last executing test programs: 4m28.689285615s ago: executing program 1 (id=324): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) read(r2, 0x0, 0x0) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000000c0)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000002000), 0x0, 0x0) (async) read(r2, 0x0, 0x0) (async) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f00000000c0)) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendfile(r1, r0, 0x0, 0x7ffff000) (async) 4m28.482580042s ago: executing program 1 (id=325): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64a00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64a00, 0x0) sigaltstack(&(0x7f0000002180)={&(0x7f0000001180)=""/4096, 0x1, 0x1000}, 0x0) sigaltstack(0x0, &(0x7f00000001c0)={0x0}) (async) sigaltstack(0x0, &(0x7f00000001c0)={0x0}) r1 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r1, 0x0, r1, 0x0, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006840)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r3, @ANYBLOB="050200000020000000000f00000008000300", @ANYRES32, @ANYBLOB="52000e0080000000080211000001ffffffffffff08021100000100000000000000000000dbd67f5d0301b804060b2e000103002a01022d1a1000190900040000000000c90007001900000008030b0000000400003c000e8004"], 0xc4}}, 0x0) preadv(r2, &(0x7f0000000140)=[{&(0x7f0000000080)=""/112, 0x70}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000480)=""/197, 0xc5}], 0x3, 0x2, 0x5) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x105) socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r8, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) bind$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20) (async) connect$l2tp6(r6, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x6, 0x4}, 0x20) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000000)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000440)="aa1d484e243103000000f7c08bfcd111fbdf23ea32db0e8f21d5bc27bd8063067a0689fff2a41cfbf0e9", 0x2a}], 0x2) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) r9 = getpid() syz_pidfd_open(r9, 0x0) syz_open_procfs$pagemap(r9, &(0x7f0000000000)) (async) syz_open_procfs$pagemap(r9, &(0x7f0000000000)) 4m28.16593215s ago: executing program 1 (id=326): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) socket$xdp(0x2c, 0x3, 0x0) (async) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r1, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x4a58c000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 4m27.972042398s ago: executing program 1 (id=328): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x3820099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x111016, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x8) ioctl$KVM_MEMORY_ENCRYPT_REG_REGION(r1, 0x8010aebb, &(0x7f00000000c0)={0x1, 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) r5 = socket$inet6(0xa, 0x3, 0x3c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111, 0x6}}, 0x20) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x0, @remote, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r6 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000200)={0x2, @sdr={0xb5315241, 0x8114}}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000002, 0x22052, r3, 0x5708e000) 4m22.933475885s ago: executing program 1 (id=354): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi5\x00', 0x18b000, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8000) syz_open_dev$tty1(0xc, 0x4, 0x3) sendfile(r0, r1, 0x0, 0x2fe3) 4m22.548433331s ago: executing program 1 (id=359): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000011c0), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000558000/0x1000)=nil, 0x1000, 0x2, 0x1050, r2, 0x6da43000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000140)=0x7fffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x89, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)={0x5, 0x1, 0x0, [{0x0, 0x4, 0x28000, 0x8b, 0x7, 0xa, 0x5, '\x00', 0x800}]}) ioctl$SNDCTL_SEQ_GETTIME(r4, 0x80045113, &(0x7f0000000080)) 4m22.404444854s ago: executing program 32 (id=359): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000011c0), 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000558000/0x1000)=nil, 0x1000, 0x2, 0x1050, r2, 0x6da43000) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000140)=0x7fffffff) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = dup(r3) getsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x89, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f00000000c0)={0x5, 0x1, 0x0, [{0x0, 0x4, 0x28000, 0x8b, 0x7, 0xa, 0x5, '\x00', 0x800}]}) ioctl$SNDCTL_SEQ_GETTIME(r4, 0x80045113, &(0x7f0000000080)) 2m49.842920627s ago: executing program 2 (id=968): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbb9, 0x12, r0, 0xebe1b000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f00000006c0)={{0x12, 0x1, 0x89cdf1a0a2f05e17, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0xf8, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7, 0x2, 0x1}, {0x6, 0x24, 0x1a, 0x7, 0x2}}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x3, 0x5, 0x7f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x5, 0x3, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0x7, 0x1}}}}}}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0xf, &(0x7f0000000780)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x0, 0x4, 0x10}]}, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000300)=0x30, 0x1) 2m46.80838575s ago: executing program 2 (id=980): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) (async) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236cd1f8d50f2568ac466a6d40024f87588cbe7808c481b157f18acb07cee62b1d238ba704435ee1c055697eb1ee0e2cfa36d2efbf1ac9fa85fe4", 0xfdae}], 0x1) 2m46.734210957s ago: executing program 2 (id=981): prlimit64(0x0, 0x9, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x4) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./bus\x00') ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) io_setup(0x6, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200407fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000011c0)="93bffce623851797a8dc79018d7716840ffc6949c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c3522fff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041afc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b", 0x8d}, {&(0x7f00000007c0)="02999344565d9c61d3bb8cf353fd63c588ffa39f0ff0fced20927ea4b2a247d0822475", 0x23}, {&(0x7f0000000f00)="ec75d081fcb70000000000000000bb6a38b0c57cc7", 0x15}], 0x3}}], 0x1, 0x20008000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r3, 0x20, 0x70bd26, 0x25dfdbff, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x4000004) shutdown(r2, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m46.679717653s ago: executing program 2 (id=982): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000540)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x84}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$poke(0x5, r4, &(0x7f0000000080), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 2m46.394217745s ago: executing program 2 (id=984): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r1 = gettid() (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 32) listen(r3, 0x4) (rerun: 32) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) (async) sendmmsg$inet6(r2, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='j', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000100)={0x0, 0xcb, 0x6}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) (async) r4 = syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000040)={0xfffffffffffffffc, 0x4c000000, 0x0, {[0x8000000000005a]}}, 0x0, 0x8, &(0x7f00000001c0)) tkill(r1, 0x1b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x59327139ae2673af, 0x12, r0, 0x57789000) (async) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x80800) mmap$snddsp(&(0x7f000028e000/0x1000)=nil, 0x1000, 0x9, 0x10010, r5, 0x2000) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') (async) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000500), 0x101, 0x0) ioctl$SNDCTL_SEQ_PANIC(r7, 0x5111) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async, rerun: 32) syz_open_procfs(r4, &(0x7f00000000c0)='net/psched\x00') (async, rerun: 32) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (rerun: 32) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) (async, rerun: 32) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000000)="baa100ecb8e5008ed8643ef367640f09ba400066ed67ad640f350fae56e40fc76df70fc775bcb818008ee0", 0x2b}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async, rerun: 64) write$uinput_user_dev(r6, &(0x7f0000000540)={'syz0\x00', {0xffff, 0x347, 0x6}, 0xc, [0xe, 0x5, 0x47d5ffa4, 0xffffffff, 0x0, 0x3, 0x5, 0x9, 0x8, 0x8, 0x6000, 0x60000000, 0x5, 0xffffff79, 0x0, 0xfffffe01, 0x1000, 0x0, 0x452, 0x30000000, 0x4, 0x18, 0xa00, 0xc36, 0x8, 0x800, 0xdda, 0xf18, 0x1, 0x2, 0xfffff295, 0x8, 0x8, 0x9, 0xffff7fff, 0x8000, 0x7, 0xfffffffc, 0x10001, 0x3, 0x7, 0xfffffffe, 0x7fff, 0x9, 0x1000, 0x0, 0x501, 0x7, 0x0, 0x5, 0x7, 0x8000, 0x1, 0x723b, 0xd, 0x9, 0x734443fe, 0x0, 0x0, 0x10000, 0xbb87, 0x4bec, 0x5, 0x401], [0xf62, 0x7, 0x9, 0x9, 0x400, 0xfffff850, 0x5942, 0x40000000, 0x10640395, 0x8, 0x0, 0xffffffff, 0xf0, 0x5, 0x8cb4, 0x8, 0x7, 0xe0, 0x1, 0x74b, 0x8, 0x8, 0x1, 0x77, 0xf5, 0x28ba, 0xffff, 0x2, 0x0, 0x8001, 0x3, 0x9, 0x5, 0x1, 0x9, 0x3, 0xdf, 0x2, 0xb033, 0x8, 0x0, 0x80, 0x8, 0x8, 0xffffff7f, 0x4, 0x7, 0xffff, 0x9, 0xfffffffa, 0x6, 0x92, 0x1ff, 0x5, 0x9, 0x93e, 0x80000001, 0x2, 0x1, 0x8001, 0xffffffd5, 0x5, 0x2ff0aa8c, 0x3], [0x1, 0xe, 0xd9, 0x10001, 0x3b2, 0x800, 0x9, 0x5, 0xff, 0x400, 0x6, 0x5, 0x10001, 0xa0d, 0x8, 0xffffffc0, 0x3ee3, 0x91c, 0x2, 0x9, 0x5c25, 0x2, 0x9ba, 0x4, 0x7, 0x33f3, 0x101, 0x4a8, 0x2, 0xffffff7f, 0x10, 0x3, 0x5, 0x7, 0x6, 0x200, 0x38000, 0x0, 0x4, 0x7, 0x8, 0xe, 0x1ff, 0x6, 0x3, 0x6, 0x3dc, 0xffffffff, 0x7, 0x101, 0xb4, 0xfff, 0xbc, 0x800, 0x776b, 0x4, 0x9, 0x7fff, 0x2, 0x101, 0x80, 0xd2, 0x6, 0x9], [0x0, 0x4, 0x3, 0xfa, 0xe000000, 0x5, 0x3, 0xa, 0x5d0a, 0x9, 0xffff, 0x9, 0x4, 0x1, 0x9b8, 0x34b, 0xfffffffe, 0x6e, 0xfffffff8, 0x6, 0x3, 0x3, 0x5, 0x7, 0xffff, 0xd0, 0x8, 0x0, 0x101, 0xac2, 0x10, 0xe949, 0x8000, 0x6, 0xf, 0x0, 0x8, 0x7fff, 0xdfe, 0xc0000000, 0x1, 0x7, 0x3, 0x3, 0x0, 0x8, 0xa52, 0x9, 0x5, 0x200000, 0x401, 0x419, 0x4, 0x5, 0x8, 0xd, 0x4, 0x100, 0xff, 0x7, 0xa2, 0x350, 0x7f, 0x72cd]}, 0x45c) (rerun: 64) 2m46.086238304s ago: executing program 2 (id=987): mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) fadvise64(r0, 0x80, 0x10001, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x800) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5, 0x3}}, './cgroup\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f00000000c0)=0x1) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0xe4, 0x0, 0x0, 0x0, 0x2}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 2m45.952259808s ago: executing program 33 (id=987): mmap(&(0x7f0000202000/0x2000)=nil, 0x2000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x55b23000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) fadvise64(r0, 0x80, 0x10001, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040), 0x1, 0x800) ioctl$MON_IOCX_GETX(r1, 0x4018920a, &(0x7f0000000200)={0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5, 0x3}}, './cgroup\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ppoll(&(0x7f0000000680)=[{r2, 0x100}], 0x1, 0x0, 0x0, 0x0) ioctl$IMDELTIMER(r2, 0x80044941, &(0x7f00000000c0)=0x1) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000080)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000040)=[{}], 0xb3c, 0xe4, 0x0, 0x0, 0x0, 0x2}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 1m26.196442592s ago: executing program 4 (id=1584): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x11, {{0x29, 0x0, 0x4000000, @local}}}, 0x88) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000dc0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r4, 0xc02c563a, &(0x7f0000001040)={0x8}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000300)=0x401) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x5, 0x0, 0x8}]}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e05, @empty}}, 0x5, 0x3, 0xeff, 0x0, 0x6, 0x1, 0x5}, 0x9c) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000000)=0x80000) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@any, 0x7fffffff}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000001700)={@local, 0x2}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x10f6ff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0xffffffffffffffc9, 0x18, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x2c004880}, 0x10000030) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) mmap(&(0x7f0000a7a000/0x4000)=nil, 0x4000, 0x3000000, 0x4010, r0, 0xa4717000) 1m25.320838858s ago: executing program 4 (id=1587): creat(&(0x7f0000000080)='./file0\x00', 0xac) prlimit64(0x0, 0x9, &(0x7f0000000000)={0xffffffffffffffdb, 0xfffffffffffffffb}, 0x0) brk(0x689d80000000) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 1m25.15829901s ago: executing program 4 (id=1588): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000001280)=@attr_irq_timer={0x0, 0x1, 0x0, &(0x7f0000000000)=0x1e}) 1m25.022705151s ago: executing program 4 (id=1589): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="3900000014008144f2003c00e9ff008311001f9f640fcf066505acb612f6b8bf44ebb392175f39dbb7d5cac0040071c2ed5453b0e921550000", 0x39}], 0x1}, 0x4000000) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x73) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bdev\x00', 0x8000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f0000001640)=""/139, &(0x7f0000000100)=0x8) tee(r1, r1, 0x1, 0x2) (async) tee(r1, r1, 0x1, 0x2) 1m24.956409299s ago: executing program 4 (id=1590): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_bulk={0x3, {0x8}, 0xffffff02, 0xa2, &(0x7f0000000180)="1cfa2cb10e077a4e72b897da57152ff76be547aaa26c50a43a287d4ffd17288d15cf591d1e6096a6ca549bc2e4682ef43255ed20fc1b39dd179f9f09d3b261ebca6db19407531000c77d721d61f12b34257e53358bc5a8209bcaab97187272419273fbde37f9a23852239ef4ea58d05c8c11c2ce145f8ee2b7ac19c0f2213442ab38e8f4640a19220777a037759821cb64fbff473695eec0c949c2cbfe7b54307a5c825dcd3ded63463059c71edd800457b400dc42f9c847d6d603aeea9f40803b18b5db8d44aece4bbbf92467fe07e00dc324e389462dff8f2e316bc41fd8bfdd51a991a8c49a209bd9cf26e1c4539819", 0xf1, 0xd, 0x5, 0xfffffffd, 0x82f6, 0x8000, &(0x7f00000002c0)="2657d0de3e6b9bf8af3ac3b69cfda66b6462355a4dff7535ab3bf01e3d6f04fa495fc3c601df71a94650a641c3bea7286700eec88610bbc4840a312f4ed5933bf112498c8e3475184bf96ebcb0489fc95749c3a827b4d9c760d609be4b4f73b01876533700ac853606f99d12e3b4c16a405ffaf7037c1f78945d8ff3b331cbcf86e2ef8c05a44e9d5bf1031fd82036efeb16e334fee465327a5b91961b1cba2fd69d325c1d1241054f13595b86eb1068b3d6e08bbb24febfd591e7e89b545aa176c0977438"}) r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x10) r4 = open$dir(&(0x7f00000003c0)='./file2\x00', 0x2c0e00, 0x32) mknodat(r4, &(0x7f00000000c0)='./file2\x00', 0x8000, 0xffffffff) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x8004510a, &(0x7f0000000080)) r5 = fsopen(&(0x7f0000000140)='tracefs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1101, 0x0) clock_settime(0xfffffffb, &(0x7f0000000280)={0x0, 0x989680}) 1m24.830235841s ago: executing program 4 (id=1591): munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x0, 0x20}, 0x4c005) prctl$PR_SET_THP_DISABLE(0x44, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4008af00, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f000) 23.816591636s ago: executing program 34 (id=1591): munmap(&(0x7f0000012000/0x4000)=nil, 0x4000) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}, 0x1, 0x0, 0x0, 0x20}, 0x4c005) prctl$PR_SET_THP_DISABLE(0x44, 0x4) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4008af00, &(0x7f0000000040)) write(0xffffffffffffffff, &(0x7f0000000400)="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", 0x1f000) 5.943306332s ago: executing program 5 (id=1741): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='rdma.current\x00', 0x0, 0x0) 4.826115499s ago: executing program 5 (id=1746): add_key(0x0, 0x0, &(0x7f00000000c0)="df21f0a6dbb1b350a5b5f9e27b2508088feb", 0x12, 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000100000000000000"]) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000dc0)=ANY=[@ANYBLOB='#']) 4.395864485s ago: executing program 5 (id=1748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) 4.323183641s ago: executing program 5 (id=1749): r0 = openat$audio1(0xffffff9c, &(0x7f0000000000), 0x707700, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x5) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000002c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000d40)={&(0x7f0000000100)={0x50, 0x0, 0x9, {0x7, 0x2b, 0x80000000, 0x200000, 0x1200, 0x8, 0x6, 0xda, 0x0, 0x0, 0x4, 0xcfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x101081, 0x11e) fcntl$lock(r3, 0x7, &(0x7f0000000200)={0x1}) 3.935941357s ago: executing program 6 (id=1750): syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x52, 0x91, 0xd2, 0x10, 0xa07, 0x64, 0xbc24, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x4, 0xd0, 0x3, [{{0x9, 0x4, 0x1, 0xa, 0x2, 0xdf, 0x8a, 0x22, 0x62, [], [{{0x9, 0x5, 0xd, 0x3, 0x200, 0xa, 0x9, 0x2}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xd, 0x6, 0x6}}]}}]}}]}}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) 3.401930305s ago: executing program 0 (id=1755): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000e80)="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", 0x266}, {&(0x7f0000000580)="1eac4d20f8509e8f36d2842c8fae7bbe58c5bf73985d5106bf5b5e7e5761716e35b468ea79633c916c4a8026f9408d0558de77df67c0e6fd0b1b3da5de5d003382ac95eade5dadad870ce3749452d2c1c3651ffff244be3078fdbfeb97d093bbbe0131e733d91c4ad38e7b52aa7afa9cb8e2351bd3f8a7a2a0425b071f6790992b8c2a51d964b0161c1856697820eb52f55c97fcdc19c2ef7c66ccc23c77a28a34b216c429444343ea056f171399dc03d56a1131ba74d31fc1012d3deff0e43309fc9e3b88bec90a7680aa74ccd581e02eb436a0009fa62097513d0c9533256d81978fae39288edcb833739d2988ccf5a564bc00edd1ab0853b873cbab3ef227f11325d72dbe2f435351610d09d0f74e180df6eaa94651336e7713414e49956fcb68a973e8239e343684255efba0d1b149b22c2d81f1ac5eaccaab01ab108178e97eb8a45d5d6cdeca0d6b9af9f88cfee58935be6902ac7c6915d60548367d164990b142d472b9b5700191b1f978fbe071de646385", 0x175}, {&(0x7f0000000740)="266a546475688763b44d30a862bc689d0b1d020dbb8656767fbd1d91637fccf4e308ae461b2548ba45299eb42928ff4ee493318ef9f71739a3f86f5193e556e085fc8c4793ffc8395e70ba93fd9e9d5f5413437784f92bb0128a9756b1c9b87c36cfe56c02568995726f7538f9ed3095531590839a2be05cf75ab02f51372bbc48c81b0283ffac37f28926e0a20a01d3ae06d03acc7095428e97af0141e80215b0823f76efad", 0xa6}], 0x3, 0x0, 0x0, 0x4090}, 0x0) sendmsg$alg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) read$alg(r0, &(0x7f0000003780)=""/4096, 0x1000) sendto$ax25(r0, 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000100)='.\x00', &(0x7f0000000000)='iso9660\x00', 0x1000080, 0x0) 2.654217583s ago: executing program 6 (id=1760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={'crc32c\x00'}}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2.550800059s ago: executing program 0 (id=1761): syz_usb_connect(0x5, 0x24, &(0x7f0000019080)=ANY=[@ANYBLOB="1201000079db8540da0b77010b7d000000010902120001000000000904", @ANYBLOB="2fdd4c55a501e523"], 0x0) 1.774014664s ago: executing program 3 (id=1764): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x4008004) syz_io_uring_setup(0x82c, &(0x7f0000000080)={0x0, 0xe044, 0x80}, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) 1.773781572s ago: executing program 6 (id=1765): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000180)={0x0, 0x77b395e2, 0x4, 0x1, 0x3, 0xfffffff9, 0x8000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.224392392s ago: executing program 6 (id=1766): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x129202, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x1000) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)=0x2) 1.008688303s ago: executing program 0 (id=1767): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100), 0xffffffe3, 0x4004840, 0x0, 0xfffffffffffffe1b) 838.294198ms ago: executing program 5 (id=1768): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x38, r1, 0x1, 0x70bd2b, 0x4000, {0x49}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73, 0x2}}}]}, 0x38}}, 0x24004000) 837.926052ms ago: executing program 3 (id=1769): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 781.435315ms ago: executing program 3 (id=1770): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi4\x00', 0x42002, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x6000004, 0x0, 0x0, 0x3, 0x1}) 767.269545ms ago: executing program 5 (id=1771): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe7, 0xcc, 0x61, 0x20, 0x10c4, 0x818a, 0x7d8f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x85, 0x3, 0x200, 0x2, 0x5, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000dc0)={0x44, &(0x7f0000000bc0)={0x0, 0x15, 0x3, "c39242"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d40)={0x44, &(0x7f0000000ac0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x8, 0x1, 0x5, "5fb3edb0", "3e177c43"}}, 0x0}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1c, 0x1, 0x9}, 0x0, 0x0}) 662.180513ms ago: executing program 0 (id=1772): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 661.921337ms ago: executing program 3 (id=1773): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) 659.158269ms ago: executing program 3 (id=1774): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$afs(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100), 0x4, &(0x7f0000000200)={[{@dyn}]}) 637.530693ms ago: executing program 3 (id=1775): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@rdmsr={0x32, 0x18, {0x999}}, @cpuid={0x14, 0x18, {0x5, 0x7c}}, @code={0xa, 0x6c, {"3e649048b8d085a588000000000f23d00f21f835200000010f23f8c74424008d000000c744240254000000ff1c24c462c0f5c1c744240053000000c744240200000000ff1c24c4c1ea5c597f45f4470f0010430f06c423d95ceae7"}}, @wrmsr={0x1e, 0x20}, @uexit={0x0, 0x18, 0x7}, @wrmsr={0x1e, 0x20, {0x8ea, 0x8}}, @rdmsr={0x32, 0x18, {0x8fb}}, @uexit={0x0, 0x18, 0x40000000000000}, @code={0xa, 0x53, {"26a30c00008000000000b8010000000f01c10f0764f240a766ba2100b0ceee66baf80cb8b0e51b87ef66bafc0cb843e6df20ef0fae4200420f2386460f01ca410f35"}}, @code={0xa, 0x63, {"66baf80cb8e0bb188eef66bafc0ced36400fef42060f20d835200000000f22d80fc7af09598556c4a145d47b9cc744240020000000c7442402b5f30000ff1c2466baa000edf3f20f32440f01f8470fbafd00"}}, @uexit={0x0, 0x18, 0x9}, @code={0xa, 0x66, {"420f78a34000000066ba420066ed0fc7283e0fc79a000000003e66420f3880a48a829e0000b805000000b900a000000f01c1c4a22d9810b8010000000f01c1c4e37d1954508ed3b9800000c00f3235000100000f30"}}], 0x258}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000580)={[0x8, 0x1, 0x0, 0x3, 0x3, 0x0, 0x3ff, 0xfffffffffffeffff, 0x40, 0x9, 0x2cd1, 0x82000001, 0x200, 0xfff, 0x5, 0x8], 0x8000000, 0x246951}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)=""/62, 0x3e) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x77c}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r2, &(0x7f0000001480)=[{&(0x7f0000000000)=""/119, 0x20}], 0x1) madvise(&(0x7f0000130000/0xc00000)=nil, 0xc00000, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x15}, {0x15}, {0x6, 0x0, 0x0, 0x7ffffdbe}]}) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0702000000000000000002000000040008802c000480050003000100000005000300000000000500030001e97a0d6e00030000000000050003000500000008000100030000"], 0x54}}, 0x880) 631.638969ms ago: executing program 0 (id=1776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0004010900020073797a31000000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r1) recvfrom(r2, 0x0, 0x0, 0x40002062, 0x0, 0x0) 554.270354ms ago: executing program 0 (id=1777): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') lseek(r4, 0x10000000005, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 41.43054ms ago: executing program 6 (id=1778): r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r0, &(0x7f0000000040)=@hat={'changehat ', 0x1, 0x5e, [')\x00']}, 0x1f) 0s ago: executing program 6 (id=1779): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) write$FUSE_INIT(r2, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) kernel console output (not intermixed with test programs): 678742][ T9616] nfs: Unknown parameter '&' [ 207.054883][ T6001] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 207.223814][ T6001] usb 1-1: Using ep0 maxpacket: 16 [ 207.230930][ T6001] usb 1-1: config 0 has an invalid interface number: 24 but max is 0 [ 207.239128][ T6001] usb 1-1: config 0 has no interface number 0 [ 207.245314][ T6001] usb 1-1: config 0 interface 24 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.257740][ T6001] usb 1-1: config 0 interface 24 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.267678][ T6001] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 207.276821][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.286222][ T6001] usb 1-1: config 0 descriptor?? [ 207.359044][ T5925] usb 3-1: USB disconnect, device number 55 [ 207.384910][ T9627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.953'. [ 207.398420][ T9627] 9p: Bad value for 'rfdno' [ 207.405368][ T9627] IPVS: set_ctl: invalid protocol: 8 10.1.1.0:21 [ 207.516127][ T30] audit: type=1326 audit(1756746871.377:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.2.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519e78ebe9 code=0x7fc00000 [ 207.540875][ T30] audit: type=1326 audit(1756746871.377:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.2.953" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519e78ebe9 code=0x7fc00000 [ 207.865764][ T9639] /dev/rnullb0: Can't open blockdev [ 207.998774][ T6001] usbhid 1-1:0.24: can't add hid device: -71 [ 208.008324][ T6001] usbhid 1-1:0.24: probe with driver usbhid failed with error -71 [ 208.027099][ T6001] usb 1-1: USB disconnect, device number 56 [ 208.532693][ T43] usb 4-1: USB disconnect, device number 67 [ 208.657485][ T9647] netlink: 'syz.0.959': attribute type 4 has an invalid length. [ 208.861949][ T9654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.961'. [ 209.129899][ T9665] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 209.137110][ T9665] /dev/rnullb0: Can't open blockdev [ 209.167616][ T9667] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 209.177564][ T9667] /dev/rnullb0: Can't open blockdev [ 209.223781][ T5925] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 209.387869][ T5925] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.400246][ T5925] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.557493][ T5925] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.566814][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.583774][ T5925] usb 3-1: Product: syz [ 209.587971][ T5925] usb 3-1: Manufacturer: syz [ 209.592585][ T5925] usb 3-1: SerialNumber: syz [ 209.811238][ T9661] erofs (device nbd2): cannot find valid erofs superblock [ 209.842963][ T5925] usb 3-1: 0:2 : does not exist [ 209.859752][ T5925] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 209.890171][ T5925] usb 3-1: USB disconnect, device number 56 [ 209.920907][ T6229] udevd[6229]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 210.027139][ T9676] exFAT-fs (rnullb0): invalid boot record signature [ 210.035243][ T9676] exFAT-fs (rnullb0): failed to read boot sector [ 210.041576][ T9676] exFAT-fs (rnullb0): failed to recognize exfat type [ 210.127672][ T9681] /dev/rnullb0: Can't open blockdev [ 210.203919][ T5925] usb 3-1: new low-speed USB device number 57 using dummy_hcd [ 210.324059][ T6001] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 210.357675][ T5925] usb 3-1: device descriptor read/64, error -71 [ 210.499013][ T6001] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.509132][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.518681][ T6001] usb 1-1: Product: syz [ 210.522858][ T6001] usb 1-1: Manufacturer: syz [ 210.528206][ T6001] usb 1-1: SerialNumber: syz [ 210.539052][ T6001] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 210.557488][ T121] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.603960][ T5925] usb 3-1: new low-speed USB device number 58 using dummy_hcd [ 210.743923][ T5925] usb 3-1: device descriptor read/64, error -71 [ 210.872128][ T5925] usb usb3-port1: attempt power cycle [ 211.008402][ T9690] syz0: rxe_newlink: already configured on wlan1 [ 211.018784][ T9690] /dev/rnullb0: Can't open blockdev [ 211.162759][ T9701] nfs: Unknown parameter '-*'' [ 211.163404][ T9678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.168547][ T9702] /dev/rnullb0: Can't open blockdev [ 211.182856][ T9678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.454023][ T982] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 211.615987][ T982] usb 4-1: Using ep0 maxpacket: 32 [ 211.629232][ T982] usb 4-1: config 0 has an invalid interface number: 108 but max is 0 [ 211.646616][ T982] usb 4-1: config 0 has no interface number 0 [ 211.658882][ T982] usb 4-1: config 0 interface 108 has no altsetting 0 [ 211.679612][ T982] usb 4-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=65.cd [ 211.691659][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.716489][ T982] usb 4-1: Product: syz [ 211.721516][ T982] usb 4-1: Manufacturer: syz [ 211.730778][ T982] usb 4-1: SerialNumber: syz [ 211.755337][ T982] usb 4-1: config 0 descriptor?? [ 211.776764][ T982] gspca_main: spca506-2.14.0 probing 99fa:8988 [ 211.975156][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.997697][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.126641][ T121] usb 1-1: Service connection timeout for: 256 [ 212.133217][ T121] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 212.141275][ T5925] usb 3-1: new low-speed USB device number 59 using dummy_hcd [ 212.936992][ T9716] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 213.084105][ T5925] usb 3-1: device descriptor read/8, error -71 [ 213.095410][ T121] ath9k_htc: Failed to initialize the device [ 213.103533][ T121] usb 1-1: ath9k_htc: USB layer deinitialized [ 213.123801][ T6001] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 213.125371][ T6006] usb 1-1: USB disconnect, device number 57 [ 213.285682][ T6001] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 213.306001][ T6001] usb 5-1: config 0 has no interface number 0 [ 213.322154][ T6001] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.333368][ T6001] usb 5-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.352894][ T6001] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 213.362658][ T6001] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.375182][ T6001] usb 5-1: config 0 descriptor?? [ 213.411259][ T9725] netlink: 40 bytes leftover after parsing attributes in process `syz.0.986'. [ 213.421024][ T9725] tipc: Invalid UDP bearer configuration [ 213.421059][ T9725] tipc: Enabling of bearer rejected, failed to enable media [ 213.592130][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.654381][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.713935][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.791111][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.822205][ T6001] uclogic 0003:256C:006D.000E: interface is invalid, ignoring [ 213.926374][ T59] bridge_slave_1: left allmulticast mode [ 213.938688][ T59] bridge_slave_1: left promiscuous mode [ 213.950423][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.968809][ T59] bridge_slave_0: left allmulticast mode [ 213.995241][ T59] bridge_slave_0: left promiscuous mode [ 214.010929][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.043471][ T5871] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 214.053995][ T5871] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 214.062087][ T5871] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 214.071841][ T5871] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 214.079975][ T5871] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 214.147586][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.157760][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.167225][ T59] bond0 (unregistering): Released all slaves [ 214.189176][ T9729] wlan1 speed is unknown, defaulting to 1000 [ 214.232310][ T59] tipc: Disabling bearer [ 214.239977][ T59] tipc: Left network mode [ 214.260147][ T5925] usb 4-1: USB disconnect, device number 68 [ 214.421120][ T9729] wlan1 speed is unknown, defaulting to 1000 [ 214.733828][ T5925] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 214.915082][ T5925] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.925365][ T5925] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 214.934598][ T5925] usb 4-1: config 1 has no interface number 1 [ 214.940832][ T5925] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 214.954387][ T5925] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 214.967390][ T5925] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 214.980602][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.986752][ T59] hsr_slave_0: left promiscuous mode [ 214.993774][ T5925] usb 4-1: Product: syz [ 214.998008][ T5925] usb 4-1: Manufacturer: syz [ 215.002754][ T5925] usb 4-1: SerialNumber: syz [ 215.011177][ T59] hsr_slave_1: left promiscuous mode [ 215.015461][ T9742] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 215.028153][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.037022][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.046666][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.054148][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.065607][ T59] veth1_macvtap: left promiscuous mode [ 215.071138][ T59] veth0_macvtap: left promiscuous mode [ 215.078600][ T59] veth1_vlan: left promiscuous mode [ 215.083986][ T59] veth0_vlan: left promiscuous mode [ 215.210467][ T59] team0 (unregistering): Port device team_slave_1 removed [ 215.224202][ T59] team0 (unregistering): Port device team_slave_0 removed [ 215.350549][ T9729] chnl_net:caif_netlink_parms(): no params data found [ 215.589362][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.637317][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.651567][ T9798] /dev/rnullb0: Can't open blockdev [ 215.658646][ T9729] bridge_slave_0: entered allmulticast mode [ 215.674786][ T9729] bridge_slave_0: entered promiscuous mode [ 215.693121][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.716564][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.734261][ T9729] bridge_slave_1: entered allmulticast mode [ 215.746095][ T9729] bridge_slave_1: entered promiscuous mode [ 215.831431][ T9729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.203842][ T5871] Bluetooth: hci2: command tx timeout [ 216.819523][ T9729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.879960][ T9823] /dev/rnullb0: Can't open blockdev [ 217.039011][ T9729] team0: Port device team_slave_0 added [ 217.063464][ T9729] team0: Port device team_slave_1 added [ 217.145826][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.163094][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.217998][ T9729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.427575][ T9729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.443761][ T9729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.475339][ T9729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.486889][ T5925] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 217.495024][ T5925] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 217.548354][ T5925] usb 4-1: USB disconnect, device number 69 [ 217.666144][ T9729] hsr_slave_0: entered promiscuous mode [ 217.684632][ T9729] hsr_slave_1: entered promiscuous mode [ 217.690817][ T9729] debugfs: 'hsr0' already exists in 'hsr' [ 217.708692][ T9729] Cannot create hsr debugfs directory [ 217.832133][ T9851] syz.4.1015 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 217.908141][ T9729] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.913830][ T5925] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 217.930655][ T9729] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 217.951997][ T9729] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 217.966369][ T9729] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 218.034250][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.073986][ T5925] usb 4-1: Using ep0 maxpacket: 32 [ 218.087207][ T5925] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 218.102557][ T9729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.115170][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.136962][ T5925] usb 4-1: config 0 descriptor?? [ 218.138071][ T9729] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.168348][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.175519][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.214561][ T5871] Bluetooth: hci2: command tx timeout [ 218.222738][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.229928][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.356592][ T5925] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 218.374011][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 218.404367][ T5925] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 218.421786][ T5925] usb 4-1: media controller created [ 218.463540][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 218.526320][ T9729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.856291][ T9729] veth0_vlan: entered promiscuous mode [ 218.870704][ T9729] veth1_vlan: entered promiscuous mode [ 218.891491][ T9729] veth0_macvtap: entered promiscuous mode [ 218.913286][ T9729] veth1_macvtap: entered promiscuous mode [ 218.928707][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.939748][ T9729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.956983][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.978251][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.999441][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.008822][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.055126][ T10] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 219.082859][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.106104][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.130354][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.139834][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.215270][ T10] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 219.232183][ T10] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 219.242165][ T10] usb 1-1: config 1 has no interface number 1 [ 219.251411][ T10] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 219.266932][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 219.281165][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 219.293310][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.301724][ T10] usb 1-1: Product: syz [ 219.307793][ T10] usb 1-1: Manufacturer: syz [ 219.313656][ T10] usb 1-1: SerialNumber: syz [ 219.384032][ T5925] stb0899_attach: Driver disabled by Kconfig [ 219.390042][ T5925] az6027: no front-end attached [ 219.390042][ T5925] [ 219.535625][ T10] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 219.546958][ T10] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 219.556156][ T10] usb 1-1: 2:1 : sample bitwidth 189 in over sample bytes 3 [ 219.588698][ T10] usb 1-1: USB disconnect, device number 58 [ 219.642508][ T6270] udevd[6270]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 220.108415][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1024'. [ 220.374445][ T5871] Bluetooth: hci2: command tx timeout [ 220.573783][ T43] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 220.735393][ T43] usb 1-1: config 0 interface 0 has no altsetting 0 [ 220.747230][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 220.773101][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.826784][ T43] usb 1-1: config 0 descriptor?? [ 221.225467][ T9952] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 221.245476][ T9952] Error validating options; rc = [-22] [ 222.154620][ T43] video4linux radio48: keene_cmd_set failed (-110) [ 222.172444][ T43] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 222.454186][ T5871] Bluetooth: hci2: command tx timeout [ 223.171580][ T5925] az6027: usb out operation failed. (-110) [ 223.178354][ T5925] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 223.186684][ T5925] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input20 [ 223.227285][ T5925] dvb-usb: schedule remote query interval to 400 msecs. [ 223.234981][ T9996] rdma_rxe: rxe_newlink: failed to add wlan1 [ 223.235023][ T5925] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 223.294340][ T9995] /dev/rnullb0: Can't open blockdev [ 223.374111][ T982] usb 1-1: USB disconnect, device number 59 [ 223.418452][T10003] block nbd4: Attempted send on invalid socket [ 223.443893][T10003] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 223.506817][T10013] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1043'. [ 223.556137][T10015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.566122][T10015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.576970][T10013] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1043'. [ 223.593485][T10013] netlink: 536 bytes leftover after parsing attributes in process `syz.5.1043'. [ 223.605557][T10013] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1043'. [ 224.142455][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.162182][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.681712][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'. [ 224.772013][T10051] netlink: 17279 bytes leftover after parsing attributes in process `syz.5.1054'. [ 224.774224][T10049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1053'. [ 224.799403][T10049] nbd: device at index 64 is going down [ 224.908458][ T5869] udevd[5869]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 224.932981][ T6229] udevd[6229]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 225.574089][T10057] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1055'. [ 225.616181][T10057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1055'. [ 225.634182][T10057] netlink: 536 bytes leftover after parsing attributes in process `syz.0.1055'. [ 225.643605][T10057] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1055'. [ 226.177893][T10073] /dev/rnullb0: Can't open blockdev [ 226.183364][ T5871] Bluetooth: hci0: unexpected event for opcode 0x0c1b [ 226.538385][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1067'. [ 226.588445][T10095] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1067'. [ 226.683809][ T5912] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 226.759601][T10104] ucma_write: process 72 (syz.5.1069) changed security contexts after opening file descriptor, this is not allowed. [ 226.870228][T10110] fuse: Unknown parameter 'fHPh͓Dd' [ 226.883893][ T5912] usb 1-1: Using ep0 maxpacket: 16 [ 226.895600][T10110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1071'. [ 226.896711][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.915998][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1071'. [ 226.944024][ T5912] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 226.953190][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.100505][ T5912] usb 1-1: config 0 descriptor?? [ 227.514055][ T5912] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 227.528924][ T5912] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 227.544013][ T5912] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 227.558882][ T5912] mcp2221 0003:04D8:00DD.000F: item fetching failed at offset 3/5 [ 227.664131][ T5912] mcp2221 0003:04D8:00DD.000F: can't parse reports [ 227.670757][ T5912] mcp2221 0003:04D8:00DD.000F: probe with driver mcp2221 failed with error -22 [ 227.730796][ T5925] usb 1-1: USB disconnect, device number 60 [ 227.785306][T10118] /dev/rnullb0: Can't open blockdev [ 227.870479][T10120] sctp: [Deprecated]: syz.3.1074 (pid 10120) Use of int in maxseg socket option. [ 227.870479][T10120] Use struct sctp_assoc_value instead [ 228.829045][T10140] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1081'. [ 228.924618][ T6001] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 229.084537][ T6001] usb 6-1: device descriptor read/64, error -71 [ 229.203240][T10148] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1083'. [ 229.363932][ T6001] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 229.514322][ T6001] usb 6-1: device descriptor read/64, error -71 [ 229.563591][T10170] overlay: ./file0 is not a directory [ 229.587417][T10170] /dev/rnullb0: Can't open blockdev [ 229.655709][ T6001] usb usb6-port1: attempt power cycle [ 229.773780][ T43] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 229.934008][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 229.945545][ T43] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 229.956030][ T43] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 229.973902][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 229.992924][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 2763, setting to 1024 [ 230.014868][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 230.035961][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.066028][ T43] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 230.091760][ T43] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 230.134519][ T43] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 230.159444][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.203292][ T43] usb 1-1: config 0 descriptor?? [ 230.221064][ T6001] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 230.227400][T10167] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 230.251090][ T43] usblp0: Disabling reads from problematic bidirectional printer [ 230.254488][ T6001] usb 6-1: device descriptor read/8, error -71 [ 230.681856][ T6001] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 230.704451][ T6001] usb 6-1: device descriptor read/8, error -71 [ 230.814077][ T6001] usb usb6-port1: unable to enumerate USB device [ 231.813822][ T9] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 231.848240][T10264] /dev/rnullb0: Can't open blockdev [ 231.969495][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 231.987114][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.002649][ T9] usb 6-1: Product: syz [ 232.010132][ T9] usb 6-1: Manufacturer: syz [ 232.015372][ T9] usb 6-1: SerialNumber: syz [ 232.021714][ T9] usb 6-1: config 0 descriptor?? [ 232.028700][T10275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1104'. [ 232.052708][T10275] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1104'. [ 232.241333][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 232.252836][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.261655][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.555612][ T43] usblp 1-1:0.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 3 vid 0x03F0 pid 0x0004 [ 232.568980][ T43] usb 1-1: USB disconnect, device number 61 [ 232.579780][ T43] usblp0: removed [ 232.853522][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880498f0800: rx timeout, send abort [ 232.863679][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880498f0800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 233.010977][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.051981][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.088117][T10287] /dev/rnullb0: Can't open blockdev [ 233.485120][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.492495][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.500109][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.507669][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.515260][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.522650][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.530160][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.537725][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.545577][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 233.552925][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 233.570536][ T9] usb 6-1: USB disconnect, device number 6 [ 233.785608][T10297] /dev/rnullb0: Can't open blockdev [ 233.841815][T10300] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'. [ 233.883356][T10300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1113'. [ 233.932001][T10314] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1118'. [ 233.941424][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 233.951420][T10318] /dev/rnullb0: Can't open blockdev [ 233.958984][T10314] /dev/rnullb0: Can't open blockdev [ 234.126851][T10340] /dev/rnullb0: Can't open blockdev [ 234.196128][T10345] batadv_slave_0: entered promiscuous mode [ 234.202568][T10344] batadv_slave_0: left promiscuous mode [ 234.255609][T10338] sg_write: data in/out 2907/14 bytes for SCSI command 0x0-- guessing data in; [ 234.255609][T10338] program syz.4.1122 not setting count and/or reply_len properly [ 234.301369][T10357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1127'. [ 234.340069][T10357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1127'. [ 234.576554][T10371] netlink: 'syz.5.1133': attribute type 13 has an invalid length. [ 235.071791][T10375] /dev/rnullb0: Can't open blockdev [ 235.468170][T10395] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1141'. [ 235.506051][T10395] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1141'. [ 235.654042][ T5912] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 235.794694][ T5912] usb 1-1: device descriptor read/64, error -71 [ 235.813524][T10413] netlink: 'syz.5.1145': attribute type 2 has an invalid length. [ 235.834062][T10413] sctp: [Deprecated]: syz.5.1145 (pid 10413) Use of int in maxseg socket option. [ 235.834062][T10413] Use struct sctp_assoc_value instead [ 235.923372][T10416] Invalid source name [ 235.937711][T10416] UBIFS error (pid: 10416): cannot open "ubifs", error -22 [ 235.940356][T10416] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 235.960464][T10416] trusted_key: encrypted_key: master key parameter 'default' is invalid [ 236.063930][ T5912] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 236.076123][T10419] /dev/rnullb0: Can't open blockdev [ 236.225578][ T5912] usb 1-1: device descriptor read/64, error -71 [ 236.344147][ T5912] usb usb1-port1: attempt power cycle [ 237.413198][T10437] /dev/rnullb0: Can't open blockdev [ 237.537252][ T5912] usb 1-1: new full-speed USB device number 64 using dummy_hcd [ 237.575400][ T5912] usb 1-1: device descriptor read/8, error -71 [ 237.598500][T10444] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 237.823790][ T5912] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 237.868116][ T5912] usb 1-1: device descriptor read/8, error -71 [ 237.995283][ T5912] usb usb1-port1: unable to enumerate USB device [ 238.163011][T10455] __nla_validate_parse: 4 callbacks suppressed [ 238.163030][T10455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1161'. [ 238.212918][T10455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1161'. [ 238.632787][T10462] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 238.647120][T10462] /dev/rnullb0: Can't open blockdev [ 238.701561][T10465] syzkaller1: entered promiscuous mode [ 238.707951][T10465] syzkaller1: entered allmulticast mode [ 238.722724][T10466] /dev/rnullb0: Can't open blockdev [ 238.793978][ T6001] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 238.953946][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 238.972122][ T6001] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 238.991524][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.006880][ T6001] pvrusb2: Hardware description: Terratec Grabster AV400 [ 239.023885][ T6001] pvrusb2: ********** [ 239.023934][ T5912] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 239.033781][ T6001] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 239.053837][ T6001] pvrusb2: Important functionality might not be entirely working. [ 239.071949][ T6001] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 239.089121][ T6001] pvrusb2: ********** [ 239.113247][T10476] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1170'. [ 239.132361][T10476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1170'. [ 239.149434][T10478] /dev/rnullb0: Can't open blockdev [ 239.184010][ T5912] usb 6-1: Using ep0 maxpacket: 16 [ 239.192654][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.209617][ T5912] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.228344][ T2340] pvrusb2: Invalid write control endpoint [ 239.246568][ T5912] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 239.265048][ T5912] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.279255][ T5912] usb 6-1: config 0 descriptor?? [ 239.297080][ T2340] pvrusb2: Invalid write control endpoint [ 239.302846][ T2340] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 239.316039][ T2340] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 239.331018][ T2340] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 239.341337][ T2340] pvrusb2: Device being rendered inoperable [ 239.347724][ T2340] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 239.355161][ T2340] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 239.363421][ T2340] pvrusb2: Attached sub-driver cx25840 [ 239.369266][ T2340] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 239.379738][ T2340] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 239.419449][ T5925] usb 1-1: USB disconnect, device number 66 [ 239.922716][ T5912] usb 6-1: language id specifier not provided by device, defaulting to English [ 240.025926][T10495] overlayfs: missing 'lowerdir' [ 240.060268][T10497] /dev/rnullb0: Can't open blockdev [ 240.068082][T10497] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.076913][T10497] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.125484][ T5912] letsketch 0003:6161:4D15.0010: Device info: ᣍ [ 240.261880][T10503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1179'. [ 240.280035][T10503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1179'. [ 240.306652][T10508] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1181'. [ 240.324455][ T5912] letsketch 0003:6161:4D15.0010: Device info: ఁ [ 240.567866][ T5912] usb 6-1: Max retries (5) exceeded reading string descriptor 202 [ 240.583899][ T5912] letsketch 0003:6161:4D15.0010: probe with driver letsketch failed with error -71 [ 240.616807][ T5912] usb 6-1: USB disconnect, device number 7 [ 241.063883][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.090244][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.143058][T10543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1190'. [ 241.166112][T10543] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1190'. [ 241.178121][T10529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.196218][T10529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.400895][T10556] tmpfs: Unknown parameter 'usrquota_inode_hasdlimit' [ 241.617977][T10569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 241.789276][T10575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.799359][T10575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.845109][T10575] can0: slcan on ttyS3. [ 241.905294][T10575] can0 (unregistered): slcan off ttyS3. [ 241.973878][ T5925] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 242.155589][ T5925] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 242.177604][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.204825][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.230480][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 242.267317][ T5925] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 242.285175][ T5925] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 242.303653][ T5925] usb 6-1: Manufacturer: syz [ 242.359720][ T5925] usb 6-1: config 0 descriptor?? [ 242.483878][ T6001] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 242.654524][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 242.664887][ T6001] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 242.677956][ T6001] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.703762][ T6001] usb 1-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 242.723101][ T6001] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.744979][ T6001] usb 1-1: config 0 descriptor?? [ 242.889085][ T5925] usbhid 6-1:0.0: can't add hid device: -71 [ 242.904050][ T5925] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 242.932449][ T5925] usb 6-1: USB disconnect, device number 8 [ 243.157741][ T6001] monterey 0003:0566:3004.0011: report_id 1108778202 is invalid [ 243.159232][T10612] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.178134][ T6001] monterey 0003:0566:3004.0011: item 0 4 1 8 parsing failed [ 243.194978][T10612] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.205372][ T6001] monterey 0003:0566:3004.0011: probe with driver monterey failed with error -22 [ 243.373223][T10587] netlink: 'syz.0.1201': attribute type 4 has an invalid length. [ 243.386111][T10587] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 243.401633][T10587] /dev/rnullb0: Can't open blockdev [ 243.713852][ T6001] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 243.863762][ T6001] usb 6-1: Using ep0 maxpacket: 8 [ 243.880385][ T6001] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 243.900281][ T6001] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.916064][ T6001] usb 6-1: Product: syz [ 243.920252][ T6001] usb 6-1: Manufacturer: syz [ 243.934706][ T6001] usb 6-1: SerialNumber: syz [ 243.944497][ T6001] usb 6-1: config 0 descriptor?? [ 243.954982][ T6001] gspca_main: se401-2.14.0 probing 047d:5003 [ 244.293878][ T6001] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 244.480649][T10628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.494207][T10628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.021097][T10633] __nla_validate_parse: 1 callbacks suppressed [ 245.021113][T10633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1212'. [ 245.021120][ T43] usb 1-1: USB disconnect, device number 67 [ 245.085192][T10637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.093866][T10637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.404058][ T6001] usb 6-1: device descriptor read/64, error -71 [ 245.421213][T10644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.431682][T10644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.733162][T10647] /dev/rnullb0: Can't open blockdev [ 248.704095][ T6001] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 249.360693][T10654] : renamed from dummy0 (while UP) [ 249.406819][T10654] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 249.420061][T10654] /dev/rnullb0: Can't open blockdev [ 249.550260][T10666] /dev/rnullb0: Can't open blockdev [ 249.581671][T10666] /dev/rnullb0: Can't open blockdev [ 249.611523][T10666] /dev/rnullb0: Can't open blockdev [ 249.635329][T10666] /dev/rnullb0: Can't open blockdev [ 249.644709][T10666] /dev/rnullb0: Can't open blockdev [ 249.666649][T10666] /dev/rnullb0: Can't open blockdev [ 249.685918][T10666] /dev/rnullb0: Can't open blockdev [ 249.699268][T10666] /dev/rnullb0: Can't open blockdev [ 249.710868][T10666] /dev/rnullb0: Can't open blockdev [ 249.727134][T10666] /dev/rnullb0: Can't open blockdev [ 249.744152][T10666] /dev/rnullb0: Can't open blockdev [ 249.750020][T10666] /dev/rnullb0: Can't open blockdev [ 249.762556][T10666] /dev/rnullb0: Can't open blockdev [ 249.771165][T10666] /dev/rnullb0: Can't open blockdev [ 249.782168][T10666] /dev/rnullb0: Can't open blockdev [ 249.794132][T10666] /dev/rnullb0: Can't open blockdev [ 249.805819][T10666] /dev/rnullb0: Can't open blockdev [ 249.814184][T10666] /dev/rnullb0: Can't open blockdev [ 249.829825][T10666] /dev/rnullb0: Can't open blockdev [ 249.849795][T10666] /dev/rnullb0: Can't open blockdev [ 249.859179][T10666] /dev/rnullb0: Can't open blockdev [ 249.875963][T10666] /dev/rnullb0: Can't open blockdev [ 249.886375][T10666] /dev/rnullb0: Can't open blockdev [ 249.901446][T10666] /dev/rnullb0: Can't open blockdev [ 249.907415][T10666] /dev/rnullb0: Can't open blockdev [ 249.913115][T10666] /dev/rnullb0: Can't open blockdev [ 249.920670][T10666] /dev/rnullb0: Can't open blockdev [ 249.926833][T10666] /dev/rnullb0: Can't open blockdev [ 249.937578][T10666] /dev/rnullb0: Can't open blockdev [ 249.943238][T10666] /dev/rnullb0: Can't open blockdev [ 249.951140][T10666] /dev/rnullb0: Can't open blockdev [ 249.958103][T10666] /dev/rnullb0: Can't open blockdev [ 249.964558][T10666] /dev/rnullb0: Can't open blockdev [ 249.985329][T10669] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1224'. [ 250.076497][ T6001] gspca_se401: read req failed req 0x06 error -19 [ 250.089055][ T6001] usb 6-1: USB disconnect, device number 9 [ 250.762681][ T6001] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 250.820108][T10691] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1234'. [ 250.859126][T10693] overlayfs: failed to resolve '/X]-bca6NJl}6;tGeY޸ eEX-3щ1=s.Ի'9' [ 250.859126][T10693] 7c&bDwa!|_ZI1 .HZ}k$#+-krkH.?j#M@i ]th]ܼ2^P(L2#i0Uzb[C-&(8‡s噴Xj ?)`R&*'-Įm5-1bK ܰ`x|íQ-œciGv4وIK^WҘ2<Gg}TkеyVQ [ 250.859126][T10693] ?y|': -36 [ 250.910273][T10693] /dev/rnullb0: Can't open blockdev [ 250.984354][ T6001] usb 1-1: Using ep0 maxpacket: 16 [ 250.994712][ T6001] usb 1-1: config 128 has an invalid interface number: 113 but max is 0 [ 251.013308][ T6001] usb 1-1: config 128 has no interface number 0 [ 251.038594][ T6001] usb 1-1: config 128 interface 113 has no altsetting 0 [ 251.051540][T10708] /dev/rnullb0: Can't open blockdev [ 251.052928][ T6001] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice=d5.9d [ 251.069057][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.079054][ T6001] usb 1-1: Product: syz [ 251.079073][ T6001] usb 1-1: Manufacturer: syz [ 251.079086][ T6001] usb 1-1: SerialNumber: syz [ 251.129926][T10714] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x2) [ 251.143627][T10715] netlink: 'syz.4.1242': attribute type 10 has an invalid length. [ 251.227365][T10723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.236077][T10723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.251574][T10725] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1245'. [ 251.300568][T10684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.326840][T10684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.577622][ T6001] usb 1-1: unknown interface protocol 0x43, assuming v1 [ 251.591988][ T6001] usb 1-1: cannot find UAC_HEADER [ 251.620024][ T6001] snd-usb-audio 1-1:128.113: probe with driver snd-usb-audio failed with error -22 [ 251.627450][T10730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1247'. [ 251.637069][ T6229] udevd[6229]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.113/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 251.655136][ T121] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 251.663231][ T6001] usb 1-1: USB disconnect, device number 68 [ 251.815479][ T121] usb 6-1: config 8 has an invalid interface number: 127 but max is 0 [ 251.824208][ T121] usb 6-1: config 8 has no interface number 0 [ 251.830371][ T121] usb 6-1: config 8 interface 127 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 251.848602][ T121] usb 6-1: New USB device found, idVendor=1608, idProduct=021b, bcdDevice=45.36 [ 251.857890][ T121] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.865937][ T121] usb 6-1: Product: syz [ 251.870289][ T121] usb 6-1: Manufacturer: syz [ 251.877050][ T121] usb 6-1: SerialNumber: syz [ 252.118004][ T121] io_ti 6-1:8.127: required endpoints missing [ 252.142987][ T121] usb 6-1: USB disconnect, device number 10 [ 252.210350][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1251'. [ 252.240542][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1251'. [ 252.801393][T10753] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1255'. [ 253.141455][T10760] tls_set_device_offload: netdev not found [ 253.484007][ T43] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 253.517342][T10774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.530029][T10774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.542481][T10773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.553443][T10773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.584362][ T5912] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 253.673776][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 253.679813][ T43] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 253.689929][ T43] usb 6-1: config index 0 descriptor too short (expected 259, got 18) [ 253.698442][ T43] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 71 [ 253.708358][ T43] usb 6-1: can't read configurations, error -22 [ 253.723932][ T5912] usb 1-1: device descriptor read/64, error -71 [ 253.843907][ T43] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 253.973924][ T5912] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 253.993804][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 253.999897][ T43] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 254.009707][ T43] usb 6-1: config index 0 descriptor too short (expected 259, got 18) [ 254.018530][ T43] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 71 [ 254.029883][ T43] usb 6-1: can't read configurations, error -22 [ 254.037356][ T43] usb usb6-port1: attempt power cycle [ 254.097172][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.108291][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.120346][T10776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.123801][ T5912] usb 1-1: device descriptor read/64, error -71 [ 254.132638][T10776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.244046][ T5912] usb usb1-port1: attempt power cycle [ 254.384029][ T43] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 254.414302][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 254.420777][ T43] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 254.430022][ T43] usb 6-1: config index 0 descriptor too short (expected 259, got 18) [ 254.441461][ T43] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 71 [ 254.450826][ T43] usb 6-1: can't read configurations, error -22 [ 254.583852][ T5912] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 254.594571][ T43] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 254.606560][ T5912] usb 1-1: device descriptor read/8, error -71 [ 254.617325][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 254.623113][ T43] usb 6-1: too many configurations: 10, using maximum allowed: 8 [ 254.633471][ T43] usb 6-1: config index 0 descriptor too short (expected 259, got 18) [ 254.642957][ T43] usb 6-1: invalid descriptor for config index 0: type = 0x2, length = 71 [ 254.652094][ T43] usb 6-1: can't read configurations, error -22 [ 254.658934][ T43] usb usb6-port1: unable to enumerate USB device [ 254.711670][ T7230] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 254.741948][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 254.741973][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 254.741985][ T7230] Call Trace: [ 254.741992][ T7230] [ 254.741999][ T7230] dump_stack_lvl+0x189/0x250 [ 254.742028][ T7230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.742050][ T7230] ? __pfx__printk+0x10/0x10 [ 254.742073][ T7230] ? rcu_is_watching+0x15/0xb0 [ 254.742094][ T7230] dump_header+0xd3/0x480 [ 254.742111][ T7230] oom_kill_process+0x387/0x920 [ 254.742131][ T7230] out_of_memory+0xf09/0x12a0 [ 254.742150][ T7230] ? mem_cgroup_iter+0x3b/0x460 [ 254.742169][ T7230] ? __pfx_out_of_memory+0x10/0x10 [ 254.742189][ T7230] mem_cgroup_out_of_memory+0x145/0x240 [ 254.742208][ T7230] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 254.742230][ T7230] ? _raw_spin_unlock+0x28/0x50 [ 254.742249][ T7230] ? memcg1_oom_prepare+0x37f/0x450 [ 254.742270][ T7230] try_charge_memcg+0xdff/0x1290 [ 254.742290][ T7230] ? rcu_is_watching+0x15/0xb0 [ 254.742313][ T7230] ? __pfx_try_charge_memcg+0x10/0x10 [ 254.742334][ T7230] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 254.742352][ T7230] ? xa_load+0x60/0x210 [ 254.742372][ T7230] ? rcu_is_watching+0x15/0xb0 [ 254.742388][ T7230] ? rcu_is_watching+0x15/0xb0 [ 254.742404][ T7230] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 254.742426][ T7230] charge_memcg+0x9f/0x180 [ 254.742444][ T7230] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 254.742465][ T7230] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 254.742489][ T7230] __read_swap_cache_async+0x28c/0x510 [ 254.742512][ T7230] swap_cluster_readahead+0x305/0x5f0 [ 254.742533][ T7230] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 254.742553][ T7230] ? rcu_is_watching+0x15/0xb0 [ 254.742569][ T7230] ? filemap_get_entry+0xad/0x2f0 [ 254.742586][ T7230] ? get_vma_policy+0x27c/0x3c0 [ 254.742608][ T7230] swapin_readahead+0x17d/0xb50 [ 254.742625][ T7230] ? __pfx_filemap_get_entry+0x10/0x10 [ 254.742643][ T7230] ? get_swap_device_info+0x1c/0x2b0 [ 254.742659][ T7230] ? rcu_is_watching+0x15/0xb0 [ 254.742674][ T7230] ? __pfx_swapin_readahead+0x10/0x10 [ 254.742693][ T7230] ? __filemap_get_folio+0x9a6/0xaf0 [ 254.742713][ T7230] ? swap_cache_get_folio+0xae/0x3b0 [ 254.742732][ T7230] do_swap_page+0x525/0x5ac0 [ 254.742752][ T7230] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 254.742775][ T7230] ? ___pte_offset_map+0x29/0x250 [ 254.742796][ T7230] ? lock_acquire+0x5f/0x360 [ 254.742810][ T7230] ? do_swap_page+0x184/0x5ac0 [ 254.742829][ T7230] ? __pfx_do_swap_page+0x10/0x10 [ 254.742849][ T7230] ? __pfx_default_wake_function+0x10/0x10 [ 254.742871][ T7230] ? ___pte_offset_map+0x45/0x250 [ 254.742890][ T7230] ? ___pte_offset_map+0x1cf/0x250 [ 254.742910][ T7230] ? pte_offset_map_rw_nolock+0xea/0x160 [ 254.742931][ T7230] __handle_mm_fault+0xe55/0x5400 [ 254.742956][ T7230] ? __pfx___handle_mm_fault+0x10/0x10 [ 254.742977][ T7230] ? rcu_is_watching+0x15/0xb0 [ 254.742996][ T7230] ? lock_vma_under_rcu+0x3cb/0x450 [ 254.743015][ T7230] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 254.743032][ T7230] handle_mm_fault+0x40a/0x8e0 [ 254.743055][ T7230] do_user_addr_fault+0xa81/0x1390 [ 254.743075][ T7230] ? rcu_is_watching+0x15/0xb0 [ 254.743092][ T7230] ? trace_page_fault_user+0x84/0x1e0 [ 254.743108][ T7230] exc_page_fault+0x82/0x100 [ 254.743128][ T7230] asm_exc_page_fault+0x26/0x30 [ 254.743143][ T7230] RIP: 0033:0x7f51807c14a8 [ 254.743159][ T7230] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 254.743174][ T7230] RSP: 002b:00007ffc2d039b40 EFLAGS: 00010293 [ 254.743191][ T7230] RAX: 0000000000000000 RBX: 00000000000002a1 RCX: 00007f51807c14a5 [ 254.743202][ T7230] RDX: 00007ffc2d039b80 RSI: 0000000000000000 RDI: 0000000000000000 [ 254.743214][ T7230] RBP: 00007ffc2d039bec R08: 0000000000000000 R09: 0000000000000000 [ 254.743224][ T7230] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 254.743234][ T7230] R13: 00000000000927c0 R14: 000000000003dc57 R15: 00007ffc2d039c40 [ 254.743252][ T7230] [ 254.770968][ T7230] memory: usage 307200kB, limit 307200kB, failcnt 39417 [ 254.864103][ T5912] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 254.871208][ T7230] memory+swap: usage 308124kB, limit 9007199254740988kB, failcnt 0 [ 254.908826][ T5912] usb 1-1: device descriptor read/8, error -71 [ 254.913192][ T7230] kmem: usage 3008kB, limit 9007199254740988kB, failcnt 0 [ 254.933025][T10784] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1265'. [ 254.963765][ T7230] Memory cgroup stats for [ 255.035000][ T5912] usb usb1-port1: unable to enumerate USB device [ 255.036742][ T7230] /syz4: [ 255.205349][ T7230] cache 311492608 [ 255.211897][ T7230] rss 0 [ 255.217807][ T7230] rss_huge 0 [ 255.221015][ T7230] shmem 311492608 [ 255.224964][ T7230] mapped_file 0 [ 255.228419][ T7230] dirty 0 [ 255.231641][ T7230] writeback 0 [ 255.236342][ T7230] workingset_refault_anon 79 [ 255.240933][ T7230] workingset_refault_file 22566 [ 255.246091][ T7230] swap 946176 [ 255.249375][ T7230] swapcached 0 [ 255.249378][T10787] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1266'. [ 255.253557][ T7230] pgpgin 536164 [ 255.266084][ T7230] pgpgout 463182 [ 255.269633][ T7230] pgfault 141771 [ 255.273175][ T7230] pgmajfault 40236 [ 255.276985][ T7230] inactive_anon 0 [ 255.280611][ T7230] active_anon 311492608 [ 255.284878][ T7230] inactive_file 0 [ 255.288509][ T7230] active_file 0 [ 255.291953][ T7230] unevictable 0 [ 255.295497][ T7230] hierarchical_memory_limit 314572800 [ 255.300868][ T7230] hierarchical_memsw_limit 9223372036854771712 [ 255.307212][ T7230] total_cache 311492608 [ 255.311361][ T7230] total_rss 0 [ 255.314734][ T7230] total_rss_huge 0 [ 255.318442][ T7230] total_shmem 311492608 [ 255.322580][ T7230] total_mapped_file 0 [ 255.326920][ T7230] total_dirty 0 [ 255.330686][ T7230] total_writeback 0 [ 255.334828][ T7230] total_workingset_refault_anon 79 [ 255.340190][ T7230] total_workingset_refault_file 22566 [ 255.345740][ T7230] total_swap 946176 [ 255.349540][ T7230] total_swapcached 0 [ 255.353515][ T7230] total_pgpgin 536164 [ 255.358347][ T7230] total_pgpgout 463182 [ 255.362415][ T7230] total_pgfault 141771 [ 255.366571][ T7230] total_pgmajfault 40236 [ 255.370811][ T7230] total_inactive_anon 0 [ 255.375021][ T7230] total_active_anon 311492608 [ 255.379688][ T7230] total_inactive_file 0 [ 255.383930][ T7230] total_active_file 0 [ 255.387909][ T7230] total_unevictable 0 [ 255.391896][ T7230] anon_cost 0 [ 255.395620][ T7230] file_cost 0 [ 255.399094][ T7230] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.1256,pid=10754,uid=0 [ 255.414302][ T7230] Memory cgroup out of memory: Killed process 10754 (syz.4.1256) total-vm:102140kB, anon-rss:1020kB, file-rss:23464kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 255.535775][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.544609][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.562376][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.571109][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.581080][T10798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.589883][T10798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.736954][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.426129][T10805] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1274'. [ 256.594344][T10811] netlink: 248 bytes leftover after parsing attributes in process `syz.5.1277'. [ 256.777279][T10828] /dev/rnullb0: Can't open blockdev [ 256.877947][T10836] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1284'. [ 257.043090][T10849] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.057414][T10849] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.236042][ T5912] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 257.259143][T10867] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1296'. [ 257.395132][ T5912] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 257.413923][ T5912] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.433748][ T5912] usb 1-1: config 0 has no interface number 0 [ 257.440010][ T5912] usb 1-1: config 0 interface 95 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 257.463724][ T5912] usb 1-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.494224][ T5912] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 257.504528][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.513192][ T5912] usb 1-1: Product: syz [ 257.520329][ T5912] usb 1-1: Manufacturer: syz [ 257.529804][ T5912] usb 1-1: SerialNumber: syz [ 257.538184][ T5912] usb 1-1: config 0 descriptor?? [ 257.794013][T10892] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1302'. [ 257.849865][ T5912] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 257.869195][T10897] /dev/rnullb0: Can't open blockdev [ 257.875064][ T5912] usb 1-1: MIDIStreaming interface descriptor not found [ 257.912126][ T5912] usb 1-1: USB disconnect, device number 73 [ 257.928552][ T6001] wlan1 speed is unknown, defaulting to 1000 [ 257.967424][ T6270] udevd[6270]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.967521][ T6001] syz0: Port: 1 Link DOWN [ 258.045240][ T121] wlan1 speed is unknown, defaulting to 1000 [ 258.340100][ T121] wlan1 speed is unknown, defaulting to 1000 [ 258.346605][ T121] ryz0: Port: 1 Link DOWN [ 258.351050][ T121] wlan1 speed is unknown, defaulting to 1000 [ 258.521927][T10920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1305'. [ 258.595517][T10924] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 258.622770][T10924] /dev/rnullb0: Can't open blockdev [ 258.714206][T10929] /dev/rnullb0: Can't open blockdev [ 258.797778][T10937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.821552][T10937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.369057][T10960] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1313'. [ 259.579019][T10969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1314'. [ 259.736888][T10977] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 259.796438][ T43] IPVS: starting estimator thread 0... [ 259.897371][T10986] IPVS: using max 49 ests per chain, 117600 per kthread [ 259.964141][T10994] netlink: 248 bytes leftover after parsing attributes in process `syz.3.1319'. [ 259.987645][T10994] /dev/rnullb0: Can't open blockdev [ 260.048303][T10999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1320'. [ 260.389962][T11009] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 260.405073][T11009] /dev/rnullb0: Can't open blockdev [ 260.776295][T11024] netlink: 'syz.4.1324': attribute type 1 has an invalid length. [ 260.793370][T11029] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 260.800660][T11029] /dev/rnullb0: Can't open blockdev [ 261.080687][T11039] /dev/rnullb0: Can't open blockdev [ 261.679227][T11065] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 261.715551][T11065] /dev/rnullb0: Can't open blockdev [ 261.756343][T11072] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 261.763395][T11072] /dev/rnullb0: Can't open blockdev [ 261.838470][T11074] __nla_validate_parse: 3 callbacks suppressed [ 261.838487][T11074] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1335'. [ 261.969521][T11079] netlink: 'syz.3.1336': attribute type 12 has an invalid length. [ 261.997839][T11082] /dev/rnullb0: Can't open blockdev [ 262.486751][T11097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.525262][T11097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.642676][T11099] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 262.659885][T11099] /dev/rnullb0: Can't open blockdev [ 262.684620][T11101] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1344'. [ 262.840382][T11106] /dev/rnullb0: Can't open blockdev [ 262.878757][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.908411][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.576438][T11119] netlink: 'syz.3.1351': attribute type 2 has an invalid length. [ 263.590560][T11119] netlink: 'syz.3.1351': attribute type 2 has an invalid length. [ 263.634328][T11121] /dev/rnullb0: Can't open blockdev [ 263.692232][T11124] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1353'. [ 263.903343][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'. [ 263.949348][T11133] /dev/rnullb0: Can't open blockdev [ 264.280831][T11139] 9p: Unknown parameter 'rootcontext' [ 265.011653][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.022986][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.056102][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.073840][ T5925] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 265.084352][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.103371][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.123418][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.133370][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.151883][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.160735][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.169630][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.181845][T11155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.191784][T11155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.242162][ T5925] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.252567][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 265.280328][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.302439][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.331533][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.363769][ T5925] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 265.392410][ T5925] usb 6-1: New USB device found, idVendor=05ac, idProduct=921c, bcdDevice=9d.fb [ 265.413735][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.443442][ T5925] usb 6-1: config 0 descriptor?? [ 265.454778][ T5925] appledisplay 6-1:0.0: Submitting URB failed [ 265.460970][ T5925] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -5 [ 265.663777][ T5912] usb 6-1: USB disconnect, device number 15 [ 265.891379][T11174] /dev/rnullb0: Can't open blockdev [ 266.016352][T11181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.034140][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.035327][T11183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.053193][T11183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.142482][T11194] /dev/rnullb0: Can't open blockdev [ 266.335203][T11201] tmpfs: Invalid gid '0x00000000ffffffff' [ 266.345965][T11201] syzkaller1: entered promiscuous mode [ 266.351480][T11201] syzkaller1: entered allmulticast mode [ 266.443771][ T5912] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 266.536044][T11204] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 266.548006][T11204] block device autoloading is deprecated and will be removed. [ 266.583888][ T5912] usb 1-1: device descriptor read/64, error -71 [ 266.844928][ T5912] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 266.983797][ T5912] usb 1-1: device descriptor read/64, error -71 [ 267.094019][ T5912] usb usb1-port1: attempt power cycle [ 267.434926][ T5912] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 267.465194][ T5912] usb 1-1: device descriptor read/8, error -71 [ 267.469772][T11211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.488820][T11211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.580715][T11218] syzkaller1: entered promiscuous mode [ 267.587615][T11218] syzkaller1: entered allmulticast mode [ 267.597831][T11218] binder: 11217:11218 ioctl c0306201 200000000080 returned -14 [ 267.605667][ T5925] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 267.616882][T11218] binder: 11217:11218 ioctl c0405602 200000000080 returned -22 [ 267.714039][ T5912] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 267.744200][ T5912] usb 1-1: device descriptor read/8, error -71 [ 267.767223][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.778577][ T5925] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.795748][ T5925] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 267.807005][ T5925] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.821712][ T5925] usb 6-1: config 0 descriptor?? [ 267.854798][ T5912] usb usb1-port1: unable to enumerate USB device [ 267.889942][T11224] /dev/rnullb0: Can't open blockdev [ 267.945677][T11226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.958048][T11226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.038972][T11226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.049735][T11226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.240763][ T5925] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 268.258724][ T5925] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 268.274740][ T5925] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 268.289593][ T5925] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 268.306753][ T5925] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 268.321719][ T5925] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 268.337773][ T5925] pyra 0003:1E7D:2CF6.0012: unknown main item tag 0x0 [ 268.365592][ T5925] pyra 0003:1E7D:2CF6.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.5-1/input0 [ 268.456262][T11209] netlink: 'syz.5.1377': attribute type 28 has an invalid length. [ 268.694605][ T5925] pyra 0003:1E7D:2CF6.0012: couldn't init struct pyra_device [ 268.768874][ T5925] pyra 0003:1E7D:2CF6.0012: couldn't install mouse [ 268.778680][ T5925] pyra 0003:1E7D:2CF6.0012: probe with driver pyra failed with error -71 [ 268.789519][ T5925] usb 6-1: USB disconnect, device number 16 [ 269.302784][T11239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.322551][T11245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.331287][T11239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.342533][T11245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.359630][T11239] /dev/rnullb0: Can't open blockdev [ 269.379371][T11245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.390596][T11245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.400422][T11245] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 269.410549][T11245] /dev/rnullb0: Can't open blockdev [ 269.498753][T11253] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 269.507623][T11253] /dev/rnullb0: Can't open blockdev [ 269.783905][ T43] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 269.912466][T11266] /dev/rnullb0: Can't open blockdev [ 269.923214][T11264] syzkaller1: entered promiscuous mode [ 269.929016][T11264] syzkaller1: entered allmulticast mode [ 269.970969][ T43] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 269.983934][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.994345][ T43] usb 1-1: Product: syz [ 269.998893][ T43] usb 1-1: Manufacturer: syz [ 270.005864][ T43] usb 1-1: SerialNumber: syz [ 270.016275][ T43] usb 1-1: config 0 descriptor?? [ 270.030980][T11270] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 270.037524][T11270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 270.046492][T11270] vhci_hcd vhci_hcd.0: Device attached [ 270.057702][T11270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.067769][T11270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.081859][T11271] vhci_hcd: connection closed [ 270.082065][ T59] vhci_hcd: stop threads [ 270.093105][ T59] vhci_hcd: release socket [ 270.098403][ T59] vhci_hcd: disconnect device [ 270.218735][T11282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.230172][ T43] hso 1-1:0.0: Failed to find BULK IN ep [ 270.237424][T11282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.240804][ T43] usb-storage 1-1:0.0: USB Mass Storage device detected [ 270.276538][T11282] /dev/rnullb0: Can't open blockdev [ 270.731037][ T5871] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 270.911513][ T43] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 270.920801][ T30] audit: type=1326 audit(1756746934.697:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11300 comm="syz.5.1409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a6618ebe9 code=0x0 [ 270.948718][ C0] vkms_vblank_simulate: vblank timer overrun [ 271.002132][ T43] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 271.033855][ T43] hid-generic 0000:0004:0000.0013: unknown main item tag 0x0 [ 271.056629][ T982] usb 1-1: USB disconnect, device number 78 [ 271.063802][ T43] hid-generic 0000:0004:0000.0013: hidraw0: HID v0.00 Device [syz0] on syz0 [ 271.643778][ T982] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 271.730200][T11322] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 271.737167][T11322] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 271.743628][T11322] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 271.759516][T11322] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 271.779310][T11322] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 271.788347][T11322] comedi comedi3: 8255: I/O port conflict (0xffffffff80000005,4) [ 271.799745][T11322] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 271.808142][ T982] usb 1-1: Using ep0 maxpacket: 8 [ 271.809863][T11324] autofs: Bad value for 'fd' [ 271.822497][ T982] usb 1-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 271.833757][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.841761][ T982] usb 1-1: Product: syz [ 271.846384][T11322] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 271.855320][ T982] usb 1-1: Manufacturer: syz [ 271.860182][ T982] usb 1-1: SerialNumber: syz [ 271.863290][T11322] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 271.874463][ T982] usb 1-1: config 0 descriptor?? [ 271.880358][T11322] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 271.885921][ T982] gspca_main: sq905-2.14.0 probing 2770:9120 [ 271.894919][T11324] tipc: Started in network mode [ 271.901217][T11324] tipc: Node identity 5ad312bb58bd, cluster identity 4711 [ 271.914968][T11324] tipc: Enabled bearer , priority 0 [ 271.936472][T11324] syzkaller0: entered promiscuous mode [ 271.947595][T11324] syzkaller0: entered allmulticast mode [ 271.969944][T11324] tipc: Resetting bearer [ 271.989248][T11323] tipc: Resetting bearer [ 271.997291][T11323] tipc: Disabling bearer [ 272.327927][ T982] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 272.353863][ T982] sq905 1-1:0.0: probe with driver sq905 failed with error -71 [ 272.378201][ T982] usb 1-1: USB disconnect, device number 79 [ 272.521439][T11347] usb usb9: usbfs: process 11347 (syz.4.1427) did not claim interface 0 before use [ 272.541275][T11347] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1427'. [ 272.554741][T11349] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 272.565833][T11349] /dev/rnullb0: Can't open blockdev [ 272.980693][T11356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1431'. [ 272.995084][T11356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1431'. [ 273.006848][T11356] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1431'. [ 273.173842][ T5865] Bluetooth: hci3: command 0x0406 tx timeout [ 273.428840][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.471211][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.849880][ T982] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 274.022576][ T982] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 274.093748][ T982] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 274.118549][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 274.141062][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 274.152097][ T5912] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 274.169921][ T982] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 274.202704][ T982] usb 6-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 274.222056][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.240309][ T982] usb 6-1: Product: syz [ 274.253759][ T982] usb 6-1: Manufacturer: syz [ 274.258449][ T982] usb 6-1: SerialNumber: syz [ 274.279068][ T982] usb 6-1: config 0 descriptor?? [ 274.315017][ T5912] usb 1-1: config 2 has too many interfaces: 122, using maximum allowed: 32 [ 274.343800][ T5912] usb 1-1: config 2 has an invalid descriptor of length 45, skipping remainder of the config [ 274.364045][ T5912] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 122 [ 274.383428][ T5912] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=be.65 [ 274.399530][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.418750][ T982] rc_core: IR keymap rc-imon-rsc not found [ 274.428860][ T982] Registered IR keymap rc-empty [ 274.446741][ T982] rc rc0: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 274.465724][ T982] input: iMON Station as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input21 [ 274.480366][ T982] imon_raw 6-1:0.0: probe with driver imon_raw failed with error -90 [ 274.503997][T11380] netlink: 'syz.3.1439': attribute type 2 has an invalid length. [ 274.512075][T11380] netlink: 'syz.3.1439': attribute type 8 has an invalid length. [ 274.520503][T11380] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1439'. [ 274.554956][T11380] /dev/rnullb0: Can't open blockdev [ 274.684338][T11369] /dev/rnullb0: Can't open blockdev [ 274.699831][ T5912] usb 1-1: string descriptor 0 read error: -71 [ 274.715183][ T5912] usb 1-1: USB disconnect, device number 80 [ 275.036227][T11390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.075971][T11390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.165609][T11394] netlink: 'syz.4.1443': attribute type 12 has an invalid length. [ 275.186482][ T5871] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 275.189245][T11394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.208716][T11394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.218619][T11394] netlink: 'syz.4.1443': attribute type 15 has an invalid length. [ 275.227417][T11394] netlink: 666 bytes leftover after parsing attributes in process `syz.4.1443'. [ 275.538505][T11365] Set syz1 is full, maxelem 65536 reached [ 275.550710][ T5925] usb 6-1: USB disconnect, device number 17 [ 275.564243][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 275.727810][T11400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.736468][T11400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.754120][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 275.762612][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 275.772048][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.780121][ T10] usb 1-1: Product: syz [ 275.784423][ T10] usb 1-1: Manufacturer: syz [ 275.789018][ T10] usb 1-1: SerialNumber: syz [ 275.800244][ T10] r8152-cfgselector 1-1: Unknown version 0x0000 [ 275.806625][ T10] r8152-cfgselector 1-1: config 0 descriptor?? [ 275.917042][T11403] /dev/rnullb0: Can't open blockdev [ 275.967175][T11408] /dev/rnullb0: Can't open blockdev [ 275.998263][T11410] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1449'. [ 276.225024][T11396] netlink: 'syz.0.1444': attribute type 10 has an invalid length. [ 276.234961][T11396] team0: Device hsr_slave_0 failed to register rx_handler [ 276.353765][ T982] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 276.515293][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 276.522255][ T982] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.535952][ T982] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.549095][ T982] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.558736][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.568072][ T982] usb 6-1: Product: syz [ 276.572499][ T982] usb 6-1: Manufacturer: syz [ 276.578142][ T982] usb 6-1: SerialNumber: syz [ 276.631292][ T10] r8152-cfgselector 1-1: USB disconnect, device number 81 [ 276.796701][ T982] usb 6-1: 0:2 : does not exist [ 276.802340][ T982] usb 6-1: unit 9 not found! [ 276.813268][ T982] usb 6-1: USB disconnect, device number 18 [ 276.829222][ T6229] udevd[6229]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.260303][T11426] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 277.268471][T11426] /dev/rnullb0: Can't open blockdev [ 277.292437][T11428] /dev/rnullb0: Can't open blockdev [ 277.297995][T11429] /dev/rnullb0: Can't open blockdev [ 277.394421][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1458'. [ 277.439891][T11438] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1459'. [ 277.713449][T11451] syzkaller1: entered promiscuous mode [ 277.719600][T11451] syzkaller1: entered allmulticast mode [ 277.961620][T11467] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 277.981531][T11467] hpfs: hpfs_map_sector(): read error [ 278.233789][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 278.393816][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 278.400275][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.411465][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.427901][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 278.447673][ T10] usb 6-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 278.460660][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.620455][ T10] usb 6-1: config 0 descriptor?? [ 278.722186][T11475] /dev/rnullb0: Can't open blockdev [ 279.729826][T11486] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 279.737044][T11486] /dev/rnullb0: Can't open blockdev [ 280.620412][T11494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.639259][T11494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.756254][T11492] wlan1 speed is unknown, defaulting to 1000 [ 280.843940][T11497] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1476'. [ 280.884025][T11492] wlan1 speed is unknown, defaulting to 1000 [ 280.954751][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 280.969775][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 280.995425][ T10] usb 6-1: USB disconnect, device number 19 [ 281.428736][T11509] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 281.435790][T11509] /dev/rnullb0: Can't open blockdev [ 281.793069][T11529] /dev/rnullb0: Can't open blockdev [ 281.834861][T11531] /dev/rnullb0: Can't open blockdev [ 282.082111][T11542] syzkaller1: entered promiscuous mode [ 282.104886][T11542] syzkaller1: entered allmulticast mode [ 282.821061][T11587] syz0: rxe_newlink: already configured on wlan1 [ 283.280248][T11597] Dead loop on virtual device ip6_vti0, fix it urgently! [ 283.411291][T11607] /dev/rnullb0: Can't open blockdev [ 283.419492][T11601] /dev/rnullb0: Can't open blockdev [ 283.609384][T11613] xt_socket: unknown flags 0xe4 [ 283.705590][T11611] program syz.5.1510 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.949916][T11621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.755905][T11646] /dev/rnullb0: Can't open blockdev [ 284.871222][T11652] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1523'. [ 285.280657][T11668] loop7: detected capacity change from 0 to 7 [ 285.341310][T11670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.382211][T11670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.443897][ T6001] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 285.584123][T11668] Dev loop7: unable to read RDB block 7 [ 285.601777][T11668] loop7: unable to read partition table [ 285.615749][T11668] loop7: partition table beyond EOD, truncated [ 285.623922][ T6001] usb 1-1: Using ep0 maxpacket: 8 [ 285.633237][T11668] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 285.660775][ T6001] usb 1-1: unable to get BOS descriptor or descriptor too short [ 285.680158][ T6001] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 285.707005][ T6001] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 285.749927][ T6001] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.781418][ T6001] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.798364][ T6001] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.820331][ T6001] usb 1-1: Product: syz [ 285.829042][ T6001] usb 1-1: Manufacturer: syz [ 285.840586][ T6001] usb 1-1: SerialNumber: syz [ 286.055351][ T5871] Bluetooth: hci1: command 0x0406 tx timeout [ 286.137332][T11663] /dev/rnullb0: Can't open blockdev [ 286.152409][ T6001] usb 1-1: 0:2 : does not exist [ 286.180539][ T6001] usb 1-1: USB disconnect, device number 82 [ 286.221804][ T6229] udevd[6229]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.603980][T11690] serio: Serial port ptm0 [ 286.773818][ T5912] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 286.930589][T11699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.945499][T11699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.755108][ T5912] usb 6-1: config index 0 descriptor too short (expected 69, got 36) [ 287.765384][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.782085][ T5912] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 287.793211][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.813860][ T5912] usb 6-1: Product: syz [ 287.818043][ T5912] usb 6-1: Manufacturer: syz [ 287.822718][ T5912] usb 6-1: SerialNumber: syz [ 287.864066][ T5912] usb 6-1: config 0 descriptor?? [ 287.874657][ T5912] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 288.072386][T11688] /dev/rnullb0: Can't open blockdev [ 288.273871][ T5912] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 288.281939][ T5912] gspca_pac7302 6-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 288.296351][ T5912] usb 6-1: USB disconnect, device number 20 [ 288.353799][ T10] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 288.438700][T11726] FAULT_INJECTION: forcing a failure. [ 288.438700][T11726] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 288.452044][T11726] CPU: 0 UID: 0 PID: 11726 Comm: syz.3.1547 Not tainted syzkaller #0 PREEMPT(full) [ 288.452067][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.452078][T11726] Call Trace: [ 288.452084][T11726] [ 288.452091][T11726] dump_stack_lvl+0x189/0x250 [ 288.452116][T11726] ? __pfx____ratelimit+0x10/0x10 [ 288.452144][T11726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 288.452164][T11726] ? __pfx__printk+0x10/0x10 [ 288.452182][T11726] ? __might_fault+0xb0/0x130 [ 288.452206][T11726] ? rcu_is_watching+0x15/0xb0 [ 288.452224][T11726] should_fail_ex+0x414/0x560 [ 288.452247][T11726] _copy_from_user+0x2d/0xb0 [ 288.452263][T11726] get_timespec64+0x8e/0x1a0 [ 288.452279][T11726] ? __pfx_get_timespec64+0x10/0x10 [ 288.452297][T11726] __x64_sys_clock_settime+0x1cc/0x280 [ 288.452320][T11726] ? __pfx___x64_sys_clock_settime+0x10/0x10 [ 288.452345][T11726] do_syscall_64+0xfa/0xfa0 [ 288.452364][T11726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.452378][T11726] ? clear_bhb_loop+0x60/0xb0 [ 288.452392][T11726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.452405][T11726] RIP: 0033:0x7fce78b8ebe9 [ 288.452419][T11726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.452432][T11726] RSP: 002b:00007fce79ac0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3 [ 288.452450][T11726] RAX: ffffffffffffffda RBX: 00007fce78dc5fa0 RCX: 00007fce78b8ebe9 [ 288.452462][T11726] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 00000000fffffffb [ 288.452472][T11726] RBP: 00007fce79ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 288.452481][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.452491][T11726] R13: 00007fce78dc6038 R14: 00007fce78dc5fa0 R15: 00007fff166e4ba8 [ 288.452509][T11726] [ 288.654708][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 288.661200][ T10] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 288.669658][ T10] usb 1-1: config 0 has no interface number 0 [ 288.678022][ T10] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 288.687604][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.695896][ T10] usb 1-1: Product: syz [ 288.700255][ T10] usb 1-1: Manufacturer: syz [ 288.705047][ T10] usb 1-1: SerialNumber: syz [ 288.718044][ T10] usb 1-1: config 0 descriptor?? [ 288.930068][ T10] usb 1-1: USB disconnect, device number 83 [ 289.409596][T11735] wlan1 speed is unknown, defaulting to 1000 [ 289.637842][T11742] /dev/rnullb0: Can't open blockdev [ 289.733431][T11747] fuse: Bad value for 'user_id' [ 289.748595][T11747] fuse: Bad value for 'user_id' [ 289.749308][T11735] wlan1 speed is unknown, defaulting to 1000 [ 289.994970][T11752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 290.039510][T11752] syzkaller1: entered promiscuous mode [ 290.045080][T11752] syzkaller1: entered allmulticast mode [ 290.083834][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 290.392819][T11757] FAULT_INJECTION: forcing a failure. [ 290.392819][T11757] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 290.406073][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 290.420210][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.435941][T11757] CPU: 0 UID: 0 PID: 11757 Comm: syz.3.1557 Not tainted syzkaller #0 PREEMPT(full) [ 290.435972][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 290.435983][T11757] Call Trace: [ 290.435990][T11757] [ 290.435996][T11757] dump_stack_lvl+0x189/0x250 [ 290.436023][T11757] ? __pfx____ratelimit+0x10/0x10 [ 290.436042][T11757] ? __pfx_dump_stack_lvl+0x10/0x10 [ 290.436062][T11757] ? __pfx__printk+0x10/0x10 [ 290.436084][T11757] ? rcu_is_watching+0x15/0xb0 [ 290.436103][T11757] should_fail_ex+0x414/0x560 [ 290.436125][T11757] _copy_to_user+0x31/0xb0 [ 290.436145][T11757] simple_read_from_buffer+0xe1/0x170 [ 290.436165][T11757] proc_fail_nth_read+0x1b3/0x220 [ 290.436187][T11757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.436209][T11757] ? rw_verify_area+0x2a6/0x4d0 [ 290.436224][T11757] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 290.436245][T11757] vfs_read+0x200/0xa30 [ 290.436260][T11757] ? fdget_pos+0x247/0x320 [ 290.436280][T11757] ? __pfx___mutex_lock+0x10/0x10 [ 290.436301][T11757] ? __pfx_vfs_read+0x10/0x10 [ 290.436319][T11757] ? __fget_files+0x3a0/0x420 [ 290.436337][T11757] ? __fget_files+0x2a/0x420 [ 290.436357][T11757] ksys_read+0x145/0x250 [ 290.436374][T11757] ? __pfx_ksys_read+0x10/0x10 [ 290.436389][T11757] ? __secure_computing+0xe2/0x2a0 [ 290.436409][T11757] do_syscall_64+0xfa/0xfa0 [ 290.436428][T11757] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.436442][T11757] ? clear_bhb_loop+0x60/0xb0 [ 290.436457][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.436472][T11757] RIP: 0033:0x7fce78b8d5fc [ 290.436488][T11757] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 290.436502][T11757] RSP: 002b:00007fce79ac0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 290.436520][T11757] RAX: ffffffffffffffda RBX: 00007fce78dc5fa0 RCX: 00007fce78b8d5fc [ 290.436533][T11757] RDX: 000000000000000f RSI: 00007fce79ac00a0 RDI: 0000000000000001 [ 290.436544][T11757] RBP: 00007fce79ac0090 R08: 0000000000000000 R09: 0000000000000000 [ 290.436555][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 290.436565][T11757] R13: 00007fce78dc6038 R14: 00007fce78dc5fa0 R15: 00007fff166e4ba8 [ 290.436584][T11757] [ 290.666990][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.677971][ T10] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 290.680300][T11768] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.703501][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 290.712741][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 290.720813][ T10] usb 6-1: SerialNumber: syz [ 290.729406][ T10] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 290.947761][ T5912] usb 6-1: USB disconnect, device number 21 [ 291.947691][T11795] syz.0.1568: vmalloc error: size 67112960, failed to allocated page array size 131080, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 291.967861][ T10] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 291.976748][T11795] CPU: 0 UID: 0 PID: 11795 Comm: syz.0.1568 Not tainted syzkaller #0 PREEMPT(full) [ 291.976772][T11795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 291.976782][T11795] Call Trace: [ 291.976799][T11795] [ 291.976805][T11795] dump_stack_lvl+0x189/0x250 [ 291.976834][T11795] ? __pfx_dump_stack_lvl+0x10/0x10 [ 291.976855][T11795] ? __pfx__printk+0x10/0x10 [ 291.976874][T11795] ? lock_release+0x4b/0x3e0 [ 291.976891][T11795] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 291.976912][T11795] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 291.976932][T11795] warn_alloc+0x214/0x310 [ 291.976951][T11795] ? __pfx_warn_alloc+0x10/0x10 [ 291.976971][T11795] ? __get_vm_area_node+0x28f/0x300 [ 291.976993][T11795] ? nf_tables_newset+0x1330/0x2540 [ 291.977017][T11795] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 291.977043][T11795] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 291.977059][T11795] ? rcu_is_watching+0x15/0xb0 [ 291.977077][T11795] ? nf_tables_newset+0x1330/0x2540 [ 291.977098][T11795] __kvmalloc_node_noprof+0x399/0x5b0 [ 291.977120][T11795] ? nf_tables_newset+0x1330/0x2540 [ 291.977141][T11795] ? nft_table_lookup+0x211/0x230 [ 291.977155][T11795] ? nft_set_lookup+0x128/0x150 [ 291.977170][T11795] ? nft_hash_privsize+0x3f/0xf0 [ 291.977196][T11795] nf_tables_newset+0x1330/0x2540 [ 291.977222][T11795] ? __pfx_nf_tables_newset+0x10/0x10 [ 291.977245][T11795] ? nfnl_pernet+0x23/0x240 [ 291.977261][T11795] ? rcu_is_watching+0x15/0xb0 [ 291.977279][T11795] ? lock_release+0x4b/0x3e0 [ 291.977296][T11795] ? __nla_parse+0x40/0x60 [ 291.977312][T11795] nfnetlink_rcv+0x112f/0x2520 [ 291.977339][T11795] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 291.977362][T11795] ? ref_tracker_free+0x63a/0x7d0 [ 291.977394][T11795] ? __netlink_deliver_tap+0x807/0x850 [ 291.977414][T11795] ? netlink_deliver_tap+0x2e/0x1b0 [ 291.977434][T11795] ? lock_release+0x4b/0x3e0 [ 291.977453][T11795] netlink_unicast+0x82f/0x9e0 [ 291.977475][T11795] ? __pfx_netlink_unicast+0x10/0x10 [ 291.977493][T11795] ? netlink_sendmsg+0x642/0xb30 [ 291.977512][T11795] ? skb_put+0x11b/0x210 [ 291.977534][T11795] netlink_sendmsg+0x805/0xb30 [ 291.977557][T11795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.977578][T11795] ? aa_sock_msg_perm+0xf1/0x1d0 [ 291.977598][T11795] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 291.977616][T11795] ? __pfx_netlink_sendmsg+0x10/0x10 [ 291.977635][T11795] __sock_sendmsg+0x21c/0x270 [ 291.977655][T11795] ____sys_sendmsg+0x505/0x830 [ 291.977678][T11795] ? __pfx_____sys_sendmsg+0x10/0x10 [ 291.977701][T11795] ? import_iovec+0x74/0xa0 [ 291.977718][T11795] ___sys_sendmsg+0x21f/0x2a0 [ 291.977738][T11795] ? __pfx____sys_sendmsg+0x10/0x10 [ 291.977761][T11795] ? __handle_mm_fault+0x3ada/0x5400 [ 291.977799][T11795] ? __fget_files+0x2a/0x420 [ 291.977817][T11795] ? __fget_files+0x3a0/0x420 [ 291.977837][T11795] __x64_sys_sendmsg+0x19b/0x260 [ 291.977859][T11795] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 291.977883][T11795] ? do_user_addr_fault+0xc8a/0x1390 [ 291.977900][T11795] ? rcu_is_watching+0x15/0xb0 [ 291.977918][T11795] do_syscall_64+0xfa/0xfa0 [ 291.977938][T11795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.977954][T11795] ? clear_bhb_loop+0x60/0xb0 [ 291.977972][T11795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.977988][T11795] RIP: 0033:0x7fdbcb18ebe9 [ 291.978004][T11795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 291.978019][T11795] RSP: 002b:00007fdbcbf36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 291.978037][T11795] RAX: ffffffffffffffda RBX: 00007fdbcb3c6180 RCX: 00007fdbcb18ebe9 [ 291.978049][T11795] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 291.978061][T11795] RBP: 00007fdbcb211e19 R08: 0000000000000000 R09: 0000000000000000 [ 291.978072][T11795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.978082][T11795] R13: 00007fdbcb3c6218 R14: 00007fdbcb3c6180 R15: 00007fff7a541a88 [ 291.978100][T11795] [ 291.978117][T11795] Mem-Info: [ 292.331712][T11815] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 292.379962][T11795] active_anon:12979 inactive_anon:5 isolated_anon:0 [ 292.379962][T11795] active_file:14929 inactive_file:60830 isolated_file:0 [ 292.379962][T11795] unevictable:852 dirty:78 writeback:2 [ 292.379962][T11795] slab_reclaimable:13542 slab_unreclaimable:99387 [ 292.379962][T11795] mapped:26463 shmem:5538 pagetables:2093 [ 292.379962][T11795] sec_pagetables:0 bounce:0 [ 292.379962][T11795] kernel_misc_reclaimable:0 [ 292.379962][T11795] free:1263032 free_pcp:39683 free_cma:0 [ 292.413789][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 292.432380][ T10] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 292.440764][ T10] usb 6-1: config 0 has no interface number 0 [ 292.447066][T11815] /dev/rnullb0: Can't open blockdev [ 292.452382][ T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 292.463775][ T10] usb 6-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 292.474336][ T10] usb 6-1: config 0 interface 41 has no altsetting 0 [ 292.483092][T11795] Node 0 active_anon:51916kB inactive_anon:20kB active_file:59716kB inactive_file:244284kB unevictable:1872kB isolated(anon):0kB isolated(file):0kB mapped:105820kB dirty:312kB writeback:108kB shmem:20616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB kernel_stack:12884kB pagetables:8112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.530360][ T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 292.541102][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.556049][T11795] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 292.590796][ T10] usb 6-1: Product: syz [ 292.597255][T11795] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 292.601281][ T10] usb 6-1: Manufacturer: syz [ 292.651356][T11795] lowmem_reserve[]: 0 2495 2496 2496 2496 [ 292.652193][ T10] usb 6-1: SerialNumber: syz [ 292.673795][T11795] Node 0 DMA32 free:1161028kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51872kB inactive_anon:20kB active_file:59716kB inactive_file:245108kB unevictable:1872kB writepending:420kB present:3129332kB managed:2555588kB mlocked:44kB bounce:0kB free_pcp:117580kB local_pcp:54412kB free_cma:0kB [ 292.676732][ T10] usb 6-1: config 0 descriptor?? [ 292.717570][T11795] lowmem_reserve[]: 0 0 1 1 1 [ 292.718020][T11792] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 292.730273][T11792] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 292.739314][T11795] Node 0 Normal free:4kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1076kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 292.747568][T11817] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 292.770560][T11795] lowmem_reserve[]: 0 0 0 0 0 [ 292.782943][T11795] Node 1 Normal free:3873936kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:236kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:39756kB local_pcp:21424kB free_cma:0kB [ 292.803952][T11817] /dev/rnullb0: Can't open blockdev [ 292.815003][T11795] lowmem_reserve[]: 0 0 0 0 0 [ 292.845437][T11795] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.872807][T11795] Node 0 DMA32: 213*4kB (ME) 125*8kB (UME) 2417*16kB (UME) 3050*32kB (UME) 1305*64kB (UME) 541*128kB (UM) 153*256kB (UME) 79*512kB (UME) 34*1024kB (UM) 15*2048kB (UME) 177*4096kB (UM) = 1161036kB [ 292.923815][T11795] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 292.936452][T11795] Node 1 Normal: 216*4kB (UM) 12*8kB (UME) 10*16kB (UM) 35*32kB (UM) 4*64kB (ME) 4*128kB (UME) 6*256kB (UM) 4*512kB (M) 1*1024kB (E) 2*2048kB (ME) 943*4096kB (UM) = 3874240kB [ 292.958523][T11795] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.968382][T11795] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 292.981332][T11795] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.991314][T11792] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 292.998742][T11792] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 293.007753][T11795] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 293.017454][T11795] 82113 total pagecache pages [ 293.022212][T11795] 28 pages in swap cache [ 293.027137][T11795] Free swap = 122912kB [ 293.031397][T11795] Total swap = 124996kB [ 293.035954][T11795] 2097051 pages RAM [ 293.039774][T11795] 0 pages HighMem/MovableOnly [ 293.044900][T11795] 426256 pages reserved [ 293.049150][T11795] 0 pages cma reserved [ 293.373777][ T5925] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 293.535531][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.546867][ T5925] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 293.559722][ T5925] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 293.570697][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 293.572581][T11836] netlink: 'syz.4.1584': attribute type 83 has an invalid length. [ 293.588335][ T5925] usb 1-1: SerialNumber: syz [ 293.607802][ T5925] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 293.616430][ T10] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 293.630490][ T5925] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 293.914857][T11838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.926151][T11838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.304821][T11844] tmpfs: Bad value for 'mpol' [ 294.397705][T11847] __vm_enough_memory: pid: 11847, comm: syz.4.1587, bytes: 21200660340736 not enough memory for the allocation [ 294.434803][T11847] /dev/rnullb0: Can't open blockdev [ 295.553897][ T10] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 295.566979][ T10] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 295.577273][ T10] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71 [ 295.597868][ T10] usb 6-1: USB disconnect, device number 22 [ 296.153882][ T10] usb 1-1: USB disconnect, device number 84 [ 296.166319][T11862] /dev/rnullb0: Can't open blockdev [ 296.174834][T11862] /dev/rnullb0: Can't open blockdev [ 296.180524][T11862] /dev/rnullb0: Can't open blockdev [ 296.205740][T11862] /dev/rnullb0: Can't open blockdev [ 296.268641][ T5865] Bluetooth: hci0: connection err: -111 [ 296.311394][ T5865] Bluetooth: hci0: connection err: -111 [ 296.441668][T11883] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1599'. [ 296.464683][T11883] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1599'. [ 296.473648][T11883] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1599'. [ 296.614666][ T5871] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 296.616198][ T5865] Bluetooth: hci4: command 0x1003 tx timeout [ 297.103849][ T10] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 297.233786][ T10] usb 6-1: device descriptor read/64, error -71 [ 297.473945][ T10] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 297.604883][ T10] usb 6-1: device descriptor read/64, error -71 [ 297.714002][ T10] usb usb6-port1: attempt power cycle [ 298.055082][ T10] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 298.074252][ T10] usb 6-1: device descriptor read/8, error -71 [ 298.313848][ T10] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 298.344285][ T10] usb 6-1: device descriptor read/8, error -71 [ 298.478703][ T10] usb usb6-port1: unable to enumerate USB device [ 310.836857][ T982] usb 5-1: USB disconnect, device number 20 [ 310.961670][ T1148] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.018738][ T1148] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.067814][ T1148] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.107806][ T1148] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.192458][ T1148] bridge_slave_1: left allmulticast mode [ 311.198873][ T1148] bridge_slave_1: left promiscuous mode [ 311.204842][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.212967][ T1148] bridge_slave_0: left allmulticast mode [ 311.218909][ T1148] bridge_slave_0: left promiscuous mode [ 311.224664][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.289491][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.299661][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.308941][ T1148] bond0 (unregistering): Released all slaves [ 311.416581][ T3010] smc: removing ib device ryz0 [ 311.426222][ T43] wlan1 speed is unknown, defaulting to 1000 [ 311.914937][ T1148] hsr_slave_0: left promiscuous mode [ 311.923832][ T1148] hsr_slave_1: left promiscuous mode [ 311.929616][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.941500][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.949874][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.960879][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.972090][ T1148] veth1_vlan: left promiscuous mode [ 311.978567][ T1148] veth0_vlan: left promiscuous mode [ 312.085189][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 312.099626][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 317.176708][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 339.733857][ T5871] Bluetooth: hci2: command 0x0406 tx timeout [ 356.145661][T12041] /dev/rnullb0: Can't open blockdev [ 356.176537][ T5871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.193937][ T5871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.213865][ T5871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.226746][ T5871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.235408][ T5871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.291647][T12042] wlan1 speed is unknown, defaulting to 1000 [ 356.503985][ T10] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 356.596419][T12042] chnl_net:caif_netlink_parms(): no params data found [ 356.664320][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 356.671297][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 356.680475][ T10] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 356.696283][T12042] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.696613][ T10] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 356.703501][T12042] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.716960][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.720030][T12042] bridge_slave_0: entered allmulticast mode [ 356.729131][ T10] usb 6-1: Product: syz [ 356.734933][T12042] bridge_slave_0: entered promiscuous mode [ 356.745720][T12042] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.752836][T12042] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.753027][ T10] usb 6-1: Manufacturer: syz [ 356.760140][T12042] bridge_slave_1: entered allmulticast mode [ 356.766711][ T10] usb 6-1: SerialNumber: syz [ 356.771458][T12042] bridge_slave_1: entered promiscuous mode [ 356.801921][T12042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.813081][T12042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.839248][T12042] team0: Port device team_slave_0 added [ 356.848370][T12042] team0: Port device team_slave_1 added [ 356.875902][T12042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.882948][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.910369][ T5925] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 356.914205][T12042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.933008][T12042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.943705][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.970993][T12042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.982981][ T10] usb 6-1: Invalid number of CPorts: 0 [ 356.988749][ T10] es2_ap_driver 6-1:7.0: probe with driver es2_ap_driver failed with error -22 [ 357.045641][T12042] hsr_slave_0: entered promiscuous mode [ 357.052046][T12042] hsr_slave_1: entered promiscuous mode [ 357.073878][ T5925] usb 1-1: device descriptor read/64, error -71 [ 357.143046][T12042] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 357.151751][T12042] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 357.185731][T12042] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 357.512846][T12042] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 357.561163][T12042] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.568345][T12042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.575757][T12042] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.582857][T12042] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.615376][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.625879][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.661961][T12042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.681637][T12042] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.693345][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.700517][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.722685][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.729869][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.293799][ T5871] Bluetooth: hci3: command tx timeout [ 359.225181][ T5925] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 359.245357][ T10] usb 6-1: USB disconnect, device number 27 [ 359.365583][T12094] siw: device registration error -23 [ 359.383802][ T5925] usb 1-1: device descriptor read/64, error -71 [ 359.425649][T12042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.496763][ T5925] usb usb1-port1: attempt power cycle [ 359.633511][T12042] veth0_vlan: entered promiscuous mode [ 359.648753][T12042] veth1_vlan: entered promiscuous mode [ 359.670018][T12042] veth0_macvtap: entered promiscuous mode [ 359.679115][T12042] veth1_macvtap: entered promiscuous mode [ 359.721470][T12042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.733460][T12042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.748864][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.014713][T12087] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.023561][T12087] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.035632][T12087] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.373739][ T5871] Bluetooth: hci3: command tx timeout [ 360.536922][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.555363][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.585279][ T3503] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.593557][ T3503] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.877062][T12139] siw: device registration error -23 [ 361.990896][T12171] siw: device registration error -23 [ 362.200205][T12179] overlayfs: missing 'lowerdir' [ 362.453970][ T5871] Bluetooth: hci3: command tx timeout [ 363.070015][T12186] syzkaller1: entered promiscuous mode [ 363.086907][T12186] syzkaller1: entered allmulticast mode [ 363.096969][T12186] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324 [ 363.128605][T12193] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1652'. [ 363.138117][T12193] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1652'. [ 364.347372][T12227] No control pipe specified [ 364.357304][ T982] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 364.513826][ T982] usb 6-1: Using ep0 maxpacket: 32 [ 364.524907][ T982] usb 6-1: config 254 has an invalid interface number: 156 but max is 0 [ 364.542139][ T982] usb 6-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 364.597545][ T982] usb 6-1: config 254 has no interface number 0 [ 364.601993][ T5871] Bluetooth: hci3: command tx timeout [ 364.612863][ T982] usb 6-1: config 254 interface 156 altsetting 8 endpoint 0x9 has invalid wMaxPacketSize 0 [ 364.644878][ T982] usb 6-1: config 254 interface 156 altsetting 8 bulk endpoint 0x9 has invalid maxpacket 0 [ 364.664695][ T982] usb 6-1: config 254 interface 156 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 364.693701][ T982] usb 6-1: config 254 interface 156 has no altsetting 0 [ 364.731030][ T982] usb 6-1: New USB device found, idVendor=0595, idProduct=4343, bcdDevice=1a.be [ 364.741917][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.750257][ T982] usb 6-1: Product: syz [ 364.754831][ T982] usb 6-1: Manufacturer: syz [ 364.759430][ T982] usb 6-1: SerialNumber: syz [ 365.331425][ T982] usb-storage 6-1:254.156: USB Mass Storage device detected [ 365.378148][ T982] usb 6-1: USB disconnect, device number 28 [ 365.574863][ T121] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 365.623815][ T43] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 365.707935][T12253] kvm: pic: non byte write [ 365.724207][ T121] usb 7-1: Using ep0 maxpacket: 16 [ 365.731421][ T121] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.743712][ T121] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.754655][ T121] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 365.768747][ T121] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 365.777889][ T121] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 365.785956][ T121] usb 7-1: SerialNumber: syz [ 365.793888][ T121] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -22 [ 365.845938][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.858304][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.868450][ T43] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 365.878330][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.889650][ T43] usb 1-1: config 0 descriptor?? [ 365.967025][T12264] syzkaller1: entered promiscuous mode [ 365.972566][T12264] syzkaller1: entered allmulticast mode [ 365.995766][ T982] usb 7-1: USB disconnect, device number 2 [ 366.712962][ T43] hid-steam 0003:28DE:1142.0014: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 366.784991][ T43] hid-steam 0003:28DE:1142.0014: Steam wireless receiver connected [ 366.818348][ T43] hid-steam 0003:28DE:1142.0015: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0 [ 366.861116][ T43] usb 1-1: USB disconnect, device number 88 [ 366.886116][ T43] hid-steam 0003:28DE:1142.0014: Steam wireless receiver disconnected [ 368.146470][T12322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 368.163898][ T121] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 368.866088][T12330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.888773][ T121] usb 1-1: config 0 has no interfaces? [ 368.894822][T12330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.924631][ T121] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 368.933991][ T121] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.942893][ T121] usb 1-1: Product: syz [ 368.947388][ T121] usb 1-1: Manufacturer: syz [ 368.952006][ T121] usb 1-1: SerialNumber: syz [ 368.963446][ T121] usb 1-1: config 0 descriptor?? [ 369.263477][T12333] ISOFS: Unable to identify CD-ROM format. [ 369.311170][ T982] hid-generic 0009:0005:0004.0016: unknown main item tag 0x4 [ 369.321118][ T982] hid-generic 0009:0005:0004.0016: item fetching failed at offset 3/4 [ 369.344152][ T982] hid-generic 0009:0005:0004.0016: probe with driver hid-generic failed with error -22 [ 369.539861][T12344] overlayfs: missing 'lowerdir' [ 370.525963][ T5925] usb 1-1: USB disconnect, device number 89 [ 370.567725][T12353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.582245][T12353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.084874][T12358] sctp: [Deprecated]: syz.0.1709 (pid 12358) Use of int in maxseg socket option. [ 371.084874][T12358] Use struct sctp_assoc_value instead [ 371.663350][T12367] ISOFS: Unable to identify CD-ROM format. [ 373.330430][T12406] ISOFS: Unable to identify CD-ROM format. [ 373.747623][T12436] ISOFS: Unable to identify CD-ROM format. [ 373.759190][ T30] audit: type=1326 audit(1756747037.617:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12438 comm="syz.5.1741" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1a6618ebe9 code=0x0 [ 373.788197][ T5925] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 373.837346][T12444] smc: net device bond0 applied user defined pnetid SYZ0 [ 373.953974][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 373.992101][ T5925] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 374.018589][ T5925] usb 1-1: config 0 has no interface number 0 [ 374.062509][ T5925] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 374.079849][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.106623][ T5925] usb 1-1: Product: syz [ 374.111139][ T5925] usb 1-1: Manufacturer: syz [ 374.122385][ T5925] usb 1-1: SerialNumber: syz [ 374.214754][ T5925] usb 1-1: config 0 descriptor?? [ 374.775683][ T5925] radio-si470x 1-1:0.35: DeviceID=0x9242 ChipID=0x0000 [ 374.825983][ T5925] radio-si470x 1-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 374.891627][T12456] netlink: 'syz.6.1747': attribute type 2 has an invalid length. [ 375.313597][ T5925] radio-si470x 1-1:0.35: software version 146, hardware version 66 [ 375.322203][ T5925] radio-si470x 1-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 375.741601][ C0] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 375.748339][ C0] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 375.755113][ C0] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 375.761795][ C0] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 375.768744][ C0] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 375.775624][ T5925] radio-si470x 1-1:0.35: si470x_set_report: usb_control_msg returned -71 [ 375.784150][ C0] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 375.792045][ C0] radio-si470x 1-1:0.35: non-zero urb status (-71) [ 375.799196][ T5925] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -22 [ 375.834111][ T5925] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 375.850620][ T5925] usb 1-1: USB disconnect, device number 90 [ 376.023754][ T43] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 376.183761][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 376.190488][ T43] usb 7-1: unable to get BOS descriptor or descriptor too short [ 376.199136][ T43] usb 7-1: config 3 has an invalid interface number: 1 but max is 0 [ 376.207173][ T43] usb 7-1: config 3 has no interface number 0 [ 376.213282][ T43] usb 7-1: config 3 interface 1 has no altsetting 0 [ 376.221642][ T43] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=bc.24 [ 376.230722][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.238754][ T43] usb 7-1: Product: syz [ 376.242904][ T43] usb 7-1: Manufacturer: syz [ 376.247561][ T43] usb 7-1: SerialNumber: syz [ 376.337975][T12481] ISOFS: Unable to identify CD-ROM format. [ 376.460932][ T43] adutux 7-1:3.1: interrupt endpoints not found [ 376.469463][ T43] usb 7-1: USB disconnect, device number 3 [ 377.364224][ T5925] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 377.516605][ T5925] usb 1-1: config 0 has an invalid interface number: 47 but max is 0 [ 377.525248][ T5925] usb 1-1: config 0 has no interface number 0 [ 377.531399][ T5925] usb 1-1: too many endpoints for config 0 interface 47 altsetting 221: 76, using maximum allowed: 30 [ 377.542495][ T5925] usb 1-1: config 0 interface 47 altsetting 221 has 0 endpoint descriptors, different from the interface descriptor's value: 76 [ 377.555787][ T5925] usb 1-1: config 0 interface 47 has no altsetting 0 [ 377.562533][ T5925] usb 1-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 377.571696][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.581146][ T5925] usb 1-1: config 0 descriptor?? [ 377.805763][ T5925] usb 1-1: string descriptor 0 read error: -71 [ 377.812504][ T5925] ums-realtek 1-1:0.47: USB Mass Storage device detected [ 377.935407][T12508] syzkaller1: entered promiscuous mode [ 377.973923][T12508] syzkaller1: entered allmulticast mode [ 378.008589][ T5925] usb 1-1: USB disconnect, device number 91 [ 378.617313][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.243709][ T5925] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 379.414095][ T5925] usb 6-1: Using ep0 maxpacket: 32 [ 379.425970][ T5925] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 379.434812][ T5925] usb 6-1: config 0 has no interface number 0 [ 379.450520][ T5925] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 379.460121][ T5925] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.470585][ T5925] usb 6-1: Product: syz [ 379.475822][ T5925] usb 6-1: Manufacturer: syz [ 379.480679][ T5925] usb 6-1: SerialNumber: syz [ 379.501120][ T5925] usb 6-1: config 0 descriptor?? [ 379.508667][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1775'. [ 379.641966][ T30] audit: type=1400 audit(1756747043.497:14): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=12542 comm="syz.6.1778" [ 379.684449][T12545] ------------[ cut here ]------------ [ 379.689942][T12545] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 379.697168][T12545] shift exponent 32 is too large for 32-bit type 'int' [ 379.704052][T12545] CPU: 1 UID: 0 PID: 12545 Comm: syz.6.1779 Not tainted syzkaller #0 PREEMPT(full) [ 379.704076][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.704092][T12545] Call Trace: [ 379.704096][T12545] [ 379.704100][T12545] dump_stack_lvl+0x189/0x250 [ 379.704119][T12545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.704134][T12545] ? __pfx__printk+0x10/0x10 [ 379.704158][T12545] ubsan_epilogue+0xa/0x40 [ 379.704178][T12545] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 379.704202][T12545] ? __pfx_v9fs_set_super+0x10/0x10 [ 379.704221][T12545] v9fs_get_tree+0x957/0xa90 [ 379.704234][T12545] ? __pfx_v9fs_get_tree+0x10/0x10 [ 379.704246][T12545] vfs_get_tree+0x8f/0x2b0 [ 379.704257][T12545] do_new_mount+0x2a2/0xa30 [ 379.704267][T12545] ? ns_capable+0x8a/0xf0 [ 379.704278][T12545] ? __pfx_do_new_mount+0x10/0x10 [ 379.704290][T12545] ? path_mount+0x61c/0xfe0 [ 379.704307][T12545] ? user_path_at+0x44/0x60 [ 379.704332][T12545] __se_sys_mount+0x317/0x410 [ 379.704354][T12545] ? __pfx___se_sys_mount+0x10/0x10 [ 379.704371][T12545] ? rcu_is_watching+0x15/0xb0 [ 379.704381][T12545] ? __x64_sys_mount+0x20/0xc0 [ 379.704391][T12545] do_syscall_64+0xfa/0xfa0 [ 379.704403][T12545] ? rcu_is_watching+0x15/0xb0 [ 379.704413][T12545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.704422][T12545] ? clear_bhb_loop+0x60/0xb0 [ 379.704434][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.704454][T12545] RIP: 0033:0x7fa15c38ebe9 [ 379.704471][T12545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.704487][T12545] RSP: 002b:00007fa15d24b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 379.704506][T12545] RAX: ffffffffffffffda RBX: 00007fa15c5c5fa0 RCX: 00007fa15c38ebe9 [ 379.704517][T12545] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 379.704524][T12545] RBP: 00007fa15c411e19 R08: 0000200000000580 R09: 0000000000000000 [ 379.704530][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.704536][T12545] R13: 00007fa15c5c6038 R14: 00007fa15c5c5fa0 R15: 00007ffc5b931bc8 [ 379.704546][T12545] [ 379.704550][T12545] ---[ end trace ]--- [ 379.922819][T12545] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 379.930019][T12545] CPU: 1 UID: 0 PID: 12545 Comm: syz.6.1779 Not tainted syzkaller #0 PREEMPT(full) [ 379.939393][T12545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 379.949452][T12545] Call Trace: [ 379.952739][T12545] [ 379.955677][T12545] dump_stack_lvl+0x99/0x250 [ 379.960283][T12545] ? __asan_memcpy+0x40/0x70 [ 379.964888][T12545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 379.970107][T12545] ? __pfx__printk+0x10/0x10 [ 379.974713][T12545] vpanic+0x281/0x750 [ 379.978710][T12545] ? __pfx_vpanic+0x10/0x10 [ 379.983232][T12545] panic+0xb9/0xc0 [ 379.986968][T12545] ? __pfx_panic+0x10/0x10 [ 379.991402][T12545] ? __pfx__printk+0x10/0x10 [ 379.996002][T12545] check_panic_on_warn+0x89/0xb0 [ 380.000956][T12545] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 380.007384][T12545] ? __pfx_v9fs_set_super+0x10/0x10 [ 380.012600][T12545] v9fs_get_tree+0x957/0xa90 [ 380.017196][T12545] ? __pfx_v9fs_get_tree+0x10/0x10 [ 380.022320][T12545] vfs_get_tree+0x8f/0x2b0 [ 380.026733][T12545] do_new_mount+0x2a2/0xa30 [ 380.031239][T12545] ? ns_capable+0x8a/0xf0 [ 380.035557][T12545] ? __pfx_do_new_mount+0x10/0x10 [ 380.040575][T12545] ? path_mount+0x61c/0xfe0 [ 380.045065][T12545] ? user_path_at+0x44/0x60 [ 380.049563][T12545] __se_sys_mount+0x317/0x410 [ 380.054233][T12545] ? __pfx___se_sys_mount+0x10/0x10 [ 380.059421][T12545] ? rcu_is_watching+0x15/0xb0 [ 380.064170][T12545] ? __x64_sys_mount+0x20/0xc0 [ 380.068919][T12545] do_syscall_64+0xfa/0xfa0 [ 380.073410][T12545] ? rcu_is_watching+0x15/0xb0 [ 380.078153][T12545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.084203][T12545] ? clear_bhb_loop+0x60/0xb0 [ 380.088867][T12545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.094756][T12545] RIP: 0033:0x7fa15c38ebe9 [ 380.099164][T12545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.118759][T12545] RSP: 002b:00007fa15d24b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 380.127166][T12545] RAX: ffffffffffffffda RBX: 00007fa15c5c5fa0 RCX: 00007fa15c38ebe9 [ 380.135126][T12545] RDX: 0000200000000b80 RSI: 0000200000000040 RDI: 0000000000000000 [ 380.143083][T12545] RBP: 00007fa15c411e19 R08: 0000200000000580 R09: 0000000000000000 [ 380.151073][T12545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 380.159052][T12545] R13: 00007fa15c5c6038 R14: 00007fa15c5c5fa0 R15: 00007ffc5b931bc8 [ 380.167019][T12545] [ 380.170270][T12545] Kernel Offset: disabled [ 380.174579][T12545] Rebooting in 86400 seconds..