last executing test programs: 10.130123564s ago: executing program 0 (id=305): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000200)="a2", 0x1}], 0x1}}], 0x1, 0xc010) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000140)=@add_del={0x2, &(0x7f0000000100)='netdevsim0\x00'}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x165642, 0x0) write(r2, &(0x7f0000000400)="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", 0x1f000) 10.115938731s ago: executing program 0 (id=306): r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCL_SETSEL(r0, 0x5452, &(0x7f0000000100)) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x3d) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r1, 0x52fbf000) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x10, 0xc0, 0x1, [{{0x9, 0x4, 0x0, 0xaf, 0x1, 0x7, 0x1, 0x3, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x2, 0x7e}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x3a, &(0x7f0000001640)=ANY=[@ANYBLOB="050f3a000614100406a8eb50031002145103000a1003020000081030"]}) r5 = creat(&(0x7f0000000240)='./bus\x00', 0xc2) io_setup(0x7f, &(0x7f0000000100)=0x0) io_submit(r6, 0x1, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2, 0x0, r5, 0x0}]) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r4, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x800}}, './file0\x00'}) ioctl$KVM_SET_TSC_KHZ_cpu(r7, 0xaea2, 0x5) 7.055059751s ago: executing program 0 (id=336): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000280)='./file0/file0\x00', &(0x7f0000002100), 0x12014, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0x4, {0x0, 0x0, 0x2, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x4, 0x0, 0x4000, 0xd, 0x0, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4, 0x4, 0x2fc, 0x2000, 0x101, r3, r4, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x3, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, 0x0) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x6292}, {r1, 0x2211}, {0xffffffffffffffff, 0x2440}, {r6, 0x106}], 0x4, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r10, @ANYBLOB="080005000c0000072347616dddf9f90bdb49"], 0x24}, 0x1, 0x0, 0x0, 0x4004011}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r12, 0xc0405665, &(0x7f0000000100)={0x0, 0x1}) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r13 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r13, &(0x7f0000000000)=ANY=[@ANYBLOB="800357640423a80294"], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) 3.984977326s ago: executing program 0 (id=358): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000380)={0x34, &(0x7f0000000180)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f00000005c0)={0x40, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x1a, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x400480d}, 0x24004000) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) r2 = semget$private(0x0, 0x1, 0x92) semctl$SETALL(r2, 0x0, 0x11, &(0x7f00000001c0)=[0x7, 0x9, 0x5, 0xcc, 0x5, 0x2, 0x5, 0xbd5, 0x2]) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r3, 0xc01c64ad, &(0x7f00000000c0)={r7}) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x94010, &(0x7f0000000080)) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 3.638258569s ago: executing program 3 (id=363): r0 = socket$kcm(0x2, 0x3, 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x10, 0xe5, 0x89, 0x10, 0x5ac, 0x264, 0x286b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xe3, 0x2, 0x0, 0x3, 0x9b, 0x2}}]}}]}}, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@local, 0x1303}]}]}}}], 0x50}, 0x200040c4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) pipe2$9p(&(0x7f00000001c0), 0x84000) fanotify_init(0x4, 0x1) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x2, 0x7, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFACCT_FLAGS={0x8}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xd4) 2.3865026s ago: executing program 3 (id=373): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa0080, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000240)={'syz0\x00', {0x508, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x4, 0x3, 0x0, 0x7d, 0x80013, 0x5, 0x0, 0x6, 0x0, 0x0, 0x4000000, 0x2, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0x7, 0x681c1eb5, 0x11e, 0x0, 0x6, 0x0, 0xe9, 0x0, 0xffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x5de82a4e, 0x0, 0x0, 0x20000, 0x4, 0xfffffffe, 0x1, 0x0, 0x8000, 0x7, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff7, 0x0, 0xf685, 0x0, 0x1ab9, 0x4, 0x2, 0x100, 0xfffffffb, 0x1c15d73a, 0x2], [0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x61c2, 0x9, 0x0, 0x9, 0x2, 0xff, 0x2, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xffffff00, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0xffff, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0xc50, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x6, 0x40, 0x0, 0x21, 0x20000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0xfffffffd, 0xc, 0x0, 0x200, 0xcc0, 0x401, 0x6, 0x6, 0x0, 0x0, 0xffffff7f, 0xe, 0x921, 0x2f, 0xfffffffb, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x4, 0x0, 0x6574, 0x7, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0xffffffff, 0x5, 0x200, 0x1, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x3ff, 0x8, 0x4, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x194e, 0x0, 0xe793, 0x4ad, 0x0, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, 0x40, 0x8000010, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x5, 0xd, 0x0, 0x40000000, 0x0, 0x4, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0xa, 0xb]}, 0x45c) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x62) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) (async) mmap$usbmon(&(0x7f0000059000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r1, 0x80000000) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') (async) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000009c0)=ANY=[@ANYBLOB="44010000100001000000000800000000ac1e00010000000000000000000000000000000000000000000000000000000000000000000000000000200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}}, 0x0) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f30216000000001c00000000000002001b0008000000e9000000000000000300060000000000020000000000000000000000000000000200010000000000000003fcff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) (async) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x200) (async) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000000)={0x81, 0x0, 0x3}) (async) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000780)={0x2, 0x40000, @ioapic={0x8080000, 0x8, 0x0, 0xeffffdff, 0x0, [{0x2, 0x0, 0xfc, '\x00', 0xfb}, {0x3, 0x9, 0x8d, '\x00', 0x81}, {0xfc, 0x4, 0x4, '\x00', 0xb9}, {0x11, 0xb, 0x0, '\x00', 0x7d}, {0xfe, 0x9, 0x4}, {0x0, 0x0, 0xfe, '\x00', 0x2}, {0xfd, 0x0, 0x7, '\x00', 0x7f}, {0x0, 0xfa}, {0xdd, 0x8d, 0x40, '\x00', 0x4}, {0x39, 0x6, 0x1, '\x00', 0x1}, {0xe}, {0x5, 0x9, 0x0, '\x00', 0xff}, {0x0, 0x0, 0x2, '\x00', 0x5}, {0x2, 0x2, 0x6}, {0xc3, 0x0, 0x0, '\x00', 0x49}, {0x4, 0x21, 0x80, '\x00', 0x5}, {0x3, 0x1}, {0x0, 0x2, 0x5, '\x00', 0x12}, {0x48, 0x0, 0x9, '\x00', 0xdb}, {0x0, 0x80}, {0x0, 0x2, 0x0, '\x00', 0x37}, {0xfe, 0x8, 0x0, '\x00', 0x5}, {0x0, 0x4, 0x9}, {0x7f, 0xff, 0x6, '\x00', 0x7}]}}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x10800000001fb, 0xac4481) ioctl$KVM_CAP_DISABLE_QUIRKS(r6, 0x4068aea3, &(0x7f0000000180)={0x74, 0x0, 0x1}) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x3a) bind(r7, &(0x7f0000000000)=@hci={0xa, 0x2}, 0x80) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x80010, r6, 0x119f4000) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x1c) 2.33028381s ago: executing program 3 (id=375): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) getpeername(r0, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80) 2.221941082s ago: executing program 3 (id=378): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r0, 0xc040128b, &(0x7f00000000c0)={&(0x7f0000000000)="a90724e1b1cf34cea3b2bf3928a7704498ec839af44ec335b8b924b6fbc623", 0x51, &(0x7f0000000040)=""/123, 0x7b}) fadvise64(r0, 0xbc4, 0x201, 0x1) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0xffffffa8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 1.897794957s ago: executing program 0 (id=379): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f00000001c0)=0x7ff, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x3, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r3, 0x0, r2, 0x0, 0x406f413, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r2, 0x8004f50e, &(0x7f0000000000)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.721317246s ago: executing program 2 (id=380): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r1, 0x100, 0x7, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x304c5d07}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x732f69f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72a8118}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x264f2ed9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x74d2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4997d999}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb358}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xda1f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27f06b9d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3413264}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x599aa607}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27284580}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc44c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaeb7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72d89a13}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf997}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x37c8d8e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x36d98c31}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x48c57d80}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4c3325ae}]}]}]}, 0xc8}}, 0x40014) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1e}]}, 0x30}}, 0x40804) (async) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000003c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)=0x0) (async, rerun: 64) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000004c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r0, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x5c, r3, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008010}, 0x20000044) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000640)={0x1}, 0x1) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r2) (rerun: 32) sendmsg$BATADV_CMD_TP_METER_CANCEL(r11, &(0x7f0000000780)={&(0x7f0000000680), 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r12, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004}, 0x20000001) (async) r13 = openat$incfs(0xffffffffffffff9c, &(0x7f00000007c0)='.log\x00', 0x400, 0x144) setsockopt$TIPC_CONN_TIMEOUT(r13, 0x10f, 0x82, &(0x7f0000000800)=0x6a, 0x4) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r11) (async, rerun: 64) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r13, 0x84, 0x18, &(0x7f0000000880)={0x0, 0x6}, &(0x7f00000008c0)=0x8) (rerun: 64) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r13, 0x84, 0x73, &(0x7f0000000900)={r14, 0x3, 0x30, 0x3dbd, 0x9}, &(0x7f0000000940)=0x18) getsockopt$inet6_int(r13, 0x29, 0x7, &(0x7f0000000980), &(0x7f00000009c0)=0x4) (async, rerun: 64) r15 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r16 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), r11) sendmsg$ETHTOOL_MSG_WOL_GET(r15, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, r16, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) r17 = syz_pidfd_open(0xffffffffffffffff, 0x0) pidfd_getfd(r13, r17, 0x0) 1.665474174s ago: executing program 2 (id=381): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) read$FUSE(0xffffffffffffffff, &(0x7f0000001180)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000180)={0x8, 0x4, {r3}, {r4}, 0x3, 0x5}) sendfile(r1, r0, 0x0, 0x7ffff000) 1.494157983s ago: executing program 2 (id=384): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0xfffffffffffffe1a, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f00000000c0)=0x88e, 0x4) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000080)=0x2, 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x1) write$snddsp(r2, 0x0, 0xfd78) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40004) 1.447493669s ago: executing program 1 (id=385): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x202101, 0x0) ioctl$FBIOGET_FSCREENINFO(r0, 0x4602, &(0x7f0000000040)) write$fb(0xffffffffffffffff, &(0x7f00000000c0)="a6539d3793cb223b2b163a3ca9d85cc9407bfa0dd7538570eb5c19e1e1707cfb75e4e6875669ab24411fdab6c8cc29971e1978828053fdfca2459257c1b00adecfb88376b98367abb5d342e007c77b84931762ddc9d7842238e4697481f7a069d78dd3bf5557fd9270e551c9d825e25fe33cfd49dabe7728aab50198bc27be38b3458c33eaa09eecd95fdb7519a18b8484b4ea755c8ce12d81ac58c2d61c4f2f97f0fca4fa6f7551682dd0c08dff168777af5eb9e22573f177f3e5e9ad878e2d435b608157cee965b912da54e1dc1bf3031eba3c0144c2436f303ba42733302dff9682327e", 0xe5) r1 = socket$inet6(0xa, 0x80000, 0x6) r2 = fspick(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) ioctl$RTC_RD_TIME(0xffffffffffffffff, 0x80247009, &(0x7f0000000200)) preadv(r2, &(0x7f0000001380)=[{&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x3, 0x83f5, 0xa) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000013c0), 0x80000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r3, 0x3302) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x28, 0xc, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x8004) r4 = syz_open_dev$loop(&(0x7f0000001680), 0x5, 0x0) r5 = gettid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000016c0)={{0x1, 0x1, 0x18, r3, {0x0}}, './file0\x00'}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) r9 = socket(0x2c, 0x4, 0x2) r10 = syz_open_dev$vcsn(&(0x7f0000001780), 0x50, 0x400000) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000017c0)={0x0}, &(0x7f0000001800)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001840)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) lstat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = socket$caif_stream(0x25, 0x1, 0x4) r16 = syz_open_dev$loop(&(0x7f0000001c80), 0x9, 0x40) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002280)=[{{&(0x7f0000001500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000001580)="5986f8401b318ccc5ff53fe88c1e33a02deb72c2de9e02641725ad3d691d96ce53bfd246a4ca98fab04dd0566a7db72d9065c2329f34c47fc546660b20dbf36694b8bf1a91522358d7b96ed8c8ccde43573d31e45377fa3a022baad7dad43afd263326383cda8797130d461f897b266afbb9621b2ed82e01dcafafa472541e717d9ae70f473ef4026a77d072efbce3e394e4", 0x92}], 0x1, &(0x7f0000001940)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x2c, 0x1, 0x1, [r4, r3, r1, r0, r0, r1, r2]}}, @cred={{0x1c, 0x1, 0x2, {r5, r7, r8}}}, @rights={{0x38, 0x1, 0x1, [r1, r0, r2, r3, r2, r9, r10, r0, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r11, r13, r14}}}], 0xc0, 0x4094}}, {{&(0x7f0000001a00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c40)=[{&(0x7f0000001a80)="b36e71252f690e53a56e55c09d2ee93a01691341f7f2786f25cfa596c727217ecf9826", 0x23}, {&(0x7f0000001ac0)="6f5c7c52077182d1c693356ea9960b80c8261f760547194ec3c4bd06ff4de90cc53e67a607f191f8635904cf420f70d59d3888a06d01502f7ab95b8c63d118ca08f58f91226a97b2c79d284ab524c728405a650dd92301321072c9d343a6fdf556d2024ae78ab5452aa5684a64ba161bb43e3c40f8f6924a5bd7f03e3e62c8cc0c24e0c9963cea541f12b3ed46e088732452bc", 0x93}, {&(0x7f0000001b80)="0c20208604ec4774923e75f5d20b0fc05b8c5580496933ce68c757378ab063693e0782489fa7468e366fb74526278b4d6dc1e4cbd6bae4136396add32457", 0x3e}, {&(0x7f0000001bc0)="92e86b71348f79905bebee45d5da2d9974075c75d7c649de9e42d61f83b2acfece133db2fba4156da2ca52445fcccbc9ee5f5d5957303a181cb2f9d7a3bc032ae5edf46b646f8645bb253a7b3ee783e2015d0a02b2096ac5b97eb5fa4a8a9bd63bac40a9b38c525bdccdbcefbbf2420b79cbab8fc6", 0x75}], 0x4, &(0x7f0000001cc0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r1, r3, 0xffffffffffffffff, r1, r15, r1, r0, r16, r1]}}], 0x38, 0x20000000}}, {{&(0x7f0000001d00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002100)=[{&(0x7f0000001d80)="050b9e74375bcb9e5d59159769b74f31ab5aa6ecdb7eb92b19c452c5ee0b1d73966905ebd9ff1900e297070fcb0e00638b0a8898193f8a0336834be295c42cc8111777", 0x43}, {&(0x7f0000001e00)="2742ad27443a309024478394c38bac6c6aadaa6d42fe8de4c4e54a4eb88909bf995bd6466c68d0b71f2a0c668f48aa5b0f3d0eba69f0f9", 0x37}, {&(0x7f0000001e40)="6df69181c353da21b38cb8f6225d041fae6466132507ae141f9c70ad24117874d738d4d30d24244f0b27c9bf76ada9bdf48444d34bf28b9451b9692cf89b44b6d17e7991dfd998ef3454a799d81c5307ac647327f04971621a1fc352c0058d036f559525f63a2f2aaea1720b11f37304eeccfc5f1c7058bed1d56232cd965b09bb332727badd338ad4a09706aa6de42667cd33dfce9c69a4c25e8b250a328a93d7a950fcbfddc8a0b6cf097c6a5656822dac84b92a153f11f675e163", 0xbc}, {&(0x7f0000001f00)="3fc654d795bdf908203f20d86bf449b173a99a8a9b4aaf762980ba4765c0347c6bbb15d239807f777a6d05fa987fd74df7b4b21610c19370fcc4154defb1705f65b842d5478ed1839b8b7b7b", 0x4c}, {&(0x7f0000001f80)="3d2ccfd08c3f54e7abe8fc281ea061949194993ebf51026bdc8841b911770a9ae93fbdb6d617aa2ca7d6fc09f6dcfc28a84ed361260f268f5258601ba7c98a51f274f1ea9a2c8bb67d54f35f39948d4380c38df21f99626b8758e5fc21215cc3b8976d350f13dbf084b9c584dc1e4cbba6ff5649a8ca1b0b2b4b00dd4e2edd5d5d03efdcb6846da29f0460a7e57eec07833c19c6975dda2a6e6f19515ad3ac0d55f61c38612385e29ad81b5f87f8202d35b1a9ef906d717be6c444ae881d328ca5679ce5182536256312047e2e1d0565", 0xd0}, {&(0x7f0000002080)="480ec1f7154dd4829551b01c106628c66102aeb739aa913ec0cae8a49c4ae461b99eef10da935394cb2519fdb1d4eb7041dbee8618d4b91ed65e1112e8994e4346c87f767c29580f41624f3185db14285dc96cbd6c1886f684b79e5bce80338d7640e0d643877e1c6971c6941c52b4b463aad06b35cd6013ca0ca14cd20d", 0x7e}], 0x6, &(0x7f0000002180)=[@rights={{0x28, 0x1, 0x1, [r2, r0, r0, r0, r3, r3]}}], 0x28, 0x20095}}, {{&(0x7f00000021c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240), 0x0, 0x0, 0x0, 0x4}}], 0x4, 0x8008010) r17 = syz_open_dev$usbmon(&(0x7f0000002380), 0x5, 0x101200) ioctl$EXT4_IOC_GETSTATE(r17, 0x40046629, &(0x7f00000023c0)) getsockopt$IPT_SO_GET_REVISION_MATCH(r9, 0x0, 0x42, &(0x7f0000002400)={'icmp\x00'}, &(0x7f0000002440)=0x1e) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000002480), &(0x7f00000024c0)=0x14) read$char_usb(r6, &(0x7f0000002500)=""/144, 0x90) ioctl$sock_FIOGETOWN(r12, 0x8903, &(0x7f00000025c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x2, r18, 0x3, &(0x7f0000002600)) 1.306144364s ago: executing program 1 (id=386): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001280)={{r0}}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x81, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42}, {0x200003, 0xa, 0x9, 0x80, 0x40, 0x0, 0x5f, 0x1, 0x2, 0x2, 0x0, 0x0, 0xfffffffffffffffd}], 0x3}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a000000000000040000000000000000"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 1.30548575s ago: executing program 3 (id=387): r0 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffff, 0x1, 0xedd, 0x7, 0x0, "7e662378bad29f731117b548c8848634122d9d"}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x7480a37db7d86485, 0x0) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x13) (async) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) (async) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) (async) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async, rerun: 32) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (rerun: 32) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) (async) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000e80)="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", 0x26f}, {&(0x7f0000000580)="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", 0x212}], 0x2, 0x0, 0x0, 0x4090}, 0x0) (async, rerun: 64) r3 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (rerun: 64) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000200)={0x0, 0x33524742}) (async) sendmsg$alg(r1, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) io_setup(0x8, &(0x7f0000000080)) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x8002, 0x0) 1.30086393s ago: executing program 1 (id=388): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x81c0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000080)={0x0, 'bond0\x00', {0x4}, 0x1}) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f0000000340)={0x1ee, 0x1, 0x5, 0x9, 0xc2, 0x80000001, 0x8, 0xfffffffffffffffc, 0x800000df}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r4, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file2\x00'}) r5 = socket$l2tp6(0xa, 0x2, 0x73) renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bind$l2tp6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x20) iopl(0x3) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x41, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x40, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7f}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0x0, 0xfffa, 0x2, 0x0]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x14, 0xcd, [0x9, 0xfffe, 0x7, 0x8, 0xb, 0x13c0, 0x1a5c, 0x0]}]}, 0x40}}, 0x800) bind(r1, &(0x7f0000000600)=@pppol2tpv3in6={0x23, 0x1, {0x0, r1, 0x0, 0x2, 0x4, 0x4, {0xa, 0x4e21, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x80) listen(0xffffffffffffffff, 0x6) listen(0xffffffffffffffff, 0x2f38) ioctl$VFAT_IOCTL_READDIR_SHORT(r5, 0x82307202, &(0x7f00000003c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r8, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) sendfile(r0, r0, 0x0, 0x7ffff000) 1.238690078s ago: executing program 1 (id=389): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000003a40), 0x41, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r2, 0x400c330d, &(0x7f0000000000)={0x6, 0x801}) userfaultfd(0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000001c00)={0x1f, 0x7fff, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) lseek(r1, 0xffffffffffffffff, 0x1) getresgid(&(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000080)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) fcntl$addseals(r5, 0x409, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) io_pgetevents(0x0, 0x80055, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x20010, r1, 0xa471b000) 1.223593875s ago: executing program 1 (id=390): syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000dae11c105e0484028fa4010203010902240001000000000904000002437d67000905fc57"], 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 1.149903636s ago: executing program 3 (id=391): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x1, 0x2aaa01) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=@can={{0x2, 0x1}, 0x3, 0x2, 0x0, 0x0, "641b005400"}, 0x10}, 0x1, 0x0, 0x0, 0x8490}, 0x1) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f0000000440)=""/5, 0x5}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}, {{&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000000040)=[{&(0x7f00000008c0)=""/154, 0x9a}], 0x1}, 0x8}], 0x2, 0x2000, &(0x7f0000003700)={0x0, 0x3938700}) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x9e6}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000000207d1eed2c000000000001090224000100000000090400000103000200092100000401220100090581030000000000b78c221458140047a5727b908c643db5df375ff0af9d5684ee71aaf1aa2d9b792c62f9f2c2e354cfda568da97e4e46855deaff797d6c662d0299c427f2414873c4836dcc57a92923816fec2fb35c5bba59c20626ecf864d86be13ff3fb4def26950a"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000280)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="01010500001005213cc1e0"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = dup(r2) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xc, {"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", 0xfffffffffffffd8f}}, 0x1006) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000036c000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000040), 0x1000000000000101, 0x4, 0x7fffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYRESOCT=r3], 0x15) write$P9_RLERRORu(r5, &(0x7f0000000b40)=ANY=[@ANYRES32=r0, @ANYRES32=r4], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000480)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) read$FUSE(r4, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000340)={0x50, 0x0, r10, {0x7, 0x28, 0x0, 0x0, 0x0, 0x4, 0x4}}, 0x50) fcntl$setpipe(r9, 0x407, 0x1fffffe) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r8, 0xc040564b, &(0x7f0000000100)={0x4, 0x0, 0x201f, 0x7184, 0x9, {0x2, 0x8000}, 0x1}) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r13, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de030100c0"]) 1.031027766s ago: executing program 0 (id=392): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcffffff0200000008000100", @ANYRES32=0x0, @ANYBLOB="0c0099"], 0x28}}, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x8004}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r6, 0x100000000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 688.263595ms ago: executing program 1 (id=393): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16400, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x8, 0x1, 0x9, 0x2000, 0xf6, 0x0}) prlimit64(r1, 0xe, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setresuid(0x0, 0xee00, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) listen(r3, 0xfffffffc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r2, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}}, 0x801) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0x4, 0x4, 0x9, 0x5}, 0x0) recvfrom(r4, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 569.37506ms ago: executing program 2 (id=394): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa0 1 [ 56.393840][ T5864] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.401090][ T5861] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.401176][ T5864] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.415640][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.415860][ T5861] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.430637][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.431113][ T5861] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.445556][ T5861] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.452817][ T5861] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.460619][ T5861] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.468028][ T5861] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.470452][ T5866] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.475632][ T5870] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.493174][ T5870] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.502425][ T5870] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.507160][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.509909][ T5870] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.527011][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.535879][ T5186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.820093][ T5868] chnl_net:caif_netlink_parms(): no params data found [ 56.830286][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 56.852905][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 56.898912][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 56.961486][ T5868] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.968753][ T5868] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.975990][ T5868] bridge_slave_0: entered allmulticast mode [ 56.982797][ T5868] bridge_slave_0: entered promiscuous mode [ 57.004535][ T5868] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.011943][ T5868] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.019185][ T5868] bridge_slave_1: entered allmulticast mode [ 57.025755][ T5868] bridge_slave_1: entered promiscuous mode [ 57.035073][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.042627][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.049890][ T5860] bridge_slave_0: entered allmulticast mode [ 57.056364][ T5860] bridge_slave_0: entered promiscuous mode [ 57.078337][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.085428][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.092704][ T5860] bridge_slave_1: entered allmulticast mode [ 57.099302][ T5860] bridge_slave_1: entered promiscuous mode [ 57.105698][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.113179][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.120459][ T5857] bridge_slave_0: entered allmulticast mode [ 57.127124][ T5857] bridge_slave_0: entered promiscuous mode [ 57.150961][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.158172][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.165268][ T5857] bridge_slave_1: entered allmulticast mode [ 57.172395][ T5857] bridge_slave_1: entered promiscuous mode [ 57.180535][ T5868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.207117][ T5868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.223664][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.231226][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.238642][ T5865] bridge_slave_0: entered allmulticast mode [ 57.245085][ T5865] bridge_slave_0: entered promiscuous mode [ 57.253285][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.269975][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.279786][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.287040][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.294246][ T5865] bridge_slave_1: entered allmulticast mode [ 57.301199][ T5865] bridge_slave_1: entered promiscuous mode [ 57.309020][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.333061][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.361688][ T5868] team0: Port device team_slave_0 added [ 57.380148][ T5860] team0: Port device team_slave_0 added [ 57.388084][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.398614][ T5868] team0: Port device team_slave_1 added [ 57.405843][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.415981][ T5857] team0: Port device team_slave_0 added [ 57.423053][ T5860] team0: Port device team_slave_1 added [ 57.440562][ T5857] team0: Port device team_slave_1 added [ 57.471059][ T5865] team0: Port device team_slave_0 added [ 57.484948][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.492172][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.518608][ T5868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.542688][ T5865] team0: Port device team_slave_1 added [ 57.548886][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.555831][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.582010][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.593520][ T5868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.600607][ T5868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.626702][ T5868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.642177][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.649285][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.675455][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.692468][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.699625][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.725784][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.738570][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.745612][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.771650][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.799569][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.806527][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.832861][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.861359][ T5868] hsr_slave_0: entered promiscuous mode [ 57.867883][ T5868] hsr_slave_1: entered promiscuous mode [ 57.874385][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.881641][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.909027][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.949373][ T5860] hsr_slave_0: entered promiscuous mode [ 57.955364][ T5860] hsr_slave_1: entered promiscuous mode [ 57.961423][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 57.967768][ T5860] Cannot create hsr debugfs directory [ 57.982205][ T5857] hsr_slave_0: entered promiscuous mode [ 57.988714][ T5857] hsr_slave_1: entered promiscuous mode [ 57.994581][ T5857] debugfs: 'hsr0' already exists in 'hsr' [ 58.000354][ T5857] Cannot create hsr debugfs directory [ 58.040353][ T5865] hsr_slave_0: entered promiscuous mode [ 58.046495][ T5865] hsr_slave_1: entered promiscuous mode [ 58.052715][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 58.058540][ T5865] Cannot create hsr debugfs directory [ 58.268277][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.278050][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.287108][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.300024][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.334622][ T5860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.344179][ T5860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.353514][ T5860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.363864][ T5860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.415483][ T5857] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.428436][ T5857] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.439366][ T5857] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.449073][ T5857] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.520072][ T5865] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.527370][ T5864] Bluetooth: hci0: command tx timeout [ 58.532832][ T5186] Bluetooth: hci1: command tx timeout [ 58.548074][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.554879][ T5865] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.564138][ T5865] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.573898][ T5865] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.607006][ T5186] Bluetooth: hci3: command tx timeout [ 58.612441][ T5186] Bluetooth: hci2: command tx timeout [ 58.638316][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.650367][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.662498][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.674568][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.681770][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.693722][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.701042][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.725219][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.745721][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.754748][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.761866][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.773364][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.788932][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.796083][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.804390][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.811525][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.830715][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.837915][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.868899][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.902506][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.909654][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.937101][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.944225][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.099161][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.175803][ T5868] veth0_vlan: entered promiscuous mode [ 59.192963][ T5868] veth1_vlan: entered promiscuous mode [ 59.224887][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.245945][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.265350][ T5868] veth0_macvtap: entered promiscuous mode [ 59.282158][ T5868] veth1_macvtap: entered promiscuous mode [ 59.292882][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.321840][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.345886][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.365964][ T5860] veth0_vlan: entered promiscuous mode [ 59.374818][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.384310][ T5857] veth0_vlan: entered promiscuous mode [ 59.396801][ T5860] veth1_vlan: entered promiscuous mode [ 59.404148][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.413252][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.423150][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.439628][ T5865] veth0_vlan: entered promiscuous mode [ 59.449799][ T5857] veth1_vlan: entered promiscuous mode [ 59.468934][ T5865] veth1_vlan: entered promiscuous mode [ 59.494950][ T5860] veth0_macvtap: entered promiscuous mode [ 59.519632][ T5857] veth0_macvtap: entered promiscuous mode [ 59.526436][ T5860] veth1_macvtap: entered promiscuous mode [ 59.545674][ T802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.554461][ T802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.563942][ T5857] veth1_macvtap: entered promiscuous mode [ 59.575902][ T5865] veth0_macvtap: entered promiscuous mode [ 59.598312][ T5865] veth1_macvtap: entered promiscuous mode [ 59.605190][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.615068][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.616048][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.638506][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.658747][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.673046][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.682242][ T5868] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 59.690455][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.705540][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.714745][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.737920][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.761109][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.770864][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.786123][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.795924][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.810295][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.820317][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.830937][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.851251][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.860831][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.880398][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.909376][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.919599][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.958276][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.966628][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.986575][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.995301][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.005048][ T4350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.014509][ T4350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.027033][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 60.036571][ T802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.050570][ T802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.082971][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.102987][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.198511][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 60.211571][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 60.242083][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 60.264610][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.294399][ T9] usb 3-1: config 0 descriptor?? [ 60.379107][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.391364][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.557693][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.608053][ T5186] Bluetooth: hci1: command tx timeout [ 60.613489][ T5864] Bluetooth: hci0: command tx timeout [ 60.687612][ T5186] Bluetooth: hci2: command tx timeout [ 60.693056][ T5186] Bluetooth: hci3: command tx timeout [ 60.727851][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x4 [ 60.735145][ T9] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 60.823502][ T5969] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 60.899536][ T9] cm6533_jd 0003:0D8C:0022.0001: item fetching failed at offset 3/5 [ 60.908802][ T9] cm6533_jd 0003:0D8C:0022.0001: parse failed [ 60.915047][ T9] cm6533_jd 0003:0D8C:0022.0001: probe with driver cm6533_jd failed with error -22 [ 60.950635][ T9] usb 3-1: USB disconnect, device number 2 [ 61.781973][ T5927] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 61.831785][ T9] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 61.865281][ T9] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.897854][ T5988] /dev/rnullb0: Can't open blockdev [ 61.937515][ T5927] usb 4-1: device descriptor read/64, error -71 [ 62.176982][ T5927] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 62.316940][ T5927] usb 4-1: device descriptor read/64, error -71 [ 62.437243][ T5927] usb usb4-port1: attempt power cycle [ 62.522521][ T5993] /dev/rnullb0: Can't open blockdev [ 62.612802][ T5995] /dev/rnullb0: Can't open blockdev [ 62.625899][ T5995] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.687718][ T5864] Bluetooth: hci0: command tx timeout [ 62.693364][ T5186] Bluetooth: hci1: command tx timeout [ 62.738771][ T5997] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 62.738771][ T5997] program syz.2.16 not setting count and/or reply_len properly [ 62.767508][ T5186] Bluetooth: hci3: command tx timeout [ 62.772944][ T5186] Bluetooth: hci2: command tx timeout [ 62.789656][ T5927] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 62.827550][ T5927] usb 4-1: device descriptor read/8, error -71 [ 63.066934][ T5927] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 63.117425][ T5927] usb 4-1: device descriptor read/8, error -71 [ 63.151178][ T6011] Zero length message leads to an empty skb [ 63.228198][ T5927] usb usb4-port1: unable to enumerate USB device [ 63.320955][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.20'. [ 63.458210][ T6024] ======================================================= [ 63.458210][ T6024] WARNING: The mand mount option has been deprecated and [ 63.458210][ T6024] and is ignored by this kernel. Remove the mand [ 63.458210][ T6024] option from the mount to silence this warning. [ 63.458210][ T6024] ======================================================= [ 63.527093][ T6024] 9p: Unknown parameter 'ے' [ 63.603462][ T6028] input: syz0 as /devices/virtual/input/input5 [ 64.139046][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 64.288177][ T10] usb 1-1: device descriptor read/64, error -71 [ 64.397096][ T10] usb usb1-port1: attempt power cycle [ 64.507029][ T43] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 64.658368][ T43] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 64.666808][ T43] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 64.680256][ T43] usb 3-1: config 220 has no interface number 2 [ 64.686582][ T43] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 64.703591][ T5927] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 64.712262][ T43] usb 3-1: config 220 interface 0 has no altsetting 0 [ 64.720918][ T43] usb 3-1: config 220 interface 76 has no altsetting 0 [ 64.728534][ T43] usb 3-1: config 220 interface 1 has no altsetting 0 [ 64.736911][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 64.738674][ T43] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 64.755412][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.766151][ T43] usb 3-1: Product: syz [ 64.771448][ T10] usb 1-1: device descriptor read/8, error -71 [ 64.771494][ T5186] Bluetooth: hci1: command tx timeout [ 64.784442][ T5864] Bluetooth: hci0: command tx timeout [ 64.790331][ T43] usb 3-1: Manufacturer: syz [ 64.795073][ T43] usb 3-1: SerialNumber: syz [ 64.847813][ T5927] usb 4-1: device descriptor read/64, error -71 [ 64.855095][ T5864] Bluetooth: hci2: command tx timeout [ 64.855160][ T5186] Bluetooth: hci3: command tx timeout [ 65.018230][ T43] usb 3-1: selecting invalid altsetting 0 [ 65.024106][ T43] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 65.032668][ T43] usb 3-1: No valid video chain found. [ 65.038045][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 65.049591][ T43] usb 3-1: selecting invalid altsetting 0 [ 65.056478][ T43] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 65.074653][ T10] usb 1-1: device descriptor read/8, error -71 [ 65.074783][ T43] usb 3-1: USB disconnect, device number 3 [ 65.087852][ T5927] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 65.191499][ T6046] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET) [ 65.198265][ T10] usb usb1-port1: unable to enumerate USB device [ 65.228392][ T5927] usb 4-1: device descriptor read/64, error -71 [ 65.337271][ T5927] usb usb4-port1: attempt power cycle [ 65.487782][ T5905] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 65.617054][ T5905] usb 2-1: device descriptor read/64, error -71 [ 65.676986][ T5927] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 65.697425][ T5927] usb 4-1: device descriptor read/8, error -71 [ 65.856929][ T5905] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 65.936992][ T5927] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 65.957746][ T5927] usb 4-1: device descriptor read/8, error -71 [ 65.986975][ T5905] usb 2-1: device descriptor read/64, error -71 [ 66.067109][ T5927] usb usb4-port1: unable to enumerate USB device [ 66.098239][ T5905] usb usb2-port1: attempt power cycle [ 66.447471][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 66.488412][ T6055] atomic_op ffff8880337a5998 conn xmit_atomic 0000000000000000 [ 66.497590][ T5905] usb 2-1: device descriptor read/8, error -71 [ 66.604758][ T6065] netlink: 80 bytes leftover after parsing attributes in process `syz.2.35'. [ 66.748581][ T5905] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 66.782998][ T5905] usb 2-1: device descriptor read/8, error -71 [ 66.907245][ T5905] usb usb2-port1: unable to enumerate USB device [ 67.046988][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 67.197543][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 67.213729][ T9] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 67.224336][ T9] usb 1-1: config 0 has no interface number 0 [ 67.234034][ T9] usb 1-1: New USB device found, idVendor=0856, idProduct=ac29, bcdDevice=a8.3c [ 67.244405][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.255171][ T9] usb 1-1: Product: syz [ 67.260155][ T9] usb 1-1: Manufacturer: syz [ 67.264837][ T9] usb 1-1: SerialNumber: syz [ 67.272433][ T9] usb 1-1: config 0 descriptor?? [ 67.440193][ T6073] binder: 6072:6073 ioctl c008ae09 200000000080 returned -22 [ 67.483361][ T9] mos7840 1-1:0.186: required endpoints missing [ 67.684784][ T9] usb 1-1: USB disconnect, device number 6 [ 68.271554][ T6089] netlink: 24 bytes leftover after parsing attributes in process `syz.0.44'. [ 68.274456][ T6090] /dev/rnullb0: Can't open blockdev [ 68.340350][ T6095] /dev/rnullb0: Can't open blockdev [ 68.364469][ T6097] capability: warning: `syz.1.47' uses deprecated v2 capabilities in a way that may be insecure [ 68.510039][ T6107] netlink: 'syz.1.50': attribute type 11 has an invalid length. [ 68.629743][ T6113] /dev/rnullb0: Can't open blockdev [ 68.659831][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 68.676570][ T6115] pimreg: entered allmulticast mode [ 68.821856][ T6125] kvm: kvm [6124]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3030303030303030 [ 68.836925][ T43] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 68.934310][ T6130] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 68.952912][ T6130] kvm: pic: level sensitive irq not supported [ 68.953012][ T6130] kvm: pic: non byte read [ 68.964124][ T6130] kvm: pic: level sensitive irq not supported [ 68.964212][ T6130] kvm: pic: non byte read [ 68.978331][ T6130] kvm: pic: level sensitive irq not supported [ 68.978410][ T6130] kvm: pic: non byte read [ 69.008438][ T43] usb 1-1: config index 0 descriptor too short (expected 8028, got 92) [ 69.017087][ T43] usb 1-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 69.039162][ T43] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.056451][ T43] usb 1-1: too many endpoints for config 1 interface 1 altsetting 1: 48, using maximum allowed: 30 [ 69.067671][ T6136] /dev/rnullb0: Can't open blockdev [ 69.067673][ T43] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 69.074595][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 69.100033][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.108168][ T43] usb 1-1: Product: syz [ 69.112539][ T43] usb 1-1: Manufacturer: syz [ 69.117388][ T43] usb 1-1: SerialNumber: syz [ 69.326400][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.337309][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.416971][ T5905] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 69.590613][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 69.603205][ T5905] usb 3-1: config 8 has an invalid interface number: 57 but max is 0 [ 69.612708][ T5905] usb 3-1: config 8 has an invalid descriptor of length 252, skipping remainder of the config [ 69.623404][ T5905] usb 3-1: config 8 has no interface number 0 [ 69.632510][ T5905] usb 3-1: config 8 interface 57 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 69.656170][ T5905] usb 3-1: config 8 interface 57 has no altsetting 0 [ 69.667216][ T5905] usb 3-1: New USB device found, idVendor=39c6, idProduct=8f68, bcdDevice=dd.44 [ 69.676373][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.694613][ T5905] usb 3-1: Product: syz [ 69.701016][ T5905] usb 3-1: Manufacturer: syz [ 69.705685][ T5905] usb 3-1: SerialNumber: syz [ 69.752217][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.762605][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.025296][ T6167] netlink: 'syz.1.68': attribute type 13 has an invalid length. [ 70.051038][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.066672][ T6167] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 70.072478][ T5905] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 70.073285][ T6167] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 70.084214][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.093903][ T6167] vhci_hcd vhci_hcd.0: Device attached [ 70.106267][ T6111] /dev/rnullb0: Can't open blockdev [ 70.122082][ T43] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 70.134767][ T6172] binder: 6171:6172 ioctl c0046209 200000001340 returned -22 [ 70.142243][ T43] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 70.142314][ T5905] usb 3-1: MIDIStreaming interface descriptor not found [ 70.157211][ T43] cdc_ncm 1-1:1.0: bind() failure [ 70.168449][ T5905] usb 3-1: USB disconnect, device number 4 [ 70.190115][ T43] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 70.208882][ T43] cdc_ncm 1-1:1.1: bind() failure [ 70.235790][ T5872] udevd[5872]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.57/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 70.257312][ T43] usb 1-1: USB disconnect, device number 7 [ 70.391792][ T5927] usb 36-1: SetAddress Request (2) to port 0 [ 70.399392][ T5927] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 70.497014][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 70.658945][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 70.672806][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 70.692764][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.712878][ T10] usb 2-1: config 0 descriptor?? [ 70.733733][ T6185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.766574][ T10] hso 2-1:0.0: Can't find BULK IN endpoint [ 70.831149][ T6189] netlink: 'syz.0.73': attribute type 1 has an invalid length. [ 70.873974][ T10] libceph: connect (1)[c::]:6789 error -101 [ 70.881334][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 71.014487][ T6191] ceph: No mds server is up or the cluster is laggy [ 71.173992][ T6169] vhci_hcd: connection reset by peer [ 71.183986][ T10] usb 2-1: USB disconnect, device number 6 [ 71.192466][ T12] vhci_hcd: stop threads [ 71.196732][ T12] vhci_hcd: release socket [ 71.223421][ T12] vhci_hcd: disconnect device [ 71.405311][ T6212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.81'. [ 71.416985][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.417035][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.439650][ T6212] /dev/rnullb0: Can't open blockdev [ 71.457429][ T5905] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 71.688376][ T5905] usb 3-1: config 0 has an invalid interface number: 236 but max is 0 [ 71.735990][ T5905] usb 3-1: config 0 has an invalid descriptor of length 106, skipping remainder of the config [ 71.747248][ T5905] usb 3-1: config 0 has no interface number 0 [ 71.754237][ T5905] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=be.65 [ 71.764118][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=32 [ 71.774137][ T5905] usb 3-1: SerialNumber: syz [ 71.777070][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 71.781818][ T5905] usb 3-1: config 0 descriptor?? [ 71.795024][ T5905] usb 3-1: unknown interface protocol 0x1, assuming v1 [ 71.803201][ T5905] usb 3-1: invalid UAC_HEADER (v1) [ 71.820759][ T5905] snd-usb-audio 3-1:0.236: probe with driver snd-usb-audio failed with error -22 [ 71.857901][ T10] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 71.884574][ T5873] udevd[5873]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.236/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 71.927324][ T9] usb 1-1: device descriptor read/64, error -71 [ 72.039370][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 72.738226][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 72.749356][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 72.761960][ T10] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 72.778428][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.787840][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.797218][ T9] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 72.809181][ T10] usb 4-1: Product: syz [ 72.813850][ T10] usb 4-1: Manufacturer: syz [ 72.819953][ T10] usb 4-1: SerialNumber: syz [ 72.835693][ T6226] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 72.847913][ T10] cdc_mbim 4-1:1.0: skipping garbage [ 72.946950][ T9] usb 1-1: device descriptor read/64, error -71 [ 73.047690][ T6226] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 73.055047][ T6226] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 73.062627][ T9] usb usb1-port1: attempt power cycle [ 73.346997][ T5905] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 73.417027][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 73.437711][ T9] usb 1-1: device descriptor read/8, error -71 [ 73.516914][ T5905] usb 2-1: Using ep0 maxpacket: 16 [ 73.523349][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 73.533746][ T5905] usb 2-1: config 0 interface 0 has no altsetting 0 [ 73.543806][ T5905] usb 2-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 73.553045][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.561950][ T5905] usb 2-1: Product: syz [ 73.566231][ T5905] usb 2-1: Manufacturer: syz [ 73.571425][ T5905] usb 2-1: SerialNumber: syz [ 73.578481][ T5905] usb 2-1: config 0 descriptor?? [ 73.676983][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 73.728764][ T9] usb 1-1: device descriptor read/8, error -71 [ 73.897880][ T5905] usb 3-1: USB disconnect, device number 5 [ 73.907397][ T9] usb usb1-port1: unable to enumerate USB device [ 73.989847][ T6241] /dev/rnullb0: Can't open blockdev [ 73.996200][ T43] usb 2-1: USB disconnect, device number 7 [ 74.606114][ T6246] /dev/rnullb0: Can't open blockdev [ 74.726752][ T10] cdc_mbim 4-1:1.0: bind() failure [ 74.739529][ T10] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 74.746352][ T10] cdc_ncm 4-1:1.1: bind() failure [ 74.781441][ T10] usb 4-1: USB disconnect, device number 10 [ 74.827728][ T6257] /dev/rnullb0: Can't open blockdev [ 75.025834][ T6264] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 75.042870][ T6264] /dev/rnullb0: Can't open blockdev [ 75.163465][ T6268] /dev/rnullb0: Can't open blockdev [ 75.489248][ T5927] usb 36-1: device descriptor read/8, error -110 [ 75.897296][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 75.918487][ T5927] usb usb36-port1: attempt power cycle [ 76.057224][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 76.064363][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 76.075155][ T43] usb 1-1: config 190 has an invalid interface number: 42 but max is 0 [ 76.094446][ T43] usb 1-1: config 190 has an invalid descriptor of length 0, skipping remainder of the config [ 76.123991][ T43] usb 1-1: config 190 has no interface number 0 [ 76.133040][ T43] usb 1-1: config 190 interface 42 has no altsetting 0 [ 76.143570][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=77.12 [ 76.159482][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.184220][ T43] usb 1-1: Product: syz [ 76.200010][ T43] usb 1-1: Manufacturer: syz [ 76.216354][ T43] usb 1-1: SerialNumber: syz [ 76.404964][ T6292] process 'syz.3.108' launched '/dev/fd/5' with NULL argv: empty string added [ 76.417567][ T6291] /dev/rnullb0: Can't open blockdev [ 76.442337][ T6276] /dev/rnullb0: Can't open blockdev [ 76.452014][ T43] usb 1-1: USB disconnect, device number 12 [ 76.483673][ T5927] usb usb36-port1: unable to enumerate USB device [ 76.503932][ T6295] mkiss: ax0: crc mode is auto. [ 76.602462][ T6299] syzkaller1: entered promiscuous mode [ 76.617197][ T6299] syzkaller1: entered allmulticast mode [ 76.757112][ T10] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 76.909056][ T10] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 76.917381][ T10] usb 3-1: config 0 has no interface number 0 [ 76.925113][ T10] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 76.934727][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.942850][ T10] usb 3-1: Product: syz [ 76.947342][ T10] usb 3-1: Manufacturer: syz [ 76.951946][ T10] usb 3-1: SerialNumber: syz [ 76.958834][ T10] usb 3-1: config 0 descriptor?? [ 76.996427][ T6301] tipc: Started in network mode [ 77.001470][ T6301] tipc: Node identity e23397cf471c, cluster identity 4711 [ 77.009395][ T6301] tipc: Enabled bearer , priority 0 [ 77.017025][ T6301] syzkaller0: entered promiscuous mode [ 77.022557][ T6301] syzkaller0: entered allmulticast mode [ 77.033277][ T6301] tipc: Resetting bearer [ 77.041305][ T6301] netlink: 'syz.0.112': attribute type 1 has an invalid length. [ 77.049029][ T6301] netlink: 'syz.0.112': attribute type 2 has an invalid length. [ 77.182735][ T6300] tipc: Resetting bearer [ 77.191481][ T6300] tipc: Disabling bearer [ 77.381880][ T6309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.942777][ T6311] /dev/rnullb0: Can't open blockdev [ 77.970612][ T10] usb 3-1: non-Atmel transceiver xxxx1177 [ 78.011170][ T6313] /dev/rnullb0: Can't open blockdev [ 78.175438][ T10] usb 3-1: Firmware version (0.0) predates our first public release. [ 78.207734][ T6327] netlink: 'syz.1.120': attribute type 28 has an invalid length. [ 78.208715][ T10] usb 3-1: Please update to version 0.2 or newer [ 78.244084][ T10] usb 3-1: atusb_probe: initialization failed, error = -19 [ 78.298309][ T10] usb 3-1: USB disconnect, device number 6 [ 78.334955][ T6329] netlink: 'syz.1.120': attribute type 11 has an invalid length. [ 78.374055][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.120'. [ 78.785376][ T6329] kvm_intel: kvm [6326]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0x65b7 [ 78.836458][ T6329] kvm: kvm [6326]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x3b7 [ 78.880331][ T6329] kvm: kvm [6326]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x14a2 [ 78.944752][ T6329] kvm: kvm [6326]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0xac3c [ 78.975829][ T6345] /dev/rnullb0: Can't open blockdev [ 79.003307][ T6329] kvm: kvm [6326]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7b28 [ 79.037066][ T6329] kvm: kvm [6326]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0xfe14 [ 79.240711][ T121] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 79.412879][ T121] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 79.430796][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.454502][ T121] usb 4-1: Product: syz [ 79.464602][ T121] usb 4-1: Manufacturer: syz [ 79.474700][ T121] usb 4-1: SerialNumber: syz [ 79.492249][ T121] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 79.515448][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 79.969790][ T121] usb 4-1: USB disconnect, device number 11 [ 80.056975][ T5895] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 80.214866][ T5895] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.228609][ T5895] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 80.239253][ T5895] usb 2-1: New USB device strings: Mfr=15, Product=189, SerialNumber=0 [ 80.248154][ T5895] usb 2-1: Product: syz [ 80.252420][ T5895] usb 2-1: Manufacturer: syz [ 80.260999][ T5895] usb 2-1: config 0 descriptor?? [ 80.386935][ T43] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 80.537613][ T6366] /dev/rnullb0: Can't open blockdev [ 80.538517][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 80.560006][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.589849][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.600488][ T6368] tmpfs: Bad value for 'mpol' [ 80.603584][ T43] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.616621][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.616981][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 80.642653][ T43] usb 3-1: config 0 descriptor?? [ 80.644247][ T10] ath9k_htc: Failed to initialize the device [ 80.668888][ T121] usb 4-1: ath9k_htc: USB layer deinitialized [ 80.673388][ T5895] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 80.692384][ T5895] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 80.707485][ T5895] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 80.714819][ T5895] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 80.724113][ T5895] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 80.731502][ T5895] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 80.739549][ T5895] hid-alps 0003:044E:121E.0003: unknown main item tag 0x0 [ 80.752209][ T5895] hid-alps 0003:044E:121E.0003: hidraw0: USB HID v0.05 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 80.780986][ T5860] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 80.817055][ T5860] CPU: 1 UID: 0 PID: 5860 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 80.817081][ T5860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 80.817091][ T5860] Call Trace: [ 80.817098][ T5860] [ 80.817105][ T5860] dump_stack_lvl+0x189/0x250 [ 80.817132][ T5860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.817157][ T5860] ? __pfx__printk+0x10/0x10 [ 80.817178][ T5860] ? rcu_is_watching+0x15/0xb0 [ 80.817196][ T5860] dump_header+0xd3/0x480 [ 80.817211][ T5860] oom_kill_process+0x387/0x920 [ 80.817230][ T5860] out_of_memory+0xf09/0x12a0 [ 80.817249][ T5860] ? mem_cgroup_iter+0x3b/0x460 [ 80.817268][ T5860] ? __pfx_out_of_memory+0x10/0x10 [ 80.817287][ T5860] mem_cgroup_out_of_memory+0x145/0x240 [ 80.817305][ T5860] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 80.817326][ T5860] ? _raw_spin_unlock+0x28/0x50 [ 80.817343][ T5860] ? memcg1_oom_prepare+0x37f/0x450 [ 80.817363][ T5860] try_charge_memcg+0xdff/0x1290 [ 80.817382][ T5860] ? rcu_is_watching+0x15/0xb0 [ 80.817402][ T5860] ? __pfx_try_charge_memcg+0x10/0x10 [ 80.817420][ T5860] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 80.817436][ T5860] ? xa_load+0x60/0x210 [ 80.817454][ T5860] ? rcu_is_watching+0x15/0xb0 [ 80.817469][ T5860] ? rcu_is_watching+0x15/0xb0 [ 80.817484][ T5860] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 80.817505][ T5860] charge_memcg+0x9f/0x180 [ 80.817522][ T5860] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 80.817542][ T5860] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 80.817564][ T5860] __read_swap_cache_async+0x28c/0x510 [ 80.817586][ T5860] swap_cluster_readahead+0x305/0x5f0 [ 80.817606][ T5860] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 80.817626][ T5860] ? rcu_is_watching+0x15/0xb0 [ 80.817641][ T5860] ? filemap_get_entry+0xad/0x2f0 [ 80.817658][ T5860] ? get_vma_policy+0x27c/0x3c0 [ 80.817681][ T5860] swapin_readahead+0x17d/0xb50 [ 80.817698][ T5860] ? __pfx_filemap_get_entry+0x10/0x10 [ 80.817716][ T5860] ? get_swap_device_info+0x1c/0x2b0 [ 80.817733][ T5860] ? rcu_is_watching+0x15/0xb0 [ 80.817749][ T5860] ? __pfx_swapin_readahead+0x10/0x10 [ 80.817768][ T5860] ? __filemap_get_folio+0x9a6/0xaf0 [ 80.817787][ T5860] ? swap_cache_get_folio+0xae/0x3b0 [ 80.817806][ T5860] do_swap_page+0x525/0x5ac0 [ 80.817826][ T5860] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 80.817858][ T5860] ? ___pte_offset_map+0x29/0x250 [ 80.817879][ T5860] ? lock_acquire+0x5f/0x360 [ 80.817893][ T5860] ? do_swap_page+0x184/0x5ac0 [ 80.817911][ T5860] ? __pfx_do_swap_page+0x10/0x10 [ 80.817930][ T5860] ? __pfx_default_wake_function+0x10/0x10 [ 80.817946][ T5860] ? ___pte_offset_map+0x45/0x250 [ 80.817964][ T5860] ? ___pte_offset_map+0x1cf/0x250 [ 80.817984][ T5860] ? pte_offset_map_rw_nolock+0xea/0x160 [ 80.818006][ T5860] __handle_mm_fault+0xe55/0x5400 [ 80.818030][ T5860] ? __pfx___handle_mm_fault+0x10/0x10 [ 80.818051][ T5860] ? rcu_is_watching+0x15/0xb0 [ 80.818071][ T5860] ? lock_vma_under_rcu+0x3cb/0x450 [ 80.818087][ T5860] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 80.818104][ T5860] handle_mm_fault+0x40a/0x8e0 [ 80.818128][ T5860] do_user_addr_fault+0xa81/0x1390 [ 80.818148][ T5860] ? rcu_is_watching+0x15/0xb0 [ 80.818164][ T5860] ? trace_page_fault_user+0x84/0x1e0 [ 80.818181][ T5860] exc_page_fault+0x82/0x100 [ 80.818201][ T5860] asm_exc_page_fault+0x26/0x30 [ 80.818216][ T5860] RIP: 0033:0x7f960edc14a8 [ 80.818244][ T5860] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 80.818258][ T5860] RSP: 002b:00007ffd5f1af890 EFLAGS: 00010293 [ 80.818273][ T5860] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 00007f960edc14a5 [ 80.818284][ T5860] RDX: 00007ffd5f1af8d0 RSI: 0000000000000000 RDI: 0000000000000000 [ 80.818295][ T5860] RBP: 00007ffd5f1af93c R08: 0000000000000000 R09: 0000000000000000 [ 80.818305][ T5860] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 80.818316][ T5860] R13: 00000000000927c0 R14: 000000000001317d R15: 00007ffd5f1af990 [ 80.818334][ T5860] [ 80.818395][ T5860] memory: usage 307200kB, limit 307200kB, failcnt 3717 [ 80.856998][ T5186] Bluetooth: hci2: command tx timeout [ 80.948117][ T5860] memory+swap: usage 307388kB, limit 9007199254740988kB, failcnt 0 [ 81.126343][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.173255][ T5860] kmem: usage 1580kB, limit 9007199254740988kB, failcnt 0 [ 81.173641][ T121] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 81.183532][ T6353] bond0: (slave rose0): Enslaving as an active interface with an up link [ 81.201022][ T5860] Memory cgroup stats for /syz0: [ 81.285224][ T5860] cache 312590336 [ 81.293952][ T5860] rss 139264 [ 81.298915][ T5860] rss_huge 0 [ 81.302115][ T5860] shmem 311541760 [ 81.305890][ T5860] mapped_file 8192 [ 81.310049][ T5860] dirty 8192 [ 81.313269][ T5860] writeback 0 [ 81.316622][ T5860] workingset_refault_anon 33 [ 81.321270][ T5860] workingset_refault_file 256 [ 81.325943][ T5860] swap 57344 [ 81.329552][ T5860] swapcached 106496 [ 81.333364][ T5860] pgpgin 85765 [ 81.336748][ T5860] pgpgout 9414 [ 81.350861][ T5860] pgfault 8766 [ 81.354260][ T5860] pgmajfault 29 [ 81.366914][ T5860] inactive_anon 311541760 [ 81.373524][ T5860] active_anon 143360 [ 81.377532][ T5860] inactive_file 0 [ 81.381176][ T5860] active_file 1048576 [ 81.385265][ T5860] unevictable 0 [ 81.390478][ T5860] hierarchical_memory_limit 314572800 [ 81.400943][ T5860] hierarchical_memsw_limit 9223372036854771712 [ 81.407415][ T5860] total_cache 312590336 [ 81.411742][ T5860] total_rss 139264 [ 81.415532][ T5860] total_rss_huge 0 [ 81.422156][ T5860] total_shmem 311541760 [ 81.426367][ T5860] total_mapped_file 8192 [ 81.431737][ T121] usb 4-1: Using ep0 maxpacket: 32 [ 81.435513][ T43] usbhid 3-1:0.0: can't add hid device: -71 [ 81.437629][ T5860] total_dirty 8192 [ 81.443666][ T43] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 81.451406][ T121] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 81.459604][ T43] usb 3-1: USB disconnect, device number 7 [ 81.470320][ T5860] total_writeback 0 [ 81.470332][ T5860] total_workingset_refault_anon 33 [ 81.479450][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.487884][ T121] usb 4-1: Product: syz [ 81.492116][ T5860] total_workingset_refault_file 256 [ 81.498150][ T121] usb 4-1: Manufacturer: syz [ 81.502888][ T121] usb 4-1: SerialNumber: syz [ 81.507580][ T5860] total_swap 57344 [ 81.511310][ T5860] total_swapcached 106496 [ 81.518089][ T121] usb 4-1: config 0 descriptor?? [ 81.528902][ T5860] total_pgpgin 85765 [ 81.539554][ T5860] total_pgpgout 9414 [ 81.544124][ T5860] total_pgfault 8766 [ 81.548412][ T5860] total_pgmajfault 29 [ 81.552413][ T5860] total_inactive_anon 311541760 [ 81.557629][ T5860] total_active_anon 143360 [ 81.562185][ T5860] total_inactive_file 0 [ 81.566468][ T5860] total_active_file 1048576 [ 81.572094][ T5860] total_unevictable 0 [ 81.576184][ T5860] anon_cost 0 [ 81.579814][ T5860] file_cost 0 [ 81.583187][ T5860] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.119,pid=6321,uid=0 [ 81.598376][ T5860] Memory cgroup out of memory: Killed process 6321 (syz.0.119) total-vm:101936kB, anon-rss:1140kB, file-rss:23080kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 81.650083][ T1218] cfg80211: failed to load regulatory.db [ 81.738001][ T6367] rtc_cmos 00:00: Alarms can be up to one day in the future [ 81.752672][ T121] airspy 4-1:0.0: usb_control_msg() failed -71 request 09 [ 81.766693][ T121] airspy 4-1:0.0: Could not detect board [ 81.772787][ T121] airspy 4-1:0.0: probe with driver airspy failed with error -71 [ 81.809849][ T1218] usb 2-1: USB disconnect, device number 8 [ 81.811441][ T121] usb 4-1: USB disconnect, device number 12 [ 82.003807][ T6408] /dev/rnullb0: Can't open blockdev [ 82.037248][ T6408] netlink: 'syz.2.139': attribute type 9 has an invalid length. [ 82.248741][ T1218] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 82.332491][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 82.357407][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 82.380072][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 82.397771][ T43] rtc_cmos 00:00: Alarms can be up to one day in the future [ 82.415598][ T43] rtc rtc0: __rtc_set_alarm: err=-22 [ 82.432423][ T1218] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 82.457198][ T1218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.486754][ T1218] usb 2-1: Product: syz [ 82.497189][ T1218] usb 2-1: Manufacturer: syz [ 82.507016][ T1218] usb 2-1: SerialNumber: syz [ 82.522228][ T1218] usb 2-1: config 0 descriptor?? [ 82.745986][ T1218] hso 2-1:0.0: Failed to find BULK IN ep [ 82.755536][ T1218] usb-storage 2-1:0.0: USB Mass Storage device detected [ 82.952667][ T6404] fuse: Unknown parameter 'dd?0x0000000000000008' [ 82.967691][ T6404] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 82.977390][ T6404] /dev/rnullb0: Can't open blockdev [ 82.992240][ T121] usb 2-1: USB disconnect, device number 9 [ 83.560275][ T6438] /dev/rnullb0: Can't open blockdev [ 83.587010][ T1218] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 83.756995][ T1218] usb 4-1: Using ep0 maxpacket: 32 [ 83.769687][ T1218] usb 4-1: config 0 has an invalid interface number: 28 but max is 0 [ 83.786919][ T1218] usb 4-1: config 0 has no interface number 0 [ 83.796519][ T1218] usb 4-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37 [ 83.813302][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.831663][ T1218] usb 4-1: Product: syz [ 83.840084][ T1218] usb 4-1: Manufacturer: syz [ 83.846913][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 83.850099][ T1218] usb 4-1: SerialNumber: syz [ 83.868828][ T1218] usb 4-1: config 0 descriptor?? [ 83.876713][ T1218] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 83.894756][ T1218] command write [95] error -22 [ 83.996947][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 84.009913][ T10] usb 1-1: config 0 has an invalid interface number: 30 but max is 0 [ 84.018265][ T10] usb 1-1: config 0 has no interface number 0 [ 84.029217][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c180, bcdDevice=fc.f0 [ 84.038334][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.046388][ T10] usb 1-1: Product: syz [ 84.050671][ T10] usb 1-1: Manufacturer: syz [ 84.055291][ T10] usb 1-1: SerialNumber: syz [ 84.066945][ T10] usb 1-1: config 0 descriptor?? [ 84.085666][ T10] quatech2 1-1:0.30: Quatech 2nd gen USB to Serial Driver converter detected [ 84.286619][ T10] usb 1-1: qt2_attach - failed to power on unit: -71 [ 84.309163][ T10] quatech2 1-1:0.30: probe with driver quatech2 failed with error -71 [ 84.327300][ T6436] netlink: 188 bytes leftover after parsing attributes in process `syz.3.143'. [ 84.348303][ T10] usb 1-1: USB disconnect, device number 13 [ 84.352423][ T43] usb 4-1: USB disconnect, device number 13 [ 84.998674][ T6476] netlink: 'syz.3.153': attribute type 8 has an invalid length. [ 85.006380][ T6476] netlink: 48 bytes leftover after parsing attributes in process `syz.3.153'. [ 85.066772][ T6485] /dev/rnullb0: Can't open blockdev [ 85.074506][ T6485] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 85.568352][ T6503] block nbd0: NBD_DISCONNECT [ 86.187611][ T43] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 86.337471][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 86.346535][ T43] usb 4-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 86.358681][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.366756][ T43] usb 4-1: Product: syz [ 86.371399][ T43] usb 4-1: Manufacturer: syz [ 86.376024][ T43] usb 4-1: SerialNumber: syz [ 86.385126][ T43] usb 4-1: config 0 descriptor?? [ 86.393408][ T43] gspca_main: sq905-2.14.0 probing 2770:9120 [ 86.399653][ T5905] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 86.556927][ T5905] usb 1-1: Using ep0 maxpacket: 8 [ 86.565658][ T5905] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 86.580268][ T5905] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 86.589753][ T5905] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.609272][ T5905] usb 1-1: config 0 descriptor?? [ 86.663544][ T6518] netlink: 'syz.2.169': attribute type 1 has an invalid length. [ 86.673159][ T6518] netlink: 224 bytes leftover after parsing attributes in process `syz.2.169'. [ 86.679068][ T6520] MTD: Couldn't look up '/dev/rnullb0': -15 [ 86.934481][ T43] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 86.947070][ T43] sq905 4-1:0.0: probe with driver sq905 failed with error -71 [ 86.957150][ T43] usb 4-1: USB disconnect, device number 14 [ 87.038204][ T5905] logitech 0003:046D:C20E.0004: rdesc size test failed for formula gp [ 87.050240][ T5905] logitech 0003:046D:C20E.0004: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.0-1/input0 [ 87.242125][ T6514] /dev/rnullb0: Can't open blockdev [ 87.246974][ T121] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 87.250553][ T6532] /dev/rnullb0: Can't open blockdev [ 87.261519][ T43] usb 1-1: USB disconnect, device number 14 [ 87.295374][ T6535] MTD: Couldn't look up '/dev/rnullb0': -15 [ 87.398335][ T121] usb 3-1: too many configurations: 85, using maximum allowed: 8 [ 87.411049][ T121] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 87.418988][ T121] usb 3-1: can't read configurations, error -61 [ 87.559189][ T121] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 87.727576][ T121] usb 3-1: too many configurations: 85, using maximum allowed: 8 [ 87.736602][ T121] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 87.745609][ T121] usb 3-1: can't read configurations, error -61 [ 87.752133][ T121] usb usb3-port1: attempt power cycle [ 87.818152][ T5946] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 87.861551][ T6563] infiniband syz2: set active [ 87.866348][ T6563] infiniband syz2: added veth1_vlan [ 87.903510][ T6563] RDS/IB: syz2: added [ 87.911357][ T6563] smc: adding ib device syz2 with port count 1 [ 87.918225][ T6563] smc: ib device syz2 port 1 has pnetid [ 87.989369][ T5946] usb 4-1: config 7 has an invalid interface number: 101 but max is 1 [ 88.008602][ T5946] usb 4-1: config 7 has an invalid interface number: 2 but max is 1 [ 88.016640][ T5946] usb 4-1: config 7 has an invalid interface number: 13 but max is 1 [ 88.024984][ T5946] usb 4-1: config 7 has an invalid interface number: 151 but max is 1 [ 88.034127][ T5946] usb 4-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 88.044333][ T5946] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 88.054823][ T5946] usb 4-1: config 7 has 4 interfaces, different from the descriptor's value: 2 [ 88.066930][ T5946] usb 4-1: config 7 has no interface number 0 [ 88.073016][ T5946] usb 4-1: config 7 has no interface number 1 [ 88.079185][ T5946] usb 4-1: config 7 has no interface number 3 [ 88.085378][ T5946] usb 4-1: config 7 interface 101 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.099264][ T121] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 88.109728][ T5946] usb 4-1: too many endpoints for config 7 interface 2 altsetting 4: 206, using maximum allowed: 30 [ 88.120685][ T5946] usb 4-1: config 7 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 206 [ 88.134742][ T5946] usb 4-1: config 7 interface 13 altsetting 14 endpoint 0xD has invalid maxpacket 624, setting to 64 [ 88.146254][ T5946] usb 4-1: config 7 interface 13 altsetting 14 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 88.158114][ T121] usb 3-1: too many configurations: 85, using maximum allowed: 8 [ 88.167122][ T5946] usb 4-1: config 7 interface 13 altsetting 14 endpoint 0x8 has an invalid bInterval 81, changing to 10 [ 88.179524][ T5946] usb 4-1: config 7 interface 13 altsetting 14 has a duplicate endpoint with address 0xB, skipping [ 88.190973][ T121] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 88.200842][ T121] usb 3-1: can't read configurations, error -61 [ 88.207253][ T5946] usb 4-1: config 7 interface 13 altsetting 14 has 4 endpoint descriptors, different from the interface descriptor's value: 16 [ 88.223592][ T5946] usb 4-1: config 7 interface 151 altsetting 120 has an invalid descriptor for endpoint zero, skipping [ 88.234680][ T5946] usb 4-1: config 7 interface 151 altsetting 120 has 12 endpoint descriptors, different from the interface descriptor's value: 1 [ 88.249814][ T5946] usb 4-1: config 7 interface 101 has no altsetting 0 [ 88.256592][ T5946] usb 4-1: config 7 interface 2 has no altsetting 0 [ 88.263243][ T5946] usb 4-1: config 7 interface 13 has no altsetting 0 [ 88.270052][ T5946] usb 4-1: config 7 interface 151 has no altsetting 0 [ 88.289331][ T5946] usb 4-1: New USB device found, idVendor=22b8, idProduct=4234, bcdDevice=65.a0 [ 88.298430][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.309377][ T5946] usb 4-1: Product: ࡃ [ 88.313566][ T5946] usb 4-1: Manufacturer: 풪딁ᬐㄙ䁱濳✀쨒轷ⶥ计ٛ鄝뇹‘矧쓁䡷糙醎厝৻ग़欈骛㕀維ゑ䝮즭 [ 88.335035][ T5946] usb 4-1: SerialNumber: Ⰱ [ 88.357192][ T121] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 88.378064][ T121] usb 3-1: too many configurations: 85, using maximum allowed: 8 [ 88.387604][ T121] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 88.395378][ T121] usb 3-1: can't read configurations, error -61 [ 88.404406][ T121] usb usb3-port1: unable to enumerate USB device [ 88.544160][ T6556] /dev/rnullb0: Can't open blockdev [ 88.583238][ T5946] hub 4-1:7.151: Invalid hub with more than one config or interface [ 88.596988][ T5946] hub 4-1:7.151: probe with driver hub failed with error -22 [ 88.610722][ T5946] usb 4-1: USB disconnect, device number 15 [ 88.712443][ T6586] netlink: 'syz.1.188': attribute type 2 has an invalid length. [ 88.765769][ T6584] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 88.773725][ T6584] /dev/rnullb0: Can't open blockdev [ 89.046940][ T5946] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 89.095927][ T6598] ALSA: seq fatal error: cannot create timer (-19) [ 89.196963][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 89.205074][ T5946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.216780][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 89.231809][ T5946] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 89.242180][ T5946] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 0 [ 89.252497][ T5946] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 89.266932][ T5946] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 89.276068][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 89.284099][ T5946] usb 1-1: SerialNumber: syz [ 89.289830][ T5946] usb 1-1: config 0 descriptor?? [ 89.296029][ T5946] hso 1-1:0.0: Can't find BULK OUT endpoint [ 89.385094][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 89.392924][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 89.399737][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 89.439771][ T6616] /dev/rnullb0: Can't lookup blockdev [ 89.448512][ T6601] siw: device registration error -23 [ 89.454150][ T6601] smc: removing ib device syz2 [ 89.491494][ T6615] infiniband syz0: set active [ 89.496225][ T5927] wlan1 speed is unknown, defaulting to 1000 [ 89.502326][ T6615] infiniband syz0: added wlan1 [ 89.557957][ T6615] RDS/IB: syz0: added [ 89.567131][ T6615] smc: adding ib device syz0 with port count 1 [ 89.584949][ T6615] smc: ib device syz0 port 1 has pnetid [ 89.607639][ T121] wlan1 speed is unknown, defaulting to 1000 [ 89.614327][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 89.866124][ T30] audit: type=1326 audit(1756736817.475:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz.0.190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f960ed8ebe9 code=0x0 [ 89.993408][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 90.252888][ T6631] netlink: 756 bytes leftover after parsing attributes in process `syz.2.200'. [ 90.265422][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 90.363798][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 90.434628][ T6615] wlan1 speed is unknown, defaulting to 1000 [ 90.552221][ T6637] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 90.569809][ T6637] /dev/rnullb0: Can't lookup blockdev [ 90.569809][ T6639] /dev/rnullb0: Can't lookup blockdev [ 90.900834][ T6649] Falling back ldisc for ptm1. [ 91.145965][ T6656] /dev/rnullb0: Can't open blockdev [ 91.214926][ T6671] mmap: syz.1.211 (6671) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.230211][ T30] audit: type=1804 audit(1756736818.845:3): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.211" name="rnullb0" dev="tmpfs" ino=232 res=1 errno=0 [ 91.345523][ T6679] netlink: 'syz.2.214': attribute type 9 has an invalid length. [ 91.367365][ T6679] netlink: 44 bytes leftover after parsing attributes in process `syz.2.214'. [ 91.437044][ T5927] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 91.566982][ T5927] usb 4-1: device descriptor read/64, error -71 [ 91.616954][ T5946] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 91.748653][ T5946] usb 3-1: device descriptor read/64, error -71 [ 91.808031][ T5927] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 91.825043][ T121] usb 1-1: USB disconnect, device number 15 [ 91.937368][ T5927] usb 4-1: device descriptor read/64, error -71 [ 91.991201][ T5946] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 92.048240][ T5927] usb usb4-port1: attempt power cycle [ 92.137078][ T5946] usb 3-1: device descriptor read/64, error -71 [ 92.259559][ T5946] usb usb3-port1: attempt power cycle [ 92.332531][ T5186] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 92.341970][ T6699] overlay: Unknown parameter 'fsuuid' [ 92.397285][ T5927] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 92.427667][ T5927] usb 4-1: device descriptor read/8, error -71 [ 92.627016][ T5946] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 92.650486][ T5946] usb 3-1: device descriptor read/8, error -71 [ 92.687332][ T5927] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 92.727739][ T5927] usb 4-1: device descriptor read/8, error -71 [ 92.837603][ T5927] usb usb4-port1: unable to enumerate USB device [ 92.906947][ T5946] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 92.928021][ T5946] usb 3-1: device descriptor read/8, error -71 [ 93.037207][ T5946] usb usb3-port1: unable to enumerate USB device [ 93.090178][ T6725] /dev/rnullb0: Can't lookup blockdev [ 93.678592][ T6743] netlink: 'syz.0.227': attribute type 10 has an invalid length. [ 93.686612][ T6743] macvlan1: entered allmulticast mode [ 93.695241][ T6743] veth1_vlan: entered allmulticast mode [ 93.703953][ T6743] team0: Port device macvlan1 added [ 94.330572][ T6749] netlink: 696 bytes leftover after parsing attributes in process `syz.3.228'. [ 94.558954][ T1161] Bluetooth: hci4: Frame reassembly failed (-84) [ 94.587023][ T5927] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 94.750477][ T5927] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 94.760645][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.770722][ T5927] usb 4-1: Product: syz [ 94.774947][ T5927] usb 4-1: Manufacturer: syz [ 94.779615][ T5927] usb 4-1: SerialNumber: syz [ 94.785094][ T5927] usb 4-1: config 0 descriptor?? [ 94.791552][ T5927] ch341 4-1:0.0: ch341-uart converter detected [ 94.993153][ T6749] 9p: Unknown parameter 'k' [ 95.145160][ T6758] misc userio: The device must be registered before sending interrupts [ 95.390215][ T5905] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 95.562702][ T5905] usb 3-1: config 9 has an invalid interface number: 237 but max is 2 [ 95.577995][ T5905] usb 3-1: config 9 has an invalid interface number: 197 but max is 2 [ 95.586212][ T5905] usb 3-1: config 9 has an invalid interface number: 5 but max is 2 [ 95.594732][ T5905] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 95.605012][ T5905] usb 3-1: config 9 has no interface number 0 [ 95.611268][ T5905] usb 3-1: config 9 has no interface number 1 [ 95.617463][ T5905] usb 3-1: config 9 has no interface number 2 [ 95.623712][ T5905] usb 3-1: config 9 interface 237 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 95.635127][ T5905] usb 3-1: config 9 interface 237 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 95.646387][ T5905] usb 3-1: config 9 interface 197 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 95.657637][ T5905] usb 3-1: config 9 interface 5 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 95.668421][ T5905] usb 3-1: config 9 interface 5 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 95.682329][ T5905] usb 3-1: config 9 interface 237 has no altsetting 0 [ 95.689420][ T5905] usb 3-1: config 9 interface 197 has no altsetting 0 [ 95.698769][ T5905] usb 3-1: New USB device found, idVendor=08f2, idProduct=00ce, bcdDevice=1a.90 [ 95.707938][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.715993][ T5905] usb 3-1: Product: syz [ 95.720718][ T5905] usb 3-1: Manufacturer: syz [ 95.725408][ T5905] usb 3-1: SerialNumber: syz [ 95.820032][ T5927] usb 4-1: failed to receive control message: -110 [ 95.827007][ T5927] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 95.957627][ T5905] usb 3-1: USB disconnect, device number 16 [ 96.505162][ T6763] nfs: Deprecated parameter 'intr' [ 96.511200][ T6763] /dev/rnullb0: Can't open blockdev [ 96.607082][ T5186] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 96.607185][ T5864] Bluetooth: hci4: command 0x1003 tx timeout [ 96.908045][ T6760] orangefs_mount: mount request failed with -4 [ 97.342229][ T5927] usb 4-1: USB disconnect, device number 20 [ 97.368870][ T5927] ch341 4-1:0.0: device disconnected [ 97.450354][ T6784] /dev/rnullb0: Can't open blockdev [ 97.578163][ T5186] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 98.626922][ T5927] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 98.776927][ T5927] usb 3-1: device descriptor read/64, error -71 [ 99.027233][ T5927] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 99.037569][ T30] audit: type=1804 audit(1756736826.655:4): pid=6809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.248" name="rnullb0" dev="tmpfs" ino=232 res=1 errno=0 [ 99.104561][ T5186] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 99.112103][ T5186] Bluetooth: Wrong link type (-22) [ 99.196912][ T5927] usb 3-1: device descriptor read/64, error -71 [ 99.208951][ T30] audit: type=1804 audit(1756736826.815:5): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.251" name="rnullb0" dev="tmpfs" ino=232 res=1 errno=0 [ 99.307168][ T5927] usb usb3-port1: attempt power cycle [ 99.327470][ T30] audit: type=1804 audit(1756736826.935:6): pid=6827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.253" name="rnullb0" dev="tmpfs" ino=232 res=1 errno=0 [ 99.449644][ T30] audit: type=1804 audit(1756736827.065:7): pid=6836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.256" name="rnullb0" dev="tmpfs" ino=232 res=1 errno=0 [ 99.477897][ T5946] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 99.647892][ T5927] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 99.648570][ T5946] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 99.667782][ T5927] usb 3-1: device descriptor read/8, error -71 [ 99.683611][ T5946] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 99.705596][ T5946] usb 4-1: config 220 interface 0 has no altsetting 0 [ 99.751053][ T5946] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 99.760439][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.778473][ T5946] usb 4-1: Product: syz [ 99.782773][ T5946] usb 4-1: Manufacturer: syz [ 99.791407][ T5946] usb 4-1: SerialNumber: syz [ 99.917051][ T5927] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 99.937831][ T5927] usb 3-1: device descriptor read/8, error -71 [ 100.047878][ T5927] usb usb3-port1: unable to enumerate USB device [ 100.073002][ T5946] uvcvideo 4-1:220.0: probe with driver uvcvideo failed with error -22 [ 100.087064][ T43] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 100.094641][ T5946] usb 4-1: USB disconnect, device number 21 [ 100.289606][ T43] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 100.299389][ T43] usb 1-1: config 0 has no interface number 0 [ 100.308025][ T43] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 100.317708][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.325738][ T43] usb 1-1: Product: syz [ 100.329955][ T43] usb 1-1: Manufacturer: syz [ 100.334544][ T43] usb 1-1: SerialNumber: syz [ 100.340492][ T43] usb 1-1: config 0 descriptor?? [ 100.529851][ T5946] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 100.688363][ T5946] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.699121][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 100.710886][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 100.722232][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 100.734053][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 100.744568][ T5946] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.760040][ T6845] loop6: detected capacity change from 0 to 7 [ 100.760275][ T5946] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 100.769023][ T6845] Dev loop6: unable to read RDB block 7 [ 100.776896][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.781329][ T6845] loop6: AHDI p1 [ 100.788950][ T5946] usb 4-1: Product: syz [ 100.788965][ T5946] usb 4-1: Manufacturer: syz [ 100.788977][ T5946] usb 4-1: SerialNumber: syz [ 100.790343][ T5946] usb 4-1: config 0 descriptor?? [ 100.795532][ T6845] loop6: partition table partially beyond EOD, [ 100.798454][ T6851] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 100.805647][ T6845] truncated [ 100.808438][ T5946] ati_remote 4-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 101.019061][ T6851] /dev/rnullb0: Can't open blockdev [ 101.025804][ T5905] usb 4-1: USB disconnect, device number 22 [ 101.216055][ T43] usb 1-1: non-Atmel transceiver xxxx1177 [ 101.418024][ T43] usb 1-1: Firmware: major: 144, minor: 75, hardware type: UNKNOWN (248) [ 101.622996][ T43] usb 1-1: failed to fetch extended address, random address set [ 101.631261][ T43] usb 1-1: atusb_probe: initialization failed, error = -524 [ 101.639667][ T43] atusb 1-1:0.128: probe with driver atusb failed with error -524 [ 101.649454][ T43] usb 1-1: USB disconnect, device number 16 [ 101.787102][ T5946] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 101.936982][ T5946] usb 3-1: Using ep0 maxpacket: 32 [ 101.943449][ T5946] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.955053][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 101.966234][ T5946] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.977463][ T5946] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 101.986513][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.995561][ T5946] usb 3-1: config 0 descriptor?? [ 102.001158][ T6854] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 102.009356][ T5946] hub 3-1:0.0: USB hub found [ 102.170370][ T6862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.265'. [ 102.353006][ T6868] /dev/rnullb0: Can't open blockdev [ 102.412562][ T6870] 9p: Unknown parameter 'k' [ 102.426623][ T6854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.458132][ T6854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.622800][ T6877] capability: warning: `syz.3.269' uses 32-bit capabilities (legacy support in use) [ 102.794210][ T5946] hub 3-1:0.0: config failed, hub has too many ports! (err -19) [ 103.091781][ T5946] usb 3-1: USB disconnect, device number 21 [ 103.249465][ T6894] /dev/rnullb0: Can't open blockdev [ 103.394646][ T6894] /dev/rnullb0: Can't open blockdev [ 103.486299][ T6903] netlink: 5 bytes leftover after parsing attributes in process `syz.0.278'. [ 104.169856][ T6933] /dev/rnullb0: Can't open blockdev [ 104.236655][ T6939] /dev/rnullb0: Can't open blockdev [ 104.265465][ T5946] IPVS: starting estimator thread 0... [ 104.288261][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 104.378010][ T6940] IPVS: using max 43 ests per chain, 103200 per kthread [ 104.477128][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 104.639070][ T9] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 104.648357][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.650601][ T6953] /dev/rnullb0: Can't open blockdev [ 104.658144][ T9] usb 3-1: config 0 descriptor?? [ 104.669517][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 105.075870][ T9] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 105.124088][ T6960] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 105.131247][ T6960] /dev/rnullb0: Can't open blockdev [ 105.219544][ T6966] sctp: [Deprecated]: syz.3.299 (pid 6966) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.219544][ T6966] Use struct sctp_sack_info instead [ 105.316791][ T30] audit: type=1804 audit(1756769600.923:8): pid=6971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.301" name="rnullb0" dev="tmpfs" ino=232 res=1 errno=0 [ 105.477208][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 105.483612][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 105.489675][ T121] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 105.497463][ T9] cpia1 3-1:0.0: unexpected systemstate: 00 [ 105.505584][ T9] usb 3-1: USB disconnect, device number 22 [ 105.646966][ T121] usb 4-1: device descriptor read/64, error -71 [ 105.897098][ T121] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 106.037570][ T121] usb 4-1: device descriptor read/64, error -71 [ 106.147239][ T121] usb usb4-port1: attempt power cycle [ 106.173975][ T6977] netlink: 60 bytes leftover after parsing attributes in process `syz.1.303'. [ 106.183928][ T6977] netlink: 'syz.1.303': attribute type 16 has an invalid length. [ 106.192622][ T6977] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.303'. [ 106.227007][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 106.287101][ T5186] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 106.287415][ T5864] Bluetooth: hci4: command 0x1003 tx timeout [ 106.376947][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 106.396506][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 109: 65, using maximum allowed: 30 [ 106.414223][ T9] usb 3-1: config 0 interface 0 altsetting 109 has 1 endpoint descriptor, different from the interface descriptor's value: 65 [ 106.432359][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 106.440313][ T9] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 106.451219][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.461497][ T9] usb 3-1: config 0 descriptor?? [ 106.487072][ T121] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 106.508693][ T121] usb 4-1: device descriptor read/8, error -71 [ 106.747073][ T121] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 106.780160][ T121] usb 4-1: device descriptor read/8, error -71 [ 106.874352][ T9] elecom 0003:056E:011C.0005: unknown main item tag 0x0 [ 106.885408][ T9] elecom 0003:056E:011C.0005: unknown main item tag 0x0 [ 106.893797][ T9] elecom 0003:056E:011C.0005: unknown main item tag 0x0 [ 106.904982][ T9] elecom 0003:056E:011C.0005: unknown main item tag 0x0 [ 106.906939][ T43] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 106.913035][ T121] usb usb4-port1: unable to enumerate USB device [ 106.928195][ T9] elecom 0003:056E:011C.0005: unknown main item tag 0x0 [ 106.944839][ T9] elecom 0003:056E:011C.0005: hidraw0: USB HID v0.05 Device [HID 056e:011c] on usb-dummy_hcd.2-1/input0 [ 106.947480][ T7001] /dev/rnullb0: Can't lookup blockdev [ 107.072350][ T43] usb 1-1: device descriptor read/64, error -71 [ 107.093764][ T9] usb 3-1: USB disconnect, device number 23 [ 107.211750][ T30] audit: type=1804 audit(1756769602.823:9): pid=7026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.315" name="rnullb0" dev="tmpfs" ino=232 res=1 errno=0 [ 107.231361][ C0] vkms_vblank_simulate: vblank timer overrun [ 107.337339][ T43] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 107.467552][ T43] usb 1-1: device descriptor read/64, error -71 [ 107.577304][ T43] usb usb1-port1: attempt power cycle [ 107.612219][ T7029] /dev/rnullb0: Can't open blockdev [ 107.775921][ T7037] tipc: Enabling of bearer rejected, failed to enable media [ 107.787001][ T7037] tipc: Started in network mode [ 107.791888][ T7037] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 107.801064][ T7037] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 107.809588][ T7037] tipc: Enabled bearer , priority 10 [ 107.861650][ T7041] CIFS: iocharset name too long [ 107.906983][ T5927] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 107.918553][ T43] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 107.949298][ T43] usb 1-1: device descriptor read/8, error -71 [ 108.058598][ T5927] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 108.067870][ T5927] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 108.076746][ T5927] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 108.087506][ T5927] usb 3-1: config 220 has no interface number 2 [ 108.093800][ T5927] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 108.107278][ T5927] usb 3-1: config 220 interface 0 has no altsetting 0 [ 108.114063][ T5927] usb 3-1: config 220 interface 76 has no altsetting 0 [ 108.121273][ T5927] usb 3-1: config 220 interface 1 has no altsetting 0 [ 108.130511][ T5927] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 108.139965][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.148305][ T5927] usb 3-1: Product: syz [ 108.152534][ T5927] usb 3-1: Manufacturer: syz [ 108.157517][ T5927] usb 3-1: SerialNumber: syz [ 108.187011][ T43] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 108.207563][ T43] usb 1-1: device descriptor read/8, error -71 [ 108.245355][ T7055] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 108.252410][ T7055] /dev/rnullb0: Can't open blockdev [ 108.459118][ T43] usb usb1-port1: unable to enumerate USB device [ 108.487331][ T5927] usb 3-1: selecting invalid altsetting 0 [ 108.493177][ T5927] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 108.513444][ T5927] usb 3-1: No valid video chain found. [ 108.534971][ T5927] usb 3-1: selecting invalid altsetting 0 [ 108.547413][ T5927] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 108.572545][ T5927] usb 3-1: USB disconnect, device number 24 [ 108.916626][ T7065] netlink: 'syz.1.330': attribute type 6 has an invalid length. [ 108.927201][ T121] tipc: Node number set to 1 [ 108.934578][ T7065] fuse: Unknown parameter '184467440737095516150x0000000000000007' [ 109.069347][ T7070] /dev/rnullb0: Can't open blockdev [ 109.096564][ T7070] /dev/rnullb0: Can't open blockdev [ 109.457154][ T9] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 109.618940][ T9] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 109.628968][ T9] usb 3-1: config 0 has no interface number 0 [ 109.635146][ T9] usb 3-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 109.647492][ T9] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.670227][ T9] usb 3-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.683539][ T9] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 109.697311][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.714546][ T9] usb 3-1: config 0 descriptor?? [ 109.724429][ T9] cxacru 3-1:0.109: cxacru_bind: interface has incorrect endpoints [ 109.733908][ T9] cxacru 3-1:0.109: usbatm_usb_probe: bind failed: -19! [ 110.021005][ T9] usb 3-1: USB disconnect, device number 25 [ 110.180133][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 110.197822][ T7095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 110.272300][ T7100] ceph: Path missing in source [ 110.526922][ T121] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 110.696958][ T121] usb 4-1: Using ep0 maxpacket: 32 [ 110.704053][ T121] usb 4-1: config 127 has an invalid interface number: 138 but max is 2 [ 110.712447][ T121] usb 4-1: config 127 has an invalid interface number: 202 but max is 2 [ 110.721221][ T121] usb 4-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 110.731567][ T121] usb 4-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 110.740468][ T121] usb 4-1: config 127 has an invalid interface number: 93 but max is 2 [ 110.748930][ T121] usb 4-1: config 127 contains an unexpected descriptor of type 0x2, skipping [ 110.757848][ T121] usb 4-1: config 127 contains an unexpected descriptor of type 0x1, skipping [ 110.766945][ T121] usb 4-1: config 127 has no interface number 0 [ 110.773197][ T121] usb 4-1: config 127 has no interface number 1 [ 110.779553][ T121] usb 4-1: config 127 has no interface number 2 [ 110.785930][ T121] usb 4-1: config 127 interface 138 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 110.799236][ T121] usb 4-1: config 127 interface 138 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.810382][ T121] usb 4-1: config 127 interface 202 altsetting 7 endpoint 0x3 has invalid maxpacket 1048, setting to 64 [ 110.821545][ T121] usb 4-1: config 127 interface 202 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 110.833071][ T121] usb 4-1: config 127 interface 202 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 110.844180][ T121] usb 4-1: config 127 interface 202 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 110.855325][ T121] usb 4-1: config 127 interface 202 altsetting 7 endpoint 0x9 has an invalid bInterval 250, changing to 7 [ 110.866757][ T121] usb 4-1: config 127 interface 202 altsetting 7 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 110.877931][ T121] usb 4-1: config 127 interface 202 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 110.889088][ T121] usb 4-1: config 127 interface 202 altsetting 7 has an endpoint descriptor with address 0x64, changing to 0x4 [ 110.901010][ T121] usb 4-1: config 127 interface 202 altsetting 7 endpoint 0x4 has invalid maxpacket 52741, setting to 64 [ 110.912281][ T121] usb 4-1: config 127 interface 202 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 110.923378][ T121] usb 4-1: config 127 interface 202 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 110.935028][ T121] usb 4-1: config 127 interface 202 altsetting 7 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 110.948848][ T121] usb 4-1: config 127 interface 93 altsetting 3 bulk endpoint 0xD has invalid maxpacket 16 [ 110.958969][ T121] usb 4-1: config 127 interface 93 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 110.969920][ T121] usb 4-1: config 127 interface 93 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 110.980792][ T121] usb 4-1: config 127 interface 93 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 110.991595][ T121] usb 4-1: config 127 interface 93 altsetting 3 has an endpoint descriptor with address 0x14, changing to 0x4 [ 111.003250][ T121] usb 4-1: config 127 interface 93 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 111.014123][ T121] usb 4-1: config 127 interface 93 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 111.024935][ T121] usb 4-1: config 127 interface 93 altsetting 3 has a duplicate endpoint with address 0x5, skipping [ 111.036268][ T121] usb 4-1: config 127 interface 93 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 111.047094][ T121] usb 4-1: config 127 interface 202 has no altsetting 0 [ 111.054043][ T121] usb 4-1: config 127 interface 93 has no altsetting 0 [ 111.062882][ T121] usb 4-1: New USB device found, idVendor=046d, idProduct=08a3, bcdDevice=88.05 [ 111.072030][ T121] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.080124][ T121] usb 4-1: Product: А [ 111.084241][ T121] usb 4-1: Manufacturer: ం [ 111.089138][ T121] usb 4-1: SerialNumber: ︯缹㚱↱擦믕몷췑ꉛ몟⑳풄솒겫ꯒᄱ㋚覗펮ᤵ甕݅⻼睖㻕埨㔘쟡閵⚢兌猹愪컵 [ 111.519399][ T121] usb 4-1: USB disconnect, device number 27 [ 111.994098][ T7113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.344'. [ 112.141323][ T30] audit: type=1800 audit(1756769607.753:10): pid=7113 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.344" name="rnullb0" dev="tmpfs" ino=232 res=0 errno=0 [ 112.248857][ T7118] MTD: Couldn't look up '/dev/rnullb0': -15 [ 112.429822][ T30] audit: type=1800 audit(1756769608.043:11): pid=7132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.350" name="rnullb0" dev="tmpfs" ino=232 res=0 errno=0 [ 112.514374][ T7137] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 112.541608][ T7137] CIFS mount error: No usable UNC path provided in device string! [ 112.541608][ T7137] [ 112.552095][ T7137] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 112.600121][ T7142] 9p: Bad value for 'rfdno' [ 112.828227][ T7163] overlayfs: failed to clone upperpath [ 113.016998][ T5927] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 113.170904][ T5927] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 113.180334][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.189566][ T5927] usb 1-1: Product: syz [ 113.193756][ T5927] usb 1-1: Manufacturer: syz [ 113.198502][ T5927] usb 1-1: SerialNumber: syz [ 113.204330][ T5927] usb 1-1: config 0 descriptor?? [ 113.388066][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 113.410937][ T5927] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 113.546950][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 113.553593][ T9] usb 4-1: config 0 has an invalid interface number: 227 but max is 0 [ 113.562232][ T9] usb 4-1: config 0 has no interface number 0 [ 113.568587][ T9] usb 4-1: config 0 interface 227 has no altsetting 0 [ 113.577663][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice=28.6b [ 113.586824][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.595420][ T9] usb 4-1: Product: syz [ 113.599653][ T9] usb 4-1: Manufacturer: syz [ 113.604297][ T9] usb 4-1: SerialNumber: syz [ 113.610927][ T9] usb 4-1: config 0 descriptor?? [ 113.619051][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.227/input/input6 [ 113.819258][ T7170] /dev/rnullb0: Can't open blockdev [ 113.825932][ T5220] bcm5974 4-1:0.227: could not read from device [ 113.833370][ T5220] bcm5974 4-1:0.227: could not read from device [ 113.841581][ T9] usb 4-1: USB disconnect, device number 28 [ 113.849891][ T5220] bcm5974 4-1:0.227: could not read from device [ 113.888180][ T6178] udevd[6178]: Error opening device "/dev/input/event4": No such file or directory [ 113.903913][ T6178] udevd[6178]: Unable to EVIOCGABS device "/dev/input/event4" [ 113.915505][ T6178] udevd[6178]: Unable to EVIOCGABS device "/dev/input/event4" [ 113.924308][ T6178] udevd[6178]: Unable to EVIOCGABS device "/dev/input/event4" [ 113.934711][ T6178] udevd[6178]: Unable to EVIOCGABS device "/dev/input/event4" [ 114.052632][ T7189] netlink: 244 bytes leftover after parsing attributes in process `syz.2.370'. [ 114.217158][ T7155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.358'. [ 114.238358][ T7155] /dev/rnullb0: Can't open blockdev [ 114.272625][ T5927] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 114.290008][ T5927] usb 1-1: USB disconnect, device number 21 [ 114.499214][ T7204] /dev/rnullb0: Can't open blockdev [ 115.474874][ T30] audit: type=1804 audit(1756769611.083:12): pid=7243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.388" name="rnullb0" dev="tmpfs" ino=232 res=1 errno=0 [ 115.827148][ T5946] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 115.986916][ T5946] usb 4-1: Using ep0 maxpacket: 32 [ 115.993354][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.004782][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.014811][ T5946] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 116.024269][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.034849][ T5946] usb 4-1: config 0 descriptor?? [ 116.172130][ T7256] rdma_rxe: rxe_newlink: failed to add wlan1 [ 116.201861][ T7256] /dev/rnullb0: Can't open blockdev [ 116.729759][ T7250] ------------[ cut here ]------------ [ 116.747089][ T7250] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 116.763890][ T7250] shift exponent 32 is too large for 32-bit type 'int' [ 116.778277][ T7250] CPU: 1 UID: 0 PID: 7250 Comm: syz.3.391 Not tainted syzkaller #0 PREEMPT(full) [ 116.778302][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.778316][ T7250] Call Trace: [ 116.778322][ T7250] [ 116.778329][ T7250] dump_stack_lvl+0x189/0x250 [ 116.778361][ T7250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.778380][ T7250] ? __pfx__printk+0x10/0x10 [ 116.778403][ T7250] ubsan_epilogue+0xa/0x40 [ 116.778421][ T7250] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 116.778445][ T7250] ? __pfx_v9fs_set_super+0x10/0x10 [ 116.778465][ T7250] v9fs_get_tree+0x957/0xa90 [ 116.778485][ T7250] ? __pfx_v9fs_get_tree+0x10/0x10 [ 116.778507][ T7250] vfs_get_tree+0x8f/0x2b0 [ 116.778524][ T7250] do_new_mount+0x2a2/0xa30 [ 116.778542][ T7250] ? ns_capable+0x8a/0xf0 [ 116.778581][ T7250] ? __pfx_do_new_mount+0x10/0x10 [ 116.778597][ T7250] ? path_mount+0x61c/0xfe0 [ 116.778613][ T7250] ? user_path_at+0x44/0x60 [ 116.778638][ T7250] __se_sys_mount+0x317/0x410 [ 116.778659][ T7250] ? __pfx___se_sys_mount+0x10/0x10 [ 116.778679][ T7250] ? rcu_is_watching+0x15/0xb0 [ 116.778696][ T7250] ? __x64_sys_mount+0x20/0xc0 [ 116.778726][ T7250] do_syscall_64+0xfa/0xfa0 [ 116.778748][ T7250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.778765][ T7250] ? clear_bhb_loop+0x60/0xb0 [ 116.778783][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.778799][ T7250] RIP: 0033:0x7fce7c78ebe9 [ 116.778814][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.778835][ T7250] RSP: 002b:00007fce7d63d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 116.778854][ T7250] RAX: ffffffffffffffda RBX: 00007fce7c9c5fa0 RCX: 00007fce7c78ebe9 [ 116.778866][ T7250] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 116.778878][ T7250] RBP: 00007fce7c811e19 R08: 0000200000000480 R09: 0000000000000000 [ 116.778888][ T7250] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000000 [ 116.778898][ T7250] R13: 00007fce7c9c6038 R14: 00007fce7c9c5fa0 R15: 00007ffdd3c344c8 [ 116.778914][ T7250] [ 116.778920][ T7250] ---[ end trace ]--- [ 116.913364][ T7267] netlink: 56 bytes leftover after parsing attributes in process `syz.2.396'. [ 116.956903][ T7250] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 116.956923][ T7250] CPU: 1 UID: 0 PID: 7250 Comm: syz.3.391 Not tainted syzkaller #0 PREEMPT(full) [ 116.956944][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.956955][ T7250] Call Trace: [ 116.956964][ T7250] [ 116.956971][ T7250] dump_stack_lvl+0x99/0x250 [ 116.957000][ T7250] ? __asan_memcpy+0x40/0x70 [ 116.957022][ T7250] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.957044][ T7250] ? __pfx__printk+0x10/0x10 [ 116.957067][ T7250] vpanic+0x281/0x750 [ 116.957086][ T7250] ? __pfx_vpanic+0x10/0x10 [ 116.957106][ T7250] panic+0xb9/0xc0 [ 116.957122][ T7250] ? __pfx_panic+0x10/0x10 [ 116.957141][ T7250] ? __pfx__printk+0x10/0x10 [ 116.957165][ T7250] check_panic_on_warn+0x89/0xb0 [ 116.957188][ T7250] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 116.957213][ T7250] ? __pfx_v9fs_set_super+0x10/0x10 [ 116.957232][ T7250] v9fs_get_tree+0x957/0xa90 [ 117.098736][ T7250] ? __pfx_v9fs_get_tree+0x10/0x10 [ 117.103851][ T7250] vfs_get_tree+0x8f/0x2b0 [ 117.108258][ T7250] do_new_mount+0x2a2/0xa30 [ 117.112754][ T7250] ? ns_capable+0x8a/0xf0 [ 117.117072][ T7250] ? __pfx_do_new_mount+0x10/0x10 [ 117.122084][ T7250] ? path_mount+0x61c/0xfe0 [ 117.126571][ T7250] ? user_path_at+0x44/0x60 [ 117.131070][ T7250] __se_sys_mount+0x317/0x410 [ 117.135740][ T7250] ? __pfx___se_sys_mount+0x10/0x10 [ 117.140931][ T7250] ? rcu_is_watching+0x15/0xb0 [ 117.145721][ T7250] ? __x64_sys_mount+0x20/0xc0 [ 117.150476][ T7250] do_syscall_64+0xfa/0xfa0 [ 117.155064][ T7250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.161116][ T7250] ? clear_bhb_loop+0x60/0xb0 [ 117.165807][ T7250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.171687][ T7250] RIP: 0033:0x7fce7c78ebe9 [ 117.176106][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.195702][ T7250] RSP: 002b:00007fce7d63d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 117.204114][ T7250] RAX: ffffffffffffffda RBX: 00007fce7c9c5fa0 RCX: 00007fce7c78ebe9 [ 117.212131][ T7250] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 117.220106][ T7250] RBP: 00007fce7c811e19 R08: 0000200000000480 R09: 0000000000000000 [ 117.228095][ T7250] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000000 [ 117.236054][ T7250] R13: 00007fce7c9c6038 R14: 00007fce7c9c5fa0 R15: 00007ffdd3c344c8 [ 117.244027][ T7250] [ 117.247384][ T7250] Kernel Offset: disabled [ 117.251710][ T7250] Rebooting in 86400 seconds..