last executing test programs: 14.063842876s ago: executing program 1 (id=815): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpgid(0xffffffffffffffff) r1 = syz_clone(0x0, &(0x7f0000000400)="a7c88d82ff4af87aa79a89c38a309d4a8107f24f5a467f6e8cce82ab927f55183add682b91f4fba0a7a2ff31f4a16a83a130782e0777b133a0e2cff57047279a272e11fb25a5e48304c90cf800ff3116e25d725f0e63809fb8e742e03ae346dbc891500368b767626b8319d9bae507758e5ec9776ed05db1b92c16933b87fd73a9d9bfc48ed814d7820be1eb2d8f8f5300a6ba5a6ecadd9d494927bf13e5cc8976f81eadc1c831556745a0953f6a5effa62b27ad9368c81381f4", 0xba, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000004c0)="66c439169dcb4e4d64a5271e5d72be92c66e55de9a83ca6b5c5724ce6a56a859b21f475d1520d90e") prlimit64(r1, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x80000000000001, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r5, 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x590}}], 0x1, 0x8008801) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c000004"], 0x26c0}}, 0x4010) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) ioctl$DRM_IOCTL_MODE_DIRTYFB(r4, 0xc01864b1, &(0x7f0000000040)={r6, 0x2, 0x20b, 0x20000000000002da, &(0x7f0000000000)=[{0x1ff, 0x0, 0x1, 0xef}]}) r9 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_GET_MAX_TAG_BITS(0x1e, r9, &(0x7f0000000500), 0x4003) io_uring_setup(0x6ed1, &(0x7f0000000140)={0x0, 0xf844, 0x10003, 0x0, 0xee}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911000000a000000954088fefcffffff"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r10 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r10, 0x545c, 0x7cb7562f2d67) 8.228209734s ago: executing program 1 (id=830): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="9feb01001800000000000000300000003000000008000000000000000000000300000000030000000500000002000000030000000000000c04000000000000000000000105000000005f3061"], &(0x7f0000000280)=""/51, 0x50, 0x33, 0x1, 0x9}, 0x28) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x100, 0x0, 0xffeffc03}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x483, 0x0, 0x0, 0x0) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000300)=0x80000000) (async) listen(r1, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) (async) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r8], 0x44}}, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xd, 0xec, 0x4, r2, 0x1, '\x00', r8, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r10, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r1}, 0x20) (async) recvmmsg(r1, &(0x7f00000073c0)=[{{0x0, 0x0, &(0x7f0000003d80)=[{&(0x7f0000002ac0)=""/4101, 0x1005}], 0x1}}], 0x1, 0x0, 0x0) (async) shutdown(r1, 0x1) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@local}) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000040)={&(0x7f0000000280)={{@local}, {@local, 0x6}, 0x400, "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"}, 0x418, 0x7fffffff}) (async) ioctl$IOCTL_VMCI_DATAGRAM_RECEIVE(r0, 0x7ac, &(0x7f0000000080)={&(0x7f0000000e00)={{@host, 0x6}, {@local, 0x2}, 0x400, "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"}, 0x418, 0x800}) 7.944022991s ago: executing program 1 (id=835): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x100, 0x100, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r3, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x44, 0xd5, 0x21, 0x10, 0x1608, 0x30b, 0x4085, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1c, 0x0, 0x2, 0x39, 0x54, 0x37, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40, 0x0, 0x0, 0x2}}]}}]}}]}}, 0x0) lchown(0x0, r0, r1) 6.088054092s ago: executing program 3 (id=841): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) syz_clone3(&(0x7f00000007c0)={0x440a03100, 0x0, 0x0, 0x0, {0xc}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x4000) 6.036064206s ago: executing program 2 (id=842): r0 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f00000003c0)={0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0]}) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r3}) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r8, 0x0, 0x0, r9], [0x2b8]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f0000000480)=r10) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000440)={&(0x7f0000000400)=[r1], 0x1, r3, r10, 0x80000000, 0xc, 0x6, 0x0, {0x8, 0x7, 0x0, 0x2, 0x97e2, 0x3, 0x8, 0x3, 0xffff, 0x80, 0x390, 0x8, 0x0, 0x8, "a0b26ed837976160dcecb65253b0db0646f58a99f54e7a0882234452a90366ec"}}) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="4dc07f947163300c", 0x8) r11 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r11, &(0x7f00000035c0)=[{{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000002c80)="7bc9772c3adcc294fdfb42a877da40d9ebaf07d3a0033ae45b0f30ae8d06951c436ec8e05eb6d405c058f679840bd7a7e65a2c365fb01d60f395699b64615dd42ef9e52b572165ee7cad1c6d0aa1495ea00d2b23a92bcb88efc487fd97329103b5ce46c6b627ff5ee1fabe15d8efcb16dac17470b83e1f9652a0079518396736a8bda106f0967732cbd4f432508645864faef1b6d760a95db78c42ec5a214f9d383b86a941b9ccb34d3932cbb914220b9cbfc43112c2e9ffcff13016630adc", 0xbf}, {&(0x7f0000002e00)="5206d88b9b29508c45c6b82d58f2169003771d873c53f6c24592e8e2928d37d082519921827b9a19fa44e14ec8a22203ac8b6a892756f3b13ad8667f2bb8555e180cdefa6539d01d35b0a0702785398df6dbe806fa5fbec3c04a62143443ab6c8b9aa57d1504ad0c21c86c", 0x6b}], 0x2}}, {{0x0, 0x0, &(0x7f0000002fc0)=[{&(0x7f0000002f40)="92f0ac0d687fc396c6e3fcb435c1ab468bfbcb101f67fb0a6eaf21f2fc72ec5a03074a7357c6308114ad5b64ecac13598f51c6ae646ab3f0d7b857201ac0e2c8bee4583571cd", 0x46}], 0x1}}, {{0x0, 0x0, &(0x7f00000034c0)=[{&(0x7f0000003040)="b87a12bfe84b8a61e5973e77ad8d2e880d8f77f82bf7f31fb63b3441e4bd657a7248543451a8181b88c0dc4dce63c0d0d89477b6bd6d95ad92ceb4d43e2b720b1235e17c7c744db03b18adbb47804f9e3368cdbeb4b2f75a1989e642b9c9dd84a6f7259615e76ff56a83bdd40f", 0x6d}, {&(0x7f0000003300)="f188f01c5ab1b2d6648a42cff6dd5157a23b61b77e", 0x15}, {&(0x7f0000003340)="eb5331c5b894d975ea5885fc377d68d205d92f42d9b93add8855ef779d0638d6a577269e24a524b3a0ce61dafab620c9c59458f3260a67d355a91c1e59b128964786827aa7262b754b7b72523d0807c6a8e5af2ab370e141c4f8be05ad03e335caf45e25cde29308249c4be6363cc4356dab7c2cfc", 0x75}, {&(0x7f00000033c0)="9e707f06cead4fd09abb88942ed84a458f77ebfeab04150c94f8e8e49793c2cc98d4f83bbf62920ea2dd", 0x2a}, {&(0x7f0000003400)="194e10985a93ab451e60e5e9f33ad8adadfd305ae4", 0x15}], 0x5}}], 0x3, 0x24008804) sendmmsg$alg(r11, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x4010) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) 5.978673401s ago: executing program 3 (id=843): socket(0x10, 0x803, 0x40) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @multicast, 'ip6gre0\x00'}}, 0x1e) listen(0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20840, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000500)="944eae349595a024724a6f752f1906abca0f906838b2343df6dd4f5e05fa4246aea7a2ebe21bd7f876f6423d25815965b70b43e563aea825ef6347d0c8a00f006de38829a94c1cdc15366322598b81fc40cd22c6d2f3367b360cea3d67cefd7d86cd1d93242d013c021c5511da6b8f7cfd48b48a415ceb98c5f223e70237a50972e0d3af3f89fd1be9674c7af004540d402ab1e09da0ab42ccb1c16388ea1535df9f2b06b734d7f29ecc0b1c906f9de7c53d6f1d57cff530b1df6b0f9f6dd48812b3bc6ba018ed977a2a8f424ac5e873a72819e989644763754cd93165f8bfa46f4761c5", 0xe4}, {0x0}, {&(0x7f0000000180)="c9c527ba565989570c8d56b806fc27f15b296ccb4865b4143a337995e20925923963b846a9b13234df18e0b65f2499dc9b85e7e6729345f99dafd4d5b9273eddae1b03ee0a881e24eaac3b162276d6a64b808edf5c33cc200a7c77e7c531e4f367bf866731c23e18b9da72d446634ac9eb850c9d914d1b9b", 0x78}], 0x3) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000007c0)={0x52}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x6, 0x0, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_ext={0x1c, 0x15, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000f2ffffff0000008e9a00000018910000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000015920600010000005db50400ffffffff9500000000000000182a0000", @ANYRES32=r4, @ANYBLOB="00000000010000809500000000000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000600)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x9623, 0xffffffffffffffff, 0x8, &(0x7f0000000640)=[r4, r4], &(0x7f0000000680)=[{0x4, 0x2, 0x0, 0xa}, {0x0, 0x4, 0x7, 0x2}, {0x3, 0x1, 0xb, 0x9}, {0x1, 0x1, 0x10, 0xb}, {0x4, 0x2, 0x5, 0xa}, {0x5, 0x4, 0xd, 0x1}, {0x0, 0x4, 0xa, 0xa}, {0x3, 0x3, 0xc, 0xa}]}, 0x94) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000d40)=0xfffffffe, 0x4) poll(&(0x7f0000000200)=[{r6, 0xa200}], 0x1, 0x4) close_range(r3, 0xffffffffffffffff, 0x2) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000003c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRES8, @ANYRES16=0x0, @ANYBLOB="0100ffffdfff00638c6e0d000009"], 0x14}, 0x2, 0x34005, 0x0, 0x800}, 0x0) ptrace(0x4207, r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 5.954438012s ago: executing program 2 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x2, 0x48c083) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001cc0)=[{{&(0x7f0000000300)=@tipc=@id, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/36, 0x24}, {&(0x7f00000003c0)=""/239, 0xef}, {&(0x7f00000004c0)=""/126, 0x7e}, {&(0x7f0000000540)=""/221, 0xdd}], 0x4, &(0x7f0000000640)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000700)=""/107, 0x6b}, {&(0x7f0000000780)=""/58, 0x3a}, {&(0x7f00000007c0)=""/177, 0xb1}, {&(0x7f0000000880)=""/201, 0xc9}, {&(0x7f0000000980)=""/222, 0xde}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/154, 0x9a}], 0x7, &(0x7f0000001bc0)=""/255, 0xff}, 0x9}], 0x2, 0x120, &(0x7f0000001d40)={0x0, 0x989680}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000001d80)=[@in6={0xa, 0x4e23, 0x0, @empty, 0xffff0001}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e23, @broadcast}], 0x4c) socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2, 0x1}, 0x50) 5.872342336s ago: executing program 4 (id=845): socket$kcm(0x29, 0x2, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=':syt 00N004093\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x2a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="91104f000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) read$char_usb(0xffffffffffffffff, &(0x7f0000000040)=""/20, 0x14) (async) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mount_setattr(0xffffffffffffffff, 0x0, 0x800, &(0x7f0000001b40)={0x70, 0xb3}, 0x20) (async) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) (async) keyctl$read(0xb, r2, &(0x7f0000000380)=""/64, 0x40) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x2) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x45}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000580), 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc1485544, &(0x7f0000000080)) connect$inet(r3, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10) (async) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)="6eb62ffc13578fc984d5faafb8d0736a4978a56b7afaec369885c629ae3056467a59cdd8745e539487dfc01f305313f35c383e16d434d74b9d621ae7f772e3d172da67d880a91d6a032dfb3ca177a628aeeb5364ae22ba04d968dc6183b8b7c38d64a33d1d7977ce21b45db9d0e65b83c3f66a7bd103ad2cc345fef6a606fa7b72e56d65510abff546c096447ee70ca1bbd2ba27864ceabe8ad9700831ca628b8ff1ba0008ed413d35adcd9c49ef5cb94729009014ae73a44eba61e41e51751fe0eeb9f2ac44b5938d8fe78ae818043646e56878b997a73e9b9297a976bf47377f61771f", 0xe4, r1) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) mount$cgroup2(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x18000, &(0x7f0000000300)={[{@memory_hugetlb_accounting}]}) 5.858301276s ago: executing program 3 (id=846): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x40, 0x8, 0x4, "92280ecf"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000980)={0x2c, &(0x7f0000000800)={0x40, 0x8, 0x4, "92280ecf"}, 0x0, 0x0, 0x0, 0x0}) 4.749004889s ago: executing program 2 (id=847): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x6}, 0x94) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r0, 0xc1007c00, &(0x7f0000000080)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000040)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 4.208583192s ago: executing program 4 (id=848): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) (async) setresuid(0xee01, 0xee01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x7) (async) r1 = socket(0x10, 0x8000000803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x804}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x1}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x48}}, 0x0) (async) r2 = fsopen(&(0x7f00000000c0)='tmpfs\x00', 0x0) fsmount(r2, 0x1, 0xc) 4.207654257s ago: executing program 1 (id=849): ustat(0x11, &(0x7f0000000600)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) connect$rds(r1, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="800000c3", @ANYRES16=r2, @ANYBLOB="310428bd7000fddbdf251600000018000180140002006e657464657673696d3000000000000005000300000000000500040001000000"], 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002880)=ANY=[@ANYBLOB="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"], 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002700)={0x11, 0x5, &(0x7f00000026c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000002680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) ioctl$SNDCTL_TMR_START(r7, 0x5402) write$sequencer(r7, &(0x7f0000000100)=ANY=[@ANYBLOB="9205c010030400009401c0f4f139ab6e97a5e1eae7681d35dd0e69c2ea09eb418ef81c41b57df17fc9e21d109d74726bb9d4894b28923f2eb3377a72f1794d52cf55e6baff609cc8603dbb6f8edf3d906447da26bbe3756c2d5f78501356b2e5ba5c24bb2d0e6c36f2f7368000479c1f1e2f8fd53da7560aaaa8145ff1f7f8e4"], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r6}, 0x90) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac000000", @ANYRESHEX, @ANYBLOB="01060000000000000000090000002c000480130001"], 0xac}}, 0x240080d0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fcdbdf2507000000540006804500040067636d28616573290000000000000000000000000000000000000000000000001d000000dd293a8df858e29a15005c012db93b8e60e3d0f6be66413a3efe91437000000008000100080000001c00238008000100a207000008000100090000000800030002000000500007800c000400faffffffffffffff08000200000800000c00030006000000000000000c0004000c000000000000000c0004004b090000000000000c0004000000000000000000080001000700000024000780000200ffffffff0c00040000000000000000000c00040007000000000000004800058007000100696200003c0002800800030080000000080003000002000008000400440e0000080004000500000008000200020000000800020001000000080004000104000000"], 0x140}}, 0x800) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r8, {0x7, 0x2b, 0x5, 0x1, 0x6, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x4, 0x2d1}}, 0x50) sysfs$2(0x2, 0x2000419, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r9, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r9, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$inet6_udp(0xa, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000180)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '~G\x00', 0x64, 0x11, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @private0, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "bb577147f8c63bab95cc025f2c123662d48c6e01d8630bf2addfd0edf624317d", "8afe9a2f9edb8e36339e135d00", {"1f143e838bef40d2fcff6c00", "b8d91538c6c53fafd6fea68a0e45b49f"}}}}}}}}, 0x0) setuid(0xee01) ioctl$RNDADDENTROPY(r5, 0x40045201, 0x0) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r10, 0xc100565c, &(0x7f0000000200)={0x2, 0xdac, 0x2, {0xd, @raw_data="3a55a398437a9c7ca24e0d7501ff214f0525a6420915b211546f4322c66075e516c026411301fd4e402ecabf10222cd0d9c08e1dba6081f574aff0704624f56273a67e546971e83e5c11abc4348d152702c2f4a9a9127576b76a05839f6ba123ccf78274b12091346cd02363f361fa6ed30639bf77797e218aaac06e1b4b9b9564128199f1dbb7e825a73142a2bd235a0ff5003139dc7c92f1dc833544e968d0fd3aea8fe6dd5108a1341ae1733eeca5f36dd7386c207fec5b788baf85369ff7e2ba07b85814f283"}, 0x20000003}) 4.015908396s ago: executing program 0 (id=850): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r1, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3731070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) 3.966929587s ago: executing program 4 (id=851): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xa}) fcntl$lock(r0, 0x24, &(0x7f0000000140)={0x2, 0x0, 0x800000000000}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdc3}, 0x77) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0x1, &(0x7f0000000680)=@raw=[@call={0x85, 0x0, 0x0, 0xc}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.836161643s ago: executing program 4 (id=852): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000140)={{0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @bcast, @bcast, @bcast, @null, @default]}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x20}, 0x94) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDADDIO(r2, 0x4b34, 0xffffffffffffffe2) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000003, 0x20010, r2, 0xbb51a000) r3 = getpid() r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, 0x0, 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000240)='syz0\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r9, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000000180)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x14) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000000, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="7f454c4605030908770000000000000003000600155eef2e5a020002380000000b03010008000000e10a200003000100070403000000420e0400000009000000ffff000020000000010400000080000005000000010000000100000003000000bd0400000700100003000000fffbffff000000000800000003"], 0x98) close(r8) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) ftruncate(r7, 0x5) sendfile(r5, r7, 0x0, 0x7ffff000) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r7, 0xc0406619, &(0x7f0000000000)={@desc={0x1, 0x0, @desc4}}) sched_setscheduler(r3, 0x2, 0x0) ioprio_set$pid(0x3, r3, 0x6000) 3.523525598s ago: executing program 0 (id=853): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, 0x0, 0x0, 0x4000014, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) socket$can_bcm(0x1d, 0x2, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) recvmmsg(r0, 0x0, 0x0, 0x120, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, 0x3d, 0x107, 0x0, 0x0, {0x3, 0x7c}, [@nested={0x14, 0x37, 0x0, 0x1, [@typed={0x10, 0x3, 0x0, 0x0, @str='qtr(4\xa9\x19sm4)\x00'}]}]}, 0x28}}, 0xc000) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) close_range(r4, 0xffffffffffffffff, 0x400000000000000) syz_open_dev$tty1(0xc, 0x4, 0x2) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() 3.253749236s ago: executing program 1 (id=854): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x20040600) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000180)={0x3, 'netpci0\x00', {0x1}, 0x4}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x0) readahead(0xffffffffffffffff, 0x401, 0x6c9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r4, &(0x7f0000001740)={0x2020}, 0x2020) 2.423496885s ago: executing program 3 (id=855): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) creat(&(0x7f0000000340)='./file0\x00', 0x0) (async) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000340), 0x11000) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-avx\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r5, 0x603, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) (async) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r3, @ANYBLOB, @ANYRESHEX=r4, @ANYBLOB]) (async) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @dev={0xfe, 0x80, '\x00', 0x41}, 0xca}, 0x1c) (async) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000200800034000000005140000001100"], 0x8c}}, 0x0) 2.421318163s ago: executing program 0 (id=856): r0 = syz_socket_connect_nvme_tcp() r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x30, 0x1412, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x700}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x30}}, 0x4000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r1, &(0x7f0000002700)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x18, 0x1410, 0x400, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004}, 0x240408e0) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="74b6aa11055ce0b6002f49eaff7672616e733d66642c7266646e6f3d", @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',cache=mmap,k']) creat(&(0x7f0000000300)='./file0\x00', 0x0) recvmsg$inet_nvme(r0, &(0x7f00000025c0)={&(0x7f0000000080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002440)=[{&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/145, 0x91}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000000100)=""/99, 0x63}, {&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000002280)=""/216, 0xd8}, {&(0x7f0000002380)=""/64, 0x40}, {&(0x7f00000023c0)}, {&(0x7f0000002400)=""/42, 0x2a}], 0x9, &(0x7f0000002500)=""/140, 0x8c}, 0x100) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a00)={0x4c, 0x3c, 0x107, 0x0, 0x4000, {0x1, 0x7c}, [@nested={0x10, 0xfc, 0x0, 0x1, [@typed={0xc, 0x5, 0x0, 0x0, @u64=0x8}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="c4139b78"]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@empty}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 853.148919ms ago: executing program 2 (id=857): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) dup(r0) (async) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_submit(0x0, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x235, &(0x7f0000000500)={0x0, 0x4533, 0x10100, 0x0, 0x24c}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000580)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x57, 0x7fc00100}]}) sched_setattr(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3000000000050001000700000005"], 0x60}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3000000000050001000700000005"], 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) (async) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) 852.551295ms ago: executing program 3 (id=858): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfe, 0x7fff0002}]}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000d40)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x13, 0x28, 0x67, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @private=0xa010101}, @timestamp_reply={0xe, 0x0, 0x0, 0x8001, 0x0, 0x2f3, 0x9, 0x8}}}}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfe, 0x7fff0002}]}) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) (async) syz_emit_ethernet(0x36, &(0x7f0000000d40)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x13, 0x28, 0x67, 0x0, 0x8, 0x1, 0x0, @rand_addr=0x64010102, @private=0xa010101}, @timestamp_reply={0xe, 0x0, 0x0, 0x8001, 0x0, 0x2f3, 0x9, 0x8}}}}}, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 603.534108ms ago: executing program 0 (id=859): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0xf, 0x3, 0x2) (async) socket$kcm(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600894f0000200002"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newsa={0x138, 0x10, 0x1, 0x8000000, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@empty, 0x2, 0x0, 0x4e20, 0x0, 0x0, 0x20, 0x0, 0x33}, {@in=@broadcast, 0x0, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000}, {0x5, 0x9}, 0x0, 0x0, 0x2, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000006740)=[{{&(0x7f0000000080)=@nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000100)="c7", 0x1}], 0x1}}, {{&(0x7f00000016c0)=@nl=@kern={0x10, 0x0, 0x0, 0x800}, 0x80, 0x0}}], 0x2, 0x4000) 392.584476ms ago: executing program 1 (id=860): memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x03\x00\x00\x00Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff08000440000000810800084000000003200001"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x8, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0x7, 0x8}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0xb, 0x2, {0x7, 0x9, 0x4}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x800) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00178018"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000) syz_io_uring_setup(0x88b, &(0x7f0000000280)={0x0, 0xb797, 0x8, 0x1, 0x25d}, &(0x7f0000000140)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, 0x0, 0x0, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffa89) openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket$pppl2tp(0x18, 0x1, 0x1) ioprio_set$pid(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f0000000180)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '\\x\xb2\xf2\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="38010000fe0000", @ANYRES64, @ANYBLOB="f4b02b86df87851e7be7b383760d80"], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5}, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1f00, 0x12) 391.806266ms ago: executing program 3 (id=861): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff1337, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x39}, {0x0, 0x8}, {0x800000, 0x800001}, {}, {0x21ff, 0x2}, {0x0, 0x5}, {}, {0x0, 0x5}, {}, {}, {0x0, 0xe68b}], 0xc, 0x0, 0x0, 0x0, 0x0, 0x500}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r7, &(0x7f0000000000)=ANY=[], 0xfdef) ioctl$NBD_SET_SOCK(r3, 0xab00, r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) timerfd_gettime(0xffffffffffffffff, 0x0) r9 = dup3(r3, r0, 0x80000) ioctl$NBD_DO_IT(r9, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000f9da181b11e11487096039b5f1900", @ANYRES16=r2, @ANYBLOB="01002bbd700008000000020000000800010000000000"], 0x1c}}, 0x20000004) 388.948244ms ago: executing program 4 (id=862): io_setup(0x5, &(0x7f0000000180)=0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0xffffffff, "421ae3753785251500e9e29b00", 0xffffffffffffffff}) io_submit(r0, 0x1, &(0x7f00000002c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000000100000000fcdbdfd4f19a722500000000", @ANYRES32=0x0, @ANYBLOB="0810000061000000280012800e00010069703667726574617000000014000280080004000400000008000400ff7f00000a000100aaaaaaaaaa270000"], 0x54}}, 0x0) 318.924617ms ago: executing program 2 (id=863): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0x0, 0x4}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x2, 0x0, 0x0, 0xffff7ffd}) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/cgroup\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0x48) open_by_handle_at(r0, &(0x7f0000000040)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x81, 0x5, 0x4, 0x1, 0x91b8, 0xfff}}, 0x600800) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e21, @broadcast}}, 0x0, 0x5, 0x2, 0x6e, 0x15, 0x6, 0x4b}, &(0x7f0000000180)=0x9c) 256.843089ms ago: executing program 0 (id=864): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1802, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r1, 0x1107}, {r0, 0x1400}, {r1, 0x1f3}], 0x20000000000000e0, 0x41) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRESDEC=r1, @ANYRESOCT, @ANYRESOCT=r3, @ANYRESDEC, @ANYRESOCT=r0, @ANYRES64=r0, @ANYRESOCT=r1, @ANYRESOCT=r1], 0x38}}, 0x20000001) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="beb50900", @ANYRES16=r4, @ANYBLOB="00002cbd7000fddbdf250200000006000e00010000000c001000070000000000000008001900ac1e000106001c00ff00000005000d0000000000080011000100000006001c0006000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 71.228728ms ago: executing program 4 (id=865): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0x27, 0xc0, 0xde, 0x20, 0x86a, 0x3, 0xf03f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x2, 0x2, 0x2, 0xf3, 0xbf, 0xf5, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0182a49330c987e09d00300000003000000004000000000000000100000d0000"], 0x0, 0x4c}, 0x28) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESOCT=r3, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8000, 0x1204020, 0x1, 0x3}}, 0x50) (async) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8000, 0x1204020, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x0, {0x0, 0x4c703729fbd4a280}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xca83, 0x2) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x0, 0x1, 0x1) creat(&(0x7f0000000040)='./bus\x00', 0x8) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') (async) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000300)='trans=rdma,') exit(0x1) (async) exit(0x1) 20.500973ms ago: executing program 2 (id=866): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x27}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x48, r3, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 0s ago: executing program 0 (id=867): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ec0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000f80)={0x16, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @in6={0xa, 0x4e24, 0xaf0931d, @remote, 0x3}}}, 0x90) chdir(&(0x7f00000000c0)='./bus\x00') r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000f800000000000000fb150a"], 0x10002) kernel console output (not intermixed with test programs): 6081 - 0 [ 209.130033][ T5906] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 209.389218][ T7166] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.404886][ T7166] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.421593][ T7166] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.437415][ T7166] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.182189][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.277098][ T5906] usb 1-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 210.301901][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 210.320009][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.352556][ T5906] usb 1-1: config 0 descriptor?? [ 210.379435][ T7199] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 210.493670][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 210.544568][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.550401][ T7199] CIFS mount error: No usable UNC path provided in device string! [ 210.550401][ T7199] [ 210.600517][ T7199] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 210.620151][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 210.636145][ T24] usb 4-1: config 0 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 210.680893][ T24] usb 4-1: config 0 interface 0 has no altsetting 1 [ 210.706801][ T24] usb 4-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice=8e.57 [ 210.721526][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.920047][ T24] usb 4-1: Product: syz [ 210.930107][ T24] usb 4-1: Manufacturer: syz [ 210.934959][ T24] usb 4-1: SerialNumber: syz [ 215.290563][ T24] usb 4-1: config 0 descriptor?? [ 215.388712][ T24] usb 4-1: can't set config #0, error -71 [ 215.554012][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 215.610188][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 215.622284][ T24] usb 4-1: USB disconnect, device number 17 [ 215.750288][ T5906] usb 1-1: USB disconnect, device number 10 [ 216.390005][ T5973] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 216.500403][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 216.622060][ T5973] usb 1-1: Using ep0 maxpacket: 8 [ 216.713723][ T5973] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.740005][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 216.765325][ T5973] usb 1-1: config 179 has no interface number 0 [ 216.781727][ T9] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 216.786797][ T5973] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 216.794955][ T9] usb 3-1: config 0 has no interface number 0 [ 216.837680][ T5973] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 216.858572][ T9] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 216.913580][ T5973] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.940049][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.948294][ T9] usb 3-1: Product: syz [ 216.952859][ T5973] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 216.971329][ T9] usb 3-1: Manufacturer: syz [ 216.976001][ T9] usb 3-1: SerialNumber: syz [ 216.990027][ T5973] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 217.005539][ T9] usb 3-1: config 0 descriptor?? [ 217.028566][ T5973] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 217.040933][ T9] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 217.066917][ T5973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.105170][ T7241] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 217.124448][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 217.127877][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 217.130626][ T5855] Bluetooth: hci0: command 0x0406 tx timeout [ 217.130668][ T5855] Bluetooth: hci3: command 0x0406 tx timeout [ 217.130738][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 217.269388][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 217.578602][ T9] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 218.505402][ T5973] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input12 [ 218.711803][ T9] usb 1-1: USB disconnect, device number 11 [ 218.711933][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 218.726118][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 218.867038][ T7275] batadv_slave_0: entered promiscuous mode [ 218.889724][ T7268] batadv_slave_0: left promiscuous mode [ 219.178598][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 219.179150][ T5973] usb 3-1: USB disconnect, device number 17 [ 219.287245][ T5973] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 219.398787][ T5973] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 219.514314][ T5973] quatech2 3-1:0.51: device disconnected [ 219.561346][ T7296] netlink: 60 bytes leftover after parsing attributes in process `syz.1.342'. [ 219.984881][ T7303] capability: warning: `syz.2.344' uses 32-bit capabilities (legacy support in use) [ 220.438873][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.3.345'. [ 220.695079][ T7308] overlayfs: conflicting lowerdir path [ 220.735269][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 221.350170][ T43] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.370065][ T5926] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 221.529872][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.541055][ T5926] usb 5-1: device descriptor read/64, error -71 [ 221.560189][ T43] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.573682][ T43] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 221.584411][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.599649][ T43] usb 2-1: config 0 descriptor?? [ 221.780723][ T5926] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 221.920563][ T5926] usb 5-1: device descriptor read/64, error -71 [ 222.193570][ T5926] usb usb5-port1: attempt power cycle [ 222.210399][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 222.656473][ T7352] netlink: 100 bytes leftover after parsing attributes in process `syz.0.358'. [ 222.720366][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 222.740338][ T9] usb 4-1: config 0 has an invalid interface number: 193 but max is 0 [ 222.756560][ T9] usb 4-1: config 0 has no interface number 0 [ 222.782115][ T9] usb 4-1: New USB device found, idVendor=08d1, idProduct=0001, bcdDevice=f2.70 [ 222.811994][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.820381][ T5926] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 222.866642][ T9] usb 4-1: Product: syz [ 222.874932][ T5926] usb 5-1: device descriptor read/8, error -71 [ 222.907568][ T9] usb 4-1: Manufacturer: syz [ 222.928219][ T9] usb 4-1: SerialNumber: syz [ 222.963758][ T9] usb 4-1: config 0 descriptor?? [ 223.011142][ T9] usb 4-1: selecting invalid altsetting 1 [ 223.049055][ T9] catc 4-1:0.193: Can't set altsetting 1. [ 223.078128][ T9] catc 4-1:0.193: probe with driver catc failed with error -5 [ 223.160359][ T5926] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 223.211615][ T24] usb 4-1: USB disconnect, device number 18 [ 223.218312][ T5926] usb 5-1: device descriptor read/8, error -71 [ 223.393622][ T5926] usb usb5-port1: unable to enumerate USB device [ 223.938307][ T7371] binder: 7369:7371 ioctl c0306201 0 returned -14 [ 224.176798][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 224.209641][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 224.267094][ T43] usb 2-1: USB disconnect, device number 12 [ 224.731444][ T7379] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 225.920918][ T43] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 226.103212][ T43] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 226.129840][ T43] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 226.155648][ T43] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 2 [ 226.179643][ T43] usb 4-1: config 150 has no interface number 0 [ 226.196715][ T43] usb 4-1: config 150 interface 204 has no altsetting 0 [ 226.223405][ T43] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 226.242869][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.266247][ T43] usb 4-1: Product: syz [ 226.277233][ T43] usb 4-1: Manufacturer: syz [ 226.288837][ T43] usb 4-1: SerialNumber: syz [ 226.323896][ T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 226.518445][ T43] xr_serial 4-1:150.204: skipping garbage [ 226.539017][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 226.579006][ T43] usb 4-1: USB disconnect, device number 19 [ 226.589305][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.662161][ T24] usb 1-1: config 0 descriptor?? [ 226.684275][ T24] pwc: Philips SPC 900NC USB webcam detected. [ 227.371022][ T7434] ieee802154 phy0 wpan0: encryption failed: -90 [ 227.724939][ T7407] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 227.735162][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 228.022721][ T7407] kvm: Disabled LAPIC found during irq injection [ 228.084569][ T24] pwc: send_video_command error -71 [ 228.089851][ T24] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 228.142951][ T24] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 228.194359][ T24] usb 1-1: USB disconnect, device number 12 [ 228.223972][ T43] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 228.255482][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.281391][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.330377][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 228.330848][ T7444] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.374'. [ 228.355538][ T43] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 228.380542][ T43] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 228.405697][ T43] usb 5-1: Manufacturer: syz [ 228.418863][ T7442] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.374'. [ 228.446920][ T43] usb 5-1: config 0 descriptor?? [ 228.859509][ T7453] netlink: 'syz.1.377': attribute type 11 has an invalid length. [ 228.908947][ T43] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 228.978930][ T43] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 228.997129][ T7457] netlink: 8 bytes leftover after parsing attributes in process `syz.1.379'. [ 230.577766][ T7468] netlink: 256 bytes leftover after parsing attributes in process `syz.3.382'. [ 230.684662][ T43] usb 5-1: reset high-speed USB device number 30 using dummy_hcd [ 230.879203][ T9] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 231.707636][ T9] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 231.729694][ T9] usb 2-1: config 0 has no interface number 0 [ 231.958463][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 232.011399][ T24] usb 5-1: USB disconnect, device number 30 [ 232.091369][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.099474][ T9] usb 2-1: Product: syz [ 232.106911][ T9] usb 2-1: Manufacturer: syz [ 232.111605][ T9] usb 2-1: SerialNumber: syz [ 232.119882][ T9] usb 2-1: config 0 descriptor?? [ 233.090197][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 233.219451][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 233.238320][ T9] usb 2-1: Please update to version 0.2 or newer [ 233.273319][ T7505] netlink: 16 bytes leftover after parsing attributes in process `syz.4.393'. [ 233.294094][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.316558][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.640049][ T5906] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 234.459356][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 234.565955][ T9] usb 2-1: USB disconnect, device number 13 [ 234.574136][ T10] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.00 [ 234.583373][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.638969][ T10] usb 3-1: config 0 descriptor?? [ 234.739975][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 234.798295][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 234.834361][ T7514] netlink: 'syz.1.394': attribute type 2 has an invalid length. [ 234.847115][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1028, setting to 1024 [ 234.886554][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.934881][ T5906] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 234.941056][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.949988][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.985028][ T5906] usb 5-1: config 0 descriptor?? [ 234.992962][ T7505] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 235.208958][ T5157] Bluetooth: hci3: unexpected event 0x3e length: 283 > 260 [ 235.208996][ T5157] Bluetooth: hci3: unexpected subevent 0x0d length: 282 > 260 [ 235.225466][ T5157] Bluetooth: hci3: adv larger than maximum supported [ 235.225522][ T5157] Bluetooth: hci3: adv larger than maximum supported [ 235.397341][ T9] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 235.422711][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 235.429745][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 235.451076][ T5906] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 235.469366][ T5906] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 235.478629][ T10] usb 3-1: USB disconnect, device number 18 [ 235.493775][ T5906] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 235.509375][ T5906] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 235.529650][ T5906] corsair 0003:1B1C:1B02.0009: unknown main item tag 0x0 [ 235.549512][ T5906] corsair 0003:1B1C:1B02.0009: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.4-1/input0 [ 235.606230][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.618220][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.630254][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 235.640367][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.649244][ T9] usb 2-1: SerialNumber: syz [ 235.678893][ T9] usb 2-1: 0:2 : does not exist [ 235.703824][ T5906] corsair 0003:1B1C:1B02.0009: Failed to get K90 initial state (error -71). [ 235.742563][ T5906] usb 5-1: USB disconnect, device number 31 [ 236.036864][ T7520] kvm: pic: non byte write [ 236.062433][ T5906] usb 2-1: USB disconnect, device number 14 [ 237.864301][ T7545] netlink: 'syz.4.402': attribute type 10 has an invalid length. [ 238.140468][ T7545] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 238.304647][ T7550] tmpfs: Bad value for 'mpol' [ 238.310580][ T7550] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.437436][ T7547] netlink: 12 bytes leftover after parsing attributes in process `syz.0.401'. [ 238.725422][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 238.910407][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 238.937417][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.092172][ T9] usb 2-1: Product: syz [ 239.112619][ T9] usb 2-1: Manufacturer: syz [ 239.117284][ T9] usb 2-1: SerialNumber: syz [ 239.145647][ T9] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 239.184695][ T5906] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 239.360137][ T24] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 239.390672][ T7565] qnx4: no qnx4 filesystem (no root dir). [ 239.398892][ T5973] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 239.471983][ T9] usb 2-1: USB disconnect, device number 15 [ 239.581162][ T7574] netlink: 64 bytes leftover after parsing attributes in process `syz.1.410'. [ 239.582491][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.610181][ T7574] netlink: 64 bytes leftover after parsing attributes in process `syz.1.410'. [ 239.626159][ T5973] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.640157][ T24] usb 4-1: config 0 has an invalid interface number: 131 but max is 8 [ 239.648347][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 239.817403][ T5973] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 239.830845][ T24] usb 4-1: config 0 has no interface number 0 [ 240.830005][ T24] usb 4-1: config 0 interface 131 has no altsetting 0 [ 240.836875][ T24] usb 4-1: New USB device found, idVendor=0421, idProduct=0000, bcdDevice= 0.00 [ 240.844402][ T5906] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 240.860097][ T5906] ath9k_htc: Failed to initialize the device [ 240.866999][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 241.870323][ T5973] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 241.879520][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.042080][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.061864][ T5973] usb 5-1: config 0 descriptor?? [ 242.067671][ T24] usb 4-1: config 0 descriptor?? [ 242.149664][ T24] usb 4-1: can't set config #0, error -71 [ 242.244301][ T24] usb 4-1: USB disconnect, device number 20 [ 242.303474][ T5973] usbhid 5-1:0.0: can't add hid device: -71 [ 242.309698][ T5973] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 243.135261][ T5973] usb 5-1: USB disconnect, device number 32 [ 245.098535][ T5973] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 245.350616][ T5973] usb 3-1: Using ep0 maxpacket: 16 [ 245.406140][ T5973] usb 3-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 245.461754][ T5973] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.612592][ T5973] usb 3-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.633076][ T5973] usb 3-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 245.794926][ T5973] usb 3-1: config 7 interface 0 has no altsetting 0 [ 245.823930][ T5973] usb 3-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 245.876416][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.069874][ T7631] ip6tnl1: entered promiscuous mode [ 247.076514][ T7631] ip6tnl1: entered allmulticast mode [ 247.085558][ T7631] team0: Device ip6tnl1 is of different type [ 247.360478][ T5906] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 247.497503][ T7641] netlink: 4 bytes leftover after parsing attributes in process `syz.4.423'. [ 247.539324][ T5906] usb 4-1: device descriptor read/64, error -71 [ 247.815915][ T5906] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 247.930216][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 248.011344][ T5906] usb 4-1: device descriptor read/64, error -71 [ 248.130089][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 248.161029][ T5906] usb usb4-port1: attempt power cycle [ 248.181140][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.233522][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.265739][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 248.285983][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.314756][ T5973] usbhid 3-1:7.0: can't add hid device: -71 [ 248.330730][ T9] usb 1-1: config 0 descriptor?? [ 248.342637][ T5973] usbhid 3-1:7.0: probe with driver usbhid failed with error -71 [ 248.355479][ T9] hub 1-1:0.0: USB hub found [ 248.405562][ T5973] usb 3-1: USB disconnect, device number 19 [ 248.560417][ T5906] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 248.575237][ T9] hub 1-1:0.0: 1 port detected [ 248.661156][ T5906] usb 4-1: device descriptor read/8, error -71 [ 248.986410][ T5906] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 249.330704][ T5906] usb 4-1: device descriptor read/8, error -71 [ 249.462878][ T5906] usb usb4-port1: unable to enumerate USB device [ 249.544126][ T9] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 249.574280][ T9] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 249.582163][ T7660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.582612][ T7660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.649014][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 249.671876][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 249.775340][ T9] usb 1-1: USB disconnect, device number 13 [ 249.830035][ T5973] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 249.842026][ T7666] netlink: 'syz.1.429': attribute type 29 has an invalid length. [ 249.878332][ T7666] netlink: 'syz.1.429': attribute type 29 has an invalid length. [ 249.960100][ T7666] netlink: 500 bytes leftover after parsing attributes in process `syz.1.429'. [ 250.004165][ T7666] unsupported nla_type 58 [ 250.237834][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 250.420745][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 250.470420][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 250.482093][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 250.490454][ T9] usb 4-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0x6E, changing to 0xE [ 250.519590][ T7687] netlink: 'syz.1.436': attribute type 2 has an invalid length. [ 250.550396][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0xE has an invalid bInterval 170, changing to 11 [ 250.582851][ T9] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0xE has invalid maxpacket 34661, setting to 1024 [ 250.614267][ T7688] vxcan3: entered promiscuous mode [ 250.626029][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 250.652526][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 250.686655][ T7693] netlink: 'syz.4.437': attribute type 11 has an invalid length. [ 250.698180][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.729963][ T9] usb 4-1: Product: syz [ 250.739537][ T9] usb 4-1: Manufacturer: syz [ 250.764547][ T9] usb 4-1: SerialNumber: syz [ 250.789779][ T9] usb 4-1: config 0 descriptor?? [ 250.818155][ T7669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 251.169627][ T7669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 252.133637][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 252.147199][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.157481][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.167894][ T24] usb 4-1: USB disconnect, device number 25 [ 252.537521][ T7711] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 252.566335][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.443'. [ 252.586153][ T7711] fuse: Unknown parameter 'goup_id' [ 252.673981][ T7716] netlink: 'syz.0.445': attribute type 29 has an invalid length. [ 252.701490][ T7716] netlink: 'syz.0.445': attribute type 29 has an invalid length. [ 252.740989][ T7716] netlink: 500 bytes leftover after parsing attributes in process `syz.0.445'. [ 252.904250][ T43] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 253.112841][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 253.275145][ T43] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 253.347644][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.373992][ T7730] random: crng reseeded on system resumption [ 253.442981][ T43] usb 5-1: Product: syz [ 253.500503][ T43] usb 5-1: Manufacturer: syz [ 253.548955][ T43] usb 5-1: SerialNumber: syz [ 253.667137][ T43] usb 5-1: config 0 descriptor?? [ 253.917786][ T43] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 253.992459][ T5973] kernel write not supported for file bpf-prog (pid: 5973 comm: kworker/1:6) [ 254.047606][ T43] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 254.113949][ T43] visor 5-1:0.0: probe with driver visor failed with error -5 [ 254.271275][ T24] usb 5-1: USB disconnect, device number 33 [ 254.350208][ T5973] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 254.512167][ T5973] usb 1-1: Using ep0 maxpacket: 16 [ 254.521535][ T5973] usb 1-1: unable to get BOS descriptor or descriptor too short [ 254.535486][ T5973] usb 1-1: config 0 has no interfaces? [ 254.556637][ T5973] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.569301][ T5973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.583756][ T5973] usb 1-1: Product: syz [ 254.588219][ T5973] usb 1-1: Manufacturer: syz [ 254.594605][ T5973] usb 1-1: SerialNumber: syz [ 254.605925][ T5973] usb 1-1: config 0 descriptor?? [ 254.711562][ T24] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 254.828940][ T5973] usb 1-1: USB disconnect, device number 14 [ 254.920968][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 254.936934][ T24] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 254.959201][ T24] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 254.960294][ T55] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 254.985310][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 254.995313][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 255.008996][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 255.021575][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 255.036873][ T24] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 255.048561][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 255.085294][ T24] usb 2-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 255.112478][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.141979][ T24] usb 2-1: config 0 descriptor?? [ 255.142711][ T55] usb 3-1: Using ep0 maxpacket: 8 [ 255.150704][ T7749] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 255.183091][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.204646][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.224163][ T24] usblp0: Disabling reads from problematic bidirectional printer [ 255.242558][ T55] usb 3-1: New USB device found, idVendor=1241, idProduct=5011, bcdDevice= 0.00 [ 255.276562][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.279871][ T55] usb 3-1: config 0 descriptor?? [ 255.471177][ T24] usblp 2-1:0.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 255.620884][ T7768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 256.080567][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.091272][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.575764][ T24] usb 2-1: USB disconnect, device number 16 [ 258.329713][ T24] usblp0: removed [ 258.459028][ T55] usbhid 3-1:0.0: can't add hid device: -71 [ 258.459155][ T55] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 258.500122][ T55] usb 3-1: USB disconnect, device number 21 [ 258.910183][ T7785] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.860264][ T3091] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 259.949735][ T24] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 260.050536][ T5842] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 260.354304][ T5842] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 260.376992][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.399155][ T5842] usb 5-1: config 0 descriptor?? [ 260.441934][ T5842] cp210x 5-1:0.0: cp210x converter detected [ 260.494871][ T55] IPVS: starting estimator thread 0... [ 260.590293][ T7824] IPVS: using max 22 ests per chain, 52800 per kthread [ 261.017565][ T5842] usb 5-1: cp210x converter now attached to ttyUSB0 [ 261.770848][ T24] usb 3-1: device descriptor read/64, error -71 [ 262.822515][ T3091] usb 2-1: device descriptor read/all, error -71 [ 263.251638][ T5978] usb 5-1: USB disconnect, device number 34 [ 263.325134][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 263.514971][ T5978] cp210x 5-1:0.0: device disconnected [ 263.585805][ T7842] sd 0:0:1:0: device reset [ 264.123162][ T5157] Bluetooth: hci1: unexpected cc 0x0809 length: 68 > 4 [ 264.130435][ T5157] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 264.231163][ T5978] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 264.430184][ T24] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 264.479982][ T5978] usb 5-1: Using ep0 maxpacket: 16 [ 264.660887][ T5978] usb 5-1: config 8 has an invalid interface number: 206 but max is 0 [ 264.669563][ T5978] usb 5-1: config 8 has no interface number 0 [ 264.677427][ T5978] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 264.689821][ T5978] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 264.702496][ T5978] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 264.702743][ T24] usb 3-1: too many configurations: 219, using maximum allowed: 8 [ 264.730046][ T5978] usb 5-1: config 8 interface 206 has no altsetting 0 [ 264.736562][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.0.485'. [ 264.740799][ T5978] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 264.755949][ T5978] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.780275][ T5978] usb 5-1: Product: syz [ 264.804614][ T5978] usb 5-1: Manufacturer: syz [ 264.809369][ T5978] usb 5-1: SerialNumber: syz [ 264.815913][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 264.835372][ T24] usb 3-1: can't read configurations, error -61 [ 264.856802][ T24] usb usb3-port1: attempt power cycle [ 265.071668][ T30] audit: type=1326 audit(1755476777.278:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.103122][ T30] audit: type=1326 audit(1755476777.278:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.134949][ T30] audit: type=1326 audit(1755476777.278:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.171083][ T7878] netlink: 'syz.3.490': attribute type 11 has an invalid length. [ 265.188066][ T30] audit: type=1326 audit(1755476777.278:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.253184][ T7878] netlink: 'syz.3.490': attribute type 11 has an invalid length. [ 265.270164][ T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 265.281660][ T7878] netlink: 224 bytes leftover after parsing attributes in process `syz.3.490'. [ 265.304482][ T30] audit: type=1326 audit(1755476777.278:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.409817][ T30] audit: type=1326 audit(1755476777.278:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.526648][ T30] audit: type=1326 audit(1755476777.278:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.589397][ T5978] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected [ 265.594095][ T30] audit: type=1326 audit(1755476777.278:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.702399][ T5842] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 265.772850][ T30] audit: type=1326 audit(1755476777.278:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.897856][ T30] audit: type=1326 audit(1755476777.278:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7873 comm="syz.0.488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d58ebe9 code=0x7ffc0000 [ 265.945567][ T5842] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 266.006878][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.196157][ T5842] usb 1-1: config 0 descriptor?? [ 266.428508][ T24] usb 3-1: too many configurations: 219, using maximum allowed: 8 [ 266.470027][ T5978] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 266.477265][ T5842] cp210x 1-1:0.0: cp210x converter detected [ 266.483195][ T5978] usb 5-1: USB disconnect, device number 35 [ 266.563529][ T24] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 266.573467][ T5978] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 266.880045][ T24] usb 3-1: can't read configurations, error -61 [ 266.912426][ T5978] garmin_gps 5-1:8.206: device disconnected [ 266.941533][ T5842] usb 1-1: cp210x converter now attached to ttyUSB1 [ 267.041157][ T24] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 267.280583][ T24] usb 3-1: device not accepting address 25, error -71 [ 267.309565][ T24] usb usb3-port1: unable to enumerate USB device [ 267.400527][ T7903] CIFS mount error: No usable UNC path provided in device string! [ 267.400527][ T7903] [ 267.411237][ T7903] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 268.726190][ T7907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.498'. [ 269.025817][ T5842] usb 1-1: USB disconnect, device number 15 [ 269.077101][ T5842] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 269.142950][ T5842] cp210x 1-1:0.0: device disconnected [ 271.204822][ T7933] bond1: entered allmulticast mode [ 271.239713][ T7933] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.265338][ T7933] bridge0: port 3(bond1) entered blocking state [ 271.282407][ T7933] bridge0: port 3(bond1) entered disabled state [ 271.295829][ T7933] bond1: entered promiscuous mode [ 271.302041][ T7933] bridge0: port 3(bond1) entered blocking state [ 271.309034][ T7933] bridge0: port 3(bond1) entered forwarding state [ 271.392416][ T13] bridge0: port 3(bond1) entered disabled state [ 271.716308][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 271.716332][ T30] audit: type=1326 audit(1755476783.898:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 271.850154][ T30] audit: type=1326 audit(1755476783.898:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 271.863553][ T7952] block device autoloading is deprecated and will be removed. [ 272.060962][ T30] audit: type=1326 audit(1755476783.898:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 272.086866][ T30] audit: type=1326 audit(1755476783.898:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 272.115959][ T7952] syz.4.510: attempt to access beyond end of device [ 272.115959][ T7952] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 272.175659][ T30] audit: type=1326 audit(1755476783.908:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 272.236755][ T30] audit: type=1326 audit(1755476783.908:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 272.340146][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 272.417754][ T30] audit: type=1326 audit(1755476783.958:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 272.442786][ T30] audit: type=1326 audit(1755476783.958:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 272.502499][ T30] audit: type=1326 audit(1755476784.008:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 272.550039][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 272.567769][ T10] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 272.580283][ T10] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 272.584661][ T30] audit: type=1326 audit(1755476784.008:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7951 comm="syz.4.510" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 272.598688][ T10] usb 5-1: Product: syz [ 272.662684][ T10] usb 5-1: Manufacturer: syz [ 272.698052][ T10] usb 5-1: SerialNumber: syz [ 272.741815][ T10] usb 5-1: config 0 descriptor?? [ 273.386162][ T10] usb 5-1: USB disconnect, device number 36 [ 273.586909][ T7233] udevd[7233]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 274.020849][ T5978] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 274.130808][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 274.283213][ T10] usb 3-1: device descriptor read/64, error -71 [ 274.558722][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 274.740215][ T10] usb 3-1: device descriptor read/64, error -71 [ 274.887886][ T10] usb usb3-port1: attempt power cycle [ 274.929665][ T5978] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 274.964668][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.983613][ T5978] usb 1-1: config 0 descriptor?? [ 275.014632][ T5978] cp210x 1-1:0.0: cp210x converter detected [ 275.250366][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 275.285089][ T10] usb 3-1: device descriptor read/8, error -71 [ 275.812016][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 275.956715][ T10] usb 3-1: device descriptor read/8, error -71 [ 276.969030][ T5978] usb 1-1: cp210x converter now attached to ttyUSB0 [ 277.908832][ T10] usb usb3-port1: unable to enumerate USB device [ 278.246853][ T43] usb 1-1: USB disconnect, device number 16 [ 278.580293][ T3091] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 278.611437][ T5842] IPVS: starting estimator thread 0... [ 278.770962][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 278.861411][ T8014] IPVS: using max 22 ests per chain, 52800 per kthread [ 278.899405][ T3091] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.911704][ T43] cp210x 1-1:0.0: device disconnected [ 278.947577][ T3091] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.980099][ T8013] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 278.988878][ T8013] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 279.017708][ T3091] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.038159][ T3091] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 279.088479][ T3091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.121414][ T3091] usb 4-1: config 0 descriptor?? [ 279.127583][ T8013] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 279.146402][ T8013] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 279.163170][ T8013] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 279.175377][ T8013] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 279.216241][ T8013] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 279.222933][ T8013] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 279.259158][ T8013] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 279.278147][ T8013] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 279.454523][ T8027] dvmrp0: entered allmulticast mode [ 279.747635][ T3091] usb 4-1: string descriptor 0 read error: -22 [ 280.545677][ T8026] dvmrp0: left allmulticast mode [ 280.600164][ T5842] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 280.721153][ T5157] Bluetooth: hci0: command 0x0406 tx timeout [ 281.200279][ T5157] Bluetooth: hci2: command 0x0406 tx timeout [ 281.201220][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 281.280124][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 281.280267][ T5157] Bluetooth: hci3: command 0x0406 tx timeout [ 281.510514][ T5842] usb 3-1: Using ep0 maxpacket: 32 [ 281.525101][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 281.549973][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 281.580063][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 281.580208][ T43] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 281.611346][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 281.666244][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.705260][ T8040] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.530' sets config #0 [ 281.715208][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 281.765781][ T5842] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 282.810010][ T5157] Bluetooth: hci0: command 0x0406 tx timeout [ 282.997255][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.271368][ T5842] usb 3-1: Product: syz [ 283.280061][ T5157] Bluetooth: hci1: command 0x0406 tx timeout [ 283.282541][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 283.294194][ T5842] usb 3-1: Manufacturer: syz [ 283.298990][ T5842] usb 3-1: SerialNumber: syz [ 283.374794][ T5840] Bluetooth: hci3: command 0x0406 tx timeout [ 283.381542][ T5157] Bluetooth: hci4: command 0x0406 tx timeout [ 283.497834][ T3091] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 283.513125][ T3091] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 283.547145][ T5842] usb 3-1: config 0 descriptor?? [ 283.559683][ T5842] usb 3-1: can't set config #0, error -71 [ 283.600572][ T3091] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 283.608787][ T3091] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 283.660895][ T5842] usb 3-1: USB disconnect, device number 30 [ 283.690117][ T3091] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 283.743818][ T3091] usb 4-1: USB disconnect, device number 26 [ 283.920183][ T8048] netlink: 196 bytes leftover after parsing attributes in process `syz.3.532'. [ 284.027568][ T8048] netlink: 196 bytes leftover after parsing attributes in process `syz.3.532'. [ 284.186820][ T5842] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 284.939317][ T5842] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.952669][ T5842] usb 3-1: not running at top speed; connect to a high speed hub [ 284.975947][ T5842] usb 3-1: config 187 interface 0 altsetting 8 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 285.003790][ T5842] usb 3-1: config 187 interface 0 altsetting 8 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 285.019710][ T5842] usb 3-1: config 187 interface 0 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 285.073821][ T5842] usb 3-1: config 187 interface 0 has no altsetting 0 [ 285.103141][ T5842] usb 3-1: New USB device found, idVendor=0582, idProduct=0012, bcdDevice=e2.be [ 285.119519][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.395870][ T5842] usb 3-1: Product: syz [ 285.401295][ T5842] usb 3-1: Manufacturer: syz [ 285.405980][ T5842] usb 3-1: SerialNumber: syz [ 285.408725][ T8073] netlink: 96 bytes leftover after parsing attributes in process `syz.1.540'. [ 285.417321][ T8044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.428090][ T8044] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 285.855410][ T8074] netlink: 208 bytes leftover after parsing attributes in process `syz.4.539'. [ 285.874943][ T8074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.539'. [ 287.604162][ T5842] usb 3-1: can't set config #187, error -71 [ 287.631484][ T5842] usb 3-1: USB disconnect, device number 31 [ 288.261885][ T8091] /dev/nullb0: Can't open blockdev [ 292.670189][ T3091] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 292.848288][ T3091] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 292.900321][ T3091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.908404][ T3091] usb 4-1: Product: syz [ 292.939994][ T3091] usb 4-1: Manufacturer: syz [ 292.944765][ T3091] usb 4-1: SerialNumber: syz [ 293.023089][ T3091] usb 4-1: config 0 descriptor?? [ 293.032388][ T8119] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.551'. [ 293.384523][ T3091] usb 4-1: ignoring: probably an ADSL modem [ 294.700872][ T3091] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 294.840908][ T3091] usb 4-1: USB disconnect, device number 27 [ 296.542241][ T8149] evm: overlay not supported [ 297.616885][ T8161] netlink: 336 bytes leftover after parsing attributes in process `syz.0.561'. [ 297.654050][ T8161] netlink: 'syz.0.561': attribute type 2 has an invalid length. [ 297.690015][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 297.755205][ T8159] netlink: 'syz.2.562': attribute type 39 has an invalid length. [ 297.870004][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 297.904950][ T43] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 298.204469][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.313741][ T43] usb 5-1: Product: syz [ 298.466166][ T43] usb 5-1: Manufacturer: syz [ 298.551219][ T43] usb 5-1: SerialNumber: syz [ 298.922489][ T43] usb 5-1: config 0 descriptor?? [ 299.131332][ T43] gspca_main: se401-2.14.0 probing 047d:5003 [ 299.317393][ T8177] tipc: Can't bind to reserved service type 1 [ 299.629814][ T43] gspca_se401: ExtraFeatures: 24 [ 299.855668][ T43] input: se401 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 299.914324][ T43] usb 5-1: USB disconnect, device number 37 [ 300.001392][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 300.001411][ T30] audit: type=1326 audit(1755479388.200:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8194 comm="syz.0.570" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c8d58ebe9 code=0x0 [ 300.083642][ T8199] netlink: 8 bytes leftover after parsing attributes in process `syz.0.570'. [ 300.098646][ T8199] nbd: must specify a size in bytes for the device [ 300.899749][ T43] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 301.132092][ T43] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 301.145160][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.212168][ T43] usb 5-1: config 0 descriptor?? [ 301.250639][ T43] cp210x 5-1:0.0: cp210x converter detected [ 301.932005][ T43] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -32 [ 302.005866][ T43] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 302.180795][ T43] usb 5-1: cp210x converter now attached to ttyUSB0 [ 302.708976][ T8231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.577'. [ 303.302869][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 303.540044][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 303.684706][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.709558][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.726168][ T43] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.762014][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.801523][ T43] usb 3-1: config 0 descriptor?? [ 303.851846][ T43] hub 3-1:0.0: USB hub found [ 303.856908][ T5842] usb 5-1: USB disconnect, device number 38 [ 303.877695][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 303.887481][ T5842] cp210x 5-1:0.0: device disconnected [ 304.072815][ T43] hub 3-1:0.0: 1 port detected [ 304.674073][ T43] hub 3-1:0.0: activate --> -90 [ 304.819175][ T5842] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 304.979244][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 304.991892][ T5842] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.002101][ T5842] usb 2-1: no configurations [ 305.006783][ T5842] usb 2-1: can't read configurations, error -22 [ 305.085437][ T24] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 305.105176][ T8233] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 305.139099][ T5842] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 305.139549][ T5978] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 305.299790][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 305.301338][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 305.314641][ T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 305.334715][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.344444][ T5842] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.344883][ T5978] usb 5-1: too many configurations: 41, using maximum allowed: 8 [ 305.358061][ T5842] usb 2-1: no configurations [ 305.396237][ T5842] usb 2-1: can't read configurations, error -22 [ 305.405429][ T5842] usb usb2-port1: attempt power cycle [ 305.408006][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 305.421275][ T24] pvrusb2: Hardware description: Terratec Grabster AV400 [ 305.442272][ T24] pvrusb2: ********** [ 305.446397][ T5978] usb 5-1: can't read configurations, error -61 [ 305.455006][ T5913] usb 3-1: USB disconnect, device number 32 [ 305.463419][ T24] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 305.476767][ T24] pvrusb2: Important functionality might not be entirely working. [ 305.487348][ T24] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 305.499667][ T43] usb 3-1-port1: config error [ 305.524174][ T24] pvrusb2: ********** [ 305.594008][ T2344] pvrusb2: Invalid write control endpoint [ 305.609511][ T5978] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 305.706713][ T2344] pvrusb2: Invalid write control endpoint [ 305.728705][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 305.748351][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 305.756657][ T5842] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 305.775716][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 305.797208][ T2344] pvrusb2: Device being rendered inoperable [ 305.799345][ T5978] usb 5-1: too many configurations: 41, using maximum allowed: 8 [ 305.805929][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 305.829021][ T8254] pvrusb2: Attempted to execute control transfer when device not ok [ 305.833879][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 305.845062][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 305.852776][ T5906] usb 1-1: USB disconnect, device number 17 [ 305.859887][ T5842] usb 2-1: unable to get BOS descriptor or descriptor too short [ 305.867716][ T5842] usb 2-1: no configurations [ 305.881159][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 305.895866][ T5842] usb 2-1: can't read configurations, error -22 [ 305.905915][ T2344] pvrusb2: Attached sub-driver cx25840 [ 305.912132][ T5978] usb 5-1: can't read configurations, error -61 [ 305.919212][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 305.919261][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 306.027605][ T5978] usb usb5-port1: attempt power cycle [ 306.041992][ T5842] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 306.048212][ T8273] tmpfs: Unknown parameter 'quotausrqegta_inode_hardl;y~' [ 306.079608][ T5842] usb 2-1: Using ep0 maxpacket: 32 [ 306.093866][ T5842] usb 2-1: unable to get BOS descriptor or descriptor too short [ 306.109434][ T5842] usb 2-1: no configurations [ 306.120281][ T5842] usb 2-1: can't read configurations, error -22 [ 306.135881][ T5842] usb usb2-port1: unable to enumerate USB device [ 306.409176][ T5978] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 307.350849][ T5978] usb 5-1: too many configurations: 41, using maximum allowed: 8 [ 307.362158][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 307.372125][ T5978] usb 5-1: can't read configurations, error -61 [ 307.518849][ T5978] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 307.561219][ T5978] usb 5-1: too many configurations: 41, using maximum allowed: 8 [ 307.595974][ T5978] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 307.627576][ T5978] usb 5-1: can't read configurations, error -61 [ 307.671706][ T5978] usb usb5-port1: unable to enumerate USB device [ 309.079624][ T8298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.596'. [ 309.512132][ T8317] netlink: 'syz.1.602': attribute type 11 has an invalid length. [ 309.608522][ T5906] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 309.658658][ T5842] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 309.772670][ T8321] fuse: blksize only supported for fuseblk [ 309.782650][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 309.844278][ T5842] usb 4-1: unable to get BOS descriptor or descriptor too short [ 309.867367][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.935506][ T5842] usb 4-1: not running at top speed; connect to a high speed hub [ 309.954000][ T5906] usb 3-1: not running at top speed; connect to a high speed hub [ 309.996295][ T5842] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 310.019939][ T9] usb 1-1: device descriptor read/64, error -71 [ 310.044867][ T5906] usb 3-1: config 6 has an invalid interface number: 208 but max is 0 [ 310.080472][ T5842] usb 4-1: config 0 has no interface number 0 [ 310.099469][ T5906] usb 3-1: config 6 has no interface number 0 [ 310.105915][ T5906] usb 3-1: config 6 interface 208 has no altsetting 0 [ 310.147982][ T5842] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 310.221933][ T5906] usb 3-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=23.c2 [ 310.264009][ T5842] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 310.278754][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.297634][ T5842] usb 4-1: config 0 interface 88 has no altsetting 0 [ 310.304715][ T5906] usb 3-1: Product: syz [ 310.309525][ T5906] usb 3-1: Manufacturer: syz [ 310.314162][ T5906] usb 3-1: SerialNumber: syz [ 310.320745][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 310.347017][ T5842] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 310.361849][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 310.476361][ T8325] netlink: 8 bytes leftover after parsing attributes in process `syz.4.604'. [ 311.585143][ T5842] usb 4-1: Product: syz [ 311.591481][ T5906] qmi_wwan 3-1:6.208: invalid descriptor buffer length [ 311.602866][ T5842] usb 4-1: SerialNumber: syz [ 311.626743][ T5906] qmi_wwan 3-1:6.208: probe with driver qmi_wwan failed with error -22 [ 311.636810][ T5842] usb 4-1: config 0 descriptor?? [ 311.641971][ T9] usb 1-1: device descriptor read/64, error -71 [ 311.660687][ T5906] usb 3-1: USB disconnect, device number 33 [ 311.758813][ T9] usb usb1-port1: attempt power cycle [ 311.880104][ T5842] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input16 [ 311.927084][ T5842] usb 4-1: USB disconnect, device number 28 [ 312.108392][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 312.151977][ T9] usb 1-1: device descriptor read/8, error -71 [ 312.438268][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 312.546640][ T9] usb 1-1: device descriptor read/8, error -71 [ 312.673800][ T9] usb usb1-port1: unable to enumerate USB device [ 312.714906][ T8352] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20000 [ 313.159111][ T5978] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 313.419039][ T8360] netlink: set zone limit has 4 unknown bytes [ 315.772404][ T8368] veth0_to_team: entered promiscuous mode [ 315.781269][ T8368] veth0_to_team: entered allmulticast mode [ 316.131712][ T8371] netlink: 'syz.3.614': attribute type 1 has an invalid length. [ 316.315720][ T8383] netlink: 14 bytes leftover after parsing attributes in process `syz.2.617'. [ 316.385680][ T8383] netlink: 'syz.2.617': attribute type 10 has an invalid length. [ 316.587311][ T8383] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 317.444232][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.451017][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.617555][ T5978] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 317.727676][ T43] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 317.788037][ T5978] usb 5-1: Using ep0 maxpacket: 32 [ 317.796394][ T5978] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.829179][ T5978] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.861464][ T5978] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 22 [ 317.877049][ T5978] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.899135][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 318.073037][ T43] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 318.087265][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.105963][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 318.106273][ T43] usb 2-1: config 0 descriptor?? [ 318.128034][ T5978] usb 5-1: SerialNumber: syz [ 318.145988][ T5978] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 318.163222][ T5978] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 318.193381][ T5978] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 318.218484][ T43] gspca_main: sunplus-2.14.0 probing 041e:400b [ 318.389014][ T8410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.398375][ T8410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.412810][ T24] usb 5-1: USB disconnect, device number 43 [ 318.466667][ T8426] netlink: 'syz.2.629': attribute type 11 has an invalid length. [ 318.617768][ T5978] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 318.787545][ T5978] usb 4-1: Using ep0 maxpacket: 16 [ 318.804782][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 245, changing to 11 [ 318.900012][ T43] gspca_sunplus: reg_r err -32 [ 318.905385][ T43] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 319.047056][ T8413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.258761][ T8413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.287479][ T5978] usb 4-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.00 [ 320.296624][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.527677][ T43] usb 2-1: USB disconnect, device number 25 [ 320.541966][ T8436] can0: slcan on ttyS3. [ 320.618593][ T5978] usb 4-1: config 0 descriptor?? [ 320.638695][ T8436] can0 (unregistered): slcan off ttyS3. [ 320.977581][ T5913] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 321.058649][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.109185][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.377362][ T5913] usb 5-1: Invalid ep0 maxpacket: 64 [ 321.413156][ T9] usb 4-1: USB disconnect, device number 29 [ 322.238004][ T5913] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 322.447320][ T5913] usb 5-1: Invalid ep0 maxpacket: 64 [ 322.483864][ T5913] usb usb5-port1: attempt power cycle [ 322.957257][ T5913] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 323.082292][ T5913] usb 5-1: Invalid ep0 maxpacket: 64 [ 323.328810][ T5913] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 323.407898][ T5913] usb 5-1: Invalid ep0 maxpacket: 64 [ 323.431338][ T5913] usb usb5-port1: unable to enumerate USB device [ 323.544229][ T8472] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.628498][ T43] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 323.673887][ T8472] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.777683][ T43] usb 2-1: device descriptor read/64, error -71 [ 323.912190][ T8472] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.068603][ T43] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 324.132890][ T8472] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.246986][ T43] usb 2-1: device descriptor read/64, error -71 [ 324.368322][ T43] usb usb2-port1: attempt power cycle [ 324.372549][ T8472] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.404468][ T8472] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.469816][ T8472] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.531158][ T8472] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.614186][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 324.726932][ T43] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 324.736777][ T5913] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 324.766726][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 324.778176][ T43] usb 2-1: device descriptor read/8, error -71 [ 324.778262][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 324.828146][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 83, changing to 7 [ 324.866744][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.877604][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.886146][ T9] usb 5-1: Product: syz [ 324.891026][ T9] usb 5-1: Manufacturer: syz [ 324.895678][ T9] usb 5-1: SerialNumber: syz [ 324.916843][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 324.938794][ T5913] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 324.956993][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 324.976670][ T5913] usb 1-1: Product: syz [ 324.981566][ T5913] usb 1-1: Manufacturer: syz [ 324.991702][ T5913] usb 1-1: SerialNumber: syz [ 325.006458][ T5913] usb 1-1: config 0 descriptor?? [ 325.027063][ T43] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 325.057687][ T43] usb 2-1: device descriptor read/8, error -71 [ 325.125785][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.145251][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.167618][ T43] usb usb2-port1: unable to enumerate USB device [ 325.177561][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.215576][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.258247][ T8501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.308293][ T8502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.319996][ T8501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.330509][ T8502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.337543][ T8482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.356330][ T8482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.487397][ T9] usb 5-1: 2:1 : unsupported format bits 0x80 [ 325.497378][ T5913] usb 1-1: USB disconnect, device number 23 [ 325.616150][ T9] usb 5-1: USB disconnect, device number 48 [ 325.770706][ T7245] udevd[7245]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 326.115904][ T8514] tipc: Failed to remove unknown binding: 66,1,1/5:1388674090/1388674092 [ 326.167315][ T8520] tipc: Failed to remove unknown binding: 66,1,1/5:1388674090/1388674092 [ 326.208553][ T8520] tipc: Failed to remove unknown binding: 66,1,1/5:1388674090/1388674092 [ 326.675311][ T8522] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.371982][ T8548] tipc: Enabling of bearer rejected, failed to enable media [ 332.066412][ T43] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 333.216201][ T5906] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 333.235678][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 333.398888][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.430001][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 333.474894][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 333.493432][ T8574] bond0: entered promiscuous mode [ 333.524217][ T8574] bond_slave_0: entered promiscuous mode [ 333.784262][ T5906] usb 5-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 333.804798][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.824183][ T5906] usb 5-1: Product: syz [ 333.833366][ T5906] usb 5-1: Manufacturer: syz [ 333.845642][ T5906] usb 5-1: SerialNumber: syz [ 333.862048][ T5906] usb 5-1: config 0 descriptor?? [ 333.892281][ T8574] bond_slave_1: entered promiscuous mode [ 333.978646][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.673'. [ 334.049858][ T5906] usb 5-1: Found UVC 34.00 device syz (8086:0b5b) [ 334.081012][ T5906] usb 5-1: No valid video chain found. [ 334.156040][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 334.165929][ T43] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 334.176982][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 334.196838][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 334.223599][ T43] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 334.260506][ T43] usb 3-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 334.281177][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.301321][ T5926] usb 5-1: USB disconnect, device number 49 [ 334.309768][ T43] usb 3-1: Product: syz [ 334.326204][ T43] usb 3-1: Manufacturer: syz [ 334.335174][ T43] usb 3-1: SerialNumber: syz [ 334.459989][ T43] usb 3-1: config 0 descriptor?? [ 334.508271][ T8584] netlink: 36 bytes leftover after parsing attributes in process `syz.1.674'. [ 334.524427][ T8561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 334.542285][ T8561] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 334.752916][ T8592] netem: change failed [ 334.839821][ T43] mcba_usb 3-1:0.0: Microchip CAN BUS Analyzer connected [ 334.839945][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 334.842685][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.847544][ C1] mcba_usb 3-1:0.0 can0: Tx URB aborted (-71) [ 334.861457][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.497908][ T5906] usb 3-1: USB disconnect, device number 35 [ 335.557518][ T5906] mcba_usb 3-1:0.0 can0: device disconnected [ 335.900515][ T30] audit: type=1326 audit(1755479424.105:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.063744][ T30] audit: type=1326 audit(1755479424.105:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.086580][ T30] audit: type=1326 audit(1755479424.195:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.109016][ T30] audit: type=1326 audit(1755479424.195:88): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.132753][ T30] audit: type=1326 audit(1755479424.195:89): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.225316][ T30] audit: type=1326 audit(1755479424.195:90): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.326528][ T30] audit: type=1326 audit(1755479424.195:91): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.548955][ T30] audit: type=1326 audit(1755479424.195:92): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.606513][ T3091] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 336.622500][ T30] audit: type=1326 audit(1755479424.215:93): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.747951][ T30] audit: type=1326 audit(1755479424.215:94): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=8605 comm="syz.3.680" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9df98ebe9 code=0x7ffc0000 [ 336.809880][ T3091] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 336.830215][ T3091] usb 4-1: config 1 has no interface number 1 [ 336.863649][ T3091] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 336.954666][ T3091] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 336.991247][ T3091] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.029377][ T3091] usb 4-1: Product: syz [ 337.066889][ T3091] usb 4-1: Manufacturer: syz [ 337.110987][ T3091] usb 4-1: SerialNumber: syz [ 337.747129][ T3091] usb 4-1: found format II with max.bitrate = 26774, frame size=1 [ 337.766149][ T3091] usb 4-1: found format II with max.bitrate = 26774, frame size=1 [ 337.800844][ T3091] usb 4-1: failed to enable PITCH for EP 0x82 [ 338.334448][ T8636] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 338.491499][ T3091] usb 4-1: USB disconnect, device number 30 [ 338.867056][ T7214] udevd[7214]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 339.645465][ T8648] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.895173][ T3091] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 340.007211][ T8669] fuse: Bad value for 'user_id' [ 340.012953][ T8669] fuse: Bad value for 'user_id' [ 340.054946][ T3091] usb 4-1: device descriptor read/64, error -71 [ 340.125309][ T5913] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 340.275145][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 340.283290][ T5913] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 340.295824][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 340.306854][ T3091] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 340.319841][ T5913] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.330690][ T5913] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.344533][ T5913] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 340.355481][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.446215][ T3091] usb 4-1: device descriptor read/64, error -71 [ 340.565233][ T3091] usb usb4-port1: attempt power cycle [ 340.579919][ T5913] usb 1-1: GET_CAPABILITIES returned 0 [ 340.587242][ T5913] usbtmc 1-1:16.0: can't read capabilities [ 340.796865][ T8659] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 340.850792][ T8659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.905161][ T3091] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 340.986771][ T3091] usb 4-1: device descriptor read/8, error -71 [ 341.021283][ T8659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.182914][ T8688] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.218749][ T9] usb 1-1: USB disconnect, device number 24 [ 341.305581][ T8688] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.415285][ T5926] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 341.424669][ T3091] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 341.456839][ T3091] usb 4-1: device descriptor read/8, error -71 [ 341.595485][ T3091] usb usb4-port1: unable to enumerate USB device [ 341.736304][ T5926] usb 5-1: unable to get BOS descriptor or descriptor too short [ 342.406592][ T5926] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.426001][ T43] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 342.434727][ T5926] usb 5-1: config 1 interface 0 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 342.447980][ T5926] usb 5-1: config 1 interface 0 has no altsetting 0 [ 342.458334][ T5926] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 342.484557][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.497000][ T5926] usb 5-1: Product: syz [ 342.501232][ T5926] usb 5-1: Manufacturer: syz [ 342.506678][ T5926] usb 5-1: SerialNumber: syz [ 342.560974][ T5840] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 342.575820][ T43] usb 3-1: device descriptor read/64, error -71 [ 342.704944][ T5913] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 342.738470][ T5926] usb 5-1: USB disconnect, device number 50 [ 342.821372][ T43] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 342.869694][ T5913] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 342.869729][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.869751][ T5913] usb 2-1: Product: syz [ 342.869767][ T5913] usb 2-1: Manufacturer: syz [ 342.869783][ T5913] usb 2-1: SerialNumber: syz [ 342.891394][ T5913] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 342.930482][ T5913] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 342.974868][ T43] usb 3-1: device descriptor read/64, error -71 [ 343.099812][ T43] usb usb3-port1: attempt power cycle [ 343.325830][ T8716] netlink: 'syz.4.709': attribute type 11 has an invalid length. [ 343.375628][ T9] usb 2-1: USB disconnect, device number 30 [ 343.445400][ T43] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 343.498543][ T43] usb 3-1: device descriptor read/8, error -71 [ 343.684447][ T5926] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 343.755936][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 343.795355][ T43] usb 3-1: device descriptor read/8, error -71 [ 343.814793][ T5906] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 343.826457][ T8723] loop6: detected capacity change from 0 to 63 [ 343.834521][ T5926] usb 1-1: Using ep0 maxpacket: 16 [ 343.844525][ T7245] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.853096][ T7245] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.868573][ T5926] usb 1-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 343.869981][ T7245] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.885905][ T5926] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.885935][ T5926] usb 1-1: Product: syz [ 343.885951][ T5926] usb 1-1: Manufacturer: syz [ 343.885967][ T5926] usb 1-1: SerialNumber: syz [ 343.889874][ T5926] usb 1-1: config 0 descriptor?? [ 343.910679][ T7245] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.932487][ T43] usb usb3-port1: unable to enumerate USB device [ 343.940894][ T7245] Buffer I/O error on dev loop6, logical block 0, async page read [ 343.957244][ T5926] ums-onetouch 1-1:0.0: USB Mass Storage device detected [ 343.964736][ T5906] usb 5-1: Using ep0 maxpacket: 32 [ 343.972332][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 343.992117][ T5906] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 344.002189][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.005685][ T5913] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 344.019108][ T5906] usb 5-1: Product: syz [ 344.023556][ T5906] usb 5-1: Manufacturer: syz [ 344.024736][ T5913] ath9k_htc: Failed to initialize the device [ 344.041073][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 344.065290][ T5906] usb 5-1: SerialNumber: syz [ 344.092761][ T5906] usb 5-1: config 0 descriptor?? [ 345.394454][ T5906] gs_usb 5-1:0.0: Couldn't send data format (err=-110) [ 345.401508][ T5906] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -110 [ 345.629513][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 346.402073][ T5926] usb 1-1: USB disconnect, device number 25 [ 346.537492][ T9] usb 2-1: device descriptor read/64, error -71 [ 346.719926][ T43] usb 5-1: USB disconnect, device number 51 [ 346.794077][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 346.880488][ T8752] FAULT_INJECTION: forcing a failure. [ 346.880488][ T8752] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 346.950150][ T8752] CPU: 1 UID: 0 PID: 8752 Comm: syz.2.716 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 346.950179][ T8752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 346.950191][ T8752] Call Trace: [ 346.950200][ T8752] [ 346.950210][ T8752] dump_stack_lvl+0x189/0x250 [ 346.950239][ T8752] ? __pfx____ratelimit+0x10/0x10 [ 346.950262][ T8752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 346.950285][ T8752] ? __pfx__printk+0x10/0x10 [ 346.950329][ T8752] should_fail_ex+0x414/0x560 [ 346.950359][ T8752] _copy_from_user+0x2d/0xb0 [ 346.950390][ T8752] memdup_user_nul+0x66/0x110 [ 346.950419][ T8752] smk_write_rules_list+0xc5/0x370 [ 346.950457][ T8752] ? __pfx_smk_write_load_self2+0x10/0x10 [ 346.950484][ T8752] vfs_write+0x27e/0xa90 [ 346.950516][ T8752] ? __pfx_vfs_write+0x10/0x10 [ 346.950539][ T8752] ? __fget_files+0x2a/0x420 [ 346.950568][ T8752] ? __fget_files+0x3a0/0x420 [ 346.950591][ T8752] ? __fget_files+0x2a/0x420 [ 346.950626][ T8752] ksys_write+0x145/0x250 [ 346.950650][ T8752] ? __pfx_ksys_write+0x10/0x10 [ 346.950666][ T8752] ? rcu_is_watching+0x15/0xb0 [ 346.950696][ T8752] ? do_syscall_64+0xbe/0x3b0 [ 346.950723][ T8752] do_syscall_64+0xfa/0x3b0 [ 346.950744][ T8752] ? lockdep_hardirqs_on+0x9c/0x150 [ 346.950766][ T8752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.950786][ T8752] ? clear_bhb_loop+0x60/0xb0 [ 346.950812][ T8752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.950832][ T8752] RIP: 0033:0x7fc61f18ebe9 [ 346.950858][ T8752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 346.950876][ T8752] RSP: 002b:00007fc61ffd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 346.950899][ T8752] RAX: ffffffffffffffda RBX: 00007fc61f3b6090 RCX: 00007fc61f18ebe9 [ 346.950915][ T8752] RDX: 00000000fffffd81 RSI: 00002000000001c0 RDI: 0000000000000005 [ 346.950928][ T8752] RBP: 00007fc61ffd2090 R08: 0000000000000000 R09: 0000000000000000 [ 346.950939][ T8752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.950952][ T8752] R13: 00007fc61f3b6128 R14: 00007fc61f3b6090 R15: 00007ffd027cdaa8 [ 346.950998][ T8752] [ 349.946743][ T8784] netlink: 'syz.2.725': attribute type 11 has an invalid length. [ 350.791547][ T8796] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 350.816312][ T9] IPVS: starting estimator thread 0... [ 350.903619][ T8798] IPVS: using max 45 ests per chain, 108000 per kthread [ 350.973624][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 351.173006][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 351.207572][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 351.245251][ T9] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 351.294779][ T9] usb 2-1: config 13 has no interface number 0 [ 351.324396][ T9] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 351.387622][ T9] usb 2-1: config 13 interface 50 has no altsetting 0 [ 351.419740][ T9] usb 2-1: New USB device found, idVendor=0eca, idProduct=b28e, bcdDevice=92.3a [ 351.440046][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.461975][ T9] usb 2-1: Product: syz [ 351.471252][ T9] usb 2-1: Manufacturer: syz [ 351.489263][ T9] usb 2-1: SerialNumber: syz [ 351.516389][ T8795] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 351.551717][ T8807] nfs4: Unknown parameter '/2/:S|IO' [ 351.689509][ T30] kauditd_printk_skb: 39 callbacks suppressed [ 351.689532][ T30] audit: type=1326 audit(1755479439.886:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 351.774302][ T30] audit: type=1326 audit(1755479439.886:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 351.839885][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 351.847163][ T9] usb 2-1: MIDIStreaming interface descriptor not found [ 351.881344][ T30] audit: type=1326 audit(1755479439.886:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 351.963730][ T30] audit: type=1326 audit(1755479439.886:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 352.030254][ T9] usb 2-1: USB disconnect, device number 33 [ 352.051225][ T30] audit: type=1326 audit(1755479439.886:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 352.134601][ T8816] No such timeout policy "syz0" [ 352.181830][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.239692][ T30] audit: type=1326 audit(1755479439.886:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 352.357134][ T30] audit: type=1326 audit(1755479439.886:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 352.383496][ T10] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 352.441444][ T30] audit: type=1326 audit(1755479439.886:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 352.501413][ T30] audit: type=1326 audit(1755479439.886:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 352.561315][ T30] audit: type=1326 audit(1755479439.886:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8794 comm="syz.2.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc61f18ebe9 code=0x7fc00000 [ 352.569929][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 352.614641][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 352.649560][ T10] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 352.668640][ T10] usb 3-1: config 129 has no interface number 0 [ 352.693424][ T10] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 352.840526][ T10] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 352.855799][ T10] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 352.869465][ T10] usb 3-1: config 129 interface 28 has no altsetting 0 [ 352.880138][ T10] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 352.907987][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.993089][ T10] usb 3-1: Product: syz [ 353.014108][ T10] usb 3-1: Manufacturer: syz [ 353.024495][ T10] usb 3-1: SerialNumber: syz [ 353.048844][ T8816] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 353.384897][ T8834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.409993][ T8834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.638288][ T10] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 354.093960][ T5913] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 354.345717][ T10] etas_es58x 3-1:129.28: could not retrieve the product info string [ 355.180375][ T8842] FAULT_INJECTION: forcing a failure. [ 355.180375][ T8842] name failslab, interval 1, probability 0, space 0, times 0 [ 355.784706][ T8842] CPU: 0 UID: 0 PID: 8842 Comm: syz.4.736 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 355.784738][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 355.784749][ T8842] Call Trace: [ 355.784757][ T8842] [ 355.784766][ T8842] dump_stack_lvl+0x189/0x250 [ 355.784796][ T8842] ? __pfx____ratelimit+0x10/0x10 [ 355.784819][ T8842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.784841][ T8842] ? __pfx__printk+0x10/0x10 [ 355.784876][ T8842] ? __pfx___might_resched+0x10/0x10 [ 355.784906][ T8842] should_fail_ex+0x414/0x560 [ 355.784935][ T8842] should_failslab+0xa8/0x100 [ 355.784960][ T8842] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 355.784982][ T8842] ? smk_parse_smack+0x1b1/0x1f0 [ 355.785019][ T8842] kstrndup+0x80/0x160 [ 355.785049][ T8842] smk_parse_smack+0x1b1/0x1f0 [ 355.785083][ T8842] smk_import_entry+0x20/0x1d0 [ 355.785120][ T8842] smk_fill_rule+0x52/0x630 [ 355.785158][ T8842] smk_parse_long_rule+0xbc3/0xee0 [ 355.785198][ T8842] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 355.785249][ T8842] smk_write_rules_list+0x239/0x370 [ 355.785287][ T8842] ? __pfx_smk_write_load_self2+0x10/0x10 [ 355.785313][ T8842] vfs_write+0x27e/0xa90 [ 355.785346][ T8842] ? __pfx_vfs_write+0x10/0x10 [ 355.785368][ T8842] ? __fget_files+0x2a/0x420 [ 355.785398][ T8842] ? __fget_files+0x3a0/0x420 [ 355.785419][ T8842] ? __fget_files+0x2a/0x420 [ 355.785455][ T8842] ksys_write+0x145/0x250 [ 355.785479][ T8842] ? __pfx_ksys_write+0x10/0x10 [ 355.785496][ T8842] ? rcu_is_watching+0x15/0xb0 [ 355.785526][ T8842] ? do_syscall_64+0xbe/0x3b0 [ 355.785563][ T8842] do_syscall_64+0xfa/0x3b0 [ 355.785585][ T8842] ? lockdep_hardirqs_on+0x9c/0x150 [ 355.785616][ T8842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.785637][ T8842] ? clear_bhb_loop+0x60/0xb0 [ 355.785664][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.785684][ T8842] RIP: 0033:0x7f4d5758ebe9 [ 355.785704][ T8842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.785722][ T8842] RSP: 002b:00007f4d58490038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 355.785745][ T8842] RAX: ffffffffffffffda RBX: 00007f4d577b6090 RCX: 00007f4d5758ebe9 [ 355.785760][ T8842] RDX: 00000000fffffd81 RSI: 00002000000001c0 RDI: 0000000000000005 [ 355.785773][ T8842] RBP: 00007f4d58490090 R08: 0000000000000000 R09: 0000000000000000 [ 355.785785][ T8842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.785797][ T8842] R13: 00007f4d577b6128 R14: 00007f4d577b6090 R15: 00007fff068d2208 [ 355.785833][ T8842] [ 356.197690][ T8844] netlink: 132 bytes leftover after parsing attributes in process `syz.0.737'. [ 356.310744][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.330607][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.365415][ T5913] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 356.408724][ T5913] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 356.449736][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.514048][ T5913] usb 2-1: config 0 descriptor?? [ 356.627293][ T10] usb 3-1: USB disconnect, device number 40 [ 356.645149][ T10] etas_es58x 3-1:129.28: Disconnecting syz syz [ 356.739930][ T8855] netlink: 'syz.0.740': attribute type 11 has an invalid length. [ 356.754893][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 356.760974][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 356.837190][ T5913] usb 2-1: USB disconnect, device number 34 [ 356.901392][ T8866] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 356.921244][ T8866] overlayfs: missing 'lowerdir' [ 356.994030][ T5207] udevd[5207]: worker [7245] terminated by signal 33 (Unknown signal 33) [ 357.034192][ T5207] udevd[5207]: worker [7245] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:129.28' [ 357.043395][ T5926] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 357.099104][ T8870] fuse: Unknown parameter 'fdUu0`9I@%{ [ 357.099104][ T8870] Fnl*rb7$|{ƕBK *ʸ)V'뤑7XQd>Y*@>%xsHdc_&?&II+\*G)1܆)m񂔷W%' [ 357.149997][ T8869] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551608) [ 357.160720][ T8869] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 357.221585][ T5926] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 357.263032][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 357.296283][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.472716][ T8880] netlink: 52 bytes leftover after parsing attributes in process `syz.1.747'. [ 357.490559][ T5926] usb 5-1: config 0 descriptor?? [ 357.553106][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 357.595557][ T10] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 357.604984][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.614488][ T5926] cp210x 5-1:0.0: cp210x converter detected [ 357.641755][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz.1.747'. [ 357.964277][ T10] usb 3-1: config 0 descriptor?? [ 358.064581][ T5926] usb 5-1: cp210x converter now attached to ttyUSB0 [ 358.081336][ T8880] syz.1.747 (8880) used greatest stack depth: 20160 bytes left [ 358.297547][ T8857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.741'. [ 358.338493][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 358.929863][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.266811][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 359.309697][ T10] usb 3-1: media controller created [ 359.385636][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.481125][ T10] az6027: usb out operation failed. (-71) [ 359.509207][ T10] az6027: usb out operation failed. (-71) [ 359.535539][ T10] stb0899_attach: Driver disabled by Kconfig [ 359.541622][ T10] az6027: no front-end attached [ 359.541622][ T10] [ 359.561419][ T10] az6027: usb out operation failed. (-71) [ 359.572190][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 359.588093][ T5913] usb 5-1: USB disconnect, device number 52 [ 359.590167][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 359.684502][ T5913] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 359.685280][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 359.732034][ T5913] cp210x 5-1:0.0: device disconnected [ 359.781626][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 359.832484][ T10] usb 3-1: USB disconnect, device number 41 [ 359.933679][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 360.273055][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 360.483478][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 360.525136][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 360.583403][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 360.596045][ T5926] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 360.658488][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.717112][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.769728][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.789057][ T5926] usb 5-1: Using ep0 maxpacket: 16 [ 360.814714][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.833256][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.853404][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.887699][ T5926] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 360.907516][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.932421][ T5906] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 360.953548][ T5926] usb 5-1: config 0 descriptor?? [ 361.146217][ T5906] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 361.156437][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.166194][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.759'. [ 361.170433][ T5906] usb 4-1: config 0 descriptor?? [ 361.183783][ T8921] netlink: 'syz.1.759': attribute type 2 has an invalid length. [ 361.222709][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 361.228955][ T5906] cp210x 4-1:0.0: cp210x converter detected [ 361.240008][ T10] usbtmc 3-1:16.0: can't read capabilities [ 361.246365][ T5926] usbhid 5-1:0.0: can't add hid device: -71 [ 361.260085][ T5926] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 361.272953][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 361.298140][ T5926] usb 5-1: USB disconnect, device number 53 [ 361.327642][ T8925] netlink: 'syz.1.760': attribute type 11 has an invalid length. [ 361.584482][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 361.604464][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.605923][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 361.616502][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.635970][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.658751][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.667918][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.694498][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.705237][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.716244][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.725403][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.734720][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.745972][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.756229][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.765350][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.776249][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.785516][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.796420][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 361.839112][ T8897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'. [ 361.898107][ T43] usb 3-1: USB disconnect, device number 42 [ 362.186387][ T5906] cp210x 4-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 362.195763][ T5906] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 362.202484][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.218090][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 362.238064][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=28e8, bcdDevice=f5.06 [ 362.288122][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.314970][ T9] usb 1-1: Product: syz [ 362.327435][ T5906] usb 4-1: cp210x converter now attached to ttyUSB0 [ 362.384059][ T9] usb 1-1: Manufacturer: syz [ 362.429495][ T9] usb 1-1: SerialNumber: syz [ 362.467614][ T8931] FAULT_INJECTION: forcing a failure. [ 362.467614][ T8931] name failslab, interval 1, probability 0, space 0, times 0 [ 362.557821][ T9] usb 1-1: config 0 descriptor?? [ 362.619375][ T8931] CPU: 0 UID: 0 PID: 8931 Comm: syz.1.761 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 362.619411][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.619424][ T8931] Call Trace: [ 362.619433][ T8931] [ 362.619442][ T8931] dump_stack_lvl+0x189/0x250 [ 362.619471][ T8931] ? __pfx____ratelimit+0x10/0x10 [ 362.619494][ T8931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.619517][ T8931] ? __pfx__printk+0x10/0x10 [ 362.619551][ T8931] ? __pfx___might_resched+0x10/0x10 [ 362.619589][ T8931] should_fail_ex+0x414/0x560 [ 362.619618][ T8931] should_failslab+0xa8/0x100 [ 362.619642][ T8931] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 362.619664][ T8931] ? smk_parse_smack+0x1b1/0x1f0 [ 362.619690][ T8931] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.619717][ T8931] kstrndup+0x80/0x160 [ 362.619745][ T8931] smk_parse_smack+0x1b1/0x1f0 [ 362.619777][ T8931] smk_import_entry+0x20/0x1d0 [ 362.619809][ T8931] smk_fill_rule+0xb6/0x630 [ 362.619843][ T8931] smk_parse_long_rule+0xbc3/0xee0 [ 362.619874][ T8931] ? irqentry_exit+0x74/0x90 [ 362.619901][ T8931] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 362.619939][ T8931] ? smk_write_rules_list+0x183/0x370 [ 362.619976][ T8931] smk_write_rules_list+0x239/0x370 [ 362.620013][ T8931] ? __pfx_smk_write_load_self2+0x10/0x10 [ 362.620039][ T8931] vfs_write+0x27e/0xa90 [ 362.620070][ T8931] ? __pfx_vfs_write+0x10/0x10 [ 362.620091][ T8931] ? __fget_files+0x2a/0x420 [ 362.620119][ T8931] ? __fget_files+0x3a0/0x420 [ 362.620139][ T8931] ? __fget_files+0x2a/0x420 [ 362.620173][ T8931] ksys_write+0x145/0x250 [ 362.620196][ T8931] ? __pfx_ksys_write+0x10/0x10 [ 362.620211][ T8931] ? rcu_is_watching+0x15/0xb0 [ 362.620240][ T8931] ? do_syscall_64+0xbe/0x3b0 [ 362.620267][ T8931] do_syscall_64+0xfa/0x3b0 [ 362.620288][ T8931] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.620308][ T8931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.620327][ T8931] ? clear_bhb_loop+0x60/0xb0 [ 362.620352][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.620372][ T8931] RIP: 0033:0x7f8936f8ebe9 [ 362.620390][ T8931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.620407][ T8931] RSP: 002b:00007f8937e02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 362.620429][ T8931] RAX: ffffffffffffffda RBX: 00007f89371b6090 RCX: 00007f8936f8ebe9 [ 362.620443][ T8931] RDX: 00000000fffffd81 RSI: 00002000000001c0 RDI: 0000000000000005 [ 362.620456][ T8931] RBP: 00007f8937e02090 R08: 0000000000000000 R09: 0000000000000000 [ 362.620469][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.620481][ T8931] R13: 00007f89371b6128 R14: 00007f89371b6090 R15: 00007fffab458ab8 [ 362.620516][ T8931] [ 363.832738][ T43] usb 4-1: USB disconnect, device number 35 [ 363.862509][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 363.877065][ T43] cp210x 4-1:0.0: device disconnected [ 364.245297][ T9] usb 1-1: USB disconnect, device number 26 [ 364.285499][ T43] kernel write not supported for file /dsp (pid: 43 comm: kworker/1:1) [ 364.331621][ T8319] udevd[8319]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.622860][ T43] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 365.483269][ T43] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 365.493183][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.514112][ T43] usb 2-1: config 0 descriptor?? [ 365.531386][ T43] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 366.595973][ T8956] netlink: 'syz.0.769': attribute type 3 has an invalid length. [ 366.813104][ T8969] netlink: 'syz.3.771': attribute type 11 has an invalid length. [ 367.082336][ T43] gspca_cpia1: usb_control_msg 03, error -71 [ 367.922804][ T43] gspca_cpia1: usb_control_msg 01, error -71 [ 367.929029][ T43] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 367.944174][ T43] usb 2-1: USB disconnect, device number 35 [ 369.226038][ T8990] usb usb1: usbfs: process 8990 (syz.3.779) did not claim interface 0 before use [ 370.131762][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 370.139664][ T5906] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 370.304019][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 370.314887][ T5906] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 370.353846][ T9] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 370.368913][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.379053][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.400709][ T5906] usb 5-1: config 0 descriptor?? [ 370.430769][ T9] usb 2-1: config 0 descriptor?? [ 370.459129][ T5906] cp210x 5-1:0.0: cp210x converter detected [ 370.839061][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.878295][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.003473][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.102845][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.136992][ T5906] cp210x 5-1:0.0: failed to get vendor val 0x370c size 13: -121 [ 371.206536][ T5906] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 371.503752][ T5906] usb 5-1: cp210x converter now attached to ttyUSB0 [ 371.779986][ T9] usb 2-1: string descriptor 0 read error: -71 [ 372.122775][ T9] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 372.241660][ T9] asix 2-1:0.0: probe with driver asix failed with error -71 [ 372.389651][ T9] usb 2-1: USB disconnect, device number 36 [ 372.573153][ T5978] usb 5-1: USB disconnect, device number 54 [ 372.691972][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 372.909920][ T5978] cp210x 5-1:0.0: device disconnected [ 373.407564][ T9024] netlink: 'syz.3.786': attribute type 11 has an invalid length. [ 373.572142][ T9027] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 374.167350][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 374.391607][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.454993][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 374.478015][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 374.507711][ T9] usb 4-1: Product: syz [ 374.528121][ T9] usb 4-1: Manufacturer: syz [ 374.545347][ T9] usb 4-1: SerialNumber: syz [ 374.785215][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 375.039225][ T9053] binder: 9035:9053 unknown command 0 [ 375.060699][ T9053] binder: 9035:9053 ioctl c0306201 200000000c40 returned -22 [ 377.918486][ T9073] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.561704][ T9076] netlink: 'syz.1.800': attribute type 11 has an invalid length. [ 378.850165][ T9] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 378.932101][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.938798][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.180556][ T9089] 9pnet_fd: Insufficient options for proto=fd [ 379.209339][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 379.352899][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 379.380150][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.410413][ T9] usb 3-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 379.423527][ T9] usb 3-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 379.444979][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.464609][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.475271][ T9] usb 3-1: Product: syz [ 379.479574][ T9] usb 3-1: Manufacturer: syz [ 379.484828][ T9] usb 3-1: SerialNumber: syz [ 379.594266][ T9097] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 379.603226][ T9097] macvtap1: entered allmulticast mode [ 379.609918][ T9097] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 379.630619][ T9097] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 379.645392][ T9097] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 379.700554][ T9102] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 379.707971][ T9102] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 379.718324][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 379.718343][ T30] audit: type=1326 audit(1755479467.930:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9095 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 379.751621][ T30] audit: type=1326 audit(1755479467.960:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9095 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 379.803991][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.825901][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.841154][ T30] audit: type=1326 audit(1755479467.960:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9095 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 379.905241][ T30] audit: type=1326 audit(1755479467.960:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9095 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 379.944829][ T30] audit: type=1326 audit(1755479467.960:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9095 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 379.957084][ T9] usb 3-1: USB disconnect, device number 43 [ 380.428225][ T8945] udevd[8945]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.830876][ T30] audit: type=1326 audit(1755479467.960:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9095 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 380.882801][ T30] audit: type=1326 audit(1755479467.960:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9095 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 380.989168][ T30] audit: type=1326 audit(1755479467.960:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9095 comm="syz.4.808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d5758ebe9 code=0x7ffc0000 [ 381.094827][ T9115] openvswitch: netlink: Message has 8 unknown bytes. [ 381.520099][ T9121] netlink: 20 bytes leftover after parsing attributes in process `syz.1.813'. [ 381.733442][ T9] usb 4-1: USB disconnect, device number 36 [ 381.746955][ T9] usblp0: removed [ 382.041319][ T9131] pim6reg1: entered promiscuous mode [ 382.072762][ T9131] pim6reg1: entered allmulticast mode [ 382.101682][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.1.815'. [ 382.117926][ T9135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.206460][ T9135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.209385][ T9133] fuse: Bad value for 'user_id' [ 382.220033][ T9133] fuse: Bad value for 'user_id' [ 382.316493][ T9138] netlink: 9896 bytes leftover after parsing attributes in process `syz.1.815'. [ 382.337840][ T9138] netlink: del zone limit has 4 unknown bytes [ 382.349898][ T5842] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 382.594631][ T5842] usb 3-1: no configurations [ 382.610199][ T5842] usb 3-1: can't read configurations, error -22 [ 383.129717][ T5842] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 383.740660][ T5842] usb 3-1: no configurations [ 383.745411][ T5842] usb 3-1: can't read configurations, error -22 [ 384.572763][ T5842] usb usb3-port1: attempt power cycle [ 384.960877][ T5913] libceph: connect (1)[c::]:6789 error -101 [ 384.967627][ T5913] libceph: mon0 (1)[c::]:6789 connect error [ 384.990148][ T5842] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 384.999091][ T9159] ceph: No mds server is up or the cluster is laggy [ 385.067761][ T5842] usb 3-1: device descriptor read/8, error -71 [ 386.134116][ T9181] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 386.741579][ T9182] mkiss: ax0: crc mode is auto. [ 387.889523][ T5913] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 388.052673][ T30] audit: type=1326 audit(1755479476.261:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8936f8ebe9 code=0x7ffc0000 [ 388.094991][ T5913] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 388.109090][ T30] audit: type=1326 audit(1755479476.291:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f8936f8ebe9 code=0x7ffc0000 [ 388.126651][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.183046][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.223092][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 388.264670][ T5913] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 388.274577][ T5913] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 388.288982][ T5913] usb 1-1: Manufacturer: syz [ 388.306251][ T30] audit: type=1326 audit(1755479476.291:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8936f8ebe9 code=0x7ffc0000 [ 388.310011][ T5913] usb 1-1: config 0 descriptor?? [ 388.385581][ T30] audit: type=1326 audit(1755479476.291:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8936f8ebe9 code=0x7ffc0000 [ 388.407396][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 388.450938][ T30] audit: type=1326 audit(1755479476.291:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f8936f8ebe9 code=0x7ffc0000 [ 388.494698][ T30] audit: type=1326 audit(1755479476.291:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8936f8ebe9 code=0x7ffc0000 [ 388.524479][ T30] audit: type=1326 audit(1755479476.291:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8936f8ebe9 code=0x7ffc0000 [ 388.526018][ T9223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.836'. [ 388.548194][ T30] audit: type=1326 audit(1755479476.291:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f8936f8ebe9 code=0x7ffc0000 [ 388.576106][ T9223] netlink: 28 bytes leftover after parsing attributes in process `syz.4.836'. [ 388.580147][ T30] audit: type=1326 audit(1755479476.291:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8936f8ec23 code=0x7ffc0000 [ 388.593150][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 388.609064][ T9222] netlink: 16 bytes leftover after parsing attributes in process `syz.3.831'. [ 388.613932][ T9224] netlink: 16 bytes leftover after parsing attributes in process `syz.3.831'. [ 388.634635][ T30] audit: type=1326 audit(1755479476.291:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9213 comm="syz.1.835" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8936f8ec23 code=0x7ffc0000 [ 388.669270][ T9223] batadv0: entered promiscuous mode [ 388.669361][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.836'. [ 388.676256][ T9223] batadv_slave_1: entered promiscuous mode [ 388.694094][ T9223] batadv_slave_1: left promiscuous mode [ 388.707836][ T9223] batadv0: left promiscuous mode [ 388.708279][ T9] usb 2-1: config 0 has an invalid interface number: 28 but max is 0 [ 388.730846][ T9] usb 2-1: config 0 has no interface number 0 [ 388.737027][ T9] usb 2-1: config 0 interface 28 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 388.749541][ T9225] netlink: 48 bytes leftover after parsing attributes in process `syz.4.836'. [ 388.769740][ T9] usb 2-1: config 0 interface 28 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 388.801969][ T9] usb 2-1: New USB device found, idVendor=1608, idProduct=030b, bcdDevice=40.85 [ 388.816605][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.840066][ T9] usb 2-1: Product: syz [ 388.844295][ T9] usb 2-1: Manufacturer: syz [ 388.869495][ T9] usb 2-1: SerialNumber: syz [ 388.884254][ T9] usb 2-1: config 0 descriptor?? [ 388.910635][ T5913] appleir 0003:05AC:8243.000C: item fetching failed at offset 0/1 [ 388.911516][ T9219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 388.921660][ T5913] appleir 0003:05AC:8243.000C: parse failed [ 388.933704][ T9219] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 388.943965][ T9] io_ti 2-1:0.28: required endpoints missing [ 388.954709][ T5913] appleir 0003:05AC:8243.000C: probe with driver appleir failed with error -22 [ 389.679032][ T9] usb 2-1: USB disconnect, device number 37 [ 389.700780][ T9181] netlink: 8 bytes leftover after parsing attributes in process `syz.0.824'. [ 389.734173][ T5842] usb 1-1: USB disconnect, device number 27 [ 389.910267][ T9240] xt_TCPMSS: Only works on TCP SYN packets [ 390.018944][ T9249] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 390.432061][ T9260] veth0_to_team: entered promiscuous mode [ 390.437915][ T9260] veth0_to_team: entered allmulticast mode [ 391.048858][ T5842] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 391.191291][ T9257] trusted_key: encrypted_key: master key parameter '00N004093' is invalid [ 391.619284][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 391.671429][ T5842] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 391.694300][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.736350][ T5842] usb 4-1: Product: syz [ 391.756597][ T5842] usb 4-1: Manufacturer: syz [ 391.781782][ T5842] usb 4-1: SerialNumber: syz [ 391.800026][ T5842] r8152-cfgselector 4-1: Unknown version 0x0000 [ 391.814983][ T5842] r8152-cfgselector 4-1: config 0 descriptor?? [ 391.822303][ T9266] sp0: Synchronizing with TNC [ 391.829896][ T9265] [U] [ 391.908989][ T5913] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 392.081928][ T5913] usb 3-1: Using ep0 maxpacket: 32 [ 392.087079][ T5913] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 392.087115][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.093497][ T5913] usb 3-1: config 0 descriptor?? [ 392.101326][ T5913] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 393.328686][ T5913] gspca_vc032x: reg_w err -71 [ 393.333454][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.436979][ T5842] r8152-cfgselector 4-1: USB disconnect, device number 37 [ 393.464376][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.473726][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.479860][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.485376][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.497413][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.504351][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.510493][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.515935][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.549231][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.591226][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.615999][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.676254][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.752979][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.827637][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 393.908754][ T9291] netlink: 'syz.0.856': attribute type 5 has an invalid length. [ 394.739143][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.744924][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.750285][ T5913] gspca_vc032x: I2c Bus Busy Wait 00 [ 394.755613][ T5913] gspca_vc032x: Unknown sensor... [ 394.763350][ T5913] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 394.773547][ T5913] usb 3-1: USB disconnect, device number 48 [ 394.788806][ T9291] netlink: 'syz.0.856': attribute type 7 has an invalid length. [ 395.172369][ T9291] : entered promiscuous mode [ 395.564896][ T9309] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 395.613962][ T9316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.921557][ T9326] [ 395.923955][ T9326] ====================================================== [ 395.930993][ T9326] WARNING: possible circular locking dependency detected [ 395.938014][ T9326] 6.16.0-syzkaller #0 Not tainted [ 395.943037][ T9326] ------------------------------------------------------ [ 395.950053][ T9326] syz.3.861/9326 is trying to acquire lock: [ 395.955947][ T9326] ffff888025411988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 395.967131][ T9326] [ 395.967131][ T9326] but task is already holding lock: [ 395.974551][ T9326] ffff888025411a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 395.983550][ T9326] [ 395.983550][ T9326] which lock already depends on the new lock. [ 395.983550][ T9326] [ 395.994069][ T9326] [ 395.994069][ T9326] the existing dependency chain (in reverse order) is: [ 396.003086][ T9326] [ 396.003086][ T9326] -> #2 (&nbd->config_lock){+.+.}-{4:4}: [ 396.010916][ T9326] lock_acquire+0x120/0x360 [ 396.015971][ T9326] __mutex_lock+0x182/0xe80 [ 396.021010][ T9326] refcount_dec_and_mutex_lock+0x30/0xa0 [ 396.027193][ T9326] nbd_config_put+0x2c/0x790 [ 396.032336][ T9326] nbd_release+0xfe/0x140 [ 396.037208][ T9326] bdev_release+0x533/0x650 [ 396.042358][ T9326] blkdev_release+0x15/0x20 [ 396.047412][ T9326] __fput+0x449/0xa70 [ 396.052105][ T9326] fput_close_sync+0x119/0x200 [ 396.057406][ T9326] __x64_sys_close+0x7f/0x110 [ 396.062617][ T9326] do_syscall_64+0xfa/0x3b0 [ 396.068247][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.074669][ T9326] [ 396.074669][ T9326] -> #1 (&disk->open_mutex){+.+.}-{4:4}: [ 396.082508][ T9326] lock_acquire+0x120/0x360 [ 396.087539][ T9326] __mutex_lock+0x182/0xe80 [ 396.092570][ T9326] __del_gendisk+0x129/0x9e0 [ 396.097712][ T9326] del_gendisk+0xe8/0x160 [ 396.102585][ T9326] loop_remove+0x42/0xc0 [ 396.107364][ T9326] loop_control_ioctl+0x4ac/0x5a0 [ 396.113008][ T9326] __se_sys_ioctl+0xfc/0x170 [ 396.118222][ T9326] do_syscall_64+0xfa/0x3b0 [ 396.123255][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.129680][ T9326] [ 396.129680][ T9326] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 396.138128][ T9326] validate_chain+0xb9b/0x2140 [ 396.143426][ T9326] __lock_acquire+0xab9/0xd20 [ 396.148800][ T9326] lock_acquire+0x120/0x360 [ 396.153830][ T9326] down_write+0x96/0x1f0 [ 396.158605][ T9326] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 396.164854][ T9326] nbd_start_device+0x16c/0xac0 [ 396.170251][ T9326] nbd_ioctl+0x636/0xeb0 [ 396.175122][ T9326] blkdev_ioctl+0x5a8/0x6d0 [ 396.180159][ T9326] __se_sys_ioctl+0xfc/0x170 [ 396.185282][ T9326] do_syscall_64+0xfa/0x3b0 [ 396.190314][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.196730][ T9326] [ 396.196730][ T9326] other info that might help us debug this: [ 396.196730][ T9326] [ 396.206962][ T9326] Chain exists of: [ 396.206962][ T9326] &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock [ 396.206962][ T9326] [ 396.221246][ T9326] Possible unsafe locking scenario: [ 396.221246][ T9326] [ 396.228790][ T9326] CPU0 CPU1 [ 396.234161][ T9326] ---- ---- [ 396.239529][ T9326] lock(&nbd->config_lock); [ 396.244216][ T9326] lock(&disk->open_mutex); [ 396.251522][ T9326] lock(&nbd->config_lock); [ 396.258740][ T9326] lock(&set->update_nr_hwq_lock); [ 396.264150][ T9326] [ 396.264150][ T9326] *** DEADLOCK *** [ 396.264150][ T9326] [ 396.272476][ T9326] 1 lock held by syz.3.861/9326: [ 396.277427][ T9326] #0: ffff888025411a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_ioctl+0x131/0xeb0 [ 396.286938][ T9326] [ 396.286938][ T9326] stack backtrace: [ 396.292838][ T9326] CPU: 1 UID: 0 PID: 9326 Comm: syz.3.861 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 396.292857][ T9326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.292867][ T9326] Call Trace: [ 396.292874][ T9326] [ 396.292882][ T9326] dump_stack_lvl+0x189/0x250 [ 396.292904][ T9326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.292920][ T9326] ? __pfx__printk+0x10/0x10 [ 396.292940][ T9326] ? print_lock_name+0xde/0x100 [ 396.292959][ T9326] print_circular_bug+0x2ee/0x310 [ 396.292981][ T9326] check_noncircular+0x134/0x160 [ 396.293002][ T9326] validate_chain+0xb9b/0x2140 [ 396.293020][ T9326] ? trace_sched_exit_tp+0x38/0x120 [ 396.293043][ T9326] ? __schedule+0x16c8/0x4c90 [ 396.293063][ T9326] __lock_acquire+0xab9/0xd20 [ 396.293079][ T9326] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 396.293100][ T9326] lock_acquire+0x120/0x360 [ 396.293113][ T9326] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 396.293134][ T9326] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 396.293168][ T9326] down_write+0x96/0x1f0 [ 396.293185][ T9326] ? blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 396.293205][ T9326] ? __pfx_down_write+0x10/0x10 [ 396.293222][ T9326] ? rcu_is_watching+0x15/0xb0 [ 396.293239][ T9326] ? __mutex_lock+0xa6d/0xe80 [ 396.293256][ T9326] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 396.293278][ T9326] ? nbd_ioctl+0x131/0xeb0 [ 396.293297][ T9326] ? __pfx___mutex_lock+0x10/0x10 [ 396.293315][ T9326] nbd_start_device+0x16c/0xac0 [ 396.293335][ T9326] ? security_capable+0x7e/0x2e0 [ 396.293357][ T9326] nbd_ioctl+0x636/0xeb0 [ 396.293377][ T9326] ? __pfx_nbd_ioctl+0x10/0x10 [ 396.293396][ T9326] ? __asan_memset+0x22/0x50 [ 396.293417][ T9326] ? smack_file_ioctl+0x24a/0x340 [ 396.293431][ T9326] ? __pfx_smack_file_ioctl+0x10/0x10 [ 396.293446][ T9326] ? __pfx_nbd_ioctl+0x10/0x10 [ 396.293465][ T9326] blkdev_ioctl+0x5a8/0x6d0 [ 396.293483][ T9326] ? __pfx_blkdev_ioctl+0x10/0x10 [ 396.293499][ T9326] ? __fget_files+0x2a/0x420 [ 396.293517][ T9326] ? bpf_lsm_file_ioctl+0x9/0x20 [ 396.293535][ T9326] ? __pfx_blkdev_ioctl+0x10/0x10 [ 396.293551][ T9326] __se_sys_ioctl+0xfc/0x170 [ 396.293574][ T9326] do_syscall_64+0xfa/0x3b0 [ 396.293590][ T9326] ? lockdep_hardirqs_on+0x9c/0x150 [ 396.293605][ T9326] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.293620][ T9326] ? clear_bhb_loop+0x60/0xb0 [ 396.293637][ T9326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.293651][ T9326] RIP: 0033:0x7ff9df98ebe9 [ 396.293667][ T9326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.293681][ T9326] RSP: 002b:00007ff9e07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.293699][ T9326] RAX: ffffffffffffffda RBX: 00007ff9dfbb6180 RCX: 00007ff9df98ebe9 [ 396.293712][ T9326] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000003 [ 396.293722][ T9326] RBP: 00007ff9dfa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 396.293732][ T9326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.293741][ T9326] R13: 00007ff9dfbb6218 R14: 00007ff9dfbb6180 R15: 00007ffc4e986628 [ 396.293758][ T9326] [ 396.738438][ T9331] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61) [ 396.908208][ T5913] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 397.040138][ T5840] block nbd3: Receive control failed (result -32) [ 397.047488][ T9326] block nbd3: shutting down sockets [ 397.078309][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 397.085098][ T5913] usb 5-1: config 0 has an invalid interface number: 2 but max is 0 [ 397.094935][ T5913] usb 5-1: config 0 has no interface number 0 [ 397.102116][ T5913] usb 5-1: config 0 interface 2 has no altsetting 0 [ 397.111159][ T5913] usb 5-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 397.120385][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.128931][ T5913] usb 5-1: Product: syz [ 397.133214][ T5913] usb 5-1: Manufacturer: syz [ 397.138145][ T5913] usb 5-1: SerialNumber: syz [ 397.153253][ T5913] usb 5-1: config 0 descriptor?? [ 397.769184][ T5913] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 397.803751][ T5913] usb 5-1: USB disconnect, device number 55 [ 397.841341][ T7215] udevd[7215]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory