][ T9] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 234.059889][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.070219][ T43] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 234.080175][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.089543][ T43] usb 5-1: config 0 descriptor?? [ 234.096777][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 234.497857][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 234.505236][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 234.513669][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 234.522525][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 234.530230][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 234.537200][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 234.544502][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 234.552781][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 234.560605][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 234.568163][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 234.575369][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 234.590414][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 234.592483][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.606959][ T43] pwc: recv_control_msg error -32 req 02 val 2900 [ 234.614545][ T43] pwc: recv_control_msg error -32 req 02 val 2800 [ 234.621424][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.630431][ T43] pwc: recv_control_msg error -32 req 04 val 1100 [ 234.637414][ T43] pwc: recv_control_msg error -32 req 04 val 1200 [ 234.647975][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.657142][ T43] pwc: Registered as video103. [ 234.664417][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 234.681678][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.717426][T10266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.727432][T10266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.764296][ T9] gspca_spca1528: reg_w err -71 [ 234.791193][ T9] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 234.817462][ T9] usb 7-1: USB disconnect, device number 27 [ 234.899206][T10287] syzkaller1: entered promiscuous mode [ 234.904795][T10287] syzkaller1: entered allmulticast mode [ 235.225163][ T9] usb 5-1: USB disconnect, device number 40 [ 235.364387][T10295] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1128'. [ 235.474510][T10295] hsr_slave_0: left promiscuous mode [ 235.495628][T10298] /dev/rnullb0: Can't open blockdev [ 235.530087][T10299] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 235.548253][T10295] hsr_slave_1: left promiscuous mode [ 235.560528][T10299] /dev/rnullb0: Can't open blockdev [ 235.762845][T10311] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1131'. [ 236.109012][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 236.308602][ T9] usb 8-1: device descriptor read/64, error -71 [ 236.410958][T10318] /dev/rnullb0: Can't open blockdev [ 236.531899][T10327] /dev/rnullb0: Can't open blockdev [ 236.558847][ T9] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 236.688698][ T9] usb 8-1: device descriptor read/64, error -71 [ 236.768625][ T5867] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 236.798818][ T9] usb usb8-port1: attempt power cycle [ 236.819047][ T56] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 236.933655][T10339] /dev/rnullb0: Can't open blockdev [ 236.938966][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 236.946126][ T5867] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 236.954738][ T5867] usb 5-1: config 0 has no interface number 0 [ 236.958637][ T56] usb 7-1: device descriptor read/64, error -71 [ 236.963929][ T5867] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 236.981404][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.990582][ T5867] usb 5-1: Product: syz [ 236.991200][T10341] /dev/rnullb0: Can't open blockdev [ 236.994755][ T5867] usb 5-1: Manufacturer: syz [ 237.004669][ T5867] usb 5-1: SerialNumber: syz [ 237.012173][ T5867] usb 5-1: config 0 descriptor?? [ 237.020593][ T5867] smsc95xx v2.0.0 [ 237.101130][T10344] overlayfs: missing 'lowerdir' [ 237.158745][ T9] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 237.179243][ T9] usb 8-1: device descriptor read/8, error -71 [ 237.208649][ T56] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 237.338590][ T56] usb 7-1: device descriptor read/64, error -71 [ 237.428743][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 237.439798][ T9] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 237.447708][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 237.459215][ T56] usb usb7-port1: attempt power cycle [ 237.459216][ T9] usb 8-1: device descriptor read/8, error -71 [ 237.568973][ T9] usb usb8-port1: unable to enumerate USB device [ 237.595762][T10346] /dev/rnullb0: Can't open blockdev [ 237.808689][ T56] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 237.837723][ T56] usb 7-1: device descriptor read/8, error -71 [ 238.078915][ T56] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 238.109083][ T56] usb 7-1: device descriptor read/8, error -71 [ 238.218834][ T56] usb usb7-port1: unable to enumerate USB device [ 238.716186][T10356] binder: Bad value for 'stats' [ 238.728880][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 238.889494][ T9] usb 1-1: too many configurations: 24, using maximum allowed: 8 [ 238.898385][ T9] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 238.910368][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.920068][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.934863][ T9] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 238.945967][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.947741][ T56] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 238.955199][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.977223][ T9] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 238.988644][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 238.998218][ T56] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 238.998450][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.061137][ T9] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 239.075803][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.086849][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.102480][ T9] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 239.113151][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.123721][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.138192][ T9] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 239.149824][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.159183][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.173397][ T9] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 239.184945][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.194006][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.207766][ T9] usb 1-1: config 1 has an invalid descriptor of length 245, skipping remainder of the config [ 239.218373][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 239.227534][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.242489][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 239.251828][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.260215][ T9] usb 1-1: Product: syz [ 239.264466][ T9] usb 1-1: Manufacturer: syz [ 239.269112][ T9] usb 1-1: SerialNumber: syz [ 239.277859][ T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 239.284750][ T9] cdc_ncm 1-1:1.0: bind() failure [ 239.479400][T10326] /dev/rnullb0: Can't open blockdev [ 239.486442][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 239.497152][T10350] /dev/rnullb0: Can't open blockdev [ 239.497881][ T56] usb 1-1: USB disconnect, device number 73 [ 239.502548][ T5872] Bluetooth: hci0: unexpected event for opcode 0x0c2d [ 239.515641][ T5872] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 239.524152][ T5867] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 239.535129][ T5867] usb 5-1: USB disconnect, device number 41 [ 239.687583][T10369] syzkaller0: entered allmulticast mode [ 239.833033][T10378] /dev/rnullb0: Can't open blockdev [ 240.048571][ T7201] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 240.219547][ T7201] usb 8-1: Using ep0 maxpacket: 8 [ 240.226032][ T7201] usb 8-1: config 162 has an invalid interface number: 246 but max is 1 [ 240.237379][ T7201] usb 8-1: config 162 has an invalid interface number: 245 but max is 1 [ 240.246358][ T7201] usb 8-1: config 162 has no interface number 0 [ 240.257653][ T7201] usb 8-1: config 162 has no interface number 1 [ 240.264177][ T7201] usb 8-1: config 162 interface 246 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 240.277687][ T7201] usb 8-1: config 162 interface 245 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 240.288886][ T7201] usb 8-1: config 162 interface 245 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 240.314673][ T7201] usb 8-1: config 162 interface 245 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 240.326956][ T7201] usb 8-1: config 162 interface 245 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 240.337962][ T7201] usb 8-1: config 162 interface 245 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 240.353469][ T7201] usb 8-1: config 162 interface 246 has no altsetting 0 [ 240.358964][ T5928] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 240.360912][ T7201] usb 8-1: config 162 interface 245 has no altsetting 0 [ 240.416050][ T7201] usb 8-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=5f.2c [ 240.426723][ T7201] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.493055][ T7201] usb 8-1: Product: syz [ 240.500234][ T5928] usb 5-1: device descriptor read/64, error -71 [ 240.529586][ T7201] usb 8-1: Manufacturer: syz [ 240.534217][ T7201] usb 8-1: SerialNumber: syz [ 240.758548][ T5928] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 240.898598][ T5928] usb 5-1: device descriptor read/64, error -71 [ 240.974438][T10376] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 240.981657][T10376] /dev/rnullb0: Can't open blockdev [ 240.994754][ T7201] Bluetooth: failed to set interface 0, alt 0 -22 [ 241.004142][ T7201] btusb 8-1:162.245: probe with driver btusb failed with error -22 [ 241.021242][ T7201] usb 8-1: USB disconnect, device number 25 [ 241.037963][ T5928] usb usb5-port1: attempt power cycle [ 241.223213][T10415] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1168'. [ 241.337352][T10424] /dev/rnullb0: Can't open blockdev [ 241.372570][T10426] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 241.379461][ T5928] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 241.387763][T10426] /dev/rnullb0: Can't open blockdev [ 241.405619][ T5928] usb 5-1: device descriptor read/8, error -71 [ 241.547614][T10428] lo: entered promiscuous mode [ 241.556892][T10427] lo: left promiscuous mode [ 241.648829][ T5928] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 241.669459][ T5928] usb 5-1: device descriptor read/8, error -71 [ 241.781641][ T5928] usb usb5-port1: unable to enumerate USB device [ 241.926154][ T5867] IPVS: starting estimator thread 0... [ 241.936537][T10440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 242.030946][T10442] IPVS: using max 55 ests per chain, 132000 per kthread [ 242.256098][T10449] ieee802154 phy1 wpan1: encryption failed: -22 [ 242.302069][T10452] /dev/rnullb0: Can't open blockdev [ 242.362352][T10456] netlink: 'syz.7.1181': attribute type 6 has an invalid length. [ 242.459677][T10457] fuse: Unknown parameter 'smackfsdef' [ 242.488018][T10457] /dev/rnullb0: Can't open blockdev [ 242.786051][T10465] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 242.806361][T10465] /dev/rnullb0: Can't open blockdev [ 242.966886][T10472] /dev/rnullb0: Can't open blockdev [ 243.018265][T10474] syzkaller1: entered promiscuous mode [ 243.025091][T10474] syzkaller1: entered allmulticast mode [ 243.045768][T10474] vivid-000: disconnect [ 243.057995][T10473] vivid-000: reconnect [ 243.212106][T10480] /dev/rnullb0: Can't open blockdev [ 243.369842][T10482] /dev/rnullb0: Can't open blockdev [ 243.412305][T10484] netlink: 'syz.6.1191': attribute type 10 has an invalid length. [ 243.426202][T10484] veth0_vlan: left promiscuous mode [ 243.434787][T10484] veth0_vlan: entered promiscuous mode [ 243.444747][T10484] team0: Device veth0_vlan failed to register rx_handler [ 243.477926][T10484] /dev/rnullb0: Can't open blockdev [ 243.538693][ T5872] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 243.547061][ T5872] Bluetooth: hci0: Injecting HCI hardware error event [ 243.554077][ T5862] Bluetooth: hci0: hardware error 0x00 [ 243.828618][ T5867] usb 8-1: new full-speed USB device number 26 using dummy_hcd [ 243.978544][ T5867] usb 8-1: device descriptor read/64, error -71 [ 244.055937][T10507] input: syz1 as /devices/virtual/input/input26 [ 244.061473][T10506] /dev/rnullb0: Can't open blockdev [ 244.174273][T10511] binder: 10510:10511 ioctl 4602 200000000080 returned -22 [ 244.248603][ T5867] usb 8-1: new full-speed USB device number 27 using dummy_hcd [ 244.298611][ T7201] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 244.418601][ T5867] usb 8-1: device descriptor read/64, error -71 [ 244.428570][ T7201] usb 1-1: device descriptor read/64, error -71 [ 244.528845][ T5867] usb usb8-port1: attempt power cycle [ 244.668558][ T7201] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 244.798638][ T7201] usb 1-1: device descriptor read/64, error -71 [ 244.868571][ T5867] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 244.889033][ T5867] usb 8-1: device descriptor read/8, error -71 [ 244.909165][ T7201] usb usb1-port1: attempt power cycle [ 244.952775][T10520] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1203'. [ 244.965339][T10520] /dev/rnullb0: Can't open blockdev [ 244.995807][T10523] /dev/rnullb0: Can't open blockdev [ 245.089310][T10526] tipc: Can't bind to reserved service type 0 [ 245.102813][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1205'. [ 245.115196][T10526] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1205'. [ 245.140156][ T5867] usb 8-1: new full-speed USB device number 29 using dummy_hcd [ 245.160591][ T5867] usb 8-1: device descriptor read/8, error -71 [ 245.268631][ T7201] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 245.277513][ T5867] usb usb8-port1: unable to enumerate USB device [ 245.300291][ T7201] usb 1-1: device descriptor read/8, error -71 [ 245.348598][ T9] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 245.509836][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.522287][ T9] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a [ 245.531857][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.540886][ T7201] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 245.548595][ T9] usb 5-1: Product: syz [ 245.552786][ T9] usb 5-1: Manufacturer: syz [ 245.557360][ T9] usb 5-1: SerialNumber: syz [ 245.564445][ T9] usb 5-1: config 0 descriptor?? [ 245.570583][ T9] kvaser_usb 5-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 245.579069][ T7201] usb 1-1: device descriptor read/8, error -71 [ 245.689226][ T7201] usb usb1-port1: unable to enumerate USB device [ 245.698570][ T5862] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 245.772213][T10529] /dev/rnullb0: Can't open blockdev [ 245.778438][ T7201] usb 5-1: USB disconnect, device number 46 [ 246.323631][T10533] /dev/rnullb0: Can't open blockdev [ 246.623132][ T30] audit: type=1326 audit(1756692659.882:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.672814][ T30] audit: type=1326 audit(1756692659.882:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.723476][ T30] audit: type=1326 audit(1756692659.882:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f51d398d550 code=0x7ffc0000 [ 246.747382][ T30] audit: type=1326 audit(1756692659.882:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.772404][ T30] audit: type=1326 audit(1756692659.882:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.794970][ T30] audit: type=1326 audit(1756692659.882:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.833423][ T30] audit: type=1326 audit(1756692659.882:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="syz.7.1211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.889560][ T30] audit: type=1326 audit(1756692659.882:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.914198][ T30] audit: type=1326 audit(1756692659.882:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.938264][ T30] audit: type=1326 audit(1756692659.882:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10538 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f51d398ebe9 code=0x7ffc0000 [ 246.966633][T10544] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 246.978733][T10544] /dev/rnullb0: Can't open blockdev [ 247.447823][T10558] /dev/rnullb0: Can't open blockdev [ 247.512356][T10562] /dev/rnullb0: Can't open blockdev [ 247.710903][T10571] /dev/rnullb0: Can't open blockdev [ 247.796711][T10573] batadv_slave_1: entered promiscuous mode [ 247.811153][T10573] /dev/rnullb0: Can't open blockdev [ 247.817507][T10572] batadv_slave_1: left promiscuous mode [ 248.108800][ T9] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 248.302890][ T9] usb 8-1: not running at top speed; connect to a high speed hub [ 248.314122][ T9] usb 8-1: config 9 has an invalid interface number: 133 but max is 0 [ 248.323675][ T9] usb 8-1: config 9 has no interface number 0 [ 248.330089][ T3096] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 248.339454][ T9] usb 8-1: config 9 interface 133 has no altsetting 0 [ 248.350366][ T9] usb 8-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b [ 248.361142][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.369808][ T9] usb 8-1: Product: syz [ 248.374252][ T9] usb 8-1: Manufacturer: syz [ 248.380790][ T9] usb 8-1: SerialNumber: syz [ 248.499053][ T3096] usb 7-1: Using ep0 maxpacket: 32 [ 248.510766][ T3096] usb 7-1: config 0 has an invalid interface number: 156 but max is 0 [ 248.520638][ T3096] usb 7-1: config 0 has no interface number 0 [ 248.526926][ T3096] usb 7-1: config 0 interface 156 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 248.538715][ T3096] usb 7-1: config 0 interface 156 has no altsetting 0 [ 248.547767][ T3096] usb 7-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.9d [ 248.560949][ T3096] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.570153][ T3096] usb 7-1: Product: syz [ 248.574604][ T3096] usb 7-1: Manufacturer: syz [ 248.580768][ T3096] usb 7-1: SerialNumber: syz [ 248.588101][ T3096] usb 7-1: config 0 descriptor?? [ 248.604693][ T9] pegasus 8-1:9.133: probe with driver pegasus failed with error -71 [ 248.620501][ T9] usb 8-1: USB disconnect, device number 30 [ 248.934496][ T3096] em28xx 7-1:0.156: New device syz syz @ 480 Mbps (2040:6500, interface 156, class 156) [ 248.947674][ T3096] em28xx 7-1:0.156: Video interface 156 found: isoc [ 249.018979][ T3096] em28xx 7-1:0.156: unknown em28xx chip ID (0) [ 249.067658][T10604] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1234'. [ 249.118442][ T3096] em28xx 7-1:0.156: reading from i2c device at 0xa0 failed (error=-5) [ 249.135108][ T3096] em28xx 7-1:0.156: board has no eeprom [ 249.160874][T10609] fuse: Bad value for 'rootmode' [ 249.198554][ T3096] em28xx 7-1:0.156: Identified as Hauppauge WinTV HVR 900 (card=10) [ 249.214588][ T3096] em28xx 7-1:0.156: analog set to isoc mode. [ 249.226302][ T9] em28xx 7-1:0.156: Registering V4L2 extension [ 249.234965][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1237'. [ 249.238439][ T3096] usb 7-1: USB disconnect, device number 32 [ 249.269097][ T3096] em28xx 7-1:0.156: Disconnecting em28xx [ 249.367768][ T9] em28xx 7-1:0.156: Config register raw data: 0xffffffed [ 249.382599][ T9] em28xx 7-1:0.156: AC97 chip type couldn't be determined [ 249.390578][ T9] em28xx 7-1:0.156: No AC97 audio processor [ 249.400159][ T9] em28xx 7-1:0.156: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 249.409818][ T9] em28xx 7-1:0.156: Binding DVB extension [ 249.428178][ T9] em28xx 7-1:0.156: no endpoint for DVB mode and transfer type 0 [ 249.436570][ T9] em28xx 7-1:0.156: failed to pre-allocate USB transfer buffers for DVB. [ 249.445818][ T9] em28xx 7-1:0.156: Registering input extension [ 249.452440][ T3096] em28xx 7-1:0.156: Closing input extension [ 249.462520][ T3096] em28xx 7-1:0.156: Freeing device [ 249.585108][T10633] /dev/rnullb0: Can't open blockdev [ 249.707422][T10638] /dev/rnullb0: Can't open blockdev [ 249.728743][ T9] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 249.918630][T10656] i2c i2c-0: Invalid block write size 34 [ 249.919456][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 249.941385][ T9] usb 1-1: config 2 has an invalid interface number: 227 but max is 0 [ 249.958571][ T9] usb 1-1: config 2 has no interface number 0 [ 249.964859][ T9] usb 1-1: config 2 interface 227 has no altsetting 0 [ 249.990327][ T9] usb 1-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice=2c.d4 [ 250.014959][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.023899][ T9] usb 1-1: Product: syz [ 250.040873][ T9] usb 1-1: Manufacturer: syz [ 250.054959][ T9] usb 1-1: SerialNumber: syz [ 250.076706][T10661] 9pnet_virtio: no channels available for device /dev/nullb0 [ 250.272108][T10629] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 250.278662][T10629] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 250.297722][T10629] vhci_hcd vhci_hcd.0: Device attached [ 250.316538][T10678] vhci_hcd: connection closed [ 250.316923][ T60] vhci_hcd: stop threads [ 250.328245][ T60] vhci_hcd: release socket [ 250.334073][ T60] vhci_hcd: disconnect device [ 250.340009][ T9] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 250.346903][ T9] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 250.372177][T10666] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1253'. [ 250.384054][T10666] openvswitch: netlink: Message has 512 unknown bytes. [ 250.388080][ T9] pac7311 1-1:2.227: probe with driver pac7311 failed with error -71 [ 250.420679][ T9] usb 1-1: USB disconnect, device number 78 [ 250.455043][T10681] /dev/rnullb0: Can't open blockdev [ 250.515915][T10687] /dev/rnullb0: Can't open blockdev [ 251.456123][T10712] rdma_rxe: rxe_newlink: failed to add wlan1 [ 251.480123][T10713] rdma_rxe: rxe_newlink: failed to add wlan1 [ 251.540935][T10712] /dev/rnullb0: Can't open blockdev [ 251.758659][ T5928] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 251.842456][T10727] /dev/rnullb0: Can't open blockdev [ 251.919907][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.934632][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.946179][ T5928] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 252.012754][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.024246][ T5928] usb 5-1: config 0 descriptor?? [ 252.446809][T10717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.455536][T10717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.594604][ T5928] usbhid 5-1:0.0: can't add hid device: -71 [ 252.604953][ T5928] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 252.616225][ T5928] usb 5-1: USB disconnect, device number 47 [ 252.719655][T10762] /dev/rnullb0: Can't open blockdev [ 252.724971][T10758] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1278'. [ 252.746791][T10754] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.764673][T10754] /dev/rnullb0: Can't open blockdev [ 252.866875][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 252.912622][T10773] /dev/rnullb0: Can't open blockdev [ 252.922493][T10772] /dev/rnullb0: Can't open blockdev [ 252.979514][ T5862] Bluetooth: hci4: adv larger than maximum supported [ 253.153961][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 253.153980][ T30] audit: type=1326 audit(2000000003.989:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10786 comm="syz.7.1287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f51d398ebe9 code=0x0 [ 253.260728][ T3096] usb 1-1: new full-speed USB device number 79 using dummy_hcd [ 253.431413][ T3096] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 253.450454][ T3096] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 253.463704][ T3096] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.472912][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 253.481726][ T3096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.618638][ T9] usb 5-1: device descriptor read/64, error -71 [ 253.697263][ T3096] usb 1-1: usb_control_msg returned -32 [ 253.705182][ T3096] usbtmc 1-1:16.0: can't read capabilities [ 253.851694][T10795] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 253.860015][T10795] /dev/rnullb0: Can't open blockdev [ 253.888732][ T9] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 254.038858][ T9] usb 5-1: device descriptor read/64, error -71 [ 254.153530][ T9] usb usb5-port1: attempt power cycle [ 254.254817][ T56] usb 1-1: USB disconnect, device number 79 [ 254.278612][ T3096] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 254.465868][ T3096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.480954][ T3096] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.494280][ T3096] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 254.507889][ T3096] usb 8-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 254.518614][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 254.526547][ T3096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.538969][ T3096] usb 8-1: config 0 descriptor?? [ 254.550205][ T9] usb 5-1: device descriptor read/8, error -71 [ 254.752297][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.762974][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.771433][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.779872][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.786867][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.794356][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.804042][ T9] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 254.821964][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.835805][T10801] tipc: Enabled bearer , priority 10 [ 254.840434][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.850852][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.857991][ T9] usb 5-1: device descriptor read/8, error -71 [ 254.866960][ T3096] elecom 0003:056E:010C.0014: unknown main item tag 0x0 [ 254.878723][ T3096] elecom 0003:056E:010C.0014: hidraw0: USB HID v0.00 Device [HID 056e:010c] on usb-dummy_hcd.7-1/input0 [ 254.968932][ T9] usb usb5-port1: unable to enumerate USB device [ 254.999813][ T9] usb 8-1: USB disconnect, device number 31 [ 255.288591][ T56] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 255.348619][ T3096] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 255.441427][ T56] usb 7-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 255.450701][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.459321][ T56] usb 7-1: Product: syz [ 255.463606][ T56] usb 7-1: Manufacturer: syz [ 255.468542][ T56] usb 7-1: SerialNumber: syz [ 255.474698][ T56] usb 7-1: config 0 descriptor?? [ 255.508697][ T3096] usb 1-1: Using ep0 maxpacket: 8 [ 255.515171][ T3096] usb 1-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 255.526328][ T3096] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.537260][ T3096] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 255.547368][ T3096] usb 1-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 255.557075][ T3096] usb 1-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 255.570643][ T3096] usb 1-1: config 1 interface 0 has no altsetting 0 [ 255.578255][ T3096] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 255.587342][ T3096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 255.595377][ T3096] usb 1-1: SerialNumber: syz [ 255.603048][T10821] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 255.610788][T10821] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 255.780837][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.822604][T10821] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1295'. [ 255.832835][T10821] /dev/rnullb0: Can't open blockdev [ 255.840723][ T3096] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 255.850472][ T3096] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 255.858420][ T3096] usb 1-1: USB disconnect, device number 80 [ 256.458717][ T56] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 256.598695][ T56] usb 5-1: device descriptor read/64, error -71 [ 256.848599][ T56] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 256.870503][ T5907] usb 7-1: USB disconnect, device number 33 [ 256.978868][ T56] usb 5-1: device descriptor read/64, error -71 [ 257.068644][ T3096] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 257.088750][ T56] usb usb5-port1: attempt power cycle [ 257.208640][ T5928] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 257.220172][ T3096] usb 1-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 257.231836][ T3096] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 162, changing to 11 [ 257.243176][ T3096] usb 1-1: config 36 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49264, setting to 1024 [ 257.255725][ T3096] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 257.264955][ T3096] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 257.273311][ T3096] usb 1-1: Manufacturer: syz [ 257.278080][ T3096] usb 1-1: SerialNumber: syz [ 257.338611][ T5928] usb 8-1: device descriptor read/64, error -71 [ 257.413351][T10839] /dev/rnullb0: Can't open blockdev [ 257.428684][ T56] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 257.452096][ T56] usb 5-1: device descriptor read/8, error -71 [ 257.498079][ T3096] usbhid 1-1:36.0: couldn't find an input interrupt endpoint [ 257.498871][T10846] /dev/rnullb0: Can't open blockdev [ 257.514914][ T3096] usb 1-1: USB disconnect, device number 81 [ 257.588735][ T5928] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 257.698709][ T56] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 257.719160][ T56] usb 5-1: device descriptor read/8, error -71 [ 257.728792][ T5928] usb 8-1: device descriptor read/64, error -71 [ 257.788663][ T5867] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 257.839256][ T5928] usb usb8-port1: attempt power cycle [ 257.844756][ T56] usb usb5-port1: unable to enumerate USB device [ 257.939138][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 257.945418][ T5867] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 257.956016][ T5867] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 257.965106][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.973304][ T5867] usb 7-1: Product: syz [ 257.977530][ T5867] usb 7-1: Manufacturer: syz [ 257.982240][ T5867] usb 7-1: SerialNumber: syz [ 257.988031][ T5867] usb 7-1: config 0 descriptor?? [ 257.995103][ T5867] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 258.003424][ T5867] usb 7-1: Detected FT232R [ 258.188576][ T5928] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 258.195395][ T5867] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 258.209418][ T5928] usb 8-1: device descriptor read/8, error -71 [ 258.405158][T10848] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 258.411689][T10848] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 258.420153][T10848] vhci_hcd vhci_hcd.0: Device attached [ 258.427599][T10848] vhci_hcd vhci_hcd.0: port 0 already used [ 258.434948][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.443859][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.451861][ T5928] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 258.454205][T10848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.468009][ T5867] ftdi_sio 7-1:0.0: GPIO initialisation failed: -32 [ 258.468332][T10848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.476657][ T5867] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 258.495413][ T5928] usb 8-1: device descriptor read/8, error -71 [ 258.506477][T10852] vhci_hcd: connection closed [ 258.506483][ T5867] usb 7-1: USB disconnect, device number 34 [ 258.511632][ T5867] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 258.522301][ T12] vhci_hcd: stop threads [ 258.533210][ T12] vhci_hcd: release socket [ 258.543283][ T12] vhci_hcd: disconnect device [ 258.556637][ T5867] ftdi_sio 7-1:0.0: device disconnected [ 258.628826][ T5928] usb usb8-port1: unable to enumerate USB device [ 258.877450][T10864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1310'. [ 259.008687][ T5928] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 259.163369][T10871] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 259.170496][T10871] /dev/rnullb0: Can't open blockdev [ 259.170639][ T5928] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 259.185881][ T5928] usb 7-1: config 0 interface 0 has no altsetting 0 [ 259.195295][ T5928] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 259.205125][ T5928] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 259.214644][ T5928] usb 7-1: Product: syz [ 259.219177][T10873] /dev/rnullb0: Can't open blockdev [ 259.220202][ T5928] usb 7-1: Manufacturer: syz [ 259.229382][ T5928] usb 7-1: SerialNumber: syz [ 259.238209][ T5928] usb 7-1: config 0 descriptor?? [ 259.249709][ T5928] usb 7-1: selecting invalid altsetting 0 [ 259.460095][T10862] syzkaller1: entered promiscuous mode [ 259.465610][T10862] syzkaller1: entered allmulticast mode [ 260.063532][ T5907] usb 7-1: USB disconnect, device number 35 [ 260.524429][T10898] /dev/rnullb0: Can't open blockdev [ 260.537425][ T5867] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 260.594433][T10904] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1321'. [ 260.608395][T10903] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1321'. [ 260.623243][T10906] /dev/rnullb0: Can't open blockdev [ 260.699837][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 260.708609][ T5867] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 260.721477][ T5867] usb 5-1: config 0 has no interface number 0 [ 260.735619][ T5867] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 260.761605][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.793969][ T5867] usb 5-1: Product: syz [ 260.808300][ T5867] usb 5-1: Manufacturer: syz [ 260.822189][ T5867] usb 5-1: SerialNumber: syz [ 260.842978][ T5867] usb 5-1: config 0 descriptor?? [ 260.852970][ T5867] smsc95xx v2.0.0 [ 260.908605][ T3096] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 261.068540][ T3096] usb 1-1: Using ep0 maxpacket: 8 [ 261.073715][ T9] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 261.085091][ T3096] usb 1-1: unable to get BOS descriptor or descriptor too short [ 261.096557][ T3096] usb 1-1: config 254 has an invalid interface number: 3 but max is 0 [ 261.106447][ T3096] usb 1-1: config 254 has no interface number 0 [ 261.113089][ T3096] usb 1-1: config 254 interface 3 has no altsetting 0 [ 261.123797][ T3096] usb 1-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=5e.fa [ 261.133469][ T3096] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.143021][ T3096] usb 1-1: Product: syz [ 261.147428][ T3096] usb 1-1: Manufacturer: syz [ 261.154198][ T3096] usb 1-1: SerialNumber: syz [ 261.230422][ T9] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 261.240301][ T9] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 261.251239][ T9] usb 7-1: config 220 has no interface number 2 [ 261.261554][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 261.273701][ T9] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 261.291891][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.302968][ T9] usb 7-1: config 220 interface 0 has no altsetting 0 [ 261.311277][ T9] usb 7-1: config 220 interface 76 has no altsetting 0 [ 261.319395][ T9] usb 7-1: config 220 interface 1 has no altsetting 0 [ 261.330024][ T9] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 261.339864][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.348044][ T9] usb 7-1: Product: syz [ 261.353919][ T9] usb 7-1: Manufacturer: syz [ 261.359315][ T9] usb 7-1: SerialNumber: syz [ 261.544508][T10915] /dev/rnullb0: Can't open blockdev [ 261.583544][ T3096] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282 [ 261.591513][T10913] netlink: 'syz.6.1326': attribute type 11 has an invalid length. [ 261.592075][ T3096] gspca_sn9c20x: Write register 1000 failed -71 [ 261.608723][ T3096] gspca_sn9c20x: Device initialization failed [ 261.615477][ T3096] gspca_sn9c20x 1-1:254.3: probe with driver gspca_sn9c20x failed with error -71 [ 261.626982][ T9] usb 7-1: selecting invalid altsetting 0 [ 261.634643][ T3096] usb 1-1: USB disconnect, device number 82 [ 261.645410][ T9] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 261.655707][ T9] usb 7-1: No valid video chain found. [ 261.683005][ T9] usb 7-1: selecting invalid altsetting 0 [ 261.691840][ T9] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 261.703833][ T9] usb 7-1: USB disconnect, device number 36 [ 261.908563][ T5907] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 262.058673][ T5907] usb 8-1: Using ep0 maxpacket: 16 [ 262.065983][ T5907] usb 8-1: unable to get BOS descriptor or descriptor too short [ 262.075642][ T5907] usb 8-1: config 174 has an invalid interface number: 8 but max is 0 [ 262.084018][ T5907] usb 8-1: config 174 has no interface number 0 [ 262.090517][ T5907] usb 8-1: config 174 interface 8 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 262.101682][ T5907] usb 8-1: config 174 interface 8 has no altsetting 0 [ 262.132437][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 262.153842][ T5867] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 262.154222][ T5907] usb 8-1: New USB device found, idVendor=0bfd, idProduct=0016, bcdDevice=d2.70 [ 262.186958][ T5867] usb 5-1: USB disconnect, device number 56 [ 262.187026][ T5907] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.207710][ T5907] usb 8-1: Product: syz [ 262.211999][ T5907] usb 8-1: Manufacturer: syz [ 262.217681][ T5907] usb 8-1: SerialNumber: syz [ 262.435360][ T5907] kvaser_usb 8-1:174.8: error -ENODEV: Cannot get usb endpoint(s) [ 262.454308][ T5907] usb 8-1: USB disconnect, device number 36 [ 262.658590][ T5862] Bluetooth: hci2: command tx timeout [ 262.724411][T10947] /dev/rnullb0: Can't open blockdev [ 262.803043][T10949] capability: warning: `syz.4.1336' uses 32-bit capabilities (legacy support in use) [ 262.910307][T10955] /dev/rnullb0: Can't open blockdev [ 263.147182][T10957] /dev/rnullb0: Can't open blockdev [ 263.363241][T10968] 9p: Bad value for 'rfdno' [ 263.540476][ T3096] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 263.591358][T10974] netlink: 2384 bytes leftover after parsing attributes in process `syz.4.1344'. [ 263.698797][ T3096] usb 7-1: Using ep0 maxpacket: 8 [ 263.713309][ T3096] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 263.736366][ T3096] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.748719][ T3096] usb 7-1: Product: syz [ 263.754067][ T3096] usb 7-1: Manufacturer: syz [ 263.760200][ T3096] usb 7-1: SerialNumber: syz [ 263.769202][ T3096] usb 7-1: config 0 descriptor?? [ 263.776606][ T3096] gspca_main: se401-2.14.0 probing 047d:5003 [ 263.792400][T10977] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1345'. [ 264.177062][ T3096] gspca_se401: ExtraFeatures: 48 [ 264.193857][ T3096] gspca_se401: Frame size: 8192x0 bayer [ 264.846431][ T3096] input: se401 as /devices/platform/dummy_hcd.6/usb7/7-1/input/input28 [ 264.893258][ T3096] usb 7-1: USB disconnect, device number 37 [ 265.002330][T10988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.011948][T10988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.238649][ T5867] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 265.378650][ T5867] usb 1-1: device descriptor read/64, error -71 [ 265.648764][ T5867] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 265.788619][ T5867] usb 1-1: device descriptor read/64, error -71 [ 265.899132][ T5867] usb usb1-port1: attempt power cycle [ 266.261660][ T5867] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 266.314337][ T5867] usb 1-1: device descriptor read/8, error -71 [ 266.338613][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 266.488949][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 266.496198][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 266.506614][ T9] usb 5-1: config 174 has an invalid interface number: 8 but max is 0 [ 266.516735][ T9] usb 5-1: config 174 has no interface number 0 [ 266.526246][ T9] usb 5-1: config 174 interface 8 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 266.538796][ T9] usb 5-1: config 174 interface 8 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 [ 266.549398][ T9] usb 5-1: config 174 interface 8 has no altsetting 0 [ 266.559089][ T9] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0016, bcdDevice=d2.70 [ 266.568750][ T5867] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 266.576916][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.586043][ T9] usb 5-1: Product: syz [ 266.590805][ T9] usb 5-1: Manufacturer: syz [ 266.595480][ T9] usb 5-1: SerialNumber: syz [ 266.600946][ T5867] usb 1-1: device descriptor read/8, error -71 [ 266.709003][ T5867] usb usb1-port1: unable to enumerate USB device [ 266.954342][ T9] kvaser_usb 5-1:174.8: error -ENODEV: Cannot get usb endpoint(s) [ 266.969512][ T9] usb 5-1: USB disconnect, device number 57 [ 267.031339][T11011] nbd_handle_cmd: 2 callbacks suppressed [ 267.031355][T11011] block nbd4: Attempted send on invalid socket [ 267.044532][T11011] blk_print_req_error: 2 callbacks suppressed [ 267.044548][T11011] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 267.065792][T11014] netlink: 'syz.7.1357': attribute type 1 has an invalid length. [ 267.072726][T11011] hpfs: hpfs_map_sector(): read error [ 267.073850][T11014] netlink: 'syz.7.1357': attribute type 2 has an invalid length. [ 267.093396][T11014] /dev/rnullb0: Can't open blockdev [ 267.445538][T11031] fuse: Unknown parameter 'B*"rootmode' [ 267.504422][T11033] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 267.534305][T11033] CIFS: Unable to determine destination address [ 267.590227][T11035] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1364'. [ 267.679176][T11037] /dev/rnullb0: Can't open blockdev [ 269.747913][T11064] /dev/rnullb0: Can't open blockdev [ 269.822158][T11017] syz.4.1359 (11017): drop_caches: 1 [ 269.870431][T11072] ufs: You didn't specify the type of your ufs filesystem [ 269.870431][T11072] [ 269.870431][T11072] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 269.870431][T11072] [ 269.870431][T11072] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 269.911036][T11072] ufs: ufstype=old is supported read-only [ 269.917198][T11072] ufs: ufs_fill_super(): bad magic number [ 269.946834][T11074] /dev/rnullb0: Can't open blockdev [ 269.989049][ T5867] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 270.017311][T11080] /dev/rnullb0: Can't open blockdev [ 270.023174][T11081] /dev/rnullb0: Can't open blockdev [ 270.148540][ T5867] usb 7-1: Using ep0 maxpacket: 16 [ 270.154887][ T5867] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.165418][ T5867] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.176252][ T5867] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.186896][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.195049][ T5867] usb 7-1: Product: syz [ 270.199319][ T5867] usb 7-1: Manufacturer: syz [ 270.204748][ T5867] usb 7-1: SerialNumber: syz [ 270.265121][T11102] /dev/rnullb0: Can't open blockdev [ 270.379846][T11110] tls_set_device_offload: netdev not found [ 270.396179][T11112] /dev/rnullb0: Can't open blockdev [ 270.710418][T11123] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 270.996855][T11126] /dev/rnullb0: Can't open blockdev [ 271.278737][ T7201] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 271.439878][ T7201] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 271.462966][ T7201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 271.479669][ T7201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 271.508739][ T7201] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.550615][ T7201] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.580145][ T7201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.612414][ T7201] usb 5-1: config 0 descriptor?? [ 271.625477][T11130] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 271.792863][T11144] /dev/rnullb0: Can't open blockdev [ 272.046525][ T7201] hid_parser_main: 28 callbacks suppressed [ 272.046547][ T7201] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 272.105423][ T7201] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 272.130455][ T7201] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 272.157174][ T7201] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 272.174242][ T7201] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 272.215354][ T7201] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 272.340767][ T56] usb 5-1: USB disconnect, device number 58 [ 272.434527][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1401'. [ 272.526057][T11149] fido_id[11149]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 272.599729][ T5867] usb 7-1: invalid UAC_HEADER (v1) [ 272.607755][T11163] /dev/rnullb0: Can't open blockdev [ 272.654796][ T5867] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 272.687589][ T6286] udevd[6286]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 272.704857][ T5867] usb 7-1: USB disconnect, device number 38 [ 272.855697][T11185] /dev/rnullb0: Can't open blockdev [ 272.901676][T11187] overlayfs: missing 'lowerdir' [ 273.145872][ T3096] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 273.189849][ T3096] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 273.433529][T11203] /dev/rnullb0: Can't open blockdev [ 273.636615][T11232] binder: Unknown parameter 'euid>00000000000000000000' [ 273.658582][ T3096] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 273.809756][ T3096] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 273.818074][ T3096] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 273.827174][ T3096] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 273.837514][ T3096] usb 8-1: config 220 has no interface number 2 [ 273.844028][ T3096] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 273.857232][ T3096] usb 8-1: config 220 interface 0 has no altsetting 0 [ 273.864344][ T3096] usb 8-1: config 220 interface 76 has no altsetting 0 [ 273.871295][ T3096] usb 8-1: config 220 interface 1 has no altsetting 0 [ 273.880419][ T3096] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 273.889897][ T3096] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.897906][ T3096] usb 8-1: Product: syz [ 273.902166][ T3096] usb 8-1: Manufacturer: syz [ 273.906771][ T3096] usb 8-1: SerialNumber: syz [ 273.918663][ T5928] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 274.068597][ T5928] usb 1-1: Using ep0 maxpacket: 32 [ 274.075439][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 274.087316][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 274.098721][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 274.108552][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 274.119732][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 274.122965][T11218] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 274.140142][ T5928] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 274.143861][T11218] /dev/rnullb0: Can't open blockdev [ 274.149329][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.149351][ T5928] usb 1-1: Product: syz [ 274.149363][ T5928] usb 1-1: Manufacturer: syz [ 274.149375][ T5928] usb 1-1: SerialNumber: syz [ 274.151044][ T5928] usb 1-1: config 0 descriptor?? [ 274.192213][ T3096] usb 8-1: selecting invalid altsetting 0 [ 274.205047][ T3096] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 274.208591][T11236] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1422'. [ 274.212409][ T3096] usb 8-1: No valid video chain found. [ 274.237333][ T3096] usb 8-1: selecting invalid altsetting 0 [ 274.246597][ T3096] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 274.270332][ T3096] usb 8-1: USB disconnect, device number 37 [ 274.594299][ T5928] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 274.635729][ T5928] input input30: Device does not respond to id packet M [ 274.657615][T11234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.667179][ T5928] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 274.673474][ T5928] input input30: Device does not respond to id packet P [ 274.680772][T11234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.689864][ T5928] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 274.696087][ T5928] input input30: Device does not respond to id packet B [ 274.788439][T11251] /dev/rnullb0: Can't open blockdev [ 274.877004][T11256] /dev/rnullb0: Can't open blockdev [ 274.887109][T11257] /dev/rnullb0: Can't open blockdev [ 274.898211][T11255] netlink: 'syz.7.1428': attribute type 11 has an invalid length. [ 275.137514][ T5928] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 275.150545][ T5928] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 275.150862][ T5928] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 275.151157][ T5928] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 275.154936][ T5928] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input30 [ 275.160695][ T5928] usb 1-1: USB disconnect, device number 87 [ 275.216892][T11274] /dev/rnullb0: Can't open blockdev [ 275.716287][T11286] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1436'. [ 276.028841][ T5928] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 276.061625][T11300] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1441'. [ 276.155456][ T5908] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 276.164821][T11303] /dev/rnullb0: Can't open blockdev [ 276.190082][ T5928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.200191][ T5928] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 276.209912][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.222018][ T5928] usb 1-1: config 0 descriptor?? [ 276.318542][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 276.328781][ T5908] usb 5-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 276.338223][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.346908][ T5908] usb 5-1: Product: syz [ 276.351410][ T5908] usb 5-1: Manufacturer: syz [ 276.356158][ T5908] usb 5-1: SerialNumber: syz [ 276.363793][ T5908] usb 5-1: config 0 descriptor?? [ 276.373899][ T5908] hub 5-1:0.0: bad descriptor, ignoring hub [ 276.380641][ T5908] hub 5-1:0.0: probe with driver hub failed with error -5 [ 276.389839][ T5908] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 276.577215][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 276.636568][ T5867] kernel write not supported for file /1027/clear_refs (pid: 5867 comm: kworker/0:3) [ 276.647514][ T5928] nintendo 0003:057E:200E.0017: unknown main item tag 0x0 [ 276.650284][ T5867] usb 5-1: USB disconnect, device number 59 [ 276.671335][ T5928] nintendo 0003:057E:200E.0017: unknown main item tag 0x0 [ 276.679874][ T5928] nintendo 0003:057E:200E.0017: unknown main item tag 0x0 [ 276.687094][ T5928] nintendo 0003:057E:200E.0017: unknown main item tag 0x0 [ 276.698927][ T5928] nintendo 0003:057E:200E.0017: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 276.770808][ T5928] nintendo 0003:057E:200E.0017: Failed charging grip handshake [ 276.778411][ T5928] nintendo 0003:057E:200E.0017: Failed to initialize controller; ret=-110 [ 276.805130][ T5928] nintendo 0003:057E:200E.0017: probe - fail = -110 [ 276.813405][ T5928] nintendo 0003:057E:200E.0017: probe with driver nintendo failed with error -110 [ 276.843181][T11291] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 276.954281][ T5928] usb 1-1: USB disconnect, device number 88 [ 277.213135][T11325] /dev/rnullb0: Can't open blockdev [ 277.240824][T11327] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 277.247373][T11327] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 277.253978][T11327] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 277.261143][T11327] comedi comedi3: 8255: I/O port conflict (0xd,4) [ 277.268000][T11327] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 277.274791][T11327] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 277.281721][T11327] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.288176][T11327] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.294751][T11327] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 277.298649][ T5867] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 277.313221][T11327] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 277.413195][T11330] netlink: 'syz.4.1450': attribute type 12 has an invalid length. [ 277.462343][ T5867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 277.470145][ T5867] usb 7-1: can't read configurations, error -61 [ 277.598654][ T5867] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 277.763300][ T5867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 277.771030][ T5867] usb 7-1: can't read configurations, error -61 [ 277.777519][ T5867] usb usb7-port1: attempt power cycle [ 277.798966][ T5928] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 277.858617][ T5908] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 277.948670][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 277.955027][ T5928] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.967496][ T5928] usb 5-1: config 0 has no interfaces? [ 277.974010][ T5928] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 277.987265][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.996317][ T5908] usb 1-1: device descriptor read/64, error -71 [ 278.019632][ T5928] usb 5-1: config 0 descriptor?? [ 278.050480][T11347] /dev/rnullb0: Can't open blockdev [ 278.087296][T11349] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1457'. [ 278.119743][ T5867] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 278.152746][ T5867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 278.162413][ T5867] usb 7-1: can't read configurations, error -61 [ 278.248551][ T5908] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 278.299432][ T5867] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 278.321119][ T5867] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 278.330142][ T5867] usb 7-1: can't read configurations, error -61 [ 278.336828][ T5867] usb usb7-port1: unable to enumerate USB device [ 278.410037][ T5908] usb 1-1: device descriptor read/64, error -71 [ 278.521682][ T5908] usb usb1-port1: attempt power cycle [ 278.834147][ T7201] usb 5-1: USB disconnect, device number 60 [ 278.878965][ T5908] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 278.910411][ T5908] usb 1-1: device descriptor read/8, error -71 [ 279.206795][ T5908] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 279.239883][ T5908] usb 1-1: device descriptor read/8, error -71 [ 279.358628][ T5908] usb usb1-port1: unable to enumerate USB device [ 280.408893][ T5867] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 280.568778][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 280.575302][ T5867] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.587072][ T5867] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.607789][ T5867] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 280.618138][ T5867] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 280.629076][ T5867] usb 7-1: Product: syz [ 280.633312][ T5867] usb 7-1: Manufacturer: syz [ 280.646557][ T5867] hub 7-1:4.0: USB hub found [ 280.847550][T11387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.860963][T11387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.876455][ T5867] hub 7-1:4.0: config failed, hub has too many ports! (err -19) [ 281.083004][T11387] /dev/rnullb0: Can't open blockdev [ 281.199515][ T5867] usb 7-1: USB disconnect, device number 43 [ 281.442706][T11407] /dev/rnullb0: Can't open blockdev [ 281.549255][ T5928] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 281.722568][ T5928] usb 1-1: not running at top speed; connect to a high speed hub [ 281.740597][ T5928] usb 1-1: config 129 has an invalid interface number: 253 but max is 1 [ 281.763039][ T5928] usb 1-1: config 129 has an invalid interface number: 58 but max is 1 [ 281.780904][ T5928] usb 1-1: config 129 has no interface number 0 [ 281.787193][ T5928] usb 1-1: config 129 has no interface number 1 [ 281.794287][ T5928] usb 1-1: config 129 interface 253 has no altsetting 0 [ 281.808622][ T5928] usb 1-1: config 129 interface 58 has no altsetting 0 [ 281.820538][ T5928] usb 1-1: New USB device found, idVendor=08ca, idProduct=2022, bcdDevice=f4.af [ 281.847129][ T5928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.859640][ T5928] usb 1-1: Product: syz [ 281.863923][ T5928] usb 1-1: Manufacturer: syz [ 281.868825][ T5928] usb 1-1: SerialNumber: syz [ 281.909699][T11421] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 282.058855][ T3096] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 282.114828][ T5928] usb 1-1: USB disconnect, device number 93 [ 282.210431][ T3096] usb 5-1: Using ep0 maxpacket: 16 [ 282.217252][ T3096] usb 5-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 282.227686][ T3096] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.238426][ T3096] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 282.247523][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.255637][ T3096] usb 5-1: Product: syz [ 282.258527][ T5908] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 282.259867][ T3096] usb 5-1: Manufacturer: syz [ 282.272063][ T3096] usb 5-1: SerialNumber: syz [ 282.421368][ T5908] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 282.430570][ T5908] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.438719][ T5908] usb 7-1: Product: syz [ 282.442925][ T5908] usb 7-1: Manufacturer: syz [ 282.447512][ T5908] usb 7-1: SerialNumber: syz [ 282.521458][ T3096] usb 5-1: 0:2 : does not exist [ 282.530598][ T3096] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 282.544537][ T3096] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 282.556634][ T3096] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 282.568399][ T3096] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 282.586044][ T3096] usb 5-1: 5:0: cannot get min/max values for control 5 (id 5) [ 282.598428][ T3096] usb 5-1: USB disconnect, device number 61 [ 282.696291][T11445] /dev/rnullb0: Can't open blockdev [ 282.734955][T11447] /dev/rnullb0: Can't open blockdev [ 282.746067][T11447] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 282.822704][T11451] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 282.929541][ T3096] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 282.953953][T11453] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1494'. [ 283.078689][ T3096] usb 5-1: Using ep0 maxpacket: 8 [ 283.086660][ T3096] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 283.095942][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.105780][ T3096] usb 5-1: Product: syz [ 283.110069][ T3096] usb 5-1: Manufacturer: syz [ 283.114669][ T3096] usb 5-1: SerialNumber: syz [ 283.120599][ T3096] usb 5-1: config 0 descriptor?? [ 283.127404][ T3096] gspca_main: se401-2.14.0 probing 047d:5003 [ 283.174381][ T5908] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 283.186974][ T5908] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 283.197734][ T5908] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 283.199723][ T5867] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 283.215331][ T7201] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 283.224164][ T5908] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 283.239976][ T5908] usb 7-1: USB disconnect, device number 44 [ 283.358648][ T7201] usb 1-1: device descriptor read/64, error -71 [ 283.378630][ T5867] usb 8-1: Using ep0 maxpacket: 16 [ 283.385319][ T5867] usb 8-1: unable to get BOS descriptor or descriptor too short [ 283.394015][ T5867] usb 8-1: config 1 has an invalid interface number: 26 but max is 1 [ 283.402324][ T5867] usb 8-1: config 1 has an invalid interface number: 89 but max is 1 [ 283.410978][ T5867] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.421147][ T5867] usb 8-1: config 1 has no interface number 0 [ 283.427301][ T5867] usb 8-1: config 1 has no interface number 1 [ 283.433513][ T5867] usb 8-1: config 1 interface 26 altsetting 213 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 283.446875][ T5867] usb 8-1: config 1 interface 89 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 283.460095][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 283.466198][ T5867] usb 8-1: config 1 interface 26 has no altsetting 0 [ 283.473619][ T5867] usb 8-1: config 1 interface 89 has no altsetting 0 [ 283.482460][ T5867] usb 8-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice=29.ec [ 283.491549][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.499605][ T5867] usb 8-1: Product: syz [ 283.503800][ T5867] usb 8-1: Manufacturer: syz [ 283.508406][ T5867] usb 8-1: SerialNumber: syz [ 283.538691][ T5908] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 283.627633][ T7201] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 283.668620][ T5908] usb 7-1: device descriptor read/64, error -71 [ 283.740420][T11456] program syz.7.1495 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.758599][ T7201] usb 1-1: device descriptor read/64, error -71 [ 283.771692][ T5867] usb 8-1: unknown interface protocol 0x7d, assuming v1 [ 283.779737][ T5867] usb 8-1: 26:2 : does not exist [ 283.788044][ T5867] usb 8-1: unknown interface protocol 0x13, assuming v1 [ 283.798555][ T5867] usb 8-1: 89:0 : does not exist [ 283.812669][ T5867] usb 8-1: USB disconnect, device number 38 [ 283.842911][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.26/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.888919][ T7201] usb usb1-port1: attempt power cycle [ 283.911302][ T5908] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 284.048534][ T5908] usb 7-1: device descriptor read/64, error -71 [ 284.159814][ T5908] usb usb7-port1: attempt power cycle [ 284.258558][ T7201] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 284.287684][ T7201] usb 1-1: device descriptor read/8, error -71 [ 284.338851][ T3096] gspca_se401: write req failed req 0x57 val 0x00 error -110 [ 284.346407][ T3096] se401 5-1:0.0: probe with driver se401 failed with error -110 [ 284.377596][T11465] /dev/rnullb0: Can't open blockdev [ 284.501302][ T5908] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 284.528519][ T7201] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 284.562014][ T7201] usb 1-1: device descriptor read/8, error -71 [ 284.569035][ T5908] usb 7-1: device descriptor read/8, error -71 [ 284.632871][T11471] /dev/rnullb0: Can't open blockdev [ 284.679457][ T7201] usb usb1-port1: unable to enumerate USB device [ 284.743943][T11481] /dev/sg0: Can't lookup blockdev [ 284.811492][ T5908] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 284.841066][ T5908] usb 7-1: device descriptor read/8, error -71 [ 284.950649][ T5908] usb usb7-port1: unable to enumerate USB device [ 285.605910][ T5908] usb 5-1: USB disconnect, device number 62 [ 285.888679][T11496] autofs4:pid:11496:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 285.903244][T11496] autofs4:pid:11496:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 285.995714][T11500] syzkaller1: entered promiscuous mode [ 286.002115][T11500] syzkaller1: entered allmulticast mode [ 286.276921][T11515] /dev/rnullb0: Can't open blockdev [ 286.698773][ T5867] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 286.850086][ T5867] usb 8-1: unable to get BOS descriptor or descriptor too short [ 286.861436][ T5867] usb 8-1: config 1 has an invalid interface number: 249 but max is 0 [ 286.871043][ T5867] usb 8-1: config 1 has no interface number 0 [ 286.877260][ T5867] usb 8-1: config 1 interface 249 altsetting 3 bulk endpoint 0xB has invalid maxpacket 8 [ 286.889720][ T5867] usb 8-1: config 1 interface 249 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 286.901710][ T5867] usb 8-1: config 1 interface 249 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 286.913026][ T5867] usb 8-1: config 1 interface 249 altsetting 3 endpoint 0x2 has an invalid bInterval 113, changing to 10 [ 286.924604][ T5867] usb 8-1: config 1 interface 249 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 286.935926][ T5867] usb 8-1: config 1 interface 249 altsetting 3 has an endpoint descriptor with address 0x12, changing to 0x2 [ 286.948340][ T5867] usb 8-1: config 1 interface 249 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 286.959424][ T5867] usb 8-1: config 1 interface 249 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 286.970254][ T5907] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 286.971060][ T5867] usb 8-1: config 1 interface 249 altsetting 3 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 286.990014][ T5867] usb 8-1: config 1 interface 249 altsetting 3 has 10 endpoint descriptors, different from the interface descriptor's value: 9 [ 287.004022][ T5867] usb 8-1: config 1 interface 249 has no altsetting 0 [ 287.012808][ T5867] usb 8-1: New USB device found, idVendor=22b8, idProduct=2d93, bcdDevice=90.48 [ 287.022338][ T5867] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.030559][ T5867] usb 8-1: Product: п [ 287.034705][ T5867] usb 8-1: Manufacturer: 쪓ɉ㩉鈠ᝆ⠔쾫煥᫖ꐑ츛靅⬘㙓멮侟벨屎躍ר饖릯▐ᠽ飳ᾼ࢟쌝箒吢⎄݀뗗磯勺둿竲ꇏᘆ姱﫺⽁㔠헙▵︪혊⠃릌鏣ᑿ粃噂讋੹뛙焧嶐泥귚ᛖ咍ⵑ [ 287.057658][ T5867] usb 8-1: SerialNumber: 河ڔ̭ [ 287.065628][T11523] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.073273][T11523] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 287.108662][ T5907] usb 5-1: device descriptor read/64, error -71 [ 287.136110][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1519'. [ 287.156146][T11534] sp0: Synchronizing with TNC [ 287.165175][T11534] binder: 11533:11534 ioctl c0306201 2000000003c0 returned -14 [ 287.263124][ T5908] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 287.331671][ T5867] usb 8-1: USB disconnect, device number 39 [ 287.352021][ T5907] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 287.430377][ T5908] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.440589][ T5908] usb 1-1: config 0 interface 0 has no altsetting 0 [ 287.449041][ T5908] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 287.458082][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.466103][ T5908] usb 1-1: Product: syz [ 287.470302][ T5908] usb 1-1: Manufacturer: syz [ 287.474875][ T5908] usb 1-1: SerialNumber: syz [ 287.480740][ T5908] usb 1-1: config 0 descriptor?? [ 287.487309][ T5908] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 287.495591][ T5907] usb 5-1: device descriptor read/64, error -71 [ 287.503208][ T5908] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 287.513383][ T5908] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 287.522092][ T5908] usb 1-1: media controller created [ 287.534146][ T5908] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 287.561579][ T5908] DVB: Unable to find symbol tda10046_attach() [ 287.567747][ T5908] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 287.576440][ T5908] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 287.608761][ T5907] usb usb5-port1: attempt power cycle [ 287.959372][ T5907] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 287.989328][ T5907] usb 5-1: device descriptor read/8, error -71 [ 288.228650][ T5907] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 288.248711][ T5928] usb 8-1: new low-speed USB device number 40 using dummy_hcd [ 288.270793][ T5907] usb 5-1: device descriptor read/8, error -71 [ 288.388943][ T5907] usb usb5-port1: unable to enumerate USB device [ 288.413228][ T5928] usb 8-1: unable to get BOS descriptor or descriptor too short [ 288.423388][ T5928] usb 8-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 288.444946][ T5928] usb 8-1: config 1 interface 0 has no altsetting 0 [ 288.461243][ T5928] usb 8-1: string descriptor 0 read error: -22 [ 288.470230][ T5928] usb 8-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 288.498907][ T5928] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.512235][T11556] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 288.530648][ T5928] input: bcm5974 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/input/input32 [ 289.586865][T11577] syzkaller1: entered promiscuous mode [ 289.596637][T11577] syzkaller1: entered allmulticast mode [ 289.978306][ T5908] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 289.995354][ T5908] usb 1-1: USB disconnect, device number 98 [ 290.129262][ T5867] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 290.298750][ T5867] usb 5-1: Using ep0 maxpacket: 8 [ 290.309390][ T5867] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 290.331911][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 255, changing to 11 [ 290.358768][ T5867] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 59391, setting to 1024 [ 290.393968][ T5867] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 290.416028][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.425438][ T5867] usb 5-1: Product: syz [ 290.429962][ T5867] usb 5-1: Manufacturer: syz [ 290.434852][ T5867] usb 5-1: SerialNumber: syz [ 290.449796][ T5867] usb 5-1: config 0 descriptor?? [ 290.455705][T11580] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 290.638551][ T5908] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 290.669536][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.683428][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.695834][T11580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.706693][T11580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.716684][ T5867] usb 5-1: USB disconnect, device number 67 [ 290.808612][ T5908] usb 7-1: Using ep0 maxpacket: 16 [ 290.816703][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.831266][ T5908] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.841424][ T5908] usb 7-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.00 [ 290.852694][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.863268][ T5908] usb 7-1: config 0 descriptor?? [ 290.950644][ T5222] bcm5974 8-1:1.0: could not read from device [ 290.950848][ T5867] usb 8-1: USB disconnect, device number 40 [ 290.963204][ T5222] bcm5974 8-1:1.0: could not read from device [ 290.982577][ T5852] bcm5974 8-1:1.0: could not read from device [ 291.171859][T11594] /dev/rnullb0: Can't open blockdev [ 291.264174][T11596] /dev/rnullb0: Can't open blockdev [ 291.286347][ T5908] hid_parser_main: 3 callbacks suppressed [ 291.286368][ T5908] asus 0003:0B05:19B6.0018: unknown main item tag 0x0 [ 291.310925][ T5908] asus 0003:0B05:19B6.0018: unknown main item tag 0x0 [ 291.317977][ T5908] asus 0003:0B05:19B6.0018: unknown main item tag 0x0 [ 291.326190][ T5908] asus 0003:0B05:19B6.0018: unknown main item tag 0x0 [ 291.336444][ T5908] asus 0003:0B05:19B6.0018: unknown main item tag 0x0 [ 291.348902][ T5908] asus 0003:0B05:19B6.0018: hidraw0: USB HID v0.00 Device [HID 0b05:19b6] on usb-dummy_hcd.6-1/input0 [ 291.362584][ T5908] asus 0003:0B05:19B6.0018: Asus input not registered [ 291.376809][ T5908] asus 0003:0B05:19B6.0018: probe with driver asus failed with error -12 [ 291.494886][ T5908] usb 7-1: USB disconnect, device number 49 [ 291.807947][T11609] /dev/rnullb0: Can't open blockdev [ 291.852970][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1540'. [ 292.325945][T11613] /dev/rnullb0: Can't open blockdev [ 292.500367][T11622] /dev/rnullb0: Can't open blockdev [ 292.678565][ T5908] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 292.778620][ T7201] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 292.829989][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.841671][ T5908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.852364][ T5908] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 292.862533][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.879169][ T5908] usb 5-1: config 0 descriptor?? [ 292.941435][ T7201] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 292.950252][ T7201] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 292.961185][ T7201] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 292.971985][ T7201] usb 7-1: config 220 has no interface number 2 [ 292.978327][ T7201] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 292.994404][ T7201] usb 7-1: config 220 interface 0 has no altsetting 0 [ 293.001503][ T7201] usb 7-1: config 220 interface 76 has no altsetting 0 [ 293.011818][ T7201] usb 7-1: config 220 interface 1 has no altsetting 0 [ 293.021126][ T7201] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 293.031880][ T7201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.042877][ T7201] usb 7-1: Product: syz [ 293.047064][ T7201] usb 7-1: Manufacturer: syz [ 293.053099][ T7201] usb 7-1: SerialNumber: syz [ 293.290814][ T5908] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 293.311358][ T5908] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 293.321231][ T5908] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 293.338624][ T5908] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 293.345048][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.356700][ T5908] playstation 0003:054C:0DF2.0019: unknown main item tag 0x0 [ 293.357607][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.382603][ T5908] playstation 0003:054C:0DF2.0019: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 293.462783][ T7201] uvcvideo 7-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 293.482181][ T7201] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 293.489504][ T5908] playstation 0003:054C:0DF2.0019: Invalid byte count transferred, expected 20 got 0 [ 293.501727][ T7201] usb 7-1: No valid video chain found. [ 293.507370][ T7201] usb 7-1: selecting invalid altsetting 0 [ 293.518551][ T5908] playstation 0003:054C:0DF2.0019: Failed to retrieve DualSense pairing info: -22 [ 293.524362][ T7201] usb 7-1: selecting invalid altsetting 0 [ 293.538015][ T5908] playstation 0003:054C:0DF2.0019: Failed to get MAC address from DualSense [ 293.542486][ T7201] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 293.576834][ T7201] usb 7-1: USB disconnect, device number 50 [ 293.586308][ T5908] playstation 0003:054C:0DF2.0019: Failed to create dualsense. [ 293.608695][ T5908] playstation 0003:054C:0DF2.0019: probe with driver playstation failed with error -22 [ 293.696559][T11620] netlink: 56537 bytes leftover after parsing attributes in process `syz.4.1543'. [ 293.722630][ T5908] usb 5-1: USB disconnect, device number 68 [ 293.868558][ T5867] usb 1-1: new low-speed USB device number 99 using dummy_hcd [ 294.020581][ T5867] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 294.028921][ T5867] usb 1-1: config 179 has no interface number 0 [ 294.035254][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 294.046468][ T7201] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 294.054149][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 294.065063][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 294.076326][ T5867] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 294.087511][ T5867] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 294.100950][ T5867] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 294.110998][ T5867] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.120977][T11637] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 294.131362][ T5867] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 294.141929][ T5867] xpad 1-1:179.65: probe with driver xpad failed with error -90 [ 294.208617][ T7201] usb 7-1: Using ep0 maxpacket: 8 [ 294.215274][ T7201] usb 7-1: config 127 has an invalid interface number: 171 but max is 1 [ 294.224771][ T7201] usb 7-1: config 127 has an invalid descriptor of length 47, skipping remainder of the config [ 294.238582][ T7201] usb 7-1: config 127 has no interface number 1 [ 294.245018][ T7201] usb 7-1: config 127 interface 171 has no altsetting 0 [ 294.279870][ T7201] usb 7-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 294.289636][ T7201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.298203][ T7201] usb 7-1: Product: syz [ 294.302972][T11645] /dev/rnullb0: Can't open blockdev [ 294.308673][ T7201] usb 7-1: Manufacturer: syz [ 294.314399][ T7201] usb 7-1: SerialNumber: syz [ 294.448781][ T5867] usb 1-1: USB disconnect, device number 99 [ 294.526838][T11641] hfsplus: unable to find HFS+ superblock [ 294.550253][ T7201] xr_serial 7-1:127.171: xr_serial converter detected [ 294.563086][ T7201] xr_serial ttyUSB0: Failed to set reg 0x1a: -71 [ 294.570406][ T7201] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 294.580033][T11659] (syz.4.1556,11659,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 294.588240][ T7201] usb 7-1: USB disconnect, device number 51 [ 294.594545][T11659] (syz.4.1556,11659,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 294.599174][ T7201] xr_serial 7-1:127.171: device disconnected [ 294.660770][T11663] /dev/rnullb0: Can't open blockdev [ 294.687324][T11666] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1559'. [ 294.696795][T11666] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1559'. [ 294.706888][T11666] netlink: 'syz.4.1559': attribute type 8 has an invalid length. [ 294.717215][T11666] /dev/rnullb0: Can't open blockdev [ 294.818685][ T3096] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 294.968619][ T3096] usb 8-1: Using ep0 maxpacket: 8 [ 294.975217][ T3096] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 294.985916][ T3096] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 294.996044][ T3096] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 295.007369][ T3096] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 295.029826][ T3096] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.039080][ T3096] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.250622][ T3096] usb 8-1: GET_CAPABILITIES returned 0 [ 295.264021][ T3096] usbtmc 8-1:16.0: can't read capabilities [ 295.452792][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.461880][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.470929][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.480016][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.489181][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.498344][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.507407][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.516491][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.525661][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.534752][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.543815][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.552866][ C1] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.564954][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.574050][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.583123][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.631820][ C0] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 295.649518][ T3096] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 295.668943][ T5908] usb 8-1: USB disconnect, device number 41 [ 295.724315][T11704] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.808605][ T3096] usb 7-1: Using ep0 maxpacket: 32 [ 295.818140][ T3096] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 295.834166][ T3096] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.847787][T11709] hugetlbfs: Bad value '' for mount option 'size' [ 295.847787][T11709] [ 295.861428][ T3096] usb 7-1: Product: syz [ 295.865700][ T3096] usb 7-1: Manufacturer: syz [ 295.875329][ T3096] usb 7-1: SerialNumber: syz [ 295.895630][ T3096] usb 7-1: config 0 descriptor?? [ 295.906469][ T3096] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 296.108818][ T5945] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 296.270361][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.306935][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 296.335941][T11711] /dev/rnullb0: Can't open blockdev [ 296.344841][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 296.373826][ T5945] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 296.423452][ T5945] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 296.442803][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.464626][ T5945] usb 1-1: config 0 descriptor?? [ 296.478238][T11709] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 296.508319][ T30] audit: type=1326 audit(2000000047.339:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11712 comm="syz.7.1576" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f51d398ebe9 code=0xffff0000 [ 296.535928][ T30] audit: type=1326 audit(2000000047.339:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11712 comm="syz.7.1576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51d398ebe9 code=0x7fc00000 [ 296.908520][ T5907] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 296.942845][ T5945] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 296.954542][ T5945] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 296.963748][ T5945] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 296.971612][ T5945] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 296.982444][ T5945] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 297.008773][ T5945] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 297.069923][ T5907] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 297.098545][ T5907] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24111, setting to 1024 [ 297.109799][ T5907] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 297.119849][ T5907] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 297.128956][ T5907] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.139854][T11719] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 297.160788][ T5907] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 297.219112][T11709] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1574'. [ 297.244155][T11709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.257274][T11709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.276540][ T5945] usb 1-1: USB disconnect, device number 100 [ 297.363284][T11719] nfs: Unknown parameter ' [ 297.363284][T11719] ' [ 297.561566][T11722] /dev/rnullb0: Can't open blockdev [ 297.595555][T11724] /dev/rnullb0: Can't open blockdev [ 298.427414][T11730] overlayfs: workdir and upperdir must reside under the same mount [ 298.688655][ T7201] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 298.828647][ T7201] usb 1-1: device descriptor read/64, error -71 [ 298.908580][ T5945] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 299.068761][ T7201] usb 1-1: new full-speed USB device number 102 using dummy_hcd [ 299.076511][ T5945] usb 8-1: Using ep0 maxpacket: 32 [ 299.086405][ T3096] gspca_stk1135: reg_w 0x1b err -71 [ 299.093730][ T5945] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 299.102915][ T3096] gspca_stk1135: serial bus timeout: status=0x00 [ 299.109608][ T3096] gspca_stk1135: Sensor write failed [ 299.114923][ T3096] gspca_stk1135: serial bus timeout: status=0x00 [ 299.121294][ T5945] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.129330][ T5945] usb 8-1: Product: syz [ 299.133489][ T5945] usb 8-1: Manufacturer: syz [ 299.138060][ T5945] usb 8-1: SerialNumber: syz [ 299.142677][ T3096] gspca_stk1135: Sensor write failed [ 299.148017][ T3096] gspca_stk1135: serial bus timeout: status=0x00 [ 299.155320][ T3096] gspca_stk1135: Sensor read failed [ 299.162776][ T5945] usb 8-1: config 0 descriptor?? [ 299.167872][ T3096] gspca_stk1135: serial bus timeout: status=0x00 [ 299.174294][ T3096] gspca_stk1135: Sensor read failed [ 299.179620][ T3096] gspca_stk1135: Detected sensor type unknown (0x0) [ 299.186663][ T3096] gspca_stk1135: serial bus timeout: status=0x00 [ 299.194704][ T5945] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 299.201019][ T3096] gspca_stk1135: Sensor read failed [ 299.206257][ T3096] gspca_stk1135: serial bus timeout: status=0x00 [ 299.212681][ T7201] usb 1-1: device descriptor read/64, error -71 [ 299.218993][ T3096] gspca_stk1135: Sensor read failed [ 299.224235][ T3096] gspca_stk1135: serial bus timeout: status=0x00 [ 299.230676][ T3096] gspca_stk1135: Sensor write failed [ 299.235982][ T3096] gspca_stk1135: serial bus timeout: status=0x00 [ 299.242435][ T3096] gspca_stk1135: Sensor write failed [ 299.247777][ T3096] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 299.260886][ T3096] usb 7-1: USB disconnect, device number 52 [ 299.339574][ T7201] usb usb1-port1: attempt power cycle [ 299.568314][ T5907] usb 5-1: USB disconnect, device number 69 [ 299.688601][ T7201] usb 1-1: new full-speed USB device number 103 using dummy_hcd [ 299.720070][ T7201] usb 1-1: device descriptor read/8, error -71 [ 299.978674][ T7201] usb 1-1: new full-speed USB device number 104 using dummy_hcd [ 300.000741][ T7201] usb 1-1: device descriptor read/8, error -71 [ 300.016756][T11747] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1588'. [ 300.026115][T11747] D`: renamed from hsr_slave_1 (while UP) [ 300.109108][ T7201] usb usb1-port1: unable to enumerate USB device [ 300.129833][ T3096] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 300.288609][ T3096] usb 5-1: Using ep0 maxpacket: 32 [ 300.295334][ T3096] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 300.303526][ T3096] usb 5-1: config 0 has no interface number 0 [ 300.310823][ T3096] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.320980][ T3096] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 300.330948][ T3096] usb 5-1: config 0 interface 12 has no altsetting 0 [ 300.339496][ T3096] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 300.348650][ T3096] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.356846][ T3096] usb 5-1: Product: syz [ 300.361067][ T3096] usb 5-1: Manufacturer: syz [ 300.365871][ T3096] usb 5-1: SerialNumber: syz [ 300.371667][ T3096] usb 5-1: config 0 descriptor?? [ 300.378139][ T3096] f81534 5-1:0.12: unsupported endpoint max packet size [ 301.007217][ T5862] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 301.302874][T11777] /dev/rnullb0: Can't open blockdev [ 301.318794][ T5945] gspca_stk1135: reg_w 0x200 err -110 [ 301.331871][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 301.350991][ T5945] gspca_stk1135: Sensor write failed [ 301.370636][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 301.396189][ T5945] gspca_stk1135: Sensor write failed [ 301.411849][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 301.428190][ T5945] gspca_stk1135: Sensor read failed [ 301.442791][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 301.457861][ T5945] gspca_stk1135: Sensor read failed [ 301.471847][ T5945] gspca_stk1135: Detected sensor type unknown (0x0) [ 301.487060][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 301.505809][ T5945] gspca_stk1135: Sensor read failed [ 301.517421][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 301.533377][ T5945] gspca_stk1135: Sensor read failed [ 301.549459][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 301.564577][ T5945] gspca_stk1135: Sensor write failed [ 301.576280][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 301.591197][ T5945] gspca_stk1135: Sensor write failed [ 301.601525][ T5945] stk1135 8-1:0.0: probe with driver stk1135 failed with error -110 [ 301.998656][ T5945] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 302.042869][ T3096] usb 8-1: USB disconnect, device number 42 [ 302.111726][T11783] PM: Enabling pm_trace changes system date and time during resume. [ 302.111726][T11783] PM: Correct system time has to be restored manually after resume. [ 302.148637][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 302.164612][ T5945] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 302.181882][ T5945] usb 1-1: config 0 has no interface number 0 [ 302.207235][ T5945] usb 1-1: config 0 interface 184 has no altsetting 0 [ 302.225396][ T5945] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 302.241724][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.259804][ T5945] usb 1-1: Product: syz [ 302.268322][ T5945] usb 1-1: Manufacturer: syz [ 302.295209][ T5945] usb 1-1: SerialNumber: syz [ 302.311257][ T5945] usb 1-1: config 0 descriptor?? [ 302.327702][ T5945] smsc75xx v1.0.0 [ 302.543058][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.564969][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.595027][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.622430][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.646920][T11781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.676082][T11781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.904171][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 302.934443][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 302.962493][ T7201] usb 5-1: USB disconnect, device number 70 [ 302.984555][ T5945] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 303.026348][ T5945] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 303.458567][ T7201] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 303.628864][ T7201] usb 5-1: Using ep0 maxpacket: 8 [ 303.635513][ T7201] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.644206][ T7201] usb 5-1: config 1 interface 0 has no altsetting 0 [ 303.652641][ T7201] usb 5-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40 [ 303.662085][ T5867] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 303.669727][ T7201] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.677782][ T7201] usb 5-1: Product: syz [ 303.678540][ T5908] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 303.682104][ T7201] usb 5-1: Manufacturer: syz [ 303.694817][ T7201] usb 5-1: SerialNumber: syz [ 303.840307][ T5908] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 303.850381][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.860150][ T5867] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 303.861053][ T5908] usb 7-1: config 0 descriptor?? [ 303.875802][ T5867] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 303.882151][ T5908] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 303.891976][ T5867] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 303.904451][ T5867] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.914944][ T7201] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input34 [ 303.925832][ T5867] usb 8-1: config 0 descriptor?? [ 303.932511][ T5222] bcm5974 5-1:1.0: could not read from device [ 303.936674][ T5867] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 303.949578][ T5222] bcm5974 5-1:1.0: could not read from device [ 303.958929][ T5222] bcm5974 5-1:1.0: could not read from device [ 303.962788][ T7201] usb 5-1: USB disconnect, device number 71 [ 303.973363][ T5222] bcm5974 5-1:1.0: could not read from device [ 304.080814][T11807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.089492][T11807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.109599][ T5908] gspca_cpia1: usb_control_msg 05, error -71 [ 304.116105][ T5908] gspca_cpia1: usb_control_msg 01, error -71 [ 304.122473][ T5908] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 304.133290][ T5908] usb 7-1: USB disconnect, device number 53 [ 304.198836][ T5907] usb 8-1: USB disconnect, device number 43 [ 304.454867][T11815] /dev/rnullb0: Can't open blockdev [ 304.679755][T11828] /dev/rnullb0: Can't open blockdev [ 304.892228][ T7201] usb 1-1: USB disconnect, device number 105 [ 306.486972][T11854] /dev/rnullb0: Can't open blockdev [ 307.321932][T11885] /dev/rnullb0: Can't open blockdev [ 308.054042][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1637'. [ 308.083851][T11907] /dev/rnullb0: Can't open blockdev [ 308.153759][T11911] /dev/rnullb0: Can't open blockdev [ 308.205624][T11913] /dev/rnullb0: Can't open blockdev [ 308.253197][T11916] /dev/rnullb0: Can't open blockdev [ 308.279136][ T5908] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 308.312476][ T5908] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 308.328741][ T7201] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 308.409707][T11926] fido_id[11926]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 308.478530][ T5908] usb 1-1: new full-speed USB device number 106 using dummy_hcd [ 308.517862][ T7201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.517893][ T7201] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.517926][ T7201] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 308.517946][ T7201] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.523509][ T7201] usb 5-1: config 0 descriptor?? [ 308.618602][ T5908] usb 1-1: device descriptor read/64, error -71 [ 308.645828][T11942] /dev/rnullb0: Can't open blockdev [ 308.657089][T11944] /dev/rnullb0: Can't open blockdev [ 308.734263][T11949] netlink: 328 bytes leftover after parsing attributes in process `syz.6.1648'. [ 308.735889][ T7201] usbhid 5-1:0.0: can't add hid device: -71 [ 308.753427][ T7201] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 308.764119][ T7201] usb 5-1: USB disconnect, device number 72 [ 308.880041][ T5908] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 309.018571][ T5908] usb 1-1: device descriptor read/64, error -71 [ 309.128749][ T5908] usb usb1-port1: attempt power cycle [ 309.469018][ T5908] usb 1-1: new full-speed USB device number 108 using dummy_hcd [ 309.501598][ T5908] usb 1-1: device descriptor read/8, error -71 [ 309.678022][T11962] vivid-000: ================= START STATUS ================= [ 309.687525][T11962] vivid-000: Generate PTS: true [ 309.696261][T11962] vivid-000: Generate SCR: true [ 309.723072][T11962] tpg source WxH: 320x180 (R'G'B) [ 309.736633][T11962] tpg field: 1 [ 309.748593][ T5908] usb 1-1: new full-speed USB device number 109 using dummy_hcd [ 309.764851][T11962] tpg crop: (0,0)/320x180 [ 309.775790][T11962] tpg compose: (0,0)/320x180 [ 309.780979][T11962] tpg colorspace: 8 [ 309.784901][T11962] tpg transfer function: 0/2 [ 309.790923][ T5908] usb 1-1: device descriptor read/8, error -71 [ 309.792570][T11962] tpg quantization: 0/1 [ 309.801870][T11962] tpg RGB range: 0/2 [ 309.805778][T11962] vivid-000: ================== END STATUS ================== [ 309.919715][ T5908] usb usb1-port1: unable to enumerate USB device [ 310.348546][ T5908] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 310.500116][ T5908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.512549][ T5908] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 310.525051][ T5908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.538711][ T5867] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 310.540304][ T5908] usb 7-1: config 0 descriptor?? [ 310.564459][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 310.708553][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 310.715332][ T5867] usb 5-1: unable to get BOS descriptor or descriptor too short [ 310.724274][ T5867] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.735959][ T5867] usb 5-1: config 1 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 310.753817][ T5867] usb 5-1: config 1 interface 0 has no altsetting 0 [ 310.763582][ T5867] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.786111][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.795191][ T5867] usb 5-1: Product: syz [ 310.799440][ T5867] usb 5-1: Manufacturer: syz [ 310.804042][ T5867] usb 5-1: SerialNumber: syz [ 310.817421][T11988] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1658'. [ 311.019771][ T5867] usb 5-1: bad CDC descriptors [ 311.029610][ T5867] usb 5-1: USB disconnect, device number 73 [ 311.274726][T12000] /dev/sg0: Can't lookup blockdev [ 311.283102][T12000] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.448574][ T5908] pwc: send_video_command error -71 [ 311.454164][T12006] TCP: TCP_TX_DELAY enabled [ 311.459104][ T5908] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 311.466864][ T5908] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 311.479771][ T5908] usb 7-1: USB disconnect, device number 54 [ 311.718376][T12024] /dev/rnullb0: Can't open blockdev [ 311.731997][T12024] /dev/rnullb0: Can't open blockdev [ 311.801668][T12035] binder: 12034:12035 ioctl 80404812 2000000000c0 returned -22 [ 311.837877][T12037] /dev/rnullb0: Can't open blockdev [ 311.989088][ T5867] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 312.027152][T12050] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 312.149547][ T5867] usb 5-1: Using ep0 maxpacket: 32 [ 312.171557][ T5867] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 312.182039][ T5867] usb 5-1: config 0 has no interface number 0 [ 312.225613][ T5867] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 312.231084][T12057] binder: 12056:12057 ioctl 4018620d 2000000002c0 returned -22 [ 312.239370][ T5867] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.259001][T12057] binder: 12056:12057 ioctl c0306201 2000000004c0 returned -14 [ 312.270422][T12057] binder: 12056:12057 ioctl c0306201 200000000240 returned -14 [ 312.289273][T12057] binder: 12056:12057 ioctl c0306201 200000000300 returned -14 [ 312.332211][T12060] /dev/rnullb0: Can't open blockdev [ 312.451960][T12067] MTD: Couldn't look up '/dev/sg0': -15 [ 312.507020][T12069] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1683'. [ 312.590435][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1684'. [ 312.628502][ T5867] usb 5-1: Product: syz [ 312.632906][ T5867] usb 5-1: Manufacturer: syz [ 312.637510][ T5867] usb 5-1: SerialNumber: syz [ 312.656516][ T5867] usb 5-1: config 0 descriptor?? [ 312.671199][ T5867] smsc95xx v2.0.0 [ 313.018608][ T7201] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 313.033040][T12083] /dev/rnullb0: Can't open blockdev [ 313.089402][ T5945] usb 1-1: new full-speed USB device number 110 using dummy_hcd [ 313.155832][T12089] tmpfs: Bad value for 'mpol' [ 313.181981][ T7201] usb 7-1: Using ep0 maxpacket: 8 [ 313.192934][ T7201] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 313.200907][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.213280][ T7201] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.225325][ T5945] usb 1-1: device descriptor read/64, error -71 [ 313.232192][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.243826][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 313.256743][ T7201] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 313.264484][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.277068][ T7201] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.289573][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.303221][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 313.316831][ T7201] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 313.324591][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 313.336340][ T7201] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.349225][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 313.360777][ T7201] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 313.376257][ T7201] usb 7-1: string descriptor 0 read error: -22 [ 313.383214][ T7201] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 313.392792][ T7201] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.411436][ T7201] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 313.477008][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 313.487814][ T5945] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 313.495640][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 313.610495][ T7201] usb 7-1: USB disconnect, device number 55 [ 313.639550][ T5945] usb 1-1: device descriptor read/64, error -71 [ 313.707199][T12031] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 313.714339][T12031] /dev/rnullb0: Can't open blockdev [ 313.750025][ T5945] usb usb1-port1: attempt power cycle [ 313.775024][T12095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.789908][T12095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.807348][ T5867] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 313.821611][ T5867] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 313.851152][ T5867] usb 5-1: USB disconnect, device number 74 [ 313.899741][T12101] tmpfs: Bad value for 'mpol' [ 313.958678][T12102] /dev/rnullb0: Can't open blockdev [ 314.098627][ T5945] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 314.119005][ T5945] usb 1-1: device descriptor read/8, error -71 [ 314.358746][ T5945] usb 1-1: new full-speed USB device number 113 using dummy_hcd [ 314.379968][ T5945] usb 1-1: device descriptor read/8, error -71 [ 314.398212][T12106] /dev/rnullb0: Can't open blockdev [ 314.425496][ T30] audit: type=1326 audit(2000000065.259:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12107 comm="syz.6.1697" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f304258ebe9 code=0x0 [ 314.489211][ T5945] usb usb1-port1: unable to enumerate USB device [ 314.538601][ T5908] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 314.772734][ T5908] usb 8-1: unable to get BOS descriptor or descriptor too short [ 314.786898][ T5908] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 314.794753][ T5908] usb 8-1: can't read configurations, error -71 [ 315.078638][ T5945] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 315.230939][ T5945] usb 5-1: config 0 has an invalid interface number: 3 but max is 0 [ 315.239088][ T5945] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.249207][ T5945] usb 5-1: config 0 has no interface number 0 [ 315.255341][ T5945] usb 5-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 315.265357][ T5945] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.274767][ T5945] usb 5-1: config 0 descriptor?? [ 315.287385][ T5945] hub 5-1:0.3: bad descriptor, ignoring hub [ 315.303632][ T5945] hub 5-1:0.3: probe with driver hub failed with error -5 [ 315.303660][T12120] Dead loop on virtual device ip6_vti0, fix it urgently! [ 315.317633][ T5945] sierra 5-1:0.3: Sierra USB modem converter detected [ 315.327886][T12120] Dead loop on virtual device ip6_vti0, fix it urgently! [ 315.343906][T12120] Dead loop on virtual device ip6_vti0, fix it urgently! [ 315.351382][T12120] Dead loop on virtual device ip6_vti0, fix it urgently! [ 315.368668][T12120] Dead loop on virtual device ip6_vti0, fix it urgently! [ 315.376080][T12120] Dead loop on virtual device ip6_vti0, fix it urgently! [ 315.483479][T12118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.499094][T12118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.522128][T12118] /dev/rnullb0: Can't open blockdev [ 315.530951][T12133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.571147][T12133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.610206][ T5945] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 315.679474][ T5945] usb 5-1: USB disconnect, device number 75 [ 315.681648][ T5945] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 315.681953][ T5945] sierra 5-1:0.3: device disconnected [ 315.741848][T12147] /dev/rnullb0: Can't open blockdev [ 316.029383][T12168] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1713'. [ 316.061396][T12168] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1713'. [ 316.272652][T12189] /dev/rnullb0: Can't open blockdev [ 316.285990][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.295033][ T5908] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 316.305793][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.786773][T12215] comedi comedi0: s526: I/O port conflict (0x3,64) [ 316.799960][T12215] binder: BINDER_SET_CONTEXT_MGR already set [ 316.806199][T12215] binder: 12214:12215 ioctl 4018620d 2000000002c0 returned -16 [ 317.174723][ T5907] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 317.220851][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.271288][ T5908] usb 1-1: Using ep0 maxpacket: 8 [ 317.280013][ T5908] usb 1-1: config 5 has an invalid interface number: 143 but max is 2 [ 317.298808][ T5908] usb 1-1: config 5 has an invalid interface number: 6 but max is 2 [ 317.307751][ T5908] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 317.339793][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.358581][ T5908] usb 1-1: config 5 has an invalid descriptor of length 108, skipping remainder of the config [ 317.372997][ T5907] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.389609][ T5908] usb 1-1: config 5 has no interface number 1 [ 317.398878][ T5907] usb 7-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 317.423595][ T5908] usb 1-1: config 5 has no interface number 2 [ 317.431135][ T5907] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.439320][ T5908] usb 1-1: config 5 interface 143 altsetting 30 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 317.468427][ T5908] usb 1-1: too many endpoints for config 5 interface 6 altsetting 7: 122, using maximum allowed: 30 [ 317.470311][ T5907] usb 7-1: config 0 descriptor?? [ 317.491496][ T5908] usb 1-1: config 5 interface 6 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 122 [ 317.524797][ T5908] usb 1-1: too many endpoints for config 5 interface 0 altsetting 5: 36, using maximum allowed: 30 [ 317.543562][ T5908] usb 1-1: config 5 interface 0 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 36 [ 317.557034][ T5908] usb 1-1: config 5 interface 143 has no altsetting 0 [ 317.565420][ T5908] usb 1-1: config 5 interface 6 has no altsetting 0 [ 317.572451][ T5908] usb 1-1: config 5 interface 0 has no altsetting 0 [ 317.582934][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=fc.f3 [ 317.596001][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.605580][ T5908] usb 1-1: Product: syz [ 317.610042][ T5908] usb 1-1: Manufacturer: syz [ 317.615532][ T5908] usb 1-1: SerialNumber: syz [ 317.765998][T12229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1733'. [ 317.776030][T12229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1733'. [ 317.787557][T12229] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1733'. [ 317.840879][T12169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.854075][T12169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.888858][ T5908] uvcvideo 1-1:5.143: probe with driver uvcvideo failed with error -22 [ 317.914625][ T5908] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.927447][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.940335][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.952878][ T5908] usb 1-1: MIDIStreaming interface descriptor not found [ 317.971899][ T5907] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 318.022215][ T5907] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 318.042307][ T5908] usb 1-1: USB disconnect, device number 114 [ 318.053296][ T5907] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 318.083744][ T5907] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 318.105783][ T5907] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 318.123242][ T5907] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 318.143357][ T5907] arvo 0003:1E7D:30D4.001C: unknown main item tag 0x0 [ 318.158613][ T5907] arvo 0003:1E7D:30D4.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.6-1/input0 [ 318.467283][T12175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.481831][T12175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.493662][ T5908] usb 7-1: USB disconnect, device number 56 [ 332.387051][ T5872] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 332.394372][ T5872] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 332.402962][ T5872] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 332.410747][ T5872] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 332.418121][ T5872] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 332.461765][T12247] wlan1 speed is unknown, defaulting to 1000 [ 332.797905][T12247] chnl_net:caif_netlink_parms(): no params data found [ 333.767912][ T5872] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 333.783232][ T5872] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 333.795945][ T5872] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 333.803606][ T5872] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 333.812589][ T5872] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 333.915240][ T5872] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 333.922674][ T5872] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 333.931465][ T5872] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 333.939280][ T5872] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 333.946631][ T5872] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 334.498710][ T5862] Bluetooth: hci3: command tx timeout [ 335.450158][ T1302] ================================================================== [ 335.458266][ T1302] BUG: KASAN: slab-use-after-free in handle_tx+0x1ec/0x610 [ 335.465492][ T1302] Read of size 8 at addr ffff88805c4bb020 by task aoe_tx0/1302 [ 335.473134][ T1302] [ 335.475474][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 335.475495][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 335.475510][ T1302] Call Trace: [ 335.475517][ T1302] [ 335.475524][ T1302] dump_stack_lvl+0x189/0x250 [ 335.475549][ T1302] ? __virt_addr_valid+0x1c8/0x5c0 [ 335.475571][ T1302] ? rcu_is_watching+0x15/0xb0 [ 335.475588][ T1302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.475609][ T1302] ? rcu_is_watching+0x15/0xb0 [ 335.475626][ T1302] ? lock_release+0x4b/0x3e0 [ 335.475641][ T1302] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 335.475662][ T1302] ? __virt_addr_valid+0x1c8/0x5c0 [ 335.475682][ T1302] ? __virt_addr_valid+0x4a5/0x5c0 [ 335.475704][ T1302] print_report+0xca/0x240 [ 335.475720][ T1302] ? handle_tx+0x1ec/0x610 [ 335.475735][ T1302] kasan_report+0x118/0x150 [ 335.475752][ T1302] ? handle_tx+0x1ec/0x610 [ 335.475770][ T1302] handle_tx+0x1ec/0x610 [ 335.475791][ T1302] dev_hard_start_xmit+0x2d7/0x830 [ 335.475813][ T1302] __dev_queue_xmit+0x1b8d/0x3b50 [ 335.475832][ T1302] ? __dev_queue_xmit+0x27b/0x3b50 [ 335.475849][ T1302] ? rcu_is_watching+0x15/0xb0 [ 335.475866][ T1302] ? trace_sched_exit_tp+0x36/0x110 [ 335.475888][ T1302] ? __schedule+0x17ae/0x4cc0 [ 335.475906][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 335.475922][ T1302] ? do_raw_spin_lock+0x121/0x290 [ 335.475942][ T1302] ? rcu_is_watching+0x15/0xb0 [ 335.475960][ T1302] ? do_raw_spin_unlock+0x122/0x240 [ 335.475980][ T1302] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 335.476000][ T1302] ? rcu_is_watching+0x15/0xb0 [ 335.476018][ T1302] ? rcu_is_watching+0x15/0xb0 [ 335.476036][ T1302] tx+0x6b/0x190 [ 335.476057][ T1302] ? __pfx_tx+0x10/0x10 [ 335.476076][ T1302] kthread+0x1cd/0x3e0 [ 335.476098][ T1302] ? __pfx_kthread+0x10/0x10 [ 335.476116][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 335.476132][ T1302] ? __kthread_parkme+0x7b/0x200 [ 335.476150][ T1302] ? __kthread_parkme+0x1a1/0x200 [ 335.476169][ T1302] kthread+0x711/0x8a0 [ 335.476190][ T1302] ? __pfx_kthread+0x10/0x10 [ 335.476207][ T1302] ? __pfx_kthread+0x10/0x10 [ 335.476228][ T1302] ? rcu_is_watching+0x15/0xb0 [ 335.476245][ T1302] ? __pfx_kthread+0x10/0x10 [ 335.476263][ T1302] ret_from_fork+0x47c/0x820 [ 335.476289][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 335.476310][ T1302] ? __switch_to_asm+0x39/0x70 [ 335.476325][ T1302] ? __switch_to_asm+0x33/0x70 [ 335.476341][ T1302] ? __pfx_kthread+0x10/0x10 [ 335.476360][ T1302] ret_from_fork_asm+0x1a/0x30 [ 335.476382][ T1302] [ 335.476389][ T1302] [ 335.721535][ T1302] Allocated by task 9404: [ 335.725843][ T1302] kasan_save_track+0x3e/0x80 [ 335.730510][ T1302] __kasan_kmalloc+0x93/0xb0 [ 335.735083][ T1302] __kmalloc_cache_noprof+0x21c/0x3a0 [ 335.740472][ T1302] alloc_tty_struct+0xa6/0x780 [ 335.745237][ T1302] tty_init_dev+0x59/0x4d0 [ 335.749637][ T1302] tty_open+0x5ab/0xd10 [ 335.753778][ T1302] chrdev_open+0x4cc/0x5e0 [ 335.758176][ T1302] do_dentry_open+0x950/0x13f0 [ 335.762918][ T1302] vfs_open+0x3b/0x340 [ 335.766980][ T1302] path_openat+0x2ee5/0x3830 [ 335.771545][ T1302] do_filp_open+0x1fa/0x410 [ 335.776034][ T1302] do_sys_openat2+0x121/0x1c0 [ 335.780691][ T1302] __x64_sys_openat+0x138/0x170 [ 335.785523][ T1302] do_syscall_64+0xfa/0xfa0 [ 335.790011][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.795969][ T1302] [ 335.798270][ T1302] Freed by task 5928: [ 335.802234][ T1302] kasan_save_track+0x3e/0x80 [ 335.806894][ T1302] __kasan_save_free_info+0x46/0x50 [ 335.812176][ T1302] __kasan_slab_free+0x5b/0x80 [ 335.816926][ T1302] kfree+0x18e/0x440 [ 335.820804][ T1302] process_scheduled_works+0xae1/0x17b0 [ 335.826338][ T1302] worker_thread+0x8a0/0xda0 [ 335.830908][ T1302] kthread+0x711/0x8a0 [ 335.835132][ T1302] ret_from_fork+0x47c/0x820 [ 335.839718][ T1302] ret_from_fork_asm+0x1a/0x30 [ 335.844465][ T1302] [ 335.846787][ T1302] Last potentially related work creation: [ 335.852482][ T1302] kasan_save_stack+0x3e/0x60 [ 335.857146][ T1302] kasan_record_aux_stack+0xbd/0xd0 [ 335.862341][ T1302] insert_work+0x3d/0x330 [ 335.866654][ T1302] __queue_work+0xcd2/0xfb0 [ 335.871136][ T1302] queue_work_on+0x181/0x270 [ 335.875714][ T1302] tty_release_struct+0xb8/0xd0 [ 335.880545][ T1302] tty_release+0xcb0/0x1640 [ 335.885039][ T1302] __fput+0x449/0xa70 [ 335.889094][ T1302] task_work_run+0x1d4/0x260 [ 335.893667][ T1302] do_exit+0x6b5/0x2300 [ 335.897809][ T1302] do_group_exit+0x21c/0x2d0 [ 335.902380][ T1302] get_signal+0x1286/0x1340 [ 335.906860][ T1302] arch_do_signal_or_restart+0x9a/0x750 [ 335.912381][ T1302] exit_to_user_mode_loop+0x75/0x130 [ 335.917644][ T1302] do_syscall_64+0x2bd/0xfa0 [ 335.922216][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.928085][ T1302] [ 335.930388][ T1302] Second to last potentially related work creation: [ 335.936955][ T1302] kasan_save_stack+0x3e/0x60 [ 335.941619][ T1302] kasan_record_aux_stack+0xbd/0xd0 [ 335.946817][ T1302] insert_work+0x3d/0x330 [ 335.951151][ T1302] __queue_work+0xcd2/0xfb0 [ 335.955639][ T1302] queue_work_on+0x181/0x270 [ 335.960212][ T1302] serial8250_modem_status+0x1ac/0x2a0 [ 335.965658][ T1302] serial8250_handle_irq+0x576/0xbb0 [ 335.970924][ T1302] serial8250_default_handle_irq+0xbf/0x200 [ 335.976801][ T1302] serial8250_interrupt+0x8d/0x180 [ 335.981913][ T1302] __handle_irq_event_percpu+0x289/0x980 [ 335.987615][ T1302] handle_irq_event+0x8b/0x1e0 [ 335.992369][ T1302] handle_edge_irq+0x23b/0xa10 [ 335.997131][ T1302] __common_interrupt+0x141/0x1f0 [ 336.002144][ T1302] common_interrupt+0x5e/0xe0 [ 336.006810][ T1302] asm_common_interrupt+0x26/0x40 [ 336.011816][ T1302] [ 336.014126][ T1302] The buggy address belongs to the object at ffff88805c4bb000 [ 336.014126][ T1302] which belongs to the cache kmalloc-cg-2k of size 2048 [ 336.028417][ T1302] The buggy address is located 32 bytes inside of [ 336.028417][ T1302] freed 2048-byte region [ffff88805c4bb000, ffff88805c4bb800) [ 336.042219][ T1302] [ 336.044525][ T1302] The buggy address belongs to the physical page: [ 336.050929][ T1302] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88805c4b8000 pfn:0x5c4b8 [ 336.061061][ T1302] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 336.069538][ T1302] memcg:ffff88801af51001 [ 336.073777][ T1302] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 336.082256][ T1302] page_type: f5(slab) [ 336.086219][ T1302] raw: 00fff00000000240 ffff88801a84b3c0 ffffea0001730610 ffffea0000c60010 [ 336.094903][ T1302] raw: ffff88805c4b8000 0000000000080006 00000000f5000000 ffff88801af51001 [ 336.103468][ T1302] head: 00fff00000000240 ffff88801a84b3c0 ffffea0001730610 ffffea0000c60010 [ 336.112122][ T1302] head: ffff88805c4b8000 0000000000080006 00000000f5000000 ffff88801af51001 [ 336.120798][ T1302] head: 00fff00000000003 ffffea0001712e01 00000000ffffffff 00000000ffffffff [ 336.129468][ T1302] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 336.138128][ T1302] page dumped because: kasan: bad access detected [ 336.144895][ T1302] page_owner tracks the page as allocated [ 336.150597][ T1302] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5864, tgid 5864 (syz-executor), ts 55205042291, free_ts 16145201309 [ 336.171957][ T1302] post_alloc_hook+0x240/0x2a0 [ 336.176732][ T1302] get_page_from_freelist+0x21e4/0x22c0 [ 336.182267][ T1302] __alloc_frozen_pages_noprof+0x181/0x370 [ 336.188058][ T1302] alloc_pages_mpol+0x232/0x4a0 [ 336.192913][ T1302] allocate_slab+0x8a/0x330 [ 336.197401][ T1302] ___slab_alloc+0xbd1/0x13e0 [ 336.202067][ T1302] __kmalloc_node_track_caller_noprof+0x2e4/0x4a0 [ 336.208472][ T1302] kmemdup_noprof+0x2b/0x70 [ 336.212974][ T1302] neigh_sysctl_register+0x9f/0xa80 [ 336.218167][ T1302] devinet_sysctl_register+0xad/0x200 [ 336.223546][ T1302] inetdev_init+0x2b4/0x500 [ 336.228053][ T1302] inetdev_event+0x301/0x15b0 [ 336.232718][ T1302] notifier_call_chain+0x1b3/0x3e0 [ 336.237908][ T1302] register_netdevice+0x1608/0x1ae0 [ 336.243094][ T1302] hsr_dev_finalize+0x641/0xaa0 [ 336.248021][ T1302] hsr_newlink+0x7d7/0x940 [ 336.252423][ T1302] page last free pid 1 tgid 1 stack trace: [ 336.258226][ T1302] __free_frozen_pages+0xbc4/0xd30 [ 336.263355][ T1302] free_contig_range+0x1bd/0x4a0 [ 336.268298][ T1302] destroy_args+0x69/0x660 [ 336.272699][ T1302] debug_vm_pgtable+0x39f/0x3b0 [ 336.277547][ T1302] do_one_initcall+0x233/0x820 [ 336.282296][ T1302] do_initcall_level+0x104/0x190 [ 336.287243][ T1302] do_initcalls+0x59/0xa0 [ 336.291558][ T1302] kernel_init_freeable+0x334/0x4b0 [ 336.296747][ T1302] kernel_init+0x1d/0x1d0 [ 336.301077][ T1302] ret_from_fork+0x47c/0x820 [ 336.305662][ T1302] ret_from_fork_asm+0x1a/0x30 [ 336.310499][ T1302] [ 336.312814][ T1302] Memory state around the buggy address: [ 336.318445][ T1302] ffff88805c4baf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.326502][ T1302] ffff88805c4baf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 336.334552][ T1302] >ffff88805c4bb000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.342713][ T1302] ^ [ 336.347895][ T1302] ffff88805c4bb080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.355986][ T1302] ffff88805c4bb100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 336.364079][ T1302] ================================================================== [ 336.372234][ T1302] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 336.379434][ T1302] CPU: 0 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted syzkaller #0 PREEMPT(full) [ 336.388458][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 336.398521][ T1302] Call Trace: [ 336.401808][ T1302] [ 336.404742][ T1302] dump_stack_lvl+0x99/0x250 [ 336.409351][ T1302] ? __asan_memcpy+0x40/0x70 [ 336.414042][ T1302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.419260][ T1302] ? __pfx__printk+0x10/0x10 [ 336.423886][ T1302] vpanic+0x281/0x750 [ 336.427871][ T1302] ? __pfx_vpanic+0x10/0x10 [ 336.432376][ T1302] ? rcu_is_watching+0x15/0xb0 [ 336.437151][ T1302] panic+0xb9/0xc0 [ 336.440890][ T1302] ? __pfx_panic+0x10/0x10 [ 336.445312][ T1302] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 336.451223][ T1302] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.457135][ T1302] ? is_module_address+0x17/0xf0 [ 336.462085][ T1302] ? handle_tx+0x1ec/0x610 [ 336.466491][ T1302] check_panic_on_warn+0x89/0xb0 [ 336.471422][ T1302] ? handle_tx+0x1ec/0x610 [ 336.475928][ T1302] end_report+0x78/0x160 [ 336.480162][ T1302] kasan_report+0x129/0x150 [ 336.484675][ T1302] ? handle_tx+0x1ec/0x610 [ 336.489267][ T1302] handle_tx+0x1ec/0x610 [ 336.493509][ T1302] dev_hard_start_xmit+0x2d7/0x830 [ 336.498628][ T1302] __dev_queue_xmit+0x1b8d/0x3b50 [ 336.503818][ T1302] ? __dev_queue_xmit+0x27b/0x3b50 [ 336.508914][ T1302] ? rcu_is_watching+0x15/0xb0 [ 336.513664][ T1302] ? trace_sched_exit_tp+0x36/0x110 [ 336.518852][ T1302] ? __schedule+0x17ae/0x4cc0 [ 336.523536][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 336.528897][ T1302] ? do_raw_spin_lock+0x121/0x290 [ 336.533920][ T1302] ? rcu_is_watching+0x15/0xb0 [ 336.538670][ T1302] ? do_raw_spin_unlock+0x122/0x240 [ 336.543853][ T1302] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 336.549733][ T1302] ? rcu_is_watching+0x15/0xb0 [ 336.554482][ T1302] ? rcu_is_watching+0x15/0xb0 [ 336.559240][ T1302] tx+0x6b/0x190 [ 336.562780][ T1302] ? __pfx_tx+0x10/0x10 [ 336.566923][ T1302] kthread+0x1cd/0x3e0 [ 336.570980][ T1302] ? __pfx_kthread+0x10/0x10 [ 336.575555][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 336.581390][ T1302] ? __kthread_parkme+0x7b/0x200 [ 336.586367][ T1302] ? __kthread_parkme+0x1a1/0x200 [ 336.591416][ T1302] kthread+0x711/0x8a0 [ 336.595568][ T1302] ? __pfx_kthread+0x10/0x10 [ 336.600154][ T1302] ? __pfx_kthread+0x10/0x10 [ 336.604730][ T1302] ? rcu_is_watching+0x15/0xb0 [ 336.609477][ T1302] ? __pfx_kthread+0x10/0x10 [ 336.614078][ T1302] ret_from_fork+0x47c/0x820 [ 336.618667][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 336.623852][ T1302] ? __switch_to_asm+0x39/0x70 [ 336.628684][ T1302] ? __switch_to_asm+0x33/0x70 [ 336.633428][ T1302] ? __pfx_kthread+0x10/0x10 [ 336.638018][ T1302] ret_from_fork_asm+0x1a/0x30 [ 336.642831][ T1302] [ 336.646247][ T1302] Kernel Offset: disabled [ 336.650562][ T1302] Rebooting in 86400 seconds..