last executing test programs: 1m54.095273867s ago: executing program 0 (id=239): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x8, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x48000) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000040)='nfs\x00', 0x2008004, 0x0) 1m54.049793979s ago: executing program 0 (id=240): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xc5) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xee00}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r2, &(0x7f00000035c0)=[{{0x0, 0x0, 0x0}, 0x800}], 0x1, 0x20, 0x0) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) 1m53.869186733s ago: executing program 0 (id=241): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x762}]}, 0x24}, 0x1, 0x0, 0x0, 0x2081}, 0x480c0) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r4, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xffff}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x11) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x40, r6, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r3) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x5c, r7, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_KEY={0x30, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "72e758ad7412c8d98c61bafb891f34c485a471b57a2406c93e7436d4f95da803"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x4}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x8800) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000006c0), r2) sendmsg$NLBL_MGMT_C_VERSION(r9, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x5c, r10, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x5c}, 0x1, 0x0, 0x0, 0x48804}, 0x8001) (async) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r7, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4048084) (async) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r9, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x38, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4000080) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000a80)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ac0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r12, &(0x7f0000000c00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xb4, r7, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x4c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x3c5}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_DEVICE={0x1c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4040040}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000c80), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000cc0)={'wg2\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r15, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x60, r16, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r17}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20048800}, 0x40d0) (async) r18 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000e40), r15) sendmsg$IPVS_CMD_SET_INFO(r15, &(0x7f0000000f40)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f00)={&(0x7f0000000e80)={0x48, r18, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe58000}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000080}, 0x4010) 1m53.845978678s ago: executing program 0 (id=243): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000000)={0xe000003, 0x3ffffddc, &(0x7f0000000180), 0x9, 0x5000004}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000040)={0x0, 0x0, 0x0}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x4000, 0x0) bind$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @remote}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0x40405515, &(0x7f0000000680)={0x1, 0x3, 0x3, 0x40, 'syz1\x00', 0x198}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000340)="18", 0x1}, {&(0x7f0000000240)="09c63a532f62a37fc57417d1c97cc24524ec898abea69a3af0e42a398d034f3bdb3c61ddd5909b71bac3bfd54a64f26317d83375a19aba7ed2bbd67d9e9612b942b2260f11439d0c1b3713c35da6f471baa8062a8b845a99ac4ea41eef5163a9e5fd6ffb1e02270288b92a57c748b252c5a63f44f933337b160e27c9b80d8f1041eb15f51da9364570dc1dc7bbe5545c20e6646b864e1f33e6fda49c3ca1b6743af2dc210c55ceaa3dd652bd084a34256fafd8e879d45100a9b32cea8b4579f21f774f3422f6efffeb9b1973de1802fdb15bb3ec9105b4be0fc2c1bdaed75aa0cbbe4c126040e19200c5a9ae7f1cef06d3ec6791e7acedde05", 0xf9}, {&(0x7f0000000540)="9908358332ef00a7b9e9ae79e5c58a93e31dbbc6e22d79bba41bc8c3363bfeb8efc6e14529761e5342d5a9418e5b9789eb64e40c59d2a938592ab3be2cefc0b4fb230fd1b98fc416f62d2e51f545ae08b02f4c981382b02eb69cc9c0383c59bae2f978915bf4d55e926a4bddbfb24bfc231dad12871925b19519ded25efe7d1516ebc18edb463dcd116ff36feb3381a9ff6e1d604e824fda6e287564c9c33a93a182236497f6b005c5c471f3f8afc735aaff5dcb30e1f0596ec1e291eb31e7335fc5145eca354a6e2cc3064633aba35cb8fc28ffc7c50e1b5d486aaa9b0b4cc0f5d0ff392751b9b6d3f1", 0xea}], 0x3}}], 0x1, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x75a5}, &(0x7f00000000c0)=0x8) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) connect$l2tp6(r9, &(0x7f0000000640)={0xa, 0x0, 0x4, @remote, 0x8, 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e21, 0x516, @private2, 0x55}}, [0x1d, 0x4, 0xfffffffffffffffc, 0x5243d027, 0xd6, 0x4, 0x7f, 0x7f, 0x3, 0x0, 0x101, 0x7, 0x3, 0xffffffffffffffff, 0x3]}, &(0x7f0000000080)=0x100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r2, 0xebe3b000) r10 = syz_usb_connect(0x2, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xc1, 0x66, 0xa0, 0x10, 0x483, 0x1234, 0xff76, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xe4, 0xa8}}]}}]}}, 0x0) syz_usb_control_io(r10, &(0x7f0000000700)={0x2c, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x9351e151da4b4ab0}}, 0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m50.607523898s ago: executing program 0 (id=263): set_mempolicy(0x4003, &(0x7f0000000200)=0x8000000007, 0x5fff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r1, 0x6f000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="6426d3f9f44d2ade8a0f0e88a4b43904a0", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r3 = syz_usb_connect(0x5, 0x24, &(0x7f0000001280)=ANY=[@ANYBLOB="12010003001f66088f0510660548020003010902120001049570810904008100ffffff02"], &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000480)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getpeername(r5, 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r4, 0x8004e500, &(0x7f0000000140)=r0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={0x0, 0xffffa812, 0x30}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000280)={r7, 0x96, "31c48f8b05a57fdb02181b2a968dd712128ab7b3572f0c9e1c822fb4d98471055100e0a9a3bc4cd88337d13084e9edb2785ed997bb32568308522f59736038f8b4b22a594aa53d7e492857a1d39066cc293f0dc1f7a5e8749dcd29a833a4af1cf54b5c243fff2fe44ea7360dd06be4137806b3b3dc150ebf78cd730d7d213a72dbed263f1cef0988c46b8dd456adf18fdc666a75dc89"}, &(0x7f0000000340)=0x9e) write$FUSE_NOTIFY_RESEND(r4, &(0x7f0000000080)={0x14}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x9, 0xff, 0x8, 0x9}]}, 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) fcntl$F_SET_RW_HINT(r9, 0x40c, &(0x7f00000003c0)=0x3) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000400)) 1m49.06125053s ago: executing program 0 (id=274): chroot(0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000000080002400000000108000340000000160900010073797a30000000000900020073797a32"], 0x80}}, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) write$char_usb(r2, &(0x7f0000000000)="2d3020da", 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x29, 0x2, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x80) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='exfat\x00', 0x2, 0x0) 1m19.524123075s ago: executing program 32 (id=274): chroot(0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000000080002400000000108000340000000160900010073797a30000000000900020073797a32"], 0x80}}, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400070000000900020073797a3100000000050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x9, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) write$char_usb(r2, &(0x7f0000000000)="2d3020da", 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x29, 0x2, 0x0, 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x80) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='exfat\x00', 0x2, 0x0) 5.865346021s ago: executing program 2 (id=796): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="c4c1792e5b00b93d030000b80f00000066baf80cb814468282ef66bafc0cec0f30c4e3f917d3223e0f0766baf80cb8f12a7d82ef66bafc0cecfafaf54fb0b97c0ac4c37d1d61a2000832660fe08afcffffff0fc76e000fc73a", 0x59}], 0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x18, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x4}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x240000, 0x0) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{}, {}, {}, {}]}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) close(r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)={0x24, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}]]}, 0x24}, 0x1, 0x0, 0x0, 0xd37697ff28093c0e}, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r5, 0x4068aea3, &(0x7f00000000c0)) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000280)=ANY=[]) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 5.773289942s ago: executing program 2 (id=797): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f00009c7000/0x3000)=nil, 0x3000, 0xeb09a1f6f980cfd2, 0x30, r0, 0x1000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="0c010000160001000000000000000000fe880000000000000000000000000101ffffffff00000000000000000000000000000000000000010000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x10c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) r4 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000380)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) r5 = socket$netlink(0x10, 0x3, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x28}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r5) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0xde) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) r9 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x48801, 0x0) ioctl$IMDELTIMER(r9, 0x80044941, &(0x7f00000003c0)=0x2) setsockopt$inet_tcp_int(r8, 0x6, 0x8, &(0x7f0000000000)=0x40, 0x4) ioctl$FS_IOC_GETVERSION(r7, 0x5b04, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r3, 0x5708e000) 4.968991762s ago: executing program 1 (id=804): r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r0, 0x401070ca, &(0x7f0000000000)) bind$rxrpc(r0, &(0x7f00000003c0)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x9750, @loopback, 0x8}}, 0x24) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x57789000) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg$can_raw(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)=""/245, 0xf5}, {&(0x7f0000000180)=""/157, 0x9d}], 0x2, &(0x7f0000000280)=""/207, 0xcf}, 0x80) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/softlockup_count', 0x0, 0x0) preadv(r3, &(0x7f0000001840)=[{&(0x7f0000001640)=""/16, 0x10}], 0x1, 0x2, 0x5) syz_open_dev$video(&(0x7f00000010c0), 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.906372718s ago: executing program 1 (id=806): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000002c0), 0xa00, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x12) ioctl$SNDCTL_DSP_GETBLKSIZE(r1, 0xc0045004, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, &(0x7f0000000180)) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000240)={0x0, 0x7, 0x5, 0x80}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x43, 0x0) inotify_init1(0x984781f22c5c6a3f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0xa, 0xfff9}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x2004d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x2c, 0x1, 0x7, 0x3c5b, 0x1, 0x5, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x5, 0xe, 0x0, 0x9, 0x7, 0x17, 0x1, 0x407, 0x8, 0x40, 0x8f, 0x4006, 0x100006, 0x0, 0x0, 0x8, 0x8, 0x400, 0x10000080, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0xd31, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x10000, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x6, 0x312, 0x10, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x0, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0xd, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0x3, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6e0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x7, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x4, 0x5, 0x3e7, 0xb, 0x4, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3ff, 0x7ff, 0x12b, 0x4, 0x1, 0x2, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x0, 0x1ff], [0x9, 0x8, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x5, 0x104, 0x10000, 0x943, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x3, 0x80000003, 0x0, 0x4, 0xc8, 0xa, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x80000007, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x2, 0xb1e, 0xd7, 0x200, 0xffff3401, 0xfff]}, 0x45c) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x0, "047ae66151de8814675d9ed59fe0e5e241e655ad9e3392b1c92b352edf621ffa"}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000280)=0x81) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000000)) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount$9p_rdma(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="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"]) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0xa301, 0x0) write$sndseq(r5, 0x0, 0x72) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000002fc0), 0x242002, 0x0) fcntl$setstatus(r6, 0x403, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f00000a1000/0x3000)=nil, 0x3000, &(0x7f0000000200)='/dev/rnullb0\x00') r7 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r7, 0xc0984124, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r6) 4.038279264s ago: executing program 1 (id=811): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x40) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 4.015249826s ago: executing program 1 (id=812): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef7], [0x10000, 0x0, 0x0, 0x0, 0x0, 0x6], [0x7]], '\x00', [{0x0, 0x1}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x6}, {0xfffffffd, 0x4000005f, 0x1}, {}, {}, {0x3}, {0x0, 0x8766}], '\x00', 0x101000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fcntl$dupfd(r3, 0x0, r3) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) write(r2, &(0x7f0000000300)="240000001a005f0214f9f507000904001f000000000000000000000008000400012a9dd9", 0x24) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x101400, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 3.929501892s ago: executing program 1 (id=813): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x311001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106}}, 0x20) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) ptrace(0x4206, r1) tkill(r1, 0x8) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r1, &(0x7f0000000040), 0x4001) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) getrlimit(0xe, &(0x7f0000000000)) 3.448275007s ago: executing program 3 (id=817): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f00000eb000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000001c0)="f20f217c66b88d000f00d0c4c2fd35a3652ccf3067f8263e0f01c8266736660f38825fcf670fc7580266baf80cb8fe21da8bef66bafc0c66b8176966ef263e66660f3a163c55004000000f66b8c2000f00d8", 0x52}], 0x1, 0x9, &(0x7f0000000280)=[@cstype3={0x5, 0xf}], 0x1) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x70, r5, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_request={{{}, {}, @device_a, @device_b, @initial, {0x0, 0x9}}, @void, @val, @val={0x3, 0x1, 0x80}, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x45, 0x4, 0x2]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8011}, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}, @NL80211_ATTR_FRAME_TYPE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 3.110844712s ago: executing program 3 (id=818): ioprio_set$pid(0x1, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x587042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) 3.041376852s ago: executing program 1 (id=819): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r5 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000040)={0x7, 0x54485746}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x5708e000) 2.977776023s ago: executing program 3 (id=820): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_user_passkey_req={{0x34, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.88840623s ago: executing program 3 (id=821): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r2, 0x0, 0x91, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x406f413, 0x8) fstat(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r3) setfsuid(r3) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) socket(0x6, 0xa, 0x53) sendfile(r5, r4, 0x0, 0x7fffefff) sendfile(r4, r4, 0x0, 0x7ffff000) 2.759804327s ago: executing program 3 (id=823): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000040000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x12c) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r2, 0x0, 0x20, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 2.556566316s ago: executing program 3 (id=824): getgroups(0x2, &(0x7f0000000340)=[0xffffffffffffffff, 0xffffffffffffffff]) (async) r1 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$get_persistent(0x16, 0xee00, r1) (async) keyctl$setperm(0x5, r1, 0x100004) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) creat(&(0x7f0000000080)='./file0\x00', 0xac) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x1c, 0x1, 0x70bd29, 0x25dfdbfb, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) setfsgid(r0) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) (async) syz_fuse_handle_req(r3, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ab3b4083f140ca17b43e5f6aef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ff344d0a7d760f040718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b889855a153c867ce79297a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) mount$nfs4(&(0x7f00000000c0)='xfs\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000200)={[{'\xfdw'}, {'/dev/rnullb0\x00'}, {}, {'\x00'}, {'&+'}, {')%\xc7'}, {'keyring\x00'}, {}, {')'}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '!!}'}}, {@fowner_lt={'fowner<', r5}}, {@smackfsdef={'smackfsdef', 0x3d, '#&'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}) (async) dup3(r6, r3, 0x0) (async) close$fd_v4l2_buffer(r6) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2.416155249s ago: executing program 2 (id=825): socket$inet_sctp(0x2, 0x1, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000000380)=[{&(0x7f0000217f28)=""/231, 0xe7}, {&(0x7f0000000180)=""/96, 0x60}, {&(0x7f0000000200)=""/30, 0x1e}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000340)=""/31, 0x1f}], 0x5, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) io_setup(0xffff92cd, &(0x7f0000000040)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 1.829106047s ago: executing program 4 (id=826): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x2000000000001]}}) (async) write$uinput_user_dev(r0, &(0x7f0000000300)={'syz1\x00', {0x0, 0x0, 0x2}, 0x21, [0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x87, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x514], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffff7, 0x0, 0x2, 0xce7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x871], [0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x40002, 0x0, 0x0, 0xe0e, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb, 0x9, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0xd, 0x10000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}, 0x45c) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) unshare(0x22020600) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="180000002e000100000000000000000008000c00", @ANYRES32=0x0, @ANYBLOB="8ba06981425859d900004e9afe424bbfeedb2733b8f23d8e5180b5922d24646d276d1665dfa617eaf009f6edcece7c9baa9c1aa39e946a7c0424dffe230a08d8cbda025c6d83643ab47ddb1912aadaca3313a525d10df3d64a27ba94f66e539c68246749201880a51b6d3b1263f9faf5616ef94f388e897e3009038eab60529d"], 0x18}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) ioctl$sock_ifreq(r5, 0x8948, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x0, 0x6}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x44, '\x00', 0x9}]}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x32a82, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000080)={'syzkaller0\x00', 0x400}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x54002, 0x0) (async) ioperm(0xc614, 0x1, 0x7) prctl$PR_SET_MM_MAP(0x41555856, 0xe, 0x0, 0xfffffffffffffe69) (async) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000000)=0x6) (async) personality(0x5400004) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r8, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000180"]) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) 1.825947843s ago: executing program 2 (id=827): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000c5010000", @ANYBLOB="51c3e60756"]) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_NAN(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r5, 0x1, 0x70bd2d, 0x2, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4c004) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r7, 0x2000) 1.759616486s ago: executing program 4 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa27c0, 0x0) (async, rerun: 64) mkdir(&(0x7f0000000540)='./file0\x00', 0x58) (async, rerun: 64) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1.667318059s ago: executing program 4 (id=829): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='aio\x00', 0x200000, 0x0) (async) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000100), 0x7ffffffffffffffc, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc0d05605, &(0x7f0000000080)={0x8}) r2 = dup(0xffffffffffffffff) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x80000) sendto$inet(r4, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) (async) accept4$tipc(r4, 0x0, 0x0, 0x800) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) 1.545173725s ago: executing program 4 (id=830): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xe6a64000) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000000)='./file0/../file0\x00', 0x1) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) (async) unshare(0x22020600) ioctl$sock_ifreq(r6, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000002180)=""/4071, 0xfe7}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000940)=""/187, 0xbb}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000005100)=""/4066, 0xfe2}], 0x6}, 0x12100) (async) recvmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000002180)=""/4071, 0xfe7}, {&(0x7f0000000240)=""/220, 0xdc}, {&(0x7f0000000940)=""/187, 0xbb}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000005100)=""/4066, 0xfe2}], 0x6}, 0x12100) recvmsg$kcm(r7, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) (async) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) socket$kcm(0x2d, 0x2, 0x0) (async) r9 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) (async) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000340)={r9}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r8, 0x7dfff000) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000006100)={0x10fc, r2, 0x100, 0x709d2c, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_MODES={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_WOL_MODES={0x10cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x17}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "141cb443f3c0cb3b035788e9da8d63a15b5bc8dcdcbead7cb6d2d1b6a52f9a541e209d8b1a9de759eeaca1c98292ed7fe73d8212ed91175ac721c46db099a59fe5f4a4d14e354736da7a996be37839c8edc73a7994d3f5621c1f568f8e6e5ccc039c403e1ff818626b247c12dcd3993dff50afe3d46298a7c79ee5fddfdad9ae5e674fd9c3250579e7635bc5c57352fd358e5bb5ab4523a3e142b71375ea44e219f9ca8a748e5d7221b3ff757bc9aceed4526317a1927d85d8e476bf76e508490d3064ee8d0863b0c1f476d8ff1cf20a8f3b2ae8c0eb94b6a20a13f90f0b74473b35fc979dcd7afadb01255f54f050216d8bec9545df481179674c339369466d03b2523deecec98a868288e41660bc4bf28a76cf5b98e2c95988074c790db47c38f77f677a535f7e347495326f33edc93307e07f578ff7e5f579169b6265c930a079cb53a75e066bd91c6bca18773b979496e8bff8b2739da5933f488fee26901e37191f7b9cbc1012548b382d8c360b7dc8a754502ee056ea293f1edcc55989a374ed516902e26b96b2b675926e77c9153f62cd39835f1b075aaf7a12205fea267ad970ef17f8be57a2b5003d4cfc97661585dafb2ecd5ae9d21ebf94c40d50871bf0b26b6a604d29c531de3dd3f79a7230cc398103e68b867c1297a1941a10b0d25d10622befbcd3f90ef8614aa0f23c71472b327c6d6c9a0a3c11cdae5de4d68c913353c4155a1156362d6c307806613e6ec9c9c46c03d7a6224d315a0c2a929c719bca83df61eac17784e23364b9cf2adc32214332d1bd724f2f4b8037d268b4ab615e0471f419105ac94cc653f76a14259ff3a0b01dd9e3a7df5cabc94fb448d9dc80c4ed77f52d7d1ad6f38f82ece714f6de291972e3e30a3168c7e1542b1a54c1f23788cf028bf2c1b1c94541c62687dbe3815ca98d5a1f670f370d5cbdba11b10380b93996a0c593f24ce84cb161f36e44e47a14ddad31446f99180034a753a4d31390387e66e5fa922d010ca036ffc515041128ec0fc310b817825601c10a8f5f867ccdeee141d70af4924f9e0b88095585cfd1fe8a0d83e3a62cbaeb06fbbbba90ef8f1f9a7fb8da7a9c31363aa333c5d149ed3e8715ad12747a8636c52cfbd12c742df74d7e226923649c65bd8431875e39816bfdba8790567b9feeccc27a009b3d0dd2e2d1a3209ca1a55d554af141a715ea5b6543ee32923356aabc52146dbc2a379f62c8be4019f6bcd92a183474628d47fffd7af6288b6fc87a6b4e8f4a3ea84de778157a655591145b0c9aab51e91d7e48192754277afae5ba92792e39e9ec36c6f82438df4acea1f2a6790963771d5ecdd5e9558119dc0784cb806f0b00f58c6969e65ed1a5a595c9dbfba4d3b4697a61be85c1c0ecb7a5808e8869c7f76fa8daa385557f30e09895638f4312bea184279d5c53f86adeb9ca787b77204d442673b48b4acfe03d93d070e0f6e987ead9613e59137ce7ca234d27ec0f9d251f73b3706653810a0eecb703ffaefeb8b8faaa0ae520b78434146fc3cde65d771a0d7b7af61cd13048b71135f8f4f66e08d8170ff49f517e807831ee889db5560127419292af1eaa98949419861cd8dac001ddc2aff9184d4388584ac6e2b854c3770877815c2a8c443ff3579e6fd37c0f65c036a761fa9c27f9c9076ef8b0c3dd368fa3e2731b7b7265fae0316dceea06c6196dd781e3a99a82eacc82face51ee128c4af0c048119cc9ee99c25f982472d870749b4f26b3fad1af1d9deddb5c836c055380368b062e7dcb08696bea24a1fd03fa0a948c8d8d9e52a61593c3ccf83824ed304f9fe1b78f1abde7c05c9a6221d4a5f8fae4e8e1723a2315b40a79bf693f4639ec417ef46b5a4dec0113af4e0b8276811f6a036010aec1925e347b85a6dcece2ef144ad4d220f7cc236c2c48199789fddac2feeb34bd0df0b284e6fd287396c8cf19eeb0b7b2d5214d6fff443faf5740a5249831cf5ac11458494d08b84f5ce5191d7de9a845dc7c4e41f2d62f75c3fe11b2a52c330bb5d19f0b118ae24891dac8fd9b41854f13f8afa0c5ae399bd39114054ed11d214df49f2af821a628e22c179bd96573ad0201f75c5c98ed0f0641184cb8da16353c280c9d4072595086ee00a4b7c756dd4ac9eed6f9dacc852da8a8b185ebe80f4536a255d75a67f52732eadf5b2f7f44ccb0780ae02ac50e0e43b2697ce83c5a9b2cf2c05127cb8bba04c9a08a7daa4d36c7e86874f42028c508f9d9f82375f9e2b7b4f8835728ae07cc004f4b9bf6733d04a51cd6ffad443940da5af3039e4b9c6fec71b052bccd22d4cdba0092bba59e03d9396fc05e66ccaa44b6e412fede9ee4bf738e72f7b015aac1af3285e8d2596f13100147b2c3347d9c9e5192596b13c3d9c55cff52a96bdfd042fb5c3e6803a9c80d13eaa1f23c312c467e137274d7b1ae06a1edefcb2e82b0bf9ee26636a869cc7aeafafe69d8dc4565de62bdbe74e5b94c20d3a16491626ba591f7cd6dd4acfb89ada63290f8e7e89cccb1915d4b4279b1b42f6a6f68a0c32324eae6c841b3058c5c9d74d5cda9169379de194cc7c67fc9f8f3b610fecf8cc40546d7d51cfac5173229974026092a7c9a5b2dc8ea24a345ebe0f973a8fb93ff0776ef7d634ea2d89a805b23b99c588ddde9ee9d88d1c771140e249a7588dfbb11821d5c325ccb87d3d22661c51db8b69b72cddfba520e53f8d9ffa59fb9ebc3ab506c4bcba0f86fc19af56e313515c4104233aa65b8a48e95a7249ea52492e67224b25138372f060e7597dba745a2cf2d30194b59b52eaf0a3c5d38ba0b4a1af635c647962520ad4ae19c460cd3a649f16e3d274b00b21982a3495b4ef2f9c24e87a89a3bc226ab2250496463a21511d2c402823f73b70d1390eec46bc0e584dd5200a456fae23f5fedcb3d017ca611f4410c33bde0ddfead03c65601e544eff8ed8b1c4dbf23db62e603bc52161b449e1b7b14fd299806898c791d2e26aee244f0387791d9fa9d1fb866261c50ac18ebf08535b405a3793201768256a37bb3bd5c2eba4e01dba89cda1c33de28f15ca44dddb889241c1caf9f5ee1668fbd423446c003a7a3ba82471901c4ad9992e4e6204a4f037f997cc6ea48fd3a3285606006b671ae0bd47b8e42ec5dde807e85e911704ec025a8e059ca43baaf7500a261e8d5b84e32ef9d6f69a22ae2ffc22f2cf414652c5599af204291b2f1cd83d9ced94097965e10b36135667dd8eb904b54a8f3bb5d148782aa74fab54333e4106d102c062c0780cbf7b5822af59707649850c6d7560400842c4fb9f9bfb23c45f45a78b49d895ac7f8ac6c9f32464a2352b6acff01060b43af044b941ebebcac3b6c894fc1f9b345adbc1c720517c37b93d64e83ba0b8aafcc8a28cec7df74d003d2b9c7e8b9910016a7d7432c6c37f592d6a9f581cdcbd39c52eb1b026aecf6a27c23fab24f3c4f4546e084eb910c589d620eaa284ae8a663418daac041999a5ad69ead9da55733fd210d029a93c0624a4ea33f43767de98ab2dd61e6be3b9008076da2aa8bac7cb3802c09d7672c9c152fc88f0a5d86e7776e0f42e3cec26d809940df0525c45a4916b0c2e70692931c0283a64f3beda65b86d30ba26bd2036f07f92bf28d1b96f8424fa2fbe6021240875b85bc5ab68a0854ed3c3640b2fe9a5e985cfd77b24b65c995c6cd66fb2db33282c3b550a3dd6a4207bb912c0999abfa50e7c228b22e94f868ae3633cf8e703eeec8c27906c7d59b818733eb9ba1cd947aa47e9d4aea9d98c7294a6df169120f0676a7c6b73f03ddfdd828715c2fe21df3f6b4a5a82eba9f0e3d321daf8b121e9120244a55c6dbbf640eab99745148d6d9a08323e8085ec968a9fb6d5a848ae00c52b3411e8a3573a463a615467dbf7809f1411e1f19c4a6e5bc89d71be0dee5bff6c7c7a85b1c1161939895aa60e3d5336f32c5dfcd017933bcdb76b3a98dcae8435f9ea18b459214eaf46c67f399d37432b124b67be947e4b28b21f0bb14df55ba509b6e74603bfcfe17fb8864fb163faab8abf825f4aa7ed03bf870dff3aec3c5b29626d38df77b86935040ca06f4c91922c6040512d0c0e0a722775d419eb5adfc4aab5da28eadace11b443c9e9d451acf4344fe7c57c5771f3a4f33f1936cd1a87f22773a579287db86b2e6c38bc4a300028eb0ec707c301f7395aee68f1df4fdc0e9573205342dfceec9ebf79b6d521ad7900282f8326a266f140727975a94ab0ed2b49286972f896f3e5d5644a7f50c454235310cb7d1d0dd0bd853686e8bbe0cf2bb6bafc2e72776cebe5c01e071450316eea2fc954c24a5ed48c2f1805bba1b6b420f8e23f4fe74100e802b7886e9b7d29ead5394ae7db4ceb2413d13b7a92f0d402ec7a9ca71c7b1f9c282820046fd1721f48d44d46644989e93c3a54a073f936f9403ed629ffe65f078338ec9ea77f170e93db9638d26e45dcd8a9a18540f6c5f8ce5dc624c7925e7643bcaa83b17e0a39ff230a992e42d85c4fa23027486ce4c526a94fbb8d238e9918af069485bca8740cf1d5feed7b36518464f79f4a4dff8f2f42c0d5d280c40a83676df1dafee7d509ab36a61cb7d3a2ae56430cb219e659e04806555c110e29ca23bd832f6f96f4d59b0e29d7ad8516d5dba4fbbc48445132fe5e0422c0deef6465e2230673aac5b7aedf405d601e0dcee2204bc9bc9f2ae060b41e698f6361e9c92037ea223ca0c77371e6158f99bee8c7e2bc70841071252b73bc4c4318e2a4b2f54d6c848d2e7138332a28ca78fde82794ac8ee5934325520dd6911a47b74c732d80fe70d94e8c7c0c8d852a7f3bb6177ed688b033603fe28aecff4197d3141bd4c3d0a8a56a7709867833c343ac7baf51b43a98b41df9bf148a41b48289b03a4dcad6cabc2f7d13ad0f428b12b98554fa3ff6f2e577ebc56b1b02ea1ba59e15f713ff8a9f1c9b2d5d330d4864ddf5ee47229c90d900cfe479586a6081cd76f003474101f1bbd647ba0a0a5f402750873e458546d33c7dfe08c694f609cdc3100ba52497470b68f600453d7dbf37d143b5ce219bf6db18fa7e9e2cfc2f87c4a403cdb4c9e4cebe07131b0fba01dcd78313e125056b550a4a6c08e9fb650df96818a70093d7313c9238718cf9d85f698d7ee61c984b482a9fbaaa9704b0490bff4be4ddeddfb30c8a245825659666df422ecf37a2a1c220bbbbe3de960271f33e760a43a2ab18a97aca5639ea65bbb44f9677b4a4bb81d503b092f3535f7bc4aba3b185bcb7fce236f588c3dbadcec414dab1b41dc3fc6e433d9ce5a192a5f261e391af1e01895381fe4d7948c6e45f4fab380ac5735d7a615214c55bbeb89a90720890a6cac833da7d979b42bcc16fa7175ba425d728551603472d88f868c6671bc3f22dcae03e43fce631db578e22babf45e31426765e29dbd2d5f18832af3f3590cd1960f0765fa09b56009ecdee07b0b5e7ab23c506b46c6f3c1dd3cc0085163340bc0a40f0187433b66f024ad99e63c4ff54f51a3f8a966b326bd94cc55bb07559c75e02e6f9d0181aa5127f2b3c3b05a17d18c023c0a89dd798c7803fff8a08e174536935a2a1d1736844fb39e5faf68e6413c0341d2706a952cd1a7ea99d02fc41d32cca183dd96d6c414793594832a728ffdd5ef01d96931b82ea31e195d9228d6c40786ad0c2c754dd58cd71486c51e28e316bde7efd8f112bdb0034037be0b02ffa5700e985e819083a57ec54bc9144b4c4874864cf5c2ddc7d0bad71fe266045443bf21545d240428dcdc09"}, @ETHTOOL_A_BITSET_VALUE={0xba, 0x4, "cd92b3adf7e20e661d221962a30d4efa81afbd7ce05cde15ef1b7e9570a1cc0be66ce7c3534533eda9b7a23f8784ef8df0939b03cc55ae543886c46606e003fdfc3e8e193aa807b19e2115092770d65980d043a2ce7233ef9ffdf964bc6c736dba847e975af1343e0af1e5cc96da3a1ab8bcce8763e53529cfb8a65a550627c8eb3f081b236a7ed8fb99b4789fdcc84c2c4ee1db55d36ef4e262086dc0c57834842fc3982522c50a0dd7bc44f8d0c345ebf58c9d6d09"}]}]}, 0x10fc}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket(0xa, 0x3, 0x3a) 1.427919768s ago: executing program 2 (id=831): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f0000000100)={0x2, 0xffffffff, 0x0, 0x2, 0x0, 0x42}) (async, rerun: 32) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x6, 0x21a301) (rerun: 32) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000000080)={0x1}) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xffffffffffffffee, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32efaec80000ec00120c000140060404000a0404009bbc7a46e3988285dcdf12f213e6f768fec601955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1002000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f8, 0x100, 0x70bd25, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8d}, 0x24008884) 714.163389ms ago: executing program 4 (id=832): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014008000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e0003000f000000028000001294", 0x2e}], 0x1}, 0x8000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x80108906, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x57789000) r4 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f00000001c0)={&(0x7f0000000180)=[0x0, 0x0], 0x2}) r6 = syz_open_dev$dri(&(0x7f0000000240), 0x1, 0x101040) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000200)={r5, r7, 0x0, 0x9, 0x8, 0x2, 0xffffffff, 0x7, 0x5, 0x3, 0x2, 0x1}) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000100)={'netpci0\x00', @remote}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 529.272212ms ago: executing program 4 (id=833): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080)=@assoc_value, &(0x7f00000000c0)=0x8) exit(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x3}, 0x0) splice(r0, 0x0, r1, 0x0, 0x800000000fe, 0x0) 0s ago: executing program 2 (id=834): socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f0000000080)="817bb97cdac2f8f819447aa4a5f115a480f8b414ba8e27597f", 0x19}], 0x2}, 0x24040050) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x629, 0x2, 0x401, 0x2, 0xcc7, 0xfff, 0x5c952399, 0xd, 0x3ff, 0x2, 0x1, 0x1, 0x1, 0x9, 0xe1cb, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xfffffffd, 0x80000000, 0x20001e56, 0xb, 0xe69, 0x3c, 0x8, 0x106, 0x8000000, 0x2]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8ab00, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xfffffffb}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x8b5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x4) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc000000090601020000000000000000010000020900020073797a300000000005000100070000001c0007801800016314000240fc0200000000000000000000000000004c0008800c00078006001d4004000000100007800c10148008000140ffffffff100007800a0011000000000000000000100007800900130073797a31000000000c00078006001d40663a000005000100070000000900020073797a3000000000050001000700000008000940000000060500010007000000"], 0xbc}, 0x1, 0x0, 0x0, 0x40004}, 0x6040090) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="bc000000090601020000000000000000010000020900020073797a300000000005000100070000001c0007801800016314000240fc0200000000000000000000000000004c0008800c00078006001d4004000000100007800c10148008000140ffffffff100007800a0011000000000000000000100007800900130073797a31000000000c00078006001d40663a000005000100070000000900020073797a3000000000050001000700000008000940000000060500010007000000"], 0xbc}, 0x1, 0x0, 0x0, 0x40004}, 0x6040090) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050400"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c010203010902240001010000000904690202ff5aa30009050400"], 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f00000000c0)={'veth1_macvtap\x00', @remote}) socket(0x1d, 0x2, 0x6) (async) r4 = socket(0x1d, 0x2, 0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x800) sync_file_range(r5, 0x1, 0x9, 0xd) (async) sync_file_range(r5, 0x1, 0x9, 0xd) recvmsg$unix(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x40000020) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000340)="34c756994e83eb", 0x7}], 0x1, 0xfffffffe, 0x4, 0x1) kernel console output (not intermixed with test programs): T9] gspca_main: gspca_zc3xx-2.14.0 probing 041e:4053 [ 92.606578][ T6701] /dev/rnullb0: Can't open blockdev [ 92.642244][ T6704] /dev/rnullb0: Can't open blockdev [ 92.650482][ T9] gspca_zc3xx: reg_w_i err -71 [ 92.667693][ T9] gspca_zc3xx 2-1:0.207: probe with driver gspca_zc3xx failed with error -71 [ 92.682695][ T9] usb 2-1: USB disconnect, device number 6 [ 92.893010][ T6710] /dev/rnullb0: Can't open blockdev [ 92.931628][ T5943] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 92.943820][ T6716] /dev/rnullb0: Can't open blockdev [ 93.091172][ T5943] usb 3-1: unable to get BOS descriptor or descriptor too short [ 93.104740][ T5943] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt [ 93.125099][ T5943] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 93.125129][ T5943] usb 3-1: config 1 interface 0 has no altsetting 0 [ 93.125145][ T5943] usb 3-1: config 1 interface 0 has no altsetting 1 [ 93.154829][ T5943] usb 3-1: string descriptor 0 read error: -22 [ 93.161268][ T5943] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.177532][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.197739][ T6706] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.206953][ T5943] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 93.234416][ T6730] /dev/rnullb0: Can't open blockdev [ 93.310873][ T6733] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.318978][ T6733] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.328500][ T6733] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.352809][ T6733] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 93.367965][ T6733] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 93.380492][ T6733] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 93.401597][ T6733] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.421979][ T6733] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 93.443018][ T6733] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 93.461185][ T6733] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.489617][ T6733] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 93.525938][ T5943] usb 3-1: USB disconnect, device number 16 [ 93.731396][ T6748] erofs (device rnullb0): cannot find valid erofs superblock [ 93.945173][ T6759] Bluetooth: MGMT ver 1.23 [ 94.087835][ T6766] vxfs: WRONG superblock magic 00000000 at 1 [ 94.093909][ T6766] vxfs: WRONG superblock magic 00000000 at 8 [ 94.158255][ T6766] vxfs: can't find superblock. [ 94.357754][ T2153] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 94.366930][ T6783] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 94.416267][ T6790] netlink: 5 bytes leftover after parsing attributes in process `syz.1.249'. [ 94.426446][ T6790] 0ªî{X¹¦: renamed from macvtap0 (while UP) [ 94.436115][ T6790] 0ªî{X¹¦: entered allmulticast mode [ 94.484390][ T6790] veth0_macvtap: entered allmulticast mode [ 94.492703][ T2153] usb 1-1: device descriptor read/64, error -71 [ 94.500805][ T6790] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 94.517987][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 94.629484][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.648163][ T9] usb 4-1: device descriptor read/64, error -71 [ 94.737481][ T2153] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 94.867523][ T2153] usb 1-1: device descriptor read/64, error -71 [ 94.887565][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 94.978521][ T2153] usb usb1-port1: attempt power cycle [ 95.017557][ T9] usb 4-1: device descriptor read/64, error -71 [ 95.138355][ T9] usb usb4-port1: attempt power cycle [ 95.327512][ T2153] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 95.348259][ T2153] usb 1-1: device descriptor read/8, error -71 [ 95.367738][ T5866] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.367748][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.384012][ T30] kauditd_printk_skb: 77 callbacks suppressed [ 95.384026][ T30] audit: type=1326 audit(1756677805.858:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6817 comm="syz.2.252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59c178ebe9 code=0x0 [ 95.447709][ T5863] Bluetooth: hci2: command 0x0c1a tx timeout [ 95.447705][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout [ 95.477768][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 95.491762][ T6820] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 95.508623][ T9] usb 4-1: device descriptor read/8, error -71 [ 95.597496][ T2153] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 95.617923][ T2153] usb 1-1: device descriptor read/8, error -71 [ 95.728081][ T2153] usb usb1-port1: unable to enumerate USB device [ 95.748252][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 95.768175][ T9] usb 4-1: device descriptor read/8, error -71 [ 95.878033][ T9] usb usb4-port1: unable to enumerate USB device [ 96.264556][ T5866] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 96.272920][ T5866] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 96.282287][ T5866] Bluetooth: hci2: unexpected subevent 0x0e length: 30 > 15 [ 96.289870][ T5866] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 96.628511][ T5943] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 96.647560][ T51] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 96.647655][ T5866] Bluetooth: hci4: command 0xfc11 tx timeout [ 96.763317][ T6834] tmpfs: Bad value for 'nr_inodes' [ 96.777530][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 96.784482][ T5943] usb 3-1: config 162 has an invalid interface number: 142 but max is 1 [ 96.800397][ T5943] usb 3-1: config 162 has an invalid interface number: 112 but max is 1 [ 96.810019][ T5943] usb 3-1: config 162 has no interface number 0 [ 96.816288][ T5943] usb 3-1: config 162 has no interface number 1 [ 96.825347][ T5943] usb 3-1: config 162 interface 142 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 96.840033][ T5943] usb 3-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 96.852617][ T6843] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 96.852812][ T5943] usb 3-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 96.861896][ T6843] UDF-fs: Scanning with blocksize 512 failed [ 96.872111][ T5943] usb 3-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 96.878493][ T6843] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 96.889986][ T5943] usb 3-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 96.898544][ T6843] UDF-fs: Scanning with blocksize 1024 failed [ 96.915836][ T5943] usb 3-1: config 162 interface 142 has no altsetting 0 [ 96.916985][ T6843] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 96.923478][ T5943] usb 3-1: config 162 interface 112 has no altsetting 0 [ 96.937649][ T6843] UDF-fs: Scanning with blocksize 2048 failed [ 96.943485][ T6843] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 96.946448][ T5943] usb 3-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08 [ 96.957526][ T6843] UDF-fs: Scanning with blocksize 4096 failed [ 96.960958][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.975779][ T5943] usb 3-1: Product: syz [ 96.980212][ T5943] usb 3-1: Manufacturer: syz [ 96.984819][ T5943] usb 3-1: SerialNumber: syz [ 97.213247][ T6831] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 97.228678][ T6831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.246130][ T6831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.294260][ T6855] syzkaller1: entered promiscuous mode [ 97.300456][ T6855] syzkaller1: entered allmulticast mode [ 97.311373][ T6857] fuse: Unknown parameter 'd&ÓùôM*ÞŠˆ¤´9 0x0000000000000003' [ 97.371732][ T5943] pl2303 3-1:162.142: required endpoints missing [ 97.386132][ T5943] pl2303 3-1:162.112: required interrupt-in endpoint missing [ 97.442719][ T5943] usb 3-1: USB disconnect, device number 17 [ 97.448926][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 97.448934][ T5866] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.540020][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.540026][ T5866] Bluetooth: hci2: command 0x0c1a tx timeout [ 97.557707][ T5942] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 97.707497][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 97.714331][ T5942] usb 1-1: unable to get BOS descriptor or descriptor too short [ 97.725234][ T5942] usb 1-1: config 4 interface 0 has no altsetting 0 [ 97.735251][ T5942] usb 1-1: string descriptor 0 read error: -22 [ 97.744066][ T5942] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 97.756839][ T5942] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 97.776706][ T6869] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 97.791754][ T5942] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 97.840833][ T5942] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 97.869047][ T5942] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 97.880575][ T5942] usb 1-1: media controller created [ 97.904057][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 97.980098][ T6877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.990987][ T6877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.197576][ T6857] ======================================================= [ 98.197576][ T6857] WARNING: The mand mount option has been deprecated and [ 98.197576][ T6857] and is ignored by this kernel. Remove the mand [ 98.197576][ T6857] option from the mount to silence this warning. [ 98.197576][ T6857] ======================================================= [ 98.258191][ T6857] /dev/rnullb0: Can't open blockdev [ 98.265890][ T9] usb 1-1: USB disconnect, device number 23 [ 98.387527][ T5943] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 98.547463][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 98.556542][ T5943] usb 3-1: config 162 has an invalid interface number: 142 but max is 1 [ 98.565233][ T5943] usb 3-1: config 162 has an invalid interface number: 112 but max is 1 [ 98.574308][ T5943] usb 3-1: config 162 has no interface number 0 [ 98.580837][ T5943] usb 3-1: config 162 has no interface number 1 [ 98.587245][ T5943] usb 3-1: config 162 interface 142 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 98.600655][ T5943] usb 3-1: config 162 interface 112 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 98.611875][ T5943] usb 3-1: config 162 interface 112 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 98.624009][ T5943] usb 3-1: config 162 interface 112 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 98.635694][ T5943] usb 3-1: config 162 interface 112 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 98.646224][ T5943] usb 3-1: config 162 interface 112 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.661897][ T5943] usb 3-1: config 162 interface 142 has no altsetting 0 [ 98.668982][ T5943] usb 3-1: config 162 interface 112 has no altsetting 0 [ 98.679471][ T5943] usb 3-1: New USB device found, idVendor=0557, idProduct=2008, bcdDevice=a7.08 [ 98.688826][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.696856][ T5943] usb 3-1: Product: syz [ 98.702239][ T5943] usb 3-1: Manufacturer: syz [ 98.706852][ T5943] usb 3-1: SerialNumber: syz [ 98.995264][ T5943] pl2303 3-1:162.142: required endpoints missing [ 99.009902][ T5943] pl2303 3-1:162.112: required interrupt-in endpoint missing [ 99.021532][ T5943] usb 3-1: USB disconnect, device number 18 [ 99.489257][ T6890] Invalid source name [ 99.494140][ T6890] UBIFS error (pid: 6890): cannot open "usrquota", error -22 [ 99.497971][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.3.276'. [ 99.527525][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.607539][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 99.608151][ T5866] Bluetooth: hci3: command 0x0c1a tx timeout [ 99.657081][ T5862] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 99.668261][ T5862] CPU: 1 UID: 0 PID: 5862 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 99.668285][ T5862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.668295][ T5862] Call Trace: [ 99.668302][ T5862] [ 99.668309][ T5862] dump_stack_lvl+0x189/0x250 [ 99.668337][ T5862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.668358][ T5862] ? __pfx__printk+0x10/0x10 [ 99.668380][ T5862] ? rcu_is_watching+0x15/0xb0 [ 99.668400][ T5862] dump_header+0xd3/0x480 [ 99.668416][ T5862] oom_kill_process+0x387/0x920 [ 99.668435][ T5862] out_of_memory+0xf09/0x12a0 [ 99.668453][ T5862] ? mem_cgroup_iter+0x3b/0x460 [ 99.668471][ T5862] ? __pfx_out_of_memory+0x10/0x10 [ 99.668491][ T5862] mem_cgroup_out_of_memory+0x145/0x240 [ 99.668509][ T5862] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 99.668530][ T5862] ? _raw_spin_unlock+0x28/0x50 [ 99.668549][ T5862] ? memcg1_oom_prepare+0x37f/0x450 [ 99.668570][ T5862] try_charge_memcg+0xdff/0x1290 [ 99.668590][ T5862] ? rcu_is_watching+0x15/0xb0 [ 99.668610][ T5862] ? __pfx_try_charge_memcg+0x10/0x10 [ 99.668631][ T5862] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 99.668647][ T5862] ? xa_load+0x60/0x210 [ 99.668666][ T5862] ? rcu_is_watching+0x15/0xb0 [ 99.668683][ T5862] ? rcu_is_watching+0x15/0xb0 [ 99.668699][ T5862] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 99.668730][ T5862] charge_memcg+0x9f/0x180 [ 99.668750][ T5862] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 99.668771][ T5862] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 99.668793][ T5862] __read_swap_cache_async+0x28c/0x510 [ 99.668815][ T5862] swap_cluster_readahead+0x4cf/0x5f0 [ 99.668835][ T5862] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 99.668855][ T5862] ? rcu_is_watching+0x15/0xb0 [ 99.668871][ T5862] ? filemap_get_entry+0xad/0x2f0 [ 99.668888][ T5862] ? get_vma_policy+0x27c/0x3c0 [ 99.668910][ T5862] swapin_readahead+0x17d/0xb50 [ 99.668927][ T5862] ? __pfx_filemap_get_entry+0x10/0x10 [ 99.668946][ T5862] ? get_swap_device_info+0x1c/0x2b0 [ 99.668963][ T5862] ? rcu_is_watching+0x15/0xb0 [ 99.668979][ T5862] ? __pfx_swapin_readahead+0x10/0x10 [ 99.668997][ T5862] ? __filemap_get_folio+0x9a6/0xaf0 [ 99.669017][ T5862] ? swap_cache_get_folio+0xae/0x3b0 [ 99.669037][ T5862] do_swap_page+0x525/0x5ac0 [ 99.669056][ T5862] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 99.669077][ T5862] ? ___pte_offset_map+0x29/0x250 [ 99.669098][ T5862] ? lock_acquire+0x5f/0x360 [ 99.669113][ T5862] ? do_swap_page+0x184/0x5ac0 [ 99.669131][ T5862] ? __pfx_do_swap_page+0x10/0x10 [ 99.669151][ T5862] ? __pfx_default_wake_function+0x10/0x10 [ 99.669167][ T5862] ? ___pte_offset_map+0x45/0x250 [ 99.669186][ T5862] ? ___pte_offset_map+0x1cf/0x250 [ 99.669207][ T5862] ? pte_offset_map_rw_nolock+0xea/0x160 [ 99.669228][ T5862] __handle_mm_fault+0xe55/0x5400 [ 99.669254][ T5862] ? __pfx___handle_mm_fault+0x10/0x10 [ 99.669274][ T5862] ? rcu_is_watching+0x15/0xb0 [ 99.669295][ T5862] ? lock_vma_under_rcu+0x3cb/0x450 [ 99.669311][ T5862] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 99.669328][ T5862] handle_mm_fault+0x40a/0x8e0 [ 99.669352][ T5862] do_user_addr_fault+0xa81/0x1390 [ 99.669371][ T5862] ? rcu_is_watching+0x15/0xb0 [ 99.669388][ T5862] ? trace_page_fault_user+0x84/0x1e0 [ 99.669404][ T5862] exc_page_fault+0x82/0x100 [ 99.669424][ T5862] asm_exc_page_fault+0x26/0x30 [ 99.669439][ T5862] RIP: 0033:0x7fdf6ddc14a8 [ 99.669465][ T5862] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 99.669478][ T5862] RSP: 002b:00007ffd732d51b0 EFLAGS: 00010293 [ 99.669494][ T5862] RAX: 0000000000000000 RBX: 00000000000000c8 RCX: 00007fdf6ddc14a5 [ 99.669505][ T5862] RDX: 00007ffd732d51f0 RSI: 0000000000000000 RDI: 0000000000000000 [ 99.669516][ T5862] RBP: 00007ffd732d525c R08: 0000000000000000 R09: 0000000000000000 [ 99.669526][ T5862] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 99.669536][ T5862] R13: 00000000000927c0 R14: 0000000000017e47 R15: 00007ffd732d52b0 [ 99.669554][ T5862] [ 99.669561][ T5862] memory: usage 307200kB, limit 307200kB, failcnt 9498 [ 100.080486][ T5862] memory+swap: usage 307592kB, limit 9007199254740988kB, failcnt 0 [ 100.088463][ T5862] kmem: usage 1500kB, limit 9007199254740988kB, failcnt 0 [ 100.095598][ T5862] Memory cgroup stats for /syz1: [ 100.095743][ T5862] cache 312999936 [ 100.099555][ T6895] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.100734][ T5862] rss 0 [ 100.118364][ T5862] rss_huge 0 [ 100.121566][ T5862] shmem 312999936 [ 100.125235][ T5862] mapped_file 0 [ 100.128777][ T5862] dirty 0 [ 100.131714][ T5862] writeback 0 [ 100.134990][ T5862] workingset_refault_anon 72 [ 100.139629][ T5862] workingset_refault_file 1122 [ 100.144383][ T5862] swap 405504 [ 100.147736][ T5862] swapcached 12288 [ 100.151452][ T5862] pgpgin 290138 [ 100.154904][ T5862] pgpgout 213719 [ 100.158498][ T5862] pgfault 45065 [ 100.161971][ T5862] pgmajfault 257 [ 100.165517][ T5862] inactive_anon 0 [ 100.169473][ T5862] active_anon 89911296 [ 100.173938][ T5862] inactive_file 0 [ 100.177753][ T5862] active_file 0 [ 100.181217][ T5862] unevictable 223100928 [ 100.185367][ T5862] hierarchical_memory_limit 314572800 [ 100.192311][ T5862] hierarchical_memsw_limit 9223372036854771712 [ 100.199176][ T5862] total_cache 312999936 [ 100.203400][ T5862] total_rss 0 [ 100.208590][ T5862] total_rss_huge 0 [ 100.212367][ T5862] total_shmem 312999936 [ 100.216599][ T5862] total_mapped_file 0 [ 100.220769][ T5862] total_dirty 0 [ 100.224255][ T5862] total_writeback 0 [ 100.230130][ T6895] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.230176][ T5862] total_workingset_refault_anon 72 [ 100.245569][ T5862] total_workingset_refault_file 1122 [ 100.251015][ T5862] total_swap 405504 [ 100.254960][ T5862] total_swapcached 12288 [ 100.259394][ T5862] total_pgpgin 290138 [ 100.263456][ T5862] total_pgpgout 213719 [ 100.267722][ T5862] total_pgfault 45065 [ 100.271702][ T5862] total_pgmajfault 257 [ 100.275761][ T5862] total_inactive_anon 0 [ 100.280129][ T5862] total_active_anon 89911296 [ 100.284715][ T5862] total_inactive_file 0 [ 100.289394][ T5862] total_active_file 0 [ 100.293405][ T5862] total_unevictable 223100928 [ 100.298278][ T5862] anon_cost 0 [ 100.301599][ T5862] file_cost 0 [ 100.304902][ T5862] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.270,pid=6872,uid=0 [ 100.306134][ T6895] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.333421][ T5862] Memory cgroup out of memory: Killed process 6872 (syz.1.270) total-vm:101892kB, anon-rss:1144kB, file-rss:23328kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 100.383193][ T6895] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.428525][ T5943] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 100.456279][ T36] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.471508][ T36] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.485572][ T49] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.500153][ T49] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.597796][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 100.609881][ T5943] usb 3-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 100.637527][ T5943] usb 3-1: config 1 interface 0 has no altsetting 0 [ 100.645929][ T5943] usb 3-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice= 0.40 [ 100.660181][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.668614][ T5943] usb 3-1: Product: syz [ 100.672797][ T5943] usb 3-1: Manufacturer: syz [ 100.677481][ T5943] usb 3-1: SerialNumber: syz [ 100.694919][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 100.704759][ T6900] netlink: 16 bytes leftover after parsing attributes in process `syz.3.280'. [ 100.967569][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 101.117562][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 101.124060][ T9] usb 4-1: config index 0 descriptor too short (expected 61, got 36) [ 101.139024][ T9] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 101.169469][ T9] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 101.178839][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.187354][ T9] usb 4-1: Product: syz [ 101.194918][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input9 [ 101.204656][ T9] usb 4-1: Manufacturer: syz [ 101.211439][ T9] usb 4-1: SerialNumber: syz [ 101.221711][ T5943] usb 3-1: USB disconnect, device number 19 [ 101.443096][ T9] comedi comedi5: Wrong number of endpoints [ 101.450305][ T9] ni6501 4-1:5.0: driver 'ni6501' failed to auto-configure device. [ 101.474033][ T9] usb 4-1: USB disconnect, device number 13 [ 101.868858][ T5942] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 102.028916][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 102.040348][ T5942] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 102.058733][ T5942] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 102.198719][ T5942] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 102.218460][ T5942] usb 2-1: config 1 has no interface number 0 [ 102.224860][ T5942] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 102.237107][ T5942] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 102.255334][ T5942] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 102.257916][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 102.264449][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.285236][ T5942] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 102.409056][ T9] usb 4-1: device descriptor read/64, error -71 [ 102.494981][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.507570][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.520387][ T6910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.530591][ T6910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.647564][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 102.787507][ T9] usb 4-1: device descriptor read/64, error -71 [ 102.897650][ T9] usb usb4-port1: attempt power cycle [ 102.991169][ T6925] /dev/rnullb0: Can't open blockdev [ 103.287704][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 103.309768][ T9] usb 4-1: device descriptor read/8, error -71 [ 103.575487][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 103.607831][ T9] usb 4-1: device descriptor read/8, error -71 [ 103.728248][ T9] usb usb4-port1: unable to enumerate USB device [ 103.761793][ T6933] /dev/rnullb0: Can't open blockdev [ 104.357497][ T6924] Set syz1 is full, maxelem 65536 reached [ 105.398594][ T5942] snd_usb_pod 2-1:1.1: set_interface failed [ 105.405938][ T5942] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 105.413253][ T5942] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 105.427072][ T5942] usb 2-1: USB disconnect, device number 7 [ 114.172663][ T4497] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.211832][ T4497] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.271331][ T4497] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.321458][ T4497] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.407357][ T4497] bridge_slave_1: left allmulticast mode [ 114.413821][ T4497] bridge_slave_1: left promiscuous mode [ 114.427770][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.436037][ T4497] bridge_slave_0: left allmulticast mode [ 114.442659][ T4497] bridge_slave_0: left promiscuous mode [ 114.449540][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.524461][ T4497] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.534615][ T4497] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.545697][ T4497] bond0 (unregistering): Released all slaves [ 114.817189][ T4497] hsr_slave_0: left promiscuous mode [ 114.823239][ T4497] hsr_slave_1: left promiscuous mode [ 114.829193][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.836579][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.850546][ T4497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.858762][ T4497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.874388][ T4497] veth1_macvtap: left promiscuous mode [ 114.881920][ T4497] veth0_macvtap: left promiscuous mode [ 114.887692][ T4497] veth1_vlan: left promiscuous mode [ 114.892969][ T4497] veth0_vlan: left promiscuous mode [ 115.038957][ T4497] team0 (unregistering): Port device team_slave_1 removed [ 115.051011][ T4497] team0 (unregistering): Port device team_slave_0 removed [ 128.401761][ T7066] qnx4: no qnx4 filesystem (no root dir). [ 128.507028][ T7069] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 128.649177][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 128.656418][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 128.664098][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 128.687531][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 128.695002][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.889955][ T7079] chnl_net:caif_netlink_parms(): no params data found [ 128.917601][ T5973] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 128.944543][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.951745][ T7079] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.959279][ T7079] bridge_slave_0: entered allmulticast mode [ 128.965778][ T7079] bridge_slave_0: entered promiscuous mode [ 128.972944][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.980250][ T7079] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.988159][ T7079] bridge_slave_1: entered allmulticast mode [ 128.994678][ T7079] bridge_slave_1: entered promiscuous mode [ 129.007779][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.017916][ T7079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.029026][ T7079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.053760][ T7079] team0: Port device team_slave_0 added [ 129.063792][ T7079] team0: Port device team_slave_1 added [ 129.089217][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.096178][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.122362][ T7079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.130862][ T5973] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 129.134406][ T7079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.144349][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.149167][ T2153] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 129.164808][ T7079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.190912][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 129.191040][ T5973] usb 3-1: Product: syz [ 129.191055][ T5973] usb 3-1: Manufacturer: syz [ 129.191068][ T5973] usb 3-1: SerialNumber: syz [ 129.201584][ T9] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 129.209323][ T7079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.211069][ T5973] usb 3-1: config 0 descriptor?? [ 129.234802][ T9] usb 2-1: config 0 has no interface number 0 [ 129.243369][ T9] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 129.255787][ T9] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 129.260201][ T7079] hsr_slave_0: entered promiscuous mode [ 129.265119][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.272108][ T7079] hsr_slave_1: entered promiscuous mode [ 129.281825][ T5973] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 129.291674][ T9] usb 2-1: Product: syz [ 129.295922][ T9] usb 2-1: Manufacturer: syz [ 129.300864][ T9] usb 2-1: SerialNumber: syz [ 129.307543][ T9] usb 2-1: config 0 descriptor?? [ 129.316456][ T9] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 129.326341][ T9] em28xx 2-1:0.132: Video interface 132 found: [ 129.357716][ T2153] usb 4-1: Using ep0 maxpacket: 16 [ 129.369861][ T2153] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 129.379320][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.387317][ T2153] usb 4-1: Product: syz [ 129.392652][ T2153] usb 4-1: Manufacturer: syz [ 129.397347][ T2153] usb 4-1: SerialNumber: syz [ 129.416286][ T7079] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 129.428844][ T7079] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 129.438604][ T7079] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 129.448363][ T7079] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 129.474435][ T7079] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.481601][ T7079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.489000][ T7079] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.496104][ T7079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.547204][ T7079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 129.563344][ T4497] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.574693][ T4497] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.589793][ T7079] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.603104][ T4497] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.610278][ T4497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.639050][ T2153] cdc_ncm 4-1:1.0: bind() failure [ 129.649688][ T2153] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 129.657881][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.664974][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.680154][ T2153] cdc_ncm 4-1:1.1: bind() failure [ 129.694312][ T2153] usb 4-1: USB disconnect, device number 18 [ 129.733504][ T7079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 129.797763][ T9] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 129.853103][ T7079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.869723][ T9] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 129.879117][ T9] em28xx 2-1:0.132: board has no eeprom [ 129.937894][ T9] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 129.960383][ T9] em28xx 2-1:0.132: analog set to bulk mode. [ 129.966534][ T5973] em28xx 2-1:0.132: Registering V4L2 extension [ 129.982898][ T9] usb 2-1: USB disconnect, device number 8 [ 129.996156][ T9] em28xx 2-1:0.132: Disconnecting em28xx [ 130.074697][ T5973] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 130.085182][ T7079] veth0_vlan: entered promiscuous mode [ 130.085199][ T5973] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 130.085212][ T5973] em28xx 2-1:0.132: No AC97 audio processor [ 130.098870][ T7079] veth1_vlan: entered promiscuous mode [ 130.114406][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.124890][ T5973] videodev: could not get a free minor [ 130.131862][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.133711][ T7079] veth0_macvtap: entered promiscuous mode [ 130.140013][ T5973] em28xx 2-1:0.132: unable to register video device (error=-23). [ 130.150150][ T7079] veth1_macvtap: entered promiscuous mode [ 130.155174][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.167357][ T5973] em28xx 2-1:0.132: Remote control support is not available for this card. [ 130.172606][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.176635][ T9] em28xx 2-1:0.132: Closing input extension [ 130.190192][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.194176][ T7079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.212879][ T5973] usb 3-1: USB disconnect, device number 20 [ 130.214187][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.223320][ T9] em28xx 2-1:0.132: Freeing device [ 130.272219][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.281930][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.292796][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.342142][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.355154][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.376437][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.386416][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.727539][ T5866] Bluetooth: hci1: command tx timeout [ 131.603381][ T7170] wlan1 speed is unknown, defaulting to 1000 [ 131.636770][ T7170] wlan1 speed is unknown, defaulting to 1000 [ 131.669890][ T7170] wlan1 speed is unknown, defaulting to 1000 [ 131.685441][ T7175] /dev/rnullb0: Can't open blockdev [ 131.864104][ T7170] infiniband sy~0: set active [ 131.869381][ T9] wlan1 speed is unknown, defaulting to 1000 [ 131.880978][ T7170] infiniband sy~0: added wlan1 [ 131.931971][ T7170] RDS/IB: sy~0: added [ 131.936055][ T7170] smc: adding ib device sy~0 with port count 1 [ 131.980910][ T7170] smc: ib device sy~0 port 1 has pnetid [ 131.994036][ T9] wlan1 speed is unknown, defaulting to 1000 [ 132.019655][ T7187] /dev/rnullb0: Can't open blockdev [ 132.027295][ T7170] wlan1 speed is unknown, defaulting to 1000 [ 132.259188][ T7170] wlan1 speed is unknown, defaulting to 1000 [ 132.271609][ T7202] /dev/rnullb0: Can't open blockdev [ 132.364527][ T7210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.398195][ T7210] XFS (rnullb0): Invalid superblock magic number [ 132.407659][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 132.456231][ T7219] /dev/rnullb0: Can't open blockdev [ 132.541727][ T7170] wlan1 speed is unknown, defaulting to 1000 [ 132.570574][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 132.587780][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.607861][ T9] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 132.616929][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.661888][ T9] usb 3-1: config 0 descriptor?? [ 132.790152][ T7170] wlan1 speed is unknown, defaulting to 1000 [ 132.808495][ T5866] Bluetooth: hci1: command tx timeout [ 132.850174][ T7235] 9p: Unknown parameter 'k' [ 132.897780][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.904138][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.917585][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 132.923697][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 132.946115][ T9] usb 3-1: USB disconnect, device number 21 [ 133.005151][ T7244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.039464][ T7244] bond0: (slave rose0): Enslaving as an active interface with an up link [ 134.050443][ T7282] /dev/rnullb0: Can't open blockdev [ 134.120948][ T7288] QAT: failed to copy from user cfg_data. [ 134.229047][ T7297] netlink: 'syz.2.333': attribute type 11 has an invalid length. [ 134.293051][ T7297] /dev/rnullb0: Can't open blockdev [ 134.323859][ T7299] netlink: 830 bytes leftover after parsing attributes in process `syz.1.334'. [ 134.334868][ T7299] bond_slave_0: entered promiscuous mode [ 134.340622][ T7299] bond_slave_1: entered promiscuous mode [ 134.433573][ T7308] netlink: 244 bytes leftover after parsing attributes in process `syz.4.335'. [ 134.447596][ T7307] netlink: 244 bytes leftover after parsing attributes in process `syz.4.335'. [ 134.876495][ T7314] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 134.887918][ T5866] Bluetooth: hci1: command tx timeout [ 134.905742][ T7314] /dev/rnullb0: Can't open blockdev [ 134.931765][ T7314] /dev/rnullb0: Can't open blockdev [ 135.238303][ T7318] /dev/rnullb0: Can't open blockdev [ 135.505680][ T7338] batadv_slave_1: entered promiscuous mode [ 135.539706][ T7338] batadv_slave_1: left promiscuous mode [ 135.577535][ T1209] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 135.759059][ T1209] usb 3-1: Using ep0 maxpacket: 16 [ 135.789277][ T1209] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 135.804900][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.816385][ T1209] usb 3-1: Product: syz [ 135.823027][ T1209] usb 3-1: Manufacturer: syz [ 135.827826][ T1209] usb 3-1: SerialNumber: syz [ 135.842321][ T1209] r8152-cfgselector 3-1: Unknown version 0x0000 [ 135.850088][ T1209] r8152-cfgselector 3-1: config 0 descriptor?? [ 135.888185][ T7358] syzkaller1: entered promiscuous mode [ 135.893688][ T7358] syzkaller1: entered allmulticast mode [ 136.063387][ T7366] /dev/rnullb0: Can't open blockdev [ 136.087969][ T2153] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 136.153801][ T7371] netlink: 'syz.1.348': attribute type 4 has an invalid length. [ 136.248421][ T2153] usb 4-1: Using ep0 maxpacket: 32 [ 136.255766][ T2153] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 136.264830][ T2153] usb 4-1: config 0 has no interface number 0 [ 136.264924][ T1209] r8152-cfgselector 3-1: Unknown version 0x0000 [ 136.278996][ T2153] usb 4-1: config 0 interface 184 has no altsetting 0 [ 136.287872][ T2153] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 136.305334][ T1209] r8152-cfgselector 3-1: bad CDC descriptors [ 136.326479][ T1209] r8152-cfgselector 3-1: USB disconnect, device number 22 [ 136.336563][ T2153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.345426][ T2153] usb 4-1: Product: syz [ 136.380210][ T2153] usb 4-1: Manufacturer: syz [ 136.384844][ T2153] usb 4-1: SerialNumber: syz [ 136.408913][ T2153] usb 4-1: config 0 descriptor?? [ 136.420071][ T2153] smsc75xx v1.0.0 [ 136.781661][ T7408] XFS (rnullb0): Invalid superblock magic number [ 136.812240][ T7415] /dev/rnullb0: Can't open blockdev [ 136.968968][ T5866] Bluetooth: hci1: command tx timeout [ 137.184912][ T7432] XFS (rnullb0): Invalid superblock magic number [ 137.219881][ T7439] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 137.232735][ T7446] netlink: 60 bytes leftover after parsing attributes in process `syz.1.361'. [ 137.420180][ T7455] /dev/rnullb0: Can't open blockdev [ 137.649579][ T2153] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 137.667039][ T2153] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 137.690453][ T2153] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 137.711500][ T2153] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 137.723326][ T2153] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 137.734071][ T2153] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 137.743861][ T2153] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 137.755569][ T2153] usb 4-1: USB disconnect, device number 19 [ 137.991110][ T7474] /dev/rnullb0: Can't open blockdev [ 139.057454][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 139.112433][ T7518] /dev/rnullb0: Can't open blockdev [ 139.209070][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 139.228617][ T10] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 139.239530][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.258948][ T10] usb 2-1: config 0 descriptor?? [ 139.535857][ T7527] netlink: 'syz.3.384': attribute type 8 has an invalid length. [ 139.608083][ T2153] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.658092][ T7538] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 139.683881][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.703243][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.713586][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.721154][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.737453][ T2153] usb 5-1: device descriptor read/64, error -71 [ 139.750139][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.757149][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.765863][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.785093][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.801189][ T7544] xt_l2tp: unknown flags: 51 [ 139.807952][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.815025][ T10] elecom 0003:056E:00E6.0002: unknown main item tag 0x0 [ 139.829900][ T10] elecom 0003:056E:00E6.0002: hidraw0: USB HID v0.00 Device [HID 056e:00e6] on usb-dummy_hcd.1-1/input0 [ 139.987532][ T2153] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 140.137469][ T2153] usb 5-1: device descriptor read/64, error -71 [ 140.248414][ T2153] usb usb5-port1: attempt power cycle [ 140.617232][ T2153] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 140.681116][ T2153] usb 5-1: device descriptor read/8, error -71 [ 140.846128][ T5866] Bluetooth: hci2: ACL packet for unknown connection handle 3017 [ 140.947992][ T2153] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.998546][ T2153] usb 5-1: device descriptor read/8, error -71 [ 141.127991][ T2153] usb usb5-port1: unable to enumerate USB device [ 141.257515][ T5892] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 141.285091][ T7579] /dev/rnullb0: Can't open blockdev [ 141.417523][ T5892] usb 4-1: Using ep0 maxpacket: 8 [ 141.429999][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 141.453723][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.480075][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.499619][ T7586] /dev/rnullb0: Can't open blockdev [ 141.505000][ T5892] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 141.526587][ T5892] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 141.549442][ T5892] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 141.590650][ T5892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.659464][ T5892] usb 4-1: config 0 descriptor?? [ 141.690294][ T7577] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 141.803629][ T10] usb 2-1: USB disconnect, device number 9 [ 141.827514][ T5942] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 141.914987][ T7577] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.987623][ T2153] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 141.996867][ T5942] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 142.005210][ T5942] usb 3-1: config 0 has no interface number 0 [ 142.011725][ T5942] usb 3-1: too many endpoints for config 0 interface 219 altsetting 254: 62, using maximum allowed: 30 [ 142.023402][ T5942] usb 3-1: config 0 interface 219 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 62 [ 142.036850][ T5942] usb 3-1: config 0 interface 219 has no altsetting 0 [ 142.045727][ T5942] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=d0.db [ 142.055103][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.063477][ T5942] usb 3-1: Product: syz [ 142.068306][ T5942] usb 3-1: Manufacturer: syz [ 142.073013][ T5942] usb 3-1: SerialNumber: syz [ 142.079423][ T5942] usb 3-1: config 0 descriptor?? [ 142.127590][ T2153] usb 5-1: device descriptor read/64, error -71 [ 142.229888][ T5866] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 142.256296][ T5925] usb 4-1: USB disconnect, device number 20 [ 142.293429][ T7588] netlink: 48 bytes leftover after parsing attributes in process `syz.2.393'. [ 142.293717][ T7602] erofs (device rnullb0): cannot find valid erofs superblock [ 142.316378][ T5942] usb 3-1: USB disconnect, device number 23 [ 142.318866][ T10] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 142.367579][ T2153] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 142.458280][ T10] usb 2-1: device descriptor read/64, error -71 [ 142.498104][ T2153] usb 5-1: device descriptor read/64, error -71 [ 142.607990][ T2153] usb usb5-port1: attempt power cycle [ 142.697605][ T10] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 142.848604][ T10] usb 2-1: device descriptor read/64, error -71 [ 142.947509][ T2153] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 142.968948][ T2153] usb 5-1: device descriptor read/8, error -71 [ 142.969715][ T10] usb usb2-port1: attempt power cycle [ 143.217451][ T2153] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 143.240348][ T2153] usb 5-1: device descriptor read/8, error -71 [ 143.318275][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 143.347888][ T2153] usb usb5-port1: unable to enumerate USB device [ 143.357890][ T10] usb 2-1: device descriptor read/8, error -71 [ 143.597481][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 143.630001][ T10] usb 2-1: device descriptor read/8, error -71 [ 143.653631][ T5925] hid (null): global environment stack underflow [ 143.662713][ T5925] hid-generic 0010:1B2C:0002.0003: global environment stack underflow [ 143.675135][ T5925] hid-generic 0010:1B2C:0002.0003: item 0 0 1 11 parsing failed [ 143.684105][ T5925] hid-generic 0010:1B2C:0002.0003: probe with driver hid-generic failed with error -22 [ 143.748596][ T10] usb usb2-port1: unable to enumerate USB device [ 144.047435][ T5925] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 144.207458][ T5925] usb 4-1: Using ep0 maxpacket: 8 [ 144.218021][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.228988][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 144.241530][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 144.253247][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 144.264674][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.280820][ T5925] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 144.290423][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.298764][ T5925] usb 4-1: Product: syz [ 144.303023][ T5925] usb 4-1: Manufacturer: syz [ 144.307945][ T5925] usb 4-1: SerialNumber: syz [ 144.321071][ T5925] usb 4-1: config 0 descriptor?? [ 144.336372][ T5925] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 144.354735][ C1] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 144.466481][ T5864] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 144.478106][ T5864] CPU: 1 UID: 0 PID: 5864 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 144.478128][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 144.478137][ T5864] Call Trace: [ 144.478143][ T5864] [ 144.478150][ T5864] dump_stack_lvl+0x189/0x250 [ 144.478177][ T5864] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.478197][ T5864] ? __pfx__printk+0x10/0x10 [ 144.478218][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.478235][ T5864] dump_header+0xd3/0x480 [ 144.478251][ T5864] oom_kill_process+0x387/0x920 [ 144.478269][ T5864] out_of_memory+0xf09/0x12a0 [ 144.478286][ T5864] ? mem_cgroup_iter+0x3b/0x460 [ 144.478303][ T5864] ? __pfx_out_of_memory+0x10/0x10 [ 144.478330][ T5864] mem_cgroup_out_of_memory+0x145/0x240 [ 144.478346][ T5864] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 144.478365][ T5864] ? _raw_spin_unlock+0x28/0x50 [ 144.478383][ T5864] ? memcg1_oom_prepare+0x37f/0x450 [ 144.478402][ T5864] try_charge_memcg+0xdff/0x1290 [ 144.478420][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.478440][ T5864] ? __pfx_try_charge_memcg+0x10/0x10 [ 144.478459][ T5864] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 144.478476][ T5864] ? xa_load+0x60/0x210 [ 144.478497][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.478514][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.478528][ T5864] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 144.478548][ T5864] charge_memcg+0x9f/0x180 [ 144.478568][ T5864] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 144.478588][ T5864] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 144.478608][ T5864] __read_swap_cache_async+0x28c/0x510 [ 144.478629][ T5864] swap_cluster_readahead+0x4cf/0x5f0 [ 144.478648][ T5864] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 144.478669][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.478685][ T5864] ? filemap_get_entry+0xad/0x2f0 [ 144.478703][ T5864] ? get_vma_policy+0x27c/0x3c0 [ 144.478726][ T5864] swapin_readahead+0x17d/0xb50 [ 144.478744][ T5864] ? __pfx_filemap_get_entry+0x10/0x10 [ 144.478762][ T5864] ? get_swap_device_info+0x1c/0x2b0 [ 144.478779][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.478795][ T5864] ? __pfx_swapin_readahead+0x10/0x10 [ 144.478814][ T5864] ? __filemap_get_folio+0x9a6/0xaf0 [ 144.478832][ T5864] ? swap_cache_get_folio+0xae/0x3b0 [ 144.478852][ T5864] do_swap_page+0x525/0x5ac0 [ 144.478877][ T5864] ? ___pte_offset_map+0x29/0x250 [ 144.478898][ T5864] ? lock_acquire+0x5f/0x360 [ 144.478913][ T5864] ? do_swap_page+0x184/0x5ac0 [ 144.478931][ T5864] ? __pfx_do_swap_page+0x10/0x10 [ 144.478951][ T5864] ? __pfx_default_wake_function+0x10/0x10 [ 144.478987][ T5864] ? ___pte_offset_map+0x45/0x250 [ 144.479006][ T5864] ? ___pte_offset_map+0x1cf/0x250 [ 144.479026][ T5864] ? pte_offset_map_rw_nolock+0xea/0x160 [ 144.479045][ T5864] __handle_mm_fault+0xe55/0x5400 [ 144.479068][ T5864] ? __pfx___handle_mm_fault+0x10/0x10 [ 144.479084][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.479100][ T5864] ? lock_vma_under_rcu+0x3cb/0x450 [ 144.479111][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.479124][ T5864] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 144.479137][ T5864] handle_mm_fault+0x40a/0x8e0 [ 144.479156][ T5864] do_user_addr_fault+0xa81/0x1390 [ 144.479171][ T5864] ? rcu_is_watching+0x15/0xb0 [ 144.479184][ T5864] ? trace_page_fault_user+0x84/0x1e0 [ 144.479196][ T5864] exc_page_fault+0x82/0x100 [ 144.479212][ T5864] asm_exc_page_fault+0x26/0x30 [ 144.479224][ T5864] RIP: 0033:0x7f59c17b6a05 [ 144.479236][ T5864] Code: 00 00 f0 83 88 08 03 00 00 10 64 48 8b 3c 25 00 03 00 00 e8 1d 13 00 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 83 e7 02 74 0b 66 2e 0f 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 8b 90 [ 144.479247][ T5864] RSP: 002b:00007ffd9448b178 EFLAGS: 00010297 [ 144.479260][ T5864] RAX: 0000000000000002 RBX: 0000000000000149 RCX: 0000000000000000 [ 144.479268][ T5864] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000055558c30b808 [ 144.479276][ T5864] RBP: 00007ffd9448b22c R08: 0000000000000000 R09: 0000000000000000 [ 144.479284][ T5864] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 144.479292][ T5864] R13: 00000000000927c0 R14: 0000000000022e8b R15: 00007ffd9448b280 [ 144.479311][ T5864] [ 144.479321][ T5864] memory: usage 307200kB, limit 307200kB, failcnt 10938 [ 144.759452][ T7631] /dev/rnullb0: Can't open blockdev [ 144.765378][ T5864] memory+swap: usage 307144kB, limit 9007199254740988kB, failcnt 0 [ 144.909642][ T5864] kmem: usage 1952kB, limit 9007199254740988kB, failcnt 0 [ 144.922022][ T5864] Memory cgroup stats for /syz2: [ 144.922138][ T5864] cache 304508928 [ 144.937321][ T5864] rss 8036352 [ 144.993174][ T10] usb 4-1: USB disconnect, device number 21 [ 145.006518][ T5864] rss_huge 0 [ 145.050662][ T5864] shmem 304500736 [ 145.103025][ T5864] mapped_file 8192 [ 145.106828][ T5864] dirty 8192 [ 145.117533][ T5864] writeback 0 [ 145.120844][ T5864] workingset_refault_anon 1392 [ 145.135767][ T5864] workingset_refault_file 383 [ 145.160945][ T5864] swap 143360 [ 145.164277][ T5864] swapcached 110592 [ 145.197909][ T5864] pgpgin 249744 [ 145.211641][ T5864] pgpgout 173950 [ 145.215219][ T5864] pgfault 73118 [ 145.270014][ T5864] pgmajfault 861 [ 145.294308][ T5864] inactive_anon 304504832 [ 145.304258][ T5864] active_anon 139264 [ 145.403401][ T5864] inactive_file 0 [ 145.407080][ T5864] active_file 8192 [ 145.493863][ T5864] unevictable 7892992 [ 145.508509][ T5864] hierarchical_memory_limit 314572800 [ 145.550859][ T5864] hierarchical_memsw_limit 9223372036854771712 [ 145.585349][ T5864] total_cache 304508928 [ 145.617459][ T5864] total_rss 8036352 [ 145.645874][ T5864] total_rss_huge 0 [ 145.680952][ T5864] total_shmem 304500736 [ 145.707553][ T5864] total_mapped_file 8192 [ 145.740868][ T5864] total_dirty 8192 [ 145.757521][ T5864] total_writeback 0 [ 145.782415][ T5864] total_workingset_refault_anon 1392 [ 145.821721][ T5864] total_workingset_refault_file 383 [ 145.849867][ T5864] total_swap 143360 [ 145.864637][ T5864] total_swapcached 110592 [ 145.886710][ T5864] total_pgpgin 249744 [ 145.911994][ T5864] total_pgpgout 173950 [ 145.931235][ T5864] total_pgfault 73118 [ 145.951867][ T5864] total_pgmajfault 861 [ 145.969633][ T5864] total_inactive_anon 304504832 [ 145.996763][ T5864] total_active_anon 139264 [ 146.018829][ T5864] total_inactive_file 0 [ 146.038231][ T5864] total_active_file 8192 [ 146.059256][ T5864] total_unevictable 7892992 [ 146.070928][ T5864] anon_cost 0 [ 146.079759][ T5864] file_cost 0 [ 146.090111][ T5864] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.401,pid=7611,uid=0 [ 146.121355][ T5864] Memory cgroup out of memory: Killed process 7611 (syz.2.401) total-vm:102024kB, anon-rss:12536kB, file-rss:23336kB, shmem-rss:0kB, UID:0 pgtables:156kB oom_score_adj:1000 [ 146.178236][ T1209] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 146.278295][ T5925] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 146.347642][ T1209] usb 5-1: Using ep0 maxpacket: 8 [ 146.354827][ T1209] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 8 [ 146.365306][ T1209] usb 5-1: config 1 interface 0 altsetting 3 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 146.378319][ T1209] usb 5-1: config 1 interface 0 has no altsetting 0 [ 146.387312][ T1209] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.397154][ T1209] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.405213][ T1209] usb 5-1: Product: syz [ 146.409448][ T1209] usb 5-1: Manufacturer: Ñ [ 146.413959][ T1209] usb 5-1: SerialNumber: syz [ 146.422148][ T7646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.427501][ T5925] usb 4-1: Using ep0 maxpacket: 16 [ 146.429460][ T7646] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 146.437672][ T5942] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 146.452419][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 146.464302][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 146.478322][ T5925] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 146.492747][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.501780][ T5925] usb 4-1: Product: syz [ 146.506018][ T5925] usb 4-1: Manufacturer: syz [ 146.512020][ T5925] usb 4-1: SerialNumber: syz [ 146.518629][ T5925] usb 4-1: config 0 descriptor?? [ 146.530591][ T5925] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 146.540327][ T5925] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 146.577535][ T5942] usb 2-1: device descriptor read/64, error -71 [ 146.647363][ T1209] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 146.817483][ T5942] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 146.849885][ T7646] overlay: Unknown parameter 'hash' [ 146.859058][ T43] usb 5-1: USB disconnect, device number 10 [ 146.949318][ T7659] Dead loop on virtual device ip6_vti0, fix it urgently! [ 146.967544][ T5942] usb 2-1: device descriptor read/64, error -71 [ 147.078451][ T5942] usb usb2-port1: attempt power cycle [ 147.527600][ T1209] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 147.726005][ T1209] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 147.745994][ T1209] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.768271][ T1209] usb 3-1: Product: syz [ 147.775818][ T1209] usb 3-1: Manufacturer: syz [ 147.787410][ T1209] usb 3-1: SerialNumber: syz [ 147.803631][ T1209] usb 3-1: config 0 descriptor?? [ 147.825564][ T1209] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 024 [ 147.877528][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 148.068638][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 148.085926][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 148.104662][ T9] usb 5-1: can't read configurations, error -61 [ 148.247681][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 148.427536][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 148.442428][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 148.459585][ T9] usb 5-1: can't read configurations, error -61 [ 148.477501][ T9] usb usb5-port1: attempt power cycle [ 148.837497][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 148.888539][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 148.904427][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 148.934081][ T9] usb 5-1: can't read configurations, error -61 [ 149.097558][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 149.149658][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 149.165679][ T9] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 149.191172][ T9] usb 5-1: can't read configurations, error -61 [ 149.216642][ T9] usb usb5-port1: unable to enumerate USB device [ 149.356939][ T5942] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 149.396404][ T5925] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 149.788848][ T5925] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 150.147029][ T5942] usb 2-1: device not accepting address 16, error -71 [ 150.264072][ T1209] i2c i2c-1: failure reading functionality [ 150.288807][ T1209] i2c i2c-1: connected i2c-tiny-usb device [ 150.310170][ T1209] usb 3-1: USB disconnect, device number 24 [ 150.401879][ T5925] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 150.424901][ T5925] em28xx 4-1:0.0: No AC97 audio processor [ 150.546417][ T5925] usb 4-1: USB disconnect, device number 22 [ 150.578270][ T5925] em28xx 4-1:0.0: Disconnecting em28xx [ 150.644143][ T7697] comedi comedi3: mpc624: I/O port conflict (0x4f27,16) [ 150.653887][ T5925] em28xx 4-1:0.0: Freeing device [ 150.799749][ T7718] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 150.806691][ T7718] /dev/rnullb0: Can't open blockdev [ 151.127751][ T5892] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 151.174402][ T7736] syzkaller1: entered promiscuous mode [ 151.185391][ T7736] syzkaller1: entered allmulticast mode [ 151.277533][ T5892] usb 3-1: Using ep0 maxpacket: 16 [ 151.285649][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.316348][ T5892] usb 3-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 151.335963][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.347041][ T5892] usb 3-1: config 0 descriptor?? [ 151.363190][ T7744] xt_l2tp: unknown flags: 51 [ 151.695248][ T7751] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 152.090211][ T7721] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 152.097993][ T7721] /dev/rnullb0: Can't open blockdev [ 152.389985][ T30] audit: type=1400 audit(1756677862.858:90): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7764 comm="syz.1.444" [ 152.623352][ T7772] /dev/rnullb0: Can't open blockdev [ 152.663749][ T7774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 153.539817][ T7782] netlink: 28 bytes leftover after parsing attributes in process `syz.1.449'. [ 153.790283][ T7791] netlink: 'syz.3.452': attribute type 3 has an invalid length. [ 153.804910][ T7791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 153.817973][ T7791] /dev/rnullb0: Can't open blockdev [ 153.835886][ T7791] /dev/rnullb0: Can't open blockdev [ 153.869448][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 153.876580][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 153.903339][ T5892] usb 3-1: USB disconnect, device number 25 [ 154.427516][ T5925] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 154.444880][ T7823] dvmrp1: entered allmulticast mode [ 154.451790][ T5943] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 154.587528][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 154.593958][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.604940][ T5925] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 154.617856][ T5925] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 154.626894][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.627659][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 154.641866][ T5925] usb 5-1: config 0 descriptor?? [ 154.646291][ T5943] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 154.655782][ T5943] usb 3-1: config 0 has no interface number 0 [ 154.666123][ T5943] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 154.679168][ T5943] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 154.690687][ T5943] usb 3-1: config 0 interface 41 has no altsetting 0 [ 154.701036][ T5943] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 154.710404][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.719685][ T5943] usb 3-1: Product: syz [ 154.723971][ T5943] usb 3-1: Manufacturer: syz [ 154.731424][ T5943] usb 3-1: SerialNumber: syz [ 154.745097][ T5943] usb 3-1: config 0 descriptor?? [ 154.751091][ T7810] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 154.759899][ T7810] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 154.974410][ T7810] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 154.982198][ T7810] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 155.068207][ T5925] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 155.076804][ T5925] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 155.084943][ T5925] microsoft 0003:045E:07DA.0004: usage index exceeded [ 155.091781][ T5925] microsoft 0003:045E:07DA.0004: item 0 0 2 2 parsing failed [ 155.100418][ T5925] microsoft 0003:045E:07DA.0004: parse failed [ 155.106560][ T5925] microsoft 0003:045E:07DA.0004: probe with driver microsoft failed with error -22 [ 155.333567][ T5892] usb 5-1: USB disconnect, device number 15 [ 155.537910][ T7846] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 155.595135][ T5943] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 155.617761][ T10] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 155.781510][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 155.790456][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 155.799657][ T10] usb 4-1: config 5 has an invalid interface number: 141 but max is 0 [ 155.808010][ T10] usb 4-1: config 5 has no interface number 0 [ 155.815577][ T10] usb 4-1: config 5 interface 141 has no altsetting 0 [ 155.824037][ T10] usb 4-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice=31.f3 [ 155.833112][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.841227][ T10] usb 4-1: Product: syz [ 155.845505][ T10] usb 4-1: Manufacturer: syz [ 155.850196][ T10] usb 4-1: SerialNumber: syz [ 156.117766][ T5892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 156.267447][ T5892] usb 5-1: device descriptor read/64, error -71 [ 156.301109][ T10] pcwd_usb: The device isn't a Human Interface Device [ 156.309817][ T10] usb 4-1: USB disconnect, device number 23 [ 156.507430][ T5892] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 156.647598][ T5892] usb 5-1: device descriptor read/64, error -71 [ 156.757714][ T5892] usb usb5-port1: attempt power cycle [ 156.858885][ T5943] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 156.879944][ T5943] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 156.914539][ T5943] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 156.996990][ T5943] usb 3-1: USB disconnect, device number 26 [ 157.108471][ T5892] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 157.140379][ T5892] usb 5-1: device descriptor read/8, error -71 [ 157.217569][ T5942] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 157.347612][ T5942] usb 4-1: device descriptor read/64, error -71 [ 157.387435][ T5892] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 157.407937][ T5892] usb 5-1: device descriptor read/8, error -71 [ 157.463418][ T51] Bluetooth: hci2: unexpected subevent 0x04 length: 9 < 11 [ 157.518741][ T5892] usb usb5-port1: unable to enumerate USB device [ 157.587523][ T5942] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 157.717449][ T5943] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 157.820638][ T5942] usb 4-1: device descriptor read/64, error -71 [ 157.878823][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.890384][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 157.901600][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 157.911710][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.932784][ T5943] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.937749][ T5942] usb usb4-port1: attempt power cycle [ 157.941947][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.964284][ T5943] usb 3-1: config 0 descriptor?? [ 158.307468][ T5942] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 158.335450][ T5942] usb 4-1: device descriptor read/8, error -71 [ 158.438550][ T7892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.447212][ T7892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.495318][ T5943] usbhid 3-1:0.0: can't add hid device: -71 [ 158.503038][ T5943] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 158.516891][ T5943] usb 3-1: USB disconnect, device number 27 [ 158.577457][ T5942] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 158.597944][ T5942] usb 4-1: device descriptor read/8, error -71 [ 158.717696][ T5942] usb usb4-port1: unable to enumerate USB device [ 159.724515][ T7921] /dev/rnullb0: Can't open blockdev [ 159.885308][ T36] nci: nci_ntf_packet: unsupported ntf opcode 0xf3f [ 159.893320][ T7930] /dev/rnullb0: Can't open blockdev [ 160.171463][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 160.181630][ T7946] /dev/rnullb0: Can't open blockdev [ 160.247675][ T5892] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 160.408271][ T5892] usb 3-1: Using ep0 maxpacket: 32 [ 160.415747][ T5892] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.424716][ T5892] usb 3-1: config 255 has an invalid interface number: 243 but max is 0 [ 160.433128][ T5892] usb 3-1: config 255 has no interface number 0 [ 160.439455][ T5892] usb 3-1: config 255 interface 243 has no altsetting 0 [ 160.448101][ T5892] usb 3-1: New USB device found, idVendor=5050, idProduct=8004, bcdDevice=80.4a [ 160.457163][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.465683][ T5892] usb 3-1: Product: syz [ 160.469888][ T5892] usb 3-1: Manufacturer: syz [ 160.474473][ T5892] usb 3-1: SerialNumber: syz [ 160.704094][ T5892] ftdi_sio 3-1:255.243: FTDI USB Serial Device converter detected [ 160.716254][ T5892] ftdi_sio ttyUSB0: unknown device type: 0x804a [ 160.752451][ T5892] usb 3-1: USB disconnect, device number 28 [ 160.769578][ T5892] ftdi_sio 3-1:255.243: device disconnected [ 160.796163][ T7957] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 160.796768][ T10] IPVS: starting estimator thread 0... [ 160.840076][ T7959] nbd_handle_cmd: 2 callbacks suppressed [ 160.840098][ T7959] block nbd1: Attempted send on invalid socket [ 160.853452][ T7959] blk_print_req_error: 2 callbacks suppressed [ 160.853469][ T7959] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 160.874865][ T7959] XFS (nbd1): SB validate failed with error -5. [ 160.919658][ T7964] IPVS: using max 45 ests per chain, 108000 per kthread [ 161.065854][ T7984] /dev/rnullb0: Can't open blockdev [ 161.472453][ T7996] syzkaller1: entered promiscuous mode [ 161.479145][ T7996] syzkaller1: entered allmulticast mode [ 161.489334][ T7996] /dev/rnullb0: Can't open blockdev [ 161.586265][ T8000] /dev/rnullb0: Can't open blockdev [ 161.837577][ T5925] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 161.966685][ T8008] /dev/rnullb0: Can't open blockdev [ 161.977523][ T5925] usb 2-1: device descriptor read/64, error -71 [ 161.991876][ T8010] /dev/rnullb0: Can't open blockdev [ 162.217535][ T5925] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 162.327769][ T5892] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 162.357532][ T5925] usb 2-1: device descriptor read/64, error -71 [ 162.467658][ T5925] usb usb2-port1: attempt power cycle [ 162.479603][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.501503][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.502353][ T8019] netlink: 112 bytes leftover after parsing attributes in process `syz.3.520'. [ 162.525655][ T30] audit: type=1800 audit(1756677872.998:91): pid=8019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.520" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 162.546235][ T8019] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 162.557263][ T8019] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 162.569447][ T8019] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 162.627795][ T5892] usb 3-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 162.636880][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.657813][ T5892] usb 3-1: config 0 descriptor?? [ 162.897519][ T5925] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 162.918047][ T5925] usb 2-1: device descriptor read/8, error -71 [ 162.937712][ T10] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 163.071044][ T5892] hid_parser_main: 60 callbacks suppressed [ 163.071065][ T5892] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 163.088812][ T5892] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 163.096306][ T5892] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 163.105412][ T5892] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 163.107552][ T10] usb 4-1: device descriptor read/64, error -71 [ 163.113259][ T5892] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 163.126920][ T5892] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 163.153519][ T5892] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0 [ 163.161099][ T5925] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 163.170181][ T5892] steelseries 0003:1038:12B6.0005: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.2-1/input0 [ 163.197843][ T5925] usb 2-1: device descriptor read/8, error -71 [ 163.307815][ T5925] usb usb2-port1: unable to enumerate USB device [ 163.387756][ T10] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 163.527536][ T10] usb 4-1: device descriptor read/64, error -71 [ 163.573038][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.585330][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.637989][ T10] usb usb4-port1: attempt power cycle [ 163.977534][ T10] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 163.999030][ T10] usb 4-1: device descriptor read/8, error -71 [ 164.237527][ T10] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 164.258974][ T10] usb 4-1: device descriptor read/8, error -71 [ 164.378137][ T10] usb usb4-port1: unable to enumerate USB device [ 164.427537][ T43] usb 3-1: reset high-speed USB device number 29 using dummy_hcd [ 164.875437][ T8051] ceph: Path missing in source [ 165.126371][ T8061] /dev/rnullb0: Can't open blockdev [ 165.142492][ T8061] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 165.149037][ T8061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 165.175558][ T8061] vhci_hcd vhci_hcd.0: Device attached [ 165.347446][ T5942] vhci_hcd: vhci_device speed not set [ 165.356704][ T8072] comedi comedi3: dt2817: I/O port conflict (0x4f27,5) [ 165.405700][ T8077] /dev/rnullb0: Can't open blockdev [ 165.417628][ T5942] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 165.773579][ T8086] 9p: Unknown parameter 'w&dno' [ 165.868351][ T5925] usb 3-1: USB disconnect, device number 29 [ 166.047492][ T9] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 166.058150][ T5904] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 166.198870][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 166.207553][ T5904] usb 4-1: Invalid ep0 maxpacket: 16 [ 166.210709][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 166.227053][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 166.236325][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.245533][ T9] usb 5-1: config 0 descriptor?? [ 166.357589][ T5904] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 166.424731][ T8101] netlink: 88 bytes leftover after parsing attributes in process `syz.1.542'. [ 166.434209][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.1.542'. [ 166.444273][ T8101] FAT-fs (rnullb0): bogus number of FAT structure [ 166.453205][ T8101] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 166.455956][ T8086] /dev/rnullb0: Can't open blockdev [ 166.470256][ T9] ath6kl: Failed to submit usb control message: -71 [ 166.477072][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 166.484571][ T9] ath6kl: Unable to send get target info: -71 [ 166.491448][ T9] ath6kl: Failed to init ath6kl core: -71 [ 166.498908][ T9] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 166.516168][ T9] usb 5-1: USB disconnect, device number 20 [ 166.519345][ T5904] usb 4-1: Invalid ep0 maxpacket: 16 [ 166.530815][ T5904] usb usb4-port1: attempt power cycle [ 166.655897][ T8121] Can't find a SQUASHFS superblock on rnullb0 [ 166.877810][ T5904] usb 4-1: new low-speed USB device number 34 using dummy_hcd [ 166.902495][ T5904] usb 4-1: Invalid ep0 maxpacket: 16 [ 166.979923][ T43] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 167.047750][ T5904] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 167.088675][ T5904] usb 4-1: Invalid ep0 maxpacket: 16 [ 167.094640][ T5904] usb usb4-port1: unable to enumerate USB device [ 167.114858][ T8139] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 167.124874][ T8139] netlink: 'syz.4.551': attribute type 29 has an invalid length. [ 167.142581][ T43] usb 3-1: device descriptor read/64, error -71 [ 167.387798][ T43] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 167.540012][ T43] usb 3-1: device descriptor read/64, error -71 [ 167.658303][ T43] usb usb3-port1: attempt power cycle [ 167.953898][ T8146] 9p: Unknown parameter 'mmap' [ 168.007508][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 168.029637][ T43] usb 3-1: device descriptor read/8, error -71 [ 168.065045][ T8148] sd 0:0:1:0: PR command failed: 1026 [ 168.070677][ T8148] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 168.079228][ T8148] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 168.118970][ T8159] hpfs: Bad magic ... probably not HPFS [ 168.139293][ T8148] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 168.146449][ T8148] VFS: Can't find a romfs filesystem on dev nullb0. [ 168.146449][ T8148] [ 168.203883][ T8171] usb usb8: usbfs: process 8171 (syz.4.559) did not claim interface 0 before use [ 168.267615][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 168.299936][ T43] usb 3-1: device descriptor read/8, error -71 [ 168.314648][ T8175] /dev/rnullb0: Can't open blockdev [ 168.417797][ T43] usb usb3-port1: unable to enumerate USB device [ 169.729173][ T8209] BFS-fs: bfs_fill_super(): No BFS filesystem on rnullb0 (magic=00000000) [ 169.899425][ T8223] /dev/rnullb0: Can't open blockdev [ 170.327445][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 170.520019][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 170.543738][ T9] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 170.574995][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 170.615761][ T9] usb 5-1: config 220 has no interface number 2 [ 170.637173][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 170.669184][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 170.676153][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 170.706588][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 170.725935][ T8245] netlink: 'syz.2.584': attribute type 10 has an invalid length. [ 170.741307][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.761271][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.780263][ T8245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.791722][ T9] usb 5-1: Product: syz [ 170.804384][ T8245] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 170.814250][ T9] usb 5-1: Manufacturer: syz [ 170.825656][ T9] usb 5-1: SerialNumber: syz [ 170.976345][ T8257] /dev/rnullb0: Can't open blockdev [ 171.098614][ T8233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.108484][ T8233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.175585][ T8262] /dev/rnullb0: Can't open blockdev [ 171.749173][ T9] uvcvideo 5-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 171.767868][ T9] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 171.784819][ T9] usb 5-1: No valid video chain found. [ 171.793147][ T9] usb 5-1: selecting invalid altsetting 0 [ 171.812931][ T9] usb 5-1: selecting invalid altsetting 0 [ 171.834442][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 171.863921][ T9] usb 5-1: USB disconnect, device number 21 [ 171.879238][ T8283] tmpfs: Bad value for 'mpol' [ 171.901743][ T8283] /dev/rnullb0: Can't open blockdev [ 173.101699][ T8359] PM: Enabling pm_trace changes system date and time during resume. [ 173.101699][ T8359] PM: Correct system time has to be restored manually after resume. [ 173.209191][ T5904] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 173.223670][ T8386] /dev/rnullb0: Can't open blockdev [ 173.362041][ T5904] usb 5-1: device descriptor read/64, error -71 [ 173.507761][ T5925] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 173.607462][ T5904] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 173.679576][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.690782][ T5925] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.703425][ T8413] /dev/rnullb0: Can't open blockdev [ 173.712863][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.723985][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.733400][ T5925] usb 4-1: Product: syz [ 173.741844][ T5925] usb 4-1: Manufacturer: syz [ 173.746698][ T5925] usb 4-1: SerialNumber: syz [ 173.751434][ T5904] usb 5-1: device descriptor read/64, error -71 [ 173.867776][ T5904] usb usb5-port1: attempt power cycle [ 173.971016][ T5925] usb 4-1: USB disconnect, device number 36 [ 174.207426][ T5904] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 174.228611][ T5904] usb 5-1: device descriptor read/8, error -71 [ 174.477524][ T5904] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 174.501788][ T8421] /dev/rnullb0: Can't open blockdev [ 174.508128][ T5904] usb 5-1: device descriptor read/8, error -71 [ 174.587509][ T5925] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 174.618040][ T5904] usb usb5-port1: unable to enumerate USB device [ 174.747515][ T43] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 174.758861][ T5925] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.771015][ T5925] usb 2-1: New USB device found, idVendor=046d, idProduct=c216, bcdDevice= 0.00 [ 174.780492][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.792186][ T5925] usb 2-1: config 0 descriptor?? [ 174.899111][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.912853][ T43] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 174.922661][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.932174][ T43] usb 4-1: Product: syz [ 174.936591][ T43] usb 4-1: Manufacturer: syz [ 174.941617][ T43] usb 4-1: SerialNumber: syz [ 174.953506][ T43] usb 4-1: config 0 descriptor?? [ 174.964862][ T43] yurex 4-1:0.0: Could not find endpoints [ 175.180554][ T43] usb 4-1: USB disconnect, device number 37 [ 175.211671][ T5925] logitech 0003:046D:C216.0006: unexpected long global item [ 175.224138][ T5925] logitech 0003:046D:C216.0006: parse failed [ 175.232580][ T5925] logitech 0003:046D:C216.0006: probe with driver logitech failed with error -22 [ 175.404943][ T43] IPVS: starting estimator thread 0... [ 175.416081][ T8419] /dev/rnullb0: Can't open blockdev [ 175.423930][ T43] usb 2-1: USB disconnect, device number 22 [ 175.441136][ T8434] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 175.448436][ T8434] /dev/rnullb0: Can't open blockdev [ 175.499660][ T8430] IPVS: using max 43 ests per chain, 103200 per kthread [ 175.623924][ T8436] mmap: syz.4.611 (8436) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 176.010617][ T8449] program syz.1.615 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 176.357777][ T10] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 176.407728][ T8477] fuse: Bad value for 'group_id' [ 176.412808][ T8477] fuse: Bad value for 'group_id' [ 176.537484][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 176.543784][ T8487] /dev/rnullb0: Can't open blockdev [ 176.549551][ T8487] /dev/rnullb0: Can't open blockdev [ 176.556221][ T10] usb 4-1: config 4 has an invalid interface number: 8 but max is 0 [ 176.564769][ T10] usb 4-1: config 4 has no interface number 0 [ 176.571218][ T10] usb 4-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 176.581218][ T8487] /dev/rnullb0: Can't open blockdev [ 176.587273][ T8487] /dev/rnullb0: Can't open blockdev [ 176.593410][ T10] usb 4-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 176.604509][ T8487] /dev/rnullb0: Can't open blockdev [ 176.610500][ T8487] /dev/rnullb0: Can't open blockdev [ 176.615785][ T10] usb 4-1: config 4 interface 8 has no altsetting 0 [ 176.627698][ T10] usb 4-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 176.644674][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.665861][ T10] usb 4-1: Product: syz [ 176.670418][ T10] usb 4-1: Manufacturer: syz [ 176.675062][ T10] usb 4-1: SerialNumber: syz [ 176.805983][ T8502] /dev/rnullb0: Can't open blockdev [ 176.844966][ T8504] /dev/sg0: Can't lookup blockdev [ 176.893370][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.631'. [ 176.934703][ T8508] /dev/rnullb0: Can't open blockdev [ 177.018971][ T8509] /dev/rnullb0: Can't open blockdev [ 177.027490][ T1209] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 177.133109][ T10] opticon 4-1:4.8: opticon converter detected [ 177.152414][ T10] usb 4-1: opticon converter now attached to ttyUSB0 [ 177.169098][ T10] usb 4-1: USB disconnect, device number 38 [ 177.189110][ T10] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 177.207582][ T43] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 177.211841][ T1209] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.230497][ T10] opticon 4-1:4.8: device disconnected [ 177.236730][ T1209] usb 5-1: config 0 has no interfaces? [ 177.247012][ T1209] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 177.256397][ T1209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.270628][ T1209] usb 5-1: config 0 descriptor?? [ 177.273866][ T8512] pim6reg: entered allmulticast mode [ 177.380776][ T43] usb 2-1: config 252 has an invalid interface number: 73 but max is 0 [ 177.396728][ T43] usb 2-1: config 252 has no interface number 0 [ 177.403941][ T43] usb 2-1: config 252 interface 73 altsetting 122 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 177.421254][ T43] usb 2-1: config 252 interface 73 has no altsetting 0 [ 177.423015][ T8517] netlink: 56 bytes leftover after parsing attributes in process `syz.3.635'. [ 177.446702][ T43] usb 2-1: New USB device found, idVendor=110a, idProduct=1150, bcdDevice=b8.e5 [ 177.464446][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.472782][ T43] usb 2-1: Product: syz [ 177.477044][ T43] usb 2-1: Manufacturer: syz [ 177.483148][ T43] usb 2-1: SerialNumber: syz [ 177.488807][ T10] usb 5-1: USB disconnect, device number 26 [ 177.589410][ T8520] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3906889171 (3906889171 ns) > initial count (484125224 ns). Using initial count to start timer. [ 177.703683][ T43] ti_usb_3410_5052 2-1:252.73: TI USB 3410 1 port adapter converter detected [ 177.733961][ T43] ti_usb_3410_5052 2-1:252.73: missing endpoints [ 177.745426][ T43] usb 2-1: USB disconnect, device number 23 [ 177.766419][ T30] audit: type=1326 audit(1756677888.238:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8532 comm="syz.2.639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f59c178ebe9 code=0x0 [ 177.981703][ T43] kernel write not supported for file /snd/seq (pid: 43 comm: kworker/1:1) [ 178.417473][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 178.547465][ T43] usb 5-1: device descriptor read/64, error -71 [ 178.698310][ T8559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.787722][ T43] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 178.930343][ T43] usb 5-1: device descriptor read/64, error -71 [ 178.940861][ T8578] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.953130][ T8578] hpfs: hpfs_map_sector(): read error [ 179.047796][ T43] usb usb5-port1: attempt power cycle [ 179.317502][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 179.347429][ T1209] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 179.417447][ T43] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 179.437947][ T43] usb 5-1: device descriptor read/8, error -71 [ 179.469383][ T8599] /dev/rnullb0: Can't open blockdev [ 179.478146][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 179.485117][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.495999][ T10] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 179.504965][ T10] usb 2-1: config 8 has no interface number 0 [ 179.512398][ T1209] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 179.514101][ T8601] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 179.520913][ T1209] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 179.520935][ T1209] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 179.520952][ T1209] usb 4-1: config 220 has no interface number 2 [ 179.521002][ T1209] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 179.521025][ T1209] usb 4-1: config 220 interface 0 has no altsetting 0 [ 179.521042][ T1209] usb 4-1: config 220 interface 76 has no altsetting 0 [ 179.521056][ T1209] usb 4-1: config 220 interface 1 has no altsetting 0 [ 179.532078][ T8601] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 179.538900][ T10] usb 2-1: config 8 interface 255 has no altsetting 0 [ 179.609238][ T1209] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 179.618338][ T1209] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.626468][ T1209] usb 4-1: Product: syz [ 179.630884][ T1209] usb 4-1: Manufacturer: syz [ 179.635633][ T1209] usb 4-1: SerialNumber: syz [ 179.640509][ T10] usb 2-1: string descriptor 0 read error: -22 [ 179.646748][ T10] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 179.661218][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.698100][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 179.865233][ T8592] netlink: 'syz.3.657': attribute type 4 has an invalid length. [ 179.874828][ T8592] netlink: 'syz.3.657': attribute type 27 has an invalid length. [ 179.887484][ T8589] /dev/rnullb0: Can't open blockdev [ 179.893328][ T8592] netlink: 3609 bytes leftover after parsing attributes in process `syz.3.657'. [ 179.909108][ T10] catc 2-1:8.255: Can't set altsetting 1. [ 179.920427][ T10] catc 2-1:8.255: probe with driver catc failed with error -5 [ 179.946754][ T10] usb 2-1: USB disconnect, device number 24 [ 180.043374][ T1209] usb 4-1: selecting invalid altsetting 0 [ 180.050613][ T1209] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 180.057033][ T1209] usb 4-1: No valid video chain found. [ 180.069317][ T1209] usb 4-1: selecting invalid altsetting 0 [ 180.075266][ T1209] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 180.091404][ T1209] usb 4-1: USB disconnect, device number 39 [ 180.497986][ T43] usb 5-1: device descriptor read/8, error -71 [ 180.538336][ T8611] /dev/rnullb0: Can't open blockdev [ 180.614022][ T43] usb usb5-port1: unable to enumerate USB device [ 180.656462][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 180.811310][ T8632] fuseblk: Bad value for 'fd' [ 180.851758][ T8637] netlink: 'syz.2.669': attribute type 4 has an invalid length. [ 180.865086][ T8637] netlink: 16 bytes leftover after parsing attributes in process `syz.2.669'. [ 180.902089][ T8641] /dev/rnullb0: Can't open blockdev [ 181.588100][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 181.647427][ T1209] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 181.737490][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 181.748619][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 181.763745][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 181.782297][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.798756][ T1209] usb 2-1: Using ep0 maxpacket: 16 [ 181.807138][ T10] usb 5-1: Product: syz [ 181.815276][ T1209] usb 2-1: config 252 has an invalid interface number: 165 but max is 0 [ 181.828594][ T10] usb 5-1: Manufacturer: syz [ 181.840343][ T1209] usb 2-1: config 252 has no interface number 0 [ 181.846827][ T10] usb 5-1: SerialNumber: syz [ 181.859550][ T10] usb 5-1: config 0 descriptor?? [ 181.868042][ T1209] usb 2-1: New USB device found, idVendor=0b48, idProduct=300d, bcdDevice=d4.cd [ 181.889620][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 181.902688][ T1209] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.933607][ T1209] dvb-usb: found a 'Technotrend TT-connect CT-3650' in cold state, will try to load a firmware [ 181.960298][ T1209] dvb-usb: did not find the firmware file '(null)' (status -22). You can use /scripts/get_dvb_firmware to get the firmware [ 182.099912][ T10] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 182.108945][ T10] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 182.125250][ T10] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 182.308721][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.325431][ T8674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.346692][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.367284][ T8674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.481753][ T8676] /dev/sg0: Can't lookup blockdev [ 182.559215][ T8677] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'. [ 182.574183][ T8676] netlink: 60 bytes leftover after parsing attributes in process `syz.2.682'. [ 182.978445][ T8681] loop8: detected capacity change from 0 to 8 [ 183.027843][ T7080] Dev loop8: unable to read RDB block 8 [ 183.033455][ T7080] loop8: unable to read partition table [ 183.040903][ T7080] loop8: partition table beyond EOD, truncated [ 183.050192][ T8681] Dev loop8: unable to read RDB block 8 [ 183.082218][ T8681] loop8: unable to read partition table [ 183.087544][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 183.089880][ T8681] loop8: partition table beyond EOD, truncated [ 183.101749][ T8681] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 183.337433][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 183.351276][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 183.365857][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 183.385882][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.398418][ T8685] /dev/rnullb0: Can't open blockdev [ 183.464207][ T10] usb 3-1: config 0 descriptor?? [ 183.701582][ T10] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 183.955283][ T5904] usb 3-1: USB disconnect, device number 34 [ 183.955330][ C1] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 184.446838][ T10] usb 5-1: USB disconnect, device number 31 [ 184.464336][ T43] usb 2-1: USB disconnect, device number 25 [ 184.707415][ T5904] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 184.770657][ T8705] /dev/rnullb0: Can't open blockdev [ 184.783674][ T8705] netlink: 84 bytes leftover after parsing attributes in process `syz.4.693'. [ 184.908132][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 184.920361][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 73, setting to 64 [ 184.943510][ T5904] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.952673][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.969096][ T5904] usb 3-1: config 0 descriptor?? [ 184.974649][ T8679] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 185.047455][ T43] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 185.189732][ T5904] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 185.207499][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 185.220179][ T43] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 185.228816][ T43] usb 5-1: config 0 has no interface number 0 [ 185.234981][ T43] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 185.269355][ T43] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 185.278894][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.286913][ T43] usb 5-1: Product: syz [ 185.297651][ T43] usb 5-1: Manufacturer: syz [ 185.302746][ T43] usb 5-1: SerialNumber: syz [ 185.313434][ T43] usb 5-1: config 0 descriptor?? [ 185.527537][ T43] usbtouchscreen 5-1:0.214: Failed to read FW rev: 0 [ 185.534415][ T43] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -5 [ 187.016798][ T43] usb 3-1: USB disconnect, device number 35 [ 187.094686][ T8721] /dev/rnullb0: Can't open blockdev [ 187.443830][ T8727] fuse: Unknown parameter '}i˜Œmode' [ 187.459423][ T8727] vlan1: entered promiscuous mode [ 187.464633][ T8727] vlan1: entered allmulticast mode [ 187.470111][ T8727] veth0_vlan: entered allmulticast mode [ 187.477544][ T8727] netlink: 'syz.2.699': attribute type 21 has an invalid length. [ 187.485373][ T8727] IPv6: NLM_F_CREATE should be specified when creating new route [ 187.496818][ T8727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 187.504088][ T8727] IPv6: NLM_F_CREATE should be set when creating new route [ 187.511375][ T8727] IPv6: NLM_F_CREATE should be set when creating new route [ 187.518626][ T8727] IPv6: NLM_F_CREATE should be set when creating new route [ 187.714456][ T51] Bluetooth: hci0: Unable to find connection for big 0x00 [ 187.719223][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.692'. [ 187.732448][ T8706] netlink: 80 bytes leftover after parsing attributes in process `syz.1.692'. [ 187.762585][ T8740] /dev/rnullb0: Can't open blockdev [ 187.785017][ T10] usb 5-1: USB disconnect, device number 32 [ 187.876658][ T8742] binder: 8741:8742 ioctl c0306201 2000000001c0 returned -22 [ 187.888090][ T5925] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 187.941751][ T8746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.705'. [ 188.037560][ T5925] usb 3-1: Using ep0 maxpacket: 16 [ 188.050644][ T5925] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.061707][ T5925] usb 3-1: config 1 has an invalid interface number: 111 but max is 0 [ 188.077485][ T5925] usb 3-1: config 1 has no interface number 0 [ 188.093911][ T5925] usb 3-1: config 1 interface 111 has no altsetting 0 [ 188.105773][ T5925] usb 3-1: New USB device found, idVendor=045e, idProduct=0c5e, bcdDevice= 2.95 [ 188.115160][ T43] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 188.125255][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.143770][ T5925] usb 3-1: Product: syz [ 188.153886][ T5925] usb 3-1: Manufacturer: syz [ 188.174113][ T5925] usb 3-1: SerialNumber: syz [ 188.192264][ T5925] r8152-cfgselector 3-1: Unknown version 0x0000 [ 188.254090][ T8748] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 188.281115][ T43] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 188.290530][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.307550][ T43] usb 4-1: Product: syz [ 188.311837][ T43] usb 4-1: Manufacturer: syz [ 188.316438][ T43] usb 4-1: SerialNumber: syz [ 188.334044][ T43] usb 4-1: config 0 descriptor?? [ 188.346809][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 188.353620][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 188.377843][ T43] f81232 4-1:0.0: f81534a converter detected [ 188.554092][ T8745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.575395][ T8745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.720027][ T8761] netlink: 'syz.2.702': attribute type 3 has an invalid length. [ 189.534997][ T43] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 189.552844][ T43] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 189.608209][ T43] usb 4-1: USB disconnect, device number 40 [ 189.622168][ T43] f81232 4-1:0.0: device disconnected [ 190.506638][ T8784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.714'. [ 190.678243][ T5904] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 190.702609][ T8788] /dev/rnullb0: Can't open blockdev [ 190.817528][ T5904] usb 5-1: device descriptor read/64, error -71 [ 190.967552][ T43] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 191.067574][ T5904] usb 5-1: new low-speed USB device number 34 using dummy_hcd [ 191.117478][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 191.131181][ T43] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 191.141434][ T43] usb 4-1: config 2 has no interface number 0 [ 191.149040][ T43] usb 4-1: config 2 interface 31 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 191.160274][ T43] usb 4-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 191.172737][ T43] usb 4-1: config 2 interface 31 has no altsetting 0 [ 191.182036][ T43] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 191.192638][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.200794][ T5904] usb 5-1: device descriptor read/64, error -71 [ 191.212191][ T43] usb 4-1: Product: syz [ 191.218794][ T43] usb 4-1: Manufacturer: syz [ 191.224050][ T43] usb 4-1: SerialNumber: syz [ 191.234411][ T8790] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 191.243581][ T8790] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 191.287514][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 191.294287][ T10] usb 2-1: config 0 has no interfaces? [ 191.300308][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 191.309613][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.327820][ T5904] usb usb5-port1: attempt power cycle [ 191.328079][ T10] usb 2-1: config 0 descriptor?? [ 191.418756][ T5925] r8152 3-1:1.111: Expected endpoints are not found [ 191.430958][ T5925] r8152-cfgselector 3-1: USB disconnect, device number 36 [ 191.453853][ T8790] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 191.461819][ T8790] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 191.600996][ T10] usb 2-1: USB disconnect, device number 26 [ 191.668307][ T5904] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 191.688849][ T5904] usb 5-1: device descriptor read/8, error -71 [ 191.700817][ T43] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 191.719442][ T43] usb 4-1: USB disconnect, device number 41 [ 191.927542][ T5904] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 191.948017][ T5904] usb 5-1: device descriptor read/8, error -71 [ 192.058491][ T5904] usb usb5-port1: unable to enumerate USB device [ 192.488539][ T8823] xt_l2tp: unknown flags: 51 [ 192.500176][ T8823] fuse: Bad value for 'fd' [ 192.516927][ T30] audit: type=1800 audit(1756677902.988:93): pid=8823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.724" name="file1" dev="tmpfs" ino=919 res=0 errno=0 [ 192.767547][ T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 192.920466][ T43] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 192.929705][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.937823][ T43] usb 4-1: Product: syz [ 192.941982][ T43] usb 4-1: Manufacturer: syz [ 192.946550][ T43] usb 4-1: SerialNumber: syz [ 192.952725][ T43] usb 4-1: config 0 descriptor?? [ 193.166997][ T10] usb 4-1: USB disconnect, device number 42 [ 193.228737][ T8836] /dev/rnullb0: Can't open blockdev [ 193.275466][ T8842] wlan1 speed is unknown, defaulting to 1000 [ 193.282669][ T8842] wlan1 speed is unknown, defaulting to 1000 [ 193.290553][ T8842] wlan1 speed is unknown, defaulting to 1000 [ 193.329680][ T8843] /dev/rnullb0: Can't open blockdev [ 193.351744][ T8842] infiniband syz0: set active [ 193.356459][ T10] wlan1 speed is unknown, defaulting to 1000 [ 193.362241][ T8842] infiniband syz0: added wlan1 [ 193.384631][ T8842] RDS/IB: syz0: added [ 193.389877][ T8842] smc: adding ib device syz0 with port count 1 [ 193.398724][ T8842] smc: ib device syz0 port 1 has pnetid [ 193.404868][ T10] wlan1 speed is unknown, defaulting to 1000 [ 193.421326][ T8842] wlan1 speed is unknown, defaulting to 1000 [ 193.528807][ T8842] wlan1 speed is unknown, defaulting to 1000 [ 193.629457][ T8842] wlan1 speed is unknown, defaulting to 1000 [ 193.730748][ T8842] wlan1 speed is unknown, defaulting to 1000 [ 193.816305][ T8851] /dev/rnullb0: Can't open blockdev [ 193.844104][ T8850] tipc: Started in network mode [ 193.849145][ T8850] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 193.859984][ T8850] tipc: Enabled bearer , priority 10 [ 193.895199][ T8847] /dev/rnullb0: Can't open blockdev [ 193.925101][ T8855] netlink: 'syz.2.738': attribute type 12 has an invalid length. [ 193.942838][ T8855] netlink: 132 bytes leftover after parsing attributes in process `syz.2.738'. [ 193.953356][ T8855] /dev/rnullb0: Can't open blockdev [ 194.037425][ T43] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 194.101265][ T8864] trusted_key: syz.2.739 sent an empty control message without MSG_MORE. [ 194.197427][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 194.197506][ T30] audit: type=1326 audit(1756677904.668:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8866 comm="syz.4.742" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6ffe58ebe9 code=0x0 [ 194.209044][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 194.265398][ T43] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 194.286335][ T43] usb 4-1: config 0 has no interface number 0 [ 194.315572][ T43] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 194.333014][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.339467][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.356002][ T43] usb 4-1: config 0 interface 88 has no altsetting 0 [ 194.371685][ T43] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.26 [ 194.388459][ T43] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 194.413242][ T43] usb 4-1: Product: syz [ 194.428533][ T43] usb 4-1: Manufacturer: syz [ 194.437084][ T43] usb 4-1: SerialNumber: syz [ 194.452373][ T43] usb 4-1: config 0 descriptor?? [ 194.601865][ T8889] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 194.692531][ T43] usb 4-1: USB disconnect, device number 43 [ 194.880744][ T8859] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 194.897837][ T8859] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 194.916305][ T8859] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.924465][ T8859] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 194.941734][ T8859] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.958715][ T8859] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 194.977429][ T1209] tipc: Node number set to 4269801488 [ 195.045266][ T43] wlan1 speed is unknown, defaulting to 1000 [ 195.095877][ T43] syz0: Port: 1 Link DOWN [ 195.126920][ T8859] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 195.153289][ T5904] wlan1 speed is unknown, defaulting to 1000 [ 195.159599][ T8859] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 195.169058][ T43] wlan1 speed is unknown, defaulting to 1000 [ 195.175514][ T43] sy~0: Port: 1 Link DOWN [ 195.218180][ T5925] wlan1 speed is unknown, defaulting to 1000 [ 195.344600][ T8912] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 195.351182][ T8912] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 195.388529][ T8912] vhci_hcd vhci_hcd.0: Device attached [ 195.485905][ T8914] vhci_hcd: connection closed [ 195.546797][ T1310] vhci_hcd: stop threads [ 195.557101][ T1310] vhci_hcd: release socket [ 195.567545][ T5925] vhci_hcd: vhci_device speed not set [ 195.588508][ T1310] vhci_hcd: disconnect device [ 195.603806][ T8920] /dev/rnullb0: Can't open blockdev [ 195.627512][ T5925] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 195.643225][ T5925] usb 39-1: enqueue for inactive port 0 [ 195.727482][ T5925] vhci_hcd: vhci_device speed not set [ 195.995581][ T8941] netlink: 'syz.1.751': attribute type 11 has an invalid length. [ 196.017597][ T8941] netlink: 244 bytes leftover after parsing attributes in process `syz.1.751'. [ 196.060237][ T8944] /dev/rnullb0: Can't open blockdev [ 196.320976][ T8951] sp0: Synchronizing with TNC [ 196.382224][ T8951] /dev/rnullb0: Can't open blockdev [ 196.587612][ T5943] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 196.690667][ T8978] netlink: 'syz.4.758': attribute type 4 has an invalid length. [ 196.702653][ T8978] netlink: 17 bytes leftover after parsing attributes in process `syz.4.758'. [ 196.742079][ T8980] /dev/rnullb0: Can't open blockdev [ 196.753134][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.774494][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.809239][ T5943] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 196.821869][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.883419][ T5943] usb 4-1: config 0 descriptor?? [ 197.165016][ T5943] usb 4-1: string descriptor 0 read error: -71 [ 197.185522][ T5943] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 197.230567][ T5220] bcm5974 4-1:0.0: could not read from device [ 197.255957][ T5943] usb 4-1: USB disconnect, device number 44 [ 197.268940][ T5220] bcm5974 4-1:0.0: could not read from device [ 197.320166][ T7106] bcm5974 4-1:0.0: could not read from device [ 197.341494][ T5220] bcm5974 4-1:0.0: could not read from device [ 197.439759][ T9008] /dev/rnullb0: Can't open blockdev [ 197.727635][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 197.765785][ T5925] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 197.898299][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 197.906138][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 197.919082][ T5925] usb 2-1: Using ep0 maxpacket: 16 [ 197.925596][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.927537][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.946095][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.963316][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.964323][ T5925] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.985241][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 197.996469][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.996492][ T5925] usb 2-1: Product: syz [ 197.996505][ T5925] usb 2-1: Manufacturer: syz [ 197.996517][ T5925] usb 2-1: SerialNumber: syz [ 198.018811][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 198.029966][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 198.039389][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.049016][ T10] usb 5-1: config 0 descriptor?? [ 198.055205][ T9011] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 198.232410][ T5925] usb 2-1: 0:2 : does not exist [ 198.247937][ T5925] usb 2-1: unit 9 not found! [ 198.277167][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -71 [ 198.277824][ T10] usb 5-1: USB disconnect, device number 37 [ 198.288466][ T5925] usb 2-1: USB disconnect, device number 27 [ 198.369037][ T7080] udevd[7080]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.416465][ T9057] /dev/rnullb0: Can't open blockdev [ 198.507487][ T5943] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 198.579814][ T9062] can0: slcan on ptm0. [ 198.607607][ T9061] can0 (unregistered): slcan off ptm0. [ 198.668974][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 198.679543][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.697666][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.711278][ T5943] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 198.724306][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.738160][ T5943] usb 4-1: config 0 descriptor?? [ 198.816183][ T9073] /dev/rnullb0: Can't open blockdev [ 199.148096][ T9049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.156915][ T9049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.167718][ T5904] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 199.185081][ T5943] kone 0003:1E7D:2CED.0007: collection stack underflow [ 199.207559][ T5943] kone 0003:1E7D:2CED.0007: item 0 1 0 12 parsing failed [ 199.215108][ T5943] kone 0003:1E7D:2CED.0007: parse failed [ 199.227505][ T5943] kone 0003:1E7D:2CED.0007: probe with driver kone failed with error -22 [ 199.330152][ T5904] usb 2-1: config 1 has an invalid interface number: 67 but max is 0 [ 199.347777][ T5904] usb 2-1: config 1 has no interface number 0 [ 199.355298][ T5904] usb 2-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=92.59 [ 199.375454][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.399991][ T5904] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240 [ 199.401989][ T9049] /dev/rnullb0: Can't open blockdev [ 199.421504][ T5943] usb 4-1: USB disconnect, device number 45 [ 199.917902][ T5904] gspca_sn9c20x: Write register 1000 failed -110 [ 199.929782][ T5904] gspca_sn9c20x: Device initialization failed [ 199.946323][ T5904] gspca_sn9c20x 2-1:1.67: probe with driver gspca_sn9c20x failed with error -110 [ 199.979305][ T5904] usb 2-1: USB disconnect, device number 28 [ 200.001436][ T9079] /dev/sg0: Can't lookup blockdev [ 200.150999][ T9086] /dev/rnullb0: Can't open blockdev [ 200.254139][ T9088] /dev/rnullb0: Can't open blockdev [ 200.332745][ T9092] netlink: 'syz.3.787': attribute type 2 has an invalid length. [ 200.363056][ T9092] netlink: 244 bytes leftover after parsing attributes in process `syz.3.787'. [ 200.378937][ T9092] /dev/rnullb0: Can't open blockdev [ 200.412828][ T9094] /dev/rnullb0: Can't open blockdev [ 200.454721][ T9096] syzkaller1: entered promiscuous mode [ 200.462035][ T9096] syzkaller1: entered allmulticast mode [ 200.617418][ T5943] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 200.779973][ T5943] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 200.801340][ T5943] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 200.820808][ T5943] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 200.838374][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.838709][ T9108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.792'. [ 200.870199][ T9091] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 200.873794][ T9108] IPVS: Error joining to the multicast group [ 200.885762][ T5943] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 201.178861][ C0] dummy_hcd dummy_hcd.2: timer fired with no URBs pending? [ 201.188428][ T5925] usb 3-1: USB disconnect, device number 37 [ 201.751074][ T30] audit: type=1804 audit(1756677912.228:95): pid=9117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.794" name=2F6E6577726F6F742F3231312F15 dev="tmpfs" ino=1163 res=1 errno=0 [ 201.772930][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.044254][ T9125] /dev/rnullb0: Can't open blockdev [ 202.265038][ T9129] /dev/rnullb0: Can't open blockdev [ 202.417960][ T5904] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 202.580787][ T5904] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 202.595950][ T5904] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 202.619429][ T5904] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 202.629663][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.850948][ T5904] usb 3-1: usb_control_msg returned -32 [ 202.856560][ T5904] usbtmc 3-1:16.0: can't read capabilities [ 203.274027][ T9156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.807'. [ 203.294051][ T9156] netlink: 'syz.4.807': attribute type 25 has an invalid length. [ 203.308092][ T9156] netlink: 'syz.4.807': attribute type 7 has an invalid length. [ 203.847452][ T5904] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 203.871201][ T9173] /dev/rnullb0: Can't open blockdev [ 203.997569][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 204.010498][ T5904] usb 5-1: config 4 has an invalid interface number: 28 but max is 0 [ 204.018871][ T5904] usb 5-1: config 4 has no interface number 0 [ 204.024968][ T5904] usb 5-1: config 4 interface 28 altsetting 9 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 204.036150][ T5904] usb 5-1: config 4 interface 28 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 32 [ 204.046341][ T5904] usb 5-1: config 4 interface 28 altsetting 9 endpoint 0xB has invalid maxpacket 96, setting to 64 [ 204.066225][ T5904] usb 5-1: config 4 interface 28 altsetting 9 has a duplicate endpoint with address 0xB, skipping [ 204.080898][ T5904] usb 5-1: config 4 interface 28 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 204.095763][ T5904] usb 5-1: config 4 interface 28 altsetting 9 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 204.113762][ T5904] usb 5-1: config 4 interface 28 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 204.125086][ T5904] usb 5-1: config 4 interface 28 altsetting 9 has a duplicate endpoint with address 0x5, skipping [ 204.136026][ T5904] usb 5-1: config 4 interface 28 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 204.146793][ T5904] usb 5-1: config 4 interface 28 altsetting 9 endpoint 0xC has an invalid bInterval 108, changing to 10 [ 204.158007][ T5904] usb 5-1: config 4 interface 28 altsetting 9 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 204.168854][ T5904] usb 5-1: config 4 interface 28 altsetting 9 has a duplicate endpoint with address 0xC, skipping [ 204.179505][ T5904] usb 5-1: config 4 interface 28 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 204.190454][ T5904] usb 5-1: config 4 interface 28 has no altsetting 0 [ 204.199972][ T5904] usb 5-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice= a.5b [ 204.209194][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.217245][ T5904] usb 5-1: Product: syz [ 204.223343][ T5904] usb 5-1: Manufacturer: syz [ 204.228752][ T5904] usb 5-1: SerialNumber: syz [ 204.235489][ T9170] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 204.246454][ T9170] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 204.550289][ T5904] iowarrior 5-1:4.28: no interrupt-in endpoint found [ 204.569564][ T5904] usb 5-1: USB disconnect, device number 38 [ 205.204984][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz.3.823'. [ 205.259235][ T9211] /dev/rnullb0: Can't open blockdev [ 205.394262][ T9214] netlink: 'syz.3.824': attribute type 6 has an invalid length. [ 205.467628][ T10] usb 3-1: USB disconnect, device number 38 [ 205.500866][ T9214] nfs4: Unknown parameter 'ýw' [ 206.060508][ T9224] loop7: detected capacity change from 0 to 7 [ 206.079121][ T9120] Dev loop7: unable to read RDB block 7 [ 206.088558][ T9120] loop7: AHDI p1 p2 [ 206.092488][ T9120] loop7: partition table partially beyond EOD, truncated [ 206.105673][ T9120] loop7: p1 start 1702000233 is beyond EOD, truncated [ 206.184392][ T9231] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 206.202355][ T9231] /dev/rnullb0: Can't open blockdev [ 206.727889][ T5904] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 206.880099][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.891859][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 206.903404][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 206.914868][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 206.928419][ T5904] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 206.937725][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.949089][ T5904] usb 3-1: config 0 descriptor?? [ 206.958452][ T9249] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 207.174466][ T5904] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.207007][ T5904] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.215533][ T9252] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 207.217975][ T5904] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.231428][ T5904] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.239055][ T5904] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 207.252127][ T5904] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 207.371273][ T5904] usb 3-1: USB disconnect, device number 39 [ 207.915364][ T9260] comedi comedi3: pcl818: I/O port conflict (0x4f27,16) [ 207.922667][ T9260] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 207.934587][ T9260] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 207.943024][ T9260] CPU: 1 UID: 0 PID: 9260 Comm: syz.2.834 Not tainted syzkaller #0 PREEMPT(full) [ 207.952232][ T9260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 207.962307][ T9260] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 207.967883][ T9260] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3 [ 207.987492][ T9260] RSP: 0018:ffffc900056c79d8 EFLAGS: 00010206 [ 207.993568][ T9260] RAX: 0000000000000005 RBX: ffff888141b71900 RCX: ffff88805ac98000 [ 208.001553][ T9260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802f49f800 [ 208.009525][ T9260] RBP: 0000000000000000 R08: ffff88802f49f92f R09: 1ffff11005e93f25 [ 208.017505][ T9260] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028 [ 208.025476][ T9260] R13: dffffc0000000000 R14: ffff88802f49f800 R15: dffffc0000000000 [ 208.033454][ T9260] FS: 00007f59c26c06c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 208.042386][ T9260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.048970][ T9260] CR2: 0000200000000040 CR3: 0000000058278000 CR4: 00000000003526f0 [ 208.056947][ T9260] DR0: 000000000000ff31 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.064922][ T9260] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 208.072896][ T9260] Call Trace: [ 208.076175][ T9260] [ 208.079105][ T9260] pcl818_detach+0x66/0xd0 [ 208.083550][ T9260] comedi_device_detach_locked+0x175/0x750 [ 208.089360][ T9260] comedi_device_attach+0x5d4/0x720 [ 208.094566][ T9260] comedi_unlocked_ioctl+0x5ff/0x1020 [ 208.099946][ T9260] ? rcu_is_watching+0x15/0xb0 [ 208.104707][ T9260] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 208.110516][ T9260] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 208.116166][ T9260] ? do_futex+0x395/0x420 [ 208.120511][ T9260] ? __se_sys_futex+0x36f/0x400 [ 208.125371][ T9260] ? __fget_files+0x3a0/0x420 [ 208.130047][ T9260] ? __fget_files+0x2a/0x420 [ 208.134638][ T9260] ? bpf_lsm_file_ioctl+0x9/0x20 [ 208.139577][ T9260] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 208.145386][ T9260] __se_sys_ioctl+0xf9/0x170 [ 208.149986][ T9260] do_syscall_64+0xfa/0xfa0 [ 208.154493][ T9260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.160562][ T9260] ? clear_bhb_loop+0x60/0xb0 [ 208.165234][ T9260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.171127][ T9260] RIP: 0033:0x7f59c178ebe9 [ 208.175550][ T9260] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.195155][ T9260] RSP: 002b:00007f59c26c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.203599][ T9260] RAX: ffffffffffffffda RBX: 00007f59c19c5fa0 RCX: 00007f59c178ebe9 [ 208.211578][ T9260] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000004 [ 208.219552][ T9260] RBP: 00007f59c1811e19 R08: 0000000000000000 R09: 0000000000000000 [ 208.227534][ T9260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.235508][ T9260] R13: 00007f59c19c6038 R14: 00007f59c19c5fa0 R15: 00007ffd9448ae68 [ 208.243498][ T9260] [ 208.246521][ T9260] Modules linked in: [ 208.251016][ T9260] ---[ end trace 0000000000000000 ]--- [ 208.269700][ T9260] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 208.291424][ T9260] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 d9 85 2b f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 b8 85 2b f9 4d 8b 24 24 48 83 c3 [ 208.320391][ T9262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.333635][ T9260] RSP: 0018:ffffc900056c79d8 EFLAGS: 00010206 [ 208.337716][ T9262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.341548][ T9260] RAX: 0000000000000005 RBX: ffff888141b71900 RCX: ffff88805ac98000 [ 208.357214][ T9260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88802f49f800 [ 208.366605][ T9260] RBP: 0000000000000000 R08: ffff88802f49f92f R09: 1ffff11005e93f25 [ 208.378593][ T9260] R10: dffffc0000000000 R11: ffffffff88f8cd30 R12: 0000000000000028 [ 208.386640][ T9260] R13: dffffc0000000000 R14: ffff88802f49f800 R15: dffffc0000000000 [ 208.395263][ T9260] FS: 00007f59c26c06c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 208.405338][ T9260] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 208.412727][ T9260] CR2: 000055ca269767d0 CR3: 0000000058278000 CR4: 00000000003526f0 [ 208.421799][ T9260] DR0: 000000000000ff31 DR1: 0000000000000000 DR2: 0000000000000000 [ 208.430332][ T9260] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 208.439232][ T9260] Kernel panic - not syncing: Fatal exception [ 208.445597][ T9260] Kernel Offset: disabled [ 208.449905][ T9260] Rebooting in 86400 seconds..