last executing test programs: 3m14.659074113s ago: executing program 1 (id=5): socket(0x2000000000000021, 0x2, 0x10000000000002) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000180)=ANY=[@ANYBLOB="12015002020000082505a1a4400001020b0109025c0002017f400f090400000102020000052406000105240006000d240f01065878797f0021010506241a100b1c090581030004f20940090401"], &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) (async) socket(0x1e, 0x2, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 3m13.260890541s ago: executing program 1 (id=6): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x0) close(0xffffffffffffffff) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 3m13.073861825s ago: executing program 1 (id=9): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x1786, 0x64, 0xd36, 0x6, 0xd, "848f131e64d6fc3794e94cbdbacf233dea77b3", 0x7fff, 0x8}) r1 = signalfd(r0, &(0x7f0000000040)={[0xc]}, 0x8) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0xb, 0x800, 0x12, 0x80880, 0xffffffffffffffff}) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f00000000c0)={0x2, 0xe9, "83e0dd0301b1042f4ceed7ebc67ab6ddc6f4ce734797320276af58517eb5e4930f9b9298cc120043a7db1ce57c002563073cd2b4aaddfd262b3a3b65665abde266a32a187a1bd6297c137becfe7583546c60191ea144a1f6c605a3b6ffd3b431d91299c0bb102d6f57ca45ee8361088169055a2ffa388bbfb4db5c6e066f01fa7be28789ad3b1cc8dd5c230f7afc95e64ee86234d6fb7172ca9e4456169219e7df3793941f5d764e41bd594e42d9fe6f4f50fb1d83ab163e2ead0d67414570a0054cc66e5b1095d039085aa9a18e19b5b550aa9779cb4ea9d7319796e67a01dd5b724b848c829659bf"}) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000001c0)={0x8, 0x3, 0xe6, 0x0, 0x4, "a67bb713c69fa1144b7d6929f376ec1d46f7a8", 0x7, 0x4}) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000200)={0x3, 0x764ad514, 0x9, 0x3}, 0x10) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000240), &(0x7f0000000280)={0x0, 0xfb, 0x103, 0x5, 0x4, "a010e065cf5ff3e408211228814b03a2", "360bebab2fbee7f6bc09964e0c7dabe28b6ed621e4cdc76841821e9cd26c4093a3c2e7c2ebb71e9a4944d098d745f76652ec01eb4a95d098b1a9f07820ae9ffd51f4682256d8ae3724748b632047b09d5e2c07ae068dfd162fafb6b16ea88662a1d441dceb48b0ee07252fc25aacbf678a4cc17b0bcd1c0d301ae9d329af316b30ec413677c5c4af71a4d929f23a6d84bd9de9a1dd82541e2146d7856f18c1a16629052183e3961c1e09fbaaaa579227756740d3cd23a21ff7d98645be90e7ff09554322eb14f69748f8e52c5d1c8d028f120a818692b1bb1c26ca867fc9e8fbacb76e4a9f845fc94e5e21e90547"}, 0x103, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x541c, &(0x7f00000003c0)) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000400)={0x6, 0xd3f, 0x0, 0x0, 0x3, "395fe99e92bd9699"}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc, 0x1010, r1, 0x41614000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, &(0x7f0000000500)=0x84) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000540)={r4, 0x7, 0x8, 0xa734, 0x80, 0x2}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000600)={r5, 0x2, r3, 0x2}) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000640)=""/185) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000700)={r4, 0x4}, 0x8) iopl(0xe) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000740)={0x6, 'macvlan0\x00', {0x10}, 0x2}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), r1) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f00000008c0)={&(0x7f0000000780), 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x4c, r7, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x4}, @BATADV_ATTR_GW_SEL_CLASS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000940) sendto$inet(r1, &(0x7f0000000900)="2d9a298713dc27b955d3e71ccbd65df54cc4e9f6780bcba59b313e3b95ee9ce724c76ddd672c390b92b86ff497c125667f06311dfe0c95ef402c1f40b5f91c3b66fb15c907d1fb095519a1c1e0949e7e3361348f1895e2c95efb0361a84e3be2c4667b2c190ec9cc59f28cdd5ecfc52db058f8405dbaba9b6aaf9e4f37ad758bea13c784b276bd8d71292785f67af7e584fc27c5031e1e63b6885fdccf3de5cd34326f3453459dafc8339631b028c665570133943556f0ed9daf", 0xba, 0x0, &(0x7f00000009c0)={0x2, 0x4e23, @remote}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000a00)={0xff, @loopback, 0x4e22, 0x2, 'none\x00', 0x2, 0x80000001, 0x22}, 0x2c) ioctl$VFAT_IOCTL_READDIR_SHORT(r2, 0x82307202, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000d40)={'syztnl0\x00', &(0x7f0000000c80)={'gretap0\x00', 0x0, 0x18, 0x700, 0xce49, 0x7, {{0x1f, 0x4, 0x2, 0x5, 0x7c, 0x67, 0x0, 0x5e, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010101, {[@ssrr={0x89, 0xb, 0x60, [@private=0xa010101, @loopback]}, @lsrr={0x83, 0x7, 0x63, [@multicast1]}, @generic={0x45, 0xf, "58cdcfd64ab66ab5fd4703553b"}, @timestamp={0x44, 0xc, 0x8a, 0x0, 0x6, [0x2, 0x7]}, @timestamp_prespec={0x44, 0x24, 0xb1, 0x3, 0xd, [{@remote, 0x6}, {@broadcast, 0x6}, {@rand_addr=0x64010100, 0x20}, {@rand_addr=0x64010101, 0xfffffffd}]}, @lsrr={0x83, 0x17, 0x9d, [@private=0xa010101, @private=0xa010100, @loopback, @multicast1, @remote]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000d80)={@loopback, 0x46, r8}) 3m12.874556615s ago: executing program 1 (id=10): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfb5, &(0x7f0000ff9000/0x4000)=nil, 0x1) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x10) mincore(&(0x7f0000ffa000/0x4000)=nil, 0x4000, &(0x7f0000000080)=""/107) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'sit0\x00', &(0x7f00000002c0)={'gre0\x00', 0x0, 0x7, 0x0, 0x401, 0x101, {{0x6, 0x4, 0x3, 0x11, 0x18, 0x65, 0x5, 0x2, 0x4, 0x0, @multicast1, @local, {[@end]}}}}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x139d807094a0bdd7, 0x8, 0xf8, 0x4, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x7800, 0x80, 0x2, 0x4}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002c40)=0x0, &(0x7f0000002c80)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000002d40)={'syztnl0\x00', &(0x7f0000002cc0)={'syztnl0\x00', 0x0, 0x7, 0x700, 0x5, 0x3, {{0x11, 0x4, 0x3, 0x0, 0x44, 0x67, 0x0, 0x1, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@end, @timestamp_addr={0x44, 0x2c, 0xec, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@multicast1, 0x100}, {@broadcast, 0xed95}, {@private=0xa010102, 0x10}, {@multicast2, 0xfffffffe}]}]}}}}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000003140)={@ipv4={""/10, ""/2, @broadcast}, 0x0}, &(0x7f0000003180)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000031c0)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000003200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000003240)=0x14) sendmmsg$inet(r0, &(0x7f0000003b80)=[{{&(0x7f0000000100)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000140)="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", 0xfa}, {&(0x7f0000000240)="2d3118e52f0536127b5ee424a12c8cc914f747262e17b9f206ce9076f43b06a0d0712ebe1d670428ea8f2d7b2e53af25fb8424c85c08e69a1c226333b9", 0x3d}], 0x2, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}], 0x50}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000400)="6ddf225dcc580865dc557859c16117a9299324ba45860ba9c3f15854a0d2bc32b76d0508c2b31886e03b158a8c59d636924f578c7296ed009fd3757b16d9a170e4c3aa8f946125cf8d5e30f9c46bdebed2e4d895be22c8ae3c", 0x59}, {&(0x7f0000000480)}, {&(0x7f00000004c0)="ae4e1d0e5e3081a780b673e13769ebfcad0ef3e6c3c06be173368ffcd3a390c207df47dc23647d99894d969921fa1cfe29e3c714161ee7f0ca635189", 0x3c}, {&(0x7f0000000500)="150190f4ad8023c66ac416cf1e16bad70230ad1a786e4235ce06a52a92083c106e3f0c9a4b6708cb1d7f596279725de8cba5f27afed6204b7f41187685a01f0fb965c0583ea383bd646ffec8a66c33cc7823147fbfccf7e0432353f6", 0x5c}], 0x4, &(0x7f0000000700)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xb}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @loopback}}}], 0x70}}, {{&(0x7f0000000780)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000880)=[{&(0x7f00000007c0)="cd50d5b293de8ee28d2b33ae4d27661adc0f9176f602f8f0209c09306a27bb0e0b47ae7a2c95e3e1f8848bed855691bc5345107a108abc81a2673fbe26c66553cca1d7912e023b5c048ffac111bf95704d88f9abf9227f314b74dfdc0c7925263321a843f1a6ee8c3c7acbedfe229e7d5365dc3599e8d4d890d3a9df3f842608decec4066aaf1bf0bdd1168807c98a453ad35d6ae3", 0x95}], 0x1, &(0x7f00000008c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9a}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0xf8, 0x0, 0x7, {[@cipso={0x86, 0x37, 0x0, [{0x6, 0x3, '2'}, {0x0, 0x7, "f0339f3e06"}, {0x7, 0xe, "5f6faef8822d827b15b43279"}, {0x5, 0x11, "80497d3efbe7686d0d8acd792da038"}, {0x1, 0x8, "a0057050957e"}]}, @timestamp_prespec={0x44, 0x24, 0xbe, 0x3, 0x1, [{@empty, 0x2}, {@multicast1, 0xfffffff8}, {@private=0xa010101}, {@remote, 0x450}]}, @lsrr={0x83, 0x1b, 0x71, [@empty, @multicast2, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast]}, @ssrr={0x89, 0x7, 0xe8, [@broadcast]}, @lsrr={0x83, 0xb, 0x21, [@private=0xa010102, @loopback]}, @generic={0x82, 0x7, "098e47b7b6"}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x2c, 0x55, 0x1, 0xd, [{@rand_addr=0x64010102, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@loopback, 0xf9}, {@local, 0x3ff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6e4}]}, @ssrr={0x89, 0x13, 0x8c, [@loopback, @multicast2, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @cipso={0x86, 0x15, 0x0, [{0x6, 0xf, "50cf5b6ce79b4d0a846da428b8"}]}]}}}], 0x170}}, {{&(0x7f0000000a40)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000002ac0)=[{&(0x7f0000000a80)="b235fd76", 0x4}, {&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="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", 0x1000}], 0x3}}, {{&(0x7f0000002b00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000002c00)=[{&(0x7f0000002b40)="fd7fd7ee9d77a80cd3a2789a49e1c225ab91595c29f53558bcfd54df8dabde682560787d1a35f3d3e0195edf4192d0c0da7f29ad1504aaa2f09d8721a066ca6d40ddc8aed9ec2bb26ce2bae052bde09408fdabc157c1ff1a7edfb01a", 0x5c}, {&(0x7f0000002bc0)="91f2a31765ee22631abcbc463afe858492874bb7aac3c59e86eb647aef3ad758d32ca405d5d9f3e931", 0x29}], 0x2, &(0x7f0000002d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x1a}, @loopback}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@rr={0x7, 0xb, 0x9c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x14, 0x86, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x2b}}]}, @rr={0x7, 0x13, 0xcb, [@private=0xa010100, @multicast2, @private=0xa010100, @empty]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @broadcast}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@timestamp_prespec={0x44, 0x1c, 0xa3, 0x3, 0x1, [{@multicast1, 0x3}, {@rand_addr=0x64010100}, {@broadcast, 0x8}]}, @lsrr={0x83, 0xf, 0x82, [@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @rr={0x7, 0x2b, 0x37, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x25}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}, @rand_addr=0x64010100, @rand_addr=0x64010102, @private=0xa010102, @rand_addr=0x64010100]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x24, 0x0, 0x7, {[@generic={0x83, 0x9, "35fbf8bc68174d"}, @end, @timestamp={0x44, 0x8, 0xe9, 0x0, 0x3, [0x1000]}]}}}], 0x148}}, {{&(0x7f0000002f00)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000003100)=[{&(0x7f0000002f40)="a1488fd326af3ba400bcd67f835aed1a40ab1e5527be233dddab2051856dea0e5e05e5d72cba096e76a675d696e03c3bff0288c07de5c01160c2c22c6e2fe0b089225cb8d6cd0ce7ded04926d81b10cfa3a7", 0x52}, {&(0x7f0000002fc0)="3127cfe6a75da78ae08529c06f833374c7ef006b51f76a35296c101f922929927713ec5cafce5d06723bb29de110f1bba26e400ef7d30fb4d470d9d881c77180af99d2e2218f86e19c90297eb438d419305dcb5786a8646584", 0x59}, {&(0x7f0000003040)="359eab8f594e1610f04fd2657955dd83376c0722c110847509573d889ad681bb6dbd55101175c96a876ae100033bec9d50438db7c9e40e4edc5708", 0x3b}, {&(0x7f0000003080)="fcd759fd046fe520c8e425d68d4f1aa6677cba7e9f7631680b37d17e1a60f343b86bbcb932b9e81776dc406b83c142552f054b69eb6905300704e8b34f7a8f9e5d4f001c96a4c45372b4", 0x4a}], 0x4, &(0x7f0000003280)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @rand_addr=0x64010102, @rand_addr=0x64010100}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @local}}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x53, 0x1, 0x9, [{@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x7fffffff}, {@private=0xa010100, 0x6}, {@loopback, 0xfffffff1}]}, @generic={0x7, 0x5, 'Y}h'}]}}}], 0x100}}, {{&(0x7f0000003380)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000035c0)=[{&(0x7f00000033c0)="0371d817212f0c2d53ceff", 0xb}, {&(0x7f0000003400)="00eeb553680d004ae58dad5476b512dd8116fc38b311b15ad72f1194f248cea2652b05cf94dbefb8d73ad95bde5bf58c42941bcc75f70c8e27c3b38165e4266d4754395541389e9aaea3396d6531ff0771541b2897d0852b7e99f59af485329dd0c487e92160c366e01772077885d662d130b5502b2098e73cf08f33c019b0f3d31f32492067bbcd1d664659c44da46217b5ca7817ee766b4ba772c6a0c8f84755de9262cd4d896087d3aab6cdacf00a815eb932f2e09e6177a7946610c6a562c1a25332b1cbffacd0b88622d7282c2fa385cbf218a1695a1e809db5", 0xdc}, {&(0x7f0000003500)="df82610b360bebd4d763a7fb4d2bf2898967753b6d4efd82e0b1effa14687e73a4d59b9b895274a84aaec06628e730ed1d33869619b8ed6d20861a2c58e4d00428ee7166ce9d2d668edd0e9c19b6b45852176f8243582fb1717345f82f6bf0d0bff7c9fefccc7833f92b770740382ec935bc24ac415e3a829b7207a03ddc4b52c7ec962aa877b276eca83818951026ed3ed4a242a24a15a37cd29dd1a5c1619d", 0xa0}], 0x3, &(0x7f0000003600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x68}}, {{&(0x7f0000003680)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000003a00)=[{&(0x7f00000036c0)="5843bb2681518c7d64e951067fddc0dbe2d15640f0f4c7bc1a74b83d4e037089610d525019bdcbc83a844506d92c48ed0e4424a381ec9c99bcaeb8c029dfbaea8624619eda314f9417f9738f00fcdfd283e5daa78f92fc586e9a60c38603d684f14d9d23c765156821f1bb6a0f1602ec5b9412ee59e5d6f6b665c777de67c3f42c79387fec34000dd6bb7609", 0x8c}, {&(0x7f0000003780)="0920a4172dc6083de34bcbfa3bd714eda83f267f4606d08b0aca237177144e5f8568281f5c16f3ef28d3dee8cedeb9290c4e1bb9cd0adddfc85369da72d77d3acd7bb7acf8af00b6eee0e25bde11311efb9e8ba108be60c433910c321014ba", 0x5f}, {&(0x7f0000003800)="bb568be80ffd91126a321529ebfca5db8e02e45cab6c60a3c2cebe81230c496d6fb6c39f0727ef4e949fa2319f76a818d26189000aa5bb8f39a6025db5be3ea6c753ab1566612ddfef4ebd1dc7a2b438b6b7ea4349e5e3ee9a401b8e76691a7159cf176c87215a1675b3a682e19a40492b7941b856385f1911ee927451038354aad3c0fbf091450ca6bdad83b17f5c0bdb31c754fd86b5781771fd82ca3b9a57d47585aadebe89744bf6e457a9d840ba109e2b9645", 0xb5}, {&(0x7f00000038c0)="e766848e4cbd3857008da72d36bea93e51ba8a3001bc7f0b82547840e6f718164544b66c0b20b8e95cb7d284be3631e0c2ec1dca062fab40c0afdb649fd176e5aae058aa896417271692e141ed29f9efb5b8736e4e3cfcbdbd5c94673361c57da895db8ddb62e84d14a698f48298ab344505700996c7881c0a405c8400a4752e6030d8b39e163e969f2cdc27c6545db34a0c27c50dbcd75bc44a30a99e077844cc816a35962597c1821edd23061ce32ac3fa03637003c15e", 0xb8}, {&(0x7f0000003980)="68f8048643687c328443bd7d12a06b6a357f1252d3d24e3c95e5db6490a6fbed7dc6b9cbc951ac96d9cc9e8da12f7eb3b4f197426430d89add3db4c2bfb9724fb7fa73d683e8daf7e0377b5b2595b82d", 0x50}], 0x5, &(0x7f0000003a80)=[@ip_retopts={{0x14, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}]}}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x4f, [@rand_addr=0x64010102, @private=0xa010101]}, @generic={0x94, 0x10, "dca30784cb0ced56cc98722a0f50"}, @rr={0x7, 0x2b, 0x9a, [@multicast1, @empty, @empty, @dev={0xac, 0x14, 0x14, 0xb}, @dev={0xac, 0x14, 0x14, 0x31}, @private=0xa010100, @empty, @loopback, @loopback, @multicast1]}, @end, @end, @timestamp_addr={0x44, 0x24, 0xe8, 0x1, 0x2, [{@remote, 0x4}, {@remote, 0x2}, {@loopback, 0xfffffeff}, {@rand_addr=0x64010102, 0x7fff}]}, @timestamp={0x44, 0x10, 0xc1, 0x0, 0x0, [0xf, 0x8, 0x80]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9a}}, @ip_tos_int={{0x14}}], 0xd8}}], 0x8, 0x900) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000003d80), 0x1, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r9, 0x8004500f, &(0x7f0000003dc0)) bind$alg(r9, &(0x7f0000003e00)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000003e80), 0x210000, 0x0) r11 = open(&(0x7f0000003ec0)='./file0\x00', 0x22c040, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000003f80)={'syztnl2\x00', &(0x7f0000003f00)={'ip6gre0\x00', r7, 0x4, 0x39, 0xd, 0x6, 0x7b, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x40, 0x5115, 0x2}}) ioctl$UFFDIO_WRITEPROTECT(r11, 0xc018aa06, &(0x7f0000003fc0)={{&(0x7f0000ff8000/0x8000)=nil, 0x8000}, 0x1}) r12 = fsopen(&(0x7f0000004000)='romfs\x00', 0x0) close_range(r12, r10, 0x0) ioctl$CEC_S_MODE(r11, 0x40046109, &(0x7f0000004040)=0x2) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x300000d, 0x10, r11, 0x0) stat(&(0x7f0000004100)='./file0\x00', &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(r11, &(0x7f00000041c0)='./file0\x00', 0x4000, 0x0, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(r11, 0xb704, &(0x7f0000004300)=0x0) mount$fuse(0x0, &(0x7f0000004080)='./file0\x00', &(0x7f00000040c0), 0x8020, &(0x7f0000004340)={{'fd', 0x3d, r11}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r13}, 0x2c, {'group_id', 0x3d, r14}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80}}, {@allow_other}, {@default_permissions}, {@blksize}, {@allow_other}, {@allow_other}], [{@obj_user={'obj_user', 0x3d, 'romfs\x00'}}, {@euid_gt={'euid>', r15}}, {@permit_directio}, {@flag='ro'}, {@dont_measure}]}}) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000004480)="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") 3m12.660471783s ago: executing program 1 (id=12): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000001c0)="9c435a7de4c0ff7c452d934aa91bee4f6e90607e890a47d0be6a17fdc0c6a1796db4fe7dd11538645e1058e81253f49eab06e8d9c153ad38a9b439a4db81dc1e36f1e6f0321800120000fd9827fc48c8cdb4f07e93b48410a25fdeded74f2bc99f878a19012e6b7b623763f2b4a717576faa2825abf02e2090bb34084a6f6a76d5b49d8c80949dfc5ceb916c89971ec99e558675a54101040000c2cde79ad3c2f6dd3131a464f396a63c", 0xaa}], 0x1}}], 0x1, 0x4001c00) 3m12.474640361s ago: executing program 1 (id=15): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000000)='\"', 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x85, 0xa0, 0x0, 0x10, 0x40b, 0x6521, 0xc659, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xe3, 0xc, 0xc0, 0x6, [{{0x9, 0x4, 0x65, 0x9e, 0x2, 0x3b, 0x89, 0x50, 0x9, [], [{{0x9, 0x5, 0xa, 0xc, 0x400, 0x3d, 0xe0, 0x8}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x7, 0x59, 0xe4}}]}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0), 0x4) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2m57.321179566s ago: executing program 32 (id=15): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) close(r0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000000)='\"', 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}}) syz_usb_connect(0x0, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x300, 0x85, 0xa0, 0x0, 0x10, 0x40b, 0x6521, 0xc659, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xe3, 0xc, 0xc0, 0x6, [{{0x9, 0x4, 0x65, 0x9e, 0x2, 0x3b, 0x89, 0x50, 0x9, [], [{{0x9, 0x5, 0xa, 0xc, 0x400, 0x3d, 0xe0, 0x8}}, {{0x9, 0x5, 0x2, 0x1, 0x8, 0x7, 0x59, 0xe4}}]}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0), 0x4) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2m33.483224378s ago: executing program 0 (id=252): creat(&(0x7f0000000040)='./file0\x00', 0x4) socket(0x15, 0x2, 0x7fff) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 2m33.272871301s ago: executing program 0 (id=254): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a000, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=@newsa={0x14c, 0x10, 0x713, 0x0, 0xfffffffd, {{@in6=@dev={0xfe, 0x80, '\x00', 0x35}, @in6=@local}, {@in=@broadcast, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x4, 0xa}, [@algo_auth_trunc={0x5c, 0x14, {{'cmac(aes)\x00'}, 0x80, 0x0, "3509fe8fd57fd44aa5074c50bc700e53"}}]}, 0x14c}}, 0x44000) creat(&(0x7f0000001380)='./file0\x00', 0x4) setresgid(0xee00, 0xee01, 0x0) r1 = syz_clone(0x209c4580, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000200)='auxv\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x9c, r4, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x80, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0x10, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0x0, @default, 0x408, @val={0x0, 0x6, @default_ap_ssid}, @void, @val={0x3, 0x1, 0x8c}, @void, @void, @void, @val={0x25, 0x2a, {0x0, 0x7c, 0x1}}, @val={0x2a, 0x0, {0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x7ff, 0x7, 0x0, 0x4, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x401, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x8e, 0x60}}, @val={0x76, 0x6, {0x9, 0x6, 0x41, 0x8}}, [{0xdd, 0x6, "00fbc68fbdd3"}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8090}, 0x20040000) 2m32.914567141s ago: executing program 0 (id=258): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$kcm(0x29, 0x5, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@local}, 0x14) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000003c0)=0x6121, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000080)=0x8, 0x4) 2m32.521137771s ago: executing program 0 (id=261): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x20000000000091, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000180)={0x0, 0x8, 0x4, {0x1, @raw_data="1b75ce6e2512f636be6d4188321671a21cc1cda0d1155b834d505cbc798bee0737429d800c538884f410c1a8bd6d766094f78a643548f95790efd961d813ffa411c30174bdbcb146cdb53746ba3c7695e8dc242dcdc0b256385c2b415826917920043c7d52bb872cb7190d5614c6f7dd8d30b9f69b601f86eb544fc6a502000000000000fd28bbe78cad95e46294b8f264502dbc46f7c194761f8f3120398bdd2fe6c9a97ba5d848ab673890f5787a4dca83c3a3f62a904372b81e768fa1bf9f611cf36a29535c0f"}}) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x2, 0xaf, 0x56595559, 0x1, 0x0, [{0x4, 0x7}, {0x2, 0x9}, {0xaad1, 0x200}, {0x30d7, 0xfffffff9}, {0x9, 0xffff}, {0x75, 0x9c5}, {0xfffffffe, 0xfffffe83}, {0x4, 0x1}], 0x3, 0x5b, 0x4, 0x2, 0x2}}) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x8}], 0x1c) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0xfb0, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @fda={0x66642a85, 0x3, 0x1, 0x16}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup\x00', &(0x7f0000000500)={0x1, 0x12c, 0x3e}, 0x18) renameat2(r3, &(0x7f0000000480)='./cgroup\x00', r5, &(0x7f0000000540)='./file0\x00', 0x2) ioctl$KVM_CAP_SPLIT_IRQCHIP(r2, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000"]) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(&(0x7f0000000100)='./file1\x00') r6 = open(&(0x7f0000000080)='./bus\x00', 0x400101482, 0x766c618eb221465a) quotactl_fd$Q_SETINFO(r6, 0xffffffff80000601, 0x0, &(0x7f0000000040)={0x2, 0xfffffffffffffffe, 0x0, 0x733f36de730c71d6}) r7 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r7, 0x10e, 0x9, 0x0, &(0x7f0000000280)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) fstat(r4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_QUOTAOFF(0xffffffff80000302, &(0x7f0000000300)=@nullb, r8, 0x0) r9 = syz_clone(0x80000, &(0x7f00000000c0)="e935950bee3569f081a0af3c7ef1555c26428d6ead126cbf92d4a27eba2a04fcf43baa266cd5c24eeb83ee550dda90ddf3a5beff955766a53314bf6df059e8ff3afc00eaaf2dade060069ede132b241a7a7cc79fd28420e8301544d06e166c35f6c8a2145d6a94a36b09f274de477a4e51f54aa43ad89d0cef20531043036996b83f12d487bf02ce6ebf0bc6a27f80a89ebc3807ca25bba336e748010e38d9642dd959b3748f1f531b4c614f8c84c2da4f66a3e29395ecdf947b3d8f47a6060734787cda1bcfd9f1ad3fa3e5111fd926c35733c3033720400eaa14605d3976fccae568a2ea22121464bd7ecbf767492dd21fb6f90d1d895d", 0xf8, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="ea17a44f8cf44bd7bb24755e07841f1713171a28213b776b92a413a17f3e7cf9504a7dcb50081206ac4e595bb13670313658e8389514014c85cd98bb162dcedb93") syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) ioctl$TIOCSCTTY(r6, 0x540e, 0x4) syz_open_procfs(r9, &(0x7f00000002c0)='net/bnep\x00') 2m30.934995269s ago: executing program 0 (id=268): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x12, 0x0, 0x0) dup(r1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000380)={{0x12, 0x1, 0x200, 0x98, 0xe6, 0xe2, 0x40, 0x9022, 0xd421, 0xc1e2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xa, 0x3, 0x40, 0x10, [{{0x9, 0x4, 0x66, 0x5, 0x1, 0x7e, 0xaf, 0x36, 0x7, [], [{{0x9, 0x5, 0xb, 0x10, 0x39f, 0x4, 0xa}}]}}]}}]}}, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 2m29.558891547s ago: executing program 0 (id=274): mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r0, 0x6a, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x101000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0xffffff37, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x20, 0x110, 0xd, {0x0, @remote, @empty}}}], 0x20}, 0x20014804) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0)="e9b61b62df7c39da0008000000000000fe3c46c40c0699db0abb654a1a852af9d7214b47843c11a98265fd781aed14452200"/64, 0x40) mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x700, &(0x7f0000000040)='trans=rdma,') r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000001040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) 2m28.893306391s ago: executing program 33 (id=274): mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r0, 0x6a, 0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/reserved_size', 0x101000, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r3 = socket$kcm(0x21, 0x2, 0x2) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000900)={0x0, 0xffffff37, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x20, 0x110, 0xd, {0x0, @remote, @empty}}}], 0x20}, 0x20014804) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000001c0)="e9b61b62df7c39da0008000000000000fe3c46c40c0699db0abb654a1a852af9d7214b47843c11a98265fd781aed14452200"/64, 0x40) mount(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x700, &(0x7f0000000040)='trans=rdma,') r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000001040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$tun(r2, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xa) 42.096876632s ago: executing program 3 (id=906): r0 = socket$inet6(0xa, 0x3, 0x8) flock(r0, 0x0) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0xd}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 42.027708224s ago: executing program 3 (id=907): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x2, 0x8, 0x69, 0x0, 0xd}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc8, 0x9}}}, 0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_open_dev$usbfs(&(0x7f0000005180), 0x1, 0x56d840) accept4$tipc(0xffffffffffffffff, &(0x7f0000005300)=@id, &(0x7f0000005340)=0x10, 0x80800) 41.895054416s ago: executing program 3 (id=909): r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000140)='\x00', 0x3) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) msgrcv(0x0, 0x0, 0x0, 0x2, 0x4800) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) read$FUSE(r0, &(0x7f000000c400)={0x2020}, 0x2020) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='fuse\x00', 0x200000, 0x0) 40.979088803s ago: executing program 3 (id=915): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x9, 0x1, 0x9, 0x4, 0x0}) prlimit64(r1, 0x6, &(0x7f0000000140)={0xe0, 0x4}, &(0x7f0000000180)) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f00000001c0)="0a000300010040", 0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x2000) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x75616ebf9d9a8214, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r3, 0x80044dfc, &(0x7f0000000080)) 40.855576012s ago: executing program 3 (id=917): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x40) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000040)={0x2, 0x8, 0x69, 0x0, 0xd}) ioctl$TIOCCBRK(r0, 0x5428) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc8, 0x9}}}, 0x7) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) syz_open_dev$usbfs(&(0x7f0000005180), 0x1, 0x56d840) accept4$tipc(0xffffffffffffffff, &(0x7f0000005300)=@id, &(0x7f0000005340)=0x10, 0x80800) 40.78995442s ago: executing program 3 (id=918): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff"], 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}}) fanotify_mark(0xffffffffffffffff, 0x8, 0x10, 0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/file0\x00') r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 25.729246498s ago: executing program 34 (id=918): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff"], 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x1000810, &(0x7f0000000940)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@msize={'msize', 0x3d, 0x26da2d2a}}]}}) fanotify_mark(0xffffffffffffffff, 0x8, 0x10, 0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/file0\x00') r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 9.927043303s ago: executing program 5 (id=1077): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_emit_vhci(0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000100), 0x3, 0x220002) syz_open_dev$usbfs(&(0x7f0000005180), 0x1, 0x56d840) accept4$tipc(0xffffffffffffffff, &(0x7f0000005300)=@id, &(0x7f0000005340)=0x10, 0x80800) 9.7715105s ago: executing program 5 (id=1078): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="6c0000000206050000000000000000000000fffc120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000000020008008000140ffffff0600000000000000e405000500020000000500010006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c0) r4 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0xcccc0000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r5 = msgget$private(0x0, 0x790) msgrcv(r5, 0x0, 0x0, 0x0, 0x0) msgrcv(r5, 0x0, 0x0, 0x1, 0x3000) msgctl$IPC_SET(r5, 0x1, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x0, 0x0, 0x4e8, 0x0, 0xfffffffffffffffb, 0x5, 0x8, 0x1, 0x7, 0x7}) msgsnd(r5, &(0x7f0000001180)={0x0, "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"}, 0x1008, 0x800) r6 = semget$private(0x0, 0x7, 0x3c0) semop(r6, &(0x7f00000005c0)=[{0x3, 0xa0ea, 0x1000}], 0x1) semctl$IPC_RMID(r6, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) r7 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') lseek(r7, 0x2084, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0x0, &(0x7f0000000300)) 8.584116674s ago: executing program 5 (id=1084): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000380)=@userptr={0x1ff, 0x1, 0x4, 0x0, 0xffffffff, {r1, r2/1000+60000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "020037e0"}, 0x0, 0x2, {0x0}, 0x0, 0x0, 0xffffffffffffffff}) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r3, 0x100}, {r0, 0x6060}, {r4, 0x90}, {r5, 0xf0a2}, {r0, 0x4002}, {0xffffffffffffffff, 0x2000}, {r0, 0x10}, {r0, 0x1000}], 0x8, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x7fffffffffffffff]}, 0x8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet6(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0xa, 0x4e23, 0x3000000, @mcast2, 0x3}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000340)="82df3935", 0x4}], 0x1}, 0xc004) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000280)=@mmap={0x0, 0x1, 0x4, 0x100004, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0xfe, 0x2, "37bb54f0"}}) ppoll(&(0x7f0000000340)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) splice(r7, 0x0, r9, 0x0, 0x88000cc, 0x0) write$eventfd(r8, &(0x7f0000000240), 0xffffff14) ioprio_set$pid(0x1, 0x0, 0x0) r10 = socket$inet6(0x2d, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r10, 0x8917, 0x0) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile(r11, r11, 0x0, 0x400000000003f) r12 = dup(r11) fallocate(r12, 0x10, 0x0, 0x200) r13 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x0, 0x10010, r13, 0x7dffe000) 4.546924371s ago: executing program 5 (id=1107): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0xfb0, &(0x7f0000000800)={@fd={0x66642a85, 0x0, r3}, @fd={0x66642a85, 0x0, r4}, @fda={0x66642a85, 0x3, 0x1, 0x16}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6, 0x0, 0xfe, 0x400}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs2/binder1\x00', 0x802, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac010000d19c71192db079b3df8327cbd429259fd4dac5bd350154f7d7b478d1b6346cbd20a624cbef4574baeec396acd1372349ada8550b0720a08944ae7030090916ccc2ea5c52f290408499f91dfdbefba9451700000000", @ANYRES16=r6, @ANYBLOB="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"/422], 0x1ac}, 0x1, 0x0, 0x0, 0x20040040}, 0x20000001) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 3.922737713s ago: executing program 5 (id=1117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9efffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x5c}}, 0x4080) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f00000010c0)=""/4096) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_ECHOREQ(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008010}, 0x90) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x200000d, 0x11, r6, 0x100000000) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') getdents64(r7, &(0x7f0000002f40)=""/4098, 0x1002) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0}, &(0x7f0000000140)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f00000020c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setreuid(r8, r9) read$eventfd(r2, &(0x7f0000000080), 0x8) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004dcff4087705b2d8e2940000000109021200010000a00009041e0000b35b1e0001cda5fc3677d66c0485c5a51c583d09b56b1c96056260f67f6719f9cae5bc8f5855b665b58804cf795fb32774ff5e88fe8aadc8cde0b06426a79c462ef96845854d627fa845a932a6513f583cae2a04b31c0b42d1"], 0x0) r11 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) pwritev2(r11, &(0x7f0000000380)=[{&(0x7f0000000600)="002ec56be0d52f355b3adf", 0xb}], 0x1, 0x528, 0x5, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r10, 0x2000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 3.902984283s ago: executing program 2 (id=1118): mkdir(&(0x7f0000000100)='./file0\x00', 0x83) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f00000000c0)={0x4ecd7657, 0x7}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 3.747035925s ago: executing program 2 (id=1119): r0 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x0, 0x2, @scatter={0x0, 0xf5ff, 0x0}, 0x0, 0x0, 0x1, 0x6, 0x2, 0x0}) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000000000000081180000000700ff020000000000000000000000000001000000000000000000000000000033"], 0xfdef) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0xe5909000) syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0x0, 0x2, @scatter={0x0, 0xf5ff, 0x0}, 0x0, 0x0, 0x1, 0x6, 0x2, 0x0}) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970000000000000081180000000700ff020000000000000000000000000001000000000000000000000000000033"], 0xfdef) (async) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x6, 0x12, r1, 0xe5909000) (async) 3.258912707s ago: executing program 2 (id=1123): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) (async) lsm_set_self_attr(0x64, &(0x7f0000004340)={0x68, 0x97b, 0x20}, 0x20, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) ioprio_get$pid(0x1, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000000000000007, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000001c0)={0x1, @pix={0x1000, 0x0, 0x47425247}}) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @dev, 0x6}}, 0x9, 0x7, 0x0, 0x0, 0x54}, 0x9c) (async, rerun: 32) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r4, 0x104, 0x7, 0x0, &(0x7f00000001c0)) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0x401, 0x2, {0x0}, {0xee01}, 0x8, 0x5}) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) pipe(&(0x7f0000000300)) (async) socket$unix(0x1, 0xe695dfd2cf655bcb, 0x0) (async) ioprio_get$pid(0x0, r5) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x2}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r7, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffff, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x40) (async) setsockopt(r7, 0x5, 0x6, &(0x7f0000000140)="ea64b2da58eabd850d7075f27c8ec5ced07e77ce439b717ee31487eb14775d45f5f6964083b3d7c8b5f7d3746b268278ee518f9a99c417b00f29d2acb5bd93d267125cc96da48606c58e5b7c37b1be4a75ca294805c61df772e2fb8a5c6f6ae60158d67fd578b79520156f25a171bd55d6f435e2ce998a37a4cd0ac6ed27d55f28c7fe96ea56b01c261fd0d0f3c756fe7488a096f3171f06d8e644bb7b4185a2e1cc9f0482659e9f62dae1c8cd25ec8a4ab42c518e50de39823ca0cc33d99baf2b831824ec737f83c70c652dec897b51e07c727cc85572dc4b414e040ce52573b8f37947365898fcf7", 0xe9) (async) epoll_wait(r0, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x1ff) 3.115482671s ago: executing program 2 (id=1126): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async) ioctl$NBD_DO_IT(r1, 0xab03) ioctl$NBD_DO_IT(r1, 0xab03) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 2.905896109s ago: executing program 4 (id=1128): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) (async) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$sock(r3, &(0x7f0000001c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@mark={{0x14, 0x1, 0x24, 0x2000000}}], 0x6}}], 0x1, 0x4000) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x1, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0xf9}, {0x44, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x2, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x5, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x4, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) personality(0x5400004) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) 2.615770491s ago: executing program 4 (id=1129): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0xffffffffffffffff, r3) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) 2.555272685s ago: executing program 6 (id=1130): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000240), 0x0, 0x0) ioctl$EVIOCSFF(r1, 0x40304580, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe00, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_X86_SET_MCE(r5, 0x4040ae9e, &(0x7f0000000000)={0xbc00000000000000}) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x80fe}, {{0x0, 0x0, 0x0}, 0x5431f000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000cc0)=""/260, 0x104}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000800)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000002b80)=""/4098, 0x1002}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x4}, 0x1452}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x8, 0x22, 0x0) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xaca01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r6, 0x1e118000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.182594101s ago: executing program 6 (id=1131): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x200}, &(0x7f00000001c0)=0x8) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 2.106362569s ago: executing program 4 (id=1132): syz_open_dev$MSR(&(0x7f0000000000), 0x10001, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x5, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000080)={@empty, @remote}) r2 = socket$kcm(0x29, 0x0, 0x0) r3 = socket$kcm(0x29, 0x8, 0x0) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/124, 0x7c}], 0x1, &(0x7f0000000180)=""/112, 0x70}, 0x40000042) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000640)={0x0, 0xa, &(0x7f0000000240)="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"}) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680), 0x84000, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000780)={r5, r3, 0x1, 0xb4, &(0x7f00000006c0)="012e8ffd7501b73b2540fdebd56919e4c3afd2e386f54e213d50f073ba7e69ede089779a49411b0ee4f86d382a97b76ce8847e005a3d62faf21574305f819525f43c6e70d24381f5853e0920ec10bd131c547be93d44cbd5dd205e0bf4558a672b0483790e56624442cff1c132862fbdae8643d5f053e159b59c3e34f83bbfd6e83133170e2e81cd44f8695fa4367aa94d37ec83ae75eb86f992d5f71913e82b1eadd89ff1fa57c40d317e4a1c504955fbfced8a", 0x5, 0x7, 0x1338, 0x46, 0xbbab, 0x0, 0x10000, 'syz1\x00'}) fadvise64(r2, 0x5, 0x4, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000840)={'ip6gre0\x00', 0x4000}) r6 = accept4$tipc(r4, 0x0, &(0x7f0000000880), 0x80000) fsetxattr$trusted_overlay_redirect(r6, &(0x7f00000008c0), &(0x7f0000000900)='./file0\x00', 0x8, 0x1) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0xd) r7 = accept4$bt_l2cap(r4, 0x0, &(0x7f0000000940), 0x0) ioctl$sock_ifreq(r7, 0x8991, &(0x7f0000000980)={'wg2\x00', @ifru_ivalue=0x10}) r8 = syz_open_dev$hiddev(&(0x7f00000009c0), 0xa8dd, 0x181000) ioctl$HIDIOCGFIELDINFO(r8, 0xc038480a, &(0x7f0000000a00)={0x2, 0x3, 0xba3a, 0x53e4, 0x3ff, 0x0, 0x5, 0x3, 0x8, 0x4, 0x5, 0x2, 0x400, 0x6}) getgid() socket$igmp6(0xa, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a80)={'syztnl0\x00', 0x0, 0x29, 0x2, 0x7f, 0x400, 0x13, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x10, 0x8, 0x5, 0xd06}}) statx(r4, &(0x7f0000000b40)='./file0\x00', 0x100, 0x1, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000c80)=0x0, &(0x7f0000000cc0)=0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000d00)={0x5, 0x8, {}, {0x0}, 0x4, 0xf}) sendmsg$nl_xfrm(r9, &(0x7f0000000f00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d40)=@getpolicy={0x148, 0x15, 0x0, 0x70bd26, 0x25dfdbfc, {{@in6=@mcast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x3, 0x4e20, 0x9f17, 0xa, 0xa0, 0xa0, 0x3c, r10, r11}, 0x6e6bbb}, [@policy={0xac, 0x7, {{@in=@loopback, @in6=@private2, 0x4e24, 0x8, 0x4e22, 0x0, 0x2, 0x0, 0x80, 0x16, r12, r13}, {0x8, 0xad8, 0x39d, 0xffffffffffff01e2, 0x4f81, 0x20bf, 0x7, 0x3}, {0x28, 0x6, 0x9, 0x8}, 0x100, 0x6e6bbb, 0x0, 0x1, 0x6, 0x3}}, @algo_auth={0x4a, 0x1, {{'wp512-generic\x00'}, 0x10, "83e3"}}]}, 0x148}, 0x1, 0x0, 0x0, 0x800}, 0x8810) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000f40)={'vcan0\x00', 0x800}) 2.000173046s ago: executing program 4 (id=1133): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x1119020, 0x0) 1.927958274s ago: executing program 2 (id=1134): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc004ae0a, &(0x7f0000000000)) 1.890857678s ago: executing program 4 (id=1135): syz_open_dev$ttys(0xc, 0x2, 0x1) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x8, 0xc8, 0x9}}}, 0x7) syz_open_dev$sndmidi(0x0, 0x3, 0x220002) syz_open_dev$usbfs(0x0, 0x1, 0x56d840) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x80800) 1.783505044s ago: executing program 4 (id=1136): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc074510c, &(0x7f0000000400)={"c8970ab2fe0feaed25a51b35e4c93ba10b8b84f63cc1f4c1155af20eaf02", 0xffffffff, 0x0, 0x0, [0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}) poll(&(0x7f00000001c0)=[{r0, 0x10}], 0x1, 0x6) r1 = syz_usb_connect$cdc_ecm(0x5, 0x68, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x56, 0x1, 0x1, 0xf1, 0x1c0, 0x2, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xb, 0x24, 0x6, 0x0, 0x0, "e8bafc423023"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x200, 0x2, 0x1, 0x80}, [@country_functional={0xc, 0x24, 0x7, 0xd, 0x28, [0xb7, 0x4, 0x9]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x7, 0x82, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x8, 0x0, 0xbc}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x8, 0x1, 0xe}}}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x8, 0x54, 0x9, 0x40, 0xff}, 0xf, &(0x7f0000000280)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x47, 0x5e}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x801}}]}) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x3c, {0x3c, 0xf, "bfab020dba92706505bc2b2715719cebeef885c942ea9d507763234a31db8aab78f486c3d96d79017ebbbf46454cc1c4ee955c28206730aedacd"}}, &(0x7f00000003c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}, &(0x7f0000000480)={0x0, 0xf, 0xd9, {0x5, 0xf, 0xd9, 0x6, [@ptm_cap={0x3}, @generic={0x6, 0x10, 0x1, "a3f6e5"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x1, 0x2, 0x1}, @generic={0x2b, 0x10, 0x2, "dff74780032ccb6efe8b5542983661ca9ee8b0cdb2edc2ab4dee7c1585f8eadb338f9a818d03053d"}, @generic={0x8e, 0x10, 0xb, "c77c0321b90886f18f2eddd6d2413a78d52e128887a0673a24d7c7b78c3d96914d87c4220d1e06debeb098af29af9a70cf85bbbf282b19e6dfb4a6acfe6e030d93e83111b0722c6cab0a23d8615871296801a4576071e94b99d6ad93b460bf08ca7c3d1a09b058603d1a83a030542b8a6ce8e9335bf816c090631a392baf384686ec269edc45cd61c862ce"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x87, 0x3, 0x0, 0xfffc, 0x7}]}}, &(0x7f0000000580)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfd, 0x80, 0x1, 0xdb, "0183d0ae", "96dbb90a"}}, &(0x7f00000005c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xd, 0x60, 0x7, 0x1, 0x4, 0x3, 0xeb2}}}, &(0x7f0000000b00)={0x84, &(0x7f0000000680)={0x40, 0x71a3b7c6c0ec61d9, 0x8e, "f47a4beb1d67fe1801ecb95e9d2b1aec8b06009e070ea39e3b9f27ff840684081c9863f75df47cfa3569db4d092044952c5329826f71180705df0bc627ed3d8832ea3c8b9ad45e54fae329031d9442f8af2d0e6b497f02e99e9f65cdfbc424d35472a9796657558c84f62f59a3b6af60605752a5b60822c9072e1cc3b4b70e2da6b0677fd79502a929b9aa0ec6e7"}, &(0x7f0000000740)={0x0, 0xa, 0x1}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000007c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000800)={0x20, 0x0, 0x8, {0x80, 0x20, [0xf0]}}, &(0x7f0000000840)={0x40, 0x7, 0x2, 0x2088}, &(0x7f0000000880)={0x40, 0x9, 0x1, 0xab}, &(0x7f00000008c0)={0x40, 0xb, 0x2, "34af"}, &(0x7f0000000900)={0x40, 0xf, 0x2, 0x40}, &(0x7f0000000940)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000980)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f00000009c0)={0x40, 0x19, 0x2, "c712"}, &(0x7f0000000a00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000a40)={0x40, 0x1c, 0x0, 0x80}, &(0x7f0000000a80)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000ac0)={0x40, 0x21, 0x1, 0x1}}) r2 = semget$private(0x0, 0x1, 0x440) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000180)) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='decodes m'], 0xf) semctl$GETZCNT(r2, 0x1, 0xf, &(0x7f0000000080)=""/243) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f0000000140)={0x0, 0x40, 0x4, {0x2, @raw_data="3d924b8271394fa4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae50511ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed33147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc3310200970349a3c1374ffec96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a7"}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f00000003c0)=@fd={0xf, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x4, 0x0, 0x0, "f06e4b56"}, 0x5, 0x4, {}, 0x5c000000}) creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000640)={{0x12, 0x1, 0x300, 0x9c, 0x47, 0xfa, 0x8, 0x1b3d, 0x18f, 0x90e0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x4, 0x70, 0x1, [{{0x9, 0x4, 0xd3, 0x3, 0x0, 0x7a, 0xe4, 0x6a, 0x4}}]}}]}}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x404}}, {0x50, &(0x7f00000015c0)=@string={0x50, 0x3, "047f3f9ff928c5cb5325fdf050b49201a75be5f115d01d86752a0fad6e1f9a9ed42070d1a14a854b79a59ac52d6b41e21e21b99c262d218968ba7afff631bb61b7e8127aca89e5517160efd807de"}}]}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x141841, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0xfff, 0x3d}, @mpls={[], @ipv4=@generic={{0x5, 0x4, 0x3, 0x6, 0x3f, 0x67, 0x0, 0x1, 0xff, 0x0, @multicast1, @local}, "5c22f727af719ce3ed3edf5dde15c2dfe593b44c91a4901f7d86677f0aa6163cc2a4ddaf42af7396c193a8"}}}, 0x4d) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000072, 0x0, 0x1ff}]}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 1.783348814s ago: executing program 6 (id=1137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000001040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r3 = socket$rxrpc(0x21, 0x2, 0xa) close(r3) socket$kcm(0x29, 0x7, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x3, 0x22f0}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x1400, {0x5, 0x4, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0x3e) 1.574338406s ago: executing program 5 (id=1138): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x4c, [0x7f, 0x3, 0x403, 0x8100000, 0x2000006, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4, 0x4, 0x1, 0xffffffff, 0x0, 0x3, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000a, 0x0, 0x0, 0x80000007, 0x0, 0x2, 0xfffffffd, 0x0, 0x0, 0x0, 0xd63, 0x0, 0x3, 0x0, 0x4, 0x1, 0xffffffff], [0x0, 0xa82, 0x0, 0xff, 0x2, 0x1, 0x3, 0xedc0, 0x0, 0x0, 0x4, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000000, 0x0, 0x0, 0x7ffff, 0x0, 0xfffffff8, 0x0, 0x0, 0x79, 0xfffffffd, 0x20, 0x0, 0x0, 0x2, 0x47, 0x0, 0x0, 0x400, 0x736, 0xfffffffc, 0x0, 0x7ffef, 0x4, 0x0, 0x0, 0x8a, 0x0, 0x2000, 0x28220be6, 0x401, 0x0, 0x3, 0xfffffff9, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x22], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x7, 0x101, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x2, 0xc2c, 0x400, 0x3000, 0xffffffff, 0x89, 0x0, 0x800, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x80008000, 0x0, 0x1, 0xfffffffc, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xd, 0x0, 0x0, 0x81, 0x8, 0x0, 0x729], [0xb, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0xfffffffe, 0xd2a, 0x200000, 0x8, 0xfffffffd, 0x9, 0x0, 0x0, 0x804, 0x40800, 0x0, 0x0, 0x0, 0x7f, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x40040, 0x3e, 0x2, 0xc3, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x4, 0x0, 0x81, 0x5, 0x9, 0x1, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x800000, 0x2, 0x0, 0x0, 0x9, 0x8000000, 0x4, 0x1, 0x0, 0x0, 0x100000]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0xd01, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000280)=ANY=[@ANYBLOB="12011003020000020005a1a44000010203030105240608000008009c94c7cfc80eceb41cf0ff0f00000000006bc9d364820240d400"/63], 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r3, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="000a000000000fd60730000000000a0000000000000000000000000000000000000000000000000000000d00000000000000000000ef60fc4bd8ecc4e3200000000006004dee00000000000032acaace3269d47147"], 0xd0060) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r5 = dup(r4) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = fsopen(&(0x7f0000000000)='jfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast2, @in=@multicast2, 0x0, 0x6, 0x4e22, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x30, 0x0, 0x4, 0x0, 0x4}, {0x0, 0x0, 0x9c}, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x4d2, 0x32}, 0xdb8a783c920bc1cc, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3507, 0x4, 0x3}}, 0xe8) syz_usb_control_io$hid(r7, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000005c0)={0xb, @sliced={0x9, [0xfff, 0x2, 0x1, 0x6, 0x3, 0x6, 0x0, 0x6, 0x8001, 0x4, 0xfb7, 0x1, 0x9, 0x6, 0x7f, 0x9, 0x0, 0x6, 0x100, 0x8, 0x6, 0x4, 0xffff, 0x9, 0x9, 0x2c3, 0x0, 0x8000, 0x4, 0x8, 0x400, 0xdb4, 0x2, 0x5, 0xffff, 0x4, 0x9, 0xc, 0x8, 0x2, 0x4, 0x9007, 0x6, 0x7, 0x1, 0xc786, 0xabc, 0x4], 0x710}}) r9 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$HIDIOCSREPORT(r9, 0x400c4808, &(0x7f0000000000)={0x2, 0x300, 0xf}) 1.496763002s ago: executing program 6 (id=1139): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mmap(&(0x7f0000171000/0x4000)=nil, 0x4000, 0x1000009, 0x99a51b414e6312f8, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x2000) 1.083013227s ago: executing program 6 (id=1140): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ppoll(&(0x7f0000000180)=[{r0, 0x1}], 0x1, 0x0, 0x0, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000040)={'raw\x00', 0x4, "55ca53a0"}, &(0x7f0000000140)=0x2c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r3 = getuid() quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, r3, &(0x7f0000000100)={0xcfb, 0x1a0000000000000, 0x1}) (async) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000602, r3, &(0x7f0000000100)={0xcfb, 0x1a0000000000000, 0x1}) 1.052844259s ago: executing program 6 (id=1141): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x44, 0x39, 0xdc, 0x40, 0x1660, 0x1921, 0x1f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x2, 0xf6, 0x62, 0x70, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0xd, 0x3, 0x0, 0x68, 0x37, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x0, 0x18, 0xa, "dcf3390988dd7cac290d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000080)="a0005bf8", 0x4}, {&(0x7f0000000580)="c5bfd7eb", 0x4}], 0x2, 0x0, 0x0, 0x900}, 0x4004054) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x210200, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_setup(0x0, &(0x7f0000000340)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x9, @pix_mp}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r4 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r4, 0x29, 0x7, 0x0, &(0x7f0000000dc0)) 0s ago: executing program 2 (id=1142): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) (async) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000440)={0x1, 0x3, 0x8, &(0x7f00000003c0)={0x0, "3e8bc3d043a21163aeb8195445b1d55fc8604b11978e521787c3ed061712b366ea"}}) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) kernel console output (not intermixed with test programs): ignored [ 205.411833][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 205.420275][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 205.428924][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 205.437096][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 205.445292][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 205.453399][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 205.466039][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 205.472734][ T5917] usb 3-1: USB disconnect, device number 25 [ 205.678580][ T8403] /dev/rnullb0: Can't open blockdev [ 205.787266][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz.5.660'. [ 206.742158][ T8438] netlink: 'syz.4.669': attribute type 1 has an invalid length. [ 206.749993][ T8438] netlink: 224 bytes leftover after parsing attributes in process `syz.4.669'. [ 206.885235][ T8443] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 207.289783][ T8445] overlay: ./file0 is not a directory [ 207.290110][ T8444] overlay: ./file0 is not a directory [ 207.354906][ T8444] netlink: 'syz.4.672': attribute type 1 has an invalid length. [ 207.362740][ T8444] netlink: 'syz.4.672': attribute type 101 has an invalid length. [ 207.370624][ T8444] netlink: 832 bytes leftover after parsing attributes in process `syz.4.672'. [ 207.474484][ T8464] /dev/rnullb0: Can't open blockdev [ 207.855843][ T43] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 208.019780][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.040033][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 208.079707][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 208.109660][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 208.134767][ T8486] /dev/rnullb0: Can't open blockdev [ 208.136518][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 208.151338][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 208.162474][ T43] usb 3-1: Manufacturer: syz [ 208.192279][ T43] usb 3-1: config 0 descriptor?? [ 208.455725][ T43] rc_core: IR keymap rc-hauppauge not found [ 208.461679][ T43] Registered IR keymap rc-empty [ 208.469004][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.495730][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.517005][ T43] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 208.532062][ T43] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 208.551418][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.575602][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.607001][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.621651][ T8470] libceph: resolve '4' (ret=-3): failed [ 208.638752][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.666623][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.685641][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.705696][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.725764][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.745646][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.767338][ T43] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 208.797787][ T43] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 208.815545][ T43] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 209.299508][ T8505] /dev/rnullb0: Can't open blockdev [ 209.493458][ T3634] usb 3-1: USB disconnect, device number 26 [ 209.725628][ T43] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 209.877509][ T43] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 209.885919][ T43] usb 6-1: config 0 has no interface number 0 [ 209.892161][ T43] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 209.904370][ T43] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 209.916351][ T43] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 209.928319][ T43] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 209.939442][ T43] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 209.950524][ T43] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 209.964849][ T43] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 209.974139][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.985090][ T43] usb 6-1: config 0 descriptor?? [ 209.993362][ T8512] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 210.003059][ T8512] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 210.018388][ T43] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 210.247973][ T8512] /dev/rnullb0: Can't open blockdev [ 210.254312][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-1) [ 210.262433][ T1213] usb 6-1: USB disconnect, device number 16 [ 210.286510][ T1213] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 210.492640][ T8527] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 210.625599][ T43] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 210.747778][ T5952] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 210.755545][ T43] usb 5-1: device descriptor read/64, error -71 [ 210.833604][ T8529] netlink: 60 bytes leftover after parsing attributes in process `syz.5.696'. [ 210.848901][ T8529] netlink: 60 bytes leftover after parsing attributes in process `syz.5.696'. [ 210.862427][ T8529] netlink: 60 bytes leftover after parsing attributes in process `syz.5.696'. [ 210.872632][ T8529] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 210.880434][ T8529] /dev/rnullb0: Can't open blockdev [ 210.905616][ T5952] usb 3-1: Using ep0 maxpacket: 32 [ 210.918419][ T5952] usb 3-1: config 0 interface 0 has no altsetting 0 [ 210.941019][ T5952] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 210.953855][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.954282][ T8532] /dev/rnullb0: Can't open blockdev [ 210.962205][ T5952] usb 3-1: Product: syz [ 210.971662][ T5952] usb 3-1: Manufacturer: syz [ 210.976621][ T5952] usb 3-1: SerialNumber: syz [ 210.984118][ T5952] usb 3-1: config 0 descriptor?? [ 210.995615][ T43] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 211.135560][ T43] usb 5-1: device descriptor read/64, error -71 [ 211.245843][ T43] usb usb5-port1: attempt power cycle [ 211.407301][ T5952] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 211.423158][ T5952] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 211.508240][ T8540] /dev/rnullb0: Can't open blockdev [ 211.605590][ T43] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 211.649181][ T43] usb 5-1: device descriptor read/8, error -71 [ 211.732224][ T30] audit: type=1804 audit(1751778195.779:10): pid=8553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.706" name="rnullb0" dev="tmpfs" ino=1017 res=1 errno=0 [ 211.900016][ T43] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 211.926694][ T43] usb 5-1: device descriptor read/8, error -71 [ 212.036850][ T43] usb usb5-port1: unable to enumerate USB device [ 212.528330][ T8573] netlink: 'syz.3.711': attribute type 10 has an invalid length. [ 212.551650][ T8573] team0: Port device team_slave_0 removed [ 212.610495][ T8575] /dev/rnullb0: Can't open blockdev [ 213.480532][ T43] usb 3-1: USB disconnect, device number 27 [ 213.755703][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 213.827958][ T8605] /dev/rnullb0: Can't open blockdev [ 213.919211][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 213.931178][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 213.945985][ T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 213.962585][ T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 213.973179][ T24] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 213.991436][ T24] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 214.001961][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 214.008756][ T24] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 214.017897][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.033023][ T24] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 214.135667][ T3634] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 214.217520][ T5952] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 214.289313][ T24] ums-sddr09 5-1:1.0: probe with driver ums-sddr09 failed with error -22 [ 214.303296][ T24] usb 5-1: USB disconnect, device number 35 [ 214.327949][ T3634] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 214.339716][ T3634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 214.350677][ T3634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 214.360658][ T3634] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 214.374976][ T3634] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.376046][ T5952] usb 6-1: Using ep0 maxpacket: 8 [ 214.386890][ T3634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.400545][ T5952] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 214.407638][ T3634] usb 3-1: config 0 descriptor?? [ 214.419196][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.427398][ T5952] usb 6-1: Product: syz [ 214.431562][ T5952] usb 6-1: Manufacturer: syz [ 214.437222][ T5952] usb 6-1: SerialNumber: syz [ 214.444956][ T5952] usb 6-1: config 0 descriptor?? [ 214.624845][ T3634] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 214.649521][ T3634] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 214.685791][ T5952] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 214.712741][ T3634] usb 3-1: USB disconnect, device number 28 [ 214.758731][ T8621] Unsupported ieee802154 address type: 0 [ 214.885333][ T8619] fido_id[8619]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 215.165609][ T5917] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 215.195688][ T3634] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 215.315565][ T5917] usb 3-1: Using ep0 maxpacket: 16 [ 215.322428][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 215.334593][ T5917] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 215.344562][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.352663][ T5917] usb 3-1: Product: syz [ 215.355535][ T3634] usb 5-1: Using ep0 maxpacket: 8 [ 215.356901][ T5917] usb 3-1: Manufacturer: syz [ 215.363853][ T3634] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 215.366674][ T5917] usb 3-1: SerialNumber: syz [ 215.380136][ T3634] usb 5-1: config 179 has no interface number 0 [ 215.381173][ T5917] usb 3-1: config 0 descriptor?? [ 215.386508][ T3634] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 215.393915][ T3634] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 215.393950][ T3634] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.393977][ T3634] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 215.394002][ T3634] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 215.394044][ T3634] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 215.424938][ T5917] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 215.432133][ T3634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.440210][ T5917] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 215.471189][ T8628] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 215.707215][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.721823][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.917860][ T8648] overlayfs: failed to clone upperpath [ 215.953613][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 215.962051][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 215.971376][ T3634] usb 5-1: USB disconnect, device number 36 [ 216.035972][ T5917] em28xx 3-1:0.0: chip ID is em2710 [ 216.236958][ T8629] /dev/rnullb0: Can't open blockdev [ 216.316853][ T5917] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 216.325414][ T5917] em28xx 3-1:0.0: board has no eeprom [ 216.341823][ T5952] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 216.356405][ T5952] usb 6-1: USB disconnect, device number 17 [ 216.395684][ T5917] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 216.403669][ T5917] em28xx 3-1:0.0: dvb set to bulk mode. [ 216.411176][ T9] em28xx 3-1:0.0: Binding DVB extension [ 216.438096][ T5917] usb 3-1: USB disconnect, device number 29 [ 216.447172][ T5917] em28xx 3-1:0.0: Disconnecting em28xx [ 216.515006][ T9] em28xx 3-1:0.0: Registering input extension [ 216.526815][ T5917] em28xx 3-1:0.0: Closing input extension [ 216.564224][ T5917] em28xx 3-1:0.0: Freeing device [ 216.805801][ T3634] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 216.955655][ T3634] usb 5-1: device descriptor read/64, error -71 [ 217.215645][ T3634] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 217.355582][ T3634] usb 5-1: device descriptor read/64, error -71 [ 217.453803][ T8676] overlayfs: failed to clone upperpath [ 217.470053][ T8676] netlink: 256 bytes leftover after parsing attributes in process `syz.3.748'. [ 217.489735][ T3634] usb usb5-port1: attempt power cycle [ 217.848567][ T3634] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 217.902154][ T3634] usb 5-1: device descriptor read/8, error -71 [ 218.064661][ T8689] fuseblk: Unknown parameter '0x0000000000000005' [ 218.167131][ T3634] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 218.190367][ T8691] /dev/rnullb0: Can't open blockdev [ 218.209901][ T3634] usb 5-1: device descriptor read/8, error -71 [ 218.302251][ T8693] overlayfs: unescaped trailing colons in lowerdir mount option. [ 218.311513][ T8694] overlayfs: unescaped trailing colons in lowerdir mount option. [ 218.334450][ T3634] usb usb5-port1: unable to enumerate USB device [ 219.215778][ T8713] netlink: 'syz.3.761': attribute type 21 has an invalid length. [ 219.224076][ T8713] netlink: 100 bytes leftover after parsing attributes in process `syz.3.761'. [ 219.274622][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.761'. [ 219.324241][ T8717] openvswitch: netlink: Message has 8 unknown bytes. [ 219.341998][ T8717] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 219.358731][ T8717] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 219.453435][ T8720] openvswitch: netlink: Key type 29 is not supported [ 219.466541][ T5952] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 219.596950][ T8723] /dev/rnullb0: Can't open blockdev [ 219.633826][ T8725] netlink: 20 bytes leftover after parsing attributes in process `syz.4.766'. [ 219.766060][ T5952] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 219.796426][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.838597][ T5952] usb 3-1: config 0 descriptor?? [ 219.939133][ T8737] overlayfs: missing 'lowerdir' [ 220.012043][ T8739] /dev/rnullb0: Can't open blockdev [ 220.214214][ T8748] /dev/rnullb0: Can't open blockdev [ 220.315597][ T3634] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 220.465753][ T3634] usb 6-1: Using ep0 maxpacket: 32 [ 220.476460][ T3634] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 220.490904][ T3634] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 220.500042][ T3634] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 220.508586][ T3634] usb 6-1: Product: syz [ 220.513763][ T3634] usb 6-1: Manufacturer: syz [ 220.518439][ T3634] usb 6-1: SerialNumber: syz [ 220.525983][ T3634] usb 6-1: config 0 descriptor?? [ 220.532404][ T8729] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 220.748919][ T3634] usb 6-1: USB disconnect, device number 18 [ 221.270186][ T8715] /dev/rnullb0: Can't open blockdev [ 221.291210][ T8761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.304371][ T8761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.374647][ T5952] usb 3-1: Cannot set autoneg [ 221.383901][ T5952] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 221.412096][ T5952] usb 3-1: USB disconnect, device number 30 [ 221.573767][ T8773] netlink: 36 bytes leftover after parsing attributes in process `syz.5.777'. [ 221.885599][ T5952] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 222.065778][ T5952] usb 3-1: Using ep0 maxpacket: 16 [ 222.073656][ T5952] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 8 [ 222.095532][ T5952] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 222.119628][ T5952] usb 3-1: config 1 interface 0 has no altsetting 0 [ 222.140058][ T5952] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 222.167008][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.186487][ T5952] usb 3-1: Product: ѕ [ 222.192515][ T5952] usb 3-1: Manufacturer: ዪ⍴弨畋񁭝뚊Ꚍຈ썝娏ꄏ䍗뮿淳㜽᪜შ崞淚럨䅑䱑㈐餘ྗ⚺绂♟⩄ꚿ目뎳祱햀ᝪÉ蚥辿쳿䛌᪎棛뀦◰餛ⴐ羁掃㿪怀蓻ᄐ毶Ҫ量鄮ᅨ쇘鋩軡Ⓟ↣逨䯣䭋⓶哂县虶傺ᦴc쐮뺷▧쿦鰀粩仔 [ 222.247569][ T5952] usb 3-1: SerialNumber: syz [ 222.263894][ T8771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.287038][ T8771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 222.715710][ T5952] usb 3-1: USB disconnect, device number 31 [ 223.438718][ T8813] /dev/rnullb0: Can't open blockdev [ 223.606168][ T8817] netlink: 'syz.5.793': attribute type 10 has an invalid length. [ 223.614188][ T8817] netlink: 40 bytes leftover after parsing attributes in process `syz.5.793'. [ 223.628212][ T8817] batman_adv: batadv0: Adding interface: virt_wifi0 [ 223.634974][ T8817] batman_adv: batadv0: Interface activated: virt_wifi0 [ 223.685669][ T5952] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 223.859946][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 223.886015][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 223.928472][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 223.958160][ T5952] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 223.968717][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.985543][ T5952] usb 5-1: Product: syz [ 223.989753][ T5952] usb 5-1: Manufacturer: syz [ 224.005531][ T5952] usb 5-1: SerialNumber: syz [ 224.019129][ T5952] usb 5-1: config 0 descriptor?? [ 224.024967][ T8812] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 224.058618][ T5952] usb 5-1: ucan: probing device on interface #0 [ 224.064910][ T5952] usb 5-1: ucan: invalid in_ep MaxPacketSize [ 224.089937][ T5952] usb 5-1: ucan: probe failed; try to update the device firmware [ 224.260011][ T3634] usb 5-1: USB disconnect, device number 41 [ 224.386748][ T5934] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 224.535667][ T5934] usb 6-1: device descriptor read/64, error -71 [ 224.574968][ T8849] IPv6: Can't replace route, no match found [ 224.776671][ T5934] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 224.851684][ T8858] /dev/rnullb0: Can't open blockdev [ 224.918485][ T5934] usb 6-1: device descriptor read/64, error -71 [ 224.946293][ T8860] /dev/rnullb0: Can't open blockdev [ 225.036765][ T5934] usb usb6-port1: attempt power cycle [ 225.251533][ T8880] /dev/rnullb0: Can't open blockdev [ 225.317724][ T8882] No control pipe specified [ 225.385542][ T5934] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 225.416701][ T5934] usb 6-1: device descriptor read/8, error -71 [ 225.456465][ T8888] /dev/rnullb0: Can't open blockdev [ 225.641827][ T8899] netlink: 88 bytes leftover after parsing attributes in process `syz.4.818'. [ 225.655883][ T5934] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 225.690444][ T5934] usb 6-1: device descriptor read/8, error -71 [ 225.806043][ T5934] usb usb6-port1: unable to enumerate USB device [ 225.906150][ T43] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 226.045621][ T43] usb 3-1: device descriptor read/64, error -71 [ 226.288480][ T43] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 226.437713][ T43] usb 3-1: device descriptor read/64, error -71 [ 226.557103][ T43] usb usb3-port1: attempt power cycle [ 226.840560][ T8931] /dev/rnullb0: Can't lookup blockdev [ 226.895610][ T43] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 226.936298][ T43] usb 3-1: device descriptor read/8, error -71 [ 227.175659][ T43] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 227.196360][ T43] usb 3-1: device descriptor read/8, error -71 [ 227.335217][ T43] usb usb3-port1: unable to enumerate USB device [ 227.576434][ T5853] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 227.589270][ T8960] usb usb8: usbfs: process 8960 (syz.5.844) did not claim interface 7 before use [ 227.607608][ T8960] /dev/rnullb0: Can't open blockdev [ 227.904230][ T43] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 228.059263][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 228.070827][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 228.081802][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 228.092466][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.105691][ T43] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.114740][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.138412][ T43] usb 6-1: config 0 descriptor?? [ 228.341200][ T8973] /dev/rnullb0: Can't open blockdev [ 228.408401][ T8975] /dev/rnullb0: Can't open blockdev [ 228.571490][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.590193][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.601511][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.610573][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.619311][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.627661][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.636645][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.649905][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.658671][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.671406][ T43] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 228.694592][ T43] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 228.890769][ T24] usb 6-1: USB disconnect, device number 23 [ 229.125897][ T5894] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 229.295658][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 229.313075][ T5894] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 229.332074][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.342355][ T5894] usb 3-1: Product: syz [ 229.350750][ T5894] usb 3-1: Manufacturer: syz [ 229.359941][ T5894] usb 3-1: SerialNumber: syz [ 229.580826][ T8987] fuse: Unknown parameter 'ootmode' [ 229.644590][ T9012] syzkaller1: entered promiscuous mode [ 229.657057][ T9012] syzkaller1: entered allmulticast mode [ 229.741610][ T9015] netlink: 'syz.5.864': attribute type 10 has an invalid length. [ 229.759787][ T9015] netlink: 40 bytes leftover after parsing attributes in process `syz.5.864'. [ 229.796771][ T5894] mxuport 3-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 229.816634][ T5894] mxuport 3-1:254.0: probe with driver mxuport failed with error -5 [ 229.846721][ T5894] usb 3-1: USB disconnect, device number 36 [ 229.915760][ T5952] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 230.045345][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz.3.865'. [ 230.077238][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.095522][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.112189][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 230.125647][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.145692][ T5952] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.158866][ T5952] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.176608][ T5952] usb 5-1: config 0 descriptor?? [ 230.488105][ T9032] /dev/rnullb0: Can't open blockdev [ 230.603421][ T9012] syz.4.863(9012): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 230.642279][ T5952] usbhid 5-1:0.0: can't add hid device: -71 [ 230.657826][ T5952] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 230.686145][ T5952] usb 5-1: USB disconnect, device number 42 [ 230.914779][ T9042] netlink: 188 bytes leftover after parsing attributes in process `syz.2.872'. [ 230.931587][ T9042] /dev/rnullb0: Can't open blockdev [ 231.034558][ T9050] fuseblk: Bad value for 'rootmode' [ 231.641233][ T9067] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 231.755740][ T5952] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 231.935575][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 231.950337][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.970885][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.007892][ T5952] usb 5-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 232.025594][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.034355][ T5952] usb 5-1: Product: syz [ 232.044501][ T5952] usb 5-1: Manufacturer: syz [ 232.054636][ T5952] usb 5-1: SerialNumber: syz [ 232.066662][ T5952] usb 5-1: config 0 descriptor?? [ 232.095589][ T5952] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22 [ 232.221364][ T5169] Bluetooth: hci4: command tx timeout [ 232.333497][ T9064] netlink: 'syz.4.878': attribute type 21 has an invalid length. [ 232.371522][ T9064] netlink: 100 bytes leftover after parsing attributes in process `syz.4.878'. [ 232.774136][ T9099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.878'. [ 232.775829][ T5952] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 232.856058][ T9096] /dev/rnullb0: Can't open blockdev [ 232.968919][ T5952] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 232.979296][ T5952] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.992822][ T5952] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.003712][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.060101][ T9103] fuse: Bad value for 'fd' [ 233.218745][ T9088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.228973][ T9088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.237388][ T5952] usb 6-1: usb_control_msg returned -32 [ 233.242999][ T5952] usbtmc 6-1:16.0: can't read capabilities [ 233.933504][ T5934] usb 6-1: USB disconnect, device number 24 [ 233.994095][ T9120] /dev/rnullb0: Can't open blockdev [ 233.997112][ T5952] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 234.167625][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.178070][ T5952] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.201323][ T5952] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 234.211274][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.219546][ T5952] usb 3-1: Product: syz [ 234.223795][ T5952] usb 3-1: Manufacturer: syz [ 234.233539][ T5952] usb 3-1: SerialNumber: syz [ 234.241039][ T5952] usb 3-1: config 0 descriptor?? [ 234.455642][ T5934] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 234.580850][ T24] usb 5-1: USB disconnect, device number 43 [ 234.618477][ T5934] usb 6-1: config 3 has an invalid interface number: 149 but max is 0 [ 234.633061][ T5934] usb 6-1: config 3 has no interface number 0 [ 234.651024][ T5934] usb 6-1: config 3 interface 149 has no altsetting 0 [ 234.669641][ T9143] /dev/rnullb0: Can't open blockdev [ 234.670991][ T5934] usb 6-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice= 9.28 [ 234.691193][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.704687][ T5934] usb 6-1: Product: syz [ 234.708948][ T5934] usb 6-1: Manufacturer: syz [ 234.713552][ T5934] usb 6-1: SerialNumber: syz [ 234.929400][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.941775][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.942691][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.956004][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.971809][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.981890][ T9124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.982867][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.992329][ T9124] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.013614][ T5934] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 235.021580][ T5934] dvb-usb: bulk message failed: -22 (2/0) [ 235.031237][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 235.041466][ T5934] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 235.051527][ T5934] usb 6-1: media controller created [ 235.076361][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 235.100766][ T5934] cxusb: set interface failed [ 235.105583][ T5934] dvb-usb: bulk message failed: -22 (1/0) [ 235.138497][ T5934] DVB: Unable to find symbol lgdt330x_attach() [ 235.144728][ T5934] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 235.205551][ T5934] rc_core: IR keymap rc-dvico-portable not found [ 235.211934][ T5934] Registered IR keymap rc-empty [ 235.219166][ T5934] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 235.228925][ T24] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 235.240016][ T5934] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input19 [ 235.252059][ T5934] dvb-usb: schedule remote query interval to 100 msecs. [ 235.261917][ T5934] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 235.274810][ T5934] usb 6-1: USB disconnect, device number 25 [ 235.327338][ T5934] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 235.386836][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 235.393861][ T24] usb 5-1: config 0 has an invalid interface number: 94 but max is 0 [ 235.402742][ T24] usb 5-1: config 0 has no interface number 0 [ 235.409261][ T24] usb 5-1: New USB device found, idVendor=057c, idProduct=2200, bcdDevice= e.fd [ 235.419179][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.431143][ T24] usb 5-1: config 0 descriptor?? [ 235.444351][ T24] bfusb 5-1:0.94: probe with driver bfusb failed with error -5 [ 235.597548][ T9164] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 235.608006][ T9165] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 235.681006][ T24] usb 5-1: USB disconnect, device number 44 [ 235.813580][ T9173] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 236.015644][ T5952] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 236.165562][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 236.172648][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.184232][ T5952] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.208111][ T5952] usb 6-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0 [ 236.217453][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.225572][ T5952] usb 6-1: Product: syz [ 236.229783][ T5952] usb 6-1: Manufacturer: syz [ 236.234745][ T5952] usb 6-1: SerialNumber: syz [ 236.242223][ T5952] usb 6-1: config 0 descriptor?? [ 236.259217][ T5952] qmi_wwan 6-1:0.0: probe with driver qmi_wwan failed with error -22 [ 236.461718][ T9171] netlink: 'syz.5.916': attribute type 21 has an invalid length. [ 236.470793][ T9171] netlink: 100 bytes leftover after parsing attributes in process `syz.5.916'. [ 236.525769][ T5952] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 236.675696][ T5952] usb 5-1: Using ep0 maxpacket: 8 [ 236.684705][ T5952] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 236.695722][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.703733][ T5952] usb 5-1: Product: syz [ 236.708191][ T5952] usb 5-1: Manufacturer: syz [ 236.712890][ T5952] usb 5-1: SerialNumber: syz [ 236.719805][ T5952] usb 5-1: config 0 descriptor?? [ 236.757888][ T24] usb 3-1: USB disconnect, device number 37 [ 236.868542][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.916'. [ 236.931166][ T5952] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 236.991273][ T9183] block device autoloading is deprecated and will be removed. [ 237.000838][ T9182] block device autoloading is deprecated and will be removed. [ 237.058220][ T9181] /dev/rnullb0: Can't open blockdev [ 237.385556][ T3634] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 237.539878][ T3634] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 237.552085][ T3634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 237.563246][ T3634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 237.573126][ T3634] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 237.586170][ T3634] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 237.595259][ T3634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.606019][ T3634] usb 3-1: config 0 descriptor?? [ 238.031392][ T3634] hid_parser_main: 5 callbacks suppressed [ 238.031415][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.045989][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.053416][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.075524][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.082948][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.095513][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.103290][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.124298][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.135776][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.143217][ T3634] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 238.154480][ T5952] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 238.180508][ T3634] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 238.180958][ T5952] usb 5-1: USB disconnect, device number 45 [ 238.312736][ T9185] netlink: 'syz.2.922': attribute type 4 has an invalid length. [ 238.343970][ T3634] usb 3-1: USB disconnect, device number 38 [ 238.828134][ T5952] usb 6-1: USB disconnect, device number 26 [ 239.218844][ T9203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.927'. [ 239.229832][ T9203] netlink: 16 bytes leftover after parsing attributes in process `syz.2.927'. [ 239.239344][ T9203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.927'. [ 239.250939][ T9203] netlink: 36 bytes leftover after parsing attributes in process `syz.2.927'. [ 239.262316][ T9203] /dev/rnullb0: Can't open blockdev [ 239.295596][ T5952] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 239.446807][ T5952] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 239.458325][ T5952] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 239.470841][ T5952] usb 6-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 239.480240][ T5952] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.488399][ T5952] usb 6-1: Product: syz [ 239.492628][ T5952] usb 6-1: Manufacturer: syz [ 239.497609][ T5952] usb 6-1: SerialNumber: syz [ 239.505051][ T5952] usb 6-1: config 0 descriptor?? [ 239.545613][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 239.715534][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 239.716438][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.725117][ T43] usb 3-1: config 0 has an invalid descriptor of length 167, skipping remainder of the config [ 239.745546][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 239.759370][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.765592][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.00 [ 239.785502][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.808270][ T43] usb 3-1: config 0 descriptor?? [ 239.816815][ T43] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 240.833661][ T5952] usb 3-1: USB disconnect, device number 39 [ 240.883826][ T9220] /dev/rnullb0: Can't open blockdev [ 241.070497][ T9227] loop8: detected capacity change from 0 to 7 [ 241.080706][ T9227] Dev loop8: unable to read RDB block 7 [ 241.088778][ T9227] loop8: unable to read partition table [ 241.099353][ T9227] loop8: partition table beyond EOD, truncated [ 241.106269][ T9227] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 241.130674][ T9227] /dev/rnullb0: Can't open blockdev [ 241.140463][ T9228] /dev/rnullb0: Can't open blockdev [ 241.895690][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 241.895722][ T5169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 241.947225][ T43] usb 6-1: USB disconnect, device number 27 [ 242.045804][ T5952] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 242.177471][ T9245] /dev/rnullb0: Can't open blockdev [ 242.198956][ T5952] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 242.211924][ T5952] usb 3-1: config 0 has no interface number 0 [ 242.223855][ T5952] usb 3-1: config 0 interface 29 has no altsetting 0 [ 242.240603][ T5952] usb 3-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 242.255500][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.266037][ T5952] usb 3-1: Product: syz [ 242.271975][ T5952] usb 3-1: Manufacturer: syz [ 242.277146][ T5952] usb 3-1: SerialNumber: syz [ 242.287702][ T5952] usb 3-1: config 0 descriptor?? [ 242.503836][ T5952] peak_usb 3-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 242.713129][ T5952] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 242.737971][ T5952] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 242.745013][ T5952] peak_usb 3-1:0.29 can0: sending command failure: -22 [ 242.910926][ T5952] peak_usb 3-1:0.29: probe with driver peak_usb failed with error -22 [ 242.911592][ T9238] /dev/rnullb0: Can't open blockdev [ 242.985399][ T5952] usb 3-1: USB disconnect, device number 40 [ 243.401147][ T9267] FAULT_INJECTION: forcing a failure. [ 243.401147][ T9267] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 243.414498][ T9267] CPU: 1 UID: 0 PID: 9267 Comm: syz.4.946 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 243.414524][ T9267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 243.414539][ T9267] Call Trace: [ 243.414546][ T9267] [ 243.414553][ T9267] dump_stack_lvl+0x189/0x250 [ 243.414582][ T9267] ? __pfx____ratelimit+0x10/0x10 [ 243.414600][ T9267] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.414629][ T9267] ? __pfx__printk+0x10/0x10 [ 243.414652][ T9267] ? __might_fault+0xb0/0x130 [ 243.414684][ T9267] should_fail_ex+0x414/0x560 [ 243.414711][ T9267] _copy_from_iter+0x1db/0x16f0 [ 243.414735][ T9267] ? sock_alloc_send_pskb+0x875/0x990 [ 243.414764][ T9267] ? __pfx__copy_from_iter+0x10/0x10 [ 243.414791][ T9267] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 243.414816][ T9267] skb_copy_datagram_from_iter+0xf5/0x720 [ 243.414842][ T9267] ? __lock_acquire+0xab9/0xd20 [ 243.414861][ T9267] ? skb_put+0x11b/0x210 [ 243.414883][ T9267] tun_get_user+0x15c3/0x3ce0 [ 243.414907][ T9267] ? aa_file_perm+0x13e/0x11b0 [ 243.414931][ T9267] ? aa_file_perm+0x13e/0x11b0 [ 243.414955][ T9267] ? aa_file_perm+0x3ed/0x11b0 [ 243.414980][ T9267] ? __pfx_tun_get_user+0x10/0x10 [ 243.415001][ T9267] ? __lock_acquire+0xab9/0xd20 [ 243.415023][ T9267] ? ref_tracker_alloc+0x318/0x460 [ 243.415036][ T9267] ? __lock_acquire+0xab9/0xd20 [ 243.415054][ T9267] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 243.415073][ T9267] ? tun_get+0x1c/0x2f0 [ 243.415092][ T9267] ? tun_get+0x1c/0x2f0 [ 243.415105][ T9267] ? tun_get+0x1c/0x2f0 [ 243.415123][ T9267] tun_chr_write_iter+0x113/0x200 [ 243.415150][ T9267] vfs_write+0x548/0xa90 [ 243.415178][ T9267] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 243.415202][ T9267] ? __pfx_vfs_write+0x10/0x10 [ 243.415234][ T9267] ? __fget_files+0x2a/0x420 [ 243.415258][ T9267] ksys_write+0x145/0x250 [ 243.415274][ T9267] ? __pfx_ksys_write+0x10/0x10 [ 243.415287][ T9267] ? rcu_is_watching+0x15/0xb0 [ 243.415311][ T9267] ? do_syscall_64+0xbe/0x3b0 [ 243.415331][ T9267] do_syscall_64+0xfa/0x3b0 [ 243.415348][ T9267] ? lockdep_hardirqs_on+0x9c/0x150 [ 243.415364][ T9267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.415382][ T9267] ? clear_bhb_loop+0x60/0xb0 [ 243.415402][ T9267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.415418][ T9267] RIP: 0033:0x7ffa13b8e929 [ 243.415445][ T9267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.415461][ T9267] RSP: 002b:00007ffa14a52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 243.415481][ T9267] RAX: ffffffffffffffda RBX: 00007ffa13db5fa0 RCX: 00007ffa13b8e929 [ 243.415494][ T9267] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 243.415506][ T9267] RBP: 00007ffa14a52090 R08: 0000000000000000 R09: 0000000000000000 [ 243.415518][ T9267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.415530][ T9267] R13: 0000000000000000 R14: 00007ffa13db5fa0 R15: 00007ffe88eb4998 [ 243.415557][ T9267] [ 243.778818][ T9269] /dev/rnullb0: Can't open blockdev [ 244.125728][ T5952] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 244.160547][ T9279] tls_set_device_offload: netdev not found [ 244.285675][ T5952] usb 5-1: Using ep0 maxpacket: 16 [ 244.305648][ T5952] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 244.320275][ T5952] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.340712][ T5952] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.362564][ T5952] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.383814][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.393924][ T5952] usb 5-1: Product: syz [ 244.404407][ T5952] usb 5-1: Manufacturer: syz [ 244.414204][ T5952] usb 5-1: SerialNumber: syz [ 244.463945][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 244.906438][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.916670][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.099165][ T5952] usb 5-1: 0:2 : does not exist [ 245.120112][ T5952] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 245.149826][ T5952] usb 5-1: USB disconnect, device number 46 [ 245.535545][ T5894] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 245.688311][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 245.705971][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 245.718497][ T5894] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 245.728450][ T5894] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 245.741706][ T5894] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 245.752232][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.778129][ T5894] usb 6-1: config 0 descriptor?? [ 246.025616][ T24] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 246.165726][ T24] usb 5-1: device descriptor read/64, error -71 [ 246.193336][ T5894] hid_parser_main: 5 callbacks suppressed [ 246.193358][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.207196][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.216751][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.224168][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.231881][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.239332][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.247361][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.254931][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.262455][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.270012][ T5894] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 246.284158][ T5894] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 246.415662][ T24] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 246.449610][ T5934] usb 6-1: USB disconnect, device number 28 [ 246.535587][ T5853] Bluetooth: hci5: command 0x1003 tx timeout [ 246.535808][ T5169] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 246.559251][ T24] usb 5-1: device descriptor read/64, error -71 [ 246.686153][ T24] usb usb5-port1: attempt power cycle [ 247.045597][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 247.066283][ T24] usb 5-1: device descriptor read/8, error -71 [ 247.255787][ T3634] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 247.315667][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 247.337333][ T24] usb 5-1: device descriptor read/8, error -71 [ 247.392781][ T9315] /dev/rnullb0: Can't open blockdev [ 247.431924][ T3634] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 247.460795][ T24] usb usb5-port1: unable to enumerate USB device [ 247.476369][ T3634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 247.490973][ T3634] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 247.500897][ T3634] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.514150][ T3634] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.523643][ T3634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.538669][ T3634] usb 6-1: config 0 descriptor?? [ 247.589385][ T9321] /dev/rnullb0: Can't open blockdev [ 247.997360][ T3634] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 248.384890][ T5952] usb 6-1: USB disconnect, device number 29 [ 249.093853][ T9342] raw_sendmsg: syz.5.970 forgot to set AF_INET. Fix it! [ 249.195942][ T43] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 249.325836][ T43] usb 5-1: device descriptor read/64, error -71 [ 249.567971][ T43] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 249.588918][ T9361] loop6: detected capacity change from 0 to 524287999 [ 249.715519][ T43] usb 5-1: device descriptor read/64, error -71 [ 249.825941][ T43] usb usb5-port1: attempt power cycle [ 250.152958][ T9368] /dev/rnullb0: Can't open blockdev [ 250.165141][ T9368] overlayfs: missing 'lowerdir' [ 250.225801][ T43] usb 5-1: new full-speed USB device number 53 using dummy_hcd [ 250.267119][ T43] usb 5-1: device descriptor read/8, error -71 [ 250.328062][ T9371] kvm: MONITOR instruction emulated as NOP! [ 250.538648][ T43] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 250.566549][ T43] usb 5-1: device descriptor read/8, error -71 [ 250.601018][ T9380] /dev/rnullb0: Can't open blockdev [ 250.607710][ T9381] /dev/rnullb0: Can't open blockdev [ 250.696023][ T43] usb usb5-port1: unable to enumerate USB device [ 251.176512][ T9395] could not allocate digest TFM handle crct10dif-generic [ 251.660513][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.671469][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.679864][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.689176][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.697509][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.141845][ T9403] chnl_net:caif_netlink_parms(): no params data found [ 252.370583][ T9403] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.384914][ T9403] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.394023][ T9403] bridge_slave_0: entered allmulticast mode [ 252.403307][ T9403] bridge_slave_0: entered promiscuous mode [ 252.412445][ T9403] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.420480][ T9403] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.428154][ T9403] bridge_slave_1: entered allmulticast mode [ 252.437117][ T9403] bridge_slave_1: entered promiscuous mode [ 252.488889][ T9403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.507794][ T9403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.570762][ T9403] team0: Port device team_slave_0 added [ 252.580200][ T9403] team0: Port device team_slave_1 added [ 252.606796][ T9426] /dev/rnullb0: Can't open blockdev [ 252.607457][ T9425] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 252.648967][ T9425] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 252.670996][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.711713][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.745118][ T9403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.758347][ T9403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.784057][ T9403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.837792][ T9403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.980115][ T9403] hsr_slave_0: entered promiscuous mode [ 252.996988][ T9403] hsr_slave_1: entered promiscuous mode [ 253.006531][ T9403] debugfs: 'hsr0' already exists in 'hsr' [ 253.012465][ T9403] Cannot create hsr debugfs directory [ 253.155585][ T3634] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 253.325881][ T3634] usb 3-1: Using ep0 maxpacket: 32 [ 253.347591][ T3634] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.375955][ T3634] usb 3-1: config 0 has no interface number 0 [ 253.396078][ T3634] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 253.426857][ T3634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.437986][ T9454] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 253.445335][ T9454] VFS: Can't find a romfs filesystem on dev rnullb0. [ 253.445335][ T9454] [ 253.454595][ T3634] usb 3-1: Product: syz [ 253.459056][ T3634] usb 3-1: Manufacturer: syz [ 253.463673][ T3634] usb 3-1: SerialNumber: syz [ 253.483483][ T3634] usb 3-1: config 0 descriptor?? [ 253.486287][ T9403] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 253.503596][ T3634] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 253.522932][ T3634] usb 3-1: selecting invalid altsetting 1 [ 253.537090][ T3634] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 253.566726][ T9403] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 253.576762][ T3634] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 253.578882][ T9403] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 253.595959][ T3634] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 253.604538][ T3634] usb 3-1: media controller created [ 253.627474][ T9403] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 253.632696][ T3634] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.638119][ T9456] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 253.815727][ T5853] Bluetooth: hci5: command tx timeout [ 253.823661][ T9466] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 253.875354][ T9403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.919369][ T9403] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.939784][ T1115] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.947065][ T1115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.984572][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.991820][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.083804][ T43] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 254.093650][ T3634] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 254.207125][ T3634] usb 3-1: USB disconnect, device number 41 [ 254.257585][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 254.276920][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.296803][ T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 254.316813][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 254.324874][ T43] usb 6-1: SerialNumber: syz [ 254.432290][ T9403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.612522][ T9480] hpfs: Bad magic ... probably not HPFS [ 254.721830][ T9487] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 254.750778][ T9487] UDF-fs: Scanning with blocksize 4096 failed [ 254.914146][ T9403] veth0_vlan: entered promiscuous mode [ 254.933359][ T9403] veth1_vlan: entered promiscuous mode [ 255.020094][ T9403] veth0_macvtap: entered promiscuous mode [ 255.042451][ T9403] veth1_macvtap: entered promiscuous mode [ 255.109375][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.131592][ T43] usb 6-1: 0:2 : does not exist [ 255.139922][ T9503] FAULT_INJECTION: forcing a failure. [ 255.139922][ T9503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.147313][ T9403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.164752][ T9503] CPU: 0 UID: 0 PID: 9503 Comm: syz.2.1012 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 255.164780][ T9503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.164792][ T9503] Call Trace: [ 255.164800][ T9503] [ 255.164808][ T9503] dump_stack_lvl+0x189/0x250 [ 255.164840][ T9503] ? __pfx____ratelimit+0x10/0x10 [ 255.164861][ T9503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.164887][ T9503] ? __pfx__printk+0x10/0x10 [ 255.164914][ T9503] ? __might_fault+0xb0/0x130 [ 255.164952][ T9503] should_fail_ex+0x414/0x560 [ 255.164986][ T9503] _copy_from_iter+0x1db/0x16f0 [ 255.165023][ T9503] ? __pfx__copy_from_iter+0x10/0x10 [ 255.165045][ T9503] ? sock_alloc_send_pskb+0x875/0x990 [ 255.165080][ T9503] ? __pfx__copy_from_iter+0x10/0x10 [ 255.165104][ T9503] ? page_copy_sane+0x16a/0x280 [ 255.165130][ T9503] copy_page_from_iter+0xdd/0x170 [ 255.165158][ T9503] skb_copy_datagram_from_iter+0x306/0x720 [ 255.165215][ T9503] tun_get_user+0x15c3/0x3ce0 [ 255.165243][ T9503] ? aa_file_perm+0x13e/0x11b0 [ 255.165272][ T9503] ? aa_file_perm+0x13e/0x11b0 [ 255.165299][ T9503] ? aa_file_perm+0x3ed/0x11b0 [ 255.165328][ T9503] ? __pfx_tun_get_user+0x10/0x10 [ 255.165348][ T9503] ? __lock_acquire+0xab9/0xd20 [ 255.165381][ T9503] ? ref_tracker_alloc+0x318/0x460 [ 255.165397][ T9503] ? __lock_acquire+0xab9/0xd20 [ 255.165418][ T9503] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 255.165438][ T9503] ? tun_get+0x1c/0x2f0 [ 255.165459][ T9503] ? tun_get+0x1c/0x2f0 [ 255.165473][ T9503] ? tun_get+0x1c/0x2f0 [ 255.165494][ T9503] tun_chr_write_iter+0x113/0x200 [ 255.165522][ T9503] vfs_write+0x548/0xa90 [ 255.165555][ T9503] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 255.165584][ T9503] ? __pfx_vfs_write+0x10/0x10 [ 255.165621][ T9503] ? __fget_files+0x2a/0x420 [ 255.165650][ T9503] ksys_write+0x145/0x250 [ 255.165670][ T9503] ? __pfx_ksys_write+0x10/0x10 [ 255.165686][ T9503] ? rcu_is_watching+0x15/0xb0 [ 255.165714][ T9503] ? do_syscall_64+0xbe/0x3b0 [ 255.165738][ T9503] do_syscall_64+0xfa/0x3b0 [ 255.165756][ T9503] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.165776][ T9503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.165795][ T9503] ? clear_bhb_loop+0x60/0xb0 [ 255.165818][ T9503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.165835][ T9503] RIP: 0033:0x7efddd18e929 [ 255.165851][ T9503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.165867][ T9503] RSP: 002b:00007efdde06a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 255.165887][ T9503] RAX: ffffffffffffffda RBX: 00007efddd3b5fa0 RCX: 00007efddd18e929 [ 255.165901][ T9503] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 255.165913][ T9503] RBP: 00007efdde06a090 R08: 0000000000000000 R09: 0000000000000000 [ 255.165925][ T9503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 255.165937][ T9503] R13: 0000000000000000 R14: 00007efddd3b5fa0 R15: 00007ffd63820ee8 [ 255.165966][ T9503] [ 255.207903][ T43] usb 6-1: USB disconnect, device number 30 [ 255.261210][ T59] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.532480][ T1106] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.551697][ T1106] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.560742][ T1106] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.730045][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.742575][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.742736][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.771614][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.799971][ T9507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1014'. [ 255.843110][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.870475][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.895997][ T5853] Bluetooth: hci5: command tx timeout [ 256.328417][ T5853] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 256.377538][ T5952] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 256.552971][ T9525] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1019'. [ 256.565626][ T5952] usb 7-1: Using ep0 maxpacket: 8 [ 256.577566][ T5952] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.594434][ T5952] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 256.613793][ T5952] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.632718][ T9527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1020'. [ 256.644524][ T5952] usb 7-1: config 0 descriptor?? [ 256.660034][ T5952] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 256.666898][ T9527] /dev/rnullb0: Can't open blockdev [ 256.725012][ T9530] FAULT_INJECTION: forcing a failure. [ 256.725012][ T9530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.738495][ T9530] CPU: 0 UID: 0 PID: 9530 Comm: syz.2.1021 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 256.738523][ T9530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 256.738535][ T9530] Call Trace: [ 256.738542][ T9530] [ 256.738550][ T9530] dump_stack_lvl+0x189/0x250 [ 256.738582][ T9530] ? __pfx____ratelimit+0x10/0x10 [ 256.738607][ T9530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.738632][ T9530] ? __pfx__printk+0x10/0x10 [ 256.738658][ T9530] ? __might_fault+0xb0/0x130 [ 256.738697][ T9530] should_fail_ex+0x414/0x560 [ 256.738730][ T9530] _copy_from_iter+0x1db/0x16f0 [ 256.738768][ T9530] ? __pfx__copy_from_iter+0x10/0x10 [ 256.738789][ T9530] ? sock_alloc_send_pskb+0x875/0x990 [ 256.738824][ T9530] ? __pfx__copy_from_iter+0x10/0x10 [ 256.738850][ T9530] ? page_copy_sane+0x16a/0x280 [ 256.738876][ T9530] copy_page_from_iter+0xdd/0x170 [ 256.738905][ T9530] skb_copy_datagram_from_iter+0x306/0x720 [ 256.738947][ T9530] tun_get_user+0x15c3/0x3ce0 [ 256.738975][ T9530] ? aa_file_perm+0x13e/0x11b0 [ 256.739006][ T9530] ? aa_file_perm+0x13e/0x11b0 [ 256.739035][ T9530] ? aa_file_perm+0x3ed/0x11b0 [ 256.739066][ T9530] ? __pfx_tun_get_user+0x10/0x10 [ 256.739090][ T9530] ? __lock_acquire+0xab9/0xd20 [ 256.739118][ T9530] ? ref_tracker_alloc+0x318/0x460 [ 256.739134][ T9530] ? __lock_acquire+0xab9/0xd20 [ 256.739157][ T9530] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 256.739181][ T9530] ? tun_get+0x1c/0x2f0 [ 256.739204][ T9530] ? tun_get+0x1c/0x2f0 [ 256.739228][ T9530] ? tun_get+0x1c/0x2f0 [ 256.739250][ T9530] tun_chr_write_iter+0x113/0x200 [ 256.739282][ T9530] vfs_write+0x548/0xa90 [ 256.739316][ T9530] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 256.739346][ T9530] ? __pfx_vfs_write+0x10/0x10 [ 256.739384][ T9530] ? __fget_files+0x2a/0x420 [ 256.739415][ T9530] ksys_write+0x145/0x250 [ 256.739435][ T9530] ? __pfx_ksys_write+0x10/0x10 [ 256.739458][ T9530] ? do_syscall_64+0xbe/0x3b0 [ 256.739483][ T9530] do_syscall_64+0xfa/0x3b0 [ 256.739505][ T9530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.739521][ T9530] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 256.739541][ T9530] ? clear_bhb_loop+0x60/0xb0 [ 256.739564][ T9530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.739583][ T9530] RIP: 0033:0x7efddd18e929 [ 256.739600][ T9530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.739618][ T9530] RSP: 002b:00007efdde06a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 256.739637][ T9530] RAX: ffffffffffffffda RBX: 00007efddd3b5fa0 RCX: 00007efddd18e929 [ 256.739652][ T9530] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 256.739665][ T9530] RBP: 00007efdde06a090 R08: 0000000000000000 R09: 0000000000000000 [ 256.739677][ T9530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 256.739689][ T9530] R13: 0000000000000000 R14: 00007efddd3b5fa0 R15: 00007ffd63820ee8 [ 256.739719][ T9530] [ 257.976720][ T5169] Bluetooth: hci5: command tx timeout [ 258.067677][ T9518] /dev/rnullb0: Can't open blockdev [ 258.074674][ T5952] gspca_vc032x: reg_w err -71 [ 258.086831][ T5952] vc032x 7-1:0.0: probe with driver vc032x failed with error -71 [ 258.101903][ T9553] /dev/rnullb0: Can't open blockdev [ 258.107486][ T5952] usb 7-1: USB disconnect, device number 2 [ 258.234670][ T9555] FAULT_INJECTION: forcing a failure. [ 258.234670][ T9555] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.252353][ T9555] CPU: 0 UID: 0 PID: 9555 Comm: syz.5.1030 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 258.252381][ T9555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 258.252393][ T9555] Call Trace: [ 258.252400][ T9555] [ 258.252409][ T9555] dump_stack_lvl+0x189/0x250 [ 258.252441][ T9555] ? __pfx____ratelimit+0x10/0x10 [ 258.252462][ T9555] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.252489][ T9555] ? __pfx__printk+0x10/0x10 [ 258.252516][ T9555] ? __might_fault+0xb0/0x130 [ 258.252556][ T9555] should_fail_ex+0x414/0x560 [ 258.252590][ T9555] _copy_from_iter+0x1db/0x16f0 [ 258.252628][ T9555] ? __pfx__copy_from_iter+0x10/0x10 [ 258.252649][ T9555] ? sock_alloc_send_pskb+0x875/0x990 [ 258.252685][ T9555] ? __pfx__copy_from_iter+0x10/0x10 [ 258.252712][ T9555] ? page_copy_sane+0x16a/0x280 [ 258.252738][ T9555] copy_page_from_iter+0xdd/0x170 [ 258.252768][ T9555] skb_copy_datagram_from_iter+0x306/0x720 [ 258.252810][ T9555] tun_get_user+0x15c3/0x3ce0 [ 258.252839][ T9555] ? aa_file_perm+0x13e/0x11b0 [ 258.252870][ T9555] ? aa_file_perm+0x13e/0x11b0 [ 258.252898][ T9555] ? aa_file_perm+0x3ed/0x11b0 [ 258.252929][ T9555] ? __pfx_tun_get_user+0x10/0x10 [ 258.252956][ T9555] ? __lock_acquire+0xab9/0xd20 [ 258.252984][ T9555] ? ref_tracker_alloc+0x318/0x460 [ 258.253000][ T9555] ? __lock_acquire+0xab9/0xd20 [ 258.253023][ T9555] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 258.253047][ T9555] ? tun_get+0x1c/0x2f0 [ 258.253070][ T9555] ? tun_get+0x1c/0x2f0 [ 258.253086][ T9555] ? tun_get+0x1c/0x2f0 [ 258.253108][ T9555] tun_chr_write_iter+0x113/0x200 [ 258.253140][ T9555] vfs_write+0x548/0xa90 [ 258.253175][ T9555] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 258.253206][ T9555] ? __pfx_vfs_write+0x10/0x10 [ 258.253245][ T9555] ? __fget_files+0x2a/0x420 [ 258.253275][ T9555] ksys_write+0x145/0x250 [ 258.253296][ T9555] ? __pfx_ksys_write+0x10/0x10 [ 258.253311][ T9555] ? rcu_is_watching+0x15/0xb0 [ 258.253340][ T9555] ? do_syscall_64+0xbe/0x3b0 [ 258.253372][ T9555] do_syscall_64+0xfa/0x3b0 [ 258.253392][ T9555] ? lockdep_hardirqs_on+0x9c/0x150 [ 258.253413][ T9555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.253432][ T9555] ? clear_bhb_loop+0x60/0xb0 [ 258.253456][ T9555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.253475][ T9555] RIP: 0033:0x7f555cb8e929 [ 258.253492][ T9555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.253509][ T9555] RSP: 002b:00007f555d97b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 258.253530][ T9555] RAX: ffffffffffffffda RBX: 00007f555cdb5fa0 RCX: 00007f555cb8e929 [ 258.253545][ T9555] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 258.253558][ T9555] RBP: 00007f555d97b090 R08: 0000000000000000 R09: 0000000000000000 [ 258.253569][ T9555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 258.253581][ T9555] R13: 0000000000000000 R14: 00007f555cdb5fa0 R15: 00007fffc9b6a8d8 [ 258.253611][ T9555] [ 258.684242][ T9562] netlink: 'syz.5.1033': attribute type 32 has an invalid length. [ 258.767016][ T9560] /dev/rnullb0: Can't open blockdev [ 258.984487][ T9566] syzkaller1: entered promiscuous mode [ 258.990095][ T9566] syzkaller1: entered allmulticast mode [ 259.003647][ T9566] /dev/rnullb0: Can't open blockdev [ 259.038001][ T5934] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 259.197438][ T5934] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.215648][ T5934] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 259.235755][ T5934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.251120][ T5934] usb 6-1: config 0 descriptor?? [ 259.256296][ T5853] Bluetooth: hci6: Entering manufacturer mode failed (-110) [ 259.699477][ T5934] keytouch 0003:0926:3333.0014: fixing up Keytouch IEC report descriptor [ 259.731516][ T5934] input: HID 0926:3333 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0926:3333.0014/input/input21 [ 259.878159][ T9590] FAULT_INJECTION: forcing a failure. [ 259.878159][ T9590] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.891449][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: syz.6.1041 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 259.891471][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 259.891480][ T9590] Call Trace: [ 259.891487][ T9590] [ 259.891493][ T9590] dump_stack_lvl+0x189/0x250 [ 259.891517][ T9590] ? __pfx____ratelimit+0x10/0x10 [ 259.891534][ T9590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.891553][ T9590] ? __pfx__printk+0x10/0x10 [ 259.891572][ T9590] ? __might_fault+0xb0/0x130 [ 259.891601][ T9590] should_fail_ex+0x414/0x560 [ 259.891626][ T9590] _copy_from_iter+0x1db/0x16f0 [ 259.891654][ T9590] ? __pfx__copy_from_iter+0x10/0x10 [ 259.891670][ T9590] ? sock_alloc_send_pskb+0x875/0x990 [ 259.891696][ T9590] ? __pfx__copy_from_iter+0x10/0x10 [ 259.891716][ T9590] ? page_copy_sane+0x16a/0x280 [ 259.891736][ T9590] copy_page_from_iter+0xdd/0x170 [ 259.891758][ T9590] skb_copy_datagram_from_iter+0x306/0x720 [ 259.891788][ T9590] tun_get_user+0x15c3/0x3ce0 [ 259.891810][ T9590] ? aa_file_perm+0x13e/0x11b0 [ 259.891833][ T9590] ? aa_file_perm+0x13e/0x11b0 [ 259.891854][ T9590] ? aa_file_perm+0x3ed/0x11b0 [ 259.891878][ T9590] ? __pfx_tun_get_user+0x10/0x10 [ 259.891898][ T9590] ? __lock_acquire+0xab9/0xd20 [ 259.891921][ T9590] ? ref_tracker_alloc+0x318/0x460 [ 259.891933][ T9590] ? __lock_acquire+0xab9/0xd20 [ 259.891951][ T9590] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 259.891969][ T9590] ? tun_get+0x1c/0x2f0 [ 259.891988][ T9590] ? tun_get+0x1c/0x2f0 [ 259.892001][ T9590] ? tun_get+0x1c/0x2f0 [ 259.892018][ T9590] tun_chr_write_iter+0x113/0x200 [ 259.892044][ T9590] vfs_write+0x548/0xa90 [ 259.892070][ T9590] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 259.892094][ T9590] ? __pfx_vfs_write+0x10/0x10 [ 259.892137][ T9590] ? __fget_files+0x2a/0x420 [ 259.892161][ T9590] ksys_write+0x145/0x250 [ 259.892176][ T9590] ? __pfx_ksys_write+0x10/0x10 [ 259.892186][ T9590] ? rcu_is_watching+0x15/0xb0 [ 259.892209][ T9590] ? do_syscall_64+0xbe/0x3b0 [ 259.892229][ T9590] do_syscall_64+0xfa/0x3b0 [ 259.892245][ T9590] ? lockdep_hardirqs_on+0x9c/0x150 [ 259.892261][ T9590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.892276][ T9590] ? clear_bhb_loop+0x60/0xb0 [ 259.892294][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.892307][ T9590] RIP: 0033:0x7f5c0eb8e929 [ 259.892322][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.892338][ T9590] RSP: 002b:00007f5c0f9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.892357][ T9590] RAX: ffffffffffffffda RBX: 00007f5c0edb5fa0 RCX: 00007f5c0eb8e929 [ 259.892370][ T9590] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 259.892381][ T9590] RBP: 00007f5c0f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 259.892392][ T9590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 259.892402][ T9590] R13: 0000000000000000 R14: 00007f5c0edb5fa0 R15: 00007ffcf2abf6f8 [ 259.892427][ T9590] [ 260.188709][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.220392][ T5853] Bluetooth: hci5: command tx timeout [ 260.318037][ T5934] keytouch 0003:0926:3333.0014: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.5-1/input0 [ 260.355530][ T5952] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 260.509205][ T5952] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.519400][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 260.536625][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 260.551187][ T5952] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 260.561817][ T5952] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.578353][ T5952] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 260.593385][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 260.605490][ T5952] usb 5-1: Product: syz [ 260.609684][ T5952] usb 5-1: Manufacturer: syz [ 260.614304][ T5952] usb 5-1: SerialNumber: syz [ 260.626994][ T5934] usb 6-1: USB disconnect, device number 31 [ 260.647574][ T5952] usb 5-1: config 0 descriptor?? [ 260.860350][ T5952] radio-si470x 5-1:0.0: DeviceID=0x5225 ChipID=0x50ba [ 261.086113][ T5952] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 261.114590][ T5952] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 261.134700][ T5952] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 261.185029][ T5952] usb 5-1: USB disconnect, device number 55 [ 261.276870][ T9600] netlink: 'syz.2.1044': attribute type 10 has an invalid length. [ 261.325635][ T9600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1044'. [ 261.349106][ T9601] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1044'. [ 261.423636][ T9600] batman_adv: batadv0: Adding interface: virt_wifi0 [ 261.462858][ T9600] batman_adv: batadv0: Interface activated: virt_wifi0 [ 261.923521][ T9618] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1050'. [ 262.028615][ T9620] FAULT_INJECTION: forcing a failure. [ 262.028615][ T9620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.079318][ T9620] CPU: 0 UID: 0 PID: 9620 Comm: syz.4.1051 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 262.079348][ T9620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.079360][ T9620] Call Trace: [ 262.079368][ T9620] [ 262.079375][ T9620] dump_stack_lvl+0x189/0x250 [ 262.079407][ T9620] ? __pfx____ratelimit+0x10/0x10 [ 262.079429][ T9620] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.079456][ T9620] ? __pfx__printk+0x10/0x10 [ 262.079483][ T9620] ? __might_fault+0xb0/0x130 [ 262.079520][ T9620] should_fail_ex+0x414/0x560 [ 262.079551][ T9620] _copy_from_iter+0x1db/0x16f0 [ 262.079585][ T9620] ? __pfx__copy_from_iter+0x10/0x10 [ 262.079606][ T9620] ? sock_alloc_send_pskb+0x875/0x990 [ 262.079641][ T9620] ? __pfx__copy_from_iter+0x10/0x10 [ 262.079675][ T9620] ? page_copy_sane+0x16a/0x280 [ 262.079701][ T9620] copy_page_from_iter+0xdd/0x170 [ 262.079732][ T9620] skb_copy_datagram_from_iter+0x306/0x720 [ 262.079779][ T9620] tun_get_user+0x15c3/0x3ce0 [ 262.079805][ T9620] ? aa_file_perm+0x13e/0x11b0 [ 262.079842][ T9620] ? aa_file_perm+0x13e/0x11b0 [ 262.079870][ T9620] ? aa_file_perm+0x3ed/0x11b0 [ 262.079900][ T9620] ? __pfx_tun_get_user+0x10/0x10 [ 262.079926][ T9620] ? __lock_acquire+0xab9/0xd20 [ 262.079954][ T9620] ? ref_tracker_alloc+0x318/0x460 [ 262.079969][ T9620] ? __lock_acquire+0xab9/0xd20 [ 262.079993][ T9620] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 262.080016][ T9620] ? tun_get+0x1c/0x2f0 [ 262.080040][ T9620] ? tun_get+0x1c/0x2f0 [ 262.080057][ T9620] ? tun_get+0x1c/0x2f0 [ 262.080079][ T9620] tun_chr_write_iter+0x113/0x200 [ 262.080112][ T9620] vfs_write+0x548/0xa90 [ 262.080147][ T9620] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 262.080177][ T9620] ? __pfx_vfs_write+0x10/0x10 [ 262.080216][ T9620] ? __fget_files+0x2a/0x420 [ 262.080246][ T9620] ksys_write+0x145/0x250 [ 262.080266][ T9620] ? __pfx_ksys_write+0x10/0x10 [ 262.080282][ T9620] ? rcu_is_watching+0x15/0xb0 [ 262.080311][ T9620] ? do_syscall_64+0xbe/0x3b0 [ 262.080337][ T9620] do_syscall_64+0xfa/0x3b0 [ 262.080357][ T9620] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.080377][ T9620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.080397][ T9620] ? clear_bhb_loop+0x60/0xb0 [ 262.080421][ T9620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.080439][ T9620] RIP: 0033:0x7ffa13b8e929 [ 262.080457][ T9620] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.080473][ T9620] RSP: 002b:00007ffa14a52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.080493][ T9620] RAX: ffffffffffffffda RBX: 00007ffa13db5fa0 RCX: 00007ffa13b8e929 [ 262.080507][ T9620] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 262.080518][ T9620] RBP: 00007ffa14a52090 R08: 0000000000000000 R09: 0000000000000000 [ 262.080528][ T9620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 262.080539][ T9620] R13: 0000000000000000 R14: 00007ffa13db5fa0 R15: 00007ffe88eb4998 [ 262.080567][ T9620] [ 262.094325][ T9623] vxfs: WRONG superblock magic 00000000 at 1 [ 262.395738][ T9623] vxfs: WRONG superblock magic 00000000 at 8 [ 262.403147][ T9623] vxfs: can't find superblock. [ 263.007748][ T9644] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 263.475958][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 263.630086][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.655389][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 263.668519][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.680945][ T24] usb 3-1: config 0 descriptor?? [ 263.686708][ T5894] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 263.717098][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 263.873579][ T5894] usb 6-1: config 1 interface 0 altsetting 223 bulk endpoint 0x82 has invalid maxpacket 1024 [ 263.894310][ T5894] usb 6-1: config 1 interface 0 altsetting 223 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 263.925850][ T5894] usb 6-1: config 1 interface 0 has no altsetting 0 [ 263.956706][ T5894] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.970212][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.990730][ T5894] usb 6-1: Product: 瞏狽䃸飬㑔邬䙰襤숊슺暝蠟맠ꃎ뺲쓣顔뇐蟱筷䫦僊鄻踺剾揾祘꜁狸ニ頍鱂񉮓ॄﺣ໗ꂶڵ魍镶礪ⲋ彖ᅲꠀ䭰厽쮀㷼졖䱪瞋ﭒ䞙䣠㛎⬀⿤똉귰횎ൢ㉮劇턷积堞㯷ꤲ쿩엃耝ᦝ瑡봥槌 [ 264.051958][ T5894] usb 6-1: Manufacturer: 謒辫兪涪؉㣴ك伴꽁슖⼨諩鄺셄㒫㦔y絟훘啼挿噯ힵꔬ끛㑥槊훝큸䨔ꅮ▅㯾㨔◪뚇ꤲ㦼촿ᩕ圈աꠁ뗐瘸ᬟ႔ኤ낤눑谜辇蒴￟ᴓព빤튖麺ౕ宿⌿앝鏢֖붽⛁嫏檩ꆘפּ헡绗鎂 [ 264.109952][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 264.115509][ T5894] usb 6-1: SerialNumber: 蕈烑綌铞奱ᣕ㘳鲟拭ƭ䮤ῳ뮫㻬슰ᳯ៝䱵⫘䂟鬢吱陎윦焧鷪ᬑ萏輩歖 [ 264.129127][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 264.153421][ T9649] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 264.158009][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 264.209540][ T24] pwc: recv_control_msg error -71 req 04 val 1000 [ 264.228090][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 264.252546][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 264.266391][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 264.305966][ T9651] /dev/rnullb0: Can't open blockdev [ 264.325961][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 264.333689][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 264.342359][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 264.352161][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 264.366025][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 264.405593][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 264.412961][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 264.428132][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 264.437132][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 264.451322][ T24] pwc: Registered as video103. [ 264.473965][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input22 [ 264.509268][ T24] usb 3-1: USB disconnect, device number 42 [ 264.529471][ T9674] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 264.559824][ T9674] VFS: Can't find a romfs filesystem on dev rnullb0. [ 264.559824][ T9674] [ 264.597569][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.642018][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.703548][ T5894] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 264.743420][ T5894] usb 6-1: USB disconnect, device number 32 [ 264.790140][ T9681] Malformed UNC in devname [ 264.790140][ T9681] [ 264.800655][ T9681] CIFS: VFS: Malformed UNC in devname [ 264.957984][ T9691] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.1070' resets device [ 265.008603][ T9693] fuse: Bad value for 'rootmode' [ 265.328854][ T9702] syz.6.1073: attempt to access beyond end of device [ 265.328854][ T9702] nbd6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 265.350749][ T9702] isofs_fill_super: bread failed, dev=nbd6, iso_blknum=16, block=32 [ 265.405895][ T1213] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 265.578584][ T1213] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.590438][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 265.601749][ T1213] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 265.611669][ T1213] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 265.615634][ T5934] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 265.624985][ T1213] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 265.642095][ T1213] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.652900][ T1213] usb 3-1: config 0 descriptor?? [ 265.794588][ T5934] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 265.803427][ T5934] usb 7-1: config 0 has no interface number 0 [ 265.810167][ T5934] usb 7-1: config 0 interface 41 has no altsetting 0 [ 265.819917][ T5934] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 265.834583][ T5934] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.844378][ T5934] usb 7-1: Product: syz [ 265.854106][ T5934] usb 7-1: Manufacturer: syz [ 265.859113][ T5934] usb 7-1: SerialNumber: syz [ 265.873116][ T5934] usb 7-1: config 0 descriptor?? [ 266.421570][ T1213] usbhid 3-1:0.0: can't add hid device: -71 [ 266.443200][ T1213] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 266.475187][ T1213] usb 3-1: USB disconnect, device number 43 [ 266.905141][ T9718] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1078'. [ 267.081888][ T9721] FAULT_INJECTION: forcing a failure. [ 267.081888][ T9721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.096036][ T9721] CPU: 1 UID: 0 PID: 9721 Comm: syz.2.1079 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 267.096064][ T9721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.096077][ T9721] Call Trace: [ 267.096085][ T9721] [ 267.096093][ T9721] dump_stack_lvl+0x189/0x250 [ 267.096125][ T9721] ? __pfx____ratelimit+0x10/0x10 [ 267.096146][ T9721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.096173][ T9721] ? __pfx__printk+0x10/0x10 [ 267.096201][ T9721] ? __might_fault+0xb0/0x130 [ 267.096241][ T9721] should_fail_ex+0x414/0x560 [ 267.096274][ T9721] _copy_from_iter+0x1db/0x16f0 [ 267.096319][ T9721] ? __pfx__copy_from_iter+0x10/0x10 [ 267.096341][ T9721] ? sock_alloc_send_pskb+0x875/0x990 [ 267.096376][ T9721] ? __pfx__copy_from_iter+0x10/0x10 [ 267.096409][ T9721] ? page_copy_sane+0x16a/0x280 [ 267.096435][ T9721] copy_page_from_iter+0xdd/0x170 [ 267.096465][ T9721] skb_copy_datagram_from_iter+0x306/0x720 [ 267.096507][ T9721] tun_get_user+0x15c3/0x3ce0 [ 267.096536][ T9721] ? aa_file_perm+0x13e/0x11b0 [ 267.096565][ T9721] ? aa_file_perm+0x13e/0x11b0 [ 267.096593][ T9721] ? aa_file_perm+0x3ed/0x11b0 [ 267.096624][ T9721] ? __pfx_tun_get_user+0x10/0x10 [ 267.096651][ T9721] ? __lock_acquire+0xab9/0xd20 [ 267.096679][ T9721] ? ref_tracker_alloc+0x318/0x460 [ 267.096695][ T9721] ? __lock_acquire+0xab9/0xd20 [ 267.096718][ T9721] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 267.096742][ T9721] ? tun_get+0x1c/0x2f0 [ 267.096766][ T9721] ? tun_get+0x1c/0x2f0 [ 267.096783][ T9721] ? tun_get+0x1c/0x2f0 [ 267.096806][ T9721] tun_chr_write_iter+0x113/0x200 [ 267.096839][ T9721] vfs_write+0x548/0xa90 [ 267.096873][ T9721] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 267.096904][ T9721] ? __pfx_vfs_write+0x10/0x10 [ 267.096944][ T9721] ? __fget_files+0x2a/0x420 [ 267.096974][ T9721] ksys_write+0x145/0x250 [ 267.096995][ T9721] ? __pfx_ksys_write+0x10/0x10 [ 267.097010][ T9721] ? rcu_is_watching+0x15/0xb0 [ 267.097041][ T9721] ? do_syscall_64+0xbe/0x3b0 [ 267.097067][ T9721] do_syscall_64+0xfa/0x3b0 [ 267.097087][ T9721] ? lockdep_hardirqs_on+0x9c/0x150 [ 267.097107][ T9721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.097127][ T9721] ? clear_bhb_loop+0x60/0xb0 [ 267.097150][ T9721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.097169][ T9721] RIP: 0033:0x7efddd18e929 [ 267.097186][ T9721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.097204][ T9721] RSP: 002b:00007efdde06a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 267.097225][ T9721] RAX: ffffffffffffffda RBX: 00007efddd3b5fa0 RCX: 00007efddd18e929 [ 267.097240][ T9721] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000003 [ 267.097253][ T9721] RBP: 00007efdde06a090 R08: 0000000000000000 R09: 0000000000000000 [ 267.097266][ T9721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 267.097278][ T9721] R13: 0000000000000000 R14: 00007efddd3b5fa0 R15: 00007ffd63820ee8 [ 267.097308][ T9721] [ 267.509537][ T9726] ./file0: Can't lookup blockdev [ 267.860128][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 267.875547][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 267.882042][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 267.894460][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 267.907523][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 267.914169][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 267.922779][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 267.929578][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 267.936100][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 267.943723][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 267.951008][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 267.971237][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 267.986325][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.003632][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.011916][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.066541][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.083388][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.097098][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.116627][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.123253][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.131109][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.144468][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.151618][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.158359][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.170729][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.177778][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.187271][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.195827][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.202883][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.222239][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.245367][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.252248][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.258859][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.271102][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.279069][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.286109][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.293447][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.300118][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.306561][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.314183][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.321246][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.327688][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.341188][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.348112][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.354555][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.362562][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.369638][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.391994][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.469649][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffe0 [ 268.486172][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.492947][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.500304][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.508859][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.516180][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.522867][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.539149][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.549251][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.556294][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.564440][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.571680][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.579498][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.638682][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.645322][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.655515][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.663404][ T9733] exFAT-fs (rnullb0): invalid boot record signature [ 268.675324][ T9733] exFAT-fs (rnullb0): failed to read boot sector [ 268.682734][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 268.693638][ T9733] exFAT-fs (rnullb0): failed to recognize exfat type [ 268.716914][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 268.737303][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 268.766061][ T43] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 268.783651][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 268.801813][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 268.818474][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 268.836125][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 268.859590][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 268.887968][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 268.905913][ T43] usb 3-1: device descriptor read/64, error -71 [ 268.914753][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 268.937190][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 268.962677][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 268.991288][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.003133][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.023297][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.039922][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.053774][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.065504][ T5847] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 269.074682][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.087417][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.099780][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.114168][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.128324][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.142923][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.155088][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 269.173873][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.191403][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.203989][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.226445][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.249119][ T5847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.261493][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.287864][ T5847] usb 5-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 269.299639][ T5847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.308015][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.318980][ T43] usb 3-1: device descriptor read/64, error -71 [ 269.336529][ T5847] usb 5-1: config 0 descriptor?? [ 269.346482][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.383638][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.396164][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.417272][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.428266][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1090'. [ 269.429326][ T43] usb usb3-port1: attempt power cycle [ 269.445957][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.468604][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.485300][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.503410][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.526804][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.544327][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.564176][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.584620][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.601275][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.615022][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.636994][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.654371][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.676940][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.695973][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.712690][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.731379][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.761395][ T5847] stadia 0003:18D1:9400.0015: item fetching failed at offset 4/5 [ 269.775553][ T43] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 269.789138][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.803986][ T5847] stadia 0003:18D1:9400.0015: parse failed [ 269.813289][ T5847] stadia 0003:18D1:9400.0015: probe with driver stadia failed with error -22 [ 269.825299][ T43] usb 3-1: device descriptor read/8, error -71 [ 269.840020][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.865314][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.887470][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.903509][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.921798][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.934682][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 269.978409][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 269.998378][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.030366][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.049636][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.074552][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.085685][ T43] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 270.112592][ T9768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.117506][ T43] usb 3-1: device descriptor read/8, error -71 [ 270.131696][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.147290][ T9768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.166979][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.215116][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.237544][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.247043][ T5894] usb 5-1: USB disconnect, device number 56 [ 270.252269][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.285359][ T9772] vxfs: WRONG superblock magic 00000000 at 1 [ 270.285553][ T43] usb usb3-port1: unable to enumerate USB device [ 270.308376][ T9772] vxfs: WRONG superblock magic 00000000 at 8 [ 270.331408][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.345520][ T9772] vxfs: can't find superblock. [ 270.355005][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.377260][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.418472][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.465641][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.500559][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.531242][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.570068][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.605651][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.642211][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.671070][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.691974][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.714003][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.734120][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.752405][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.763959][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.785286][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.806770][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.823030][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.841339][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.854434][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.874903][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.897638][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.914881][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.932050][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.944493][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 270.963307][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 270.975154][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.006292][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.054083][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.092756][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.130911][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.159975][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.213723][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.250589][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.273262][ T9791] FAT-fs (rnullb0): bogus number of reserved sectors [ 271.280322][ T9791] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 271.289522][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.306766][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.336106][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.360290][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.409463][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.452874][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.476315][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.535613][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.600435][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.656953][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.702237][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.727167][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.753053][ T9807] process 'syz.2.1102' launched './file0' with NULL argv: empty string added [ 271.769220][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.792228][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.816553][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.867683][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.906778][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.950006][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 271.962453][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 271.995643][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.050650][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.080466][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.104657][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.149429][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.172408][ T9826] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 272.186369][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.206023][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.248816][ T9836] /dev/rnullb0: Can't open blockdev [ 272.259117][ T9836] nvme_fabrics: unknown parameter or missing value ':syz1:E:18446744073709551611:!:/$:./cgroup:OPFC' in ctrl creation request [ 272.267564][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.294716][ T9822] XFS (rnullb0): Invalid superblock magic number [ 272.316950][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.359607][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.400898][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.431921][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.447918][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.474258][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.537194][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.581049][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.658444][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.658761][ T9848] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1114'. [ 272.700068][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.737383][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.769343][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.812063][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.834820][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.864330][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.899029][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.930220][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 272.968755][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 272.983842][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.000608][ T9865] omfs: Invalid superblock (0) [ 273.006362][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.025866][ T3634] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 273.064919][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.081816][ T9867] XFS (rnullb0): Invalid superblock magic number [ 273.097575][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.113427][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.127057][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.143234][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.157395][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.179554][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.193826][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.210514][ T3634] usb 6-1: config 0 has an invalid interface number: 30 but max is 0 [ 273.218989][ T3634] usb 6-1: config 0 has no interface number 0 [ 273.225249][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.236436][ T3634] usb 6-1: New USB device found, idVendor=0577, idProduct=d8b2, bcdDevice=94.e2 [ 273.246857][ T3634] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.256564][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.295148][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.321983][ T3634] usb 6-1: config 0 descriptor?? [ 273.363759][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.398203][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.468166][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.509918][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.576314][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.640772][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.705991][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.754384][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.755102][ T9906] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1127'. [ 273.781635][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.800364][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.827866][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.837739][ T9906] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1127'. [ 273.852996][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.883527][ T9906] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 273.894518][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 273.932371][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 273.943949][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.011126][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.049523][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.071278][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.083608][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.100337][ T9917] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 274.141067][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.169400][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.199717][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.213123][ T5894] usb 6-1: USB disconnect, device number 33 [ 274.214310][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.256525][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.282895][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.301815][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.314807][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.332017][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.343714][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.366192][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.385267][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.417203][ T5853] block nbd2: Receive control failed (result -32) [ 274.430256][ T9903] block nbd2: shutting down sockets [ 274.433888][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.452142][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.477432][ T9920] sctp: [Deprecated]: syz.6.1131 (pid 9920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 274.477432][ T9920] Use struct sctp_sack_info instead [ 274.566926][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.604677][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.659260][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.703923][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.760078][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.784145][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.823384][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.868399][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.888168][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.913225][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.961549][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 274.979610][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 274.993042][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 275.033608][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 275.058250][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable software MII access [ 275.097648][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to enable hardware MII access [ 275.124370][ T5934] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0336:ffffffb9 [ 275.138198][ T5934] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 275.145758][ T1213] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 275.156237][ T5934] usb 7-1: USB disconnect, device number 3 [ 275.176222][ T3634] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 275.325716][ T3634] usb 5-1: device descriptor read/64, error -71 [ 275.326188][ T1213] usb 3-1: Using ep0 maxpacket: 8 [ 275.346834][ T5847] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 275.363810][ T1213] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 275.375547][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.383592][ T1213] usb 3-1: Product: syz [ 275.387970][ T1213] usb 3-1: Manufacturer: syz [ 275.392582][ T1213] usb 3-1: SerialNumber: syz [ 275.406189][ T1213] usb 3-1: config 0 descriptor?? [ 275.488300][ T5847] usb 6-1: device descriptor read/64, error -71 [ 275.585741][ T3634] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 275.628395][ T1213] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 275.715596][ T3634] usb 5-1: device descriptor read/64, error -71 [ 275.726106][ T5847] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 275.806582][ T5952] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 275.827002][ T3634] usb usb5-port1: attempt power cycle [ 275.856202][ T5847] usb 6-1: device descriptor read/64, error -71 [ 275.971076][ T5847] usb usb6-port1: attempt power cycle [ 275.971229][ T5952] usb 7-1: config 0 has an invalid interface number: 3 but max is 0 [ 275.985042][ T5952] usb 7-1: config 0 has no interface number 0 [ 275.991212][ T5952] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 276.002680][ T5952] usb 7-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 276.016169][ T5952] usb 7-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 276.025215][ T5952] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.033372][ T5952] usb 7-1: Product: syz [ 276.037622][ T5952] usb 7-1: Manufacturer: syz [ 276.042268][ T5952] usb 7-1: SerialNumber: syz [ 276.050542][ T5952] usb 7-1: config 0 descriptor?? [ 276.058272][ T1213] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 276.079998][ T1213] usb 3-1: USB disconnect, device number 48 [ 276.165609][ T3634] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 276.188971][ T3634] usb 5-1: device descriptor read/8, error -71 [ 276.272094][ T5952] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 276.281550][ T5952] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 276.291810][ T5952] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 276.300912][ T5952] usb 7-1: media controller created [ 276.321820][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.329419][ T5847] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 276.357044][ T5847] usb 6-1: device descriptor read/8, error -71 [ 276.369533][ T5952] DVB: Unable to find symbol dib7000p_attach() [ 276.377217][ T5952] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 276.426807][ T3634] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 276.435914][ T5952] rc_core: IR keymap rc-dib0700-rc5 not found [ 276.442010][ T5952] Registered IR keymap rc-empty [ 276.446180][ T3634] usb 5-1: device descriptor read/8, error -71 [ 276.451795][ T5952] dvb-usb: could not initialize remote control. [ 276.463832][ T5952] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 276.476023][ T5952] dib0700: There's no endpoint for remote controller [ 276.555831][ T3634] usb usb5-port1: unable to enumerate USB device [ 276.595590][ T5847] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 276.599381][ T9951] ------------[ cut here ]------------ [ 276.610336][ T9951] usb 7-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 276.616483][ T5847] usb 6-1: device descriptor read/8, error -71 [ 276.634291][ T9951] WARNING: drivers/usb/core/urb.c:413 at usb_submit_urb+0x1128/0x1830, CPU#0: syz.2.1142/9951 [ 276.645661][ T9951] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 276.649868][ T9951] CPU: 0 UID: 0 PID: 9951 Comm: syz.2.1142 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 276.662019][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 276.672153][ T9951] RIP: 0010:usb_submit_urb+0x1128/0x1830 [ 276.678017][ T9951] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 c0 6e 56 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 69 ff 53 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 1a f4 ff ff 89 e9 80 [ 276.698096][ T9951] RSP: 0018:ffffc90003c77590 EFLAGS: 00010246 [ 276.705770][ T9951] RAX: c590fdcade2e3500 RBX: ffff888033898900 RCX: ffff88802a2c0000 [ 276.713804][ T9951] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 276.721868][ T9951] RBP: 1ffff1100a2ee4bc R08: ffffffff8fe37f37 R09: 1ffffffff1fc6fe6 [ 276.731371][ T9951] R10: dffffc0000000000 R11: fffffbfff1fc6fe7 R12: dffffc0000000000 [ 276.740805][ T9951] R13: ffff8880517725e0 R14: 0000000080000480 R15: ffff8880206e1c60 [ 276.748852][ T9951] FS: 00007efdde06a6c0(0000) GS:ffff8881257af000(0000) knlGS:0000000000000000 [ 276.758077][ T9951] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.764813][ T9951] CR2: 0000200000001140 CR3: 00000000517a0000 CR4: 00000000003526f0 [ 276.765585][ T5847] usb usb6-port1: unable to enumerate USB device [ 276.772888][ T9951] Call Trace: [ 276.782635][ T9951] [ 276.785720][ T9951] usb_start_wait_urb+0x114/0x4c0 [ 276.790766][ T9951] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 276.796455][ T9951] usb_control_msg+0x232/0x3e0 [ 276.801270][ T9951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.807424][ T9951] dib0700_i2c_xfer+0xba7/0xf70 [ 276.812322][ T9951] __i2c_transfer+0x871/0x2170 [ 276.817206][ T9951] ? __i2c_smbus_xfer+0xa25/0x1e50 [ 276.822340][ T9951] ? __pfx___i2c_transfer+0x10/0x10 [ 276.827646][ T9951] ? __kasan_kmalloc+0x93/0xb0 [ 276.833717][ T9951] ? __i2c_smbus_xfer+0xa25/0x1e50 [ 276.839856][ T9951] __i2c_smbus_xfer+0xfb0/0x1e50 [ 276.844816][ T9951] ? __lock_acquire+0xab9/0xd20 [ 276.849743][ T9951] ? do_raw_spin_lock+0x121/0x290 [ 276.854802][ T9951] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 276.860531][ T9951] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 276.866488][ T9951] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 276.872406][ T9951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 276.878829][ T9951] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 276.884244][ T9951] i2c_smbus_xfer+0x275/0x3c0 [ 276.889048][ T9951] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 276.894274][ T9951] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 276.899424][ T9951] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 276.905728][ T9951] i2cdev_ioctl+0x5d3/0x7f0 [ 276.910271][ T9951] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 276.915320][ T9951] ? __fget_files+0x2a/0x420 [ 276.920031][ T9951] ? __fget_files+0x3a0/0x420 [ 276.924736][ T9951] ? bpf_lsm_file_ioctl+0x9/0x20 [ 276.929756][ T9951] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 276.936107][ T9951] __se_sys_ioctl+0xf9/0x170 [ 276.941839][ T9951] do_syscall_64+0xfa/0x3b0 [ 276.946612][ T9951] ? lockdep_hardirqs_on+0x9c/0x150 [ 276.951831][ T9951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.958003][ T9951] ? clear_bhb_loop+0x60/0xb0 [ 276.962705][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.968702][ T9951] RIP: 0033:0x7efddd18e929 [ 276.973139][ T9951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 276.992861][ T9951] RSP: 002b:00007efdde06a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.001348][ T9951] RAX: ffffffffffffffda RBX: 00007efddd3b5fa0 RCX: 00007efddd18e929 [ 277.009440][ T9951] RDX: 0000200000000440 RSI: 0000000000000720 RDI: 0000000000000003 [ 277.017551][ T9951] RBP: 00007efddd210b39 R08: 0000000000000000 R09: 0000000000000000 [ 277.025610][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.034872][ T9951] R13: 0000000000000000 R14: 00007efddd3b5fa0 R15: 00007ffd63820ee8 [ 277.044017][ T9951] [ 277.047201][ T9951] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.054508][ T9951] CPU: 0 UID: 0 PID: 9951 Comm: syz.2.1142 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 277.065971][ T9951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 277.076037][ T9951] Call Trace: [ 277.079327][ T9951] [ 277.082258][ T9951] dump_stack_lvl+0x99/0x250 [ 277.086859][ T9951] ? __asan_memcpy+0x40/0x70 [ 277.091462][ T9951] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.096660][ T9951] ? __pfx__printk+0x10/0x10 [ 277.101266][ T9951] panic+0x2db/0x790 [ 277.105178][ T9951] ? __pfx_panic+0x10/0x10 [ 277.109617][ T9951] __warn+0x334/0x4c0 [ 277.113606][ T9951] ? usb_submit_urb+0x1128/0x1830 [ 277.118641][ T9951] ? usb_submit_urb+0x1128/0x1830 [ 277.123673][ T9951] report_bug+0x2be/0x4f0 [ 277.127998][ T9951] ? usb_submit_urb+0x1128/0x1830 [ 277.133025][ T9951] ? usb_submit_urb+0x1128/0x1830 [ 277.138049][ T9951] ? usb_submit_urb+0x112a/0x1830 [ 277.143074][ T9951] handle_bug+0x84/0x160 [ 277.147319][ T9951] exc_invalid_op+0x1a/0x50 [ 277.151903][ T9951] asm_exc_invalid_op+0x1a/0x20 [ 277.156744][ T9951] RIP: 0010:usb_submit_urb+0x1128/0x1830 [ 277.162374][ T9951] Code: 0f b6 44 05 00 84 c0 0f 85 e8 05 00 00 45 0f b6 45 00 48 c7 c7 c0 6e 56 8c 48 8b 74 24 10 4c 89 fa 44 89 f1 e8 69 ff 53 fa 90 <0f> 0b 90 90 49 bc 00 00 00 00 00 fc ff df e9 1a f4 ff ff 89 e9 80 [ 277.182060][ T9951] RSP: 0018:ffffc90003c77590 EFLAGS: 00010246 [ 277.188130][ T9951] RAX: c590fdcade2e3500 RBX: ffff888033898900 RCX: ffff88802a2c0000 [ 277.196106][ T9951] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 277.204086][ T9951] RBP: 1ffff1100a2ee4bc R08: ffffffff8fe37f37 R09: 1ffffffff1fc6fe6 [ 277.212077][ T9951] R10: dffffc0000000000 R11: fffffbfff1fc6fe7 R12: dffffc0000000000 [ 277.220048][ T9951] R13: ffff8880517725e0 R14: 0000000080000480 R15: ffff8880206e1c60 [ 277.228044][ T9951] usb_start_wait_urb+0x114/0x4c0 [ 277.233068][ T9951] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 277.238627][ T9951] usb_control_msg+0x232/0x3e0 [ 277.243391][ T9951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.249717][ T9951] dib0700_i2c_xfer+0xba7/0xf70 [ 277.254581][ T9951] __i2c_transfer+0x871/0x2170 [ 277.259356][ T9951] ? __i2c_smbus_xfer+0xa25/0x1e50 [ 277.264462][ T9951] ? __pfx___i2c_transfer+0x10/0x10 [ 277.269655][ T9951] ? __kasan_kmalloc+0x93/0xb0 [ 277.274417][ T9951] ? __i2c_smbus_xfer+0xa25/0x1e50 [ 277.279522][ T9951] __i2c_smbus_xfer+0xfb0/0x1e50 [ 277.284452][ T9951] ? __lock_acquire+0xab9/0xd20 [ 277.289307][ T9951] ? do_raw_spin_lock+0x121/0x290 [ 277.294340][ T9951] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 277.299704][ T9951] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 277.305590][ T9951] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 277.311472][ T9951] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 277.317799][ T9951] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 277.323169][ T9951] i2c_smbus_xfer+0x275/0x3c0 [ 277.327839][ T9951] ? __pfx_i2c_smbus_xfer+0x10/0x10 [ 277.333034][ T9951] i2cdev_ioctl_smbus+0x43d/0x6d0 [ 277.338071][ T9951] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 277.343645][ T9951] i2cdev_ioctl+0x5d3/0x7f0 [ 277.348151][ T9951] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 277.353188][ T9951] ? __fget_files+0x2a/0x420 [ 277.358134][ T9951] ? __fget_files+0x3a0/0x420 [ 277.362816][ T9951] ? bpf_lsm_file_ioctl+0x9/0x20 [ 277.367757][ T9951] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 277.372778][ T9951] __se_sys_ioctl+0xf9/0x170 [ 277.377396][ T9951] do_syscall_64+0xfa/0x3b0 [ 277.381891][ T9951] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.387172][ T9951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.393240][ T9951] ? clear_bhb_loop+0x60/0xb0 [ 277.397910][ T9951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.403789][ T9951] RIP: 0033:0x7efddd18e929 [ 277.408199][ T9951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.427885][ T9951] RSP: 002b:00007efdde06a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 277.436294][ T9951] RAX: ffffffffffffffda RBX: 00007efddd3b5fa0 RCX: 00007efddd18e929 [ 277.444261][ T9951] RDX: 0000200000000440 RSI: 0000000000000720 RDI: 0000000000000003 [ 277.452226][ T9951] RBP: 00007efddd210b39 R08: 0000000000000000 R09: 0000000000000000 [ 277.460193][ T9951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.468255][ T9951] R13: 0000000000000000 R14: 00007efddd3b5fa0 R15: 00007ffd63820ee8 [ 277.476284][ T9951] [ 277.480043][ T9951] Kernel Offset: disabled [ 277.484374][ T9951] Rebooting in 86400 seconds..