last executing test programs: 2m59.389943381s ago: executing program 0 (id=73): r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000001140)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28240, 0x0) r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)={0x88, r3, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{}, {0xde1}, @broadcast}, 0x0, @default, 0xa02, @void, @val, @val={0x3, 0x1, 0xe}, @val={0x4, 0x6, {0x10, 0x97, 0x0, 0xffff}}, @void, @val={0x5, 0x3, {0x0, 0x37, 0x2}}, @val={0x25, 0x3, {0x1, 0x34, 0x2}}, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x3, 0xab, 0x4}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x3, 0x0, {0x2, 0x1ffa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3}, 0x300, 0x6, 0x4}}, @val={0x72, 0x6}, @void, @void}}]}, 0x88}, 0x1, 0x0, 0x0, 0x880}, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r2) sendmsg$DEVLINK_CMD_PORT_SET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000680)={0x188, r5, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x3}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x7fffffff}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8000}, 0x48044) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x2, 0x13, r2, 0xb13c9000) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000180)=0x4) mprotect(&(0x7f0000786000/0x4000)=nil, 0x4000, 0x0) 2m59.246511388s ago: executing program 0 (id=74): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f00000000c0)={0xb, @pix_mp}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000580)={{0x6, 0x0, 0x80, {0x2, 0x5000, 0x2}}, "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", "dce07390bf140c8c8bc97143e5d3cca645a927e07bba78c4818cb8bcb5a69e9cf912875a75ed73cd54a5155d6e69c49d43efb4ea2100f5c84f830d3585abebd57c9d428f9e376ed27226e002ca4b095c73aeab40f5cf5edd9cd3d864cbdecfbfe96638c3dee7e09de464cff668659cc062aed2f0f1d4d8b2eb8aaaea6aaafaa21d0b6eae2e0ebd982ff56141d3b1b74f0ed8f87d00c830df5ef22e04bb6003e080fd5f4a63c83d6e096f4dc8469b5638f8a54e63f3ed08be88da113ab42963ccfe3e79158e4e1192b2e5393733b469cd12a598408402d5b5f0fc51d62137468f164a1ab91db35069293ec26780267b4ef2db8cd5d5a0ccbe59a6b9417b11d54f26a4334e190664928550aa00bd0ba59801453cc85479d3dfc219b62e69f9ebfd5235f5bb29ddeb23164f7ec1445ddd89d2f8ce9063905ab42f67d9e3fc1e928a04c2e3269d004a47a5bc94d9d63fc9ff59415b278b6e965a232858bf7abfe5b25c51d03b0fb308a28e5742a82c008c4b9394295e3e4a70734a287db856dd824b38a13342256208ea5616d7a77eba382a679eeb5910fd6a8335fd0a0203afbd71007003b5ac82565b04b7fce641ba7a9a0b0f4ff9e8b3c37c09d8d497d3dc09008c67f31582ddf2f1904feebd443493a72ba27d29c1400d06ec3cb2124e2b27fab8c862882279285aee2ebeebf7665fcc52ef0bcb6d93f0efcb838b037863340bb71d72c158255c77d741d2d1376a96d1cfa0cd417189be7f93e290f888f0d413923055a56b747cee1236ed1dc4cb29b9e00e91e78e1b867da35541982f2afddc33426494ecf8a95c57fe76cbf56d0f9fcebde2bcc8e219a6d56be7b55543cea6e0ccd21b3c97fa2224956b3d9247652b5c84324cf588788a2f4613f84fca9c855e1aee9e4bb218c4195f86ec211b7ac63bec8c54431b2b586d644b5c526a8fb5c8a92e89907fd0dda91600d54d0c0c3020abb1f9840a5ff32fdc1cc8c5107a640044d32ee0c850a7e0d8ce3cfd709d6bae5e57e5ea5b90dd7b3b3958683ed6b1b39951ab377ed83dfb4d7e86c4067a35d3b14663515358864d1d327a4bfa47e0c9b2396e94aa01fa5e184bd29ecf9b2cb0058166ae60e4e551e97c87fa9a36950f49b65b90831c7164cd1ac4acf1bee7b82a71d9a740296dea640c0f540a5b3f04fbc8af9ade85afbc66bcc1beaa78f0b7c0173935b8b60202103ff2ddcabd3544010cfbc32c759ff77f6ba5c1fadbd0ec1d9426940f77bd3bdac3d5377e44b86051405c29e0ab8ed9ae0857562c546f7e2cab512fa566472cf243820bb4a57f891e1229558e62d014023e229c1c69e9f623d0b9f826d9f30602d57a9432bf6882f0e6c1ad8cadee4a718548c8515c0df82aa21278513b9ad05e91251980bcd50de1a17d48f345e6f353e2b813a1693d509ef362a9a2020e3a0650823681787ba6d666f2e6a7ae5d3d4a037435c69452f019ab212258270bd232b01fafa8cf2794a41a0443a15274343fa6c0bb8e4262378d72779c9d8908ae17e069efd3eb76af1bb39352d09b189ca9500375b4d6ad2e0fc736428bcd503248693424f2b62f0d29826f5f912f8e44d5e1765c749c8cd512427d8582ab09818877f395950d6d0042c2ff9a11fd89f328f787a0603725c6f239ce77b05e4fe31a463781530888b1e2c1974ad901bd46a2be38f01a54733d6bdbda0c6e35373cfcb793656bc349b5c83e0d51f349fd88713f67c2f95e1becb43cdc492517dc355e6ad41265d6ba28e7c9edc4901555fa564ab2419446f7c29935e598734bb34b3fb03522a25631e77f2884e17980ac243adc9e8f42b2982657d0eafc469bdd3a5a12c984af2a9596c4478cea72ff08e4a16ead904c137d86ec89055fd47fcdaf6e980eff9240f5fb8938aaf674da85562c9da46f6a09bf27f67f04e6ab56e835cf239cfebc959f60687e5be144852c697d1a0804bf1f66358f8f31d043768177c05cdc119309abd68c6ed201a1f310d69c4c23e5537cc698711b6a40c47fe7eeff374c91fba03c208fa1d3adfc5f1bb59fdc04e2fa43bf48c81cf74f01db04ce85949c03ad4f987549679e07810d2db6a8a1798d403bb0664aefd31cc9b084d84c4777e606b1bf6d2c1066bdf4b4f08a3db6c00066d555e7d339f9932ad841473dd95567e614cf16d5c38b73fb4360b589624c528b8b4d55b83921abbb6d86aef9b570d14eaa34880d197d77a934e64fbfa2db1ae0bd23c039d6c0dd250dcf6675c6882d4c22205f2869d1f8a5ba72219226abb068d09194efebe24df883158ca7afd325e8e5b0968de866ac9509943239435862930f85b80b8aa0b30850575e199dc9b0d3e7b30b5093d3d223b8abc01e80176b53f5413848030a708baaa127b6063cf7d1ca2ce24b056e3adbdc1b913e03ad0068a9ce4be7c6e45e7b4d91631fd400f7982a51e9cb387c887f8f1fd9b0fcf1109f3a25aab7c7ec20b38a8fb52e9c360f9bae3cf2294a89e51a52a4accfd3e7d71e2b78b1a7fb88161c43970bd175381409ee8638a86b83d295e81ee40676c96fbb5a513bf1b0cffaa933805c6d1cc7b715d4411594c58b14f4b9f6f8ee61776a2f6a97e9c5e962a38e866944ba93b441f19be50a8a269a51f37b0826b128081d7444e5ba950e0244435805b2d1c8484e069ab710bc73cd5ccda5a74f68453e15d7800b086678e5ac487343ee4502c8078d29a64900987413b31135f8cdc62d16c4516ea09455f3a751f0681a582d7faaab49f1ca71f3fa7e4b1001cec55a75a60190f1226150ec1a90c311ebb4da026a95070937c943a729e3a7b60f7e28d8c017ff5fe178fc08bfff0007e0358d0e84194a10b1198ac88e14c3612c0251818a8b6246ae0d938a4e640240a4e41b65e3775a4c08537aa8857637f937e7d6573258c8374f549fbb84ae99b7a479a27977bf54cf9aa290b85108d6ea28fde6aa08f3c63b8b0568e254c57891423f65477d1ceed8c3fa2ca757577f11a6fa7b941b164782b84384b9c52935c246ff0790ee31445aba7d2082fe88a40d8f141d1ad4da54f07049dd1e89ca5353a004d9168dc00c091821e4f08fe12ec30290201da9c4b0eadf20c0769a218378abbf56f47938e5b0960a654d9862c412fb4104dde77a3cdde0b65441f302609da97d98805e8cb1267f0bc8fd822325f64a2e0c3c95791bc015c16af7b07a3b05cfac48d9aca8cb0aaf744ccf2b78abc126604df8617a5a8359b523fb5339b5eb17323e495254b84492b47ccd652a80937fa7921ccd8c46a533cf37d923d2089b190ce7cdf05ca9b10287d0283a14ce7367a16bb218b1e5ff87618fb06bdb978b18c434f646b72fb864d58e4dfda669246116263d65a995a07fbf8343c39bef8ae21b328f9d0a9c7f2b24c7564fae481ac8bcc9774b49827f4c6b4d1a2b3208007babdcd530a91b698436d4f21242c04b42027c4345f857f5ce0283877e154b737d9645620e44aabb7406ba116a1529aa29d3c77469be1d9f45a40daa91f16877e3c38a52e482324d9a5483b10e98a9b006efbcae58de98b98df8f07445f566133b4df714cabf1f65c1ae367daac2af34d396d95e9dfd166b9e0568f4201ce0c61a53e0f7a4ab6b25f54db0a246643b84b072a8e54ae346dba6e3a0965e283c6b4859aafcb2d5967d6f777661bdca88171941e4a8e4efbc8b2aff9090283b1caea8f4b0f0cc63c2971812291dc42f3cc48e6a46be81a8feddc6f860ddb200e70d097d7b0ab4c0f59df3fa6708b9fb942671b87365e86642ebd3cbdf4b05e865ed936b3640369f191c22dc239e22011c31fe6256e5c8f6e4a76eec1828b78bd4038ba749f95f34d11bf0fba9dadffd27f16df82b617856c763fef8bf803b9fd86fa93063b6a5ad18d81d65270b3235fef78c01de5e2c3872a29678720d7b62ec4ab4df054a6e64e7b1db71e87f5574b869a45c6aa0d97ba9ff858124d09e2e3a5af32a8b539782adac7504520156e52fdb071e31c872e0884cdb498ea3a4a701e40249f30672fc09c5e66ee022b9841e879a54963f75cd96ab3fd96e27dbf8d057c4621a9050b0fa6bff77cebc08d4fc420ff6ed116a27e71c4c3b0d7c577a1b54f6ccb399123aed909142c5c507329466b59b9a4996fb66296c2bd48bdac196ad33598663c292184473a4f31a60d45bcd8efe1e4ff21c9ea07db18d8e7aba8d35f632589d9df8af497dfd3a16cf20b0361ab2e4afa3f4d450da733e6d75ce870a0da088c86b15d5f287c54f0e2e84b9a12c72a7afff282d65436a7f523e3b3679a368d70e0748a2f7d86b6a854f3cae2e4c30224b42c55ab6b35ef96794a1e73600e9be79e583361e0540938ee6c7d8642ebb9ef411b522f25182afe3f2bf5c129f9270164aa42e23a05ffb9d3c4d5707d3bff74be50ab696bdd6e3261820975ad4916961ff95325759755719ea8a2ca4ee9ec0b78d661b9970686befd9e99a1696efee91bcd64cdc6afcdd54e092ffccc79fb2fe7c5815947432d924ee439edcc05f974c1e2c79d5a1e38c915663d9b0ee17016b537e1d434403351c557c8304c23eeeeab2b5b3b6b3a7cf52beb67e1b9f3cf0da469bd67541dddbec16b72db9b396bc99709992c74b427bf7680af5f9c28105702fad00a9bd661155f794714d0c62b3de4e18444f426608a2535a6c34dcfa4e9f05ecef11e4f1942210243f39d5962a827f14e04ab25d39d864bb92542e2b4a36cface73516c5c0cf2ebe378194927144a22a8d3f57788ee119f0b6e8147ef09d4ebd47c59b136c76ff28980ce7d90966b0cdbb9108a655399ad0893cb63f3243dca894b8d87e45f64724e520ce79f2583a3b13919dc369c2d408c5a234c8b8607245222726f8a082fbe2770115bba525fa861efb03545592a80dca3831569f0d19b5d8b8af0f0b688a27bb9d1309a8511b4dea1dba12bf3df052bf92fbb050591199d100f2c02326cdda0b75e853d50314332c68b807a2e21eaa1ee3554ddf5294d6c3fff21fcd56b9ffb7295249e5c70248f2734db18071295362004c2ab1a5faedb9c200d0f5825ce09062663497eb98b4366c0f1e086442c05a59ebba46ce775464babef0caafa7ecc5a0f5b6f4b64ba49f6efb66d4ef53e75f63f43c41716ccf90d1aad7cbcd1d4f6a5951eb8cf8e5f1b420300699bcb2ad57e43d0a244c2b0a836ff0010deada8106892675b818c713c699f86c0c2cbe1f8813db6d6e030d5d2d65144da75b81311b6534a5de0205a068c3872195dcd053e94bc00d068a30b01cdcd1e77b6db340679fca9ab79ea34c0c312d0729f6f3b7cba93cd3c136b837e65b85250299278b685582e9410d2f5d763cfdd01404b9cca6d3149b51515c29c8a09a912c9026bd87de42ec9afe7f0dac64e37fb124b992b0a64053b538451f8b367782cdd6eeac57253f3b15645aaea46c69d022b439dafb309e570edd866e29774aea0a1f1b707a0defa754b668091bb0fd39e832b99de68822fa2623634c4e5dd50dbbcb84c4346bc6a81a908ab11ed238b3791e288a844654a08b92e5d5029812c528aae0f2e62d7b688ca4600c5536cc29da71a66dd635b471ab88c4ae49dd5eb93b3aeaf5a11da54db1102e9b9d85dda32fc14c371a2fe325422dbf4d6504d7f4979505685fd125ca73b657ec4225822720153e3c7d1edefddd94463704e4af73fd701ad8d79a232e2cfc72cbc8841eeee7d6a1ec2d9d1d3a4ab45352859c359d5210e631cdbc8eb9c04cd77a25cbf5ef24d59ef1f6b835e1fab3b357c65c74efe73b4b742fc3b0e9a5d186303c45"}) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001143b0b"], 0x18}}, 0x9ee9fd74460f2f8e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8c) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) rmdir(&(0x7f0000000080)='./file0\x00') syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='hugetlbfs\x00', 0xb00002, 0x0) 2m59.121105671s ago: executing program 0 (id=75): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf6486000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) flistxattr(r0, &(0x7f0000000000)=""/121, 0x79) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x4004) ioprio_get$pid(0x3, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x2600, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0xc0684608, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m58.866108259s ago: executing program 0 (id=76): creat(&(0x7f0000001380)='./file0\x00', 0x4) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x33, 0x8, 0xe, 0x5, 0x5, 0x2, 0x6, 0x0, 0xfc, 0x5, 0x2, 0x3, 0x28, 0x6}, 0xe) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fallocate(r1, 0x1, 0x9, 0x81) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bind$802154_dgram(r0, &(0x7f0000000340)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0xb) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0x20000006}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x1a, r2, 0x0, &(0x7f0000000040)) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 2m58.688444833s ago: executing program 0 (id=77): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = syz_usbip_server_init(0x80000002) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r2, &(0x7f0000000140)=0x5df, r2, 0x0, 0x156a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000100)={r6}) close(r6) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r8, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) r9 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x283a2, 0x0) r10 = dup3(r9, r8, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r11 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3ff, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r11, 0xc0305602, &(0x7f0000000080)={0x0, 0x9e6}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000440)) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r12, 0x29, 0x1a, 0x0, &(0x7f0000000080)) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="337dccc9c17e3fe5a06f3a586e37327c0f4bc72c36c52731a3ce44f9046e066d7bd931c233343e737ad4d5a51ef591683023f8315f237ea482193a7218027b05107bf718a7bd57a4526e010cfa6494e98ff16b221533a6cf560908d239bfb73210230782fd5d5d8cf1f7d8444e1c98f09ab2f6bade8248567461c8262895c0ac663362083470ed8a1d8bc3c0e28ae75c0214c1e2a40dbeb866d27f658bd1a21f29ae36f324384a", @ANYBLOB="c1cf816ec1582bcf42bb2c6647392660ab8b13f73be105a17e44d74546ee7fa9313f4b315e8f9ec8a3d35f09728fd99b5bab161cae382f24c2a4b592a267ff286e790edefb7ee86b7adff6772c514062811ddb80ea1818b6f9e97acbca248da2e8ac2b9b700eb6ecd9f4538ff9b42e94b695a2d175dee17d182ca03f830a3dc6cf8544cff2fa84cadacb176d171422b1e059def2a2f62456186e002ab45e1dd705c1a003b92ae2ae5971c91d57755c25981111f079f9fbfae715b4482700294fe533044fc25988117a080eb5d818c6d0f0bc6ebf38795c7804a494266b60d780c1", @ANYRESOCT=r12, @ANYRES32=r11, @ANYRES8=r7, @ANYRES16=r4, @ANYRES16=r1, @ANYRES32=r4, @ANYRESHEX=r10], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r13 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') write$P9_RVERSION(r13, &(0x7f0000000300)=ANY=[], 0x15) r14 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x480, 0x0) ioctl$KVM_CHECK_EXTENSION(r14, 0xae03, 0x52) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2m58.297593676s ago: executing program 0 (id=78): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="86eeb7bc811d9d8dd63512d21c400000", @ANYRES16=r2, @ANYBLOB="59bbfeffffff000000000100000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000340)={0x40, 0x8, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m57.917391153s ago: executing program 32 (id=78): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="86eeb7bc811d9d8dd63512d21c400000", @ANYRES16=r2, @ANYBLOB="59bbfeffffff000000000100000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r5, 0x4b47, &(0x7f0000000340)={0x40, 0x8, 0x3}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m43.954035848s ago: executing program 1 (id=136): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000133000/0x2000)=nil, 0x2000, 0x2, 0x28011, r0, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x81, 0x8, '9P2000.u'}, 0x15) 2m43.902380849s ago: executing program 1 (id=137): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000001c0)="81", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) chmod(&(0x7f00000000c0)='./cgroup\x00', 0xc) (async) chmod(&(0x7f00000000c0)='./cgroup\x00', 0xc) 2m43.658902786s ago: executing program 1 (id=138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = syz_pidfd_open(r1, 0x0) ioctl$VIDIOC_QBUF(r2, 0xc058ff0b, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x74, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xba7, 0x17}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x97b}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}]]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2m42.945597646s ago: executing program 1 (id=139): mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x221a80a, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) migrate_pages(r0, 0xcd, &(0x7f0000000180)=0x5, &(0x7f00000001c0)=0x1) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./cgroup/file0\x00', &(0x7f0000000100), &(0x7f0000000200), 0x2, 0x2) 2m42.6468001s ago: executing program 1 (id=140): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) (async) 2m42.43592415s ago: executing program 1 (id=141): r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x28, 0x1, 0x0, "732283ef1acb5aa7abe50000000009be908100"}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000feffffff0000f5000000000000000000000000000000000000000000000000000000000000000000000097000000000000ffffffff000000000000000000000000000000000000000000000000000093345d7cc2c19fbabc9132045dfc000000000000000000000094adb22b1a7a284674c8ee"]}, 0x108) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb, 0x9, 0xfc, 0x7f}, {0x917, 0x80, 0x0, 0x4}]}) mmap(&(0x7f000009f000/0x2000)=nil, 0x2000, 0x3000009, 0x110, r3, 0x5e3ec000) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000000c0), &(0x7f0000000100)={'U+', 0x3c3}, 0x16, 0x3) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) splice(r5, 0x0, r5, 0x0, 0x4, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000abd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000031e000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0xffffffff, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48810}, 0x4) ptrace(0x10, r8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ptrace$poke(0xffffffffffffffff, r8, &(0x7f0000000080), 0xffffffffffffffb) setsockopt$sock_linger(r4, 0x1, 0x4a, &(0x7f0000000000)={0x0, 0x20000004}, 0x8) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='erofs\x00', 0x200c400, 0x0) 2m27.2479641s ago: executing program 33 (id=141): r0 = syz_open_dev$vim2m(&(0x7f0000000b00), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000180)={0x28, 0x1, 0x0, "732283ef1acb5aa7abe50000000009be908100"}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x200000000140], 0x2, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000feffffff0000f5000000000000000000000000000000000000000000000000000000000000000000000097000000000000ffffffff000000000000000000000000000000000000000000000000000093345d7cc2c19fbabc9132045dfc000000000000000000000094adb22b1a7a284674c8ee"]}, 0x108) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r2, &(0x7f00000000c0), 0x10) sendto$l2tp(r2, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb, 0x9, 0xfc, 0x7f}, {0x917, 0x80, 0x0, 0x4}]}) mmap(&(0x7f000009f000/0x2000)=nil, 0x2000, 0x3000009, 0x110, r3, 0x5e3ec000) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r4, &(0x7f00000000c0), &(0x7f0000000100)={'U+', 0x3c3}, 0x16, 0x3) r5 = syz_open_dev$midi(&(0x7f00000001c0), 0x2, 0x2) splice(r5, 0x0, r5, 0x0, 0x4, 0x4) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000abd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000031e000/0x1000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) syz_clone(0x2100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0xffffffff, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x85, &(0x7f0000000000)={r7, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48810}, 0x4) ptrace(0x10, r8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ptrace$poke(0xffffffffffffffff, r8, &(0x7f0000000080), 0xffffffffffffffb) setsockopt$sock_linger(r4, 0x1, 0x4a, &(0x7f0000000000)={0x0, 0x20000004}, 0x8) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='erofs\x00', 0x200c400, 0x0) 1m41.510014975s ago: executing program 3 (id=406): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r1], 0x58}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000580)='\x00'/16, 0x10) r4 = accept4(r3, 0x0, 0x0, 0x80000) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x402000, 0x0) sendmmsg$inet6(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="29e8d660a29649cbd6a8a04be450b021be2cf740a032fc7b9f3fead7e27975daa35a2d945e7d2b5f74157fbae907097049b5a09cf57ce1e9194cbd221b39862350ec971efa972d9fab7988b3484396c921445184ef224ef0713b8d", 0x5b}, {&(0x7f0000000140)="58ff2c517703c8a63fae2626ecb526bfc3c7f41273", 0x15}], 0x2, 0x0, 0x0, 0x7000300}}], 0x1, 0x41) (async) sendmmsg$inet6(r5, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="29e8d660a29649cbd6a8a04be450b021be2cf740a032fc7b9f3fead7e27975daa35a2d945e7d2b5f74157fbae907097049b5a09cf57ce1e9194cbd221b39862350ec971efa972d9fab7988b3484396c921445184ef224ef0713b8d", 0x5b}, {&(0x7f0000000140)="58ff2c517703c8a63fae2626ecb526bfc3c7f41273", 0x15}], 0x2, 0x0, 0x0, 0x7000300}}], 0x1, 0x41) flock(0xffffffffffffffff, 0x1780f9c373410dea) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4004) unshare(0x2040400) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x2a, &(0x7f0000000000)=[{0x0, 0xfffffffffffffed7}], 0x1}, 0x24000000) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000, r6}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="100026bd7000fcbddf25010000000800020003000000080002000300000035000000080005000004edf9669a16f435f8dbd40100000800050005add62027070800050085b4f4130c00048005000300010000000800020001000000"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x1cedb331b0121389) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x402, 0x0) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x402, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x2002, 0x9, 0x8, 0x899d, 0x3, 0xfffffffb, 0x1ff, 0x10, 0xfffffe01, 0x50db, 0x2, 0x2, 0x7, 0x8811, 0x80000009], 0x1, 0x4000007}) (async) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x2002, 0x9, 0x8, 0x899d, 0x3, 0xfffffffb, 0x1ff, 0x10, 0xfffffe01, 0x50db, 0x2, 0x2, 0x7, 0x8811, 0x80000009], 0x1, 0x4000007}) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUTCMAP(r8, 0x4605, &(0x7f0000000280)={0xc, 0xffffffffffffffd1, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) accept4$inet(r5, 0x0, &(0x7f0000000400), 0x0) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) 1m41.37608282s ago: executing program 3 (id=407): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003e80)=ANY=[@ANYBLOB="380000000314010000000000ffdbdf25090041007369770014003300767863616e26ab48d34b8ca1a83100000000000000000000000000000000000000000000bcad09000000000000023a1716a53d6a38b4a50dd85a05b0fc998dfbe55e3f07f2d6abd0e367fb0e1391ad1a2e77db519fc59834ec2f3627bc8186fbaafe0f411ed736daf903a47e58c29340f5345239c38de812a438cb0cd9ab8ca8d42f69989daf4036bfea630b82be8d1c6e1b32e90a5a26a10993a48ac006f055b5251d24ee2691aa493fd2bf0ad738c49063c221b409207b0b4803f0a7105e7042cffa90d39723396f58f8a4eac6"], 0x38}, 0x1, 0x0, 0x0, 0x200c08a5}, 0x8000) ioctl$IOCTL_GET_NUM_DEVICES(0xffffffffffffffff, 0x40046104, &(0x7f0000003e40)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r1, 0x3b84, &(0x7f0000000100)={0x20, r3, 0x1, 0x0, &(0x7f0000000140)=[{}]}) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) r4 = accept4$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) clock_gettime(0x0, &(0x7f0000003dc0)={0x0, 0x0}) recvmmsg$unix(r4, &(0x7f0000003b80)=[{{&(0x7f0000000100)=@abs, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000240)=""/170, 0xaa}, {&(0x7f0000000300)=""/81, 0x51}, {&(0x7f0000000380)=""/205, 0xcd}], 0x4}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000480)=""/131, 0x83}], 0x1, &(0x7f0000000580)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000000640)=@abs, 0x6e, &(0x7f0000000840)=[{&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/156, 0x9c}, {&(0x7f0000000780)=""/148, 0x94}], 0x3, &(0x7f0000000880)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}}, {{&(0x7f0000000900)=@abs, 0x6e, &(0x7f0000000cc0)=[{&(0x7f0000000980)=""/134, 0x86}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000000b40)=""/156, 0x9c}, {&(0x7f0000000c00)=""/164, 0xa4}], 0x4, &(0x7f0000000d00)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}, {{&(0x7f0000000d80)=@abs, 0x6e, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/235, 0xeb}, {&(0x7f0000002480)=""/4096, 0x1000}], 0x2}}, {{&(0x7f0000000f40), 0x6e, &(0x7f0000001240)=[{&(0x7f0000000fc0)=""/224, 0xe0}, {&(0x7f00000010c0)=""/97, 0x61}, {&(0x7f0000001140)=""/52, 0x34}, {&(0x7f0000001180)=""/177, 0xb1}], 0x4, 0x0, 0xb}}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001280)=""/141, 0x8d}], 0x1, &(0x7f0000003480)=[@cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000003800)=[{&(0x7f0000001380)=""/37, 0x25}, {&(0x7f00000013c0)=""/30, 0x1e}, {&(0x7f0000003540)=""/92, 0x5c}, {&(0x7f00000035c0)=""/50, 0x32}, {&(0x7f0000003600)=""/87, 0x57}, {&(0x7f0000003680)=""/128, 0x80}, {&(0x7f0000003700)=""/199, 0xc7}], 0x7, &(0x7f0000003880)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000003900), 0x6e, &(0x7f0000003a00)=[{&(0x7f0000003980)=""/94, 0x5e}], 0x1, &(0x7f0000003a40)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118}}], 0x9, 0x40002141, &(0x7f0000003e00)={r5, r6+10000000}) 1m41.202507085s ago: executing program 3 (id=408): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x501040, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{0x7fff, 0x3}, {0xf, 0x400}, {0x40, 0x1}, {0xfffe, 0x5}, {0x1000, 0x8001}]}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 1m41.015117372s ago: executing program 3 (id=410): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000173000/0x1000)=nil, 0x1000, 0xc, 0x10, r0, 0xa79b3000) sendmsg(0xffffffffffffffff, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="817bb97cdac2f8f819447aa4a50c293af36b43cab2641b7753df26944b52221c709e644460", 0x25}], 0x1}, 0x24040050) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_io_uring_setup(0x23d, &(0x7f0000000240)={0x0, 0x9c0e, 0x10100, 0x0, 0x200}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r10, 0x4c00, r9) dup2(r9, r7) sendmsg$NL80211_CMD_FRAME(r6, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) 1m40.575068358s ago: executing program 3 (id=413): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x240000, 0x0, 0x0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (rerun: 64) ioctl$BLKRRPART(r1, 0x125f, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 1m40.303597537s ago: executing program 3 (id=414): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='projid_map\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x121c01, 0x785cbaaeb03932d1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_STATFS(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="0600cd00000000004200330000a810000802110000010802110000005050505050509c00c0"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m39.729762144s ago: executing program 34 (id=414): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='projid_map\x00') r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002140)=ANY=[]) syz_fuse_handle_req(r1, &(0x7f00000021c0)="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", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x121c01, 0x785cbaaeb03932d1) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f0000000000)={0x30}, 0x30) write$FUSE_STATFS(r0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="0600cd00000000004200330000a810000802110000010802110000005050505050509c00c0"], 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.287796515s ago: executing program 5 (id=918): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24eb02, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') r4 = dup3(r1, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x0, r3}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x7ffff000) 5.705863958s ago: executing program 5 (id=920): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108990f2c006b0601020301090212000107d440000904650000be866d01"], 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001739e6108990f2c006b0601020301090212000107d440000904650000be866d01"], 0x0) r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) recvmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000000100)}, 0x40000120) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000d, 0x22052, r1, 0x93771000) 4.822021429s ago: executing program 6 (id=924): r0 = socket$caif_stream(0x25, 0x1, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004110) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x480d5}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 4.651043239s ago: executing program 4 (id=925): mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000240)='ext4\x00', 0x200000, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='io\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) fchmodat(r0, &(0x7f0000000200)='./cgroup/file0/file0\x00', 0x20) setresuid(r1, r1, 0x0) stat(&(0x7f0000000140)='./cgroup/file0/file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f00000000c0), 0x240000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@dont_hash}]}}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f0000000240)='ext4\x00', 0x200000, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='io\x00') (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) (async) fchmodat(r0, &(0x7f0000000200)='./cgroup/file0/file0\x00', 0x20) (async) setresuid(r1, r1, 0x0) (async) stat(&(0x7f0000000140)='./cgroup/file0/file0\x00', &(0x7f0000000180)) (async) mount$fuse(0x0, &(0x7f0000000000)='./cgroup/file0\x00', &(0x7f00000000c0), 0x240000, &(0x7f0000000280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}], [{@dont_hash}]}}) (async) 4.621870944s ago: executing program 6 (id=926): clock_getres(0x3, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000000, 0x5d031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$TIPC_CMD_SET_NETID(r3, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./file0/file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000680)='./file0/file0\x00', 0x0, 0x3091, 0x0) mmap$binder(&(0x7f0000ec4000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x0, 0x0) r7 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x20002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000000c0)=0x17) move_mount(r6, &(0x7f0000000280)='./file0\x00', r6, 0x0, 0x272) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x2000, 0x0) ioctl$FBIOPUTCMAP(r8, 0x4605, &(0x7f0000002a80)={0x80000001, 0x1, &(0x7f0000002980)=[0x7], &(0x7f00000029c0), &(0x7f0000002a00), 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 4.496156331s ago: executing program 4 (id=928): r0 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x0, 0xffffffff, 0x80000001, 0xfffffffc}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x11) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000000c0)="d8df0f23b3b9ce000000b807000000ba000000000f30658154fea900600000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000ba000000000f300fc79d53bf0000c4e16dd3010f2202", 0x4f}], 0x1, 0x4d, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000008000080020005433ab954"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES16, @ANYRES32=r5, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x20008801) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="ec000000210001002dbd7000fedbdf25fe880000000000000000000000000101ac1414bb0000000000000000000000004e240002000700010a0080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="af6b6e00010000009c0011001901010000000000000000000000000020010000000000000000000000000001ac14143e0000000000c8b10000000000ac1414bb00000000000000000000000032fcff00073500000a00020000000000000000000000020000000000ac1e01010000000000000000000000000a010102000000000000000000000000fe80000000000000000000000000002f33"], 0xec}}, 0x20000000) ioctl$UI_SET_RELBIT(r4, 0x40045566, 0x3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_buf(r8, 0x0, 0x20, &(0x7f0000000040)="be9b5683", 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, 0xffffffffffffffff, 0xf648a000) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x14}}, 0x4000080) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r10, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x6}) ioctl$KVM_SET_GSI_ROUTING(r10, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB='!\x00\x00']) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0) 4.367829322s ago: executing program 4 (id=929): newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(r0, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, 0x0) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000000000200d0501320000000000010902240001000060b109040000010300010009210101080122030019058c03ff030c0003"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x3, {0x3, 0x5, '\x00'}}, 0x0, 0x0, 0x0, 0x0}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r6, &(0x7f0000011800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bd40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20, 0x20040010}}], 0x1, 0x20004810) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1181}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r8, 0x3b72, &(0x7f0000000000)=ANY=[]) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)=[@increfs_done], 0x0, 0x0, 0x0}) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r11 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r12 = fcntl$dupfd(r11, 0x0, r11) write$P9_RXATTRWALK(r12, &(0x7f0000000000)={0xf, 0x1f, 0x2, 0x4}, 0xca80) write$P9_RGETATTR(r12, &(0x7f0000000180)={0xa0, 0x19, 0x2, {0x208, {0x8, 0x2, 0x5}, 0x0, r4, r5, 0xaf5, 0x1, 0xb, 0x10001, 0x1ff, 0x200, 0x101, 0x200, 0x4, 0x5, 0xfffffffffffffffe, 0x2, 0x26, 0x1ff, 0x400}}, 0xa0) pread64(r2, &(0x7f0000000240)=""/184, 0xb8, 0x100000000) r13 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip_vs\x00') preadv(r13, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/132, 0x84}], 0x1, 0xfffc, 0x0) sendfile(r10, 0xffffffffffffffff, 0x0, 0x7ffff002) 4.324512746s ago: executing program 6 (id=930): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) mount$cgroup(0x0, &(0x7f0000000180)='./file3\x00', &(0x7f00000001c0), 0x14440, &(0x7f00000007c0)={[{@cpuset_v2_mode}]}) ioctl$BLKRRPART(r1, 0x125f, 0x0) 4.060923917s ago: executing program 6 (id=933): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000000)=0x2ddab422) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0xeffd) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0x7, 0x4, 0x408, 0x0, 0x210, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe0}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "39db3a550f0420921586a79ec5b64093e6072fc889bea60bdd24beacd802"}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@random="d6c0105d02ce", @loopback, @empty, 0x8, 0x1}}}, {{@arp={@loopback, @rand_addr=0x64010100, 0xff000000, 0x0, 0x5, 0xd, {@mac, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x5, 0x0, 0x6, 0x40, 0x12, 'veth1_to_bridge\x00', 'ip6_vti0\x00', {0xff}, {0xff}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @broadcast, @rand_addr=0x64010100, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 3.901910754s ago: executing program 6 (id=934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x2) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000400)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000008c0)=ANY=[@ANYBLOB="129e6d6611a54d10c205b627ac4f544643010000d3e457200400000000005d141b4e6e4cc19301000000000904442058227a02d1689c343c9f8089475605fbf1557d8e196f76cfc64fd72d1e5483192d85c4daff5af03616c49c7753d824a188dbfd26228765481d9ad9c442a2ebf9fcaabed12e61cf87b61bdb4b230e592f61bb0ff78e8ffb6bb56e02f6f3baca971844930a30f723564b3cd7a028204e2505c733"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000180)="f56f3fa31c1d4910fb35edc4d9e02922a54620d156d062f97d0dbf2bf8e628dbe9ab974dd294701098ad8b78be0c56d35211e87d9669fc23f3c3a512aeebe7c95b", 0x41}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x0, 0xee00}}, './file0\x00'}) sendmsg$nl_generic(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000002800020027bd7000fedbdf251f00000004000700170091800500c6000000000004001f807143aa5a220d2f0031007d80040085800800ca000700000004001900040082800800e400", @ANYRES32=r5, @ANYBLOB="04009c80ea26b357dbfda20f5833a6b4614d0000f1cd"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x840) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000040000900fffffffffddbdf250200000004001f000800018004001f80100004800400658008008900", @ANYRES32=0x0, @ANYBLOB="3ddf7635cc77df3fee0f732ac970cdaa7161efc43e615115ea0918debafc41c81ef0d6d65502520933df18354a09486b97ff575fe8ba8cdf8694b32dbd9e5cb39b83e8d15e"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000080)={0x24, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) ptrace$cont(0x7, 0x0, 0x401, 0x8) sendto$inet6(r0, &(0x7f0000000400)="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", 0x481, 0x4000, 0x0, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r6, 0x0, 0x7ffff000) 2.579199401s ago: executing program 5 (id=939): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000680)) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x71) statx(0xffffffffffffffff, 0x0, 0x400, 0x40, 0x0) r4 = socket$caif_seqpacket(0x25, 0x5, 0x5) getsockopt$sock_int(r4, 0x1, 0x2a, 0x0, &(0x7f0000000080)) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xa4}, 0x1, 0x0, 0x0, 0x8040}, 0x4040001) 2.419294829s ago: executing program 5 (id=940): add_key(&(0x7f0000000000)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 2.248409379s ago: executing program 5 (id=942): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) chdir(0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x2, 0xfa, @scatter={0x0, 0x200000, 0x0}, &(0x7f0000000000)="1c35", 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r4 = syz_clone(0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xffffffffffffffff, r4, 0x7fff, &(0x7f0000000240)="12d6cacc400cb28384641a92606ff1d67f7718dadaa571f32ee2eb179974146cb14384e0e9a430de36da9cfa0941cbdb45400dbbf771a9f0d840b73de0cb08d1d3be1afc468f2a26a39cdfba80aa009e0b6b4bab31776e6f4b3cbe471b323c3e805335edbad98b115636442e777dce7bc27e899b8bc13ebd3a9b22f3813b493bcddc5ecc46eada68531ae03f1bb0b359b18b6d79166b19d986d6a6a09da8e03277") sendfile(r3, r3, 0x0, 0x7ffff000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) r7 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f768000905013d000401ff070905021008"], 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) ioprio_set$pid(0x2, 0x0, 0x0) 1.23488807s ago: executing program 4 (id=943): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x11, r1, 0xf648e000) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x9, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x12, r0, 0x910d0000) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) socket(0x10, 0x3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x11, r1, 0xf648e000) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000000)=0x9, 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x12, r0, 0x910d0000) (async) socket$kcm(0x10, 0x2, 0x4) (async) close(r3) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800190007000200060007c00200bc24eab556a705251e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) (async) 1.033101291s ago: executing program 2 (id=945): r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000080)=0x14) socket$packet(0x11, 0x2, 0x300) socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) sendto$inet6(r1, &(0x7f0000000280)="02042c08ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1.016730729s ago: executing program 4 (id=946): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$SIOCSIFMTU(r1, 0x89e0, &(0x7f0000000000)={'veth0_vlan\x00', 0x200}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="280000001e00210000000000000000000700000000000000000000000a00020077"], 0x28}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, '.\x02\x00'}) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) recvmmsg(r5, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x40010080, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="030704707900000000000100040004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, &(0x7f00000001c0)) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a32000000002800048008000240000000000800014000000005140003007665746831466d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000020000480140003"], 0xe8}}, 0x0) quotactl_fd$Q_SETQUOTA(r7, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0xffffffffffffff7f, 0x5b81, 0xc2, 0xa27, 0x9, 0x9, 0x80000000000, 0x0, 0x401}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r4, 0xc0189375, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) bind$bt_hci(r9, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r10, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_retopts={{0x10, 0x110, 0x2}}], 0x10}, 0x0) write(r9, &(0x7f0000000000)="0c000000010001", 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r4}, '.\x02\x00'}) 853.982985ms ago: executing program 2 (id=947): creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)="68cee02bc855d998f4117cf3759cf171d5abaa3a0351d2759cc7a29fd9673b", 0x1f}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000004) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r0, r2, 0x0, 0xf2) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x2}, {0xe5, 0xb}]}, 0x14, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0xb0000, 0x0) 798.524784ms ago: executing program 6 (id=948): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020b06050e020909430009003f00064c0a0006000d0085a168d0bf46d32345653600648d0a000500eb16000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160004000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x8c0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"/348, @ANYRES16=r2, @ANYBLOB="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"], 0x41c}, 0x1, 0x0, 0x0, 0x20048000}, 0x200000c1) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010d0000000708b5192100c7980000000109021b00022000ac00090400000107000009090585cf"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008004"]) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x202082, 0x0) 668.465994ms ago: executing program 2 (id=949): creat(&(0x7f0000000140)='./file0\x00', 0x71) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000300), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='or_inodes=M']) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x60000030) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'sit0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x3a, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xff, 0x0, 0x45, [0x0, 0x1]}}) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) r3 = fcntl$dupfd(r1, 0x0, r1) r4 = syz_open_dev$vim2m(&(0x7f0000000340), 0x1fb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000140)={0x4f, 0x1, 0x2, "1c13ebdaf2f20d55806b26b1d750185fd75a206da058e85b2197edb1439b1cc2"}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000240)={0xe0002000}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x9c}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e751d"], 0x24) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 553.81189ms ago: executing program 5 (id=950): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002004e23000000000000000000000000080012000000000000000000000000001700000000000000000000000000000002000000000000000000000000000000fe800000000000000000000000000000030005000000000002"], 0x80}}, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$caif_seqpacket(0x25, 0x5, 0x3) accept4(r3, 0x0, 0x0, 0x0) write$char_usb(r2, &(0x7f0000000380)='\'', 0x1) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x80000000, [0x400, 0x4, 0x9], [{0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x0, 0xe, 0x1, 0x1, 0x1, 0x1}, {0xb, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xb, 0x3, 0x1}, {0xfffffffd, 0x800, 0x0, 0x1, 0x1}, {0x4, 0x358e3374, 0x1, 0x0, 0x1, 0x1}, {0x56000000, 0x2, 0x1}, {0xffffffa1, 0x101, 0x1, 0x0, 0x1}, {0x8001, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xd, 0x6}, {0xe3, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xd81a, 0xff, 0x0, 0x1, 0x1}], 0xca2}) ioctl$BLKRRPART(r0, 0x125f, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002004e23000000000000000000000000080012000000000000000000000000001700000000000000000000000000000002000000000000000000000000000000fe800000000000000000000000000000030005000000000002"], 0x80}}, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) socket$caif_seqpacket(0x25, 0x5, 0x3) (async) accept4(r3, 0x0, 0x0, 0x0) (async) write$char_usb(r2, &(0x7f0000000380)='\'', 0x1) (async) pipe2$9p(&(0x7f0000001900), 0x0) (async) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) dup(r5) (async) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) (async) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000000)={0x80000000, [0x400, 0x4, 0x9], [{0x3, 0x1, 0x1, 0x1, 0x1, 0x1}, {0x0, 0xe, 0x1, 0x1, 0x1, 0x1}, {0xb, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xb, 0x3, 0x1}, {0xfffffffd, 0x800, 0x0, 0x1, 0x1}, {0x4, 0x358e3374, 0x1, 0x0, 0x1, 0x1}, {0x56000000, 0x2, 0x1}, {0xffffffa1, 0x101, 0x1, 0x0, 0x1}, {0x8001, 0x5, 0x0, 0x1, 0x0, 0x1}, {0xd, 0x6}, {0xe3, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xd81a, 0xff, 0x0, 0x1, 0x1}], 0xca2}) (async) ioctl$BLKRRPART(r0, 0x125f, 0x0) (async) 514.783751ms ago: executing program 2 (id=951): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f00000002c0)={@local, r1}, 0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 398.754043ms ago: executing program 2 (id=952): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x62800) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001100), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000033c0)={0x0, 0x0, &(0x7f0000003380)={&(0x7f0000000380)=ANY=[@ANYBLOB="44000000ad7f2faccec25a9e0dd0d60c44b064467258afdad4636fb285a1b95be239c9799597ca7017b5daa0326827a9d044f65aac10f1a1589fb806ad7cdcb5889782ddab008c8e87ebc2b835a1f565aee141d6b486e9239b01b977b2", @ANYRES16=r2, @ANYBLOB="010027bd7000fddbdf2509000000300003801400020076657468305f746f5f626f6e64000000080005007f00000108000100020000000800030003000000"], 0x44}, 0x1, 0x0, 0x0, 0xc0c1}, 0x24000804) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x5, 0x12, r1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xb5, "b4f0b047a57270a5d07a36300c7ed3525a15e3f5145d5b288b49612a6f34200d5e774a7de7ea92b15f3180e311d3ba7c612cb7e477b97b415f9746536a39232682f5811782e3f1d009f31e40c9a1c4120c1be4b325eda8c862aab23d89e9bf2a0ce477c3fb682f1746df439d91366d0eed28ce4b909c0c9abe8ab99dc3a2bba8f777d696a00713f3e088a3e6818aa5759e8f6070fa4cbfa8b8187c6a92125c80cd89a33c4a6a9ea231c15e61b8108ca21406905228"}, &(0x7f0000000000)=0xbd) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r7, 0x4) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r9 = inotify_init() inotify_add_watch(r9, &(0x7f00000001c0)='./file0\x00', 0x4a9) inotify_add_watch(r9, &(0x7f0000000000)='.\x00', 0x8500017e) removexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='system.posix_acl_default\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x1) r10 = ioctl$KVM_GET_STATS_FD_cpu(r8, 0xaece) read$FUSE(r10, &(0x7f0000008fc0)={0x2020}, 0x2020) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r7, 0x4) 97.572801ms ago: executing program 2 (id=953): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi3\x00', 0x10041, 0x0) ioctl$COMEDI_BUFINFO(r1, 0xc02c640e, &(0x7f0000000080)={0x1, 0x3, 0x101, 0xfffffff5, 0x4, 0xd, 0x52f}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001340)) (async) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$alg(r2, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000005c0)="25237b98efec5a76c53fc361df69b2ef57b2c0e07f39dfc7070bb7eba90454f631950b94d15bf500acdc64d2d74f033c5ed684a96d2fff7e9a685a591d3c074904adef30928b45bc92adfd2d03971c9a2a", 0x51}, {&(0x7f0000000640)="1a68f5327b94c5a1eb16045b8776043272823a3ea2b1b7a0a526f9e5c139976db25b0435224c5deabe6756ef5c8ab639fe5c5bc40dd98ea7c565b6a2df494415b0a1c470ac2aa99bcc66761a532684cdb52daebcb7759d5f2ff3c463decaaf27", 0x60}, {&(0x7f0000000840)="3800ed5823f1f81b2f390578b5cf1ddbb9cca222119b6d641208c77930cabf889d4e2eb3aab66bf18db178235c837a5d1d2486c5780baa42a1e379d8dc756bd4262b06764a9dbd25456978e453d36e2776b7a256ace277e1a6d12ce865f1efb84c7d96366d8f", 0x66}, {&(0x7f0000001380)="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", 0x1000}], 0x4, &(0x7f00000008c0)=[@assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x5}, @assoc={0x18, 0x117, 0x4, 0x18000}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x90, 0x117, 0x2, 0x7a, "39504b4911ca7025aa80feb9bff039a76750c996229e96924677ef178d6721301fe35e2c5865e68097e4c1e0961724a598e602c490e2e9f0f3547a65899cca476cfcddd38c8f90bbb68fdc95608aec7c1897e4af741c68673b657ac75a4c71af4344dc43acba6ca32fb4fc5429f0fe3d7301a9ded1360b82ad20"}, @iv={0x90, 0x117, 0x2, 0x75, "4850fb7422deacf0aeb60ba4e25183470dac5a205cc136883746e57b1cc64609dae8acd081705aceb789d75f9e4568fb1f403776eb023b453ed50258b408e62d6727c6af437964d1f2ad26a6961447c843c19c46718947ec5f66ea26670a4ea76edca6312270362d62d8c15d58dd59f2c3ee15eccd"}, @iv={0xf0, 0x117, 0x2, 0xdb, "a8c677331182ea2a1babadbc3fbd6000a057110569321f49fddc788cfa01d760f2a8b017f771674b570dd3867d8b40281e8f263cbc8e397e953442727518c74bb35065aa579bea1d807b5fbae905d69f67aa6bc0dbebf57e868f8d8aed12aa07ade46c7e8435c071fe403b63708e16ee43d678e7bea434fb96bc77f4e3a7170fca2d18625f3b4e64f0c0f8ce4fb27712e2283ccaab451f15b99d2f5a328161d29322bef445c75369b77e5d88ac6d9d5d701912955ae8a0d08fbf39b47bfefad0aa87e4cebd75e1c949f0e39cc3b4befcecce450560c1c221d5dc8d"}], 0x270}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000b40)="ae37a93ff7e127c5c594432d138dfd8106c58b2c4d25423cedd279ee988eb2143c7c5c8fb19238761706b71e70d606fb234db6921260102f02a6a431a7006d1d9eed4d0e55d38e3b416194e66417f38a98799ba59cb38a67d7a74a4f2a53eda70e8d", 0x62}, {&(0x7f0000000bc0)="6993604f14cab767a8492483d6c63df1716f83a14e8c90a4744a1aee6d9464156700c8ddd637247578d28fed7d3df4b1aba6a78c2c07b1b584d51defd7d5319c1dc6dc5a5310007df54ac4fd2340d265899559ded1144259fcd31c914511cebbdf01092c37060df1624fd94dd0da28dd563396f56d5ce1bac5d85478102143ec413f037d90bfaab43c4eb698ca129fd1c88764e545a286f5086f7b656af2360b71d051b0ed7a7435a2662045ffbbf04ca43b472286cbcc655a73799ecd0c950735d113bd5d2c48a5226511b282e557aef2c9af621941fd5c45d85fb02b34e3f93a26c0737b", 0xe5}, {&(0x7f0000000e80)="542713f3de6a2652166fd4adcba981c86105aac48805ce21ce348545cb0119f1a33ef0da670000008014785abb8a48dd78b203144aff69d6abb8379fd5ae55648afb2ac79fdffbd6562ecce653e74d2ab903173441cf6faee01fb4d528ef7eb2e7cf48202146e216d2", 0x69}, {&(0x7f0000000cc0)="50d47e7f2e7b8da6602d1f7c3506c1f0599c1e2cc25faf8d30fb854f84218dde61f1e08cc2dfad98161d28ea865ee4894bbf7e2c24176d2fcf45ab12d97d1154c7d05f39", 0x44}, {&(0x7f0000000d40)="5cb4cd5bf51c990d5e52e1e84f43e4a8b3aa046893f87d3a8f54", 0x1a}], 0x5, &(0x7f0000002380)=[@op={0x18}, @iv={0xe8, 0x117, 0x2, 0xcd, "5e82904c271e91970783834a25903dc0121c441dd9a9b834e725a8ce74e255b016d418768f92c055b498bdb5691e453a27aa8a07f0a8a02a84314e4c0858605a650c5225a8ca01c4f49023293d7f6d09d3876ddc24c66e858ebc57fcf22c0634cf2863afa09fd6657316d83eea2a8adec071ee55b8d6c8348ef703f7d1a0b8d54a5df12df779dc3569f1f9bd0f434d08df7dd0146857b5478d03367607641750c75b7a99d6884b9686e69afd7c662942caeb98d35069cc20d26691568d9d19233dd130e3b1ef2d22ed57c512af"}, @iv={0xd8, 0x117, 0x2, 0xc0, "642204803dd52656d36f679782bcecb9a02b0af6bd5a30af4d1c2a8204fdf1dfcbe2d6ffcfc2648a9dd0754d28f41e57018ce14ff754134a622f6257858d64bc4b9c7641f7cdc61dc30e3439cffaae2d97e74de13aa0851387f72525c4bfa653d456a77e0025ec9f27c9da16b23c3bd67f387846e7f1b2cd628a3e3faf5732ae2b4035307bdc61f6315072deef15d3e519f5cb591d64c9ec164e660c3941e39ffee1c735772704bbab159dce465aa6f049b2a8f9c788287821086c399938c1fd"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x118, 0x117, 0x2, 0xfe, "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"}, @assoc={0x18, 0x117, 0x4, 0x80}, @assoc={0x18, 0x117, 0x4, 0x35}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x368, 0x800c080}], 0x2, 0x0) (async) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) syz_usb_ep_write(r4, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9", 0x68}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$qrtr(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000700)=""/194, 0xc2}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x40010241) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000140)={'wlan1\x00', @random="38a460711d33"}) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f0000000240)) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r10 = fsopen(&(0x7f0000000040)='securityfs\x00', 0x0) r11 = fcntl$dupfd(r8, 0x406, r10) setsockopt$inet_mtu(r11, 0x111, 0xa, &(0x7f0000000000), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r7, 0x0) (async) sendfile(r7, r0, &(0x7f00000000c0)=0x20000000000, 0xe) 0s ago: executing program 4 (id=954): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x9ec21dbfc48aaec1}) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x9ec21dbfc48aaec1}) (async) pwritev(r0, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0x1) (async) kernel console output (not intermixed with test programs): 8.297816][ T7214] netlink: 116 bytes leftover after parsing attributes in process `syz.4.289'. [ 168.311519][ T7214] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 168.440237][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 168.574629][ T44] lg-g15 0003:046D:C222.0004: collection stack underflow [ 168.598328][ T44] lg-g15 0003:046D:C222.0004: item 0 4 0 12 parsing failed [ 168.605470][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.617705][ T44] lg-g15 0003:046D:C222.0004: probe with driver lg-g15 failed with error -22 [ 168.622690][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 168.657926][ T9] usb 6-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 168.678201][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.703470][ T9] usb 6-1: Product: syz [ 168.707710][ T9] usb 6-1: Manufacturer: syz [ 168.732315][ T9] usb 6-1: SerialNumber: syz [ 168.760022][ T9] usb 6-1: config 0 descriptor?? [ 168.774249][ T7201] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 168.792749][ T9] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 168.799904][ T44] usb 4-1: USB disconnect, device number 20 [ 168.841420][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.887027][ T9] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 168.919774][ T9] usb 6-1: media controller created [ 169.024572][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 169.311084][ T9] DVB: Unable to find symbol tda10046_attach() [ 169.332533][ T7226] /dev/rnullb0: Can't open blockdev [ 169.362862][ T9] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 169.393414][ T9] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 169.646769][ T7228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.294'. [ 169.668217][ T9] dvb_usb_m920x 6-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 169.716738][ T9] usb 6-1: USB disconnect, device number 2 [ 170.761075][ T5835] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 170.893992][ T7246] sit0: entered promiscuous mode [ 170.918689][ T5835] usb 4-1: device descriptor read/64, error -71 [ 170.926739][ T7246] netlink: 'syz.4.301': attribute type 1 has an invalid length. [ 170.948146][ T7246] netlink: 1 bytes leftover after parsing attributes in process `syz.4.301'. [ 171.079897][ T5916] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.248350][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 171.255959][ T5916] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 171.275843][ T5916] usb 6-1: config 1 has no interface number 0 [ 171.293342][ T5916] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 171.326355][ T5916] usb 6-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 171.356637][ T5916] usb 6-1: config 1 interface 105 has no altsetting 0 [ 171.358520][ T5835] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 171.383467][ T5916] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 171.401331][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.426591][ T5916] usb 6-1: Product: syz [ 171.441924][ T5916] usb 6-1: Manufacturer: syz [ 171.446606][ T5916] usb 6-1: SerialNumber: syz [ 171.480968][ T7243] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 171.499570][ T7243] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 171.508303][ T5835] usb 4-1: device descriptor read/64, error -71 [ 171.618926][ T5835] usb usb4-port1: attempt power cycle [ 171.787164][ T7248] /dev/rnullb0: Can't open blockdev [ 171.913233][ T7243] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 171.928514][ T7243] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 171.988651][ T5835] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 172.029185][ T5835] usb 4-1: device descriptor read/8, error -71 [ 172.067460][ T7256] netlink: 16 bytes leftover after parsing attributes in process `syz.4.305'. [ 172.268258][ T5835] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 172.313282][ T5835] usb 4-1: device descriptor read/8, error -71 [ 172.348411][ T5916] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 172.381738][ T5916] aqc111 6-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 172.432842][ T5916] aqc111 6-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 62:ad:09:5a:53:c1 [ 172.440023][ T5835] usb usb4-port1: unable to enumerate USB device [ 172.465330][ T7196] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 172.532944][ T5835] usb 3-1: USB disconnect, device number 11 [ 172.569171][ T5835] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 172.612618][ T5916] usb 6-1: USB disconnect, device number 3 [ 172.672138][ T5916] aqc111 6-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.5-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 172.707427][ T7262] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 172.731285][ T7262] netlink: 232 bytes leftover after parsing attributes in process `syz.2.307'. [ 172.757673][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 172.809340][ T7264] netlink: 'syz.2.307': attribute type 1 has an invalid length. [ 172.817103][ T7264] netlink: 232 bytes leftover after parsing attributes in process `syz.2.307'. [ 172.840666][ T5916] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 172.848686][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 172.872538][ T5916] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 172.898560][ T5916] aqc111 6-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 173.235018][ T7277] netlink: 5 bytes leftover after parsing attributes in process `syz.4.311'. [ 173.396722][ T7287] netlink: 4432 bytes leftover after parsing attributes in process `syz.2.313'. [ 173.689427][ T7297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.315'. [ 174.294655][ T7314] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 176.069876][ T5943] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 176.210227][ T7336] overlayfs: failed to resolve '/': -2 [ 176.254529][ T5943] usb 4-1: Using ep0 maxpacket: 32 [ 176.282249][ T5943] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 176.312866][ T5943] usb 4-1: config 0 has no interface number 0 [ 176.338545][ T5943] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 176.371871][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.398140][ T5943] usb 4-1: Product: syz [ 176.408200][ T5943] usb 4-1: Manufacturer: syz [ 176.420021][ T5943] usb 4-1: SerialNumber: syz [ 176.454429][ T5943] usb 4-1: config 0 descriptor?? [ 176.483522][ T5943] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 176.500336][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz.5.328'. [ 176.718761][ T5943] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 176.769171][ T5943] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 177.115121][ T7356] Mount JFS Failure: -22 [ 177.121864][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 177.130261][ T5835] usb 4-1: USB disconnect, device number 25 [ 177.171672][ T5835] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 177.220826][ T5835] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 177.245419][ T5835] quatech2 4-1:0.51: device disconnected [ 177.307775][ T7383] vxfs: WRONG superblock magic 00000000 at 1 [ 177.328393][ T7383] vxfs: WRONG superblock magic 00000000 at 8 [ 177.334459][ T7383] vxfs: can't find superblock. [ 177.638162][ T1222] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 177.806756][ T7391] binder: 7390:7391 ioctl c018620c 200000000640 returned -22 [ 177.850838][ T1222] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 177.878127][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.898124][ T1222] usb 3-1: Product: syz [ 177.901140][ T7393] /dev/rnullb0: Can't open blockdev [ 177.903726][ T1222] usb 3-1: Manufacturer: syz [ 177.938176][ T1222] usb 3-1: SerialNumber: syz [ 177.959335][ T1222] usb 3-1: config 0 descriptor?? [ 178.179163][ T1222] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 178.528300][ T981] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 178.814012][ T7402] netlink: 16 bytes leftover after parsing attributes in process `syz.3.338'. [ 179.778653][ T981] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 179.857239][ T1222] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 179.886977][ T1222] usb 3-1: USB disconnect, device number 12 [ 179.928856][ T981] usb 5-1: device descriptor read/64, error -71 [ 180.173600][ T7427] syz.3.346: attempt to access beyond end of device [ 180.173600][ T7427] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 180.188367][ T981] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 180.204344][ T7427] FAT-fs (nbd3): unable to read boot sector [ 180.338353][ T981] usb 5-1: device descriptor read/64, error -71 [ 180.460634][ T981] usb usb5-port1: attempt power cycle [ 180.818236][ T981] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 180.860976][ T981] usb 5-1: device descriptor read/8, error -71 [ 181.111032][ T981] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 181.162242][ T981] usb 5-1: device descriptor read/8, error -71 [ 181.288773][ T981] usb usb5-port1: unable to enumerate USB device [ 181.591229][ T7450] overlayfs: missing 'lowerdir' [ 181.805941][ T7454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.354'. [ 182.218447][ T5896] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 183.628787][ T7478] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 183.661296][ T7478] /dev/rnullb0: Can't open blockdev [ 184.264942][ T7490] /dev/rnullb0: Can't open blockdev [ 184.519306][ T7498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 184.770537][ T7504] hpfs: Bad magic ... probably not HPFS [ 185.121218][ T7512] /dev/rnullb0: Can't open blockdev [ 185.448877][ T7522] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 185.455474][ T7522] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 185.498302][ T7522] vhci_hcd vhci_hcd.0: Device attached [ 185.768232][ T5916] usb 38-1: SetAddress Request (3) to port 0 [ 185.774700][ T5916] usb 38-1: new SuperSpeed USB device number 3 using vhci_hcd [ 186.142290][ T7523] vhci_hcd: connection closed [ 186.143944][ T1161] vhci_hcd: stop threads [ 186.187547][ T1161] vhci_hcd: release socket [ 186.207819][ T1161] vhci_hcd: disconnect device [ 186.548263][ T1222] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 186.585248][ T7553] /dev/rnullb0: Can't open blockdev [ 186.593686][ T7553] /dev/rnullb0: Can't open blockdev [ 186.606299][ T7553] /dev/rnullb0: Can't open blockdev [ 186.615539][ T7553] /dev/rnullb0: Can't open blockdev [ 186.624908][ T7553] /dev/rnullb0: Can't open blockdev [ 186.632563][ T7549] XFS (rnullb0): Invalid superblock magic number [ 186.633059][ T7553] /dev/rnullb0: Can't open blockdev [ 186.740573][ T1222] usb 6-1: Using ep0 maxpacket: 32 [ 186.772408][ T1222] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 186.805165][ T1222] usb 6-1: config 0 has no interface number 0 [ 186.827598][ T1222] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 186.862455][ T1222] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 186.900639][ T1222] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 186.945376][ T1222] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 186.968023][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.387'. [ 186.977858][ T1222] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 186.977894][ T1222] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 187.028144][ T1222] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 187.040115][ T7566] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 187.049551][ T7566] overlayfs: missing 'lowerdir' [ 187.066321][ T1222] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 187.152791][ T1222] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 187.197662][ T1222] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 187.244584][ T1222] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 187.254810][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.266336][ T1222] usb 6-1: Product: syz [ 187.275039][ T1222] usb 6-1: Manufacturer: syz [ 187.299957][ T1222] usb 6-1: SerialNumber: syz [ 187.325315][ T1222] usb 6-1: config 0 descriptor?? [ 187.349055][ T7545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 187.358612][ T7545] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 187.370487][ T1222] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 187.398254][ T1222] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 187.447383][ T1222] scsi host1: microtekX6 [ 188.033034][ T44] usb 6-1: USB disconnect, device number 5 [ 188.273778][ T7585] /dev/rnullb0: Can't open blockdev [ 188.663297][ T7592] /dev/rnullb0: Can't open blockdev [ 188.983351][ T7596] netlink: 'syz.4.395': attribute type 2 has an invalid length. [ 189.206487][ T7599] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 189.231605][ T7599] /dev/rnullb0: Can't open blockdev [ 189.298238][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 189.449020][ T10] usb 6-1: too many configurations: 129, using maximum allowed: 8 [ 189.494825][ T10] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 189.515664][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.549673][ T10] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 189.578337][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.616075][ T10] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 189.643538][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.671580][ T10] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 189.698215][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.729403][ T10] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 189.758183][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.789679][ T10] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 189.818236][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.848885][ T10] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 189.868490][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.925754][ T10] usb 6-1: config 0 has an invalid descriptor of length 63, skipping remainder of the config [ 189.937644][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 189.987919][ T10] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.037776][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.121592][ T10] usb 6-1: config 0 descriptor?? [ 190.427966][ T7617] /dev/rnullb0: Can't open blockdev [ 190.662223][ T7622] FAT-fs (rnullb0): bogus number of reserved sectors [ 190.688302][ T7622] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 190.770158][ T7624] evm: overlay not supported [ 190.778629][ T30] audit: type=1804 audit(1753894897.629:24): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.403" name="/newroot/90/bus/file0" dev="overlay" ino=497 res=1 errno=0 [ 190.855151][ T5916] usb 38-1: device descriptor read/8, error -110 [ 190.901392][ T7627] netlink: 16 bytes leftover after parsing attributes in process `syz.2.404'. [ 190.943251][ T7628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 190.949836][ T7628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 190.985008][ T7636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.405'. [ 191.019794][ T7628] vhci_hcd vhci_hcd.0: Device attached [ 191.040577][ T7632] vhci_hcd: connection closed [ 191.046183][ T1144] vhci_hcd: stop threads [ 191.076561][ T1144] vhci_hcd: release socket [ 191.085711][ T1144] vhci_hcd: disconnect device [ 191.094911][ T7638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.407'. [ 191.128963][ T5916] usb 38-1: enqueue for inactive port 0 [ 191.140099][ T7638] netlink: 36 bytes leftover after parsing attributes in process `syz.3.407'. [ 191.340013][ T5916] usb usb38-port1: attempt power cycle [ 191.612805][ T7648] /dev/rnullb0: Can't open blockdev [ 191.876468][ T7651] comedi comedi2: driver 'ni_daq_700' does not support attach using comedi_config [ 191.919373][ T5916] usb usb38-port1: unable to enumerate USB device [ 191.990524][ T7651] binder: 7649:7651 ioctl c0306201 0 returned -14 [ 192.211061][ T1222] usb 6-1: USB disconnect, device number 6 [ 192.958398][ T7666] sctp: [Deprecated]: syz.4.421 (pid 7666) Use of int in maxseg socket option. [ 192.958398][ T7666] Use struct sctp_assoc_value instead [ 193.087293][ T5850] Bluetooth: hci1: Malformed LE Event: 0x1b [ 193.107085][ T30] audit: type=1326 audit(1753894899.959:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.129253][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.179329][ T30] audit: type=1326 audit(1753894899.959:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.202092][ T30] audit: type=1326 audit(1753894899.959:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="syz.4.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.224716][ T30] audit: type=1326 audit(1753894899.959:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.246087][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.253131][ T30] audit: type=1326 audit(1753894899.959:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.291899][ T30] audit: type=1326 audit(1753894899.959:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.313259][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.348892][ T30] audit: type=1326 audit(1753894899.959:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.394949][ T30] audit: type=1326 audit(1753894899.959:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.416288][ C1] vkms_vblank_simulate: vblank timer overrun [ 193.422695][ T44] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 193.461762][ T30] audit: type=1326 audit(1753894899.959:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7665 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7faa6198e9a9 code=0x7ffc0000 [ 193.578235][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 193.585829][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.601711][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.628196][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 193.651557][ T5859] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 193.661324][ T5859] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 193.665572][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.672001][ T5859] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 193.686853][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 193.709483][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 193.726084][ T44] usb 3-1: config 0 descriptor?? [ 194.214730][ T44] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 194.231927][ T44] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 194.248198][ T44] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 194.268315][ T44] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 194.277479][ T44] kone 0003:1E7D:2CED.0005: unknown main item tag 0x0 [ 194.313751][ T44] kone 0003:1E7D:2CED.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 194.397601][ T7672] chnl_net:caif_netlink_parms(): no params data found [ 194.415311][ T7670] /dev/rnullb0: Can't open blockdev [ 194.461921][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.469366][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.493048][ T44] kone 0003:1E7D:2CED.0005: couldn't init struct kone_device [ 194.527939][ T44] kone 0003:1E7D:2CED.0005: couldn't install mouse [ 194.605945][ T44] kone 0003:1E7D:2CED.0005: probe with driver kone failed with error -5 [ 194.667504][ T44] usb 3-1: USB disconnect, device number 14 [ 194.793461][ T7672] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.810974][ T7672] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.818536][ T7672] bridge_slave_0: entered allmulticast mode [ 194.852225][ T7672] bridge_slave_0: entered promiscuous mode [ 194.881541][ T7672] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.902106][ T7672] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.912589][ T7672] bridge_slave_1: entered allmulticast mode [ 194.946270][ T7672] bridge_slave_1: entered promiscuous mode [ 195.105764][ T7705] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 1, id = 0 [ 195.203546][ T7672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.261915][ T7672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.533215][ T7672] team0: Port device team_slave_0 added [ 195.571988][ T7672] team0: Port device team_slave_1 added [ 195.593345][ T7716] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 195.648346][ T7716] overlayfs: missing 'lowerdir' [ 195.684461][ T7716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.433'. [ 195.734738][ T7723] overlayfs: workdir and upperdir must be separate subtrees [ 195.785179][ T7724] /dev/rnullb0: Can't open blockdev [ 195.794581][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.808360][ T5859] Bluetooth: hci3: command tx timeout [ 195.817575][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.891906][ T7672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.933884][ T7672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.944724][ T7672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.976055][ T7672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.292465][ T7672] hsr_slave_0: entered promiscuous mode [ 196.307733][ T7672] hsr_slave_1: entered promiscuous mode [ 196.338376][ T7672] debugfs: 'hsr0' already exists in 'hsr' [ 196.344165][ T7672] Cannot create hsr debugfs directory [ 196.370047][ T7733] nftables ruleset with unbound set [ 196.385825][ T7732] QAT: failed to copy from user cfg_data. [ 196.728156][ T1222] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 196.918505][ T1222] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.938673][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.967357][ T1222] usb 3-1: config 0 descriptor?? [ 196.994363][ T1222] cp210x 3-1:0.0: cp210x converter detected [ 197.153597][ T7672] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 197.177845][ T7672] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.196817][ T7738] netlink: 88 bytes leftover after parsing attributes in process `syz.2.440'. [ 197.207546][ T7738] netlink: 88 bytes leftover after parsing attributes in process `syz.2.440'. [ 197.233473][ T7672] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.256186][ T1222] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 197.281929][ T1222] cp210x 3-1:0.0: querying part number failed [ 197.302663][ T1222] usb 3-1: cp210x converter now attached to ttyUSB0 [ 197.317983][ T7672] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 197.326659][ T7750] /dev/rnullb0: Can't open blockdev [ 197.340636][ T7750] /dev/rnullb0: Can't open blockdev [ 197.489587][ T10] usb 3-1: USB disconnect, device number 15 [ 197.511922][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 197.539148][ T10] cp210x 3-1:0.0: device disconnected [ 197.682104][ T7672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.733779][ T7672] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.755070][ T1151] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.762391][ T1151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.830732][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.838013][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.888740][ T5859] Bluetooth: hci3: command tx timeout [ 198.248874][ T7765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.257725][ T7765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.459423][ T44] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 198.523407][ T7777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 198.570016][ T7777] /dev/rnullb0: Can't open blockdev [ 198.586619][ T7672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.673923][ T44] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 198.717130][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.749554][ T44] usb 6-1: Product: syz [ 198.753787][ T44] usb 6-1: Manufacturer: syz [ 198.780770][ T44] usb 6-1: SerialNumber: syz [ 198.821717][ T44] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 198.868373][ T5835] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 199.110174][ T1222] usb 6-1: USB disconnect, device number 7 [ 199.597478][ T7672] veth0_vlan: entered promiscuous mode [ 199.642582][ T7672] veth1_vlan: entered promiscuous mode [ 199.792036][ T7672] veth0_macvtap: entered promiscuous mode [ 199.835267][ T7672] veth1_macvtap: entered promiscuous mode [ 199.965077][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.972717][ T5859] Bluetooth: hci3: command tx timeout [ 199.984100][ T5835] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 200.021788][ T5835] ath9k_htc: Failed to initialize the device [ 200.065123][ T1222] usb 6-1: ath9k_htc: USB layer deinitialized [ 200.171585][ T7672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.274785][ T1144] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.304063][ T1144] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.457068][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.492750][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.052595][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.076677][ T7812] netlink: 'syz.4.455': attribute type 10 has an invalid length. [ 201.106147][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.162359][ T7812] lo: entered promiscuous mode [ 201.171746][ T7812] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 201.223034][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.258676][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.821983][ T7828] /dev/rnullb0: Can't open blockdev [ 202.050142][ T5859] Bluetooth: hci3: command tx timeout [ 202.195140][ T7833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 202.290710][ T7835] netlink: 20 bytes leftover after parsing attributes in process `syz.6.462'. [ 202.649240][ T7832] rtc_cmos 00:00: Alarms can be up to one day in the future [ 203.077034][ T5835] rtc_cmos 00:00: Alarms can be up to one day in the future [ 203.109236][ T5835] rtc_cmos 00:00: Alarms can be up to one day in the future [ 203.116942][ T5835] rtc_cmos 00:00: Alarms can be up to one day in the future [ 203.134896][ T5835] rtc_cmos 00:00: Alarms can be up to one day in the future [ 203.143486][ T5835] rtc rtc0: __rtc_set_alarm: err=-22 [ 203.321401][ T7850] netlink: 748 bytes leftover after parsing attributes in process `syz.4.467'. [ 203.448165][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.456197][ T7850] netlink: 748 bytes leftover after parsing attributes in process `syz.4.467'. [ 203.538133][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.571951][ T7850] netlink: 748 bytes leftover after parsing attributes in process `syz.4.467'. [ 203.620110][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.669253][ T7850] netlink: 748 bytes leftover after parsing attributes in process `syz.4.467'. [ 203.708128][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.736630][ T7850] netlink: 748 bytes leftover after parsing attributes in process `syz.4.467'. [ 203.768205][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.798179][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 203.798531][ T7850] netlink: 748 bytes leftover after parsing attributes in process `syz.4.467'. [ 203.838157][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.846129][ T7850] netlink: 748 bytes leftover after parsing attributes in process `syz.4.467'. [ 203.910083][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.938641][ T7850] netlink: 748 bytes leftover after parsing attributes in process `syz.4.467'. [ 203.968415][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.971503][ T10] usb 3-1: config 4 has an invalid interface number: 18 but max is 1 [ 203.998844][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 203.999085][ T10] usb 3-1: config 4 has no interface number 1 [ 204.034035][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 204.050198][ T10] usb 3-1: config 4 interface 0 has no altsetting 0 [ 204.068525][ T7850] openvswitch: netlink: Flow key attr not present in new flow. [ 204.078389][ T10] usb 3-1: config 4 interface 18 has no altsetting 0 [ 204.097111][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=9009, bcdDevice=af.f4 [ 204.147566][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.164216][ T10] usb 3-1: Product: syz [ 204.168566][ T10] usb 3-1: Manufacturer: syz [ 204.173197][ T10] usb 3-1: SerialNumber: syz [ 204.267436][ T7862] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 204.283611][ T7858] syz.5.470: attempt to access beyond end of device [ 204.283611][ T7858] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 204.396853][ T7858] FAT-fs (loop5): unable to read boot sector [ 204.553413][ T7870] program syz.6.473 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.777204][ T10] usb 3-1: unknown number of interfaces: 2 [ 204.810443][ T5896] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 204.822748][ T10] usb 3-1: USB disconnect, device number 16 [ 204.992143][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 205.003888][ T5896] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 205.030073][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.080334][ T5896] usb 7-1: config 0 descriptor?? [ 205.117873][ T5896] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 205.171821][ T7875] /dev/rnullb0: Can't open blockdev [ 205.178215][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 205.332093][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 205.371120][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 205.394342][ T10] usb 6-1: config 9 has an invalid interface number: 72 but max is 0 [ 205.412095][ T10] usb 6-1: config 9 has no interface number 0 [ 205.429987][ T10] usb 6-1: config 9 interface 72 altsetting 128 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 205.493549][ T10] usb 6-1: config 9 interface 72 has no altsetting 0 [ 205.543721][ T10] usb 6-1: New USB device found, idVendor=03f0, idProduct=619e, bcdDevice=2d.8b [ 205.588432][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.596586][ T10] usb 6-1: Product: syz [ 205.628267][ T10] usb 6-1: Manufacturer: syz [ 205.632990][ T10] usb 6-1: SerialNumber: syz [ 205.724059][ T5896] gspca_nw80x: reg_w err -71 [ 205.729804][ T5896] nw80x 7-1:0.0: probe with driver nw80x failed with error -71 [ 205.749601][ T5896] usb 7-1: USB disconnect, device number 2 [ 206.057158][ T7872] rtc_cmos 00:00: Alarms can be up to one day in the future [ 206.100654][ T10] usb 6-1: USB disconnect, device number 8 [ 206.379532][ T7890] IPVS: set_ctl: invalid protocol: 50 100.1.1.0:20000 [ 206.545862][ T7887] netlink: 'syz.4.481': attribute type 10 has an invalid length. [ 206.606316][ T7887] team0: Port device geneve0 added [ 206.638149][ T5835] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 206.828549][ T5835] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.848158][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.886073][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 206.917833][ T5835] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.937937][ T5835] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.952598][ T7898] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:2048 [ 207.016867][ T5835] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.047655][ T5835] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.090665][ T5835] usb 3-1: config 0 descriptor?? [ 207.341599][ T5835] rc_core: IR keymap rc-hauppauge not found [ 207.378017][ T5835] Registered IR keymap rc-empty [ 207.383567][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.428280][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.446590][ T5896] hid-generic 0005:0B57:0009.0006: unknown main item tag 0x0 [ 207.463686][ T5896] hid-generic 0005:0B57:0009.0006: hidraw0: BLUETOOTH HID v0.09 Device [syz0] on aa:aa:aa:aa:aa:aa [ 207.473828][ T5835] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 207.571007][ T5835] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 207.642972][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.699082][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.748515][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.798797][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.812868][ T5896] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 207.878293][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.910006][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.968341][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 207.979191][ T5896] usb 6-1: Using ep0 maxpacket: 16 [ 208.002172][ T5896] usb 6-1: config 1 has an invalid interface number: 93 but max is 0 [ 208.002330][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.049005][ T5896] usb 6-1: config 1 has no interface number 0 [ 208.070862][ T5896] usb 6-1: config 1 interface 93 has no altsetting 0 [ 208.078384][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.121090][ T5835] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.138278][ T5896] usb 6-1: Dual-Role OTG device on HNP port [ 208.163341][ T5896] usb 6-1: New USB device found, idVendor=22de, idProduct=9061, bcdDevice=4b.16 [ 208.185964][ T5835] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 208.193220][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.236872][ T5835] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 208.246925][ T5896] usb 6-1: Product: syz [ 208.258248][ T5896] usb 6-1: Manufacturer: syz [ 208.262925][ T5896] usb 6-1: SerialNumber: syz [ 208.305896][ T5835] usb 3-1: USB disconnect, device number 17 [ 208.775658][ T7933] __nla_validate_parse: 4 callbacks suppressed [ 208.775681][ T7933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.492'. [ 208.829207][ T7933] netlink: 128 bytes leftover after parsing attributes in process `syz.4.492'. [ 208.855031][ T7933] netlink: 'syz.4.492': attribute type 5 has an invalid length. [ 208.887619][ T7934] /dev/rnullb0: Can't open blockdev [ 209.221130][ T5896] usb 6-1: USB disconnect, device number 9 [ 210.259242][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 210.398239][ T9] usb 3-1: device descriptor read/64, error -71 [ 210.408360][ T5896] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 210.438153][ T7964] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.568428][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 210.586300][ T5896] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 210.597836][ T5896] usb 5-1: config 0 has no interface number 0 [ 210.614395][ T5896] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 210.636446][ T5896] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 7 [ 210.668699][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 210.678156][ T5896] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 210.701772][ T5896] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 210.718252][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 210.736705][ T5896] usb 5-1: Product: syz [ 210.746817][ T5896] usb 5-1: SerialNumber: syz [ 210.755015][ T5896] usb 5-1: config 0 descriptor?? [ 210.773934][ T5896] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 210.828978][ T9] usb 3-1: device descriptor read/64, error -71 [ 210.948691][ T9] usb usb3-port1: attempt power cycle [ 210.987037][ T7959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.001320][ T7958] sctp: [Deprecated]: syz.4.499 (pid 7958) Use of int in max_burst socket option deprecated. [ 211.001320][ T7958] Use struct sctp_assoc_value instead [ 211.025508][ T7959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.061967][ T5835] usb 5-1: USB disconnect, device number 13 [ 211.288214][ T9] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 211.329369][ T9] usb 3-1: device descriptor read/8, error -71 [ 211.578191][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 211.610127][ T9] usb 3-1: device descriptor read/8, error -71 [ 211.707393][ T7968] orangefs_mount: mount request failed with -4 [ 211.722973][ T9] usb usb3-port1: unable to enumerate USB device [ 212.158201][ T5835] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 212.328198][ T5835] usb 7-1: Using ep0 maxpacket: 16 [ 212.350064][ T5835] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.370092][ T5835] usb 7-1: config 0 has no interface number 0 [ 212.401995][ T5835] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 212.418147][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.439145][ T5835] usb 7-1: Product: syz [ 212.446638][ T5835] usb 7-1: Manufacturer: syz [ 212.460926][ T5835] usb 7-1: SerialNumber: syz [ 212.511507][ T5835] usb 7-1: config 0 descriptor?? [ 212.543599][ T5835] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 212.560728][ T7985] netlink: 'syz.5.509': attribute type 28 has an invalid length. [ 212.722206][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.763467][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.111890][ T7998] /dev/rnullb0: Can't open blockdev [ 213.128212][ T5916] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 213.340255][ T5916] usb 6-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.366092][ T5916] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.405696][ T5916] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 213.417959][ T5916] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 213.435120][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.508828][ T7994] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 213.679542][ T8004] netlink: 'syz.4.516': attribute type 25 has an invalid length. [ 214.149785][ T1222] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 214.232269][ T5835] gspca_spca1528: reg_r err -71 [ 214.237320][ T5835] spca1528 7-1:0.1: probe with driver spca1528 failed with error -71 [ 214.260251][ T5835] usb 7-1: USB disconnect, device number 3 [ 214.328252][ T1222] usb 3-1: Using ep0 maxpacket: 8 [ 214.343106][ T1222] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 214.355941][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.364647][ T1222] usb 3-1: Product: syz [ 214.369180][ T1222] usb 3-1: Manufacturer: syz [ 214.373879][ T1222] usb 3-1: SerialNumber: syz [ 214.395388][ T1222] usb 3-1: config 0 descriptor?? [ 214.530171][ T5916] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 214.550813][ T5916] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input10 [ 214.629673][ T1222] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.651278][ C0] aiptek 6-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 214.688421][ T5916] usb 6-1: USB disconnect, device number 10 [ 215.108375][ T44] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 215.181183][ T8017] netlink: 132 bytes leftover after parsing attributes in process `syz.5.521'. [ 215.269661][ T44] usb 7-1: device descriptor read/64, error -71 [ 215.528264][ T44] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 215.598529][ T9] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 215.634992][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.658914][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.679289][ T44] usb 7-1: device descriptor read/64, error -71 [ 215.758251][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 215.781840][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.815164][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.835495][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 215.842567][ T36] Bluetooth: (null): Too short H5 packet [ 215.851874][ T44] usb usb7-port1: attempt power cycle [ 215.864032][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.865245][ T36] Bluetooth: (null): Invalid header checksum [ 215.879198][ T36] Bluetooth: (null): Invalid header checksum [ 215.908247][ T9] usb 6-1: config 0 descriptor?? [ 215.929908][ T1222] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 215.941346][ T9] hub 6-1:0.0: USB hub found [ 215.969618][ T1222] usb 3-1: USB disconnect, device number 22 [ 216.140729][ T9] hub 6-1:0.0: 1 port detected [ 216.229834][ T44] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 216.284438][ T44] usb 7-1: device descriptor read/8, error -71 [ 216.293901][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 216.306503][ T8028] netlink: 'syz.4.525': attribute type 3 has an invalid length. [ 216.528737][ T44] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 216.580032][ T44] usb 7-1: device descriptor read/8, error -71 [ 216.698629][ T44] usb usb7-port1: unable to enumerate USB device [ 216.758772][ T5896] hub 6-1:0.0: activate --> -90 [ 216.868213][ T9] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.014202][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 217.025544][ T5850] Bluetooth: hci0: command 0x0406 tx timeout [ 217.040516][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.067484][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.078010][ T9] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 217.093966][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.112269][ T9] usb 5-1: config 0 descriptor?? [ 217.241762][ T5916] usb 6-1: USB disconnect, device number 11 [ 217.248422][ T5896] usb 6-1-port1: cannot reset (err = -71) [ 217.270483][ T5896] usb 6-1-port1: attempt power cycle [ 217.542270][ T9] cp2112 0003:10C4:EA90.0007: unknown main item tag 0x0 [ 217.566565][ T9] cp2112 0003:10C4:EA90.0007: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 217.730260][ T9] cp2112 0003:10C4:EA90.0007: Part Number: 0x00 Device Version: 0x00 [ 217.930720][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 217.930743][ T30] audit: type=1326 audit(1753894924.779:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.038736][ T30] audit: type=1326 audit(1753894924.789:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.094310][ T30] audit: type=1326 audit(1753894924.789:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.164146][ T8031] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 218.164146][ T8031] The task syz.4.526 (8031) triggered the difference, watch for misbehavior. [ 218.191324][ T30] audit: type=1326 audit(1753894924.789:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.270614][ T30] audit: type=1326 audit(1753894924.789:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.337174][ T30] audit: type=1326 audit(1753894924.789:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.404181][ T30] audit: type=1326 audit(1753894924.789:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.428244][ T981] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 218.438537][ T30] audit: type=1326 audit(1753894924.799:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.467429][ T30] audit: type=1326 audit(1753894924.799:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.496704][ T30] audit: type=1326 audit(1753894924.799:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8040 comm="syz.2.529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1f13f8e9a9 code=0x7ffc0000 [ 218.610628][ T981] usb 7-1: config 4 has an invalid interface number: 18 but max is 1 [ 218.630459][ T981] usb 7-1: config 4 has no interface number 1 [ 218.646862][ T981] usb 7-1: config 4 interface 0 has no altsetting 0 [ 218.672885][ T981] usb 7-1: config 4 interface 18 has no altsetting 0 [ 218.696648][ T981] usb 7-1: New USB device found, idVendor=1199, idProduct=9009, bcdDevice=af.f4 [ 218.714900][ T981] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.733832][ T981] usb 7-1: Product: syz [ 218.743638][ T981] usb 7-1: Manufacturer: syz [ 218.754849][ T981] usb 7-1: SerialNumber: syz [ 219.157889][ T8048] net_ratelimit: 1 callbacks suppressed [ 219.157912][ T8048] openvswitch: netlink: Key 22 has unexpected len 1370 expected 4 [ 219.305843][ T981] usb 7-1: unknown number of interfaces: 2 [ 219.325884][ T981] usb 7-1: USB disconnect, device number 8 [ 219.478206][ T5835] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 219.533744][ T9] cp2112 0003:10C4:EA90.0007: error setting SMBus config [ 219.593360][ T9] cp2112 0003:10C4:EA90.0007: probe with driver cp2112 failed with error -71 [ 219.615521][ T9] usb 5-1: USB disconnect, device number 14 [ 219.650011][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.679236][ T5835] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.720747][ T5835] usb 6-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 219.752173][ T5835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.805769][ T5835] usb 6-1: config 0 descriptor?? [ 219.956016][ T8076] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 220.240657][ T5835] hid (null): invalid report_count 529913848 [ 220.276977][ T5835] steelseries 0003:1038:12B6.0008: invalid report_count 529913848 [ 220.308418][ T5835] steelseries 0003:1038:12B6.0008: item 0 4 1 9 parsing failed [ 220.337256][ T5835] steelseries 0003:1038:12B6.0008: probe with driver steelseries failed with error -22 [ 220.444978][ T8089] XFS (rnullb0): Invalid superblock magic number [ 220.667210][ T1222] usb 6-1: USB disconnect, device number 16 [ 220.678302][ T5916] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 220.848596][ T5916] usb 7-1: Using ep0 maxpacket: 32 [ 220.864476][ T5916] usb 7-1: unable to get BOS descriptor or descriptor too short [ 220.884322][ T5916] usb 7-1: config 255 has an invalid interface number: 242 but max is 0 [ 220.913446][ T5916] usb 7-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 220.935189][ T5916] usb 7-1: config 255 has no interface number 0 [ 220.946234][ T5916] usb 7-1: too many endpoints for config 255 interface 242 altsetting 3: 156, using maximum allowed: 30 [ 220.958407][ T5916] usb 7-1: config 255 interface 242 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 156 [ 220.993776][ T5916] usb 7-1: config 255 interface 242 has no altsetting 0 [ 221.004030][ T5916] usb 7-1: New USB device found, idVendor=0800, idProduct=0000, bcdDevice=49.26 [ 221.025905][ T5916] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.066589][ T5916] usb 7-1: Product: syz [ 221.076499][ T5916] usb 7-1: Manufacturer: syz [ 221.086661][ T5916] usb 7-1: SerialNumber: syz [ 221.319947][ T5916] hub 7-1:255.242: bad descriptor, ignoring hub [ 221.364633][ T5916] hub 7-1:255.242: probe with driver hub failed with error -5 [ 221.405502][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.420887][ T5916] usb 7-1: USB disconnect, device number 9 [ 221.489003][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.648697][ T9] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 221.798332][ T9] usb 6-1: device descriptor read/64, error -71 [ 221.928209][ T5835] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 222.058533][ T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 222.108194][ T5835] usb 3-1: Using ep0 maxpacket: 8 [ 222.143061][ T5835] usb 3-1: unable to get BOS descriptor or descriptor too short [ 222.157699][ T5835] usb 3-1: config 0 has an invalid interface number: 65 but max is 0 [ 222.176274][ T5835] usb 3-1: config 0 has no interface number 0 [ 222.190246][ T5835] usb 3-1: config 0 interface 65 has no altsetting 0 [ 222.239594][ T9] usb 6-1: device descriptor read/64, error -71 [ 222.246179][ T5835] usb 3-1: New USB device found, idVendor=052b, idProduct=1911, bcdDevice= 1.00 [ 222.275658][ T5835] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.326215][ T8140] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 222.379331][ T9] usb usb6-port1: attempt power cycle [ 222.603472][ T5835] usb 3-1: Product: ᔄ蹓갆餝쎯씎媾ꆇ傅组᥯蚣嶻᪩✂᪦橵︆穬쿞鐤챐嚞஡鸄⽠頶蕤䭻シ큘뻫⸎’ᝊ㖬㦟⤘ﻡ脣鷼靗〨唐枅낊ᒓ䑎郴镍ඪ此᱘஬⨑碥氓흲✧텹궒䃠鱁夐갦୦욧∰㬞蜤ꋮ [ 222.643652][ T5835] usb 3-1: SerialNumber: syz [ 222.655985][ T5835] usb 3-1: config 0 descriptor?? [ 222.664008][ T8142] netlink: 92 bytes leftover after parsing attributes in process `syz.6.555'. [ 222.758381][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 222.800691][ T9] usb 6-1: device descriptor read/8, error -71 [ 222.934278][ T5835] usb-storage 3-1:0.65: USB Mass Storage device detected [ 222.967480][ T5835] usb-storage 3-1:0.65: Quirks match for vid 052b pid 1911: 20 [ 223.048293][ T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 223.066379][ T5835] usb 3-1: USB disconnect, device number 23 [ 223.109672][ T9] usb 6-1: device descriptor read/8, error -71 [ 223.248858][ T9] usb usb6-port1: unable to enumerate USB device [ 223.318390][ T8154] overlay: Unknown parameter 'uid<00000000000000000000' [ 223.346095][ T8154] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 223.381389][ T8154] overlayfs: missing 'lowerdir' [ 223.405382][ T8154] netlink: 8 bytes leftover after parsing attributes in process `syz.4.558'. [ 223.823016][ T8162] netlink: 763 bytes leftover after parsing attributes in process `syz.2.560'. [ 223.862321][ T8162] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 223.868922][ T8162] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 223.897732][ T8162] vhci_hcd vhci_hcd.0: Device attached [ 223.909470][ T8163] usbip_core: unknown command [ 223.921327][ T8163] vhci_hcd: unknown pdu 0 [ 223.928367][ T8163] usbip_core: unknown command [ 223.938273][ T1144] vhci_hcd: stop threads [ 223.947209][ T1144] vhci_hcd: release socket [ 223.964145][ T1144] vhci_hcd: disconnect device [ 224.385548][ T8173] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 224.448283][ T8176] binder: 8174:8176 ioctl c0306201 2000000003c0 returned -22 [ 224.488448][ T8175] binder: 8174:8175 ioctl c0306201 2000000003c0 returned -22 [ 224.772558][ T8191] /dev/rnullb0: Can't open blockdev [ 224.803624][ T8192] /dev/rnullb0: Can't open blockdev [ 225.448274][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 225.526653][ T8213] tmpfs: Bad value for 'mpol' [ 225.532045][ T8212] tmpfs: Bad value for 'mpol' [ 225.608300][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 225.633684][ T9] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 225.649900][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.683136][ T9] usb 5-1: config 0 has no interface number 0 [ 225.693455][ T8212] /dev/rnullb0: Can't open blockdev [ 225.733973][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 225.754835][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.778322][ T9] usb 5-1: Product: syz [ 225.788848][ T9] usb 5-1: Manufacturer: syz [ 225.798462][ T9] usb 5-1: SerialNumber: syz [ 225.833309][ T9] usb 5-1: config 0 descriptor?? [ 225.857971][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805e5f4c00: rx timeout, send abort [ 225.868413][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805e5f4c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 225.917549][ T8217] /dev/rnullb0: Can't open blockdev [ 226.148194][ T5916] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 226.313112][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.342288][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 226.399883][ T5916] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 226.425665][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 226.435096][ T5916] usb 3-1: SerialNumber: syz [ 226.578432][ T5937] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 226.675179][ T5916] usb 3-1: 0:2 : does not exist [ 226.689018][ T9] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 226.724874][ T9] usb 5-1: No valid video chain found. [ 226.761393][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 226.766536][ T9] usb 5-1: USB disconnect, device number 15 [ 226.775803][ T5937] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 226.784500][ T5916] usb 3-1: USB disconnect, device number 24 [ 226.807592][ T5937] usb 7-1: config 0 has no interface number 0 [ 226.828622][ T5937] usb 7-1: config 0 interface 12 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 226.874124][ T5937] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=2e.5f [ 226.893968][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.903607][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.914212][ T5937] usb 7-1: Product: syz [ 226.959100][ T5937] usb 7-1: Manufacturer: syz [ 226.963795][ T5937] usb 7-1: SerialNumber: syz [ 226.998733][ T5937] usb 7-1: config 0 descriptor?? [ 227.007489][ T5937] iowarrior 7-1:0.12: no interrupt-in endpoint found [ 227.024670][ T8236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.583'. [ 227.218277][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.258519][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.398530][ T8246] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 227.571907][ T8250] netlink: 18128 bytes leftover after parsing attributes in process `syz.2.588'. [ 227.606504][ T8252] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 227.608295][ T981] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 227.795229][ T5916] usb 7-1: USB disconnect, device number 10 [ 227.801474][ T981] usb 6-1: device descriptor read/64, error -71 [ 228.043338][ T981] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 228.127236][ T8261] netlink: 4 bytes leftover after parsing attributes in process `syz.2.590'. [ 228.137451][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.2.590'. [ 228.188246][ T981] usb 6-1: device descriptor read/64, error -71 [ 228.298611][ T981] usb usb6-port1: attempt power cycle [ 228.668802][ T981] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 228.696798][ T981] usb 6-1: device descriptor read/8, error -71 [ 228.958307][ T981] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 228.999021][ T981] usb 6-1: device descriptor read/8, error -71 [ 229.038731][ T5835] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 229.109705][ T981] usb usb6-port1: unable to enumerate USB device [ 229.220476][ T5835] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 229.238629][ T5835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.250418][ T5835] usb 5-1: config 0 descriptor?? [ 229.261862][ T5835] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 229.280109][ T8289] netlink: 16 bytes leftover after parsing attributes in process `syz.2.599'. [ 229.578514][ T981] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 229.663822][ T5835] gp8psk: usb in 128 operation failed. [ 229.682963][ T5835] gp8psk: usb in 137 operation failed. [ 229.702958][ T5835] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 229.725133][ T5835] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 229.750608][ T981] usb 3-1: config 223 has too many interfaces: 122, using maximum allowed: 32 [ 229.760882][ T5835] usb 5-1: USB disconnect, device number 16 [ 229.780040][ T981] usb 3-1: config 223 has 1 interface, different from the descriptor's value: 122 [ 229.821270][ T981] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 229.841894][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.861428][ T981] usb 3-1: Product: syz [ 229.865710][ T981] usb 3-1: Manufacturer: syz [ 229.880747][ T981] usb 3-1: SerialNumber: syz [ 230.306651][ T981] usb 3-1: Firmware version (0.0) predates our first public release. [ 230.315473][ T981] usb 3-1: Please update to version 0.2 or newer [ 230.401771][ T981] usb 3-1: USB disconnect, device number 25 [ 230.555787][ T8305] fuse: Unknown parameter '' [ 231.023708][ T8317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.287748][ T8326] program syz.6.611 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.328485][ T981] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 231.348838][ T8326] Invalid ELF header magic: != ELF [ 231.488215][ T981] usb 5-1: device descriptor read/64, error -71 [ 231.723669][ T5835] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 231.738586][ T981] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 231.868905][ T981] usb 5-1: device descriptor read/64, error -71 [ 231.885904][ T8340] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 231.897392][ T8340] syzkaller1: entered promiscuous mode [ 231.903337][ T8340] syzkaller1: entered allmulticast mode [ 231.904294][ T5835] usb 7-1: Using ep0 maxpacket: 8 [ 231.932731][ T5835] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 231.959409][ T5835] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 231.978666][ T981] usb usb5-port1: attempt power cycle [ 231.994610][ T8342] XFS (rnullb0): Invalid superblock magic number [ 231.999553][ T5835] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 232.028362][ T5835] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.058643][ T5835] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 232.078215][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.324335][ T5835] usb 7-1: GET_CAPABILITIES returned 0 [ 232.348190][ T5835] usbtmc 7-1:16.0: can't read capabilities [ 232.368214][ T981] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 232.453019][ T981] usb 5-1: device descriptor read/8, error -71 [ 232.591679][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 232.602716][ T8334] usbtmc 7-1:16.0: Unable to send data, error -71 [ 232.664685][ T5916] usb 7-1: USB disconnect, device number 11 [ 232.709162][ T981] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 232.753982][ T981] usb 5-1: device descriptor read/8, error -71 [ 232.868856][ T981] usb usb5-port1: unable to enumerate USB device [ 233.048396][ T5896] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 233.241078][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 233.263779][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.308229][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 233.336676][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.373132][ T5896] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 233.391381][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.459210][ T5896] usb 3-1: config 0 descriptor?? [ 233.465346][ T8362] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 233.485273][ T5896] hub 3-1:0.0: USB hub found [ 234.036145][ T8383] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.063514][ T8383] syzkaller1: entered promiscuous mode [ 234.069542][ T8383] syzkaller1: entered allmulticast mode [ 234.622253][ T8394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.630'. [ 234.662549][ T8394] netlink: 28 bytes leftover after parsing attributes in process `syz.6.630'. [ 234.678568][ T8398] netlink: 'syz.6.630': attribute type 3 has an invalid length. [ 234.697061][ T8398] netlink: 132 bytes leftover after parsing attributes in process `syz.6.630'. [ 234.835985][ T5896] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 234.873967][ T5896] usbhid 3-1:0.0: can't add hid device: -71 [ 234.880614][ T5896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 234.913301][ T8401] /dev/rnullb0: Can't open blockdev [ 234.919631][ T8401] /dev/rnullb0: Can't open blockdev [ 234.925914][ T8401] /dev/rnullb0: Can't open blockdev [ 234.932698][ T8401] /dev/rnullb0: Can't open blockdev [ 234.938373][ T5896] usb 3-1: USB disconnect, device number 26 [ 234.955361][ T8401] /dev/rnullb0: Can't open blockdev [ 234.964095][ T8401] /dev/rnullb0: Can't open blockdev [ 234.974078][ T8401] /dev/rnullb0: Can't open blockdev [ 234.984619][ T8401] /dev/rnullb0: Can't open blockdev [ 234.993521][ T8401] /dev/rnullb0: Can't open blockdev [ 235.003785][ T8401] /dev/rnullb0: Can't open blockdev [ 235.012556][ T8401] /dev/rnullb0: Can't open blockdev [ 235.021141][ T8401] /dev/rnullb0: Can't open blockdev [ 235.027274][ T8401] /dev/rnullb0: Can't open blockdev [ 235.036346][ T8401] /dev/rnullb0: Can't open blockdev [ 235.053406][ T8401] /dev/rnullb0: Can't open blockdev [ 235.063340][ T8401] /dev/rnullb0: Can't open blockdev [ 235.075080][ T8401] /dev/rnullb0: Can't open blockdev [ 235.084758][ T8401] /dev/rnullb0: Can't open blockdev [ 235.093735][ T8401] /dev/rnullb0: Can't open blockdev [ 235.102598][ T8401] /dev/rnullb0: Can't open blockdev [ 235.114568][ T8401] /dev/rnullb0: Can't open blockdev [ 235.123156][ T8401] /dev/rnullb0: Can't open blockdev [ 235.132068][ T8401] /dev/rnullb0: Can't open blockdev [ 235.144082][ T8401] /dev/rnullb0: Can't open blockdev [ 235.153359][ T8401] /dev/rnullb0: Can't open blockdev [ 235.163186][ T8401] /dev/rnullb0: Can't open blockdev [ 235.179239][ T8401] /dev/rnullb0: Can't open blockdev [ 235.185381][ T8401] /dev/rnullb0: Can't open blockdev [ 235.195969][ T8401] /dev/rnullb0: Can't open blockdev [ 235.202179][ T8401] /dev/rnullb0: Can't open blockdev [ 235.213141][ T8401] /dev/rnullb0: Can't open blockdev [ 235.220589][ T8401] /dev/rnullb0: Can't open blockdev [ 235.226743][ T8401] /dev/rnullb0: Can't open blockdev [ 235.491665][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 235.519813][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.635'. [ 235.634461][ T8415] CUSE: info not properly terminated [ 235.664013][ T8415] /dev/rnullb0: Can't open blockdev [ 235.900979][ T8420] syz.2.638: attempt to access beyond end of device [ 235.900979][ T8420] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 235.976544][ T8420] syz.2.638: attempt to access beyond end of device [ 235.976544][ T8420] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 236.011634][ T8420] Mount JFS Failure: -5 [ 236.480925][ T8437] /dev/rnullb0: Can't open blockdev [ 236.658447][ T5896] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 236.826128][ T8431] /dev/rnullb0: Can't open blockdev [ 236.828815][ T5896] usb 6-1: Using ep0 maxpacket: 8 [ 236.852990][ T5896] usb 6-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 236.870158][ T5896] usb 6-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.909710][ T5896] usb 6-1: config 1 interface 0 has no altsetting 0 [ 236.959019][ T5896] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 236.978157][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.010405][ T5896] usb 6-1: Product: syz [ 237.034410][ T5896] usb 6-1: Manufacturer: syz [ 237.051366][ T5896] usb 6-1: SerialNumber: syz [ 237.094011][ T8434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.101808][ T8434] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 237.415372][ T5896] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 7 proto 1 vid 0x0525 pid 0xA4A8 [ 237.450320][ T5896] usb 6-1: USB disconnect, device number 25 [ 237.469745][ T5896] usblp0: removed [ 237.488462][ T5855] Bluetooth: hci1: command 0x0406 tx timeout [ 238.144442][ T8456] netlink: zone id is out of range [ 238.170294][ T8456] netlink: zone id is out of range [ 238.419645][ T8465] /dev/rnullb0: Can't open blockdev [ 238.495589][ T8471] /dev/rnullb0: Can't open blockdev [ 239.168304][ T5937] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 239.331317][ T5937] usb 7-1: unable to get BOS descriptor or descriptor too short [ 239.352615][ T5937] usb 7-1: not running at top speed; connect to a high speed hub [ 239.389103][ T5937] usb 7-1: config 9 has an invalid interface number: 68 but max is 0 [ 239.417640][ T5937] usb 7-1: config 9 has no interface number 0 [ 239.437896][ T5937] usb 7-1: config 9 interface 68 has no altsetting 0 [ 239.470450][ T5937] usb 7-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=43.82 [ 239.508148][ T5937] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.542325][ T5937] usb 7-1: Product: syz [ 239.565710][ T5937] usb 7-1: Manufacturer: syz [ 239.574546][ T8481] syz.4.659: attempt to access beyond end of device [ 239.574546][ T8481] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 239.585865][ T5937] usb 7-1: SerialNumber: syz [ 239.592398][ T8481] hfs: can't find a HFS filesystem on dev loop4 [ 239.902957][ T5937] usb 7-1: bad CDC descriptors [ 239.935390][ T5937] usb 7-1: USB disconnect, device number 12 [ 240.550852][ T8503] /dev/rnullb0: Can't open blockdev [ 240.585497][ T8504] /dev/rnullb0: Can't open blockdev [ 240.657201][ T8506] /dev/rnullb0: Can't open blockdev [ 241.128273][ T1222] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 241.215840][ T8519] /dev/rnullb0: Can't open blockdev [ 241.289820][ T1222] usb 7-1: Using ep0 maxpacket: 32 [ 241.311056][ T1222] usb 7-1: unable to get BOS descriptor or descriptor too short [ 241.339979][ T1222] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 241.363559][ T1222] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 241.400535][ T1222] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 241.428265][ T1222] usb 7-1: config 128 has no interface number 0 [ 241.441398][ T1222] usb 7-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 241.466223][ T1222] usb 7-1: config 128 interface 127 has no altsetting 0 [ 241.487056][ T1222] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 241.501109][ T1222] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.518780][ T1222] usb 7-1: Product: syz [ 241.527994][ T1222] usb 7-1: Manufacturer: syz [ 241.538573][ T1222] usb 7-1: SerialNumber: syz [ 241.668249][ T5937] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 241.760091][ T8514] 9pnet_fd: Insufficient options for proto=fd [ 241.835118][ T1222] usb 7-1: USB disconnect, device number 13 [ 241.848372][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 241.872974][ T5937] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 241.882927][ T5937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.896009][ T5937] usb 5-1: Product: syz [ 241.904907][ T5937] usb 5-1: Manufacturer: syz [ 241.909915][ T5937] usb 5-1: SerialNumber: syz [ 241.920102][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.944257][ T5937] usb 5-1: config 0 descriptor?? [ 242.161780][ T5937] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 242.288478][ T1222] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 242.493169][ T1222] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 242.514367][ T1222] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 242.558171][ T1222] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 242.585613][ T1222] usb 6-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x83, skipping [ 242.604887][ T8542] /dev/rnullb0: Can't open blockdev [ 242.622988][ T1222] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 242.639222][ T1222] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 242.668096][ T1222] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 242.685325][ T8545] /dev/rnullb0: Can't open blockdev [ 242.697930][ T1222] usb 6-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x83, skipping [ 242.725259][ T1222] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 242.734033][ T1222] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 242.762098][ T1222] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 242.788223][ T1222] usb 6-1: config 168 interface 0 altsetting 0 has a duplicate endpoint with address 0x83, skipping [ 243.421844][ T5937] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 243.428627][ T8551] netlink: 'syz.2.680': attribute type 10 has an invalid length. [ 243.472875][ T8551] netlink: 40 bytes leftover after parsing attributes in process `syz.2.680'. [ 243.516458][ T8551] batman_adv: batadv0: Adding interface: virt_wifi0 [ 243.539810][ T8551] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.569829][ T8551] batman_adv: batadv0: Interface activated: virt_wifi0 [ 243.592839][ T8552] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 243.599529][ T8552] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 243.631580][ T8552] vhci_hcd vhci_hcd.0: Device attached [ 243.669592][ T8553] usbip_core: unknown command [ 243.676932][ T8553] vhci_hcd: unknown pdu 0 [ 243.683821][ T8553] usbip_core: unknown command [ 243.695112][ T1161] vhci_hcd: stop threads [ 243.709697][ T1161] vhci_hcd: release socket [ 243.726449][ T1161] vhci_hcd: disconnect device [ 243.895762][ T8559] /dev/rnullb0: Can't open blockdev [ 244.000316][ T8561] /dev/rnullb0: Can't open blockdev [ 244.240274][ T5943] usb 5-1: USB disconnect, device number 21 [ 244.757921][ T8570] syzkaller1: entered promiscuous mode [ 244.792677][ T8570] syzkaller1: entered allmulticast mode [ 245.096565][ T1222] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 245.120513][ T1222] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.162732][ T1222] usb 6-1: can't set config #168, error -71 [ 245.218522][ T1222] usb 6-1: USB disconnect, device number 26 [ 245.628329][ T981] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 245.789183][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 245.830805][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.881701][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.922644][ T981] usb 3-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 245.956809][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.979227][ T981] usb 3-1: config 0 descriptor?? [ 246.189677][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'. [ 246.375661][ T8597] /dev/rnullb0: Can't open blockdev [ 246.445651][ T981] lenovo 0003:17EF:6009.0009: hidraw0: USB HID v0.00 Device [HID 17ef:6009] on usb-dummy_hcd.2-1/input0 [ 246.634842][ T8583] /dev/rnullb0: Can't open blockdev [ 246.651491][ T981] usb 3-1: USB disconnect, device number 27 [ 246.693136][ T8600] fido_id[8600]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:17EF:6009.0009/report_descriptor': No such device [ 246.928552][ T1222] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 247.068131][ T1222] usb 6-1: device descriptor read/64, error -71 [ 247.098456][ T5916] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 247.272648][ T5916] usb 7-1: Using ep0 maxpacket: 16 [ 247.294787][ T5916] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 247.303431][ T5916] usb 7-1: config 0 has no interface number 0 [ 247.318973][ T1222] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 247.323619][ T5916] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.368172][ T5916] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.418352][ T5916] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 247.438103][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 247.446254][ T5916] usb 7-1: Product: syz [ 247.484247][ T5916] usb 7-1: SerialNumber: syz [ 247.487570][ T8606] /dev/rnullb0: Can't open blockdev [ 247.498429][ T1222] usb 6-1: device descriptor read/64, error -71 [ 247.507754][ T5916] usb 7-1: config 0 descriptor?? [ 247.537165][ T5916] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 247.571753][ T5916] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.8/input/input11 [ 247.618791][ T1222] usb usb6-port1: attempt power cycle [ 247.627525][ T8608] /dev/rnullb0: Can't open blockdev [ 247.643750][ T8608] overlay: filesystem on ./bus not supported as upperdir [ 247.658721][ T8609] overlay: filesystem on ./bus not supported as upperdir [ 247.731492][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 247.946986][ T5896] usb 7-1: USB disconnect, device number 14 [ 247.969959][ T1222] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 247.983919][ T5896] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 248.021537][ T1222] usb 6-1: device descriptor read/8, error -71 [ 248.166628][ T8620] /dev/rnullb0: Can't open blockdev [ 248.268190][ T1222] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 248.317353][ T1222] usb 6-1: device descriptor read/8, error -71 [ 248.341250][ T8624] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.356706][ T8624] /dev/rnullb0: Can't open blockdev [ 248.429474][ T8626] /dev/rnullb0: Can't open blockdev [ 248.437950][ T8626] usb usb8: usbfs: process 8626 (syz.2.702) did not claim interface 0 before use [ 248.458724][ T1222] usb usb6-port1: unable to enumerate USB device [ 249.368634][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 249.368655][ T30] audit: type=1326 audit(1753894956.219:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.6.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f78dbf8e9a9 code=0x7fc00000 [ 250.773761][ T8677] /dev/rnullb0: Can't open blockdev [ 250.870711][ T8680] serio: Serial port ptm0 [ 251.192725][ T8688] /dev/rnullb0: Can't open blockdev [ 251.829310][ T8696] binder: 8691:8696 ioctl c0306201 0 returned -14 [ 251.950647][ T8700] /dev/rnullb0: Can't open blockdev [ 252.088294][ T5916] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 252.257435][ T5916] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.287748][ T5916] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 252.316919][ T5916] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 252.340852][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 252.375762][ T5916] usb 7-1: SerialNumber: syz [ 252.439933][ T8705] /dev/rnullb0: Can't open blockdev [ 252.468411][ T981] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 252.636172][ T8711] tipc: Started in network mode [ 252.668151][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 252.673240][ T8711] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 252.686822][ T981] usb 3-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.686885][ T981] usb 3-1: config 1 interface 0 has no altsetting 0 [ 252.693583][ T981] usb 3-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 252.693638][ T981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.693662][ T981] usb 3-1: Product: syz [ 252.693678][ T981] usb 3-1: Manufacturer: syz [ 252.693719][ T981] usb 3-1: SerialNumber: syz [ 252.746098][ T8711] tipc: Enabled bearer , priority 10 [ 252.914471][ T5916] usb 7-1: 0:2 : does not exist [ 252.923091][ T8703] /dev/rnullb0: Can't open blockdev [ 252.952894][ T981] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input12 [ 252.953676][ T8716] tmpfs: Bad value for 'nr_blocks' [ 252.986165][ T5203] bcm5974 3-1:1.0: could not read from device [ 252.993159][ T5916] usb 7-1: USB disconnect, device number 15 [ 253.003691][ T5203] bcm5974 3-1:1.0: could not read from device [ 253.024553][ T8716] Invalid source name [ 253.028741][ T8716] UBIFS error (pid: 8716): cannot open "usrquota@", error -22 [ 253.030746][ T8716] /dev/rnullb0: Can't open blockdev [ 253.050497][ T5203] bcm5974 3-1:1.0: could not read from device [ 253.082302][ T981] usb 3-1: USB disconnect, device number 28 [ 253.147977][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 253.366313][ T8723] /dev/rnullb0: Can't open blockdev [ 253.397568][ T8725] /dev/rnullb0: Can't open blockdev [ 253.830150][ T5835] tipc: Node number set to 10136234 [ 254.118308][ T5835] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 254.298496][ T5835] usb 7-1: Using ep0 maxpacket: 16 [ 254.306463][ T5835] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.317642][ T5835] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.332937][ T5835] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 254.342765][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 254.351296][ T5835] usb 7-1: SerialNumber: syz [ 254.491177][ T981] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 254.571531][ T8741] /dev/rnullb0: Can't open blockdev [ 254.586885][ T5835] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 254.607736][ T5835] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 254.615632][ T5835] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -22 [ 254.642463][ T5835] usb 7-1: USB disconnect, device number 16 [ 254.658323][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 254.673749][ T981] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 254.695306][ T981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 254.728266][ T981] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 254.748245][ T981] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 254.762819][ T981] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 254.775730][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.897028][ T8751] /dev/rnullb0: Can't open blockdev [ 254.995159][ T981] usb 6-1: GET_CAPABILITIES returned 0 [ 255.025826][ T981] usbtmc 6-1:16.0: can't read capabilities [ 255.082012][ T8754] Invalid option length (1048467) for dns_resolver key [ 255.178286][ T8756] 9pnet_fd: p9_fd_create_unix (8756): problem connecting socket: ./file0: -5 [ 255.201273][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 255.223260][ T8748] usbtmc 6-1:16.0: Unable to send data, error -71 [ 255.265330][ T5916] usb 6-1: USB disconnect, device number 31 [ 255.548232][ T5943] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 255.740461][ T5943] usb 3-1: no configurations [ 255.745213][ T5943] usb 3-1: can't read configurations, error -22 [ 255.895879][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.902477][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.909296][ T5943] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 255.998511][ T8776] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 256.016317][ T8776] syz.5.745: attempt to access beyond end of device [ 256.016317][ T8776] loop5: rw=0, sector=0, nr_sectors = 2 limit=0 [ 256.148483][ T5943] usb 3-1: no configurations [ 256.153184][ T5943] usb 3-1: can't read configurations, error -22 [ 256.171465][ T5943] usb usb3-port1: attempt power cycle [ 256.207049][ T8778] overlay: Bad value for 'redirect_dir' [ 256.548622][ T5943] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 256.598336][ T5943] usb 3-1: no configurations [ 256.603022][ T5943] usb 3-1: can't read configurations, error -22 [ 256.666523][ T8788] /dev/rnullb0: Can't open blockdev [ 256.758288][ T5943] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 256.789746][ T5943] usb 3-1: no configurations [ 256.794420][ T5943] usb 3-1: can't read configurations, error -22 [ 256.801889][ T5943] usb usb3-port1: unable to enumerate USB device [ 256.908574][ T5937] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 256.950091][ T8795] /dev/rnullb0: Can't open blockdev [ 257.064435][ T8801] /dev/rnullb0: Can't open blockdev [ 257.127450][ T5937] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 257.146199][ T5937] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 257.191798][ T5937] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 257.212445][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.295916][ T8806] netlink: zone id is out of range [ 257.323912][ T8806] netlink: zone id is out of range [ 257.358167][ T8806] netlink: zone id is out of range [ 257.374866][ T8806] netlink: zone id is out of range [ 257.384742][ T8806] netlink: zone id is out of range [ 257.397916][ T8806] netlink: zone id is out of range [ 257.418424][ T8806] netlink: zone id is out of range [ 257.428561][ T8806] netlink: zone id is out of range [ 257.435507][ T8806] netlink: zone id is out of range [ 257.456048][ T8806] netlink: zone id is out of range [ 257.495329][ T5937] usb 5-1: usb_control_msg returned -32 [ 257.515000][ T5937] usbtmc 5-1:16.0: can't read capabilities [ 257.615965][ T8815] /dev/rnullb0: Can't open blockdev [ 257.810064][ T5943] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 257.878931][ T8818] /dev/rnullb0: Can't open blockdev [ 257.958367][ T5937] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 257.968293][ T5943] usb 7-1: device descriptor read/64, error -71 [ 258.098592][ T5937] usb 6-1: device descriptor read/64, error -71 [ 258.151767][ T8820] usb usb8: usbfs: process 8820 (syz.2.760) did not claim interface 0 before use [ 258.218305][ T5943] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 258.368890][ T5937] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 258.377050][ T5943] usb 7-1: device descriptor read/64, error -71 [ 258.489217][ T5943] usb usb7-port1: attempt power cycle [ 258.518248][ T1222] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 258.525946][ T5937] usb 6-1: device descriptor read/64, error -71 [ 258.638605][ T5937] usb usb6-port1: attempt power cycle [ 258.698290][ T1222] usb 3-1: Using ep0 maxpacket: 32 [ 258.707231][ T1222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.720015][ T1222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.730432][ T1222] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 258.739902][ T1222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.753847][ T1222] usb 3-1: config 0 descriptor?? [ 258.770371][ T1222] hub 3-1:0.0: USB hub found [ 258.858435][ T5943] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 258.889828][ T5943] usb 7-1: device descriptor read/8, error -71 [ 258.986808][ T1222] hub 3-1:0.0: 1 port detected [ 258.994523][ T5937] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 259.029484][ T5937] usb 6-1: device descriptor read/8, error -71 [ 259.148388][ T5943] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 259.179132][ T5943] usb 7-1: device descriptor read/8, error -71 [ 259.289342][ T5943] usb usb7-port1: unable to enumerate USB device [ 259.311411][ T5937] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 259.353808][ T5937] usb 6-1: device descriptor read/8, error -71 [ 259.471652][ T5937] usb usb6-port1: unable to enumerate USB device [ 259.599752][ T5937] hub 3-1:0.0: activate --> -90 [ 259.766231][ T1222] usb 5-1: USB disconnect, device number 22 [ 260.013317][ T1222] usb 3-1: USB disconnect, device number 33 [ 260.238306][ T5937] usb 3-1-port1: config error [ 260.548256][ T5916] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 260.702919][ T8838] /dev/rnullb0: Can't open blockdev [ 260.719185][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 260.734520][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.766397][ T5916] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59 [ 260.781093][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.814273][ T5916] usb 5-1: Product: syz [ 260.828169][ T5916] usb 5-1: Manufacturer: syz [ 260.832942][ T5916] usb 5-1: SerialNumber: syz [ 260.872447][ T5916] usb 5-1: config 0 descriptor?? [ 260.907762][ T8843] /dev/rnullb0: Can't open blockdev [ 260.934277][ T5916] peak_usb 5-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 260.972096][ T8843] /dev/rnullb0: Can't open blockdev [ 260.977644][ T5916] peak_usb 5-1:0.0: unable to read PCAN-USB serial number (err -22) [ 261.020801][ T8843] /dev/rnullb0: Can't open blockdev [ 261.055149][ T8843] /dev/rnullb0: Can't open blockdev [ 261.089125][ T8843] /dev/rnullb0: Can't open blockdev [ 261.103523][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.112226][ T8843] /dev/rnullb0: Can't open blockdev [ 261.129233][ T5916] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 261.148539][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.169973][ T8843] /dev/rnullb0: Can't open blockdev [ 261.176071][ T8843] /dev/rnullb0: Can't open blockdev [ 261.183431][ T8835] /dev/rnullb0: Can't open blockdev [ 261.214306][ T1222] usb 5-1: USB disconnect, device number 23 [ 261.239505][ T8843] /dev/rnullb0: Can't open blockdev [ 261.245581][ T8843] /dev/rnullb0: Can't open blockdev [ 261.250870][ T8854] /dev/rnullb0: Can't open blockdev [ 261.282480][ T8855] /dev/rnullb0: Can't open blockdev [ 261.317070][ T8843] /dev/rnullb0: Can't open blockdev [ 261.339644][ T8843] /dev/rnullb0: Can't open blockdev [ 261.353577][ T8843] /dev/rnullb0: Can't open blockdev [ 261.375515][ T8843] /dev/rnullb0: Can't open blockdev [ 261.393152][ T8843] /dev/rnullb0: Can't open blockdev [ 261.404004][ T8857] /dev/rnullb0: Can't open blockdev [ 261.409459][ T8843] /dev/rnullb0: Can't open blockdev [ 261.412304][ T8843] /dev/rnullb0: Can't open blockdev [ 261.433565][ T8843] /dev/rnullb0: Can't open blockdev [ 261.451511][ T8843] /dev/rnullb0: Can't open blockdev [ 261.471226][ T8843] /dev/rnullb0: Can't open blockdev [ 261.486232][ T8843] /dev/rnullb0: Can't open blockdev [ 261.506548][ T8843] /dev/rnullb0: Can't open blockdev [ 261.517387][ T8843] /dev/rnullb0: Can't open blockdev [ 261.575963][ T8843] /dev/rnullb0: Can't open blockdev [ 261.585988][ T8843] /dev/rnullb0: Can't open blockdev [ 261.593959][ T8843] /dev/rnullb0: Can't open blockdev [ 261.606255][ T8843] /dev/rnullb0: Can't open blockdev [ 261.614547][ T8843] /dev/rnullb0: Can't open blockdev [ 261.627936][ T8843] /dev/rnullb0: Can't open blockdev [ 261.634991][ T8843] /dev/rnullb0: Can't open blockdev [ 261.645702][ T8843] /dev/rnullb0: Can't open blockdev [ 261.654305][ T8843] /dev/rnullb0: Can't open blockdev [ 261.675824][ T8843] /dev/rnullb0: Can't open blockdev [ 261.706189][ T8863] pimreg3: entered allmulticast mode [ 262.186956][ T8877] tmpfs: Bad value for 'mpol' [ 262.458552][ T5937] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 262.618241][ T981] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 262.651142][ T5937] usb 5-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 262.669565][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.719687][ T5937] usb 5-1: config 0 descriptor?? [ 262.743506][ T5937] pwc: Philips SPC 900NC USB webcam detected. [ 262.752622][ T8887] /dev/rnullb0: Can't open blockdev [ 262.790489][ T981] usb 6-1: Using ep0 maxpacket: 8 [ 262.801334][ T981] usb 6-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 262.817233][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.848331][ T981] usb 6-1: Product: syz [ 262.852568][ T981] usb 6-1: Manufacturer: syz [ 262.857203][ T981] usb 6-1: SerialNumber: syz [ 262.906445][ T981] usb 6-1: config 0 descriptor?? [ 262.935193][ T8889] fuse: Bad value for 'fd' [ 262.948917][ T8877] /dev/rnullb0: Can't open blockdev [ 262.981375][ T5937] pwc: Failed to set LED on/off time (-71) [ 262.996145][ T5937] pwc: send_video_command error -71 [ 263.008185][ T5937] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 263.030258][ T5937] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 263.060253][ T5937] usb 5-1: USB disconnect, device number 24 [ 263.128260][ T981] usb 6-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 263.389536][ T981] usb write operation failed. (-71) [ 263.426259][ T981] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.475068][ T981] dvbdev: DVB: registering new adapter (Terratec H7) [ 263.503139][ T981] usb 6-1: media controller created [ 263.528440][ T981] usb read operation failed. (-71) [ 263.547612][ T981] usb write operation failed. (-71) [ 263.623632][ T981] dvb_usb_az6007 6-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 263.663629][ T981] usb 6-1: USB disconnect, device number 36 [ 264.311796][ T8911] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 264.375408][ T8911] tmpfs: Unknown parameter 'func' [ 265.075299][ T8931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.793'. [ 265.084934][ T8928] netlink: 60 bytes leftover after parsing attributes in process `syz.2.793'. [ 265.108998][ T8931] netlink: 60 bytes leftover after parsing attributes in process `syz.2.793'. [ 265.614131][ T8952] /dev/rnullb0: Can't open blockdev [ 266.278919][ T981] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 266.464686][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.508183][ T981] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 266.546582][ T981] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 266.569885][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.628600][ T981] usb 7-1: config 0 descriptor?? [ 266.652856][ T8981] netlink: 'syz.5.807': attribute type 19 has an invalid length. [ 266.725678][ T8981] /dev/rnullb0: Can't open blockdev [ 266.765951][ T8981] netlink: 'syz.5.807': attribute type 19 has an invalid length. [ 266.799220][ T8982] /dev/rnullb0: Can't open blockdev [ 266.837775][ T8987] /dev/rnullb0: Can't open blockdev [ 267.105892][ T981] pyra 0003:1E7D:2CF6.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 267.688691][ T9006] /dev/rnullb0: Can't open blockdev [ 268.208757][ T5937] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 268.219185][ T5855] Bluetooth: hci4: command 0x0406 tx timeout [ 268.262642][ T9017] netlink: 156 bytes leftover after parsing attributes in process `syz.5.816'. [ 268.362678][ T9021] /dev/rnullb0: Can't open blockdev [ 268.368496][ T5937] usb 3-1: device descriptor read/64, error -71 [ 268.377898][ T981] pyra 0003:1E7D:2CF6.000A: couldn't init struct pyra_device [ 268.377960][ T981] pyra 0003:1E7D:2CF6.000A: couldn't install mouse [ 268.383623][ T981] pyra 0003:1E7D:2CF6.000A: probe with driver pyra failed with error -71 [ 268.388794][ T981] usb 7-1: USB disconnect, device number 21 [ 268.608435][ T5937] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 268.758747][ T5937] usb 3-1: device descriptor read/64, error -71 [ 268.800560][ T9030] /dev/rnullb0: Can't open blockdev [ 268.842947][ T9031] bond_slave_0: entered promiscuous mode [ 268.849123][ T9031] bond_slave_1: entered promiscuous mode [ 268.893029][ T5937] usb usb3-port1: attempt power cycle [ 268.948333][ T9035] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.957062][ T9035] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.230889][ T9040] /dev/rnullb0: Can't open blockdev [ 269.258373][ T5937] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 269.299568][ T5937] usb 3-1: device descriptor read/8, error -71 [ 269.566998][ T9026] bond_slave_0: left promiscuous mode [ 269.572975][ T9026] bond_slave_1: left promiscuous mode [ 269.579825][ T5937] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 269.618877][ T5937] usb 3-1: device descriptor read/8, error -71 [ 269.701497][ T981] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 269.738730][ T5937] usb usb3-port1: unable to enumerate USB device [ 269.809983][ T9056] sctp: [Deprecated]: syz.5.823 (pid 9056) Use of int in maxseg socket option. [ 269.809983][ T9056] Use struct sctp_assoc_value instead [ 269.847602][ T9056] /dev/rnullb0: Can't open blockdev [ 269.897971][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.928122][ T981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.958242][ T981] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 270.002393][ T981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.035370][ T981] usb 5-1: config 0 descriptor?? [ 270.495101][ T981] pyra 0003:1E7D:2CF6.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 271.818650][ T5937] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 272.008119][ T5937] usb 7-1: Using ep0 maxpacket: 32 [ 272.018159][ T1222] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 272.031541][ T5937] usb 7-1: config 0 has no interfaces? [ 272.047429][ T5937] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 272.048509][ T5916] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 272.077324][ T5937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.119251][ T5937] usb 7-1: config 0 descriptor?? [ 272.158217][ T1222] usb 3-1: device descriptor read/64, error -71 [ 272.286342][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 272.335488][ T5896] usb 7-1: USB disconnect, device number 22 [ 272.354246][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 272.405491][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 272.418237][ T1222] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 272.445796][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 272.467755][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 272.488012][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 272.523535][ T5916] usb 6-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 272.564806][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.578130][ T1222] usb 3-1: device descriptor read/64, error -71 [ 272.588895][ T5916] usb 6-1: Product: syz [ 272.593166][ T5916] usb 6-1: Manufacturer: syz [ 272.616115][ T5916] usb 6-1: SerialNumber: syz [ 272.655855][ T5916] usb 6-1: config 0 descriptor?? [ 272.675604][ T5916] ti_usb_3410_5052 6-1:0.0: TI USB 5052 2 port adapter converter detected [ 272.689228][ T1222] usb usb3-port1: attempt power cycle [ 272.706748][ T5916] ti_usb_3410_5052 6-1:0.0: missing endpoints [ 272.869060][ T5896] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 272.996913][ T981] pyra 0003:1E7D:2CF6.000B: couldn't init struct pyra_device [ 273.004859][ T981] pyra 0003:1E7D:2CF6.000B: couldn't install mouse [ 273.025856][ T981] pyra 0003:1E7D:2CF6.000B: probe with driver pyra failed with error -71 [ 273.068160][ T1222] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 273.068221][ T5896] usb 7-1: Using ep0 maxpacket: 32 [ 273.081413][ T981] usb 5-1: USB disconnect, device number 25 [ 273.098916][ T1222] usb 3-1: device descriptor read/8, error -71 [ 273.138806][ T5896] usb 7-1: config 0 has no interfaces? [ 273.145997][ T5896] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 273.163239][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.186040][ T5896] usb 7-1: config 0 descriptor?? [ 273.348185][ T1222] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 273.382734][ T1222] usb 3-1: device descriptor read/8, error -71 [ 273.396803][ T5896] usb 6-1: USB disconnect, device number 37 [ 273.510456][ T1222] usb usb3-port1: unable to enumerate USB device [ 273.828452][ T9141] /dev/rnullb0: Can't open blockdev [ 273.875283][ T9143] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 273.881871][ T9143] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 273.912043][ T9143] vhci_hcd vhci_hcd.0: Device attached [ 273.934789][ T9145] netlink: 'syz.5.838': attribute type 27 has an invalid length. [ 273.975905][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.994725][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.004871][ T9150] QAT: failed to copy from user cfg_data. [ 274.017116][ T9150] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 274.023694][ T9150] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 274.038292][ T9150] vhci_hcd vhci_hcd.0: Device attached [ 274.074449][ T9150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.112732][ T9154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.125087][ T9150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.141392][ T9154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.150433][ T9150] netlink: 'syz.4.839': attribute type 21 has an invalid length. [ 274.157711][ T9152] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 274.170509][ T44] usb 7-1: USB disconnect, device number 23 [ 274.178155][ T5896] usb 44-1: SetAddress Request (2) to port 0 [ 274.184233][ T5896] usb 44-1: new SuperSpeed USB device number 2 using vhci_hcd [ 274.196845][ T981] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 274.207252][ T59] vhci_hcd: stop threads [ 274.227484][ T5916] vhci_hcd: vhci_device speed not set [ 274.233060][ T59] vhci_hcd: release socket [ 274.248601][ T59] vhci_hcd: disconnect device [ 274.308189][ T5916] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 274.334757][ T5916] usb 41-1: enqueue for inactive port 0 [ 274.365630][ T9144] vhci_hcd: connection reset by peer [ 274.383697][ T1144] vhci_hcd: stop threads [ 274.397782][ T1144] vhci_hcd: release socket [ 274.417816][ T1144] vhci_hcd: disconnect device [ 274.423975][ T5916] vhci_hcd: vhci_device speed not set [ 274.646698][ T5850] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 274.821269][ T9172] netlink: 24 bytes leftover after parsing attributes in process `syz.5.844'. [ 274.928433][ T9172] net_ratelimit: 168 callbacks suppressed [ 274.928450][ T9172] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 275.520681][ T9195] netlink: 72 bytes leftover after parsing attributes in process `syz.4.854'. [ 275.604900][ T9198] /dev/rnullb0: Can't open blockdev [ 275.629558][ T9199] /dev/rnullb0: Can't open blockdev [ 275.721091][ T9202] NILFS (nbd2): device size too small [ 276.058535][ T44] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 276.178235][ T5916] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 276.195077][ T9215] netlink: 'syz.5.862': attribute type 12 has an invalid length. [ 276.232672][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 276.241136][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.257168][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.338372][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 276.354101][ T5916] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 276.379518][ T5916] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.403166][ T44] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 276.424332][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.425869][ T5916] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 276.443573][ T44] usb 7-1: config 0 descriptor?? [ 276.467611][ T44] hub 7-1:0.0: USB hub found [ 276.485814][ T5916] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 276.505703][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.536205][ T5916] usb 5-1: Product: syz [ 276.540744][ T5916] usb 5-1: Manufacturer: syz [ 276.545392][ T5916] usb 5-1: SerialNumber: syz [ 276.663792][ T44] hub 7-1:0.0: 1 port detected [ 276.793365][ T9211] orangefs_mount: mount request failed with -4 [ 276.984662][ T5916] usb 5-1: 0:2 : does not exist [ 277.270267][ T5937] hub 7-1:0.0: activate --> -90 [ 277.401938][ T9229] sg_write: data in/out 475/70 bytes for SCSI command 0x5-- guessing data in; [ 277.401938][ T9229] program syz.5.866 not setting count and/or reply_len properly [ 277.473693][ T9230] /dev/rnullb0: Can't open blockdev [ 277.689958][ T9] usb 7-1: USB disconnect, device number 24 [ 277.763138][ T9235] /dev/rnullb0: Can't open blockdev [ 277.828140][ T981] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 277.847881][ T5916] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 277.923494][ T5916] usb 5-1: USB disconnect, device number 27 [ 277.975595][ T6142] udevd[6142]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.998060][ T981] usb 3-1: Using ep0 maxpacket: 8 [ 278.019137][ T44] usb 7-1-port1: config error [ 278.035200][ T981] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 278.068148][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.090431][ T981] pvrusb2: Hardware description: Terratec Grabster AV400 [ 278.121760][ T981] pvrusb2: ********** [ 278.125817][ T981] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 278.141715][ T981] pvrusb2: Important functionality might not be entirely working. [ 278.155117][ T981] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 278.167591][ T981] pvrusb2: ********** [ 278.300804][ T2348] pvrusb2: Invalid write control endpoint [ 278.554920][ T44] usb 3-1: USB disconnect, device number 43 [ 278.689592][ T9242] /dev/rnullb0: Can't open blockdev [ 278.761672][ T2348] pvrusb2: Invalid write control endpoint [ 278.800109][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 278.858209][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 278.899255][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 278.938154][ T2348] pvrusb2: Device being rendered inoperable [ 278.945731][ T2348] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 278.969199][ T2348] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 279.007919][ T2348] pvrusb2: Attached sub-driver cx25840 [ 279.032443][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 279.078105][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 279.328321][ T5896] usb 44-1: device descriptor read/8, error -110 [ 279.732033][ T5896] usb usb44-port1: attempt power cycle [ 279.938362][ T981] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 280.099980][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 280.116290][ T981] usb 5-1: config 0 has an invalid interface number: 58 but max is 0 [ 280.130594][ T981] usb 5-1: config 0 has no interface number 0 [ 280.150032][ T981] usb 5-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 280.176000][ T981] usb 5-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 280.228202][ T981] usb 5-1: config 0 interface 58 has no altsetting 0 [ 280.267554][ T981] usb 5-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 280.287185][ T9271] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 280.288391][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.293761][ T9271] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 280.337490][ T5896] usb usb44-port1: unable to enumerate USB device [ 280.347088][ T981] usb 5-1: Product: syz [ 280.356461][ T981] usb 5-1: Manufacturer: syz [ 280.362539][ T981] usb 5-1: SerialNumber: syz [ 280.381345][ T981] usb 5-1: config 0 descriptor?? [ 280.386162][ T9271] vhci_hcd vhci_hcd.0: Device attached [ 280.397097][ T9266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 280.414597][ T9266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 280.418604][ T9274] netlink: 116 bytes leftover after parsing attributes in process `syz.6.880'. [ 280.442450][ T981] ums-isd200 5-1:0.58: USB Mass Storage device detected [ 280.473850][ T9272] vhci_hcd: connection closed [ 280.474329][ T3492] vhci_hcd: stop threads [ 280.539989][ T3492] vhci_hcd: release socket [ 280.544623][ T3492] vhci_hcd: disconnect device [ 280.868361][ T5896] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 280.953861][ T981] scsi host1: usb-storage 5-1:0.58 [ 280.984560][ T981] usb 5-1: USB disconnect, device number 28 [ 281.058199][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 281.070014][ T5896] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 281.092403][ T5896] usb 3-1: config 0 has no interface number 0 [ 281.133752][ T5896] usb 3-1: config 0 interface 148 has no altsetting 0 [ 281.166223][ T5896] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=c5.61 [ 281.187721][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.228274][ T5896] usb 3-1: Product: syz [ 281.232509][ T5896] usb 3-1: Manufacturer: syz [ 281.237130][ T5896] usb 3-1: SerialNumber: syz [ 281.270527][ T5896] usb 3-1: config 0 descriptor?? [ 281.389552][ T9284] /dev/rnullb0: Can't open blockdev [ 281.492837][ T9278] /dev/rnullb0: Can't open blockdev [ 281.518832][ T5896] snd-usb-audio 3-1:0.148: probe with driver snd-usb-audio failed with error -71 [ 281.554991][ T9287] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.608369][ T5896] usb 3-1: USB disconnect, device number 44 [ 281.625212][ T9287] kexec: Could not allocate control_code_buffer [ 282.294313][ T9303] /dev/rnullb0: Can't open blockdev [ 282.575645][ T9312] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 282.664115][ T9322] netlink: 168 bytes leftover after parsing attributes in process `syz.4.896'. [ 282.738192][ T44] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 282.898183][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 282.918633][ T44] usb 3-1: config 211 has an invalid interface number: 98 but max is 0 [ 282.938722][ T44] usb 3-1: config 211 has no interface number 0 [ 282.947541][ T44] usb 3-1: config 211 interface 98 altsetting 1 endpoint 0x2 has invalid maxpacket 56328, setting to 1024 [ 282.988152][ T44] usb 3-1: config 211 interface 98 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 1024 [ 283.015864][ T44] usb 3-1: config 211 interface 98 has no altsetting 0 [ 283.043391][ T44] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=7c.8a [ 283.058102][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.098124][ T44] usb 3-1: Product: syz [ 283.122786][ T44] usb 3-1: Manufacturer: syz [ 283.127469][ T44] usb 3-1: SerialNumber: syz [ 283.172759][ T9309] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 283.808937][ T5903] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 283.880840][ T44] mct_u232 3-1:211.98: MCT U232 converter detected [ 283.909829][ T44] mct_u232 ttyUSB0: expected endpoint missing [ 283.930102][ T44] usb 3-1: USB disconnect, device number 45 [ 283.949856][ T44] mct_u232 3-1:211.98: device disconnected [ 283.989739][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 284.010280][ T5903] usb 6-1: config 146 has an invalid descriptor of length 254, skipping remainder of the config [ 284.042303][ T5903] usb 6-1: config 146 has 0 interfaces, different from the descriptor's value: 1 [ 284.078190][ T5896] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 284.090853][ T5903] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 284.106452][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.107230][ T9348] /dev/rnullb0: Can't open blockdev [ 284.114850][ T5903] usb 6-1: Product: syz [ 284.135146][ T5903] usb 6-1: Manufacturer: syz [ 284.144484][ T5903] usb 6-1: SerialNumber: syz [ 284.228357][ T5896] usb 7-1: device descriptor read/64, error -71 [ 284.256307][ T9351] /dev/rnullb0: Can't open blockdev [ 284.361292][ T9344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.384126][ T9344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.448510][ T5903] usb 6-1: USB disconnect, device number 38 [ 284.479194][ T5896] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 284.638245][ T5896] usb 7-1: device descriptor read/64, error -71 [ 284.689789][ T9361] usb usb8: usbfs: process 9361 (syz.2.909) did not claim interface 0 before use [ 284.759416][ T5896] usb usb7-port1: attempt power cycle [ 284.958362][ T5937] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 285.118445][ T5896] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 285.122523][ T5937] usb 3-1: config 0 has no interfaces? [ 285.148168][ T5937] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 285.151119][ T5896] usb 7-1: device descriptor read/8, error -71 [ 285.165648][ T5937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.220768][ T5937] usb 3-1: config 0 descriptor?? [ 285.438161][ T5896] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 285.443583][ T9361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 285.469363][ T5896] usb 7-1: device descriptor read/8, error -71 [ 285.495771][ T9361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 285.541358][ T44] usb 3-1: USB disconnect, device number 46 [ 285.579305][ T5896] usb usb7-port1: unable to enumerate USB device [ 285.977366][ T9381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.917'. [ 285.991621][ T44] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 285.998497][ T9379] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.916'. [ 286.035187][ T9381] input: syz1 as /devices/virtual/input/input13 [ 286.036036][ T9379] /dev/rnullb0: Can't open blockdev [ 286.159246][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 286.172844][ T44] usb 3-1: config index 0 descriptor too short (expected 72, got 36) [ 286.204892][ T44] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 286.261642][ T44] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08 [ 286.288450][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.306752][ T44] usb 3-1: Product: syz [ 286.315490][ T44] usb 3-1: Manufacturer: syz [ 286.328404][ T44] usb 3-1: SerialNumber: syz [ 286.748702][ T9393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.779126][ T9393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.978393][ T24] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 287.094939][ T9395] /dev/rnullb0: Can't open blockdev [ 287.128114][ T24] usb 6-1: device descriptor read/64, error -71 [ 287.171414][ T44] usb 3-1: USB disconnect, device number 47 [ 287.369282][ T24] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 287.445803][ T9401] /dev/rnullb0: Can't open blockdev [ 287.538151][ T24] usb 6-1: device descriptor read/64, error -71 [ 287.651956][ T9406] /dev/rnullb0: Can't open blockdev [ 287.663728][ T24] usb usb6-port1: attempt power cycle [ 287.973255][ T9418] /dev/rnullb0: Can't open blockdev [ 288.027013][ T24] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 288.078816][ T24] usb 6-1: device descriptor read/8, error -71 [ 288.175236][ T9424] /dev/rnullb0: Can't open blockdev [ 288.338176][ T24] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 288.369638][ T24] usb 6-1: device descriptor read/8, error -71 [ 288.383299][ T9427] /dev/rnullb0: Can't open blockdev [ 288.408125][ T5943] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 288.488517][ T24] usb usb6-port1: unable to enumerate USB device [ 288.580320][ T5943] usb 5-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 288.601246][ T5943] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.625538][ T5943] usb 5-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 288.661593][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.683693][ T5943] usb 5-1: config 0 descriptor?? [ 288.704097][ T5943] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 288.792797][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 288.928124][ T24] usb 7-1: device descriptor read/64, error -71 [ 289.178159][ T24] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 289.328215][ T24] usb 7-1: device descriptor read/64, error -71 [ 289.450165][ T24] usb usb7-port1: attempt power cycle [ 289.800685][ T24] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 289.855701][ T24] usb 7-1: device descriptor read/8, error -71 [ 289.879900][ T9457] /dev/rnullb0: Can't open blockdev [ 290.060391][ T9459] /dev/rnullb0: Can't open blockdev [ 290.108606][ T9461] tmpfs: Unknown parameter 'noigap' [ 290.121815][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 290.169575][ T24] usb 7-1: device descriptor read/8, error -71 [ 290.288532][ T24] usb usb7-port1: unable to enumerate USB device [ 290.568173][ T5937] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 290.718298][ T5937] usb 6-1: Using ep0 maxpacket: 8 [ 290.729540][ T5937] usb 6-1: config 0 interface 0 has no altsetting 0 [ 290.749598][ T5937] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 290.764210][ T5937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.772939][ T5937] usb 6-1: Product: syz [ 290.777397][ T5937] usb 6-1: Manufacturer: syz [ 290.788316][ T5937] usb 6-1: SerialNumber: syz [ 290.807227][ T5937] usb 6-1: config 0 descriptor?? [ 290.833791][ T5937] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 found [ 291.036719][ T5937] snd_usb_toneport 6-1:0.0: Line 6 TonePort UX2 now disconnected [ 291.070666][ T5937] snd_usb_toneport 6-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 291.148479][ T5903] usb 5-1: USB disconnect, device number 29 [ 291.230191][ T5896] usb 6-1: USB disconnect, device number 43 [ 291.598944][ T9487] ieee802154 phy0 wpan0: encryption failed: -22 [ 291.664099][ T9490] netlink: 'syz.6.948': attribute type 4 has an invalid length. [ 291.795988][ T9492] /dev/rnullb0: Can't open blockdev [ 291.934642][ T9496] /dev/rnullb0: Can't open blockdev [ 291.948642][ T5943] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 292.045777][ T9498] sctp: [Deprecated]: syz.2.952 (pid 9498) Use of int in maxseg socket option. [ 292.045777][ T9498] Use struct sctp_assoc_value instead [ 292.067154][ T9498] sctp: [Deprecated]: syz.2.952 (pid 9498) Use of int in maxseg socket option. [ 292.067154][ T9498] Use struct sctp_assoc_value instead [ 292.138122][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 292.155237][ T5943] usb 7-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 292.158373][ T981] usb 6-1: new low-speed USB device number 44 using dummy_hcd [ 292.164660][ T5943] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 133, changing to 11 [ 292.189147][ T5943] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 292.202637][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.316345][ T9500] netlink: 132 bytes leftover after parsing attributes in process `syz.2.953'. [ 292.318219][ T981] usb 6-1: device descriptor read/64, error -71 [ 292.368358][ T31] INFO: task syz.1.141:6479 blocked for more than 143 seconds. [ 292.376389][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 292.398376][ T31] Blocked by coredump. [ 292.403027][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 292.426932][ T31] task:syz.1.141 state:D stack:26920 pid:6479 tgid:6479 ppid:5849 task_flags:0x40044c flags:0x00004004 [ 292.441821][ T31] Call Trace: [ 292.464046][ T31] [ 292.467138][ T31] __schedule+0x1737/0x4d30 [ 292.470440][ T5943] usb 7-1: string descriptor 0 read error: -71 [ 292.501162][ T31] ? __lock_acquire+0xab9/0xd20 [ 292.510972][ T31] ? schedule+0x165/0x360 [ 292.524773][ T31] ? __lock_acquire+0xab9/0xd20 [ 292.533302][ T31] ? __pfx___schedule+0x10/0x10 [ 292.543444][ T31] ? schedule+0x91/0x360 [ 292.547782][ T31] schedule+0x165/0x360 [ 292.553152][ T31] schedule_preempt_disabled+0x13/0x30 [ 292.564478][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 292.572634][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 292.588285][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 292.601569][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 292.608899][ T981] usb 6-1: new low-speed USB device number 45 using dummy_hcd [ 292.618792][ T5943] usb 7-1: USB disconnect, device number 33 [ 292.633883][ T31] ? exit_mm+0xcc/0x2c0 [ 292.646700][ T31] ? __pfx_mm_release+0x10/0x10 [ 292.653617][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.675989][ T31] down_read+0x98/0x2e0 [ 292.683037][ T31] exit_mm+0xcc/0x2c0 [ 292.687193][ T31] ? __pfx_exit_mm+0x10/0x10 [ 292.695697][ T31] ? rcu_is_watching+0x15/0xb0 [ 292.700758][ T31] do_exit+0x648/0x2300 [ 292.705656][ T31] ? do_raw_spin_lock+0x121/0x290 [ 292.721483][ T31] ? __pfx_do_exit+0x10/0x10 [ 292.733645][ T31] do_group_exit+0x21c/0x2d0 [ 292.738704][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.744070][ T31] get_signal+0x1286/0x1340 [ 292.760454][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 292.766112][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 292.772694][ T981] usb 6-1: device descriptor read/64, error -71 [ 292.779360][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 292.784982][ T31] exit_to_user_mode_loop+0x75/0x110 [ 292.790508][ T31] do_syscall_64+0x2bd/0x3b0 [ 292.793321][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1544, setting to 1024 [ 292.797554][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 292.815845][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.822191][ T31] ? clear_bhb_loop+0x60/0xb0 [ 292.823603][ T24] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 292.826908][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.826950][ T31] RIP: 0033:0x7f66cc58e9e3 [ 292.851633][ T31] RSP: 002b:00007ffc8580ce48 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 292.856582][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.861230][ T31] RAX: fffffffffffffffc RBX: 00007f66cabf76c0 RCX: 00007f66cc58e9e3 [ 292.881163][ T24] usb 3-1: config 0 descriptor?? [ 292.886986][ T9502] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 292.889562][ T981] usb usb6-port1: attempt power cycle [ 292.913661][ T31] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 292.923323][ T31] RBP: 0000000000000000 R08: 00000000ffffffff R09: 0000000000000000 [ 292.934164][ T31] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffc8580cfa0 [ 292.946693][ T31] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 292.955430][ T31] [ 292.958928][ T31] [ 292.958928][ T31] Showing all locks held in the system: [ 292.966860][ T31] 5 locks held by kworker/1:0/24: [ 292.975188][ T31] #0: ffff88801e283d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 292.987073][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 293.023890][ T31] #2: ffff8880280e6198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 293.033527][ T31] #3: ffff888026680198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 293.043299][ T31] #4: ffff88802527d160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 293.053091][ T31] 1 lock held by khungtaskd/31: [ 293.058742][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 293.069402][ T31] 6 locks held by kworker/0:2/981: [ 293.074654][ T31] #0: ffff88801e283d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 293.087585][ T31] #1: ffffc900036b7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 293.106588][ T31] #2: ffff8880281ce198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 293.116981][ T31] #3: ffff888028299518 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b8/0x4a20 [ 293.139912][ T31] #4: ffff888026969868 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e5/0x4a20 [ 293.152129][ T31] #5: ffffffff8f1f8090 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x163/0x1750 [ 293.165219][ T31] 2 locks held by getty/5607: [ 293.174608][ T31] #0: ffff888033de10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 293.187329][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 293.204836][ T31] 1 lock held by syz.1.141/6479: [ 293.210023][ T31] #0: ffff88802763ed60 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 293.224377][ T31] 1 lock held by syz.1.141/6480: [ 293.229570][ T31] 1 lock held by syz.6.948/9489: [ 293.234715][ T31] #0: ffffffff8e543200 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 293.253675][ T31] [ 293.256301][ T31] ============================================= [ 293.256301][ T31] [ 293.274760][ T31] NMI backtrace for cpu 0 [ 293.274791][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 293.274817][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.274831][ T31] Call Trace: [ 293.274840][ T31] [ 293.274849][ T31] dump_stack_lvl+0x189/0x250 [ 293.274888][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.274918][ T31] ? __pfx__printk+0x10/0x10 [ 293.274960][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 293.274989][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 293.275016][ T31] ? __pfx__printk+0x10/0x10 [ 293.275050][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 293.275077][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 293.275106][ T31] watchdog+0xf93/0xfe0 [ 293.275133][ T31] ? watchdog+0x1de/0xfe0 [ 293.275161][ T31] kthread+0x70e/0x8a0 [ 293.275195][ T31] ? __pfx_watchdog+0x10/0x10 [ 293.275216][ T31] ? __pfx_kthread+0x10/0x10 [ 293.275247][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.275274][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.275300][ T31] ? __pfx_kthread+0x10/0x10 [ 293.275330][ T31] ret_from_fork+0x3f9/0x770 [ 293.275359][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 293.275390][ T31] ? __switch_to_asm+0x39/0x70 [ 293.275407][ T31] ? __switch_to_asm+0x33/0x70 [ 293.275423][ T31] ? __pfx_kthread+0x10/0x10 [ 293.275461][ T31] ret_from_fork_asm+0x1a/0x30 [ 293.275496][ T31] [ 293.275504][ T31] Sending NMI from CPU 0 to CPUs 1: [ 293.319653][ T24] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 293.320424][ C1] NMI backtrace for cpu 1 [ 293.320440][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 293.320462][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.320473][ C1] Workqueue: usb_hub_wq hub_event [ 293.320503][ C1] RIP: 0010:delay_tsc+0x5b/0xc0 [ 293.320526][ C1] Code: 90 49 89 d7 49 c1 e7 20 49 09 c7 4d 29 f7 49 39 df 73 53 bf 01 00 00 00 e8 a2 01 12 f6 65 8b 05 0b fe 68 07 85 c0 74 1c f3 90 01 00 00 00 e8 db ff 11 f6 e8 26 3c 01 00 39 c5 75 0e 0f 01 f9 [ 293.320541][ C1] RSP: 0018:ffffc900001e5f90 EFLAGS: 00000082 [ 293.320555][ C1] RAX: 0000000080000002 RBX: 0000000000000899 RCX: 0000000000000000 [ 293.320566][ C1] RDX: 0000000000000098 RSI: ffffffff8c04d3e0 RDI: 00000000ffffffff [ 293.320578][ C1] RBP: 0000000000000001 R08: ffff888024830237 R09: 1ffff11004906046 [ 293.320590][ C1] R10: dffffc0000000000 R11: ffffffff8b7e51d0 R12: 1ffffffff344df0a [ 293.320603][ C1] R13: 00000000ffffffff R14: 00000098a1876ca7 R15: 00000000000007b3 [ 293.320614][ C1] FS: 0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 293.320628][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.320640][ C1] CR2: 00007f1f14ee1ff0 CR3: 0000000077fd8000 CR4: 00000000003526f0 [ 293.320655][ C1] Call Trace: [ 293.320662][ C1] [ 293.320670][ C1] wait_for_lsr+0x160/0x2f0 [ 293.320707][ C1] serial8250_console_write+0x134c/0x1ba0 [ 293.320732][ C1] ? __lock_acquire+0xab9/0xd20 [ 293.320753][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 293.320772][ C1] ? console_flush_all+0x13a/0xc40 [ 293.320798][ C1] ? console_flush_all+0x13a/0xc40 [ 293.320827][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 293.320851][ C1] ? console_flush_all+0x13a/0xc40 [ 293.320875][ C1] ? console_flush_all+0x13a/0xc40 [ 293.320900][ C1] console_flush_all+0x725/0xc40 [ 293.320926][ C1] ? console_flush_all+0x13a/0xc40 [ 293.320954][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 293.320985][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 293.321003][ C1] console_unlock+0xc4/0x270 [ 293.321027][ C1] ? __pfx_console_unlock+0x10/0x10 [ 293.321052][ C1] ? vprintk_emit+0x444/0x7a0 [ 293.321073][ C1] ? vprintk_emit+0x444/0x7a0 [ 293.321096][ C1] vprintk_emit+0x5b7/0x7a0 [ 293.321117][ C1] ? vprintk_emit+0x444/0x7a0 [ 293.321140][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 293.321161][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 293.321186][ C1] ? __pfx_snprintf+0x10/0x10 [ 293.321204][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 293.321233][ C1] dev_vprintk_emit+0x337/0x3f0 [ 293.321262][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 293.321289][ C1] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 293.321309][ C1] ? kmemdup_noprof+0x2b/0x70 [ 293.321331][ C1] ? hid_open_report+0x188/0xee0 [ 293.321353][ C1] ? hid_device_probe+0x44a/0x710 [ 293.321382][ C1] dev_printk_emit+0xe0/0x130 [ 293.321406][ C1] ? __driver_probe_device+0x18c/0x2f0 [ 293.321425][ C1] ? driver_probe_device+0x4f/0x430 [ 293.321445][ C1] ? __device_attach_driver+0x2ce/0x530 [ 293.321466][ C1] ? device_add+0x7b6/0xb50 [ 293.321481][ C1] ? usb_set_configuration+0x1a87/0x20e0 [ 293.321502][ C1] ? usb_generic_driver_probe+0x8d/0x150 [ 293.321524][ C1] ? __pfx_dev_printk_emit+0x10/0x10 [ 293.321548][ C1] ? __device_attach+0x2b8/0x400 [ 293.321566][ C1] ? hub_event+0x2958/0x4a20 [ 293.321585][ C1] ? process_scheduled_works+0xade/0x17b0 [ 293.321605][ C1] ? worker_thread+0x8a0/0xda0 [ 293.321624][ C1] ? kthread+0x70e/0x8a0 [ 293.321646][ C1] ? ret_from_fork+0x3f9/0x770 [ 293.321668][ C1] ? __dev_printk+0x131/0x190 [ 293.321694][ C1] _dev_info+0x10a/0x160 [ 293.321721][ C1] ? __pfx__dev_info+0x10/0x10 [ 293.321748][ C1] ? trace_kmalloc+0x1f/0xd0 [ 293.321763][ C1] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 293.321784][ C1] ? __asan_memcpy+0x40/0x70 [ 293.321811][ C1] keytouch_report_fixup+0x28/0x70 [ 293.321828][ C1] hid_open_report+0x1f4/0xee0 [ 293.321854][ C1] ? __pfx_hid_open_report+0x10/0x10 [ 293.321881][ C1] ? hid_lookup_quirk+0x350/0x5a0 [ 293.321901][ C1] hid_device_probe+0x44a/0x710 [ 293.321929][ C1] ? driver_sysfs_add+0x1fe/0x210 [ 293.321948][ C1] ? __pfx_hid_device_probe+0x10/0x10 [ 293.321973][ C1] really_probe+0x26d/0x9e0 [ 293.321996][ C1] __driver_probe_device+0x18c/0x2f0 [ 293.322017][ C1] driver_probe_device+0x4f/0x430 [ 293.322040][ C1] __device_attach_driver+0x2ce/0x530 [ 293.322063][ C1] bus_for_each_drv+0x24e/0x2e0 [ 293.322087][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 293.322109][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 293.322132][ C1] ? __lock_acquire+0xab9/0xd20 [ 293.322155][ C1] __device_attach+0x2b8/0x400 [ 293.322175][ C1] ? __pfx___device_attach+0x10/0x10 [ 293.322196][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 293.322223][ C1] bus_probe_device+0x185/0x260 [ 293.322249][ C1] device_add+0x7b6/0xb50 [ 293.322269][ C1] hid_add_device+0x398/0x540 [ 293.322295][ C1] usbhid_probe+0xe13/0x12a0 [ 293.322320][ C1] usb_probe_interface+0x668/0xc30 [ 293.322349][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 293.322371][ C1] really_probe+0x26d/0x9e0 [ 293.322394][ C1] __driver_probe_device+0x18c/0x2f0 [ 293.322416][ C1] driver_probe_device+0x4f/0x430 [ 293.322439][ C1] __device_attach_driver+0x2ce/0x530 [ 293.322461][ C1] bus_for_each_drv+0x24e/0x2e0 [ 293.322486][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 293.322506][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 293.322536][ C1] __device_attach+0x2b8/0x400 [ 293.322556][ C1] ? __pfx___device_attach+0x10/0x10 [ 293.322576][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 293.322604][ C1] bus_probe_device+0x185/0x260 [ 293.322631][ C1] device_add+0x7b6/0xb50 [ 293.322650][ C1] usb_set_configuration+0x1a87/0x20e0 [ 293.322693][ C1] usb_generic_driver_probe+0x8d/0x150 [ 293.322716][ C1] usb_probe_device+0x1c1/0x390 [ 293.322741][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 293.322763][ C1] really_probe+0x26d/0x9e0 [ 293.322786][ C1] __driver_probe_device+0x18c/0x2f0 [ 293.322807][ C1] driver_probe_device+0x4f/0x430 [ 293.322830][ C1] __device_attach_driver+0x2ce/0x530 [ 293.322852][ C1] bus_for_each_drv+0x24e/0x2e0 [ 293.322877][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 293.322898][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 293.322929][ C1] __device_attach+0x2b8/0x400 [ 293.322949][ C1] ? __pfx___device_attach+0x10/0x10 [ 293.322970][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 293.322999][ C1] bus_probe_device+0x185/0x260 [ 293.323025][ C1] device_add+0x7b6/0xb50 [ 293.323045][ C1] usb_new_device+0xa39/0x16f0 [ 293.323069][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 293.323087][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.323109][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.323135][ C1] hub_event+0x2958/0x4a20 [ 293.323154][ C1] ? __lock_acquire+0xab9/0xd20 [ 293.323199][ C1] ? __pfx_hub_event+0x10/0x10 [ 293.323219][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 293.323242][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.323263][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 293.323282][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 293.323303][ C1] process_scheduled_works+0xade/0x17b0 [ 293.323338][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 293.323368][ C1] worker_thread+0x8a0/0xda0 [ 293.323402][ C1] kthread+0x70e/0x8a0 [ 293.323429][ C1] ? __pfx_worker_thread+0x10/0x10 [ 293.323450][ C1] ? __pfx_kthread+0x10/0x10 [ 293.323474][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.323495][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.323517][ C1] ? __pfx_kthread+0x10/0x10 [ 293.323541][ C1] ret_from_fork+0x3f9/0x770 [ 293.323563][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 293.323586][ C1] ? __switch_to_asm+0x39/0x70 [ 293.323601][ C1] ? __switch_to_asm+0x33/0x70 [ 293.323614][ C1] ? __pfx_kthread+0x10/0x10 [ 293.323639][ C1] ret_from_fork_asm+0x1a/0x30 [ 293.323662][ C1] [ 293.324489][ T981] usb 6-1: new low-speed USB device number 46 using dummy_hcd [ 293.367783][ T24] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000C/input/input15 [ 293.420464][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 293.420491][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 293.420527][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.420543][ T31] Call Trace: [ 293.420553][ T31] [ 293.420564][ T31] dump_stack_lvl+0x99/0x250 [ 293.420606][ T31] ? __asan_memcpy+0x40/0x70 [ 293.420642][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 293.420676][ T31] ? __pfx__printk+0x10/0x10 [ 293.420724][ T31] vpanic+0x281/0x750 [ 293.420754][ T31] ? __pfx_vpanic+0x10/0x10 [ 293.420780][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 293.420818][ T31] ? preempt_schedule+0xae/0xc0 [ 293.420853][ T31] ? preempt_schedule_common+0x83/0xd0 [ 293.420894][ T31] panic+0xb9/0xc0 [ 293.420919][ T31] ? __pfx_panic+0x10/0x10 [ 293.420949][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 293.420984][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 293.421015][ T31] watchdog+0xfd2/0xfe0 [ 293.421047][ T31] ? watchdog+0x1de/0xfe0 [ 293.421079][ T31] kthread+0x70e/0x8a0 [ 293.421117][ T31] ? __pfx_watchdog+0x10/0x10 [ 293.421142][ T31] ? __pfx_kthread+0x10/0x10 [ 293.421178][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 293.421209][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 293.421240][ T31] ? __pfx_kthread+0x10/0x10 [ 293.421276][ T31] ret_from_fork+0x3f9/0x770 [ 293.421311][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 293.421349][ T31] ? __switch_to_asm+0x39/0x70 [ 293.421376][ T31] ? __switch_to_asm+0x33/0x70 [ 293.421396][ T31] ? __pfx_kthread+0x10/0x10 [ 293.421431][ T31] ret_from_fork_asm+0x1a/0x30 [ 293.421472][ T31] [ 293.423520][ T31] Kernel Offset: disabled