last executing test programs: 4m9.734796237s ago: executing program 2 (id=480): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f00003f6000/0x1000)=nil, 0x1000, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', '', [{0x20, '.)('}, {0x20, '#! '}, {0x20, '#! '}]}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m9.564612121s ago: executing program 2 (id=481): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r2, 0x40184152, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000840), &(0x7f0000000880)=0x4) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x3a, 0x37, 0x5, 0x20, 0x781, 0x5, 0x5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xe6, 0x2, 0x2, 0x5b, 0xbd, 0x97, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) setresgid(0xee00, 0xee01, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000001100)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x3}], {0x10, 0x3}, {0x20, 0x7}}, 0x2c, 0x1) setreuid(0xffffffffffffffff, 0xee01) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$lan78xx(r3, &(0x7f00000009c0)={0x14, 0x0, 0x0}, &(0x7f0000000b80)={0x34, &(0x7f0000000a00)={0x40, 0x24, 0x3, "df2485"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0xc0145b0e, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) socket$inet6_sctp(0xa, 0x7, 0x84) 4m8.456418893s ago: executing program 0 (id=497): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r0) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2501000014001800008000756470"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f00000000c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) (async) r5 = openat$cgroup_ro(r3, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x38) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r2, 0xd6baf000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) 4m8.419280968s ago: executing program 0 (id=499): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) (async) r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x6, 0x3, 0x2000000, 0x0, "f700", '\x00', "030200", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffbdae00", "0c436d743c97c443084000", "ff81000000008000"]}) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000200)=[@in={0x2, 0x4e24, @empty}], 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) listen(r2, 0x100) sendmsg$inet_sctp(r2, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)=')', 0x1}], 0x1, &(0x7f0000000340)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x0, 0x8}}], 0x38, 0x8000}, 0x20000000) (async) fanotify_mark(r0, 0x1, 0x0, r0, &(0x7f0000000040)='./file0\x00') (async) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x201c005, 0x0) 4m8.33665323s ago: executing program 0 (id=500): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000200)={"12b60aed3a5a0147a72cdcd7ee115b7b", 0x0, 0x0, {0x6, 0x81}, {0x4, 0x1}, 0x1, [0x5, 0xffffffffffffc746, 0x0, 0x1, 0x10001, 0xf, 0x2, 0x7fffffffffffffff, 0x1, 0x8000, 0x9, 0x2, 0x4, 0x3, 0xffff, 0xff]}) openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x145342, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x1000001, 0x6100) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x4, 0x48dd, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac100875397bdb22d0000b420a1a93c9e01177d3d058dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd000000000000000000000000001000", [0x0, 0x2000000000001]}}) 4m8.335682494s ago: executing program 0 (id=501): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) memfd_create(&(0x7f0000000500)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\x01\x00\x00\x00\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94_\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d:\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5\x01\x00\x00\x00\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\x99\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10\x8d\xc8T\x8d\xb6^\x00\xdf;\xb7/H\xd3-\xfd\xa4\b,P-\xae}\xc3\x7f\xbfu[\xd5\xb09\x88\r\x8b%\xfe.\xda\xb1\xd7\x9f0\x06W334\xe9\xd5<\x91\xafb\xe1\\\xaf', 0x1) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1817c1, 0x0) mount$nfs4(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x2, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f61636ce3c0e702b07d8badd05ba7aed04d8e9208fd62423df1dba0954000b7604b971739a3dd08d170225a57d26ec567a418337187435294cf1c23da240de8943bf880e2ff54771d49a44d0b2ef613fd0ed2d5ebde9682760e8beb3673b3d9b627fdb470652c8b016c166a7b7e9581e36382b82af7e41a834fcf2ac160007914a34ccb00000000000000"]) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) 4m8.291507648s ago: executing program 0 (id=502): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xe6683000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={0x0, 0x54}}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ioctl$IOCTL_VMCI_SET_NOTIFY(r1, 0x7cb, &(0x7f0000000000)={0xffffffffffffffff, 0x2, 0x3}) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4m8.008519353s ago: executing program 0 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xfffffffffffffe9a, 0x83, 0x1}}]}, 0x58}}, 0x4050) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 4m7.95286288s ago: executing program 32 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x58, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0xfffffffffffffe9a, 0x83, 0x1}}]}, 0x58}}, 0x4050) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 4m5.728488206s ago: executing program 2 (id=511): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4095, 0xfff}, {&(0x7f0000002040)=""/4120, 0x1018}, {&(0x7f00000006c0)=""/297, 0x129}, {&(0x7f0000000340)=""/191, 0xbf}, {&(0x7f0000000640)=""/105, 0x69}, {&(0x7f0000000a80)=""/225, 0xe1}], 0x6}, 0x40010000) sendmsg$inet(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r1, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) 4m5.537073593s ago: executing program 2 (id=512): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x20000002) setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000000c0)="8d20e428c5e0bfc2ad506b931cab86e1bcfd7945a76cbc06e24f8bb459fd81954d8224bb8c0ef4f6b569ec4b718bf997d67413eb326b45fa729b696b8621464abd51acf028aa00366fe03babda5c514856ce63171124a25904628675761bbfb381f52a46245e4701fde0d888ab047645f99e8c683fd4a382c34f2da2992b54b394016e48fabbbe040ff371a99fa5c966b6fdf3b49f0788365d11", 0x9a) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 4m4.606667516s ago: executing program 2 (id=515): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 4m4.386523173s ago: executing program 2 (id=517): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc069610000000000000003"], 0x28) r4 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x541b, 0x1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r5, r0, 0x0, 0x7ffff000) 3m49.26801337s ago: executing program 33 (id=517): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket(0x2c, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x8000, 0x0, 0x0, 0x3, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f00000011c0)=ANY=[@ANYBLOB="8704040000000000fc02000000619cc069610000000000000003"], 0x28) r4 = inotify_init1(0x800) ioctl$INOTIFY_IOC_SETNEXTWD(r4, 0x541b, 0x1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f2, &(0x7f0000000500)={'syztnl1\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) r6 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r5, r0, 0x0, 0x7ffff000) 8.880415463s ago: executing program 1 (id=2110): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000200), 0x4) listen(r0, 0xfff) r1 = socket$can_raw(0x1d, 0x3, 0x1) listen(r1, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 7.978149276s ago: executing program 1 (id=2119): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000800)={0x1, {0x0, 0x2000000}, {0xfffffffc, 0x0, 0xfffffffc}}) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) (async) ioctl$sock_bt_hci(r2, 0x400448ca, 0x0) (async) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x3) (async) pwritev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="080000000040de0a9b9397efa7716b2145fdfacd39626d2e0ad5fdb26c4721b58393823f372742e02bc83ced6e80782dc88fc7a98f3486129ac52598399f05a748aa60a688fa0d9b3d86322ca162d8b7864f5e44b97b7097bea92f4b8a6f19199ab8bcd2605419e587bda21d684f1c339e22fe2e0b11cce36f1fcc7ff23a56785c6f116fd2b0d8929692176ef88593b3df6f3d62389434a65e5f2b7eb8d968cf88a168f6e56c7d818f234f18647623b6c86a4cc5e20737e228c3b89c98f8", 0x6a}], 0x1, 0x0, 0x4) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='mqueue\x00', 0x0, 0x0) 7.868451161s ago: executing program 1 (id=2120): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000180)={0x2c, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f00000000c0)={0x4, "e89b03f8dd96a86a807879ad9328dcd9f2667979b3cf3b0cc5fb20b2c37b4335", 0x200, 0xfffffff4, 0x3ff, 0x10, 0x4}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002100)='./binderfs2/custom1\x00', 0x2, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @raw_data="3ef92ce3f9c95a72603c5a56255cbd4a93d9620a1a5c37f0903adf5035e68ea0152a8e66a35dc6d2647b5c4c553bb6f0990fccc55cf37220e7e9707a806a2102bd52fb53e44dba726eac7a1fa4e5ff6e5f433bf9e9448dca574dd68591b1cf1eb1e7f48e1f7d8f83cf36a90680a7f59c475fc399e56799e2c22c60f17e3a2b22c98408f595ba5b4c73bb95249ebfb66e03106eeaf5897fffa76f0d5bf9d4a3de71a4c4e5fbd15960cdb254ca4ca55541e880c59b03aef238fd5abb4cf72afe4eb3ad02b79094e55e"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) 4.799980833s ago: executing program 5 (id=2138): prlimit64(0x0, 0x9, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x4) r1 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(r4, 0xc00464af, &(0x7f00000003c0)) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) r5 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) read$msr(r5, &(0x7f00000002c0)=""/195, 0xc3) timer_create(0x9, &(0x7f0000000180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) io_setup(0x6, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) mmap$xdp(&(0x7f0000e58000/0x2000)=nil, 0x2000, 0x1000008, 0x4e071, 0xffffffffffffffff, 0x80000000) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x80}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) madvise(&(0x7f0000ecb000/0x4000)=nil, 0x4000, 0x6f) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 4.701862827s ago: executing program 5 (id=2140): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="eb7a2bbd7000fcdbdf252100000009001f007068793120000000050020"], 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x40882) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async, rerun: 64) syz_usb_connect(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100003b7431087d077a6210000102030109022400010000000009040000020338b20009050e0000000000000905b3af3d9afa"], 0x0) (rerun: 64) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async, rerun: 32) r3 = userfaultfd(0x801) (async, rerun: 32) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_VOICE(r4, 0x112, 0xb, 0x0, &(0x7f0000000080)) (async) read(r3, 0x0, 0x47) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x10, r2, 0x6c2fd000) 3.72064836s ago: executing program 3 (id=2144): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) (async) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000040)) 3.691175743s ago: executing program 1 (id=2145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)={0x20, 0x19, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet(r2, &(0x7f0000000000)="1c3749534d339b90ccd170c1b551bbe7e36e91fc38edec7bb7987bce408d5394453b11c6c5e2543d092ca16d15c53ec99c17ca020f84bda871c9559ac96cde84882544b00ebe186e591ed6469f08e152d4f6b4f739bbe2bfb61813ca6b9244dec3d40921f384d78bd402ff30ab5bffb78ec35f830a872c664d97228f4e266eb0fa1711a1d9ef5a84f524942458034b790bb719f48541fd6cb668243b42eacba9d7a8ae9dad8fd1309bc618463742d164a3ffc4bc7975a7b3b76066485a1d3e4e069156b9e883d7f46f90b93346", 0xcd, 0xc0, &(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r3, 0x111, 0x5, 0x8, 0x4) connect$pppl2tp(r3, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x1, 0x3, 0x1, {0xa, 0x4e21, 0x9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x5}}}, 0x32) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x7ffff000) 3.661527256s ago: executing program 3 (id=2146): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) ioctl$TCXONC(r0, 0x4b45, 0x1) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000800)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090584"], 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0x4, 0x0, &(0x7f0000000680)) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000280)={&(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[{}, {}], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x6, 0x3}) (async) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x5, 0x2, 0x2000003}) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x0, 0x7ffffff5, 0xa, 0x1ff, 0x1}) (async) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000400)={0x401, 0x3, &(0x7f0000000300)=[r4, r7, 0x0], &(0x7f0000000340)=[0xcb22, 0x8], &(0x7f0000000380)=[0x0], &(0x7f00000003c0)=[0x3, 0x7, 0x9], 0x0, 0xffffffffffffffff}) (async, rerun: 64) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) (async, rerun: 64) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f00000000c0)={'veth1\x00', 0x3}) 3.576564613s ago: executing program 1 (id=2147): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c000000040a03000000000000000000020000080900010073797a30"], 0x2c}, 0x1, 0x0, 0x0, 0x48840}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'veth0_to_hsr\x00', 0x0}) r7 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000002f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004000)=[@pktinfo={{0x24, 0x29, 0x32, {@private2, r6}}}], 0x28}}], 0x1, 0x20005485) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r8, 0x5708e000) 3.516522997s ago: executing program 3 (id=2148): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x12, r0, 0xa0e52000) mincore(&(0x7f0000ffe000/0x2000)=nil, 0x2000, &(0x7f0000000000)=""/176) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) madvise(&(0x7f00002a3000/0x4000)=nil, 0x4000, 0xa) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async, rerun: 32) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xdddd1000, 0x10, 0x0, 0x8, 0x2, 0x3, 0x4, 0x0, 0x4, 0x9, 0x10}, {0xcccff001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, 0x2, 0x8, 0x4}, {0xeeef0000, 0xdddd0000, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x3000, 0xffff1000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4, 0x8}, {0xeeee8000, 0x3000, 0xb, 0x0, 0x0, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x5000, 0xd000, 0x0, 0x7, 0xc, 0x0, 0x2, 0x0, 0x4, 0x10, 0x80}, {0xdddd1000, 0x0, 0xa, 0x6, 0x0, 0x0, 0x2, 0x4, 0x10}, {0xeeee8000, 0x3000, 0x0, 0x1, 0xb, 0x3, 0x0, 0x1a, 0x26, 0x0, 0xff}, {0x80ac000}, {0x1, 0x2}, 0xddf8ffdb, 0x0, 0xf000, 0x70, 0x0, 0x0, 0x5000, [0xfffffffffffffffc, 0x0, 0x1, 0xfffffffffffffffc]}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 32) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) (async, rerun: 32) ptrace(0x10, r1) (async, rerun: 64) ptrace$setregset(0x4205, r1, 0x204, &(0x7f00000000c0)={0x0}) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) (async) sendmsg$inet(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.390997625s ago: executing program 3 (id=2151): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x78) sigaltstack(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.992540073s ago: executing program 5 (id=2153): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$HIDIOCGDEVINFO(r2, 0x801c4803, &(0x7f00000000c0)=""/200) r3 = socket$can_j1939(0x1d, 0x2, 0x7) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) sendfile(r3, r0, 0x0, 0x7ffff000) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2.840458157s ago: executing program 3 (id=2154): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000de93000040"]) sendfile(r1, r0, &(0x7f0000000000)=0x7ffffffa, 0x10) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f00000000c0), 0x2, 0x1) 2.785604213s ago: executing program 3 (id=2157): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0xb27, 0x4) connect$inet(r1, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto(r1, &(0x7f0000000400)="50fb", 0x2, 0x4008044, 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x1}], 0x1, 0x0, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 1.216843609s ago: executing program 5 (id=2163): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000080)={0xa}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 888.052879ms ago: executing program 5 (id=2166): r0 = gettid() setfsgid(0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/psched\x00') read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) lstat(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002140), &(0x7f0000002180)=0x0, &(0x7f00000021c0)=0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002200)={0xb8, 0x0, r2, [{{0x4, 0x2, 0x70, 0x100000000, 0x5, 0x70e, {0x6, 0xbf, 0xd55, 0xab, 0x7, 0xe, 0x6, 0x80, 0x8ef7, 0x2000, 0x7ff, r4, r5, 0x8, 0x91b1}}, {0x6, 0x1, 0xb, 0x3, 'net/psched\x00'}}]}, 0xb8) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f00000022c0)={'rose0\x00'}) getpeername$tipc(0xffffffffffffffff, &(0x7f0000002300), &(0x7f0000002340)=0x10) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r3, 0x0, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002380)) r7 = accept4$ax25(r1, &(0x7f00000023c0)={{0x3, @netrom}, [@rose, @netrom, @rose, @rose, @bcast, @default, @null, @null]}, &(0x7f0000002440)=0x48, 0x1000) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002480)={{{@in6=@ipv4, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@private}}, &(0x7f0000002580)=0xe8) write$FUSE_STATX(r1, &(0x7f00000025c0)={0x130, 0x0, r2, {0xed6c, 0x1bf6, 0x0, '\x00', {0x2, 0x3, 0x4, 0x3, r8, r6, 0x2000, '\x00', 0x3, 0xbd, 0x3ee98000000, 0x1bcf, {0x10000, 0x1}, {0x10, 0x6}, {0x0, 0x8}, {}, 0x0, 0x6, 0x7ff, 0x8}}}, 0x130) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f0000002880)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002840)={&(0x7f0000002740)={0xe0, 0x4, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4d805ba6}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_to_bond\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip_vti0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_hsr\x00'}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_1\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7a37c985}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, 0xe0}, 0x1, 0x0, 0x0, 0x880}, 0x40000) ptrace$setregset(0x4205, r0, 0x0, &(0x7f00000029c0)={&(0x7f00000028c0)="10f547e65831b924e8342d35fae661883995f3d0d9e08b74859a58f0833110560d688d5ec8452900dd6768bb5bad86233bbc3e50e92403b404d31952b3452bdc5c5fcd2766174742976064a0eefd78da20a0f904de1faf8d8b25030ff1e5a71556c62f747dcb13e9b1763bd93a57eb2a821435bb1b2920fd7f3af011441d0a805c6f1f84ac88492253374d2a15d26c2e20d6865505db57c1cb65bce9e89688274b9b5af243216887a09e6df0e449db1ec9494ac71cff1c4faaa9e9254bdfda2503229ad578372ef669de7782bd38c7a9068938390a05309e52e56a81970f428561737e94fe", 0xe5}) connect$netrom(r1, &(0x7f0000002a00)={{0x3, @null, 0x3}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) sched_getscheduler(r0) syz_clone3(&(0x7f0000002cc0)={0x100800000, &(0x7f0000002a80), &(0x7f0000002ac0)=0x0, &(0x7f0000002b00), {0x34}, &(0x7f0000002b40)=""/156, 0x9c, &(0x7f0000002c00)=""/119, &(0x7f0000002c80)=[r0], 0x1, {r1}}, 0x58) write$FUSE_LK(r1, &(0x7f0000002d40)={0x28, 0x0, r2, {{0x3, 0x3ff, 0x2, r10}}}, 0x28) socket$inet_mptcp(0x2, 0x1, 0x106) fchmod(r7, 0x130) mount$9p_xen(&(0x7f0000002d80), &(0x7f0000002dc0)='./file0\x00', &(0x7f0000002e00), 0x0, &(0x7f0000002e40)={'trans=xen,', {[{@loose}, {@debug={'debug', 0x3d, 0x8}}, {@version_L}, {@mmap}, {@version_9p2000}, {@afid={'afid', 0x3d, 0x9}}], [{@flag='nomand'}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x32, 0x36, 0x63, 0x64, 0x34, 0x30, 0x39], 0x2d, [0x64, 0x33, 0x38, 0x64], 0x2d, [0x66, 0x34, 0x32, 0x62], 0x2d, [0x31, 0x62, 0x32, 0x35], 0x2d, [0x30, 0x35, 0x36, 0x33, 0x38, 0x38, 0x66, 0x64]}}}, {@audit}, {@pcr={'pcr', 0x3d, 0x8}}]}}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002f00)) recvmmsg(r9, &(0x7f0000007480)=[{{&(0x7f0000002f40)=@pppol2tpin6, 0x80, &(0x7f0000004440)=[{&(0x7f0000002fc0)=""/112, 0x70}, {&(0x7f0000003040)=""/75, 0x4b}, {&(0x7f00000030c0)=""/209, 0xd1}, {&(0x7f00000031c0)=""/247, 0xf7}, {&(0x7f00000032c0)=""/200, 0xc8}, {&(0x7f00000033c0)=""/4096, 0x1000}, {&(0x7f00000043c0)=""/88, 0x58}], 0x7, &(0x7f00000044c0)=""/192, 0xc0}, 0x3}, {{&(0x7f0000004580)=@qipcrtr, 0x80, &(0x7f0000004900)=[{&(0x7f0000004600)=""/179, 0xb3}, {&(0x7f00000046c0)=""/58, 0x3a}, {&(0x7f0000004700)=""/125, 0x7d}, {&(0x7f0000004780)=""/77, 0x4d}, {&(0x7f0000004800)=""/214, 0xd6}], 0x5, &(0x7f0000004980)=""/252, 0xfc}, 0x3}, {{&(0x7f0000004a80)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000004b00)=""/24, 0x18}, {&(0x7f0000004b40)=""/249, 0xf9}, {&(0x7f0000004c40)=""/125, 0x7d}, {&(0x7f0000004cc0)=""/123, 0x7b}, {&(0x7f0000004d40)=""/6, 0x6}, {&(0x7f0000004d80)=""/198, 0xc6}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/102, 0x66}], 0x9}, 0x7}, {{&(0x7f0000006fc0)=@alg, 0x80, &(0x7f0000007100)=[{&(0x7f0000007040)=""/80, 0x50}, {&(0x7f00000070c0)=""/12, 0xc}], 0x2, &(0x7f0000007140)=""/2, 0x2}, 0x8}, {{0x0, 0x0, &(0x7f0000007380)=[{&(0x7f0000007180)=""/193, 0xc1}, {&(0x7f0000007280)=""/218, 0xda}], 0x2, &(0x7f00000073c0)=""/181, 0xb5}, 0x7ff}], 0x5, 0x12160, &(0x7f00000075c0)) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000007600)={0x0, 0x1}, 0x4) setsockopt$ax25_SO_BINDTODEVICE(r7, 0x101, 0x19, &(0x7f0000007640)=@bpq0, 0x10) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000007680)=0x80000001) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000076c0)={'wlan1\x00'}) 704.34271ms ago: executing program 5 (id=2167): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) read(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a504033007c8d1b93c010902120011000200000904"], 0x0) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e8000000110001226db148ec302e607caaff68ed51b22547d66558fa68c80ad67f6098c6f70b1d340f7991be1e7afdeb68d622bd65b2724e2df36a536d0f37700ad7244624c6f375705db353ccec929c"], 0xe8}, 0x1, 0x0, 0x0, 0x814}, 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) sendmsg$nl_crypto(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x800}, 0x2000c091) syz_usb_control_io$uac1(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x44090) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x1, 0x0) 601.820689ms ago: executing program 4 (id=2168): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f00000002c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 551.457767ms ago: executing program 4 (id=2169): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async, rerun: 32) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x42082) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2400c035}, 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f020000390005", 0x7}], 0x1}, 0x0) (async) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006a"], 0xfe33) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x1, 0x2}}) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0xc0f85403, &(0x7f0000000040)) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="200000001900157d00000000fcffffff0a00000000cd"], 0x20}], 0x1}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 468.330037ms ago: executing program 4 (id=2170): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000035c0), r2) sendmmsg$alg(r2, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="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", 0x16a}, {0x0}, {&(0x7f00000000c0)="ed8f33bf1e0dc27785645f22e5841d47daff989738a6fd18b251ac71dd637802365f0b3a9c02", 0x26}, {&(0x7f0000000680)="fa2483068eed2f0cc285ec25bf79c2114ad054efec53c5873e73ea931e5949a260e606ba619254d088de2e9e00000000c1078f2db6c9d08a6a987a7ab8d09850e79da0234b57572bee7611e26e82e986a22f71e5b78b63c8985cb451e184d85aa8a6504a74e03e8ceb8f59021a73fcc0", 0x70}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24000810) (async) sendmmsg$alg(r2, &(0x7f0000001c40)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000780)="9140a4bdea648a53aa2106b893d709c28a80626adee9be3050ded5cdd8b07ed1c91ec2a922bce0ce9acf5e5980f5fa9d10fa8ba4993c2ba42fa741ec6c7e01fa267cf6337991d69ec91e5d24d2284d63da302f287dcf255c1dbc0770eb8dec6ee2eb516795eeef969834e4d1583c16fe40ec9b2dc9318af13c37d83e7d706a66f76a8668388f82e0f64370e1671a750e1e292337fe91622dca566ca00b3ed8fca5db33d55c077d93c0d4ad6fa35abfa24902c840650420f91853876b2f6833429c8a2cb9e58ae4a6e2182d37da57481d6fb6ac4fddb6fb74abd31a2d573771f41e3ba1e7cfc6549e41463c98acae92bff6cb4e9dd8cff6791ac192ef82566fbdbf009d836086d9b9e5e267238a586a6f1a643e507202672bfd766e6109c1c9e45af67a8043b1580502dc2288dc9a54469fab462aeee93fa39c323c87bcfd4831b4e5b25327790b9cd8af347272849d0e1410119e32a7dd29c7ff9b68c9c73076084cbfee9f8d57855d23", 0x16a}, {0x0}, {&(0x7f00000000c0)="ed8f33bf1e0dc27785645f22e5841d47daff989738a6fd18b251ac71dd637802365f0b3a9c02", 0x26}, {&(0x7f0000000680)="fa2483068eed2f0cc285ec25bf79c2114ad054efec53c5873e73ea931e5949a260e606ba619254d088de2e9e00000000c1078f2db6c9d08a6a987a7ab8d09850e79da0234b57572bee7611e26e82e986a22f71e5b78b63c8985cb451e184d85aa8a6504a74e03e8ceb8f59021a73fcc0", 0x70}], 0x4, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x895}], 0x1, 0x24000810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xf8, 0x2d, 0x20, 0x70bd2b, 0x25dfdbfb, {0xe}, [@typed={0xc, 0x6d, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x3e, 0xcb, 0x0, 0x1, [@generic="a28a672cce98e01fa0890cf60f589ac2f3952d9f4e7048ecf98ad059fd07", @typed={0x19, 0x20, 0x0, 0x0, @binary="2834e554cc884d5e3315d3182fd94871d386ff822b"}]}, @nested={0x98, 0x142, 0x0, 0x1, [@generic="9c2747e561cba9043ed659e62b54ba9aaaad6826185c65728bd3f8a62b01b2933d260b3248dcc951d4b1ea5afda25550b27c0344f18dfaca00591df124106b5bdc44f67dbad7dd49ca26164d7f86238c2dbf0cbff6b0c68c0e00d64dda185b0360e6715b99fee1d1b5a914343dd50e955f29736449f10f7cd8d71579c4b0c01d4ab4fe6343bf327ece618b9b6e9be773b1c6c15f"]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008010) (async) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0xf8, 0x2d, 0x20, 0x70bd2b, 0x25dfdbfb, {0xe}, [@typed={0xc, 0x6d, 0x0, 0x0, @str='nl80211\x00'}, @nested={0x3e, 0xcb, 0x0, 0x1, [@generic="a28a672cce98e01fa0890cf60f589ac2f3952d9f4e7048ecf98ad059fd07", @typed={0x19, 0x20, 0x0, 0x0, @binary="2834e554cc884d5e3315d3182fd94871d386ff822b"}]}, @nested={0x98, 0x142, 0x0, 0x1, [@generic="9c2747e561cba9043ed659e62b54ba9aaaad6826185c65728bd3f8a62b01b2933d260b3248dcc951d4b1ea5afda25550b27c0344f18dfaca00591df124106b5bdc44f67dbad7dd49ca26164d7f86238c2dbf0cbff6b0c68c0e00d64dda185b0360e6715b99fee1d1b5a914343dd50e955f29736449f10f7cd8d71579c4b0c01d4ab4fe6343bf327ece618b9b6e9be773b1c6c15f"]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008010) 348.636014ms ago: executing program 4 (id=2171): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$inet(r0, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8ee107402084bed9a4b2fc4e0ff4141737d1c4a979dab95eae3c3afb633e91ab10b4caa3e7a26a865aaa330e1b71b9154897e92ec68481be38f43860b027a21267a138f6b29b3da74cfdc398dd89754a0a34f1858235288ac1256515919185e6485e10f36a16043b9cbc5490ca3daf6831cdcd218", 0x75}], 0x1}}, {{&(0x7f0000000100)={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000140)="e85914ef805827dc6d26ebb7a67037705c4a90648f78cd26a30b571bcc7fa232251968d60c9d052980eb3b71dbcbea736f655750872644a355dff9c4974e1162af31d67024940f1e63de8b7c4f57a1d9616c2008e0b3497077078562018f6999ddb6fe4c51a4513829a2d2e36520e2d0deed5419f7bc77663b7eae42c2129f109580c4ed7141100b1db60c0aef2bac4c29764dba75222d868682084cd4d863cb7edc1ce2dd9dab85b80117228ac1", 0xae}, {&(0x7f0000000200)="2a1f2f89fd7598cebfa69aacb3640cc0e34bf04e3b77c6894c3d14f8460285f6328da3ec681bcfd20722cff373eef3b65b3061b4e8cddaf23f1f81525db09124b4a0d2beef6398d53aec0bf2dbb99e2b120f00aba1cf2c10", 0x58}, {&(0x7f0000000280)="0f1721276086f9632be043d94685a5c915cd66744112b9a3dfe7a6cf194b5dfdc3e8043d17eb6c3c0126228c67b4d3acc7475f541caf779d9a3736f0f9eab240d8888d7872b65599a612ad860cc83fe83e822881c8548c25a60e2c972b4b", 0x5e}, {&(0x7f0000000300)="032864f729053a05d16938d5401ca35146fc75740ac64b811e50fea934344a081da63a13d393655df69277b198592b482991c49b976c007ab6cc9722c88c3de6accc345d9427a5ef425b0590475a8a412c2eaaf6ea0e8459f410741b1fb416d8b5e89c72716ede65462a883a8b5489019391314ad731cee45fe637196aa4ce64de57", 0x82}], 0x4, &(0x7f0000000400)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x2c}}}}], 0x38}}, {{&(0x7f0000000440)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000480)="21d11ce2bb7bc2323884e6fd61ee5f90b8cb8392f19ea9f752c2e0bdc59b2cd201446d88df50ecbd417db3c987238e46338542ff5f80ac637fb93cae513a01da37b95d5a3592a163aa9e3676d186a5d5f1cdee1badf880e65875f385cc58b91c9d7435d0a383668a9124364e7e5fff12d70afbe92411b1f76e3cb96bdacc5a4e72c5c1a6dda3f8cb9819", 0x8a}, {&(0x7f0000000540)="ea43b7fa6c14f5563d14a982e903f230bc9f4cb3c427449fa72a8ecd4f45a9eb5be07849407b84a7632bbfab23fd0d974a030540d05b4cf3c962772978c57e1d375ee01f7652473f469644b4ade0bba89791a7f012e66dba21b678a6c7aad58ebf506cb627ecac1b9b534406", 0x6c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000600)="b9d9aa47a1d15b4ee88be12ae0702663c59998a52ff990bb793b0add30ee914bf9d39a569a146e9d6b40b59718f5fce0bacf1e60c8fed23f1af20fd87d28f64c35961e17394c8b9e3f395768c1613aad7b06e56df3b4f1b17acbc597fccbead0b535a735a052c196b4bfe9359885fc990444434e1c00802a7295614d39ea9c0138fa97639df7bd783fcd90d51a516af585a8b6bb9090e3d0532591f30cc183e9c9a7f321be9625522cab6acb47bde1455be05b528f5cb9ac91f5b43dd2f095e54ab27850c4c4067d05a79872175e96852490ce058027136a94cfb2d951b09dbcd6b2ed03e09872de6e45717c5215980b5ebdaa0835", 0xf5}, {&(0x7f0000000700)="2572fc0769b5643fae112c7df47525957135a6f24a8d668de9ca4ec66655e83303d127549b4f4e8caaf021d3318482914f0a6d55b461bc76aae00bb4c03fe2d27bc2f25804a70e7847aeeaa2928244fcf72246d1dde9e55a5fae7849d8db81b274a9367d9ed6eb5b7f98e9a1e9b5e7293561c927855b5ba39c39c898d3494a1359947caed0c458fede71cd239f08bec2a7265fe971c830d0867bf9f7e3", 0x9d}, {&(0x7f00000007c0)="317b7ce2101c2ba1aee302ec4e31f38d6f8a9b6379b29775b7b8c2a0193f7c7ec81f30362301da7fb990b1fed5f6e74ad0c743329dd2036def469c9c61", 0x3d}, {&(0x7f0000000800)}, {&(0x7f0000000840)="723e72ac084be636aca878f3ac8315251fc3", 0x12}, {&(0x7f0000000880)="28eaa84340f441f4c87138a239f1614bcf850149b05fd42ded6a1be8634a2eae7f2996d4e01f35d0b86e423d3d4e93a75e4516418fc9cc11abc950448cfa2f6e02fc37601ac8c8373f2fc615ec4509ad89914dc5d577b8889a259781175513c59f345b053ee5c74bf7f382c5b312de9f340af51a1b342a6a3e55d417edc539b1f4173d199b79716064403ef91516a65576369062ad42e6", 0x97}, {&(0x7f0000000940)="2b95a4cda512cdfcd196217148d9b4", 0xf}, {&(0x7f0000000980)="1167146667a59333436fe99a7689e33d434ac9a7a89451f6a03fe26e593422972e64834caa5eed63f3dad6303db155c9bc209adec4fddfcdff562059e032157d1c39d33b6787a93a931feefb434a952dc4a86732b001a2c73c8b4947d1150832e0477e313e1c0b66d966476e9f333d7f601a37bd2c2bd791a6690c6622a1a8eed9f92f7961f87a5b99e79c3b7750e05a9cd4d3b7372d4a9769a33361e15ea2a2f529b60521f0ff17f98ca7377cb1ac182b8550676a339a820c3514ddfb972d01377c94c2d7ccb14f7b637b38809de6cd521aa0c86a82d05c6f03672d3b", 0xdd}], 0x8}}, {{&(0x7f0000000b00)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000e00)=[{&(0x7f0000000b40)="95f35bd28d513582ea51a18f1462774768303cb246edc1b79f6318656d40fcfa87dcc6f7c27415e0ee6c0fc5225d43ad0682132fa6483f91353bac886918cf235ca7f38a071f8672f7c1ad3dee2fc4b960258d141e785092207ed6be18c7803f1c86454d0a5ab7607e8c85ee5c2077bf2ca549ef4a1615b3edf0f82f19b8d16d7982e477bc36e901bd25a656e40f8dd06a60803a9af14ddd29ad878db4dc2e65d345c0dc661fbffd94dcd1555c56fa8ac31fcc48dc1e9d6ed9f20f5c4fb776077e66375cc0dff0c933400c3b806fa8b553", 0xd1}, {&(0x7f0000000c40)="d020ec6c7d4ae2e16201471680904b652a14ec6da0926fb03433a7c3db241be6c1fe0d81c460253c1513f68caa366a95ab54dfd977053766554aef31e78238658016e28247c0c85a17af880fc87f855078e6211dbddd49dfb165347fc03beea496f67e0afa09a0392f60b318c4f4484de09b607daad0b51de9ce590e1d71be99e07e5616d5a40394f2433ff0", 0x8c}, {&(0x7f0000000d00)="3327ec75222842f01e97cc7d7f1c2eee5ab471ff4a94c1fb6e88d3a95bfd6ff01396f2aa66aa8e30db9e73edf305a8e768c46795d765b0007c8621c1e29926811b195fee2cab2904a7e7950f44e2f07f9318cda6693828fbc051a0a090b887c7347b8d203f35167e59a321cc7f395eadb68efffbfc300da654a920a2e534b400424afd4bc4fd23b4ee4885a3f00459897bdf8b0c66c839790cebac84871e77f8ef9df92c57182d03589df672992e9f5f219bcc44dff17191df9dd2fc9c4a130789ccea4a7c0554f6dd371246b510fffb1a124fb2d26c3841c41731031a4c12568e6c00784f666a0d08666bc55d882b319a3082", 0xf3}], 0x3, &(0x7f0000000e40)=[@ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14}}, @ip_tos_int={{0x14}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0xc0}}], 0x5, 0x1c7af0ce90bd459e) mount(&(0x7f0000001040)=@sg0, &(0x7f0000001080)='./file0\x00', &(0x7f00000010c0)='ocfs2_dlmfs\x00', 0x20011, &(0x7f0000001100)='\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x30, r2, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008d4}, 0x40800) r3 = syz_clone3(&(0x7f0000001500)={0x80, &(0x7f00000012c0)=0xffffffffffffffff, &(0x7f0000001300), &(0x7f0000001340)=0x0, {0x6}, &(0x7f0000001380)=""/98, 0x62, &(0x7f0000001400)=""/152, &(0x7f00000014c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4}, 0x58) r6 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001580)='ns/uts\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000015c0)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001600)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001640)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000001740)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0xa11c93a6f17131e5}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x64, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xa}, @void, @void}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x2b}, @NL80211_ATTR_PID={0x8, 0x52, r5}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r6}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x28}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000800}, 0x20000000) chmod(&(0x7f0000001780)='./file0\x00', 0x3) link(&(0x7f00000017c0)='./file0\x00', &(0x7f0000001800)='./file0\x00') ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000001840)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001940)='./file0\x00', &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) fstat(r6, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000001880)='./file0\x00', &(0x7f00000018c0), 0x202c802, &(0x7f0000001a80)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_loose}, {}, {@version_L}, {@access_client}, {@access_user}], [{@dont_measure}, {@uid_eq={'uid', 0x3d, r12}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@uid_gt={'uid>', 0xffffffffffffffff}}, {@obj_user={'obj_user', 0x3d, '\x00'}}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '\x00'}}, {@euid_gt={'euid>', 0xee01}}, {@uid_gt={'uid>', r14}}]}}) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c00), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001d80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c40)={0xdc, r15, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0xca63, 0x7f}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}, @NL80211_ATTR_FRAME_MATCH={0xaa, 0x5b, "3e461eea67fe7fe2963aa8d7cfacf1468068cca33daccc626192a2042297562615080320b5a89ce951b68c23fd7371f21ccb81b06aeeda9ce5a2f4caf9a4f256c074e43bdda8201bb44bbb5ac4eefe170b66d179bf1cc1f407f459167ff58a0d1215e73fac0e4b47f352929c57ea253b516e6407751287d252ec8888d47be7b849eeed3b25794f83aa8cf781a6edc793af666f3d5b4cc75c277ba017b46f6132b3ae9e5e0e58"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x8080}, 0x8084) fcntl$setownex(r4, 0xf, &(0x7f0000001dc0)={0x2, r3}) socket$netlink(0x10, 0x3, 0xb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000001e00)={{0x1, 0x1, 0x18, r11, {0x1}}, './file1\x00'}) ioctl$BLKCRYPTOIMPORTKEY(r16, 0xc0401289, &(0x7f0000001ec0)={&(0x7f0000001e40)="d3fedba6ae313b41fb16ee4636096407", 0x10, &(0x7f0000001e80)=""/48, 0x30}) fcntl$getownex(r11, 0x10, &(0x7f0000002240)={0x0, 0x0}) r18 = socket$tipc(0x1e, 0x5, 0x0) r19 = fspick(r16, &(0x7f0000002280)='./file1\x00', 0x1) r20 = accept4$x25(r16, &(0x7f00000022c0), &(0x7f0000002300)=0x12, 0x800) sendmsg$unix(r16, &(0x7f0000002400)={&(0x7f0000001f00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f0000001f80)="a69832116f0632d59e9c2543be585b6bbd252664e15c608f5e50316ff7b6f44bbffdfb2a54c1b2573858cd093e94fd241f29c02041d7c600aca0400a973dc461768e5de28daba93a6971f82b86ab2b257eb974b5986153190700108b525062dcc17f8b29d1c32a4375b4df834184d2cc6552f72f3bcb4dd7878543d152c163b5e65c5dd437782f230805086c864e8803039e5fb30b1180a63cbf84fe7ecd674956", 0xa1}, {&(0x7f0000002040)="8a10617e05a7182d7c299ae1a8c955850e0912baffa2f06effcda4e79079380d315e", 0x22}, {&(0x7f0000002080)="d39911da10263358eb", 0x9}, {&(0x7f00000020c0)="3c0177d9ef088721c9619fa2a66d0220b63d90f7a335b785358e089891c2681deb7d8a7db5a4021ede3bdbdd852011d3f9e33e46d5c480f485a4f5b7af9b52c618a21b275429494132c94e8888a6d7ced036fd740144fb699ca94b0b34e23708fde1cd0b831427cd2c93153086fb3ae05d98ba07a0f9578a8cc8d2748b769c8e9cf7f12dbc03958271d06677ed1d7b2aaae8266bf4889960cd", 0x99}, {&(0x7f0000002180)="b06dc74f4a13aeee02ab60292e4c657bcbc2348b8893a9ff03265b86c123956894fabbe38fdd", 0x26}], 0x5, &(0x7f0000002340)=[@cred={{0x1c, 0x1, 0x2, {r3, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r17, r14, r13}}}, @rights={{0x1c, 0x1, 0x1, [r11, r18, r10]}}, @rights={{0x30, 0x1, 0x1, [r6, 0xffffffffffffffff, r1, r6, r19, r0, r20, r0]}}], 0x90, 0x1880}, 0x24040000) 205.661843ms ago: executing program 4 (id=2172): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) r1 = syz_open_dev$loop(&(0x7f0000000000), 0xd, 0x80000) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x200021a, 0x6, 0x1e, 0x14, "d0934770ef82ae0106c7b2280676c61772ca29f4073c07efe89b1b1752f975ff98d08e58157798998517aea070a4f9ac87279e1a0e9a9667a67212a2fad6c3c2", "036b5d112ae345faa502e70e1ec151973fd04053ad6bb16c9089e5ace546bffd", [0x7000, 0x200]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r2, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xc, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x4, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x405, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x6, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x2}, &(0x7f0000000040)=0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000551000/0x400000)=nil) 124.563859ms ago: executing program 4 (id=2173): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="0c0000000100000007"], 0x1010fe) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="28000080", @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0c0023800600160013000000"], 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) 0s ago: executing program 1 (id=2174): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000280)={0xa, 0xce22, 0x4009, @loopback, 0x6}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xffe) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x7ff}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) dup(r0) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bind$inet6(r2, &(0x7f0000000280)={0xa, 0xce22, 0x4009, @loopback, 0x6}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xffe) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x7ff}, 0x1c, &(0x7f0000000700)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @loopback}}}, 0x84) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) (async) 0s ago: executing program 4 (id=2176): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00008b6000/0x2000)=nil, 0x2000, 0x400000, 0x6, &(0x7f0000000000/0x400000)=nil) preadv(0xffffffffffffffff, &(0x7f0000000440)=[{0x0}], 0x1, 0x4, 0x80000000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='setgroups\x00') r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x729) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000200)={0x0, 0x7fffffff}, 0x8) mmap$qrtrtun(&(0x7f0000479000/0x1000)=nil, 0x1000, 0x1000000, 0x2010, r1, 0x8) r5 = memfd_create(&(0x7f0000000440)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x11', 0x2) close(0x3) ftruncate(r5, 0xffff) fcntl$addseals(r5, 0x409, 0x3) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000}) lseek(r1, 0xb, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f00000000c0)={{&(0x7f00005ef000/0x1000)=nil, 0x1000}, 0x1}) ptrace$poke(0x5, r6, &(0x7f0000000080), 0x0) mlock(&(0x7f00005ac000/0x2000)=nil, 0x2000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) kernel console output (not intermixed with test programs): lgdt330x_attach() [ 235.708631][ T5949] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 235.789069][ T5949] rc_core: IR keymap rc-dvico-portable not found [ 235.795519][ T5949] Registered IR keymap rc-empty [ 235.801541][ T5949] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0 [ 235.821093][ T5867] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 235.822579][ T5949] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.5/usb6/6-1/rc/rc0/input67 [ 235.825820][T10633] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 235.846233][ T5949] dvb-usb: schedule remote query interval to 100 msecs. [ 235.854298][ T5949] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 235.955117][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 236.065175][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 236.175316][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 236.286261][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 236.377151][ T30] audit: type=1326 audit(1756620550.160:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.1.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0db8ebe9 code=0x7fc00000 [ 236.399465][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.405636][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 236.418665][ T30] audit: type=1326 audit(1756620550.160:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.1.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2c0db8ebe9 code=0x7fc00000 [ 236.519737][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 236.527819][ T30] audit: type=1326 audit(1756620550.160:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.1.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0db8ebe9 code=0x7fc00000 [ 236.572831][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.572838][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout [ 236.572908][ T30] audit: type=1326 audit(1756620550.170:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.1.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0db8ebe9 code=0x7fc00000 [ 236.638307][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 236.657427][ T30] audit: type=1326 audit(1756620550.170:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.1.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0db8ebe9 code=0x7fc00000 [ 236.679685][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.720873][ T30] audit: type=1326 audit(1756620550.170:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10623 comm="syz.1.1273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c0db8ebe9 code=0x7fc00000 [ 236.755097][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 236.755111][ T1211] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 236.839879][T10657] /dev/rnullb0: Can't open blockdev [ 236.925268][ T1211] usb 2-1: Using ep0 maxpacket: 8 [ 236.933324][ T1211] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 236.950956][ T1211] usb 2-1: config 0 has no interface number 0 [ 236.961907][ T1211] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 236.979255][ T1211] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 236.991879][ T1211] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.014003][ T1211] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 237.033890][ T1211] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 237.043768][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.086038][ T1211] usb 2-1: config 0 descriptor?? [ 237.103380][ T1211] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 237.370142][ T1211] usb 2-1: USB disconnect, device number 68 [ 237.376412][ C0] ldusb 2-1:0.55: usb_submit_urb failed (-19) [ 237.421448][ T1211] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 237.585141][T10653] ldusb: No device or device unplugged -19 [ 237.669604][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 237.835433][ T5949] dvb-usb: bulk message failed: -22 (1/0) [ 237.844940][ T1211] usb 6-1: USB disconnect, device number 49 [ 237.908886][ T1211] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 238.625211][ T5949] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 238.635148][ T93] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 238.646198][T10701] delete_channel: no stack [ 238.650724][T10701] delete_channel: no stack [ 238.815179][ T5949] usb 2-1: Using ep0 maxpacket: 16 [ 238.822185][ T93] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 238.841722][ T93] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.852418][ T5949] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 238.859920][ T5949] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 238.871210][ T93] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.880288][ T5949] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 238.893168][ T93] usb 6-1: config 1 has no interface number 1 [ 238.899437][ T93] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 238.912353][ T5949] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 238.925428][ T93] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.935077][ T5949] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 238.944133][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.952594][ T93] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.960833][ T93] usb 6-1: Product: syz [ 238.965176][ T5949] usb 2-1: Product: syz [ 238.969349][ T5949] usb 2-1: Manufacturer: syz [ 238.974022][ T93] usb 6-1: Manufacturer: syz [ 238.978777][ T93] usb 6-1: SerialNumber: syz [ 238.984133][ T5949] usb 2-1: SerialNumber: syz [ 239.010468][ T5949] usb 2-1: config 0 descriptor?? [ 239.026350][T10698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.034442][T10698] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.061907][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 239.068461][ T5949] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 239.075756][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 239.210221][ T93] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 239.226336][ T93] usb 6-1: MIDIStreaming interface descriptor not found [ 239.251946][ T1211] usb 2-1: USB disconnect, device number 69 [ 239.266763][ T1211] mcba_usb 2-1:0.0 can0: device disconnected [ 239.284284][ T93] usb 6-1: USB disconnect, device number 50 [ 239.321262][T10730] random: crng reseeded on system resumption [ 239.371300][T10733] udevd[10733]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.376120][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.406305][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.444695][T10789] NILFS (rnullb0): couldn't find nilfs on the device [ 240.452019][T10790] NILFS (rnullb0): couldn't find nilfs on the device [ 240.475200][ T93] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 240.625249][ T93] usb 4-1: Using ep0 maxpacket: 32 [ 240.632687][ T93] usb 4-1: config 0 has an invalid interface number: 66 but max is 0 [ 240.640924][ T93] usb 4-1: config 0 has no interface number 0 [ 240.648814][ T93] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 240.657995][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.666058][ T93] usb 4-1: Product: syz [ 240.670232][ T93] usb 4-1: Manufacturer: syz [ 240.674816][ T93] usb 4-1: SerialNumber: syz [ 240.676411][ T5864] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 240.681051][ T93] usb 4-1: config 0 descriptor?? [ 240.696476][ T93] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 240.704108][ T93] dvb-usb: bulk message failed: -22 (2/0) [ 240.711408][ T93] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 240.721033][ T93] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 240.729270][ T93] usb 4-1: media controller created [ 240.741144][ T93] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 240.753688][ T93] cxusb: set interface failed [ 240.758795][ T93] dvb-usb: bulk message failed: -22 (1/0) [ 240.779695][ T93] DVB: Unable to find symbol lgdt330x_attach() [ 240.785914][ T93] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 240.836204][ T5864] usb 6-1: device descriptor read/64, error -71 [ 240.836783][ T93] rc_core: IR keymap rc-dvico-portable not found [ 240.848998][ T93] Registered IR keymap rc-empty [ 240.854253][ T93] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 240.864722][ T93] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input68 [ 240.876351][ T93] dvb-usb: schedule remote query interval to 100 msecs. [ 240.883322][ T93] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 240.895289][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 240.914885][ T1211] usb 4-1: USB disconnect, device number 71 [ 240.944381][ T1211] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 241.105169][ T5864] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 241.235127][ T5864] usb 6-1: device descriptor read/64, error -71 [ 241.345663][ T5864] usb usb6-port1: attempt power cycle [ 241.685273][ T5864] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 241.706665][ T5864] usb 6-1: device descriptor read/8, error -71 [ 241.945226][ T5864] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 241.965605][ T5864] usb 6-1: device descriptor read/8, error -71 [ 242.086235][ T5864] usb usb6-port1: unable to enumerate USB device [ 255.848193][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.854595][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.816492][T10808] hpfs: Bad magic ... probably not HPFS [ 264.849815][T10812] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 265.031453][T10829] omfs: Invalid superblock (0) [ 265.056770][T10831] XFS (rnullb0): Invalid superblock magic number [ 265.093457][T10839] syzkaller1: entered promiscuous mode [ 265.102492][T10839] syzkaller1: entered allmulticast mode [ 265.115210][T10839] netlink: 'syz.5.1327': attribute type 21 has an invalid length. [ 265.123251][T10839] netlink: 'syz.5.1327': attribute type 30 has an invalid length. [ 265.189111][T10848] block nbd1: Attempted send on invalid socket [ 265.212625][T10848] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 265.264379][T10848] fuse: Unknown parameter 'Jj!8Y' [ 265.405290][ T24] usb 4-1: new low-speed USB device number 72 using dummy_hcd [ 265.436687][T10867] Can't find a SQUASHFS superblock on rnullb0 [ 265.506037][ T5949] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 265.576951][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 265.588532][ T24] usb 4-1: config 9 has an invalid interface number: 124 but max is 1 [ 265.598847][ T24] usb 4-1: config 9 has an invalid interface number: 194 but max is 1 [ 265.610918][ T24] usb 4-1: config 9 has no interface number 0 [ 265.625142][ T24] usb 4-1: config 9 has no interface number 1 [ 265.637593][ T24] usb 4-1: config 9 interface 124 has no altsetting 0 [ 265.654775][ T24] usb 4-1: config 9 interface 194 has no altsetting 0 [ 265.667686][ T24] usb 4-1: string descriptor 0 read error: -22 [ 265.674060][ T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=9cfd, bcdDevice=31.08 [ 265.688670][ T5949] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.705156][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.713355][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 265.742449][ T5949] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.762477][ T5949] usb 6-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 265.772428][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.784686][ T5949] usb 6-1: config 0 descriptor?? [ 265.836677][T10886] omfs: Invalid superblock (0) [ 265.888316][T10894] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 266.027356][T10846] exFAT-fs (rnullb0): invalid boot record signature [ 266.040545][T10846] exFAT-fs (rnullb0): failed to read boot sector [ 266.051221][T10903] /dev/rnullb0: Can't open blockdev [ 266.055099][T10846] exFAT-fs (rnullb0): failed to recognize exfat type [ 266.098748][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.113043][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.173649][T10906] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 266.173666][ T5949] usb 6-1: USB disconnect, device number 55 [ 266.188772][T10906] /dev/rnullb0: Can't open blockdev [ 266.483583][T10921] netlink: 244 bytes leftover after parsing attributes in process `syz.1.1350'. [ 266.518891][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.527558][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.535391][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.544083][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.552185][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.560208][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.568261][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.576316][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.584065][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.592108][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.600189][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.608250][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.616261][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.624050][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.632107][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.640952][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.649311][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.657319][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.665345][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.673102][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.681075][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.689153][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.697109][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.705090][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.713165][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.721100][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.729186][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.729268][T10926] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.737037][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.737073][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.763082][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.771087][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.779121][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.787083][ T5868] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 266.854673][T10930] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.942606][T10932] netlink: 'syz.3.1353': attribute type 3 has an invalid length. [ 266.992895][T10932] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1353'. [ 267.040742][T10936] netlink: 'syz.3.1353': attribute type 10 has an invalid length. [ 267.097942][T10932] /dev/rnullb0: Can't open blockdev [ 267.104587][T10936] team0: Port device macvlan1 added [ 267.122007][ T5864] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 267.143211][ T5868] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 267.285296][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 267.312293][ T5864] usb 2-1: config 25 has an invalid interface number: 77 but max is 0 [ 267.351731][ T5864] usb 2-1: config 25 has no interface number 0 [ 267.365702][ T5864] usb 2-1: config 25 interface 77 has no altsetting 0 [ 267.383670][ T5864] usb 2-1: New USB device found, idVendor=046d, idProduct=0960, bcdDevice=f2.d1 [ 267.421769][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.429026][T10947] sg_write: data in/out 41763/8 bytes for SCSI command 0xfd-- guessing data in; [ 267.429026][T10947] program syz.3.1356 not setting count and/or reply_len properly [ 267.440875][ T5864] usb 2-1: Product: syz [ 267.458110][ T5864] usb 2-1: Manufacturer: syz [ 267.467175][ T5864] usb 2-1: SerialNumber: syz [ 267.652982][T10951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.659594][T10951] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.667445][T10951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.673544][T10951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.682045][T10929] program syz.1.1352 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 267.714354][ T5864] gspca_main: sunplus-2.14.0 probing 046d:0960 [ 267.730030][ T5864] gspca_sunplus: reg_w_riv err -71 [ 267.742745][ T5864] sunplus 2-1:25.77: probe with driver sunplus failed with error -71 [ 267.759767][ T5864] usb 2-1: USB disconnect, device number 70 [ 267.921109][ T24] qmi_wwan 4-1:9.124: probe with driver qmi_wwan failed with error -22 [ 267.958438][ T24] usb 4-1: USB disconnect, device number 72 [ 268.178754][T10963] 9p: Unknown parameter 'wfdn' [ 268.344333][T10974] /dev/rnullb0: Can't open blockdev [ 268.352410][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1364'. [ 268.369468][T10971] syzkaller1: entered promiscuous mode [ 268.375479][T10971] syzkaller1: entered allmulticast mode [ 268.405942][T10971] /dev/rnullb0: Can't open blockdev [ 268.411815][T10972] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1364'. [ 268.439306][T10980] /dev/rnullb0: Can't open blockdev [ 268.521084][T10984] tipc: Can't bind to reserved service type 2 [ 268.662223][T10994] /dev/rnullb0: Can't open blockdev [ 268.822827][T11004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.845927][T11004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.846513][T11002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.877380][T11002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.123523][T11025] /dev/rnullb0: Can't open blockdev [ 269.162991][T11018] overlayfs: workdir and upperdir must reside under the same mount [ 269.171675][ T5949] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 269.233354][T11035] /dev/rnullb0: Can't open blockdev [ 269.233531][T11027] openvswitch: netlink: Flow key attr not present in new flow. [ 269.285783][T11037] /dev/rnullb0: Can't open blockdev [ 269.325177][ T5949] usb 2-1: Using ep0 maxpacket: 32 [ 269.334408][ T5949] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 269.347287][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.368688][ T5949] usb 2-1: Product: syz [ 269.372952][ T5949] usb 2-1: Manufacturer: syz [ 269.379044][ T5949] usb 2-1: SerialNumber: syz [ 269.397355][ T5949] usb 2-1: config 0 descriptor?? [ 269.408401][ T5949] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 269.428964][T11042] netlink: 'syz.4.1387': attribute type 13 has an invalid length. [ 269.439640][T11042] netlink: 'syz.4.1387': attribute type 13 has an invalid length. [ 269.449816][T11042] netlink: 'syz.4.1387': attribute type 13 has an invalid length. [ 269.606818][ T5867] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.623231][ T5949] gspca_ov534_9: reg_w failed -71 [ 269.648277][T11055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.685385][ T5867] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.687224][ T5868] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.691704][ T5867] Bluetooth: hci2: command 0x0401 tx timeout [ 270.037910][ T5949] gspca_ov534_9: Unknown sensor 0000 [ 270.037982][ T5949] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 270.056675][ T5949] usb 2-1: USB disconnect, device number 71 [ 270.365680][ T5949] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 270.387490][T11082] netlink: 'syz.3.1399': attribute type 1 has an invalid length. [ 270.528966][ T5949] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 270.540455][ T5949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.549306][ T5949] usb 2-1: Product: syz [ 270.554723][ T5949] usb 2-1: Manufacturer: syz [ 270.563512][ T5949] usb 2-1: SerialNumber: syz [ 270.578264][ T5949] usb 2-1: config 0 descriptor?? [ 270.587016][ T5949] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 271.055189][T11090] input: syz0 as /devices/virtual/input/input72 [ 271.189024][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.201636][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.345570][ T93] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 271.434571][T11009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.449614][T11009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.505140][ T5878] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 271.519038][ T93] usb 6-1: config 0 has an invalid interface number: 98 but max is 0 [ 271.527710][ T93] usb 6-1: config 0 has no interface number 0 [ 271.533839][ T93] usb 6-1: config 0 interface 98 has no altsetting 0 [ 271.540763][T11109] /dev/rnullb0: Can't open blockdev [ 271.544039][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1408'. [ 271.549340][ T93] usb 6-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 271.567767][ T93] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.576144][ T93] usb 6-1: Product: syz [ 271.580473][ T93] usb 6-1: Manufacturer: syz [ 271.585723][ T93] usb 6-1: SerialNumber: syz [ 271.593034][ T93] usb 6-1: config 0 descriptor?? [ 271.676877][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 271.684107][ T5878] usb 4-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 271.696655][ T5878] usb 4-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.708800][ T5878] usb 4-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 271.718533][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.808854][ T93] usb 6-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 271.882346][T11118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.892086][T11118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.099710][ T5878] usb 4-1: string descriptor 0 read error: -71 [ 272.118306][ T5878] hub 4-1:32.0: bad descriptor, ignoring hub [ 272.124845][ T5878] hub 4-1:32.0: probe with driver hub failed with error -5 [ 272.176113][ T5878] usb 4-1: USB disconnect, device number 73 [ 272.274750][T11009] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 272.295225][T11009] EXT4-fs (loop1): unable to read superblock [ 272.304560][ T5949] gspca_ov534_9: reg_r err -71 [ 272.435213][ T93] usb 6-1: reset high-speed USB device number 56 using dummy_hcd [ 272.578021][ T5949] gspca_ov534_9: Unknown sensor 0000 [ 272.578101][ T5949] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 272.600930][ T5949] usb 2-1: USB disconnect, device number 72 [ 272.795905][T11121] "syz.3.1413" (11121) uses obsolete ecb(arc4) skcipher [ 272.809653][T11121] trusted_key: encrypted_key: insufficient parameters specified [ 272.848002][ T93] usb 6-1: failed to restore interface 98 altsetting 4 (error=-71) [ 272.878310][ T93] usb 6-1: [ueagle-atm] pre-firmware device, uploading firmware [ 272.929053][ T93] usb 6-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 272.937159][ T5949] usb 6-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 272.955063][ T5949] usb 6-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 272.970300][ T93] usb 6-1: USB disconnect, device number 56 [ 273.295075][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 273.400338][T11134] netlink: 'syz.5.1419': attribute type 16 has an invalid length. [ 273.409702][T11134] netlink: 'syz.5.1419': attribute type 2 has an invalid length. [ 273.418746][T11134] netlink: 'syz.5.1419': attribute type 2 has an invalid length. [ 273.428186][T11134] netlink: 64058 bytes leftover after parsing attributes in process `syz.5.1419'. [ 273.467988][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 273.477903][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 273.490244][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 273.510560][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 273.536459][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 273.555152][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 273.576731][ T9] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 273.586041][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.594125][ T9] usb 2-1: Product: syz [ 273.604236][ T9] usb 2-1: Manufacturer: syz [ 273.611430][ T9] usb 2-1: SerialNumber: syz [ 273.626880][ T9] usb 2-1: config 0 descriptor?? [ 273.737856][ T93] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 273.906409][ T93] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.922058][ T93] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 273.942193][ T93] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 273.967375][ T93] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.978380][ T93] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.986725][ T93] usb 6-1: Product: 㾉숲挛䕑孂ﴤ٦ꭔ⏋቙荈ꂋ雍瓻憁Ļ≋鑎咽ᴃ纔힡낣 [ 274.008970][ T93] usb 6-1: Manufacturer: 廟霊饁ᔓዷ撌嚻㷛壐뉹緛ͱ뉏龪夆깹畦뮍饴㑹喆ꢏ裯⅌媱籫趟꫐૱졔磽㠓ჩ浼䕹碊ᳳ뛾ᬀ際뒥뚘됢︇杻늟엛娈ࡕဠ᝴껔籘겲憺擱诀꥙渙듈淼骄쁆᝘﷌ꗵᘄꚛʒ␆ﵩ礞헜옥始ᗈ䵳ю [ 274.051278][ T93] usb 6-1: SerialNumber: syz [ 274.104161][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.110631][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.118261][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.145348][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.166072][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.179306][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.192917][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.207490][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.223326][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.231756][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.246834][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.258944][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.266320][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.302783][T11138] hsr0: entered promiscuous mode [ 274.615112][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.624706][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.648614][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.672156][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.680523][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.704811][ T9] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 274.714847][ T9] input input75: Timeout waiting for response from device. [ 274.746437][ T9] usb 2-1: USB disconnect, device number 73 [ 275.093088][T11175] netlink: 'syz.3.1429': attribute type 28 has an invalid length. [ 275.278535][T11186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.291497][T11186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.294632][T11188] syz.3.1434 (11188): attempted to duplicate a private mapping with mremap. This is not supported. [ 275.525490][ T5867] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 275.535425][ T5867] Bluetooth: hci2: command 0x0401 tx timeout [ 275.945152][ T5878] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 276.097778][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.115136][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.127162][ T5878] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 276.136689][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.147257][ T5878] usb 2-1: config 0 descriptor?? [ 276.413912][ T93] usb 6-1: 0:2 : does not exist [ 276.431109][ T93] usb 6-1: USB disconnect, device number 57 [ 276.449842][T10860] udevd[10860]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.485213][ T5909] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 276.556047][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.573855][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.585502][T11197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.594181][T11197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.621901][ T5878] usbhid 2-1:0.0: can't add hid device: -71 [ 276.627997][ T5909] usb 4-1: device descriptor read/64, error -71 [ 276.637639][ T5878] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 276.659201][ T5878] usb 2-1: USB disconnect, device number 74 [ 276.879634][ T5909] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 277.015101][ T5909] usb 4-1: device descriptor read/64, error -71 [ 277.097178][T11224] netlink: 'syz.4.1444': attribute type 10 has an invalid length. [ 277.117300][T11224] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 277.145483][ T5909] usb usb4-port1: attempt power cycle [ 277.167792][T11226] binder: 11225:11226 ioctl c0306201 2000000002c0 returned -11 [ 277.229344][T11231] netlink: 'syz.1.1446': attribute type 10 has an invalid length. [ 277.241941][T11231] /dev/rnullb0: Can't open blockdev [ 277.555352][ T5878] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 277.655153][ T5909] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 277.685887][ T5909] usb 4-1: device descriptor read/8, error -71 [ 277.705108][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 277.711514][ T5878] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.724296][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 277.729122][T11255] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 277.736214][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 277.736243][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 277.736270][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 277.738075][ T5878] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 277.749055][T11255] overlayfs: missing 'lowerdir' [ 277.757218][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 277.802058][ T5878] usb 2-1: Product: syz [ 277.806631][ T5878] usb 2-1: Manufacturer: syz [ 277.811333][ T5878] usb 2-1: SerialNumber: syz [ 277.818429][ T5878] usb 2-1: config 0 descriptor?? [ 277.823848][T11255] /dev/rnullb0: Can't open blockdev [ 277.835244][ T10] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 277.926074][ T5909] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 277.945827][ T5909] usb 4-1: device descriptor read/8, error -71 [ 278.028746][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.043319][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.052861][ T5878] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 278.064318][ T5909] usb usb4-port1: unable to enumerate USB device [ 278.081663][ T5878] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 278.803271][T11264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.814157][T11264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.864342][ T5878] usb 2-1: USB disconnect, device number 75 [ 278.875106][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 278.890550][ T10] usb 6-1: config 0 has an invalid interface number: 112 but max is 0 [ 278.900724][ T10] usb 6-1: config 0 has no interface number 0 [ 278.907605][ T10] usb 6-1: config 0 interface 112 has no altsetting 0 [ 278.925527][ T10] usb 6-1: New USB device found, idVendor=03eb, idProduct=21fe, bcdDevice=4e.f3 [ 278.937164][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.945450][ T10] usb 6-1: Product: syz [ 278.952042][ T10] usb 6-1: Manufacturer: syz [ 278.967382][ T10] usb 6-1: SerialNumber: syz [ 278.974795][ T10] usb 6-1: config 0 descriptor?? [ 278.982553][ T10] igorplugusb 6-1:0.112: endpoint incorrect [ 279.188968][T11246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.203076][T11246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.307709][ T5878] usb 6-1: USB disconnect, device number 58 [ 279.590168][T11311] overlay: ./file0 is not a directory [ 279.600836][T11311] /dev/rnullb0: Can't open blockdev [ 279.702985][T11316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.715301][ T10] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 279.738602][ T5867] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 279.885694][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 279.894432][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 279.903408][ T10] usb 4-1: config 0 has no interface number 0 [ 279.909856][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 279.920211][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 279.929284][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 279.938948][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.947183][ T10] usb 4-1: Product: syz [ 279.951502][ T10] usb 4-1: Manufacturer: syz [ 279.956934][ T10] usb 4-1: SerialNumber: syz [ 279.962753][ T10] usb 4-1: config 0 descriptor?? [ 279.968471][T11288] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 280.115103][ T5878] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 280.265131][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 280.276130][ T5878] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 280.284340][ T5878] usb 6-1: config 0 has no interface number 0 [ 280.291229][ T5878] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 280.302622][ T5878] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 280.314140][ T5878] usb 6-1: config 0 interface 126 has no altsetting 0 [ 280.327522][ T5878] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 280.338019][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.347560][ T5878] usb 6-1: Product: syz [ 280.351747][ T5878] usb 6-1: Manufacturer: syz [ 280.358089][ T5878] usb 6-1: SerialNumber: syz [ 280.366607][ T5878] usb 6-1: config 0 descriptor?? [ 280.372299][T11325] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 280.382377][T11325] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 280.382925][ T10] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 280.411557][ T10] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 280.550313][T11342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.559450][T11342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.586017][T11288] ./file0: Can't lookup blockdev [ 280.591660][ T10] usb 4-1: USB disconnect, device number 78 [ 280.807534][ T5878] ir_usb 6-1:0.126: IR Dongle converter detected [ 281.010176][ T5878] usb 6-1: IR Dongle converter now attached to ttyUSB0 [ 281.128970][T11360] /dev/rnullb0: Can't open blockdev [ 281.165288][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.177224][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.184903][T11365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.194349][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.205614][T11365] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.212923][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.455092][ T10] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 281.578616][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.589811][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.598051][ T10] usb 4-1: device descriptor read/64, error -71 [ 281.835441][ T10] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 281.975495][ T10] usb 4-1: device descriptor read/64, error -71 [ 282.096774][ T10] usb usb4-port1: attempt power cycle [ 282.435214][ T10] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 282.466080][ T10] usb 4-1: device descriptor read/8, error -71 [ 282.735193][ T10] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 282.779648][ T10] usb 4-1: device descriptor read/8, error -71 [ 282.895813][ T10] usb usb4-port1: unable to enumerate USB device [ 282.920740][ T10] usb 6-1: USB disconnect, device number 59 [ 282.943881][ T10] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 282.985269][ T10] ir_usb 6-1:0.126: device disconnected [ 283.225309][ T5909] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 283.396450][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.415085][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 283.443158][ T5909] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 283.462203][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.484835][ T5909] usb 2-1: config 0 descriptor?? [ 283.766825][ T5867] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 283.775186][ T5867] Bluetooth: hci3: Injecting HCI hardware error event [ 283.782087][ T5868] Bluetooth: hci3: hardware error 0x00 [ 283.917942][ T5909] megaworld 0003:07B5:0312.000B: ignoring exceeding usage max [ 283.951112][ T5909] megaworld 0003:07B5:0312.000B: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 283.982013][ T5909] megaworld 0003:07B5:0312.000B: no inputs found [ 284.114035][T11399] /dev/rnullb0: Can't open blockdev [ 284.124008][ T5909] usb 2-1: USB disconnect, device number 76 [ 284.425611][T11453] /dev/rnullb0: Can't open blockdev [ 284.610030][T11474] /dev/rnullb0: Can't open blockdev [ 284.744133][T11475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.773175][T11475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.992694][T11490] Sensor A: ================= START STATUS ================= [ 285.025152][T11490] Sensor A: Test Pattern: 75% Colorbar [ 285.038271][T11490] Sensor A: Show Information: All [ 285.043352][T11490] Sensor A: Vertical Flip: false [ 285.055802][T11490] Sensor A: Horizontal Flip: false [ 285.065556][T11490] Sensor A: Brightness: 128 [ 285.088594][T11491] /dev/rnullb0: Can't open blockdev [ 285.105735][T11490] Sensor A: Contrast: 128 [ 285.110192][T11490] Sensor A: Hue: 127 [ 285.145279][T11490] Sensor A: Saturation: 128 [ 285.152789][T11490] Sensor A: ================== END STATUS ================== [ 285.845498][ T5868] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 286.615077][ T5909] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 286.746316][ T5909] usb 4-1: device descriptor read/64, error -71 [ 286.986763][ T5909] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 287.137720][ T5909] usb 4-1: device descriptor read/64, error -71 [ 287.245226][ T5909] usb usb4-port1: attempt power cycle [ 287.495879][ T5864] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 287.595351][ T5909] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 287.626616][ T5909] usb 4-1: device descriptor read/8, error -71 [ 287.670724][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 287.683608][ T5864] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.706140][ T5864] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 287.726427][ T5864] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.748185][ T5864] usb 2-1: config 0 descriptor?? [ 287.843524][T11546] /dev/rnullb0: Can't open blockdev [ 287.885354][ T5909] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 287.925672][ T5909] usb 4-1: device descriptor read/8, error -71 [ 288.036903][ T5909] usb usb4-port1: unable to enumerate USB device [ 288.884338][ T5864] playstation 0003:054C:0BA0.000C: hidraw0: USB HID v0.00 Device [HID 054c:0ba0] on usb-dummy_hcd.1-1/input0 [ 288.932335][T11563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 288.965659][ T5864] playstation 0003:054C:0BA0.000C: Failed to retrieve feature with reportID 18: -71 [ 288.986413][ T5864] playstation 0003:054C:0BA0.000C: Failed to retrieve DualShock4 pairing info: -71 [ 288.995874][ T5864] playstation 0003:054C:0BA0.000C: Failed to get MAC address from DualShock4 [ 289.004659][ T5864] playstation 0003:054C:0BA0.000C: Failed to create dualshock4. [ 289.030850][ T5864] playstation 0003:054C:0BA0.000C: probe with driver playstation failed with error -71 [ 289.057014][ T5864] usb 2-1: USB disconnect, device number 77 [ 289.389211][T11593] /dev/rnullb0: Can't open blockdev [ 289.628789][T11609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1516'. [ 289.642483][T11610] /dev/rnullb0: Can't open blockdev [ 289.642702][T11609] openvswitch: netlink: Flow actions attr not present in new flow. [ 289.715971][ T1211] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 289.876639][ T1211] usb 4-1: No LPM exit latency info found, disabling LPM. [ 289.905621][ T1211] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x1 is Bulk; changing to Interrupt [ 289.925220][ T1211] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x82 is Bulk; changing to Interrupt [ 289.945263][ T1211] usb 4-1: config 1 interface 0 has no altsetting 0 [ 289.954766][ T1211] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 289.974204][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.984327][ T1211] usb 4-1: Product: 㩭蘯괺㪛哟蕙嶒鮥俸Ⲷ﫱춘喩쀢듑ॡ復箄晁命䨪ꬸ彁䌧왝쭂閬鶝ꭸ藮ꈀ䘪毎喟䠂┰功⠂썑ꀙޛ纃鐍镁ታ憺腑ꊒ᯸髟輌ꯊ忨ᵶ㤣㖮땗鴃薏땪隶짐ೳ᧧瀳皂സ苮锔부깐뼩 [ 290.009317][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.055072][ T1211] usb 4-1: Manufacturer: ࠖ [ 290.059849][ T1211] usb 4-1: SerialNumber: Ћ [ 290.077057][T11599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.084510][T11599] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 290.316359][ T1211] usb 4-1: USB disconnect, device number 87 [ 290.381255][T11661] /dev/rnullb0: Can't open blockdev [ 290.431284][T11666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.442173][T11666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.535147][ T5878] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 290.686417][ T5878] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 290.695674][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.706760][ T5878] usb 6-1: config 0 descriptor?? [ 290.713328][ T5878] cp210x 6-1:0.0: cp210x converter detected [ 290.926949][ T5878] usb 6-1: cp210x converter now attached to ttyUSB0 [ 291.075156][ T1211] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 291.221551][ T5864] usb 6-1: USB disconnect, device number 60 [ 291.230297][ T5864] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 291.239756][ T5864] cp210x 6-1:0.0: device disconnected [ 291.246173][ T1211] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.259475][ T1211] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 291.269162][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.279727][ T1211] usb 2-1: config 0 descriptor?? [ 291.692354][ T1211] petalynx 0003:18B1:0037.000D: item fetching failed at offset 0/2 [ 291.702359][ T1211] petalynx 0003:18B1:0037.000D: parse failed [ 291.709010][ T1211] petalynx 0003:18B1:0037.000D: probe with driver petalynx failed with error -22 [ 292.210983][ T5909] usb 2-1: USB disconnect, device number 78 [ 292.331162][T11753] wlan1 speed is unknown, defaulting to 1000 [ 293.268052][T11781] /dev/rnullb0: Can't open blockdev [ 293.718990][T11800] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 293.910057][T11811] overlay: ./file1 is not a directory [ 294.505091][ T5864] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 294.667048][ T5864] usb 6-1: New USB device found, idVendor=0df6, idProduct=0056, bcdDevice=a0.b5 [ 294.678062][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.689432][ T5864] usb 6-1: config 0 descriptor?? [ 294.714381][ T30] audit: type=1800 audit(1756620608.510:86): pid=11850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1565" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 294.765241][ T1211] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 294.901880][ T5864] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 294.916263][ T1211] usb 4-1: device descriptor read/64, error -71 [ 294.926444][ T5864] asix 6-1:0.0: probe with driver asix failed with error -71 [ 294.947255][ T5864] usb 6-1: USB disconnect, device number 61 [ 295.155257][ T1211] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 295.295232][ T1211] usb 4-1: device descriptor read/64, error -71 [ 295.415121][ T1211] usb usb4-port1: attempt power cycle [ 295.469147][T11863] netlink: 228 bytes leftover after parsing attributes in process `syz.5.1567'. [ 295.661591][T11879] /dev/rnullb0: Can't open blockdev [ 295.755159][ T1211] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 295.798119][ T1211] usb 4-1: device descriptor read/8, error -71 [ 296.065242][ T1211] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 296.105629][ T1211] usb 4-1: device descriptor read/8, error -71 [ 296.235339][ T1211] usb usb4-port1: unable to enumerate USB device [ 296.435171][ T10] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 296.595182][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 296.605179][ T10] usb 6-1: config 254 has an invalid interface number: 113 but max is 0 [ 296.620268][ T10] usb 6-1: config 254 has no interface number 0 [ 296.633389][ T10] usb 6-1: config 254 interface 113 has no altsetting 0 [ 296.652430][ T10] usb 6-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 296.665172][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.683415][ T10] usb 6-1: Product: syz [ 296.693522][ T10] usb 6-1: Manufacturer: syz [ 296.699614][ T10] usb 6-1: SerialNumber: syz [ 296.928573][ T10] mxuport 6-1:254.113: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 296.938291][ T10] mxuport 6-1:254.113: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 296.955451][ T10] mxuport 6-1:254.113: probe with driver mxuport failed with error -71 [ 296.979103][ T10] usb 6-1: USB disconnect, device number 62 [ 297.529887][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 297.685291][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 297.693197][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.709692][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 297.732240][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.760655][ T24] usb 2-1: config 0 descriptor?? [ 297.883975][T11951] /dev/rnullb0: Can't open blockdev [ 297.932868][T11953] /dev/rnullb0: Can't open blockdev [ 298.180956][ T24] creative-sb0540 0003:041E:3100.000E: item fetching failed at offset 0/5 [ 298.195670][ T24] creative-sb0540 0003:041E:3100.000E: parse failed [ 298.212811][ T24] creative-sb0540 0003:041E:3100.000E: probe with driver creative-sb0540 failed with error -22 [ 298.379032][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.397889][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.505112][ T24] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 298.665507][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 298.675308][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 298.682941][ T24] usb 4-1: can't read configurations, error -61 [ 298.815431][ T24] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 298.861617][T11975] rdma_rxe: rxe_newlink: failed to add wlan1 [ 298.871832][T11975] /dev/rnullb0: Can't open blockdev [ 298.921618][T11978] usb usb8: usbfs: process 11978 (syz.5.1591) did not claim interface 0 before use [ 298.932456][T11978] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 298.985314][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 298.993943][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 299.003456][ T24] usb 4-1: can't read configurations, error -61 [ 299.012738][ T24] usb usb4-port1: attempt power cycle [ 299.120287][ T30] audit: type=1800 audit(1756620612.920:87): pid=11994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1594" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 299.182564][T11998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.192307][T11998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.355136][ T24] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 299.375746][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 299.382480][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 299.390310][ T24] usb 4-1: can't read configurations, error -61 [ 299.525453][ T24] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 299.545496][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 299.552165][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 299.561134][ T24] usb 4-1: can't read configurations, error -61 [ 299.567717][ T24] usb usb4-port1: unable to enumerate USB device [ 299.814844][T12003] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.976133][T12018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.984721][T12018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.328340][ T93] usb 2-1: USB disconnect, device number 79 [ 300.452040][T12043] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 300.464105][T12043] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 300.612282][T12058] netlink: 'syz.1.1607': attribute type 8 has an invalid length. [ 300.833238][T12081] /dev/rnullb0: Can't open blockdev [ 301.055812][ T5864] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 301.185924][ T5864] usb 2-1: device descriptor read/64, error -71 [ 301.274850][T12089] input: syz0 as /devices/virtual/input/input87 [ 301.425155][ T5864] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 301.555109][ T5864] usb 2-1: device descriptor read/64, error -71 [ 301.665297][ T5864] usb usb2-port1: attempt power cycle [ 302.015309][ T5864] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 302.035596][ T5864] usb 2-1: device descriptor read/8, error -71 [ 302.234291][T12111] /dev/rnullb0: Can't open blockdev [ 302.263497][T12108] O3c: renamed from bridge_slave_0 (while UP) [ 302.277150][ T5864] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 302.305681][ T5864] usb 2-1: device descriptor read/8, error -71 [ 302.359059][T12119] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1616'. [ 302.411928][T12121] /dev/rnullb0: Can't open blockdev [ 302.418799][ T5864] usb usb2-port1: unable to enumerate USB device [ 302.664886][T12137] /dev/rnullb0: Can't open blockdev [ 302.826419][T12151] /dev/rnullb0: Can't open blockdev [ 303.022282][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.033719][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.167848][T12161] IPv6: Can't replace route, no match found [ 303.175829][T12161] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 303.182858][T12161] /dev/rnullb0: Can't open blockdev [ 303.251082][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.268032][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.282112][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.295204][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.429452][T12157] netlink: 763 bytes leftover after parsing attributes in process `syz.4.1626'. [ 303.448168][T12157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.472558][T12157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.522388][T12185] /dev/rnullb0: Can't open blockdev [ 303.629999][T12191] IPVS: length: 16 != 8 [ 303.915331][ T1211] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 304.067417][ T1211] usb 6-1: Using ep0 maxpacket: 32 [ 304.081362][ T1211] usb 6-1: too many configurations: 114, using maximum allowed: 8 [ 304.101270][ T1211] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 304.114303][ T1211] usb 6-1: can't read configurations, error -61 [ 304.232089][T12225] mmap: syz.3.1641 (12225): VmData 37597184 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 304.255340][ T1211] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 304.395073][ T5864] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 304.415092][ T1211] usb 6-1: Using ep0 maxpacket: 32 [ 304.430889][ T1211] usb 6-1: too many configurations: 114, using maximum allowed: 8 [ 304.450704][ T1211] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 304.459238][ T1211] usb 6-1: can't read configurations, error -61 [ 304.472056][ T1211] usb usb6-port1: attempt power cycle [ 304.539228][T12245] /dev/rnullb0: Can't open blockdev [ 304.545709][ T5864] usb 2-1: Using ep0 maxpacket: 16 [ 304.556589][ T5864] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 304.566594][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.574641][ T5864] usb 2-1: Product: syz [ 304.579203][ T5864] usb 2-1: Manufacturer: syz [ 304.583820][ T5864] usb 2-1: SerialNumber: syz [ 304.589368][T12246] /dev/rnullb0: Can't open blockdev [ 304.596852][ T5864] usb 2-1: config 0 descriptor?? [ 304.604218][ T5864] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 304.818798][ T1211] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 304.865624][ T1211] usb 6-1: Using ep0 maxpacket: 32 [ 304.871743][ T1211] usb 6-1: too many configurations: 114, using maximum allowed: 8 [ 304.881940][ T1211] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 304.890209][ T1211] usb 6-1: can't read configurations, error -61 [ 305.046831][ T1211] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 305.088451][ T1211] usb 6-1: Using ep0 maxpacket: 32 [ 305.094521][ T1211] usb 6-1: too many configurations: 114, using maximum allowed: 8 [ 305.108379][ T1211] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 305.119264][ T1211] usb 6-1: can't read configurations, error -61 [ 305.127605][ T1211] usb usb6-port1: unable to enumerate USB device [ 305.428292][ T5864] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 305.444893][ T5864] usb 2-1: USB disconnect, device number 84 [ 305.494779][T12266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.503715][T12266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.523264][T12266] wlan1 speed is unknown, defaulting to 1000 [ 305.715383][ T9] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 305.887275][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 305.896636][ T9] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 305.907370][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.917218][ T9] usb 4-1: Product: syz [ 305.921590][ T9] usb 4-1: Manufacturer: syz [ 305.928755][ T9] usb 4-1: SerialNumber: syz [ 305.936084][ T9] usb 4-1: config 0 descriptor?? [ 305.947210][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 306.049028][T12301] /dev/rnullb0: Can't open blockdev [ 306.295109][ T5878] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 306.357020][ T9] gspca_se401: Bayer format not supported! [ 306.447502][ T5878] usb 2-1: unable to get BOS descriptor or descriptor too short [ 306.456497][ T5878] usb 2-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 306.467279][ T5878] usb 2-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 306.479397][ T5878] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 306.492111][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.501607][ T5878] usb 2-1: Product: syz [ 306.506290][ T5878] usb 2-1: Manufacturer: syz [ 306.510910][ T5878] usb 2-1: SerialNumber: syz [ 306.726317][T12301] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 306.748243][T12301] netlink: 'syz.1.1652': attribute type 10 has an invalid length. [ 306.763774][T12312] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 306.767842][T12301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.799542][T12301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.839205][ T5878] usb 2-1: interface 1 not found [ 306.849944][ T5878] usb 2-1: USB disconnect, device number 85 [ 307.785416][ T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 307.833493][T12351] netlink: 'syz.5.1657': attribute type 1 has an invalid length. [ 307.842864][T12351] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1657'. [ 307.857923][T12351] /dev/rnullb0: Can't open blockdev [ 307.947994][ T9] usb 2-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 307.957274][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.965391][ T9] usb 2-1: Product: syz [ 307.972883][ T9] usb 2-1: Manufacturer: syz [ 307.982044][ T9] usb 2-1: SerialNumber: syz [ 307.997073][ T9] usb 2-1: config 0 descriptor?? [ 308.011757][ T9] hub 2-1:0.0: bad descriptor, ignoring hub [ 308.025181][ T9] hub 2-1:0.0: probe with driver hub failed with error -5 [ 308.032834][ T9] f81232 2-1:0.0: f81534a converter detected [ 308.193073][T12364] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 308.200342][T12364] /dev/rnullb0: Can't open blockdev [ 308.275284][ T9] usb 2-1: f81534a converter now attached to ttyUSB0 [ 308.487061][ T5878] usb 4-1: USB disconnect, device number 96 [ 308.925083][ T5878] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 309.075138][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 309.086608][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 309.105792][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.139222][ T5878] pvrusb2: Hardware description: Terratec Grabster AV400 [ 309.161476][ T5878] pvrusb2: ********** [ 309.167469][T12393] /dev/rnullb0: Can't open blockdev [ 309.173128][ T5878] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 309.187605][T12393] /dev/rnullb0: Can't open blockdev [ 309.193115][ T5878] pvrusb2: Important functionality might not be entirely working. [ 309.208713][ T5878] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 309.244391][ T5878] pvrusb2: ********** [ 309.536337][ T5878] usb 4-1: USB disconnect, device number 97 [ 309.559238][ T5878] pvrusb2: Device being rendered inoperable [ 310.077885][T12421] /dev/rnullb0: Can't open blockdev [ 310.443252][T12428] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 310.473618][T12428] /dev/rnullb0: Can't open blockdev [ 310.675951][ T5864] usb 2-1: USB disconnect, device number 86 [ 310.685503][ T5864] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 310.720593][ T5864] f81232 2-1:0.0: device disconnected [ 310.945153][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1680'. [ 311.065149][ T24] usb 2-1: new low-speed USB device number 87 using dummy_hcd [ 311.143874][T12480] /dev/rnullb0: Can't open blockdev [ 311.237222][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 311.257019][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.283957][ T24] usb 2-1: config 0 descriptor?? [ 311.369385][T12492] usb usb8: usbfs: process 12492 (syz.5.1683) did not claim interface 0 before use [ 311.527628][T12497] netlink: 1072 bytes leftover after parsing attributes in process `syz.5.1684'. [ 311.527656][T12497] netlink: 280 bytes leftover after parsing attributes in process `syz.5.1684'. [ 311.761881][T12503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 311.764987][T12503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 311.891066][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 311.891259][ T24] asix 2-1:0.0: probe with driver asix failed with error -61 [ 312.583608][T12553] /dev/rnullb0: Can't open blockdev [ 312.593286][T12553] /dev/rnullb0: Can't open blockdev [ 312.665200][ T24] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 312.684459][T12562] /dev/rnullb0: Can't open blockdev [ 312.746789][T12565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.759177][T12565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.795170][ T24] usb 6-1: device descriptor read/64, error -71 [ 313.014522][T12584] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 313.035077][ T24] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 313.175262][ T24] usb 6-1: device descriptor read/64, error -71 [ 313.301841][ T24] usb usb6-port1: attempt power cycle [ 313.657219][ T24] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 313.695678][ T24] usb 6-1: device descriptor read/8, error -71 [ 313.858180][ T5878] usb 2-1: USB disconnect, device number 87 [ 313.935227][ T24] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 313.978259][ T24] usb 6-1: device descriptor read/8, error -71 [ 314.105382][ T24] usb usb6-port1: unable to enumerate USB device [ 314.195776][T12642] /dev/rnullb0: Can't open blockdev [ 314.816061][T12664] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 314.833056][T12664] netlink: 'syz.1.1718': attribute type 4 has an invalid length. [ 314.924551][T12671] /dev/rnullb0: Can't open blockdev [ 314.986004][T12676] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1721'. [ 314.997204][T12676] gretap0: entered promiscuous mode [ 315.003709][T12676] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1721'. [ 315.015749][T12676] 0{X: renamed from gretap0 [ 315.022376][T12676] 0{X: left promiscuous mode [ 315.027821][T12676] 0{X: entered allmulticast mode [ 315.034578][T12676] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 315.052281][T12676] /dev/rnullb0: Can't open blockdev [ 315.137182][T12688] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 315.144179][T12688] /dev/rnullb0: Can't open blockdev [ 315.435248][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 315.483803][T12700] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 315.497732][T12701] netlink: 'syz.5.1725': attribute type 6 has an invalid length. [ 315.595322][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 315.607984][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 315.626568][ T9] usb 2-1: config 0 has an invalid interface number: 36 but max is 1 [ 315.634694][ T9] usb 2-1: config 0 has an invalid interface number: 5 but max is 1 [ 315.667907][ T9] usb 2-1: config 0 has an invalid interface number: 3 but max is 1 [ 315.676068][ T9] usb 2-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 315.695052][ T9] usb 2-1: config 0 has no interface number 0 [ 315.705299][ T9] usb 2-1: config 0 has no interface number 1 [ 315.716864][ T9] usb 2-1: config 0 has no interface number 2 [ 315.727610][ T9] usb 2-1: config 0 interface 36 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 315.755340][ T9] usb 2-1: config 0 interface 36 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.776379][ T9] usb 2-1: too many endpoints for config 0 interface 5 altsetting 156: 226, using maximum allowed: 30 [ 315.792742][ T9] usb 2-1: config 0 interface 5 altsetting 156 has 1 endpoint descriptor, different from the interface descriptor's value: 226 [ 315.985035][ T9] usb 2-1: config 0 interface 36 has no altsetting 0 [ 315.991870][ T9] usb 2-1: config 0 interface 5 has no altsetting 0 [ 316.018406][ T9] usb 2-1: string descriptor 0 read error: -22 [ 316.024784][ T9] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=64.67 [ 316.135383][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.150886][ T9] usb 2-1: config 0 descriptor?? [ 316.734712][T12755] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 316.756699][T12755] /dev/rnullb0: Can't open blockdev [ 316.859509][T12762] libceph: resolve '400' (ret=-3): failed [ 316.949259][T12765] /dev/rnullb0: Can't open blockdev [ 317.261490][T12783] binder: Unknown parameter 'YHe' [ 317.291222][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.297909][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.301630][T12784] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1741'. [ 317.308740][T12783] binder: Unknown parameter 'YHe' [ 317.342671][ T24] usb 2-1: USB disconnect, device number 88 [ 318.285972][ T9] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 318.526717][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.536705][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.610095][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 318.637040][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.878296][ T9] usb 2-1: usb_control_msg returned -32 [ 318.883913][ T9] usbtmc 2-1:16.0: can't read capabilities [ 318.972409][T12867] netlink: 750 bytes leftover after parsing attributes in process `syz.5.1755'. [ 319.063044][T12871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.088925][T12871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.295158][ T9] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 319.435203][ T9] usb 4-1: device descriptor read/64, error -71 [ 319.676277][ T9] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 319.714741][T12882] qnx4: no qnx4 filesystem (no root dir). [ 319.722069][T12882] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1758'. [ 319.876462][ T9] usb 4-1: device descriptor read/64, error -71 [ 319.985312][ T9] usb usb4-port1: attempt power cycle [ 320.159313][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.171515][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.180543][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.189204][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.198316][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.207485][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.216512][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.227620][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.236251][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.244793][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.253725][T12909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.262724][T12909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.337607][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 320.345335][ T93] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 320.376760][ T9] usb 4-1: device descriptor read/8, error -71 [ 320.397286][T12926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.406605][T12926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.485334][ T93] usb 6-1: device descriptor read/64, error -71 [ 320.625192][ T9] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 320.646711][ T9] usb 4-1: device descriptor read/8, error -71 [ 320.735091][ T93] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 320.755360][ T9] usb usb4-port1: unable to enumerate USB device [ 320.865332][ T93] usb 6-1: device descriptor read/64, error -71 [ 320.976728][ T93] usb usb6-port1: attempt power cycle [ 321.055976][ T9] usb 2-1: USB disconnect, device number 89 [ 321.124073][T12945] XFS (rnullb0): Invalid superblock magic number [ 321.315080][ T93] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 321.348471][ T93] usb 6-1: device descriptor read/8, error -71 [ 321.595121][ T93] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 321.615849][ T93] usb 6-1: device descriptor read/8, error -71 [ 321.727072][ T93] usb usb6-port1: unable to enumerate USB device [ 321.879069][T12980] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'. [ 322.226089][T12999] /dev/rnullb0: Can't open blockdev [ 322.904310][T13003] netlink: 'syz.1.1782': attribute type 3 has an invalid length. [ 322.962326][T13003] netlink: 716 bytes leftover after parsing attributes in process `syz.1.1782'. [ 323.285328][T13010] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1785'. [ 323.321270][T13010] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 323.358330][T13010] /dev/rnullb0: Can't open blockdev [ 323.581419][T13024] /dev/rnullb0: Can't open blockdev [ 323.894240][T13031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.930378][T13031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.979482][T13031] tmpfs: Unknown parameter 'usrquotaߴiآ(Ab/!]-k2gEvDz\o $qG' [ 323.991256][T13029] tmpfs: Unknown parameter 'usrquotaߴiآ(Ab/!]-k2gEvDz\o $qG' [ 324.053040][T13047] binder: 13046:13047 ioctl c0306201 200000000080 returned -14 [ 324.061303][T13047] binder: 13046:13047 ioctl c020f509 2000000000c0 returned -22 [ 324.079236][T13047] /dev/rnullb0: Can't open blockdev [ 324.240576][T13067] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 324.593941][T13092] netlink: 'syz.5.1804': attribute type 8 has an invalid length. [ 324.674119][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1804'. [ 325.410747][T13103] /dev/rnullb0: Can't open blockdev [ 325.534601][T13110] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 325.637457][T13117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.650349][T13117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.669342][T13117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.681373][T13117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.744395][T13125] binder: BINDER_SET_CONTEXT_MGR already set [ 325.755227][T13125] binder: 13120:13125 ioctl 4018620d 2000000000c0 returned -16 [ 325.867724][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 325.879168][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 325.910911][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 325.920528][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1812'. [ 325.932575][T13132] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1812'. [ 326.105901][T13146] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 326.290529][T13157] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1819'. [ 326.458310][T13170] /dev/rnullb0: Can't open blockdev [ 327.126332][T13188] /dev/rnullb0: Can't open blockdev [ 327.208131][T13190] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 327.439457][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1829'. [ 327.485079][ T5878] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 327.625132][ T5878] usb 4-1: device descriptor read/64, error -71 [ 327.870353][ T5878] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 328.015409][ T5878] usb 4-1: device descriptor read/64, error -71 [ 328.135371][ T5878] usb usb4-port1: attempt power cycle [ 328.485486][ T5878] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 328.555674][ T5878] usb 4-1: device descriptor read/8, error -71 [ 328.740445][T13230] overlay: filesystem on ./bus not supported as upperdir [ 328.761468][T13230] overlay: filesystem on ./bus not supported as upperdir [ 328.785521][T13230] overlay: filesystem on ./bus not supported as upperdir [ 328.797444][ T5878] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 328.805656][T13230] overlay: filesystem on ./bus not supported as upperdir [ 328.825833][ T5878] usb 4-1: device descriptor read/8, error -71 [ 328.936672][ T5878] usb usb4-port1: unable to enumerate USB device [ 328.959307][T13242] netlink: 'syz.4.1839': attribute type 33 has an invalid length. [ 328.978810][T13242] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1839'. [ 328.998903][T13242] Can't find a SQUASHFS superblock on rnullb0 [ 329.275191][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 329.465099][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 329.479350][ T9] usb 2-1: config 50 has an invalid interface number: 87 but max is 1 [ 329.715081][ T9] usb 2-1: config 50 has an invalid interface number: 71 but max is 1 [ 329.724130][ T9] usb 2-1: config 50 has no interface number 0 [ 329.745154][ T9] usb 2-1: config 50 has no interface number 1 [ 329.751400][ T9] usb 2-1: config 50 interface 87 has no altsetting 0 [ 329.775120][ T9] usb 2-1: config 50 interface 71 has no altsetting 0 [ 329.783806][ T9] usb 2-1: New USB device found, idVendor=0602, idProduct=1001, bcdDevice=40.6d [ 329.795062][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.803084][ T9] usb 2-1: Product: syz [ 329.825033][ T9] usb 2-1: Manufacturer: syz [ 329.829664][ T9] usb 2-1: SerialNumber: syz [ 330.051920][T13092] syz.5.1804 (13092) used greatest stack depth: 18448 bytes left [ 330.188430][T13269] /dev/rnullb0: Can't open blockdev [ 330.463652][ T9] usb 2-1: bad CDC descriptors [ 330.484907][ T9] usb 2-1: USB disconnect, device number 91 [ 330.495172][ T5864] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 330.655250][ T5864] usb 6-1: Using ep0 maxpacket: 16 [ 330.666590][ T5864] usb 6-1: config 0 has an invalid interface number: 58 but max is 0 [ 330.674919][ T5864] usb 6-1: config 0 has no interface number 0 [ 330.675112][ T5878] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 330.682881][ T5864] usb 6-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 330.708987][ T5864] usb 6-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 330.725495][ T5864] usb 6-1: config 0 interface 58 has no altsetting 0 [ 330.734195][ T5864] usb 6-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 330.744541][ T5864] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.752903][ T5864] usb 6-1: Product: syz [ 330.765160][ T5864] usb 6-1: Manufacturer: syz [ 330.769904][ T5864] usb 6-1: SerialNumber: syz [ 330.777137][ T5864] usb 6-1: config 0 descriptor?? [ 330.783342][T13272] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 330.790738][T13272] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 330.799567][ T5864] ums-isd200 6-1:0.58: USB Mass Storage device detected [ 330.847769][ T5878] usb 4-1: Using ep0 maxpacket: 32 [ 330.854722][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short [ 330.864508][ T5878] usb 4-1: config 14 has an invalid interface number: 120 but max is 0 [ 330.878161][ T5878] usb 4-1: config 14 has no interface number 0 [ 330.901753][ T5878] usb 4-1: config 14 interface 120 has no altsetting 0 [ 330.918090][ T5878] usb 4-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice=22.cd [ 330.935568][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.953811][ T5878] usb 4-1: Product: syz [ 330.963936][ T5878] usb 4-1: Manufacturer: syz [ 330.974045][ T5878] usb 4-1: SerialNumber: syz [ 331.075126][T13313] omfs: Invalid superblock (0) [ 331.107245][ T5864] ums-isd200 6-1:0.58: probe with driver ums-isd200 failed with error -22 [ 331.225486][T13272] netlink: 'syz.5.1845': attribute type 21 has an invalid length. [ 331.253705][T13272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.266728][T13272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.400758][ T93] usb 6-1: USB disconnect, device number 75 [ 331.445659][ T5878] ftdi_sio 4-1:14.120: FTDI USB Serial Device converter detected [ 331.456929][ T5878] ftdi_sio ttyUSB0: unknown device type: 0x22cd [ 331.477483][ T5878] usb 4-1: USB disconnect, device number 106 [ 331.495829][ T5878] ftdi_sio 4-1:14.120: device disconnected [ 331.986435][T13371] netlink: 'syz.5.1855': attribute type 2 has an invalid length. [ 332.635070][ T5878] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 332.795862][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 332.826548][ T5878] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.845090][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 332.865120][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 332.885691][ T5878] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 332.905125][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.939189][ T5878] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 332.955061][ T5878] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 332.975694][ T5878] usb 6-1: Manufacturer: syz [ 332.993641][ T5878] usb 6-1: config 0 descriptor?? [ 333.265211][ T5878] rc_core: IR keymap rc-hauppauge not found [ 333.272427][ T5878] Registered IR keymap rc-empty [ 333.286412][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.315089][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.354596][ T5878] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 333.400217][ T5878] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input99 [ 333.447358][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.465184][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.487045][T13384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.517796][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.535981][T13384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.565135][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.574618][T13431] /dev/rnullb0: Can't open blockdev [ 333.605270][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.617681][T13431] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.625186][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.639236][T13433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.649675][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.675272][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.695120][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.704219][T13433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.717879][ T5878] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 333.776811][ T5878] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 333.795379][ T5878] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 333.987820][T13451] netlink: 'syz.3.1869': attribute type 1 has an invalid length. [ 334.003840][T13451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1869'. [ 334.028556][ T93] usb 6-1: USB disconnect, device number 76 [ 334.155984][T13463] netlink: 'syz.5.1870': attribute type 10 has an invalid length. [ 334.202408][T13455] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1866'. [ 334.439016][T13463] team0: Port device geneve1 added [ 334.622212][T13497] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1665237869 (1665237869 ns) > initial count (677302680 ns). Using initial count to start timer. [ 334.747440][T13497] /dev/rnullb0: Can't open blockdev [ 335.967702][T13525] /dev/rnullb0: Can't open blockdev [ 336.311650][ T5868] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 336.336406][ T5868] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 336.640794][T13544] /dev/rnullb0: Can't open blockdev [ 336.700319][T13546] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 337.335758][T13563] /dev/rnullb0: Can't open blockdev [ 337.527633][ T5868] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 337.534887][T13565] tmpfs: Bad value for 'size' [ 337.768383][ T5949] usb 6-1: [UEAGLE-ATM] firmware is not available [ 337.882028][T13578] /dev/rnullb0: Can't open blockdev [ 338.264282][T13577] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1895'. [ 338.331398][T13585] veth0_to_team: entered promiscuous mode [ 338.347881][T13585] veth0_to_team: entered allmulticast mode [ 339.061698][T13632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1904'. [ 339.116317][T13637] omfs: Invalid superblock (0) [ 339.655399][T13662] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 339.728979][T13662] Error validating options; rc = [-22] [ 339.756464][T13662] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 339.770034][ T5864] usb 6-1: new full-speed USB device number 77 using dummy_hcd [ 339.835205][T13662] Error validating options; rc = [-22] [ 339.965603][T13667] bond0: (slave gretap0): Error: Device type is different from other slaves [ 340.075325][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.063521][ T5864] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 341.073456][ T5864] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 341.083805][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.221000][ T5864] usb 6-1: config 0 descriptor?? [ 342.329669][ T5864] usb 6-1: can't set config #0, error -71 [ 342.344522][ T5864] usb 6-1: USB disconnect, device number 77 [ 342.380520][T13690] 9p: Unknown parameter 'dibeo' [ 342.659953][T13697] /dev/rnullb0: Can't open blockdev [ 342.739587][T13691] program syz.5.1923 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 342.759240][T13703] /dev/rnullb0: Can't open blockdev [ 342.921793][T13724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.997990][T13724] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.076129][T13678] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 343.251874][T13780] /dev/rnullb0: Can't open blockdev [ 343.344114][T13788] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1932'. [ 343.384287][T13792] /dev/rnullb0: Can't open blockdev [ 343.479801][T13798] overlay: Bad value for 'workdir' [ 343.603111][T13801] /dev/rnullb0: Can't open blockdev [ 343.755073][ T5949] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 343.793612][T13806] /dev/sg0: Can't lookup blockdev [ 343.925710][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 343.944007][ T5949] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 343.961304][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.977789][ T5949] usb 4-1: Product: syz [ 343.987611][ T5949] usb 4-1: Manufacturer: syz [ 344.002848][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.015035][ T5949] usb 4-1: SerialNumber: syz [ 344.025370][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.032813][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.048377][ T5949] usb 4-1: config 0 descriptor?? [ 344.064251][ T5949] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 344.076671][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.093103][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.109700][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.120584][T13840] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1941'. [ 344.126534][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.137536][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.147896][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.155520][ T5878] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 344.166779][ T5878] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 344.268889][T13847] fido_id[13847]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 344.375173][ T5864] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 344.485132][ T5878] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 344.537446][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.548613][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.558508][ T5864] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 344.569917][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.579922][ T5864] usb 6-1: config 0 descriptor?? [ 344.647672][ T5878] usb 2-1: Using ep0 maxpacket: 16 [ 344.654288][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.665707][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.676722][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.690233][ T5878] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.699626][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.711340][ T5878] usb 2-1: config 0 descriptor?? [ 344.991468][ T5864] cp2112 0003:10C4:EA90.0010: item fetching failed at offset 5/7 [ 345.007788][ T5864] cp2112 0003:10C4:EA90.0010: parse failed [ 345.024019][ T5864] cp2112 0003:10C4:EA90.0010: probe with driver cp2112 failed with error -22 [ 345.042308][ T5949] gspca_ov534_9: reg_w failed -71 [ 345.129848][ T5878] HID 045e:07da: Invalid code 65791 type 1 [ 345.146463][ T5878] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0011/input/input104 [ 345.176207][ T5878] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 345.284112][ T5864] usb 6-1: USB disconnect, device number 78 [ 345.344787][ T5878] usb 2-1: USB disconnect, device number 92 [ 345.351287][ T5949] gspca_ov534_9: Unknown sensor 0000 [ 345.351350][ T5949] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 345.372207][ T5949] usb 4-1: USB disconnect, device number 107 [ 345.728533][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1945'. [ 345.765116][T13915] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1945'. [ 345.765151][ T5864] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 345.979223][ T5864] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.006452][T13952] /dev/rnullb0: Can't open blockdev [ 346.022071][ T5864] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 346.066377][ T5864] usb 6-1: config 0 interface 0 has no altsetting 0 [ 346.073075][ T5864] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00 [ 346.118008][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.148993][ T5864] usb 6-1: config 0 descriptor?? [ 346.198877][T13983] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 346.205430][T13983] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.239202][T13983] vhci_hcd vhci_hcd.0: Device attached [ 346.292223][T13999] vhci_hcd: connection closed [ 346.292430][T10037] vhci_hcd: stop threads [ 346.301714][T10037] vhci_hcd: release socket [ 346.325035][T10037] vhci_hcd: disconnect device [ 346.344509][T14009] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1952'. [ 346.520367][T14014] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 346.559310][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.582151][T14018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.592969][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.595469][T14018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.691312][ T5864] usb 6-1: string descriptor 0 read error: -71 [ 346.706050][ T5864] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input105 [ 346.729645][ T5223] bcm5974 6-1:0.0: could not read from device [ 346.757337][ T5223] bcm5974 6-1:0.0: could not read from device [ 346.764261][ T5864] usb 6-1: USB disconnect, device number 79 [ 346.774819][ T5223] bcm5974 6-1:0.0: could not read from device [ 346.784207][T10860] bcm5974 6-1:0.0: could not read from device [ 346.795353][ T10] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 346.813044][T10860] udevd[10860]: Error opening device "/dev/input/event4": No such file or directory [ 346.856652][T10860] udevd[10860]: Unable to EVIOCGABS device "/dev/input/event4" [ 346.864683][T10860] udevd[10860]: Unable to EVIOCGABS device "/dev/input/event4" [ 346.879445][T10860] udevd[10860]: Unable to EVIOCGABS device "/dev/input/event4" [ 346.888548][T10860] udevd[10860]: Unable to EVIOCGABS device "/dev/input/event4" [ 346.962671][T14057] /dev/rnullb0: Can't open blockdev [ 346.965291][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 346.977741][ T10] usb 4-1: config 0 has an invalid interface number: 145 but max is 1 [ 346.994938][ T10] usb 4-1: config 0 has an invalid interface number: 43 but max is 1 [ 347.015082][ T10] usb 4-1: config 0 has no interface number 0 [ 347.026187][ T10] usb 4-1: config 0 has no interface number 1 [ 347.035545][ T10] usb 4-1: config 0 interface 43 altsetting 250 bulk endpoint 0xF has invalid maxpacket 1023 [ 347.050457][ T10] usb 4-1: config 0 interface 43 altsetting 250 has a duplicate endpoint with address 0x2, skipping [ 347.054728][T14054] /dev/rnullb0: Can't open blockdev [ 347.061665][ T10] usb 4-1: config 0 interface 43 altsetting 250 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 347.079682][ T10] usb 4-1: config 0 interface 43 altsetting 250 endpoint 0x8E has an invalid bInterval 180, changing to 11 [ 347.091572][ T10] usb 4-1: config 0 interface 43 altsetting 250 endpoint 0x8E has invalid maxpacket 16902, setting to 1024 [ 347.104269][ T10] usb 4-1: config 0 interface 43 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.135136][ T10] usb 4-1: config 0 interface 145 has no altsetting 0 [ 347.142001][ T10] usb 4-1: config 0 interface 43 has no altsetting 0 [ 347.158683][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=c8.6a [ 347.170709][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.195633][ T10] usb 4-1: Product: syz [ 347.200100][ T10] usb 4-1: Manufacturer: syz [ 347.204709][ T10] usb 4-1: SerialNumber: syz [ 347.223525][ T10] usb 4-1: config 0 descriptor?? [ 347.695147][ T1211] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 347.846794][ T1211] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.857110][ T1211] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.866930][ T1211] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.876109][ T1211] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.884146][ T1211] usb 2-1: SerialNumber: syz [ 347.957968][ T10] keyspan_pda 4-1:0.145: required endpoints missing [ 347.981163][ T10] keyspan_pda 4-1:0.43: Keyspan PDA converter detected [ 347.992322][ T10] usb 4-1: Keyspan PDA converter now attached to ttyUSB0 [ 348.007439][ T10] usb 4-1: USB disconnect, device number 108 [ 348.023841][ T10] keyspan_pda ttyUSB0: Keyspan PDA converter now disconnected from ttyUSB0 [ 348.039045][ T10] keyspan_pda 4-1:0.43: device disconnected [ 348.165211][ T1211] usb 2-1: 0:2 : does not exist [ 348.186199][ T1211] usb 2-1: USB disconnect, device number 93 [ 348.220461][T10860] udevd[10860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.333224][T14116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.344873][T14117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.381524][T14137] /dev/rnullb0: Can't open blockdev [ 349.619619][T14147] netlink: 'syz.4.1969': attribute type 10 has an invalid length. [ 349.990647][T14180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.001234][T14180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.145065][ T1211] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 350.295171][ T1211] usb 2-1: Using ep0 maxpacket: 16 [ 350.302974][ T1211] usb 2-1: unable to get BOS descriptor or descriptor too short [ 350.311805][ T1211] usb 2-1: config 15 has an invalid interface number: 174 but max is 0 [ 350.320254][ T1211] usb 2-1: config 15 has no interface number 0 [ 350.326591][ T1211] usb 2-1: config 15 interface 174 altsetting 1 bulk endpoint 0x8 has invalid maxpacket 32 [ 350.336694][ T1211] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 350.347872][ T1211] usb 2-1: config 15 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 350.358961][ T1211] usb 2-1: config 15 interface 174 altsetting 1 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 350.370828][ T1211] usb 2-1: config 15 interface 174 has no altsetting 0 [ 350.379145][ T1211] usb 2-1: New USB device found, idVendor=1199, idProduct=6859, bcdDevice=fd.7d [ 350.388276][ T1211] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.396311][ T1211] usb 2-1: Product: syz [ 350.400475][ T1211] usb 2-1: Manufacturer: syz [ 350.405841][ T1211] usb 2-1: SerialNumber: syz [ 350.412264][T14169] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 350.425130][ T93] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 350.578942][ T93] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 350.591152][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.599689][ T93] usb 4-1: Product: syz [ 350.604053][ T93] usb 4-1: Manufacturer: syz [ 350.610789][ T93] usb 4-1: SerialNumber: syz [ 350.619539][ T93] usb 4-1: config 0 descriptor?? [ 350.826686][ T93] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 350.846991][ T1211] sierra 2-1:15.174: Sierra USB modem converter detected [ 350.864509][ T1211] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 350.875617][ T1211] usb 2-1: Sierra USB modem converter now attached to ttyUSB1 [ 350.892302][ T1211] usb 2-1: USB disconnect, device number 94 [ 350.914513][ T1211] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 350.939169][ T1211] sierra ttyUSB1: Sierra USB modem converter now disconnected from ttyUSB1 [ 350.958508][ T1211] sierra 2-1:15.174: device disconnected [ 351.649217][T14235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.660219][T14235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.302093][T14242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1986'. [ 352.311833][T14242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1986'. [ 352.323331][T14242] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1986'. [ 352.365229][T14244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.386311][T14244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.477654][ T93] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 352.500666][ T93] usb 4-1: USB disconnect, device number 109 [ 352.553135][T14267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.563332][T14267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.455130][ T1211] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 353.585426][T14302] overlay: ./file0 is not a directory [ 353.634345][ T1211] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 353.645976][ T1211] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 353.665792][ T1211] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 353.682521][ T1211] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 353.704434][ T1211] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.725054][ T1211] usb 4-1: Product: syz [ 353.729290][ T1211] usb 4-1: Manufacturer: syz [ 353.733896][ T1211] usb 4-1: SerialNumber: syz [ 354.117963][ T1211] usb 4-1: 0:2 : does not exist [ 354.138249][ T1211] usb 4-1: USB disconnect, device number 110 [ 354.166059][T10860] udevd[10860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.295327][ T93] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 354.475268][ T93] usb 6-1: Using ep0 maxpacket: 16 [ 354.486405][ T93] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.525156][ T93] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has an invalid bInterval 0, changing to 7 [ 354.537555][ T93] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 354.565101][ T93] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.585413][ T93] usb 6-1: config 0 interface 0 has no altsetting 0 [ 354.601109][ T93] usb 6-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 354.612805][ T93] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.624523][ T93] usb 6-1: Product: syz [ 354.629230][T14337] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 354.629881][T14336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2000'. [ 354.646710][ T93] usb 6-1: Manufacturer: syz [ 354.651931][ T93] usb 6-1: SerialNumber: syz [ 354.658405][T14340] /dev/rnullb0: Can't open blockdev [ 354.668896][ T93] usb 6-1: config 0 descriptor?? [ 354.736059][T14347] /dev/rnullb0: Can't open blockdev [ 354.736148][ T30] audit: type=1400 audit(2000000001.010:88): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14346 comm="syz.3.2003" [ 354.793117][T14353] 9p: Bad value for 'rfdno' [ 355.080206][T14314] /dev/rnullb0: Can't open blockdev [ 355.551855][T14381] /dev/rnullb0: Can't open blockdev [ 355.598949][T14383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.609700][T14383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.685495][ T9] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 355.836554][ T9] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 355.844746][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.855028][ T9] usb 4-1: config 0 has no interface number 0 [ 355.862097][ T9] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 355.872302][ T9] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.885577][ T1211] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 355.895295][ T9] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 355.904383][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.912446][ T9] usb 4-1: Product: syz [ 355.916630][ T9] usb 4-1: Manufacturer: syz [ 355.921206][ T9] usb 4-1: SerialNumber: syz [ 355.928437][ T9] usb 4-1: config 0 descriptor?? [ 356.015300][ T1211] usb 2-1: device descriptor read/64, error -71 [ 356.234274][T14395] fuse: Unknown parameter 'evlU0x0000000000000006' [ 356.285244][ T1211] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 356.435166][ T1211] usb 2-1: device descriptor read/64, error -71 [ 356.545669][ T1211] usb usb2-port1: attempt power cycle [ 356.717954][T14422] /dev/rnullb0: Can't open blockdev [ 356.742436][T14424] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 356.749985][T14424] /dev/rnullb0: Can't open blockdev [ 356.823048][T14430] /dev/rnullb0: Can't open blockdev [ 356.879199][T14439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.890345][T14439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.899777][ T1211] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 356.926036][ T1211] usb 2-1: device descriptor read/8, error -71 [ 357.010694][ T93] usb 6-1: USB disconnect, device number 80 [ 357.175322][ T1211] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 357.206059][ T1211] usb 2-1: device descriptor read/8, error -71 [ 357.315479][ T1211] usb usb2-port1: unable to enumerate USB device [ 357.385085][ T93] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 357.539627][ T93] usb 6-1: config 127 has an invalid interface number: 4 but max is 0 [ 357.548130][ T93] usb 6-1: config 127 has no interface number 0 [ 357.554416][ T93] usb 6-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= 8.a3 [ 357.572259][ T93] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.490283][ T24] usb 4-1: USB disconnect, device number 111 [ 358.674739][ T30] audit: type=1400 audit(2000000004.940:89): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=14493 comm="syz.1.2034" [ 358.694831][T14494] /dev/rnullb0: Can't open blockdev [ 359.372277][T14507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.389079][T14507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.420319][ T24] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 359.478813][T14455] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 359.491293][T14455] File: /dev/rnullb0 PID: 14455 Comm: syz.5.2029 [ 359.615327][ T24] usb 4-1: device descriptor read/64, error -71 [ 359.644796][T14516] /dev/rnullb0: Can't open blockdev [ 359.855103][ T24] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 359.883510][T14526] /dev/rnullb0: Can't open blockdev [ 359.985157][ T24] usb 4-1: device descriptor read/64, error -71 [ 360.076547][ T93] usb 6-1: string descriptor 0 read error: -71 [ 360.084143][ T93] ums-datafab 6-1:127.4: USB Mass Storage device detected [ 360.096114][ T24] usb usb4-port1: attempt power cycle [ 360.139025][ T93] ums-sddr55 6-1:127.4: USB Mass Storage device detected [ 360.191495][ T93] usb 6-1: USB disconnect, device number 81 [ 360.435061][ T24] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 360.485418][ T24] usb 4-1: device descriptor read/8, error -71 [ 360.617541][T14583] sock: sock_set_timeout: `syz.5.2051' (pid 14583) tries to set negative timeout [ 360.731723][ T24] usb 4-1: new full-speed USB device number 115 using dummy_hcd [ 360.765560][ T24] usb 4-1: device descriptor read/8, error -71 [ 360.885385][ T24] usb usb4-port1: unable to enumerate USB device [ 361.136945][T14610] /dev/rnullb0: Can't open blockdev [ 361.226379][T14623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.235910][T14623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.244309][T14626] /dev/rnullb0: Can't open blockdev [ 361.255087][T14623] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.2062'. [ 361.266042][T14623] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.2062'. [ 361.275610][T14623] netlink: 680 bytes leftover after parsing attributes in process `syz.4.2062'. [ 361.400920][T14635] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 361.408598][T14635] /dev/rnullb0: Can't open blockdev [ 361.571928][T14645] /dev/rnullb0: Can't open blockdev [ 361.591352][T14646] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2066'. [ 361.612402][T14648] /dev/rnullb0: Can't open blockdev [ 361.616101][T14646] /dev/rnullb0: Can't open blockdev [ 361.666524][T14655] /dev/rnullb0: Can't open blockdev [ 361.782121][T14662] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 361.790520][T14662] /dev/rnullb0: Can't open blockdev [ 362.431691][T14698] /dev/rnullb0: Can't open blockdev [ 362.535200][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 362.662206][T14707] /dev/rnullb0: Can't open blockdev [ 362.695059][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 362.701659][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.711096][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.721839][ T9] usb 2-1: config 0 has no interface number 0 [ 362.728194][ T9] usb 2-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 362.741548][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 362.751676][ T9] usb 2-1: config 0 interface 1 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 362.761884][ T9] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.776195][ T9] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 362.785691][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 362.794508][ T9] usb 2-1: SerialNumber: syz [ 362.814308][ T9] usb 2-1: config 0 descriptor?? [ 362.828875][ T9] hso 2-1:0.1: Failed to find BULK OUT ep [ 363.031345][T14690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.044031][T14690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.060278][T14690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.073663][T14690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.096068][ T9] usb 2-1: USB disconnect, device number 99 [ 363.162597][T14731] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2085'. [ 363.531832][T14747] Mount JFS Failure: -22 [ 363.535224][ T24] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 363.544284][T14747] jfs_mount failed w/return code = -22 [ 363.699424][ T24] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 363.708749][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.717554][ T24] usb 6-1: Product: syz [ 363.721789][ T24] usb 6-1: Manufacturer: syz [ 363.726484][ T24] usb 6-1: SerialNumber: syz [ 363.733506][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 363.740031][ T24] r8152-cfgselector 6-1: config 0 descriptor?? [ 363.845111][ T93] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 363.855282][ T5878] usb 2-1: new full-speed USB device number 100 using dummy_hcd [ 363.948890][T14700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.957641][T14700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.972953][ T24] r8152-cfgselector 6-1: Unknown version 0x0000 [ 363.979716][ T24] r8152-cfgselector 6-1: bad CDC descriptors [ 363.988381][ T24] r8152-cfgselector 6-1: USB disconnect, device number 82 [ 363.997194][ T93] usb 4-1: config 0 has no interfaces? [ 364.006044][ T93] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 364.016794][ T93] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.026508][ T93] usb 4-1: Product: syz [ 364.030843][ T93] usb 4-1: Manufacturer: syz [ 364.035557][ T93] usb 4-1: SerialNumber: syz [ 364.043356][ T5878] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.052729][ T93] usb 4-1: config 0 descriptor?? [ 364.058505][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.068224][ T5878] usb 2-1: Product: syz [ 364.072413][ T5878] usb 2-1: Manufacturer: syz [ 364.077202][ T5878] usb 2-1: SerialNumber: syz [ 364.083278][ T5878] usb 2-1: config 0 descriptor?? [ 364.245810][T14776] vxcan1: entered allmulticast mode [ 364.251416][T14776] vxcan1: left allmulticast mode [ 364.297294][ T1211] usb 4-1: USB disconnect, device number 116 [ 364.313547][ T5878] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 364.314709][T14776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.333006][T14776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.343943][T14776] /dev/rnullb0: Can't open blockdev [ 364.512582][T14794] /dev/rnullb0: Can't open blockdev [ 364.523393][T14756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.533452][T14756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.573642][T14801] /dev/rnullb0: Can't open blockdev [ 364.609008][T14803] /dev/rnullb0: Can't open blockdev [ 364.961653][T14824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.971899][T14824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.118149][T14830] /dev/rnullb0: Can't open blockdev [ 365.135480][ T5878] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 365.157037][ T5878] usb 2-1: USB disconnect, device number 100 [ 365.284671][T14841] /dev/rnullb0: Can't open blockdev [ 366.045530][T14866] /dev/rnullb0: Can't open blockdev [ 366.457673][T14871] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2111'. [ 366.716196][T14885] befs: (nbd5): No write support. Marking filesystem read-only [ 366.724057][T14885] block nbd5: Attempted send on invalid socket [ 366.730670][T14885] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 366.740560][T14885] befs: (nbd5): unable to read superblock [ 366.811352][T14889] syzkaller1: entered promiscuous mode [ 366.817291][T14889] syzkaller1: entered allmulticast mode [ 366.979745][T14910] /dev/rnullb0: Can't open blockdev [ 366.998581][T14911] /dev/rnullb0: Can't open blockdev [ 367.205203][ T5878] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 367.370804][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 367.383449][ T5878] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 367.402321][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.421574][ T5878] usb 2-1: Product: syz [ 367.425894][ T24] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 367.441983][ T5878] usb 2-1: Manufacturer: syz [ 367.449553][ T5878] usb 2-1: SerialNumber: syz [ 367.457392][ T5878] usb 2-1: config 0 descriptor?? [ 367.466423][ T5878] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 367.595054][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 367.603377][ T24] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 367.613502][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.621839][ T24] usb 4-1: Product: syz [ 367.626294][ T24] usb 4-1: Manufacturer: syz [ 367.630929][ T24] usb 4-1: SerialNumber: syz [ 367.637767][ T24] usb 4-1: config 0 descriptor?? [ 367.647568][ T24] gspca_main: se401-2.14.0 probing 047d:5003 [ 368.051832][ T24] gspca_se401: ExtraFeatures: 79 [ 368.057148][ T24] gspca_se401: Frame size: 0x0 1/16th janggu [ 368.259492][ T24] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input109 [ 368.463329][ T93] usb 4-1: USB disconnect, device number 117 [ 369.067731][T14952] block nbd3: Attempted send on invalid socket [ 369.073979][T14952] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.091814][T14952] block nbd3: Attempted send on invalid socket [ 369.100546][T14952] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.112373][T14952] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 369.122694][T14952] block nbd3: Attempted send on invalid socket [ 369.131188][T14952] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.141701][T14952] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 369.155116][T14952] block nbd3: Attempted send on invalid socket [ 369.161392][T14952] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.172831][T14952] block nbd3: Attempted send on invalid socket [ 369.179501][T14952] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.190001][T14952] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 369.204087][T14952] block nbd3: Attempted send on invalid socket [ 369.210693][T14952] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.221763][T14952] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 369.231976][T14952] block nbd3: Attempted send on invalid socket [ 369.239777][T14952] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.249593][T14952] block nbd3: Attempted send on invalid socket [ 369.256647][T14952] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.266132][T14952] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 369.277331][T14952] block nbd3: Attempted send on invalid socket [ 369.283536][T14952] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 369.293695][T14952] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 369.305492][T14952] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 369.318343][T14952] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 369.327925][T14952] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 369.382438][T14955] /dev/rnullb0: Can't open blockdev [ 369.516748][T14962] /dev/rnullb0: Can't open blockdev [ 370.104931][T14992] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2139'. [ 370.124782][T14992] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2139'. [ 370.425196][ T1211] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 370.555385][ T5878] gspca_sonixj: i2c_w8 err -71 [ 370.595234][ T5878] sonixj 2-1:0.0: probe with driver sonixj failed with error -71 [ 370.605078][ T1211] usb 6-1: Using ep0 maxpacket: 8 [ 370.608976][ T5878] usb 2-1: USB disconnect, device number 101 [ 370.611563][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 370.637497][ T1211] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 370.665053][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 250, changing to 11 [ 370.676315][ T1211] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33341, setting to 1024 [ 370.697015][ T1211] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 370.706257][ T1211] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.714282][ T1211] usb 6-1: Product: syz [ 370.718577][ T1211] usb 6-1: Manufacturer: syz [ 370.723285][ T1211] usb 6-1: SerialNumber: syz [ 370.735679][ T1211] usb 6-1: config 0 descriptor?? [ 370.743799][ T1211] radioshark2 6-1:0.0: Invalid radioSHARK2 device [ 370.754048][ T1211] radioshark2 6-1:0.0: probe with driver radioshark2 failed with error -22 [ 370.837690][T15016] /dev/rnullb0: Can't open blockdev [ 370.934144][T15018] qnx6: unable to read the first superblock [ 370.958443][T14996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.974016][T14996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.987929][T14996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.998958][T14996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.017843][T14996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.029525][T14996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.042856][T14996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.054430][T14996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.066826][T14996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.090031][T15034] /dev/rnullb0: Can't open blockdev [ 371.099869][T14996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.167155][ T5868] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 371.199806][ T1211] usb 6-1: USB disconnect, device number 83 [ 371.334547][T15068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2147'. [ 372.001287][T15096] binder: 15095:15096 ioctl c00c620f 0 returned -14 [ 372.095159][ T9] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 372.224253][T15111] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2158'. [ 372.267946][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.285047][ T93] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 372.294016][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.314222][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 372.343230][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 372.365071][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.395228][ T9] usb 6-1: config 0 descriptor?? [ 372.456623][ T93] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 372.467267][ T93] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.478268][ T93] usb 4-1: config 0 descriptor?? [ 372.492825][ T93] cp210x 4-1:0.0: cp210x converter detected [ 372.534682][T15110] Process accounting resumed [ 372.743480][ T93] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 372.763651][ T93] cp210x 4-1:0.0: querying part number failed [ 372.785183][ T93] usb 4-1: cp210x converter now attached to ttyUSB0 [ 372.817657][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 373.068021][ T9] usb 6-1: USB disconnect, device number 84 [ 373.112443][T15157] netlink: 'syz.4.2162': attribute type 3 has an invalid length. [ 373.121572][T15157] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2162'. [ 373.131062][T15158] netlink: 'syz.4.2162': attribute type 3 has an invalid length. [ 373.140140][T15158] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2162'. [ 373.153710][T15157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.165866][T15158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.178050][T15157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.188456][T15158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.651036][T15169] /dev/rnullb0: Can't open blockdev [ 374.325245][ T5878] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 374.476106][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 374.483730][ T5878] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 374.500135][ T5878] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 374.522437][ T5878] usb 6-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 374.541189][ T5878] usb 6-1: Product: syz [ 374.553628][ T5878] usb 6-1: Manufacturer: syz [ 374.559702][ T5878] usb 6-1: SerialNumber: syz [ 374.566491][ T5878] usb 6-1: config 0 descriptor?? [ 374.774923][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2167'. [ 374.797605][ T5878] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 374.849195][T15210] /dev/rnullb0: Can't open blockdev [ 374.948826][T15221] ------------[ cut here ]------------ [ 374.954461][T15221] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#1: syz.4.2176/15221 [ 374.964501][T15221] Modules linked in: [ 374.968759][T15221] CPU: 1 UID: 0 PID: 15221 Comm: syz.4.2176 Not tainted syzkaller #0 PREEMPT(full) [ 374.978228][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 374.988878][T15221] RIP: 0010:path_noexec+0x1af/0x200 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 374.994110][T15221] Code: 02 31 ff 48 89 de e8 00 c0 88 ff d1 eb eb 07 e8 17 bb 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 f1 50 09 cc e8 02 bb 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 375.014140][T15221] RSP: 0018:ffffc9000b0d7bd8 EFLAGS: 00010287 [ 375.020857][T15221] RAX: ffffffff823813ce RBX: ffff888028f89c80 RCX: 0000000000080000 [ 375.028929][T15221] RDX: ffffc9000c051000 RSI: 0000000000000083 RDI: 0000000000000084 [ 375.037085][T15221] RBP: 0000000000080000 R08: ffff88806542bc00 R09: 0000000000000003 [ 375.045342][T15221] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 375.053398][T15221] R13: 1ffff9200161af90 R14: 0000000000000000 R15: dffffc0000000000 [ 375.061446][T15221] FS: 00007f39250a36c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 375.070516][T15221] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.077719][T15221] CR2: 00002000000000c0 CR3: 00000000694be000 CR4: 00000000003526f0 [ 375.086115][T15221] Call Trace: [ 375.089420][T15221] [ 375.092363][T15221] do_mmap+0xa43/0x10d0 [ 375.096861][T15221] ? __pfx_do_mmap+0x10/0x10 [ 375.101517][T15221] ? down_write_killable+0x178/0x230 [ 375.106958][T15221] ? __pfx_down_write_killable+0x10/0x10 [ 375.112680][T15221] ? common_file_perm+0x1b5/0x230 [ 375.117901][T15221] vm_mmap_pgoff+0x2a6/0x4d0 [ 375.122549][T15221] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 375.127804][T15221] ? lock_release+0x4b/0x3e0 [ 375.132446][T15221] ? __se_sys_futex+0x36f/0x400 [ 375.137394][T15221] ? __fget_files+0x2a/0x420 [ 375.142035][T15221] ? __fget_files+0x2a/0x420 [ 375.146721][T15221] ksys_mmap_pgoff+0x51f/0x760 [ 375.151580][T15221] do_syscall_64+0xfa/0xfa0 [ 375.156191][T15221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.162305][T15221] ? clear_bhb_loop+0x60/0xb0 [ 375.167316][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.173264][T15221] RIP: 0033:0x7f392418ebe9 [ 375.177809][T15221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.197864][T15221] RSP: 002b:00007f39250a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 375.206590][T15221] RAX: ffffffffffffffda RBX: 00007f39243c5fa0 RCX: 00007f392418ebe9 [ 375.214661][T15221] RDX: 0000000003000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 375.222850][T15221] RBP: 00007f3924211e19 R08: 0000000000000003 R09: 00000000a471a000 [ 375.230901][T15221] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000000 [ 375.238979][T15221] R13: 00007f39243c6038 R14: 00007f39243c5fa0 R15: 00007ffcc04865f8 [ 375.247550][T15221] [ 375.250666][T15221] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 375.257959][T15221] CPU: 1 UID: 0 PID: 15221 Comm: syz.4.2176 Not tainted syzkaller #0 PREEMPT(full) [ 375.267339][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.277392][T15221] Call Trace: [ 375.280761][T15221] [ 375.283687][T15221] dump_stack_lvl+0x99/0x250 [ 375.288283][T15221] ? __asan_memcpy+0x40/0x70 [ 375.292877][T15221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.298076][T15221] ? __pfx__printk+0x10/0x10 [ 375.302674][T15221] vpanic+0x281/0x750 [ 375.306687][T15221] ? __pfx__printk+0x10/0x10 [ 375.311280][T15221] ? __pfx_vpanic+0x10/0x10 [ 375.315786][T15221] ? is_bpf_text_address+0x292/0x2b0 [ 375.321064][T15221] ? is_bpf_text_address+0x26/0x2b0 [ 375.326258][T15221] panic+0xb9/0xc0 [ 375.329992][T15221] ? __pfx_panic+0x10/0x10 [ 375.334413][T15221] __warn+0x334/0x4c0 [ 375.338390][T15221] ? path_noexec+0x1af/0x200 [ 375.342977][T15221] ? path_noexec+0x1af/0x200 [ 375.347563][T15221] report_bug+0x2be/0x4f0 [ 375.351885][T15221] ? path_noexec+0x1af/0x200 [ 375.356491][T15221] ? path_noexec+0x1af/0x200 [ 375.361078][T15221] ? path_noexec+0x1b1/0x200 [ 375.365661][T15221] handle_bug+0x84/0x160 [ 375.369894][T15221] exc_invalid_op+0x1a/0x50 [ 375.374390][T15221] asm_exc_invalid_op+0x1a/0x20 [ 375.379229][T15221] RIP: 0010:path_noexec+0x1af/0x200 [ 375.384425][T15221] Code: 02 31 ff 48 89 de e8 00 c0 88 ff d1 eb eb 07 e8 17 bb 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 f1 50 09 cc e8 02 bb 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 375.404036][T15221] RSP: 0018:ffffc9000b0d7bd8 EFLAGS: 00010287 [ 375.410106][T15221] RAX: ffffffff823813ce RBX: ffff888028f89c80 RCX: 0000000000080000 [ 375.418068][T15221] RDX: ffffc9000c051000 RSI: 0000000000000083 RDI: 0000000000000084 [ 375.426032][T15221] RBP: 0000000000080000 R08: ffff88806542bc00 R09: 0000000000000003 [ 375.434013][T15221] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 375.441997][T15221] R13: 1ffff9200161af90 R14: 0000000000000000 R15: dffffc0000000000 [ 375.449967][T15221] ? path_noexec+0x1ae/0x200 [ 375.454564][T15221] ? path_noexec+0x1ae/0x200 [ 375.459206][T15221] do_mmap+0xa43/0x10d0 [ 375.463399][T15221] ? __pfx_do_mmap+0x10/0x10 [ 375.467984][T15221] ? down_write_killable+0x178/0x230 [ 375.473266][T15221] ? __pfx_down_write_killable+0x10/0x10 [ 375.478899][T15221] ? common_file_perm+0x1b5/0x230 [ 375.483953][T15221] vm_mmap_pgoff+0x2a6/0x4d0 [ 375.488549][T15221] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 375.493819][T15221] ? lock_release+0x4b/0x3e0 [ 375.498424][T15221] ? __se_sys_futex+0x36f/0x400 [ 375.503275][T15221] ? __fget_files+0x2a/0x420 [ 375.507862][T15221] ? __fget_files+0x2a/0x420 [ 375.512450][T15221] ksys_mmap_pgoff+0x51f/0x760 [ 375.517217][T15221] do_syscall_64+0xfa/0xfa0 [ 375.521716][T15221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.527861][T15221] ? clear_bhb_loop+0x60/0xb0 [ 375.532542][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.538433][T15221] RIP: 0033:0x7f392418ebe9 [ 375.542844][T15221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.562450][T15221] RSP: 002b:00007f39250a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 375.570861][T15221] RAX: ffffffffffffffda RBX: 00007f39243c5fa0 RCX: 00007f392418ebe9 [ 375.578831][T15221] RDX: 0000000003000003 RSI: 0000000000b36000 RDI: 0000200000000000 [ 375.586819][T15221] RBP: 00007f3924211e19 R08: 0000000000000003 R09: 00000000a471a000 [ 375.594795][T15221] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000000 [ 375.602764][T15221] R13: 00007f39243c6038 R14: 00007f39243c5fa0 R15: 00007ffcc04865f8 [ 375.610781][T15221] [ 375.614092][T15221] Kernel Offset: disabled [ 375.618420][T15221] Rebooting in 86400 seconds..