last executing test programs: 7.29412246s ago: executing program 0 (id=2169): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000040)={"1c383478d0ff5d0d87e411499b88e59b1baf5a5e3f5a373abf6f7174062b", 0x9}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x541342, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x4ca31, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) (async) sendto$inet(r2, &(0x7f0000000140), 0xffffffffffffff58, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) (async, rerun: 64) ppoll(&(0x7f0000000200)=[{r2}], 0x1, &(0x7f00000002c0), 0x0, 0x0) (rerun: 64) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x60aa, &(0x7f0000000200)={0x0, 0x989680}) sendfile(r1, r1, 0x0, 0x7ffff000) 6.980454123s ago: executing program 0 (id=2172): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x2) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) setns(0xffffffffffffffff, 0x80) sendfile(r0, r0, 0x0, 0x7ffff000) 6.579747492s ago: executing program 0 (id=2175): r0 = socket$inet6(0xa, 0x80000, 0xfe3) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000040)=""/173, &(0x7f0000000100)=0xad) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x4280, 0x4) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$FIGETBSZ(r1, 0x2, &(0x7f00000001c0)) r2 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x9e, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000240)={0x6, 0x3, 0x0, 0xc07f, 'syz0\x00', 0x7fffffff}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, 0x10) (async) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000280)={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}, 0x10) r3 = dup2(r1, r2) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x6, 0x3, [0x7, 0x200, 0x101]}, &(0x7f0000000300)=0xe) (async) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)={0x0, 0x6, 0x3, [0x7, 0x200, 0x101]}, &(0x7f0000000300)=0xe) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r4, 0x9}, 0xc) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000340)={r4, 0x9}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000380)={r4, 0x3, 0x20}, &(0x7f00000003c0)=0xc) ioctl$KVM_SET_DEVICE_ATTR_vm(r3, 0x4018aee1, &(0x7f0000000440)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x58000}}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000480)={r4, 0x4, 0x20}, &(0x7f00000004c0)=0xc) ioctl$KVM_GET_DEVICE_ATTR_vm(r3, 0x4018aee2, &(0x7f0000000540)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000500)={0x6}}) splice(r2, &(0x7f0000000580), r0, &(0x7f00000005c0)=0x7, 0x7fffffffffffffff, 0x0) (async) splice(r2, &(0x7f0000000580), r0, &(0x7f00000005c0)=0x7, 0x7fffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000600)={'batadv_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f0000000680)=0x3) r7 = syz_open_dev$sndpcmc(&(0x7f00000006c0), 0x1, 0x107100) read$snddsp(r7, &(0x7f0000000700)=""/70, 0x46) (async) read$snddsp(r7, &(0x7f0000000700)=""/70, 0x46) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000780)={r6, 0x1, 0x6, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000800)={r5, 0x8}, &(0x7f0000000840)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, &(0x7f0000000880)={r9, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x4, 0x4, 0x7f, 0x5, 0x81}, &(0x7f0000000940)=0x98) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r11, 0x84, 0x1b, &(0x7f0000000980)={r9, 0x3b, "017225edea705a03f11cd67c19be2373e0421177101c0d14488108f3e8886ce1b22eaf16a8e172f6c2a17214efc85565eaa7fff5b7d6fcc5802a8e"}, &(0x7f0000000a00)=0x43) socket$inet_sctp(0x2, 0x5, 0x84) (async) r12 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000a40)={r10, 0x9}, 0xc) (async) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r12, 0x84, 0x72, &(0x7f0000000a40)={r10, 0x9}, 0xc) 6.429446004s ago: executing program 0 (id=2178): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000004c0)={{{@in=@local, @in6}}, {{@in=@broadcast}, 0x0, @in6=@empty}}, &(0x7f0000000480)=0xe8) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0), 0x804) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = socket(0x1e, 0x2, 0x2) rt_sigtimedwait(&(0x7f0000000280)={[0x9]}, 0x0, &(0x7f0000000440)={0x77359400}, 0x8) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCFLSH(r3, 0x40045436, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="210154e00000457904"]) r5 = memfd_create(&(0x7f00000008c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\a\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4O$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\x19\n\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\xcdSL\b\x7f\xfe\xab\xd7\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0f\xa4\x83t\xdcyx\xa4v*{\xeb\xde}\xb1\x1d\xd3i\xf6\xf3\x88``\xb6WhT\"YX\xba\t\x13', 0xb) fallocate(r5, 0x0, 0x0, 0x400001) fcntl$addseals(r5, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000840)={'ip6tnl0\x00', 0x0, 0x29, 0xa, 0x5, 0x80000000, 0x3a, @dev={0xfe, 0x80, '\x00', 0x33}, @remote, 0x87a0, 0x20, 0x7, 0x401}}) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000000040)="c9390006008f0c0016020cb3", 0xc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000004) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r8 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r7, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_proto_private(r9, 0x89e2, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 5.460428381s ago: executing program 0 (id=2182): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') r1 = socket(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="1b62a2ec7336c42b307b79093dd53fa1f843f3bdd8d1bdaeb8ed5feba7a17b328ec85521cd06e9fbaf35d29eb0d997451a3afeb46c5497a617479c1f2b09c9d54f58f3a5060da1806c670c46b4d7e822921c7ede858c3ed93046c2c72e94c3a8a19a75af2d3040d6d34acd99b8784ff17fb0f7409e1131d9246ddbe8b69caacf6efd2bfeece245a4ff418d11a527ad5bad01f3fd97ffa76f7e485857bc7dd066c476d9ed74cb", @ANYRES16=r2, @ANYBLOB="000226bd7000ffdbdf254b00000008000300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030005000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x5) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, r4) sendmmsg$unix(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r4}}}], 0x20, 0x1}}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r3, r4}}, './file0\x00'}) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000200)={'veth1_virt_wifi\x00', 0xc4}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r8, &(0x7f0000000440)=""/49, 0x31) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000001c40)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r9, 0xc004500a, &(0x7f0000001400)) writev(r9, &(0x7f00000001c0)=[{&(0x7f00000006c0)='.1', 0x2}, {&(0x7f00000002c0)="9ab78b2a2070fc9a35faf724bcfc3546586961a4fb508efaa05e67d08df5cce33d600cbb4edc4e4fee1d4c8fe5d1e527301b19f628b917b07cd1fd5936f8f1", 0x3f}], 0x2) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000000a0a09010000000000000000010000201e7a62875d00c0ccd34f4a30f018f10b3a04f3a44e425457ba3a94a9f2682600bd83cf33b5"], 0x14}}, 0x20000000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) syz_open_dev$audion(&(0x7f00000000c0), 0x3ff, 0x40) 4.680018997s ago: executing program 0 (id=2187): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') fchdir(r1) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f00000002c0)) ioprio_set$pid(0x1, 0x0, 0x4) fspick(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 4.25794249s ago: executing program 2 (id=2191): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x2208001, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='mountstats\x00') syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) 3.996132063s ago: executing program 2 (id=2193): unshare(0x6a040000) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x304}, "7f1e7db6e8db028f", "56fb065795a4bdd4e23cd27b30344e72", "3c60de87", "fb14785705fe0aa9"}, 0x28) (async) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) (async) write(r1, &(0x7f0000000140)="240000001e00fffffff881ff00081d000000000000000800090a00cf9aa5fba4dafbd70d", 0x24) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r2) sendmsg$TIPC_CMD_SHOW_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x24048800) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r0) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) (async, rerun: 32) shutdown(r0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f00000000c0)={'filter\x00', 0x0, 0x0, 0x0, [0x7, 0xfffffffb, 0x6, 0xfee, 0x20003, 0x3]}, &(0x7f0000000340)=0x78) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x80000001) (async, rerun: 64) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async, rerun: 64) syz_usb_disconnect(r5) (async) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) recvmsg$unix(r1, &(0x7f0000000180)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/116, 0x74}], 0x10000000000000cc}, 0x40002102) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) 3.117701519s ago: executing program 3 (id=2195): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi5\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r0, 0x0) (async) r1 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1\xbf\x00nh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\xe5\x00\x00\x00', 0x0) r2 = dup(r1) write$nbd(r2, &(0x7f0000000240)=ANY=[], 0x10) finit_module(r2, 0x0, 0x0) (async) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000000)={0x3, 0x800, 0x6, 0x1, 0x400, 0x401, 0x9, 0x1}, &(0x7f0000000040)={0xca, 0x7, 0x4b2, 0x8, 0x0, 0xab, 0x81, 0x9}, &(0x7f0000000080)={0x80, 0x200, 0x1, 0x4, 0x9, 0x2, 0x85f1, 0x101}, &(0x7f0000000100)={r3, r4+10000000}, &(0x7f00000001c0)={&(0x7f0000000180)={[0xfff]}, 0x8}) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r5, 0x2000) 2.968622366s ago: executing program 2 (id=2197): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x302, 0x0) ioctl$MON_IOCT_RING_SIZE(r0, 0x9204, 0x11690) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) fcntl$getflags(r1, 0x1) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10) 2.705984902s ago: executing program 1 (id=2198): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r0, 0x65f, 0x2, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45819000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) flistxattr(r3, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f0000000600)={0x0, "126ebf7d9fdf9aec84c0fe4cb734f282d46938152a71b9399c8d590c79cfaf41", 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) creat(0x0, 0x119) lchown(0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x20048020) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) rename(0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) 2.044241481s ago: executing program 3 (id=2199): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90f, 0x8000, '\x00', @p_u8=&(0x7f0000000240)}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.994246434s ago: executing program 1 (id=2200): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x125a80, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x118, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4000400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x25, 0x3, "48488b43b3f1dbf4df48e431dca89ee8e87c8e1de6bd30f4395acc2b1ebc9a05e9"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "cbd283873468207912605877d926930df8e1a648846ae75b17"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8801}, 0xc4) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c5c3c0ed8a80d7534463be8b9911ced89f9d705000000a4ea7686abf6ffb5ecffdacbe89dbee7301ff64a67679afedc88ddb5c2fe7415b5f343fbb907ba1a32172367b5ce8d0fb9ca68d40de6cc13d2e10b220a67fcb69a83e1541cf244a22df0016c6b2d8941eca71f948d4731164cad1ed8000fb2c6fadf904bb47e0a101aaa9b6b190c8d6ba43ec13865606e400ea49a8d8ca8f58f25c278cf8056ac31dab4c1ef2049f688513a5ce237c8b268a1dd47dfe54ccd5645b4ae1d2ad0891e36ad87b43ad975680077bf9be34d9686b6c4630c293cfddfc52ee8dfc8db8f657ffe81486c3b823bc1103358", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000e9ff0b0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}, 0x1, 0x7}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) sendfile(r6, r0, 0x0, 0xfffc) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x125a80, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000b40), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0d03001f000000000000130000001c000980070002"], 0x30}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000001c0)={&(0x7f0000000140), 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x118, r4, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4000400}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x25, 0x3, "48488b43b3f1dbf4df48e431dca89ee8e87c8e1de6bd30f4395acc2b1ebc9a05e9"}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "cbd283873468207912605877d926930df8e1a648846ae75b17"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x8801}, 0xc4) (async) sendmsg$DEVLINK_CMD_SB_GET(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c5c3c0ed8a80d7534463be8b9911ced89f9d705000000a4ea7686abf6ffb5ecffdacbe89dbee7301ff64a67679afedc88ddb5c2fe7415b5f343fbb907ba1a32172367b5ce8d0fb9ca68d40de6cc13d2e10b220a67fcb69a83e1541cf244a22df0016c6b2d8941eca71f948d4731164cad1ed8000fb2c6fadf904bb47e0a101aaa9b6b190c8d6ba43ec13865606e400ea49a8d8ca8f58f25c278cf8056ac31dab4c1ef2049f688513a5ce237c8b268a1dd47dfe54ccd5645b4ae1d2ad0891e36ad87b43ad975680077bf9be34d9686b6c4630c293cfddfc52ee8dfc8db8f657ffe81486c3b823bc1103358", @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf250b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000e9ff0b0007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x33, 0x20, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}, 0x1, 0x7}, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) sendfile(r6, r0, 0x0, 0xfffc) (async) 1.883853522s ago: executing program 2 (id=2201): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r1, &(0x7f0000000340)=[{{&(0x7f0000000280)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x80, 0x0}}], 0x1, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000180), 0x220000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x2000) 1.707391588s ago: executing program 3 (id=2202): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xba54, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x93e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8], 0x1, 0x400}) (async) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xcb776f6, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xba54, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x93e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7357c35c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x5, 0x4, 0x40000, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1cd5a44b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8], 0x1, 0x400}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 1.6579431s ago: executing program 2 (id=2203): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') (async) r1 = syz_open_procfs(r0, &(0x7f0000000000)='ns\x00') openat2(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x13}, 0x18) (async) r2 = openat2(r1, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)={0x40, 0x0, 0x13}, 0x18) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0xa0000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x7, &(0x7f0000000100)="17d72030", 0x4) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f0000000100)=""/101) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf2572000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80) r5 = socket$igmp6(0xa, 0x3, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000000)=0x9, 0x8, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000840), 0x4) (async) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000840), 0x4) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x66, &(0x7f0000000440)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54, 0x1, 0x1, 0x7, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x50, {{0xb, 0x24, 0x6, 0x0, 0x0, "a2ab39c7878a"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x80, 0x80, 0x3}, [@country_functional={0xa, 0x24, 0x7, 0x6b, 0xc, [0x7, 0x1]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xfa, 0x73}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x6, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0x96, 0x76}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f00000004c0)={0xa, 0x6, 0x200, 0xf3, 0x9, 0x8, 0xff, 0x3}, 0x9d, &(0x7f00000005c0)={0x5, 0xf, 0x9d, 0x1, [@generic={0x98, 0x10, 0x0, "c867211192004ccb7eb209ceb1661275db5b1bb0164b07a9e868ca6a4bcf81607948195fe6debb3ec53541d5afac780e2c755ee9ddadc48e12db6cc0d1f50f4e6bda8b8835862e470cd2b87f154332abe928863f48a55f9e5e35c9c424c7c6e989b13743a49c038ebd072445ba5871425813cd4fde33cd1585f3cf4b3de964372382f05c67bbf2c58f066b3bc4684015e7f3a805f2"}]}, 0x5, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x200a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x4c6}}, {0x21, &(0x7f0000000680)=@string={0x21, 0x3, "95ae2691d5c817851d377d6da8b08be02807dbc362050c1c39a67a6acec0f7"}}, {0x95, &(0x7f00000006c0)=@string={0x95, 0x3, "f06647238c4a65a13d9ff7c7b19b6c641c421a5925b8167925e8ca7922a6c6c5e945df9d6f443743b1c4fd9c66a983e56b016346722c175ebeca1004f13735f9951d3251d7a10beea3fa8eaa7d38ae1a6f22aba60f2b70eb6fe2e915c5ffb7de2e28c9be48b95b73996af1cb38b5e7ebc84871b7a1ae64924a7be06ae1d863f722071b3cf150ba68158643fa1540e05c4cb9a7"}}, {0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x42f}}]}) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000580)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r6, 0x0, 0x0) (async) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) futex(&(0x7f0000000380)=0x1, 0x1, 0x1, &(0x7f00000003c0), &(0x7f0000000400), 0x1) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000003c0)=ANY=[], 0x0, 0x0}) r7 = dup(r5) syz_io_uring_setup(0x1142, &(0x7f0000000b40)={0x0, 0xf56, 0x2, 0x0, 0x32, 0x0, r7}, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'gretap0\x00', &(0x7f00000000c0)={'tunl0\x00', 0x0, 0x80, 0x20, 0x1, 0x5019, {{0x5, 0x4, 0x2, 0xf, 0x14, 0x66, 0x0, 0x3, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x16}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', r8, 0x10, 0x8000, 0x101, 0x0, {{0x10, 0x4, 0x2, 0x7, 0x40, 0x68, 0x0, 0x6, 0x29, 0x0, @broadcast, @multicast1, {[@generic={0x44, 0x12, "478bfb944780ddd5b2f86991f58bd329"}, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x5, [{@local, 0x8}]}, @ssrr={0x89, 0x7, 0x94, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', r8, 0x10, 0x8000, 0x101, 0x0, {{0x10, 0x4, 0x2, 0x7, 0x40, 0x68, 0x0, 0x6, 0x29, 0x0, @broadcast, @multicast1, {[@generic={0x44, 0x12, "478bfb944780ddd5b2f86991f58bd329"}, @timestamp_prespec={0x44, 0xc, 0x45, 0x3, 0x5, [{@local, 0x8}]}, @ssrr={0x89, 0x7, 0x94, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}]}}}}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 1.637276875s ago: executing program 1 (id=2204): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x40881, 0x0) ioctl$SNAPSHOT_CREATE_IMAGE(r0, 0x40043311, 0x0) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_ifreq(r1, 0x89a2, &(0x7f0000002900)={'gre0\x00', @ifru_addrs=@hci={0x1f, 0x0, 0x4}}) (async) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x20400, 0x80) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @timestamp, @sack_perm, @window, @sack_perm, @timestamp, @timestamp], 0x8) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000140)='bbr\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0xc7) (async) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) (async) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7f67, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0585605, &(0x7f00000003c0)={0x0, 0x0, {0x0, 0x0, 0x201e, 0x0, 0x9, 0xc}}) (async) sendfile(r3, r3, &(0x7f0000000040)=0x3a, 0x9) (async) ioctl$VIDIOC_G_CTRL(r2, 0xc008561b, &(0x7f00000000c0)={0x0, 0x8}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000100001005d790000000000000500000a60000000060a0b0400000000000000000200000234000480300001800b00010074617267657400002000028008000240000000010800030002b511120c0001004e465155455545000900010073797a30000000000900020073797a320000000014000000110001"], 0x88}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000005e00)={0x2020}, 0x2020) (async) mount(&(0x7f0000001400)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 1.536100778s ago: executing program 3 (id=2205): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0xdd) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r5, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, &(0x7f0000000180)) openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) (async) r6 = openat$cgroup_int(r3, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x3ff, 0x12) (async) write$cgroup_int(r6, &(0x7f0000000040)=0x3ff, 0x12) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000)=0x1, r8, 0x0, 0x2, 0x4}}, 0x20) mkdirat$cgroup(r3, &(0x7f0000000740)='syz1\x00', 0x1ff) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x70, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x54, r10, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x24, "af438e3e48a25fa7aa808061bab7533f2ef03612"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000005}, 0x44000) socket$kcm(0x2d, 0x2, 0x0) 1.270193353s ago: executing program 1 (id=2206): creat(&(0x7f0000000080)='./file0\x00', 0x2) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x1098c2, 0x0) write$sequencer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="fe00"], 0x18) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1.238616956s ago: executing program 3 (id=2207): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) socket$xdp(0x2c, 0x3, 0x0) splice(r0, &(0x7f0000000040)=0x80000001, r0, &(0x7f00000000c0)=0x4, 0x3, 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1.044093846s ago: executing program 1 (id=2208): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) (async) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) (async) futimesat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000280)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@volatile}, {@index_off}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) r1 = syz_usb_connect$cdc_ncm(0x0, 0x74, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902620002010028000904000001020d00000524060001052400ffff0d240f0100000000ad0000008006241a0000000624070dfcff0905810700020f00000904010000020d00000904010102020d00000905820200020000000905030286"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x12, 0x10, 0x10, 0x4b63, 0x110, 0x10, 0x13, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000006500)=[{{&(0x7f0000000000)={0xa, 0x4e62, 0x4980, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x81}, 0x1c, &(0x7f0000000200), 0x1, 0x0, 0xfffffffffffffecd}}], 0x1, 0x40) listen(r2, 0xfff) accept(r2, 0xfffffffffffffffd, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') (async) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000100), 0x2, 0x2) (async) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001180)='./bus\x00', &(0x7f00000011c0)={0xa2, 0x30}, 0x18) mkdirat(r3, &(0x7f0000001200)='./file0\x00', 0x1bd) r4 = getpgrp(0x0) syz_open_procfs(r4, &(0x7f0000001240)='stat\x00') openat2(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc}) 858.956054ms ago: executing program 3 (id=2209): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000207265970000010902240001000000000904000002214c6a0009050702000000da000905890eca"], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) socket$pppoe(0x18, 0x1, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'ip6_vti0\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @remote, 'ip6_vti0\x00'}}, 0x1e) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000000)={0x18, 0x0, {0xfffe, @local, 'geneve1\x00'}}, 0x1e) close(r4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000340)={r6}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) 115.270038ms ago: executing program 1 (id=2210): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) recvmmsg(0xffffffffffffffff, &(0x7f0000004d80)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000003c0)=""/29, 0x1d}], 0x1}, 0x4}], 0x1, 0x2000, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r3, &(0x7f0000001100)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="e1", 0x1}], 0x1}}], 0x1, 0x44810) recvmmsg(r3, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000b50000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 0s ago: executing program 2 (id=2211): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff00fbffff0700395032303030"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='gfs2\x00', 0x208006, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r5, 0x1, 0x70bd26, 0x23c, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0xfffffffffffffc70}}, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r7) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201010200000020"], 0x0) ioctl$EVIOCRMFF(r7, 0x4004550f, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000030101010000000000000016a580a0e30000000007"], 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, 0x0) r12 = dup3(r11, r8, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r13, 0x4018620d, 0x0) r14 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r14, 0xc0205648, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000340)={'syzkaller0\x00', @local}) kernel console output (not intermixed with test programs): .708601][T10855] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1438'. [ 362.728411][T10857] /dev/rnullb0: Can't lookup blockdev [ 362.748480][ T24] usb 3-1: device descriptor read/64, error -71 [ 362.867662][ T24] usb usb3-port1: attempt power cycle [ 362.887629][T10841] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1434'. [ 362.915480][T10843] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1434'. [ 362.936736][T10867] /dev/rnullb0: Can't open blockdev [ 363.228482][ T24] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 363.269182][ T24] usb 3-1: device descriptor read/8, error -71 [ 363.296767][T10881] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 363.308498][ T5943] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 363.441742][T10883] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 363.463084][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.474830][ T5943] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 363.491987][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.506223][ T5943] usb 2-1: config 0 descriptor?? [ 363.520816][ T24] usb 3-1: new full-speed USB device number 84 using dummy_hcd [ 363.550760][ T5943] pwc: Askey VC010 type 2 USB webcam detected. [ 363.578076][ T983] IPVS: starting estimator thread 0... [ 363.589319][ T24] usb 3-1: device descriptor read/8, error -71 [ 363.668666][T10886] IPVS: using max 28 ests per chain, 67200 per kthread [ 363.708747][ T24] usb usb3-port1: unable to enumerate USB device [ 363.770673][T10892] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 363.932023][T10903] /dev/rnullb0: Can't open blockdev [ 363.949684][ T5943] pwc: recv_control_msg error -32 req 02 val 2b00 [ 363.967434][ T5943] pwc: recv_control_msg error -32 req 02 val 2700 [ 363.974686][ T5943] pwc: recv_control_msg error -32 req 02 val 2c00 [ 363.989303][ T5943] pwc: recv_control_msg error -32 req 04 val 1000 [ 363.999808][ T5943] pwc: recv_control_msg error -32 req 04 val 1300 [ 364.014359][ T5943] pwc: recv_control_msg error -32 req 04 val 1400 [ 364.022788][ T5943] pwc: recv_control_msg error -32 req 02 val 2000 [ 364.038230][ T5943] pwc: recv_control_msg error -32 req 02 val 2100 [ 364.104916][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1456'. [ 364.145898][T10913] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 364.247644][T10871] /dev/rnullb0: Can't open blockdev [ 364.254483][ T5943] pwc: recv_control_msg error -71 req 02 val 2500 [ 364.266184][ T5943] pwc: recv_control_msg error -71 req 02 val 2400 [ 364.274513][ T5943] pwc: recv_control_msg error -71 req 02 val 2600 [ 364.285318][ T5943] pwc: recv_control_msg error -71 req 02 val 2900 [ 364.292732][ T5943] pwc: recv_control_msg error -71 req 02 val 2800 [ 364.302977][ T5943] pwc: recv_control_msg error -71 req 04 val 1100 [ 364.311148][ T5943] pwc: recv_control_msg error -71 req 04 val 1200 [ 364.319634][ T5943] pwc: Registered as video103. [ 364.328277][ T5943] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 364.365960][ T5943] usb 2-1: USB disconnect, device number 83 [ 364.827795][T10921] syz.1.1458 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 364.839657][T10921] ./cgroup: Can't lookup blockdev [ 364.959831][T10924] /dev/rnullb0: Can't open blockdev [ 365.100026][T10929] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1462'. [ 365.277903][T10939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.291084][T10939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.942460][T10964] /dev/rnullb0: Can't open blockdev [ 366.058518][ T983] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 366.228461][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 366.235925][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.253039][ T983] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.265434][ T983] usb 3-1: New USB device found, idVendor=172f, idProduct=0034, bcdDevice= 0.00 [ 366.275064][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.288681][ T983] usb 3-1: config 0 descriptor?? [ 366.298291][ T983] usbhid 3-1:0.0: can't add hid device: -22 [ 366.305400][ T983] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 366.478535][ T5943] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 366.628507][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 366.635348][ T5943] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 366.643796][ T5943] usb 2-1: config 0 has no interface number 0 [ 366.650018][ T5943] usb 2-1: config 0 interface 184 has no altsetting 0 [ 366.662130][ T5943] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 366.671422][ T5943] usb 2-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 366.682171][ T5943] usb 2-1: Product: syz [ 366.686385][ T5943] usb 2-1: Manufacturer: syz [ 366.691562][ T5943] usb 2-1: SerialNumber: syz [ 366.704658][ T5943] usb 2-1: config 0 descriptor?? [ 366.723131][ T5943] smsc75xx v1.0.0 [ 366.917306][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 366.930283][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 366.953535][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 366.981041][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 367.001889][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 367.013909][ T5943] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 367.024357][ T5943] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 367.042244][ T5943] usb 2-1: USB disconnect, device number 84 [ 367.613268][T11009] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 367.624243][T11008] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 367.843059][ T30] audit: type=1326 audit(1751942425.469:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11017 comm="syz.1.1487" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89bd38e929 code=0x0 [ 368.718053][T11027] /dev/rnullb0: Can't open blockdev [ 368.727580][T11028] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1490'. [ 368.859673][ T5943] usb 3-1: USB disconnect, device number 85 [ 369.001419][T11041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.019839][T11041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.039292][T11049] fuse: Bad value for 'fd' [ 369.058423][ T30] audit: type=1326 audit(1751942426.669:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11042 comm="syz.3.1495" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa51d8e929 code=0x0 [ 369.284310][T11059] /dev/rnullb0: Can't open blockdev [ 369.408817][T11064] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'. [ 369.800658][T11078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.815019][T11078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.936960][T11082] tipc: Enabling of bearer rejected, failed to enable media [ 369.946100][ T5860] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 370.098578][ T5860] usb 3-1: Using ep0 maxpacket: 16 [ 370.110346][ T5860] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 370.123461][ T5860] usb 3-1: config 0 has no interface number 0 [ 370.132539][ T5860] usb 3-1: config 0 interface 111 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 370.151122][ T5860] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 370.163773][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.173472][ T5860] usb 3-1: Product: syz [ 370.177876][ T5860] usb 3-1: Manufacturer: syz [ 370.186415][ T5860] usb 3-1: SerialNumber: syz [ 370.194805][ T5860] usb 3-1: config 0 descriptor?? [ 370.416880][T11076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1503'. [ 370.533825][T11093] /dev/rnullb0: Can't open blockdev [ 370.641295][T11098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.653900][T11098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.302840][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.314186][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.327626][T11106] loop6: detected capacity change from 0 to 524287999 [ 371.336254][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.353708][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.966147][T11118] /dev/rnullb0: Can't open blockdev [ 372.748914][ T5943] usb 3-1: USB disconnect, device number 86 [ 372.985716][T11147] /dev/rnullb0: Can't open blockdev [ 373.022043][T11142] /dev/rnullb0: Can't open blockdev [ 373.119844][T11152] sctp: [Deprecated]: syz.0.1531 (pid 11152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.119844][T11152] Use struct sctp_sack_info instead [ 373.175336][T11152] skbuff: bad partial csum: csum=65506/2 headroom=178 headlen=65526 [ 373.184569][T11153] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1531'. [ 373.195356][T11152] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1531'. [ 373.350394][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1534'. [ 373.406261][T11166] /dev/rnullb0: Can't open blockdev [ 373.471692][T11169] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 373.478680][T11169] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 373.504605][T11169] vhci_hcd vhci_hcd.0: Device attached [ 373.517183][T11170] vhci_hcd: connection closed [ 373.522400][ T36] vhci_hcd: stop threads [ 373.536120][ T36] vhci_hcd: release socket [ 373.542842][ T36] vhci_hcd: disconnect device [ 374.171423][T11187] /dev/rnullb0: Can't lookup blockdev [ 374.542566][T11175] comedi comedi3: reset error (fatal) [ 374.933775][T11211] /dev/rnullb0: Can't open blockdev [ 375.004435][T11217] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 375.036979][T11217] IPVS: set_ctl: invalid protocol: 33 172.30.1.3:20000 [ 375.094728][T11219] /dev/rnullb0: Can't lookup blockdev [ 375.412059][T11234] /dev/rnullb0: Can't lookup blockdev [ 375.639478][T11245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.675978][T11245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.690356][T11244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.716517][T11247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.727793][T11247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.738524][T11247] /dev/rnullb0: Can't open blockdev [ 376.148798][ T983] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 376.282456][T11257] 9pnet_fd: Insufficient options for proto=fd [ 376.327815][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 376.340527][ T983] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 376.364667][ T983] usb 3-1: config 1 interface 0 has no altsetting 0 [ 376.415873][ T983] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 376.439484][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.447543][ T983] usb 3-1: Product: syz [ 376.462598][ T983] usb 3-1: Manufacturer: syz [ 376.470437][ T983] usb 3-1: SerialNumber: syz [ 376.659380][T11273] /dev/rnullb0: Can't lookup blockdev [ 376.722077][ T983] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input23 [ 376.748542][ T5943] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 376.760956][ T983] usb 3-1: USB disconnect, device number 87 [ 376.897526][ T5943] usb 2-1: device descriptor read/64, error -71 [ 376.928074][T11280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1571'. [ 376.942023][T11279] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1571'. [ 376.965714][T11282] loop2: detected capacity change from 0 to 7 [ 376.968690][T11279] overlayfs: failed to clone lowerpath [ 376.996852][T11282] Dev loop2: unable to read RDB block 7 [ 377.002649][T11282] loop2: unable to read partition table [ 377.009631][T11282] loop2: partition table beyond EOD, truncated [ 377.018474][T11282] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 377.074666][T11282] /dev/rnullb0: Can't open blockdev [ 377.138895][ T5943] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 377.180711][T11290] sit0: entered promiscuous mode [ 377.193770][T11290] netlink: 'syz.0.1575': attribute type 1 has an invalid length. [ 377.203543][T11290] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1575'. [ 377.262973][ T5219] Dev loop2: unable to read RDB block 7 [ 377.271306][T11290] /dev/rnullb0: Can't open blockdev [ 377.274301][ T5219] loop2: unable to read partition table [ 377.283398][ T5943] usb 2-1: device descriptor read/64, error -71 [ 377.292551][ T5219] loop2: partition table beyond EOD, truncated [ 377.409553][ T5943] usb usb2-port1: attempt power cycle [ 377.610716][ T30] audit: type=1804 audit(1751942435.239:102): pid=11305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1580" name="rnullb0" dev="tmpfs" ino=1693 res=1 errno=0 [ 377.692806][T11297] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1577'. [ 377.748540][ T5943] usb 2-1: new full-speed USB device number 87 using dummy_hcd [ 377.805026][ T5943] usb 2-1: device descriptor read/8, error -71 [ 377.906882][ T30] audit: type=1800 audit(1751942435.529:103): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1583" name="nullb0" dev="tmpfs" ino=1998 res=0 errno=0 [ 377.961565][ T30] audit: type=1800 audit(1751942435.589:104): pid=11315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1583" name="nullb0" dev="tmpfs" ino=1998 res=0 errno=0 [ 378.078537][ T5943] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 378.099564][ T5943] usb 2-1: device descriptor read/8, error -71 [ 378.107604][T11318] overlay: ./file0 is not a directory [ 378.184784][T11323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.196135][T11323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.219276][ T5943] usb usb2-port1: unable to enumerate USB device [ 378.638523][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 378.793361][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 378.800879][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.814584][ T10] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 378.824654][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.836614][ T10] usb 3-1: config 0 descriptor?? [ 379.015442][T11348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.034559][T11348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.263343][ T10] hid_parser_main: 5 callbacks suppressed [ 379.263369][ T10] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 379.278094][ T10] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 379.287325][ T10] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 379.296330][ T10] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 379.305555][ T10] mcp2221 0003:04D8:00DD.0021: unknown main item tag 0x0 [ 379.318263][ T10] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 379.477217][ T5943] usb 3-1: USB disconnect, device number 88 [ 379.615557][T11366] /dev/rnullb0: Can't open blockdev [ 379.683164][T11368] /dev/rnullb0: Can't lookup blockdev [ 379.717588][T11370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.735981][T11370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.782489][T11373] /dev/rnullb0: Can't open blockdev [ 379.998030][T11385] /dev/rnullb0: Can't lookup blockdev [ 380.202681][T11394] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 380.213536][T11394] /dev/rnullb0: Can't open blockdev [ 380.672567][T11413] netlink: 'syz.2.1617': attribute type 21 has an invalid length. [ 380.680718][T11412] netlink: 'syz.2.1617': attribute type 21 has an invalid length. [ 380.688750][T11413] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1617'. [ 380.706661][T11412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1617'. [ 380.768930][T11418] cgroup: Bad value for 'name' [ 380.893044][T11424] 9pnet_fd: Insufficient options for proto=fd [ 381.037748][ T30] audit: type=1804 audit(1751942438.659:105): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1620" name="rnullb0" dev="tmpfs" ino=1693 res=1 errno=0 [ 381.322348][ T30] audit: type=1804 audit(1751942438.949:106): pid=11437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1624" name="rnullb0" dev="tmpfs" ino=1693 res=1 errno=0 [ 381.432483][T11436] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 381.458787][T11436] /dev/rnullb0: Can't open blockdev [ 381.719294][T11450] /dev/rnullb0: Can't open blockdev [ 381.888828][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 381.929262][T11452] /dev/rnullb0: Can't open blockdev [ 382.063822][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 382.074122][ T10] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 3120, setting to 1024 [ 382.099532][ T10] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 382.115698][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 382.125127][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.148576][ T10] usb 2-1: Product: syz [ 382.153059][ T10] usb 2-1: Manufacturer: Ñ• [ 382.157597][ T10] usb 2-1: SerialNumber: syz [ 382.297710][T11461] 9pnet_fd: Insufficient options for proto=fd [ 382.453680][T11466] /dev/rnullb0: Can't lookup blockdev [ 382.597511][T11444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 382.606415][T11444] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 382.855107][T11474] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1636'. [ 382.870378][T11474] /dev/rnullb0: Can't open blockdev [ 382.898265][T11475] /dev/rnullb0: Can't open blockdev [ 383.018261][T11481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.030085][T11481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.056583][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.069490][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.097775][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.147130][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.228681][ T5860] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 383.260968][T11489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.272066][T11489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.391583][ T5860] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 383.402307][ T5860] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 383.415858][ T5860] usb 3-1: config 2 interface 0 has no altsetting 0 [ 383.424820][ T5860] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 383.434343][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.450584][T11444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.459809][T11444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.467825][ T5860] usb 3-1: Product: syz [ 383.472332][ T5860] usb 3-1: Manufacturer: syz [ 383.477897][ T5860] usb 3-1: SerialNumber: syz [ 383.483832][ T10] cdc_ncm 2-1:1.0: bind() failure [ 383.501476][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 383.510756][ T10] cdc_ncm 2-1:1.1: bind() failure [ 383.528546][ T10] usb 2-1: USB disconnect, device number 89 [ 383.566149][T11491] /dev/rnullb0: Can't lookup blockdev [ 383.806642][ T5860] ims_pcu 3-1:2.0: Zero length descriptor [ 383.813895][ T5860] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 383.831468][ T5860] usb 3-1: USB disconnect, device number 89 [ 383.958227][ T30] audit: type=1804 audit(1751942441.579:107): pid=11510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1646" name="rnullb0" dev="tmpfs" ino=1693 res=1 errno=0 [ 384.282843][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.292238][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.295639][T11525] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 384.335032][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.353317][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.359016][ T5943] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 384.366454][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1653'. [ 384.549385][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 384.571702][ T5943] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 384.593343][ T5943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.619757][ T5943] usb 2-1: config 0 has no interface number 0 [ 384.627384][ T5943] usb 2-1: config 0 interface 196 altsetting 31 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 384.640927][ T5943] usb 2-1: config 0 interface 196 has no altsetting 0 [ 384.650637][T11537] /dev/rnullb0: Can't open blockdev [ 384.657820][ T5943] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 384.669559][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.677716][ T5943] usb 2-1: Product: syz [ 384.682385][ T5943] usb 2-1: Manufacturer: syz [ 384.687088][ T5943] usb 2-1: SerialNumber: syz [ 384.699310][ T5943] usb 2-1: config 0 descriptor?? [ 384.710620][ T5943] ipheth 2-1:0.196: Unable to find alternate settings interface [ 384.978057][ T5943] usb 2-1: USB disconnect, device number 90 [ 385.177348][T11552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1659'. [ 385.312831][T11561] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 385.734428][T11567] /dev/rnullb0: Can't open blockdev [ 386.155276][T11577] /dev/rnullb0: Can't open blockdev [ 386.265002][T11580] /dev/rnullb0: Can't open blockdev [ 386.344569][T11582] /dev/rnullb0: Can't open blockdev [ 386.413849][T11584] can: request_module (can-proto-3) failed. [ 386.414785][T11582] can: request_module (can-proto-3) failed. [ 386.532234][T11593] bpf: Bad value for 'gid' [ 386.593682][T11597] MTD: Couldn't look up '/dev/rnullb0': -15 [ 386.624186][T11599] input: syz0 as /devices/virtual/input/input24 [ 386.642602][ T5860] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 386.839193][ T5860] usb 3-1: Using ep0 maxpacket: 32 [ 386.857482][ T5860] usb 3-1: config 0 interface 0 has no altsetting 0 [ 386.878443][ T5860] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 386.887558][ T5860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.906394][ T5860] usb 3-1: config 0 descriptor?? [ 386.986597][ T30] audit: type=1326 audit(1751942444.609:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11605 comm="syz.1.1675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f89bd38e929 code=0x0 [ 387.124870][T11611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 387.136052][T11611] loop6: detected capacity change from 0 to 7 [ 387.155572][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.165085][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.175148][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.184477][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.194573][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.203819][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.213907][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.223175][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.231409][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.240680][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.253357][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.263149][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.272671][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.281930][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.290032][T11611] ldm_validate_partition_table(): Disk read failed. [ 387.302559][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.311825][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.320634][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.329950][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.346625][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 387.355917][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 387.366400][T11611] Dev loop6: unable to read RDB block 0 [ 387.377212][T11611] loop6: unable to read partition table [ 387.385298][T11611] loop6: partition table beyond EOD, truncated [ 387.395680][ T5860] corsair-psu 0003:1B1C:1C09.0022: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 387.428032][T11611] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 387.749470][T11630] /dev/rnullb0: Can't open blockdev [ 387.760512][T11630] /dev/rnullb0: Can't open blockdev [ 387.766656][T11630] /dev/rnullb0: Can't open blockdev [ 387.776778][T11630] /dev/rnullb0: Can't open blockdev [ 387.784840][T11630] /dev/rnullb0: Can't open blockdev [ 387.794701][T11630] /dev/rnullb0: Can't open blockdev [ 387.801964][T11630] /dev/rnullb0: Can't open blockdev [ 387.808289][T11630] /dev/rnullb0: Can't open blockdev [ 387.810447][ T5860] corsair-psu 0003:1B1C:1C09.0022: unable to initialize device (-71) [ 387.820906][T11630] /dev/rnullb0: Can't open blockdev [ 387.833424][T11630] /dev/rnullb0: Can't open blockdev [ 387.843235][T11630] /dev/rnullb0: Can't open blockdev [ 387.847736][ T5860] corsair-psu 0003:1B1C:1C09.0022: probe with driver corsair-psu failed with error -71 [ 387.854897][T11630] /dev/rnullb0: Can't open blockdev [ 387.864823][T11630] /dev/rnullb0: Can't open blockdev [ 387.872756][ T5860] usb 3-1: USB disconnect, device number 90 [ 387.875171][T11630] /dev/rnullb0: Can't open blockdev [ 387.892293][T11630] /dev/rnullb0: Can't open blockdev [ 387.899296][T11630] /dev/rnullb0: Can't open blockdev [ 387.905581][T11630] /dev/rnullb0: Can't open blockdev [ 387.915558][T11630] /dev/rnullb0: Can't open blockdev [ 387.922021][T11630] /dev/rnullb0: Can't open blockdev [ 387.927896][T11630] /dev/rnullb0: Can't open blockdev [ 387.940199][T11630] /dev/rnullb0: Can't open blockdev [ 387.946073][T11630] /dev/rnullb0: Can't open blockdev [ 387.954895][T11630] /dev/rnullb0: Can't open blockdev [ 387.962865][T11630] /dev/rnullb0: Can't open blockdev [ 387.969327][T11630] /dev/rnullb0: Can't open blockdev [ 387.975546][T11630] /dev/rnullb0: Can't open blockdev [ 387.981975][T11630] /dev/rnullb0: Can't open blockdev [ 387.988127][T11630] /dev/rnullb0: Can't open blockdev [ 388.019279][T11630] /dev/rnullb0: Can't open blockdev [ 388.025498][T11630] /dev/rnullb0: Can't open blockdev [ 388.033030][T11630] /dev/rnullb0: Can't open blockdev [ 388.043811][T11630] /dev/rnullb0: Can't open blockdev [ 388.053764][T11630] /dev/rnullb0: Can't open blockdev [ 388.062664][T11633] /dev/rnullb0: Can't open blockdev [ 388.063484][T11630] /dev/rnullb0: Can't open blockdev [ 388.076354][T11630] /dev/rnullb0: Can't open blockdev [ 388.085753][T11630] /dev/rnullb0: Can't open blockdev [ 388.092090][T11630] /dev/rnullb0: Can't open blockdev [ 388.098195][T11630] /dev/rnullb0: Can't open blockdev [ 388.107442][T11630] /dev/rnullb0: Can't open blockdev [ 388.113827][T11630] /dev/rnullb0: Can't open blockdev [ 388.123453][T11630] /dev/rnullb0: Can't open blockdev [ 388.129984][T11630] /dev/rnullb0: Can't open blockdev [ 388.136071][T11630] /dev/rnullb0: Can't open blockdev [ 388.146126][T11630] /dev/rnullb0: Can't open blockdev [ 388.172321][T11630] /dev/rnullb0: Can't open blockdev [ 388.181232][T11630] /dev/rnullb0: Can't open blockdev [ 388.187581][T11630] /dev/rnullb0: Can't open blockdev [ 388.196160][T11630] /dev/rnullb0: Can't open blockdev [ 388.203558][T11630] /dev/rnullb0: Can't open blockdev [ 388.212426][T11630] /dev/rnullb0: Can't open blockdev [ 388.218250][T11630] /dev/rnullb0: Can't open blockdev [ 388.224954][T11630] /dev/rnullb0: Can't open blockdev [ 388.232680][T11630] /dev/rnullb0: Can't open blockdev [ 388.239401][T11630] /dev/rnullb0: Can't open blockdev [ 388.245258][T11630] /dev/rnullb0: Can't open blockdev [ 388.254807][T11630] /dev/rnullb0: Can't open blockdev [ 388.262807][T11630] /dev/rnullb0: Can't open blockdev [ 388.272706][T11630] /dev/rnullb0: Can't open blockdev [ 388.281880][T11630] /dev/rnullb0: Can't open blockdev [ 388.288001][T11630] /dev/rnullb0: Can't open blockdev [ 388.299974][T11630] /dev/rnullb0: Can't open blockdev [ 388.306171][T11630] /dev/rnullb0: Can't open blockdev [ 388.314896][T11630] /dev/rnullb0: Can't open blockdev [ 388.327367][T11630] /dev/rnullb0: Can't open blockdev [ 388.328195][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.336430][T11630] /dev/rnullb0: Can't open blockdev [ 388.370895][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.398116][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.431183][ T5860] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 388.444363][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.453340][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.463483][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.471288][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.477156][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.483444][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.489633][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.496889][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.503513][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.509746][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.515576][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.523950][ T30] audit: type=1326 audit(1751942446.149:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11642 comm="syz.0.1684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa685d8e929 code=0x0 [ 388.547468][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.554172][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.560508][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.566459][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.573440][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.583959][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.590249][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.596288][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.603180][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.609719][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.615612][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.621233][ T5860] usb 2-1: Using ep0 maxpacket: 32 [ 388.649875][ T5860] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 388.669616][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.675495][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.681423][ T5860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 388.702891][ T5860] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 388.709188][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.712400][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.734547][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.735169][ T5860] usb 2-1: Product: syz [ 388.752673][ T5860] usb 2-1: Manufacturer: syz [ 388.755239][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.762810][ T5860] usb 2-1: SerialNumber: syz [ 388.789342][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.806877][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.819463][T11648] /dev/nullb0: Can't open blockdev [ 388.829119][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.850209][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.857998][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.864922][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.873593][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.880427][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.886387][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.894991][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.901893][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.907894][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.916487][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.926634][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.935080][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.959923][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.972536][T11638] /dev/rnullb0: Can't lookup blockdev [ 388.984788][T11635] /dev/rnullb0: Can't open blockdev [ 389.008956][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.016942][ T5860] usbhid 2-1:1.0: can't add hid device: -71 [ 389.028516][ T5860] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 389.039774][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.045842][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.056776][ T5860] usb 2-1: USB disconnect, device number 91 [ 389.063624][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.085821][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.101224][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.119728][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.136142][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.147984][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.154302][T11638] /dev/rnullb0: Can't lookup blockdev [ 389.175461][T11654] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1688'. [ 389.187060][T11654] tipc: Invalid UDP bearer configuration [ 389.187129][T11654] tipc: Enabling of bearer rejected, failed to enable media [ 389.603759][T11675] /dev/rnullb0: Can't open blockdev [ 389.993674][T11690] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 390.674316][T11721] /dev/rnullb0: Can't open blockdev [ 390.841998][ T30] audit: type=1804 audit(1751942448.459:110): pid=11724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1707" name="rnullb0" dev="tmpfs" ino=1693 res=1 errno=0 [ 391.358458][ T5945] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 391.394093][T11738] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1713'. [ 391.502780][T11741] binder: 11740:11741 ioctl 400c620e 200000000080 returned -22 [ 391.522044][ T5945] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 391.534703][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.546085][T11741] binder: 11740:11741 ioctl 84009422 2000000000c0 returned -22 [ 391.554456][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.564951][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 391.586353][ T5945] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 391.596076][ T5945] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 391.607910][ T5945] usb 3-1: Manufacturer: syz [ 391.627201][ T5945] usb 3-1: config 0 descriptor?? [ 391.894800][T11747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1715'. [ 391.934593][T11750] /dev/rnullb0: Can't open blockdev [ 392.053813][ T5945] appleir 0003:05AC:8243.0023: unknown main item tag 0x0 [ 392.084089][ T5945] appleir 0003:05AC:8243.0023: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 392.133495][T11755] openvswitch: netlink: IPv6 tunnel dst address is zero [ 392.178554][ T5906] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 392.340437][ T5906] usb 2-1: Using ep0 maxpacket: 32 [ 392.361290][ T5906] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 392.373086][ T5906] usb 2-1: config 0 has no interface number 0 [ 392.388829][ T5906] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 392.410720][ T5906] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 392.425531][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.455414][ T5906] usb 2-1: Product: syz [ 392.464658][ T5906] usb 2-1: Manufacturer: syz [ 392.474833][ T5906] usb 2-1: SerialNumber: syz [ 392.503105][ T5906] usb 2-1: config 0 descriptor?? [ 392.532011][ T5906] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 392.543841][T11765] overlayfs: missing 'lowerdir' [ 392.552584][ T5906] em28xx 2-1:0.132: Video interface 132 found: [ 392.934177][ T5906] em28xx 2-1:0.132: chip ID is em2710/2820 [ 393.350223][T11782] netlink: 'syz.0.1726': attribute type 1 has an invalid length. [ 393.382042][T11782] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1726'. [ 393.440964][T11787] /dev/rnullb0: Can't open blockdev [ 393.710670][T11794] /dev/rnullb0: Can't open blockdev [ 393.752430][T11798] overlayfs: missing 'lowerdir' [ 393.760307][T11796] /dev/rnullb0: Can't lookup blockdev [ 393.856945][T11800] 9pnet_fd: Insufficient options for proto=fd [ 394.020373][T11806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.043126][ T5906] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 394.052544][T11806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.061207][ T5906] em28xx 2-1:0.132: board has no eeprom [ 394.120125][ T5860] usb 3-1: USB disconnect, device number 91 [ 394.131112][ T5906] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 394.161103][ T5906] em28xx 2-1:0.132: analog set to bulk mode. [ 394.187717][ T10] em28xx 2-1:0.132: Registering V4L2 extension [ 394.331882][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 394.364151][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 394.379426][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 394.401417][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 394.486437][T11813] /dev/rnullb0: Can't open blockdev [ 394.562794][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 394.584159][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 394.599228][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 394.620508][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 394.727368][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 394.755115][T11821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.756635][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 394.768232][T11821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.792910][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 394.817508][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 394.827126][ T10] em28xx 2-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 394.852062][ T10] em28xx 2-1:0.132: Config register raw data: 0xfffffffb [ 394.862173][ T10] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 394.875645][ T10] em28xx 2-1:0.132: No AC97 audio processor [ 394.909860][ T10] usb 2-1: Decoder not found [ 394.914515][ T10] em28xx 2-1:0.132: failed to create media graph [ 394.952542][ T10] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 394.975730][ T10] em28xx 2-1:0.132: Remote control support is not available for this card. [ 395.095042][T11832] /dev/rnullb0: Can't open blockdev [ 395.107024][T11833] /dev/rnullb0: Can't open blockdev [ 395.244011][T11837] delete_channel: no stack [ 395.250502][T11837] delete_channel: no stack [ 395.357347][T11844] /dev/rnullb0: Can't lookup blockdev [ 395.892821][T11866] tmpfs: Bad value for 'mpol' [ 396.004944][T11873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.030358][T11873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.321712][T11884] fuse: Bad value for 'user_id' [ 396.326747][T11884] fuse: Bad value for 'user_id' [ 396.337060][T11884] fuse: Bad value for 'user_id' [ 396.343108][T11884] fuse: Bad value for 'user_id' [ 396.348317][T11884] fuse: Bad value for 'user_id' [ 396.355997][T11884] fuse: Bad value for 'user_id' [ 396.365851][T11884] fuse: Bad value for 'user_id' [ 396.373092][T11884] fuse: Bad value for 'user_id' [ 396.378245][T11884] fuse: Bad value for 'user_id' [ 396.384556][T11884] fuse: Bad value for 'user_id' [ 396.392306][T11884] fuse: Bad value for 'user_id' [ 396.397228][T11884] fuse: Bad value for 'user_id' [ 396.402664][T11884] fuse: Bad value for 'user_id' [ 396.407547][T11884] fuse: Bad value for 'user_id' [ 396.413954][T11884] fuse: Bad value for 'user_id' [ 396.418934][T11884] fuse: Bad value for 'user_id' [ 396.424116][T11884] fuse: Bad value for 'user_id' [ 396.429051][T11884] fuse: Bad value for 'user_id' [ 396.434257][T11884] fuse: Bad value for 'user_id' [ 396.442131][T11884] fuse: Bad value for 'user_id' [ 396.447429][T11884] fuse: Bad value for 'user_id' [ 396.452457][T11884] fuse: Bad value for 'user_id' [ 396.457760][T11884] fuse: Bad value for 'user_id' [ 396.462721][T11884] fuse: Bad value for 'user_id' [ 396.467898][T11884] fuse: Bad value for 'user_id' [ 396.472840][T11884] fuse: Bad value for 'user_id' [ 396.478849][T11884] fuse: Bad value for 'user_id' [ 396.483728][T11884] fuse: Bad value for 'user_id' [ 396.489081][T11884] fuse: Bad value for 'user_id' [ 396.493978][T11884] fuse: Bad value for 'user_id' [ 396.499345][T11884] fuse: Bad value for 'user_id' [ 396.504229][T11884] fuse: Bad value for 'user_id' [ 396.509569][T11884] fuse: Bad value for 'user_id' [ 396.514460][T11884] fuse: Bad value for 'user_id' [ 396.519941][T11884] fuse: Bad value for 'user_id' [ 396.524913][T11884] fuse: Bad value for 'user_id' [ 396.531011][T11884] fuse: Bad value for 'user_id' [ 396.535937][T11884] fuse: Bad value for 'user_id' [ 396.548811][T11884] fuse: Bad value for 'user_id' [ 396.553713][T11884] fuse: Bad value for 'user_id' [ 396.563611][T11884] fuse: Bad value for 'user_id' [ 396.588905][T11884] fuse: Bad value for 'user_id' [ 396.594208][T11884] fuse: Bad value for 'user_id' [ 396.599772][T11884] fuse: Bad value for 'user_id' [ 396.611857][T11884] fuse: Bad value for 'user_id' [ 396.616765][T11884] fuse: Bad value for 'user_id' [ 396.626195][T11884] fuse: Bad value for 'user_id' [ 396.632294][T11884] fuse: Bad value for 'user_id' [ 396.637622][T11884] fuse: Bad value for 'user_id' [ 396.642715][T11884] fuse: Bad value for 'user_id' [ 396.647910][T11884] fuse: Bad value for 'user_id' [ 396.653367][T11884] fuse: Bad value for 'user_id' [ 396.765822][T11893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.779137][T11893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.845186][T11897] syz.1.1758: attempt to access beyond end of device [ 396.845186][T11897] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 396.864980][T11897] SQUASHFS error: Failed to read block 0x0: -5 [ 396.871829][T11897] unable to read squashfs_super_block [ 397.048562][ T5944] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 397.199403][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 397.223755][ T5944] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 397.239199][ T5944] usb 3-1: config 0 has no interface number 0 [ 397.264480][ T5944] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 397.278971][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 397.287938][ T5944] usb 3-1: Product: syz [ 397.292982][ T5944] usb 3-1: Manufacturer: syz [ 397.313280][ T5944] usb 3-1: config 0 descriptor?? [ 397.515000][T11918] /dev/rnullb0: Can't open blockdev [ 397.526145][T11920] MTD: Couldn't look up '/dev/rnullb0': -15 [ 397.574148][ T5945] usb 3-1: USB disconnect, device number 92 [ 397.860099][T11937] /dev/rnullb0: Can't open blockdev [ 397.941905][T11940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.951103][T11940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.964655][T11940] tmpfs: Bad value for 'mpol' [ 397.971197][T11940] /dev/rnullb0: Can't open blockdev [ 397.979042][T11940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.988194][T11940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.059439][T11945] /dev/rnullb0: Can't open blockdev [ 398.387457][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.397693][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.412797][T11957] overlayfs: invalid origin (0000) [ 398.440626][T11957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.459810][T11957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.480090][T11957] /dev/rnullb0: Can't open blockdev [ 398.503722][T11959] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1777'. [ 398.516861][T11959] netlink: 'syz.3.1777': attribute type 1 has an invalid length. [ 398.527456][T11959] netlink: 'syz.3.1777': attribute type 2 has an invalid length. [ 398.538453][T11959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1777'. [ 398.549765][ T5945] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 398.720463][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.731975][ T5945] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.745785][ T5945] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 398.755307][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.763539][ T5945] usb 3-1: Product: syz [ 398.768000][ T5945] usb 3-1: Manufacturer: syz [ 398.772714][ T5945] usb 3-1: SerialNumber: syz [ 398.780575][ T5945] usb 3-1: config 0 descriptor?? [ 398.912945][T11970] MTD: Couldn't look up '/dev/rnullb0': -15 [ 399.003735][T11972] overlayfs: failed to clone upperpath [ 399.021566][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.031348][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.421416][T11990] /dev/rnullb0: Can't open blockdev [ 399.812919][T12001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.833211][T12001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.090456][T12008] /dev/rnullb0: Can't open blockdev [ 400.341049][T12012] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1794'. [ 400.424218][T12014] /dev/rnullb0: Can't open blockdev [ 400.550012][T12024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1798'. [ 400.679906][T12029] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1800'. [ 400.695363][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1800'. [ 400.720878][T12029] /dev/rnullb0: Can't open blockdev [ 400.786044][T12033] /dev/rnullb0: Can't open blockdev [ 401.053632][T12043] /dev/rnullb0: Can't open blockdev [ 401.119226][T12045] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 401.349777][ T5906] usb 3-1: USB disconnect, device number 93 [ 401.600068][T12045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.613486][T12045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.838428][ T5906] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 401.895700][T12057] fuse: Bad value for 'fd' [ 402.000754][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.020684][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.038479][ T5906] usb 3-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 402.047580][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.083835][ T5906] usb 3-1: config 0 descriptor?? [ 402.142695][T12068] netlink: 'syz.3.1810': attribute type 1 has an invalid length. [ 402.228768][T12076] cgroup: No subsys list or none specified [ 402.244170][T12075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.256148][T12075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.433607][T12082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.461020][T12082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.476975][T12082] /dev/rnullb0: Can't open blockdev [ 402.542855][ T5906] uclogic 0003:5543:0042.0024: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.2-1/input0 [ 402.726498][ T5944] usb 3-1: USB disconnect, device number 94 [ 402.811764][T12086] /dev/rnullb0: Can't lookup blockdev [ 403.209442][T12091] /dev/rnullb0: Can't open blockdev [ 403.406777][T12093] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1818'. [ 404.019171][T12109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.059519][T12109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.068790][ T30] audit: type=1804 audit(1751942461.689:111): pid=12111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1825" name="rnullb0" dev="tmpfs" ino=1693 res=1 errno=0 [ 404.098418][ T5906] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 404.106907][T12109] /dev/rnullb0: Can't open blockdev [ 404.262880][T12115] MTD: Couldn't look up '/dev/sg0': -15 [ 404.268958][T12115] /dev/sg0: Can't lookup blockdev [ 404.275836][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.290799][ T5906] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 404.308421][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.332258][ T5906] usb 3-1: config 0 descriptor?? [ 404.426383][T12119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.452329][T12119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.503672][T12117] /dev/rnullb0: Can't open blockdev [ 404.574621][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 404.591400][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 404.606655][ T5906] usb 3-1: USB disconnect, device number 95 [ 404.828885][T12133] /dev/rnullb0: Can't lookup blockdev [ 404.850680][T12134] /dev/rnullb0: Can't open blockdev [ 404.856609][ T30] audit: type=1800 audit(1751942462.479:112): pid=12129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1831" name="/newroot/dev/rnullb0" dev="tmpfs" ino=1693 res=0 errno=0 [ 404.938660][ T5906] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 405.089081][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 405.096942][ T5906] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.109241][ T5906] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 405.118680][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.132989][ T5906] usb 3-1: config 0 descriptor?? [ 405.510792][T12148] /dev/rnullb0: Can't open blockdev [ 405.611305][ T5906] usbhid 3-1:0.0: can't add hid device: -71 [ 405.631648][ T5906] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 405.641970][T12155] /dev/rnullb0: Can't open blockdev [ 405.678564][ T5906] usb 3-1: USB disconnect, device number 96 [ 405.741252][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.771533][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.821708][T12159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.862040][T12159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.862316][T12165] /dev/rnullb0: Can't lookup blockdev [ 405.882825][T12163] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 405.890637][T12163] /dev/rnullb0: Can't open blockdev [ 406.318460][ T5945] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 406.448098][T12183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.463839][T12183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.485182][ T5945] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 406.507700][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.527531][ T5945] usb 3-1: Product: syz [ 406.539038][ T5945] usb 3-1: Manufacturer: syz [ 406.543700][ T5945] usb 3-1: SerialNumber: syz [ 406.562797][ T5945] usb 3-1: config 0 descriptor?? [ 406.570528][T12186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 406.651358][T12188] /dev/rnullb0: Can't lookup blockdev [ 406.772284][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.787181][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.801661][T12173] /dev/rnullb0: Can't open blockdev [ 406.816311][T12173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.834307][T12190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.843104][T12173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.856971][T12190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.920954][ T5945] usb 3-1: Firmware version (0.0) predates our first public release. [ 406.943167][ T5945] usb 3-1: Please update to version 0.2 or newer [ 407.004756][ T5945] usb 3-1: USB disconnect, device number 97 [ 407.024829][T12195] /dev/rnullb0: Can't open blockdev [ 407.186082][T12197] /dev/rnullb0: Can't open blockdev [ 407.321225][ T30] audit: type=1326 audit(1751942464.949:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.2.1853" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52a478e929 code=0x0 [ 407.412374][T12202] /dev/rnullb0: Can't open blockdev [ 407.591145][ T30] audit: type=1326 audit(1751942465.219:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12206 comm="syz.3.1857" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa51d8e929 code=0x0 [ 407.680424][T12211] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1858'. [ 407.923581][T12216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.935149][T12216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.255754][T12221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1860'. [ 408.342350][T12221] syzkaller1: entered promiscuous mode [ 408.347882][T12221] syzkaller1: entered allmulticast mode [ 408.435709][T12219] /dev/rnullb0: Can't open blockdev [ 408.586854][T12228] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 408.721821][T12232] /dev/rnullb0: Can't open blockdev [ 408.727504][T12230] /dev/rnullb0: Can't lookup blockdev [ 408.919993][ T30] audit: type=1326 audit(1751942466.549:115): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=12235 comm="syz.2.1866" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52a478e929 code=0x0 [ 408.944699][T12238] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1867'. [ 408.954531][T12238] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 408.972509][T12238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1867'. [ 409.002815][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.011870][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.026901][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.038172][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.989429][T12253] virtio-fs: tag not found [ 410.031582][T12253] vivid-003: disconnect [ 410.038081][T12251] vivid-003: reconnect [ 410.071154][T12255] overlay: ./file0 is not a directory [ 410.080313][T12255] overlay: Unknown parameter 'smackfsfloor' [ 410.113272][T12255] /dev/rnullb0: Can't lookup blockdev [ 410.132354][T12257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 410.261514][T12257] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 410.489984][T12272] /dev/rnullb0: Can't open blockdev [ 410.693153][T12279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.703629][T12279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.888454][ T5945] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 411.040490][ T5945] usb 3-1: config 198 descriptor has 1 excess byte, ignoring [ 411.048073][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 411.059284][ T5945] usb 3-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 411.071112][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 411.082402][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 411.093356][ T5945] usb 3-1: config 198 descriptor has 1 excess byte, ignoring [ 411.101178][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 411.112089][ T5945] usb 3-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 411.123764][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 411.134881][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 411.146977][ T5945] usb 3-1: config 198 descriptor has 1 excess byte, ignoring [ 411.155849][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 411.167746][ T5945] usb 3-1: config 198 interface 0 altsetting 0 has an endpoint descriptor with address 0x3A, changing to 0xA [ 411.180044][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 10 [ 411.191343][ T5945] usb 3-1: config 198 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 411.203257][ T5945] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 411.212669][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=33 [ 411.220891][ T5945] usb 3-1: Product: syz [ 411.225092][ T5945] usb 3-1: Manufacturer: syz [ 411.230481][ T5945] usb 3-1: SerialNumber: syz [ 411.238720][T12277] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 411.499072][T12277] binder: 12276:12277 ioctl 5381 0 returned -22 [ 411.596670][ T5945] adutux 3-1:198.0: interrupt endpoints not found [ 411.634027][ T5945] usb 3-1: USB disconnect, device number 98 [ 412.381266][T12317] /dev/rnullb0: Can't open blockdev [ 412.559818][T12325] /dev/rnullb0: Can't open blockdev [ 412.591100][T12327] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1894'. [ 412.992919][T12345] fuse: Bad value for 'user_id' [ 413.002995][T12345] fuse: Bad value for 'user_id' [ 413.351602][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.364098][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.418456][ T5860] usb 3-1: new low-speed USB device number 99 using dummy_hcd [ 413.584971][ T5860] usb 3-1: No LPM exit latency info found, disabling LPM. [ 413.599890][ T5860] usb 3-1: config 5 has an invalid interface number: 45 but max is 0 [ 413.608027][ T5860] usb 3-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 413.638397][ T5860] usb 3-1: config 5 has no interface number 0 [ 413.644593][ T5860] usb 3-1: config 5 interface 45 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 413.678547][ T5860] usb 3-1: config 5 interface 45 altsetting 5 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 413.701361][ T5860] usb 3-1: config 5 interface 45 altsetting 5 endpoint 0xE has invalid maxpacket 16, setting to 8 [ 413.732788][ T5860] usb 3-1: config 5 interface 45 altsetting 5 endpoint 0x6 has invalid maxpacket 32, setting to 8 [ 413.748423][ T5860] usb 3-1: config 5 interface 45 altsetting 5 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 413.788476][ T5860] usb 3-1: config 5 interface 45 altsetting 5 endpoint 0x5 has invalid maxpacket 32, setting to 8 [ 413.810665][ T5860] usb 3-1: config 5 interface 45 altsetting 5 has a duplicate endpoint with address 0xE, skipping [ 413.813599][T12377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.841621][ T5860] usb 3-1: config 5 interface 45 has no altsetting 0 [ 413.841782][T12377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.020793][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.051637][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.069123][T12384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.110033][T12384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.836301][T12388] /dev/rnullb0: Can't open blockdev [ 414.854839][T12390] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1913'. [ 414.879956][T12390] /dev/rnullb0: Can't open blockdev [ 416.075727][ T30] audit: type=1804 audit(1751942473.699:116): pid=12414 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1923" name="rnullb0" dev="tmpfs" ino=1693 res=1 errno=0 [ 416.177062][T12417] netlink: 'syz.0.1922': attribute type 10 has an invalid length. [ 416.196832][ T5860] usb 3-1: string descriptor 0 read error: -71 [ 416.211576][ T5860] usb 3-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice=b7.ba [ 416.216978][T12417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1922'. [ 416.246233][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.274592][T12420] /dev/rnullb0: Can't open blockdev [ 416.291137][ T5860] usb 3-1: can't set config #5, error -71 [ 416.327421][ T5860] usb 3-1: USB disconnect, device number 99 [ 416.342356][T12417] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 416.562007][T12424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.589009][T12424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.122002][T12433] trusted_key: syz.3.1927 sent an empty control message without MSG_MORE. [ 417.139236][T12432] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 417.398561][ T5944] usb 3-1: new low-speed USB device number 100 using dummy_hcd [ 417.560781][ T5944] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 417.577040][ T5944] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 417.598975][ T5944] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.631594][ T5944] usb 3-1: config 0 interface 0 has no altsetting 0 [ 417.638287][ T5944] usb 3-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 417.657806][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.680727][ T5944] usb 3-1: config 0 descriptor?? [ 417.700851][T12432] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 417.984547][T12456] /dev/rnullb0: Can't open blockdev [ 418.135929][ T5944] hid-led 0003:04D8:F372.0025: unknown main item tag 0x0 [ 418.153015][ T5944] hid-led 0003:04D8:F372.0025: unknown main item tag 0x0 [ 418.171842][ T5944] hid-led 0003:04D8:F372.0025: unknown main item tag 0x0 [ 418.189546][ T5944] hid-led 0003:04D8:F372.0025: unknown main item tag 0x0 [ 418.207058][ T5944] hid-led 0003:04D8:F372.0025: unknown main item tag 0x0 [ 418.229402][ T5944] hid-led 0003:04D8:F372.0025: unknown main item tag 0x0 [ 418.254073][ T5944] hid-led 0003:04D8:F372.0025: unknown main item tag 0x0 [ 418.272670][ T5944] hid-led 0003:04D8:F372.0025: hidraw0: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.2-1/input0 [ 418.304728][T12463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.338625][T12463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.377207][T12463] /dev/rnullb0: Can't open blockdev [ 418.417085][ T5944] hid-led 0003:04D8:F372.0025: Greynut Luxafor initialized [ 418.453893][ T5944] usb 3-1: USB disconnect, device number 100 [ 418.467225][ T3504] leds luxafor0:blue:led5: Setting an LED's brightness failed (-38) [ 418.479597][ T3504] leds luxafor0:green:led5: Setting an LED's brightness failed (-38) [ 418.490892][ T36] leds luxafor0:red:led5: Setting an LED's brightness failed (-38) [ 418.517702][ T36] leds luxafor0:blue:led4: Setting an LED's brightness failed (-38) [ 418.544765][ T3504] leds luxafor0:green:led4: Setting an LED's brightness failed (-38) [ 418.562629][ T1110] leds luxafor0:red:led4: Setting an LED's brightness failed (-38) [ 418.581032][ T1110] leds luxafor0:blue:led3: Setting an LED's brightness failed (-38) [ 418.597927][ T1110] leds luxafor0:green:led3: Setting an LED's brightness failed (-38) [ 418.612125][ T13] leds luxafor0:red:led3: Setting an LED's brightness failed (-38) [ 418.622306][ T13] leds luxafor0:blue:led2: Setting an LED's brightness failed (-38) [ 418.643320][ T13] leds luxafor0:green:led2: Setting an LED's brightness failed (-38) [ 418.661784][ T13] leds luxafor0:red:led2: Setting an LED's brightness failed (-38) [ 418.676660][ T13] leds luxafor0:blue:led1: Setting an LED's brightness failed (-38) [ 418.693041][ T1110] leds luxafor0:green:led1: Setting an LED's brightness failed (-38) [ 418.705418][ T1110] leds luxafor0:red:led1: Setting an LED's brightness failed (-38) [ 418.718637][ T13] leds luxafor0:blue:led0: Setting an LED's brightness failed (-38) [ 418.728276][ T1110] leds luxafor0:green:led0: Setting an LED's brightness failed (-38) [ 418.738200][ T13] leds luxafor0:red:led0: Setting an LED's brightness failed (-38) [ 418.970042][T12477] /dev/rnullb0: Can't open blockdev [ 418.980138][T12478] /dev/rnullb0: Can't lookup blockdev [ 418.995734][T12479] /dev/rnullb0: Can't open blockdev [ 419.241910][T12490] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1947'. [ 419.528504][ T5944] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 419.691957][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.705376][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.716520][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 419.726541][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.739843][ T5944] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.748982][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.759672][ T5944] usb 3-1: config 0 descriptor?? [ 420.197939][T12514] /dev/rnullb0: Can't lookup blockdev [ 420.360336][ T5944] usbhid 3-1:0.0: can't add hid device: -71 [ 420.372213][ T5944] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 420.391764][ T5944] usb 3-1: USB disconnect, device number 101 [ 420.520347][T12529] /dev/rnullb0: Can't open blockdev [ 420.729658][T12536] openvswitch: netlink: Message has -1 unknown bytes. [ 420.970170][T12547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.980642][T12547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.015614][T12547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1964'. [ 421.307550][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.316201][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.322541][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.328930][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.335015][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.341167][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.347321][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.353417][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.359624][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.365499][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.371587][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.377429][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.383471][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.390383][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.396330][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.402751][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.408908][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.414710][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.420899][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.426626][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.433233][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.439136][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.444982][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.451140][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.456929][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.463478][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.469394][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.475239][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.482016][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.487706][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.493723][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.500085][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.505999][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.511998][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.517826][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.523767][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.529908][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.535682][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.549546][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.559593][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.578963][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.591557][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.609000][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.615150][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.622076][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.628078][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.640253][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.646092][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.653954][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.660008][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.665991][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.672011][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.678055][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.684121][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.690406][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.719476][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.725452][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.738876][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.744722][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.753639][T12550] /dev/rnullb0: Can't lookup blockdev [ 421.782563][T12554] /dev/rnullb0: Can't open blockdev [ 422.065453][T12571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.079149][T12571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.362070][T12585] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 422.378907][T12585] PKCS7: Only support pkcs7_signedData type [ 422.680519][T12599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.696903][T12599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.759937][T12605] PKCS7: Unknown OID: [4] 0.38.107.1697900.285475 [ 422.767944][T12605] PKCS7: Only support pkcs7_signedData type [ 423.033552][ T30] audit: type=1800 audit(1751942480.659:117): pid=12618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1987" name="nullb0" dev="tmpfs" ino=1998 res=0 errno=0 [ 423.468912][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 423.472869][T12637] /dev/rnullb0: Can't open blockdev [ 423.477912][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 423.479862][T12635] /dev/rnullb0: Can't open blockdev [ 423.513559][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 423.524666][T12639] /dev/rnullb0: Can't open blockdev [ 423.531487][T12635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1992'. [ 423.627166][T12644] /dev/rnullb0: Can't open blockdev [ 423.640036][T12644] /dev/rnullb0: Can't open blockdev [ 423.667136][T12644] /dev/rnullb0: Can't open blockdev [ 423.676737][T12644] /dev/rnullb0: Can't open blockdev [ 423.689171][T12644] /dev/rnullb0: Can't open blockdev [ 423.702066][T12644] /dev/rnullb0: Can't open blockdev [ 423.709349][T12646] binder: Unknown parameter 'max0000000000000000001' [ 423.717051][T12644] /dev/rnullb0: Can't open blockdev [ 423.737919][T12648] /dev/rnullb0: Can't open blockdev [ 423.756667][T12644] /dev/rnullb0: Can't open blockdev [ 423.780075][T12644] /dev/rnullb0: Can't open blockdev [ 423.786057][T12644] /dev/rnullb0: Can't open blockdev [ 423.807443][T12644] /dev/rnullb0: Can't open blockdev [ 423.815711][T12644] /dev/rnullb0: Can't open blockdev [ 423.835691][T12644] /dev/rnullb0: Can't open blockdev [ 423.852273][T12644] /dev/rnullb0: Can't open blockdev [ 423.872539][T12644] /dev/rnullb0: Can't open blockdev [ 423.888432][ T30] audit: type=1326 audit(1751942481.509:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12649 comm="syz.0.1998" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa685d8e929 code=0x0 [ 423.910786][T12644] /dev/rnullb0: Can't open blockdev [ 423.916763][T12644] /dev/rnullb0: Can't open blockdev [ 423.924852][T12644] /dev/rnullb0: Can't open blockdev [ 423.931280][T12644] /dev/rnullb0: Can't open blockdev [ 423.937359][T12644] /dev/rnullb0: Can't open blockdev [ 423.946040][T12644] /dev/rnullb0: Can't open blockdev [ 423.952069][T12644] /dev/rnullb0: Can't open blockdev [ 423.957872][T12644] /dev/rnullb0: Can't open blockdev [ 423.964589][T12644] /dev/rnullb0: Can't open blockdev [ 423.971722][T12644] /dev/rnullb0: Can't open blockdev [ 423.977653][T12644] /dev/rnullb0: Can't open blockdev [ 423.984655][T12644] /dev/rnullb0: Can't open blockdev [ 423.990690][T12644] /dev/rnullb0: Can't open blockdev [ 423.996455][T12644] /dev/rnullb0: Can't open blockdev [ 424.002759][T12644] /dev/rnullb0: Can't open blockdev [ 424.008774][T12644] /dev/rnullb0: Can't open blockdev [ 424.014499][T12644] /dev/rnullb0: Can't open blockdev [ 424.020922][T12644] /dev/rnullb0: Can't open blockdev [ 424.107128][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2000'. [ 424.807545][T12676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.816689][T12676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.103371][T12683] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 425.519844][T12695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.544277][T12695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.583475][T12695] /dev/rnullb0: Can't open blockdev [ 425.683189][ T30] audit: type=1326 audit(1751942483.309:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12703 comm="syz.0.2015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa685d8e929 code=0x0 [ 425.699495][T12707] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.2016'. [ 425.745790][ T30] audit: type=1326 audit(1751942483.369:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12703 comm="syz.0.2015" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa685d8e929 code=0x0 [ 426.108877][ T5906] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 426.238412][ T5906] usb 3-1: device descriptor read/64, error -71 [ 426.475227][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'. [ 426.484935][ T5906] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 426.494244][T12727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'. [ 426.567907][T12723] netlink: 'syz.1.2020': attribute type 10 has an invalid length. [ 426.576761][T12723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2020'. [ 426.609086][T12723] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 426.628416][ T5906] usb 3-1: device descriptor read/64, error -71 [ 426.661229][T12726] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2020'. [ 426.739166][ T5906] usb usb3-port1: attempt power cycle [ 426.799302][T12736] tmpfs: Bad value for 'mpol' [ 426.896947][T12739] /dev/rnullb0: Can't lookup blockdev [ 426.985715][T12741] overlayfs: failed to resolve './file0': -2 [ 427.078514][ T5906] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 427.099258][ T5906] usb 3-1: device descriptor read/8, error -71 [ 427.163242][T12743] fuse: Bad value for 'user_id' [ 427.169739][T12743] fuse: Bad value for 'user_id' [ 427.358416][ T5906] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 427.392670][ T5906] usb 3-1: device descriptor read/8, error -71 [ 427.459621][T12748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.471228][T12748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.509031][ T5906] usb usb3-port1: unable to enumerate USB device [ 427.512328][T12748] Mount JFS Failure: -22 [ 427.590787][T12754] /dev/rnullb0: Can't lookup blockdev [ 427.790730][T12757] /dev/rnullb0: Can't open blockdev [ 427.950635][ T5906] kernel read not supported for file /dsp1 (pid: 5906 comm: kworker/0:4) [ 428.134222][T12761] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.143979][T12761] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.152623][T12761] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.160988][T12761] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.171001][T12761] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.204724][ T5169] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.213941][ T5169] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.222789][ T5169] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.250999][ T5169] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.258946][ T5169] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.465479][ T3504] Bluetooth: hci3: Frame reassembly failed (-84) [ 428.641187][ T5856] syz-executor (5856) used greatest stack depth: 20040 bytes left [ 428.714542][T12767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2034'. [ 428.724744][T12767] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2034'. [ 428.734177][T12767] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2034'. [ 428.777086][ T1170] netdevsim netdevsim3 netdevsim3 (unregistering): left allmulticast mode [ 428.790865][ T1170] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.841063][T12759] chnl_net:caif_netlink_parms(): no params data found [ 428.910148][ T1170] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.054844][T12773] /dev/rnullb0: Can't open blockdev [ 429.110780][ T1170] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.234677][ T1170] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.283439][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.298212][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.307668][T12759] bridge_slave_0: entered allmulticast mode [ 429.323419][T12759] bridge_slave_0: entered promiscuous mode [ 429.342213][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.354015][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.362733][T12759] bridge_slave_1: entered allmulticast mode [ 429.376806][T12759] bridge_slave_1: entered promiscuous mode [ 429.443902][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.458152][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.467906][T12783] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2038'. [ 429.623465][T12759] team0: Port device team_slave_0 added [ 429.645776][T12759] team0: Port device team_slave_1 added [ 429.759568][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.778460][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.794291][T12787] /dev/rnullb0: Can't open blockdev [ 429.812012][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.826064][ T1170] bridge_slave_1: left allmulticast mode [ 429.839709][ T1170] bridge_slave_1: left promiscuous mode [ 429.847148][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.933488][ T1170] bridge_slave_0: left allmulticast mode [ 429.950071][ T1170] bridge_slave_0: left promiscuous mode [ 429.960787][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.191064][T12799] /dev/rnullb0: Can't open blockdev [ 430.288510][ T5169] Bluetooth: hci4: command tx timeout [ 430.305165][T12802] /dev/rnullb0: Can't open blockdev [ 430.519559][T12761] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 430.526405][ T5169] Bluetooth: hci3: command 0x1003 tx timeout [ 430.835119][ T1170] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.846454][T12809] /dev/rnullb0: Can't open blockdev [ 430.888126][ T1170] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.914855][ T1170] bond0 (unregistering): Released all slaves [ 430.931878][T12811] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 430.944497][T12811] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 430.955706][T12811] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 430.974422][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.000380][T12813] netlink: 400 bytes leftover after parsing attributes in process `syz.0.2049'. [ 431.018535][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.067358][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.133941][ T1170] : left promiscuous mode [ 431.445031][T12759] hsr_slave_0: entered promiscuous mode [ 431.455110][T12759] hsr_slave_1: entered promiscuous mode [ 431.463056][T12822] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 431.939577][T12837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.975673][T12837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.977961][T12838] /dev/rnullb0: Can't open blockdev [ 432.011584][ T1170] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 432.034478][ T1170] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 432.054738][ T1170] batman_adv: batadv0: Removing interface: virt_wifi0 [ 432.127788][ T1170] veth1_macvtap: left promiscuous mode [ 432.160409][ T1170] veth0_macvtap: left promiscuous mode [ 432.176496][ T1170] veth1_vlan: left promiscuous mode [ 432.186564][ T1170] veth0_vlan: left promiscuous mode [ 432.360110][T12761] Bluetooth: hci4: command tx timeout [ 433.036775][ T1170] team0 (unregistering): Port device team_slave_1 removed [ 433.128402][ T1170] team0 (unregistering): Port device team_slave_0 removed [ 433.851185][T12864] loop6: detected capacity change from 0 to 7 [ 433.858911][ C1] blk_print_req_error: 10 callbacks suppressed [ 433.858932][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 433.874562][ C1] buffer_io_error: 10 callbacks suppressed [ 433.874582][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.888915][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 433.898093][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.908602][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 433.917781][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.928053][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 433.937287][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.948403][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 433.957588][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.968001][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 433.977333][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 433.987174][T12864] ldm_validate_partition_table(): Disk read failed. [ 433.995208][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.004455][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.017512][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.026797][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.057362][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.066698][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.076233][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 434.085446][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 434.093497][T12864] Dev loop6: unable to read RDB block 0 [ 434.110215][T12864] loop6: unable to read partition table [ 434.116621][T12864] loop6: partition table beyond EOD, truncated [ 434.126878][T12864] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà–() failed (rc=-5) [ 434.439923][T12761] Bluetooth: hci4: command tx timeout [ 434.702935][T12887] /dev/rnullb0: Can't open blockdev [ 434.748008][T12889] loop6: detected capacity change from 0 to 2560 [ 434.770200][T12889] ldm_validate_partition_table(): Disk read failed. [ 434.777462][T12889] Dev loop6: unable to read RDB block 0 [ 434.798128][ T1170] IPVS: stop unused estimator thread 0... [ 434.812779][T12889] loop6: unable to read partition table [ 434.858412][T12889] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 435.635325][T12759] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 435.732271][T12759] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 435.772275][T12759] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 435.814417][T12931] /dev/rnullb0: Can't open blockdev [ 435.823019][T12759] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 435.843393][T12932] /dev/rnullb0: Can't open blockdev [ 435.992725][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 436.019393][ T43] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 436.051090][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.071744][T12940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.083174][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.090530][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.101437][T12940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.123851][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.131110][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.181075][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 436.193147][ T43] usb 3-1: config 255 has an invalid interface number: 154 but max is 0 [ 436.212298][ T43] usb 3-1: config 255 has no interface number 0 [ 436.231209][ T43] usb 3-1: config 255 interface 154 has no altsetting 0 [ 436.255531][ T43] usb 3-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=9a.6f [ 436.267497][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.285755][ T43] usb 3-1: Product: syz [ 436.291953][ T43] usb 3-1: Manufacturer: syz [ 436.296686][ T43] usb 3-1: SerialNumber: syz [ 436.518513][T12761] Bluetooth: hci4: command tx timeout [ 436.527012][T12927] /dev/rnullb0: Can't open blockdev [ 436.570330][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 436.769145][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.793537][ T43] usb 3-1: USB disconnect, device number 106 [ 436.846084][T12759] veth0_vlan: entered promiscuous mode [ 436.915594][T12759] veth1_vlan: entered promiscuous mode [ 436.936554][T10691] udevd[10691]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:255.154/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.937168][T12957] /dev/rnullb0: Can't open blockdev [ 436.986435][T12759] veth0_macvtap: entered promiscuous mode [ 437.029371][T12759] veth1_macvtap: entered promiscuous mode [ 437.102506][T12759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.158254][T12759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.247467][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.306620][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.316652][T12969] /dev/rnullb0: Can't open blockdev [ 437.337119][ T1110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.399305][ T1110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.500019][T12977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.550060][T12977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.579225][T12980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.599962][T12983] /dev/rnullb0: Can't open blockdev [ 437.626897][T12980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.644622][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.688834][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.740569][T12986] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.820704][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.833809][T12986] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.845107][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.913260][T12992] ALSA: mixer_oss: invalid OSS volume '' [ 438.070455][T12996] overlay: ./file0 is not a directory [ 438.228799][T13002] /dev/rnullb0: Can't open blockdev [ 438.678815][ T983] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 438.775051][T13025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.784217][T13025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.839761][ T983] usb 4-1: Using ep0 maxpacket: 8 [ 438.858479][ T983] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.873547][ T983] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 438.909777][ T983] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 438.936117][ T983] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 439.002487][ T983] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 439.028499][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.067465][ T983] usb 4-1: Product: syz [ 439.074949][ T983] usb 4-1: Manufacturer: syz [ 439.097646][ T983] usb 4-1: SerialNumber: syz [ 439.123574][ T983] usb 4-1: config 0 descriptor?? [ 439.146135][ T983] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 439.166770][ T983] imon 4-1:0.0: unable to initialize intf0, err -19 [ 439.186266][ T983] imon:imon_probe: failed to initialize context! [ 439.198546][ T983] imon 4-1:0.0: unable to register, err -19 [ 439.347804][T13001] /dev/rnullb0: Can't open blockdev [ 439.928860][ T5944] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 439.986246][T13052] netlink: 'syz.1.2093': attribute type 1 has an invalid length. [ 440.007871][T13052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.088607][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 440.113375][ T5944] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 440.126525][ T5944] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.153549][ T5944] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 440.167112][ T5944] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 440.176012][ T5944] usb 3-1: Product: syz [ 440.184836][ T5944] usb 3-1: Manufacturer: syz [ 440.193764][ T5944] usb 3-1: config 0 descriptor?? [ 440.240483][T13060] syz.1.2094: attempt to access beyond end of device [ 440.240483][T13060] loop1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 440.254141][T13060] syz.1.2094: attempt to access beyond end of device [ 440.254141][T13060] loop1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 440.270704][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 440.289840][T13060] syz.1.2094: attempt to access beyond end of device [ 440.289840][T13060] loop1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 440.319456][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 440.333556][T13060] syz.1.2094: attempt to access beyond end of device [ 440.333556][T13060] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 440.375350][T13060] syz.1.2094: attempt to access beyond end of device [ 440.375350][T13060] loop1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 440.389335][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 440.409249][T13060] syz.1.2094: attempt to access beyond end of device [ 440.409249][T13060] loop1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 440.425379][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 440.428835][T13043] /dev/rnullb0: Can't open blockdev [ 440.445098][ T5944] usb 3-1: USB disconnect, device number 107 [ 440.480325][T13060] syz.1.2094: attempt to access beyond end of device [ 440.480325][T13060] loop1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 440.511821][T13060] syz.1.2094: attempt to access beyond end of device [ 440.511821][T13060] loop1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 440.526725][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 440.537082][T13060] syz.1.2094: attempt to access beyond end of device [ 440.537082][T13060] loop1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 440.552259][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 440.574110][T13060] syz.1.2094: attempt to access beyond end of device [ 440.574110][T13060] loop1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 440.588932][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 440.600313][T13060] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 440.610150][T13060] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 440.909205][T13080] /dev/rnullb0: Can't open blockdev [ 441.171917][T13089] /dev/rnullb0: Can't open blockdev [ 441.232017][ T5943] usb 4-1: USB disconnect, device number 71 [ 441.419302][T13102] /dev/rnullb0: Can't open blockdev [ 441.531016][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2107'. [ 441.545058][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2107'. [ 441.561880][T13105] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2107'. [ 441.578608][ T5906] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 441.602330][T13105] /dev/rnullb0: Can't open blockdev [ 441.634512][T13107] /dev/rnullb0: Can't open blockdev [ 441.825473][T13114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2111'. [ 441.863932][T13116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.872923][T13116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.908638][ T5860] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 442.070847][T13124] /dev/rnullb0: Can't open blockdev [ 442.078937][ T5860] usb 4-1: Using ep0 maxpacket: 8 [ 442.091152][ T5860] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.103266][ T5860] usb 4-1: New USB device found, idVendor=18d1, idProduct=5057, bcdDevice= 0.00 [ 442.113461][ T5860] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.126643][ T5860] usb 4-1: config 0 descriptor?? [ 442.246975][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.257226][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.292972][T13128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.303193][T13128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.368649][ T5860] usbhid 4-1:0.0: can't add hid device: -71 [ 442.374850][ T5860] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 442.390896][ T5860] usb 4-1: USB disconnect, device number 72 [ 442.527086][T13135] /dev/rnullb0: Can't open blockdev [ 442.536548][T13133] /dev/rnullb0: Can't open blockdev [ 442.632069][T13138] /dev/rnullb0: Can't open blockdev [ 442.908848][T13143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.919017][T13143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.401053][ T5860] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 443.558556][ T5860] usb 4-1: Using ep0 maxpacket: 32 [ 443.580144][ T5860] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 443.598433][ T5860] usb 4-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 1024 [ 443.618430][ T5860] usb 4-1: config 1 interface 0 has no altsetting 0 [ 443.633969][ T5860] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 443.644085][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.658506][ T5860] usb 4-1: Product: 倊 [ 443.662851][ T5860] usb 4-1: Manufacturer: ÑŽ [ 443.673115][ T5860] usb 4-1: SerialNumber: à ’ [ 443.693270][T13152] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 444.132950][ T5860] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 444.139236][T13166] /dev/rnullb0: Can't open blockdev [ 444.191756][ T5860] usb 4-1: USB disconnect, device number 73 [ 445.133862][T13188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.173592][T13188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.395816][T13189] /dev/rnullb0: Can't open blockdev [ 445.408532][ T6023] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 445.515501][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.539356][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.568978][ T6023] usb 4-1: Using ep0 maxpacket: 16 [ 445.579894][ T6023] usb 4-1: no configurations [ 445.594262][ T6023] usb 4-1: can't read configurations, error -22 [ 445.725718][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.758418][ T6023] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 445.885807][T13210] (syz.2.2142,13210,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 445.896558][T13210] (syz.2.2142,13210,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 445.918501][ T6023] usb 4-1: Using ep0 maxpacket: 16 [ 445.942921][ T6023] usb 4-1: no configurations [ 445.947589][ T6023] usb 4-1: can't read configurations, error -22 [ 445.961306][ T6023] usb usb4-port1: attempt power cycle [ 446.256398][T13221] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 446.338474][ T6023] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 446.375029][ T6023] usb 4-1: Using ep0 maxpacket: 16 [ 446.392467][ T6023] usb 4-1: no configurations [ 446.397133][ T6023] usb 4-1: can't read configurations, error -22 [ 446.438557][ T5906] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 446.548455][ T6023] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 446.594625][ T6023] usb 4-1: Using ep0 maxpacket: 16 [ 446.601346][ T6023] usb 4-1: no configurations [ 446.609206][ T6023] usb 4-1: can't read configurations, error -22 [ 446.621278][ T5906] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.636934][ T6023] usb usb4-port1: unable to enumerate USB device [ 446.648542][ T5906] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.683969][ T5906] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 446.704424][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 446.719747][ T5906] usb 3-1: SerialNumber: syz [ 446.854406][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2149'. [ 446.897189][T13243] /dev/rnullb0: Can't open blockdev [ 446.948268][T13217] /dev/rnullb0: Can't open blockdev [ 446.970861][T13243] netlink: 'syz.1.2150': attribute type 1 has an invalid length. [ 446.974403][ T5906] usb 3-1: 0:2 : does not exist [ 447.012484][ T5906] usb 3-1: USB disconnect, device number 109 [ 447.076796][T10770] udevd[10770]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.235068][T13248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.247749][T13248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.569463][T13253] /dev/rnullb0: Can't open blockdev [ 447.800656][T13258] /dev/rnullb0: Can't open blockdev [ 447.898143][T13262] /dev/rnullb0: Can't open blockdev [ 448.060340][T13275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 448.148556][ T5906] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 448.343055][ T5906] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.356474][T13285] bio_check_eod: 2 callbacks suppressed [ 448.356496][T13285] syz.1.2163: attempt to access beyond end of device [ 448.356496][T13285] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 448.363408][ T5906] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 448.394805][ T5906] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 448.409843][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.423242][ T5906] usb 3-1: Product: syz [ 448.427875][ T5906] usb 3-1: Manufacturer: syz [ 448.449717][ T5906] usb 3-1: SerialNumber: syz [ 448.476766][ T5906] usb 3-1: config 0 descriptor?? [ 448.781009][T13292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.800057][T13292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.869363][ T5944] usb 3-1: USB disconnect, device number 110 [ 448.930611][T13294] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2165'. [ 448.962832][T13293] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.006956][T13299] /dev/rnullb0: Can't open blockdev [ 449.015563][T13293] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.061024][T13294] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.076859][T13294] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.086493][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2165'. [ 449.221800][T13305] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2168'. [ 449.245529][T13307] /dev/rnullb0: Can't open blockdev [ 450.055406][T13329] /dev/rnullb0: Can't open blockdev [ 450.129232][ T5169] Bluetooth: hci4: command 0x0405 tx timeout [ 450.258409][ T5906] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 450.283447][T13337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2179'. [ 450.423652][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 450.435437][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 450.451727][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 450.465185][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 450.481638][ T5906] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 450.491155][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.509481][ T5906] usb 4-1: config 0 descriptor?? [ 450.767635][T13346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.778221][T13346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.934717][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 450.944141][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 450.956445][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 450.964492][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 450.976557][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 450.985106][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 450.996117][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 451.004106][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 451.007730][T13348] syz.0.2182: attempt to access beyond end of device [ 451.007730][T13348] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 451.016826][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 451.028527][T13348] (syz.0.2182,13348,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 451.038077][ T5906] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 451.041804][T13348] (syz.0.2182,13348,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 451.065170][ T5906] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 451.071658][T13348] (syz.0.2182,13348,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 451.099726][T13348] (syz.0.2182,13348,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 451.296822][ T5906] usb 4-1: USB disconnect, device number 78 [ 451.570427][T13360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.579425][T13360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.124632][ T5943] usb 1-1: USB disconnect, device number 34 [ 452.673270][T13388] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 452.687543][T13388] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 452.710982][T13388] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 452.725006][T13388] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 452.736038][T13388] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.840492][T12761] Bluetooth: hci4: command 0x0405 tx timeout [ 453.209517][T13392] hfs: can't find a HFS filesystem on dev rnullb0 [ 453.418987][T13385] chnl_net:caif_netlink_parms(): no params data found [ 453.434526][T13400] Invalid ELF header len 16 [ 453.523024][T13403] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2196'. [ 453.585599][T13403] fuseblk: Unknown parameter 'fdø‹XÿÿÿÿUVíºà€NhâóÄiw3xd§sæ0x0000000000000006' [ 453.951057][T13385] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.962606][T13385] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.992711][T13385] bridge_slave_0: entered allmulticast mode [ 454.030526][T13385] bridge_slave_0: entered promiscuous mode [ 454.069234][T13385] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.083522][T13385] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.100480][T13385] bridge_slave_1: entered allmulticast mode [ 454.115450][T13385] bridge_slave_1: entered promiscuous mode [ 454.259441][T13385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.306859][T13385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.608027][T13423] netlink: 'syz.1.2200': attribute type 2 has an invalid length. [ 454.642365][T13385] team0: Port device team_slave_0 added [ 454.653560][T13425] netlink: 'syz.1.2200': attribute type 2 has an invalid length. [ 454.679882][T13385] team0: Port device team_slave_1 added [ 454.838941][ T5169] Bluetooth: hci3: command tx timeout [ 454.927117][T13435] random: crng reseeded on system resumption [ 454.993944][T13385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.015283][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.042105][T13385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.056599][T13385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.073894][T13385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.107808][T13385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.120947][T13436] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 455.238955][ T5943] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 455.260365][T13445] /dev/rnullb0: Can't open blockdev [ 455.289298][T13447] syz.3.2207: attempt to access beyond end of device [ 455.289298][T13447] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 455.302415][T13447] (syz.3.2207,13447,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 455.314051][T13447] (syz.3.2207,13447,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 455.327145][T13447] (syz.3.2207,13447,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 455.354657][T13447] (syz.3.2207,13447,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 455.359430][T13448] /dev/rnullb0: Can't open blockdev [ 455.411660][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.423964][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 455.437155][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.458694][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.475495][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 455.493684][ T5943] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 455.502216][T13385] hsr_slave_0: entered promiscuous mode [ 455.504176][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.529564][T13385] hsr_slave_1: entered promiscuous mode [ 455.542760][ T5943] usb 3-1: config 0 descriptor?? [ 455.543383][T13385] debugfs: 'hsr0' already exists in 'hsr' [ 455.572334][T13385] Cannot create hsr debugfs directory [ 455.659088][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.812992][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.858552][ T5906] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 455.928823][ T36] netdevsim netdevsim0 ªªªªªª (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.965861][ T5943] HID 045e:07da: Invalid code 65791 type 1 [ 456.017247][ T5943] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0027/input/input90 [ 456.044200][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 456.058707][ T5943] microsoft 0003:045E:07DA.0027: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 456.065010][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 456.115417][ T5906] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 202 [ 456.154283][ T5906] usb 4-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 456.165585][ T5906] usb 4-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 456.174769][T13457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.189942][T13457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.199611][T13437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.210404][T13437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.226623][ T5906] usb 4-1: Manufacturer: syz [ 456.252916][ T5906] usb 4-1: config 0 descriptor?? [ 456.269988][T13453] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 456.310695][ T5906] smsusb:smsusb_probe: board id=9, interface number 0 [ 456.340827][ T5906] smsusb:siano_media_device_register: media controller created [ 456.374035][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.381422][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.388710][ T5943] usb 3-1: USB disconnect, device number 111 [ 456.388835][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.402379][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.429369][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.441324][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.448658][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.456150][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.466761][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.474186][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.481518][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.493681][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.501032][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.503646][T13460] syz.2.2211: attempt to access beyond end of device [ 456.503646][T13460] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 456.508413][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.508730][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.536479][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.543769][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.551598][ T5906] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -22 [ 456.560736][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.560898][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.561003][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.561146][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.561273][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.561373][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.561476][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.561576][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.561688][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.624659][T13460] gfs2: error -5 reading superblock [ 456.629795][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.642281][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.649589][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.656981][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.664265][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.671538][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.680235][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.688188][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.695517][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.703067][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.710408][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.717749][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.725088][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.732421][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.739758][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.747098][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.754911][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.762236][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.769643][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.776963][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.784299][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.793253][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.800599][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.807913][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.815258][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.822896][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.830229][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.837546][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.844868][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.851100][T13461] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 456.852176][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.868349][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.875679][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.883012][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.890398][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.897672][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.905031][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.912293][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.919636][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.926974][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.934984][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.942297][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.949651][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.956923][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.964284][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.971575][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.978927][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.986187][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 456.993992][T13465] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 456.996696][ T5169] Bluetooth: hci3: command tx timeout [ 457.002949][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.015169][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.022471][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.029753][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.037033][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.044382][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.051655][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.058999][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.098739][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.106063][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.113376][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.120773][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.128093][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.135400][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.142712][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.150028][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.157501][ T5906] smsmdtv:smscore_set_device_mode: mode detect failed -22 [ 457.166423][ T5906] smsmdtv:smscore_start_device: set device mode failed , rc -22 [ 457.174263][ T5906] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 457.218575][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.225916][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.233236][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.243276][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.250605][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.263862][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.271268][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.278570][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.286691][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.294010][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.301308][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.308608][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.316410][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.324104][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.331735][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.339047][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.346333][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.353961][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.361256][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.368542][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.375918][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.383208][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.390499][ C0] smsusb:smsusb_onresponse: error, urb status -71, 0 bytes [ 457.397976][ T5906] ------------[ cut here ]------------ [ 457.402200][ T36] bridge_slave_1: left allmulticast mode [ 457.403451][ T5906] workqueue: work disable count underflowed [ 457.403578][ T5906] WARNING: kernel/workqueue.c:4329 at enable_work+0x2b1/0x2c0, CPU#0: kworker/0:4/5906 [ 457.424701][ T5906] Modules linked in: [ 457.428923][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:4 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 457.440506][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.450604][ T5906] Workqueue: usb_hub_wq hub_event [ 457.455667][ T5906] RIP: 0010:enable_work+0x2b1/0x2c0 [ 457.460899][ T5906] Code: 41 5e 41 5f 5d e9 4f 3c f7 09 cc e8 09 62 f4 09 e8 24 07 35 00 c6 05 2e 7d 42 0e 01 90 48 c7 c7 00 d6 a9 8b e8 c0 d5 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 457.480533][ T5906] RSP: 0018:ffffc90004a7ea80 EFLAGS: 00010046 [ 457.486623][ T5906] RAX: 1ebcd5d2cbd1dc00 RBX: ffff888020f96188 RCX: 0000000000100000 [ 457.494605][ T5906] RDX: ffffc90017464000 RSI: 000000000004652c RDI: 000000000004652d [ 457.502591][ T5906] RBP: ffffc90004a7eb30 R08: ffffffff8e530143 R09: 1ffffffff1ca6028 [ 457.510579][ T5906] R10: dffffc0000000000 R11: fffffbfff1ca6029 R12: 1ffff9200094fd54 [ 457.518657][ T5906] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000800001 [ 457.526761][ T5906] FS: 0000000000000000(0000) GS:ffff8881257af000(0000) knlGS:0000000000000000 [ 457.535728][ T5906] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 457.542429][ T5906] CR2: 00007f89be244d58 CR3: 0000000031f2a000 CR4: 00000000003526f0 [ 457.550428][ T5906] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 457.558429][ T5906] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 457.566428][ T5906] Call Trace: [ 457.569732][ T5906] [ 457.572677][ T5906] ? __pfx_enable_work+0x10/0x10 [ 457.577645][ T5906] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.583557][ T5906] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.589915][ T5906] __cancel_work_sync+0xf7/0x110 [ 457.594965][ T5906] smsusb_term_device+0xe2/0x3b0 [ 457.599934][ T5906] smsusb_probe+0x1a04/0x2060 [ 457.604638][ T5906] ? __pfx_smsusb_probe+0x10/0x10 [ 457.609680][ T5906] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 457.615351][ T5906] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 457.621350][ T5906] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.627699][ T5906] ? __pm_runtime_set_status+0x785/0xa50 [ 457.633367][ T5906] usb_probe_interface+0x634/0xbf0 [ 457.638515][ T5906] ? __pfx_usb_probe_interface+0x10/0x10 [ 457.644162][ T5906] really_probe+0x26a/0x9a0 [ 457.649136][ T5906] __driver_probe_device+0x18c/0x2f0 [ 457.654445][ T5906] driver_probe_device+0x4f/0x430 [ 457.659488][ T5906] __device_attach_driver+0x2ce/0x530 [ 457.664879][ T5906] bus_for_each_drv+0x251/0x2e0 [ 457.669758][ T5906] ? __pfx___device_attach_driver+0x10/0x10 [ 457.675748][ T5906] ? __pfx_bus_for_each_drv+0x10/0x10 [ 457.681171][ T5906] __device_attach+0x2b8/0x400 [ 457.685974][ T5906] ? __pfx___device_attach+0x10/0x10 [ 457.691277][ T5906] ? do_raw_spin_unlock+0x122/0x240 [ 457.696516][ T5906] bus_probe_device+0x185/0x260 [ 457.701395][ T5906] device_add+0x7b6/0xb50 [ 457.705750][ T5906] usb_set_configuration+0x1a87/0x20e0 [ 457.711250][ T5906] usb_generic_driver_probe+0x8d/0x150 [ 457.716729][ T5906] usb_probe_device+0x1c4/0x390 [ 457.721596][ T5906] ? __pfx_usb_probe_device+0x10/0x10 [ 457.726986][ T5906] really_probe+0x26a/0x9a0 [ 457.731787][ T5906] __driver_probe_device+0x18c/0x2f0 [ 457.737089][ T5906] driver_probe_device+0x4f/0x430 [ 457.742129][ T5906] __device_attach_driver+0x2ce/0x530 [ 457.747522][ T5906] bus_for_each_drv+0x251/0x2e0 [ 457.752396][ T5906] ? __pfx___device_attach_driver+0x10/0x10 [ 457.758399][ T5906] ? __pfx_bus_for_each_drv+0x10/0x10 [ 457.763797][ T5906] __device_attach+0x2b8/0x400 [ 457.768583][ T5906] ? __pfx___device_attach+0x10/0x10 [ 457.773895][ T5906] ? do_raw_spin_unlock+0x122/0x240 [ 457.779140][ T5906] bus_probe_device+0x185/0x260 [ 457.784061][ T5906] device_add+0x7b6/0xb50 [ 457.788415][ T5906] usb_new_device+0xa39/0x16f0 [ 457.793213][ T5906] ? __pfx_usb_new_device+0x10/0x10 [ 457.798462][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.803691][ T5906] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.808914][ T5906] hub_event+0x2941/0x4a00 [ 457.813421][ T5906] ? __pfx_hub_event+0x10/0x10 [ 457.818240][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 457.824021][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.829320][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 457.835059][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 457.840827][ T5906] process_scheduled_works+0xae1/0x17b0 [ 457.846435][ T5906] ? __pfx_process_scheduled_works+0x10/0x10 [ 457.852449][ T5906] worker_thread+0x8a0/0xda0 [ 457.857060][ T5906] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 457.863405][ T5906] ? __kthread_parkme+0x7b/0x200 [ 457.868378][ T5906] kthread+0x70e/0x8a0 [ 457.872568][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 457.877724][ T5906] ? __pfx_kthread+0x10/0x10 [ 457.882346][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 457.887558][ T5906] ? lockdep_hardirqs_on+0x9c/0x150 [ 457.892768][ T5906] ? __pfx_kthread+0x10/0x10 [ 457.897383][ T5906] ret_from_fork+0x3fc/0x770 [ 457.902084][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 457.907221][ T5906] ? __switch_to_asm+0x39/0x70 [ 457.911994][ T5906] ? __switch_to_asm+0x33/0x70 [ 457.916783][ T5906] ? __pfx_kthread+0x10/0x10 [ 457.921400][ T5906] ret_from_fork_asm+0x1a/0x30 [ 457.926197][ T5906] [ 457.929249][ T5906] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 457.936632][ T5906] CPU: 0 UID: 0 PID: 5906 Comm: kworker/0:4 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 457.948206][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 457.958287][ T5906] Workqueue: usb_hub_wq hub_event [ 457.963352][ T5906] Call Trace: [ 457.966644][ T5906] [ 457.969585][ T5906] dump_stack_lvl+0x99/0x250 [ 457.974201][ T5906] ? __asan_memcpy+0x40/0x70 [ 457.978814][ T5906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 457.984046][ T5906] ? __pfx__printk+0x10/0x10 [ 457.988677][ T5906] panic+0x2db/0x790 [ 457.992602][ T5906] ? __pfx_panic+0x10/0x10 [ 457.997049][ T5906] ? ret_from_fork_asm+0x1a/0x30 [ 458.002001][ T5906] __warn+0x334/0x4c0 [ 458.005998][ T5906] ? enable_work+0x2b1/0x2c0 [ 458.010606][ T5906] ? enable_work+0x2b1/0x2c0 [ 458.015221][ T5906] report_bug+0x2be/0x4f0 [ 458.019566][ T5906] ? enable_work+0x2b1/0x2c0 [ 458.024205][ T5906] ? enable_work+0x2b1/0x2c0 [ 458.028814][ T5906] ? enable_work+0x2b3/0x2c0 [ 458.033442][ T5906] handle_bug+0x84/0x160 [ 458.037791][ T5906] exc_invalid_op+0x1a/0x50 [ 458.042315][ T5906] asm_exc_invalid_op+0x1a/0x20 [ 458.047292][ T5906] RIP: 0010:enable_work+0x2b1/0x2c0 [ 458.052535][ T5906] Code: 41 5e 41 5f 5d e9 4f 3c f7 09 cc e8 09 62 f4 09 e8 24 07 35 00 c6 05 2e 7d 42 0e 01 90 48 c7 c7 00 d6 a9 8b e8 c0 d5 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 458.072173][ T5906] RSP: 0018:ffffc90004a7ea80 EFLAGS: 00010046 [ 458.078267][ T5906] RAX: 1ebcd5d2cbd1dc00 RBX: ffff888020f96188 RCX: 0000000000100000 [ 458.086257][ T5906] RDX: ffffc90017464000 RSI: 000000000004652c RDI: 000000000004652d [ 458.094242][ T5906] RBP: ffffc90004a7eb30 R08: ffffffff8e530143 R09: 1ffffffff1ca6028 [ 458.102227][ T5906] R10: dffffc0000000000 R11: fffffbfff1ca6029 R12: 1ffff9200094fd54 [ 458.110217][ T5906] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000800001 [ 458.118240][ T5906] ? __pfx_enable_work+0x10/0x10 [ 458.123206][ T5906] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 458.129113][ T5906] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 458.135462][ T5906] __cancel_work_sync+0xf7/0x110 [ 458.140439][ T5906] smsusb_term_device+0xe2/0x3b0 [ 458.145408][ T5906] smsusb_probe+0x1a04/0x2060 [ 458.150107][ T5906] ? __pfx_smsusb_probe+0x10/0x10 [ 458.155238][ T5906] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 458.160811][ T5906] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 458.166716][ T5906] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 458.173161][ T5906] ? __pm_runtime_set_status+0x785/0xa50 [ 458.178848][ T5906] usb_probe_interface+0x634/0xbf0 [ 458.183989][ T5906] ? __pfx_usb_probe_interface+0x10/0x10 [ 458.189639][ T5906] really_probe+0x26a/0x9a0 [ 458.194164][ T5906] __driver_probe_device+0x18c/0x2f0 [ 458.199558][ T5906] driver_probe_device+0x4f/0x430 [ 458.204697][ T5906] __device_attach_driver+0x2ce/0x530 [ 458.210269][ T5906] bus_for_each_drv+0x251/0x2e0 [ 458.215161][ T5906] ? __pfx___device_attach_driver+0x10/0x10 [ 458.221358][ T5906] ? __pfx_bus_for_each_drv+0x10/0x10 [ 458.226847][ T5906] __device_attach+0x2b8/0x400 [ 458.231810][ T5906] ? __pfx___device_attach+0x10/0x10 [ 458.237116][ T5906] ? do_raw_spin_unlock+0x122/0x240 [ 458.242362][ T5906] bus_probe_device+0x185/0x260 [ 458.247260][ T5906] device_add+0x7b6/0xb50 [ 458.251638][ T5906] usb_set_configuration+0x1a87/0x20e0 [ 458.257585][ T5906] usb_generic_driver_probe+0x8d/0x150 [ 458.263069][ T5906] usb_probe_device+0x1c4/0x390 [ 458.267942][ T5906] ? __pfx_usb_probe_device+0x10/0x10 [ 458.273427][ T5906] really_probe+0x26a/0x9a0 [ 458.277961][ T5906] __driver_probe_device+0x18c/0x2f0 [ 458.283266][ T5906] driver_probe_device+0x4f/0x430 [ 458.288408][ T5906] __device_attach_driver+0x2ce/0x530 [ 458.293815][ T5906] bus_for_each_drv+0x251/0x2e0 [ 458.298871][ T5906] ? __pfx___device_attach_driver+0x10/0x10 [ 458.304858][ T5906] ? __pfx_bus_for_each_drv+0x10/0x10 [ 458.310357][ T5906] __device_attach+0x2b8/0x400 [ 458.315139][ T5906] ? __pfx___device_attach+0x10/0x10 [ 458.320700][ T5906] ? do_raw_spin_unlock+0x122/0x240 [ 458.326363][ T5906] bus_probe_device+0x185/0x260 [ 458.331436][ T5906] device_add+0x7b6/0xb50 [ 458.335819][ T5906] usb_new_device+0xa39/0x16f0 [ 458.341058][ T5906] ? __pfx_usb_new_device+0x10/0x10 [ 458.346456][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.351693][ T5906] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.356920][ T5906] hub_event+0x2941/0x4a00 [ 458.361667][ T5906] ? __pfx_hub_event+0x10/0x10 [ 458.366624][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 458.372804][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.378013][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 458.383749][ T5906] ? process_scheduled_works+0x9ef/0x17b0 [ 458.389490][ T5906] process_scheduled_works+0xae1/0x17b0 [ 458.395167][ T5906] ? __pfx_process_scheduled_works+0x10/0x10 [ 458.401197][ T5906] worker_thread+0x8a0/0xda0 [ 458.405816][ T5906] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 458.412161][ T5906] ? __kthread_parkme+0x7b/0x200 [ 458.417124][ T5906] kthread+0x70e/0x8a0 [ 458.421216][ T5906] ? __pfx_worker_thread+0x10/0x10 [ 458.426354][ T5906] ? __pfx_kthread+0x10/0x10 [ 458.430968][ T5906] ? _raw_spin_unlock_irq+0x23/0x50 [ 458.436185][ T5906] ? lockdep_hardirqs_on+0x9c/0x150 [ 458.441392][ T5906] ? __pfx_kthread+0x10/0x10 [ 458.446019][ T5906] ret_from_fork+0x3fc/0x770 [ 458.450672][ T5906] ? __pfx_ret_from_fork+0x10/0x10 [ 458.455803][ T5906] ? __switch_to_asm+0x39/0x70 [ 458.460665][ T5906] ? __switch_to_asm+0x33/0x70 [ 458.465434][ T5906] ? __pfx_kthread+0x10/0x10 [ 458.470052][ T5906] ret_from_fork_asm+0x1a/0x30 [ 458.474840][ T5906] [ 458.478230][ T5906] Kernel Offset: disabled [ 458.482578][ T5906] Rebooting in 86400 seconds..