last executing test programs: 3m59.521979904s ago: executing program 1 (id=713): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, 0x1001, 0xc}}) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) (async) sendfile(r0, r0, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mmap(&(0x7f000086a000/0x8000)=nil, 0x8000, 0x3000001, 0x22052, 0xffffffffffffffff, 0x2000) read$eventfd(r0, &(0x7f0000000100), 0x8) socket$xdp(0x2c, 0x3, 0x0) 3m59.478930086s ago: executing program 1 (id=714): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="0c00238006001200970f0000a32004235a6f9273f9fd40ce941d4388f495f1683690ed7001cd2a45"], 0x28}}, 0x0) r4 = syz_usb_connect$cdc_ecm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x3, 0x9a7636bbc73cba30, 0x40, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x1, {{0x9, 0x24, 0x6, 0x0, 0x0, "08d61a00"}, {0x5, 0x24, 0x0, 0xc6}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8, 0xbe, 0xf4}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x93, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x200}, @dmm={0x7, 0x24, 0x14, 0x6, 0x7}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x20, 0x40, 0x7b}}], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x5, 0x0, 0x7}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x2, 0x6, 0x0, 0x8, 0x18}, 0x8, &(0x7f00000000c0)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}}) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x21, 0xba, {0xba, 0x1, "06ee04f3cc5d53c5092c7da2f9b5cc25d41e9889e18bf4fc3cb6a3f5c60bba3c178df57104920266fff1eedfbc3f1bdcae18851cc29162edddb67ec237d814d5834cd72984f731762e67259a1f5f0a4140666ed7977493efaaeff43cd3afe1caff82af30ba95c9d71cc08934e1ad76d45f3a7a03657e45b866adab2d98c55569f66fe2181ef0d6424ed9e1299049f987d7c9bd44dbcb3fa957bafe283e635fb3f92c694d43877ec75f631d11b31438c627ca394dc1a43b9d"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000600)={0x1c, &(0x7f0000000540)={0x20, 0x14, 0x30, "be52752ffe0a753b0f411b43b8a21cddd5c23a42db951a4a02965024ba1825868def0b938f52445611e69556c3bc2905"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000640)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x9c, r2, 0x0, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x14}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_PRIVACY={0x4}, @acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}], @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x2}]}, 0x9c}, 0x1, 0x0, 0x0, 0x44}, 0x4001) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 3m56.418599036s ago: executing program 1 (id=732): r0 = socket(0x9, 0x3, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x101242, 0x0) write$vga_arbiter(r1, &(0x7f00000001c0)=@other={'decodes', ' ', 'mem'}, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{0x2, 0x1}], {0x4, 0x1}, [], {0x10, 0x1}}, 0x2c, 0x3) chmod(&(0x7f0000000200)='./bus\x00', 0x44) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='v7\x00', 0x240000, 0x0) 3m56.35340544s ago: executing program 1 (id=734): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000001c0)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = socket(0x1a, 0x2, 0x3) getsockopt$packet_buf(r0, 0x107, 0x2, &(0x7f0000000240)=""/1, &(0x7f0000002180)=0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000380)) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) setpgid(r1, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000050005000100000008000400000000000500060000000000080003"], 0x34}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, 0x0, &(0x7f00000002c0)) 3m56.252009689s ago: executing program 1 (id=736): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0xa0, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x7f, @loopback}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x80000000, @mcast2, 0x4}, @in6={0xa, 0x4e24, 0xc0000000, @dev={0xfe, 0x80, '\x00', 0x36}, 0x200}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e20, 0x10, @remote, 0xfffffff3}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000200)={r2, 0x8, 0x800, 0x3ff, 0x9, 0x8}, 0x14) write(r0, &(0x7f0000000000)="fb196dec69a10b22", 0x8) close(r0) ioctl$TIOCSERGETLSR(0xffffffffffffffff, 0x5459, &(0x7f0000000080)) 3m55.863868492s ago: executing program 1 (id=738): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)={0x14, 0x22, 0x1, 0x70bd22, 0x25dfdbfe, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000200)={0x1, 0x6, 0x10}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x4, 0x0, 0x4, 0x1, 0x5, 0x6], 0x0, 0x6ab52}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x181) fcntl$notify(r3, 0x402, 0x2b) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f00000000c0)) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000700), 0x4) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='ext3\x00', 0x400, 0x0) 3m55.571670185s ago: executing program 32 (id=738): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)={0x14, 0x22, 0x1, 0x70bd22, 0x25dfdbfe, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000200)={0x1, 0x6, 0x10}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x4, 0x0, 0x4, 0x1, 0x5, 0x6], 0x0, 0x6ab52}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x181) fcntl$notify(r3, 0x402, 0x2b) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f00000000c0)) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e1f, 0x6, @loopback, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) (async) setsockopt$inet6_tcp_int(r5, 0x11a, 0x3, &(0x7f0000000700), 0x4) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='ext3\x00', 0x400, 0x0) 5.051455145s ago: executing program 2 (id=1450): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f00000002c0)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='.\x00', 0x0, 0x2125099, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r10 = dup3(r9, r8, 0x0) socket(0x2b, 0xe, 0xfffffffa) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000540)={0xffffffffffffff87, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x60) bind$xdp(r0, &(0x7f0000000140)={0x2c, 0xd, r5, 0x1d}, 0x10) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='ext3\x00', 0x200002, 0x0) 4.357641982s ago: executing program 3 (id=1458): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000001f) r1 = open(&(0x7f0000000040)='./file0\x00', 0x212a00, 0x0) fanotify_mark(r1, 0x0, 0x8001008, r1, &(0x7f0000000000)='./file0\x00') fcntl$notify(r1, 0x402, 0x80000024) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000002) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 4.157578992s ago: executing program 0 (id=1460): r0 = creat(&(0x7f0000000040)='./file0\x00', 0xf0) getpid() (async, rerun: 64) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0xed, [{{0x9, 0x4, 0x0, 0x4, 0x4, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}}}}]}}]}}, 0x0) (async, rerun: 64) r2 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r4, 0xc0a85320, &(0x7f00000000c0)={{0x80, 0xfd}, 'port0\x00', 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000005c0)={r3, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x5, 0x88000) syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000000740)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x58, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0xfa, 0x80, 0x9, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x2, 0x6, 0x0, 0x3, {{0xa, 0x24, 0x6, 0x0, 0x0, "f129c10345"}, {0x5, 0x24, 0x0, 0xfffb}, {0xd, 0x24, 0xf, 0x1, 0x401, 0x210, 0x0, 0x9a}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x7f, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x9, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xb1, 0x7, 0x9}}}}}]}}]}}, &(0x7f0000000a40)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x241, 0xfd, 0x0, 0x8, 0xff, 0xcc}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x6, [{0x7f, &(0x7f0000000840)=@string={0x7f, 0x3, "ac28f0bb28cf1dd19bf546d3ea2bb167b30770ae66d116b0e2337c79c5de62ec9779222887b29e25330329a85cc4372086f1f44ad2c07f68b15e1da368824d87669bd43e7b78d6d3939af4390569dd0e2de3e28d0d6bf18e7907b522e17db5e15a2bf2301de0d1064c032f1e1412906d7aee8b28b5f88689d633eaea0e"}}, {0x48, &(0x7f00000008c0)=@string={0x48, 0x3, "a16807bb489eaa871fa23fcc7669503522b1f961e2071eec1bbf59ab1a5e093f6d5bbc4d6bac5dea38e4d4bcc8d081b8f1f32aabd74fe2c514dfeeb1a323b2742ea27e61dc3d"}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000980)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0xc01}}]}) (async) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000001280)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r7 = dup(r6) ioctl$PTP_EXTTS_REQUEST2(r7, 0xc0603d06, &(0x7f0000000300)) ioctl$LOOP_CHANGE_FD(r5, 0x4c03, r2) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000600)={0x2c, &(0x7f0000000ac0)={0x0, 0x31, 0x77, {0x77, 0x3, "04a64b7c7752ab86391a56c661940c1dfa514c2ca8bc6ad0c7df18b0448968960305af30a95b01ced7cf4dedffa592a40273aea20dd0d2959815fb179447bc3accc2edb3e10d8f0df24a133aa3f3f395a053446178d7aa4032e8a3e012b1bd23b6719e23b01bcb92de9782ad447f007e2f54a4df37"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000000c0)={0x0, 0x11, 0x1f, {0x1f, 0xd, "cd07ba2861f371007cce7bf8d19baf494b9a2c200bb89da97a59e93e43"}}, &(0x7f0000000100)={0x0, 0x3, 0x7d, @string={0x7d, 0x3, "3ae485808a3a9d7ddad0154e6bd37ccacbc376b5dd9cc49733dc5c932b4c9e1360d803f8de7faa3c4c3283e56d4304d59c146b8f5016a3edac238f48bd50552a05bdd72c2d4f1151d25ff680c5d41d0aff60534b0ff2ee50c8161e926752d02892c8812ece432222ff0a800db167139561c5528ae4e13c38d95c15"}}, &(0x7f00000001c0)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0xb, '\x00'}]}}, &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0xae, 0x1, {0x22, 0x497}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x20, 0xa, 0x7c, "501bedfbf300db0b6289e0f6aa1a2a0ce4c60b8cdd0616f00c3f1499d0beb55ec0fb8b81838d234f17eb9bf46f255237478b0933c0b79342049b9c093f60eefc0221d0af020383502a63dcf2a9e72e3601e66eb77130d70d6f4c7de04918dd031137fe03244b4681bb5786c4856c8b36a6d5faa296632dcacafbc624"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xdd}, &(0x7f0000000380)={0x0, 0x8, 0x1}, &(0x7f0000000480)={0x20, 0x1, 0xfb, "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"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x4}}) (async) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r9 = dup(r8) (async) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f0000000b40)) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x7, 0x0, 0x0) (async, rerun: 32) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) (rerun: 32) r10 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSF2(r10, 0x402c542d, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x40280, 0x0) 3.79106026s ago: executing program 0 (id=1462): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x14}, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 3.647512025s ago: executing program 3 (id=1463): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x19}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1, &(0x7f00000000c0)) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESOCT], 0xfe33) (async, rerun: 32) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) (rerun: 32) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r4, 0x0, 0x2000) write$UHID_CREATE(r3, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x0, 0x57, 0x0, 0x0, 0x1, 0x0, 0x81}}, 0x120) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000000000001000000000000000000000000000000001b0300ff"]) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008c04"]) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)={0x2c, r10, 0x1, 0x70bd2d, 0x25df5bfe, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x20) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x24, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}]}, @nested={0x4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r7, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e20, 0xffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}], 0x1c) (async, rerun: 64) sendmsg$netlink(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)={0x1c, 0x5e, 0x101, 0x0, 0x0, "", [@typed={0x8, 0x41, 0x0, 0x0, @uid}, @typed={0x4, 0xe5}]}, 0x1c}], 0x1}, 0x0) (rerun: 64) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 3.499577698s ago: executing program 2 (id=1464): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) setrlimit(0xd, &(0x7f0000000300)={0x200, 0xffffffffffffffff}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)="9771"}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfffc, 0xa4, 0xfffe, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x9, 0x20000005}, {0xfaf5, 0x4, 0x0, 0x400000000a789}, 0xfffffffe, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x32}, 0x0, @in=@loopback, 0x0, 0x3, 0x1, 0x7, 0x0, 0x1000}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r2, 0x1, 0x2c, &(0x7f0000000080)=0x3, 0xfffffe22) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-sse2\x00'}, 0x58) close(0x3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r6, &(0x7f0000000000)="2d3020da", 0x4) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000280)={0xf000000, 0xc04, 0xd, r6, 0x0, &(0x7f0000000200)={0x98091a, 0x3, '\x00', @string=&(0x7f00000001c0)=0x3}}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x84, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}}, 0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000002"], 0x30}], 0x1, 0x0) sendto$inet6(r5, &(0x7f00000000c0)="d90d65faea8e9861af0590f25bac6cc80858d943aa88cd4e2c76f8df4404eaa3f71a3ed212cb40d57fa1a3e816995d05914f21fed2d29bde0283f00c1ede31ca05a53acda7558cae758c273bc27ea3d8d59d79be64f2bb3b3bd0cd4ae15d6e82d15e83cb94f10ce53a3d21acd9", 0x6d, 0x20000000, &(0x7f0000000140)={0xa, 0x4, 0x0, @loopback, 0x433}, 0x1c) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000180)={0x3e, 0x4, 0x2}) syz_io_uring_setup(0x4658, &(0x7f0000000540)={0x0, 0xa040, 0x2, 0x3, 0xe5, 0x0, r6}, &(0x7f00000002c0), &(0x7f0000000480)) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0xb4, 0x1, 0x1, 0x400}, {0x2, 0x1, 0x6, 0x5}, {0x5, 0x7, 0x0, 0x3}, {0x6, 0x9, 0x3, 0x3}]}) 3.427587467s ago: executing program 0 (id=1466): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 32) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) (async, rerun: 64) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) (async, rerun: 64) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = accept4$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c, 0x0) (async) creat(&(0x7f0000000200)='./file0\x00', 0xd931d3864d39ddda) (async) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x0, 0x0, 0x34565348, 0x8, 0x9, [{0x1}, {}, {}, {}, {}, {}, {0x80000000}]}}) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000180)='affs\x00', 0x0, &(0x7f0000000140)='grpquota') (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x4000010, r2, 0x45809000) (async, rerun: 64) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x0, 0x0}) 2.879920406s ago: executing program 2 (id=1468): r0 = syz_io_uring_complete(0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000040)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000140)='./cgroup\x00', &(0x7f00000000c0)='ufs\x00', 0xa08080, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x81) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './cgroup\x00'}) 2.85180891s ago: executing program 0 (id=1469): creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) socket$netlink(0x10, 0x3, 0x9) (async, rerun: 32) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) (async, rerun: 32) r0 = socket$isdn_base(0x22, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r2, 0x6a98047402e98331}, 0x14}}, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 2.73339983s ago: executing program 4 (id=1470): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x34424752}}) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) (async) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000200)=""/173, &(0x7f00000000c0)=0xad) setuid(0xee00) (async) r7 = socket(0x14, 0x2, 0x4) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r7, 0xc038943b, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008000c00a80a0000050010"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) (async) r9 = creat(&(0x7f0000000140)='./file0\x00', 0x71) write$cgroup_devices(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='c%*:* rw\x00'], 0x9) r10 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/binder/state\x00', 0x6, 0x0) write$FUSE_CREATE_OPEN(r10, 0x0, 0x0) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 2.663843493s ago: executing program 3 (id=1471): creat(&(0x7f0000001380)='./file0\x00', 0xa5) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f00000007c0), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x7}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008"], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r4], 0x12c}, 0x1, 0x0, 0x0, 0x24004821}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000000)={{0xffffffffffffffff, 0x0, 0x9}, 0x3}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="af3e64f08189ef001601ba6100ec0f2264ba4100b80600ef660f38351d0f212666b94006000066b80000010066ba000000000f300f211a2e0f013c", 0x3b}], 0x1, 0xe, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 2.564279089s ago: executing program 2 (id=1472): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) getgroups(0xfffffffffffffdc5, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r1}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002380)="d37f438c8ff0a793bb0fd85e80a3add0f8f65f17e46f60227e8b09439e47ae441d91f7c50d52383be1a08cfa58969071ef9251774b2aa82db4b537beb0834e94c9f625097a9fd8ae5d86ccc28ae9a5fbf7a931329d6c0aa28650849abea29afd035f5eb12f8126d5b8c277c8c14f25965396c229226cf8b0c6da769454f1981c1b0a8180b80469005a03d24fee1d6f5543a43d7156a0da6f40f6e4344cdfe5f96f373459fabd8c1fb029f3cbb965f11e04c92468dc54884926996135312816573b5f052907705fb31ed724a8097b4eb9a547bd0a4f9c66421393b19fe59fbc07bc8c6319225509823784428ca5f20741130774b9090811966d1de850ef61c965ba07e2fe52380c4bee79f58db0931b3d0c06cfac96c9e8676eb0e10ddcecb47f17e8c4ea80d3f67a9e04f5edae06ec33863b9fb5edf40c87fbdc5a00936d260eb32c3df5a905d3041a54d0fade7b220027169911111af6142645e771ce84efdff5ef5f3fe5b1efdb67ba83dd9f94008f787ecee2ec9849c34a8699900b3151e799fb1704100f2075cf313f719efba77efdfdf5e37379232785af24729608cf1099a9eeb643813fe492fbd86788f43e231fe0a6f3f0bf302efeaffa32890b1e48818959d7d2aabb83f062e356a81605f55da96df097b11471c46947910bb3e5e40a5a5c92077231d68efaec50b848907d1e37e18d885f5bd95d939ade1852a5e2f516781e1868f0894c8c0872c84d9c80fcfe085ac88e2a8caf63b3444f6d5f63c4582e766f1fb06a204d7b8c266e29bb43e04f42dc241b0f6926ea4b0340f0b3ac232d92677f2ec099b17361d988b72311e5e93d6d93ca3bb711c5fb979684f67f6ba32901b8adb223fea467157c55e8d5540743af46d36e6670fe21254ed91e207044db3424d42a63d780f2269ca3417aeb73632fb93dd42b07eff0f5ed90707423066f834c2881ae5272af5b3c04c6b9cadb8b234d24c5341696960a23f242837d91d6751695e9f07577bb81aea171df43b27c44ca5b815e66f63848403320ffdf2926f500b16e7496b835ae7a09288847cbb232e2e271cd732e38309d41ffb55391dc4a157e0c02505f54430a70a9ac197f5573a0b11722aec13a9adea4d8e0022810ca28414964d40cbcbf9d2704aa82637e13d561c4fed2ed602be375e547a7fa7198e6a75293abb3903d0b8204ba21dd369a79159cdd810162c2a2ee722bf4e43b7679dfb8b4ac9e768fb3d391fc4f1839f2e91f1c62050b8154cafb6dd19a3f8716a5c072725c5dad281281605ac02632d041accf07bed8135f4cab566db7e01c6902be5728fb01cd6b17edb8870e3417897a604ec795c440334b1bf9b6180ac13d13298b80b8f4352b0bb36ac151607d6ebedae06f8a0582ecd3963a6df647c38c64402ab29ed79533efbe311df5c29d9f1928371e99094f3e7d8aa3d277fe0e3471c6746ca5dab72d6ec161e05b46829c7b437cbbfd82e8606153f23205f051002e23a17906056a50a0d402814df2bfc1de9906b2ab651770a482315e06146af144acf0beea22a5a9bc61931d293483d0f3bf04e62e89cce3e3ee781b3340f59f8a026228e6f3cab05f23ea71334eadcaa1068f1b67f1eee3ee1698e92bc68759a3534069de9132ef7d853f4e20dc1cac32b42a995da861ee19c52e8387528db1ff0245807a1fb19c1670bc3c56f44db0333d7568eef79964f00d6d242a3735cf372c844d6cfcd9bd8934f14dbd5cb907108190fb7ed919840429d4da052d95a242e93db7f07c2c1f8f141026e15a767cc9386b31a18ecc82c4603354236446e9c79ad6899049648b4244446dad02225c5837fb8b033ce4db1fb044df7131bc99316434f232b8049701d33235e581341c5bb08208703e4daa83c0d4e1ab73e8c0724d0e9d6be114927acd0b792ab9464dd3b67963ed235243ebbc16e6af057e984fffc2554582cdd6548d9a929a89b39650a12511ea208ea9553703ec994318d50cea6a632724b08b0af3c11a4ca9d95dba675112563fbd166463cde649917402548547d54cede66d711d805060beed06c79be0c682dde2548a899bb121926ac690ecf1220764874c37810abc3c64291fef538f8959ed50a4b9f6058b8c45735fc783f3ec592c022b066583950037fed74e12f0fc8f04db78cae682c706fdc3783a206167336ff9e4707ce741893beec04916626c4ed07db0a73bfa5d786e3f3585e4b7b37f3968f08f8971963fefa07b7311d4bef7b5a5d72d3c40297da80d995d866220e005713d69b5dec9a4481301e9aa6ba8a6bb1f911c1d9f827838edb81348231f3da450c1044c9c722d31a1fadccbbac0d82de32f2a46c0a083ec89e2baf21b2b1655702e7d58b950df5904f76f129d15c93f95550e3b52c72eb79a1e09aa253c35fce97977f881f61acc6268c2596b755f18d1c95be938b390565d780929c4c6ba4c8d417775facfffce5c0bcc1f075913f5477563d06b3583c3bdcc7330bd6d1a8bdcce29f8452668a9f2a613f21d5195ba1a1bf134e80be88ee8fdd994936b1b40a0f2e98723d8bc53aef7b5af884f5fccd3eaf2dda01278be0b26eccd63cf68278e06e59889b8b9327550b615df368d99bd6d19636477c4d592e365b0c8c43a23d434ec3d622184f325d6d1c8b704aeac87359d9c09012deb32db9bc034fbf10b4662d6618b4d849a9546f00ed3265c22807072482b0ea4eacad35e10bded78ddc4e4025c7ba521b709e4923cfa8b6964fff4ef513965c4c71a77447daf08f7ddd10f2319b57c8075046ed4820e135f883fd4358edf30fc9965b16885aeb0f82cef2556f67bd33c44edad1a2e3bafe648f5e3797a62931218a468f637832f7ec481526824ebb8de5c207733c54313add8a24131f6de8eb8ddab462b5ac7693f7b278b38728449c9d595af99ba5b1548fd942b7b8538456a261a3ee3a7d18fb3e6180b6cfc9adc76a1defa797b57bcbcb9cb47fdeb2316fd2d913dd4aa0239638fc5c3d29df965aec2ade1f556ad58c9159c9f1b6e05691f476c5ff73230eb74a891f7b285de923d1cab7cf1fe2c82cc6ebcee9dd0be04bbc4d01b2ba8c2525fc4120ffae3df6bfe44663ee532ceb5a21db4f2204386f84e2f51666af55cda90dba169a9cd1adeadd7c90322af2656c3166fee2dc39b2db56e2e18b6f7a24bb7b0494320d2000d629e93427d224587dedb5c196b1796fec0c526a8a0355951045677733b33cb42ec170f137b934c4c6e141a8f8ebbeb1970797a29225901780f96521939b2edf85b1a456e9f97d02782104583757126159f264d9ed95e801561d63f0ca075543813c732e75deb01e585fb5b7bdbd7311d9f346e512b36e972489988f53f42118bbfefd3a52ff1fb97f47eaab7f8baa8e1f397bf877588c1c898690885273e47c1bdce3f220f80828fb7489283d5529756514842974a55cd95aa5a75a18627897836311486300bde4fec1c312c735e5ba3419028cbeeaef709d97752a12f83650aec7305232f22f90b8718113f06b3cf48cae0b365c456aa17610a78454fb81020c84ab51e27891dfe6e3820bb8c4ce0a5f72c72f2523b10be64a3c05f76e7bcb7b6c9aab9e49bc0c2b6044b66c475988f0a078f53912a9c442a40243da943376c8f75e74eac306c61004f6a88a818e3e992c0ccadf44e48c95472359c79f04462598dd467cc140e665e57b9b98702096750b82f291ee11b80a9064dc4a0c790107ac0aca2166e4a964aeadab9ec1ed1ca686b36ff00f75a3a131c09e3297d0471b689475941d09e09c62d94840a6083b1e8d80c22c9e10f3575cf53fe80702e0ef82f43bb13a1128a4f76a1728da93d86a5c86fe831334442deb1e003c96cc40a65ee721e219c06c01e75176d1035ec855258d3fc565f0d6eb31910c3c4e4450c65755ca563f0d877861df816160dbccce49865e0c6e9dc7cc281481b9f6bb8dee95d6a572421f1b2dc1995e0a3fde00ae6073015ae4176519e586ef434df534667d30ab103b7815f5a992e51004471ecdbbd8d9d464e7c24124a928b5aa925458825024ad03ad526a5b08ba1b30fef04288035749c266612bdd5caf4ed5245f67f5fccaabc6b2d8994c395dc7f8ce00089f4eacefb18e65a2d9d04136cd9172ce5aedad596d11fdd4b599f7f544f92a398042821b7c1e6ffdf053a35f95f9997791bbf6a0ecbc69531d14b2fd6b18dce4267816ef2fc135b24d76be1b59e35fd76796e9fd92dcb38c08968d9be724eb8a22575e7a7e2649f2a27fb3fac57f6aa53917ae27cd8efc4b6469de6155c3b9654a70ca7fa318682d1fbbf7e3e9f85f3fdf91f96eba538c899f3aebb79fa0ff96f122859061c2aca2a2fbac5640807cc7dec2a5f37a84cfe69af9775a703281d271a38ce08adcfe26ad3df7d0a1065393791dcb526634ceb5c33061fd83b4e1c72fa175585e0f839c9651002896fc7a6ced33919105de91d17083c8f6985e24ffd0fb35dd558af58cab9003e1fb7f87075704396ff677ae7a99725ac2c50c3a9edb15cce24de9a734f81f5187099b2ec316c6cf536c628445799bfc13803c6e94fa844de4b294b6f9b7f96ecf666c1088eee0997dc3d925e45fe9157ff86699e68ad786e973468de54ca6c9156c2e30541e97fb7b845ec2acdbfab05a03009de8260b444c48c0e64940a441d56446b33c698631f480dbcd6f8726e4c287c262bbb6de251c930e717797af777283e0575e8e1304af50cdc493f429dcbfa518e592550e980bf4516ff177a725c59ed0f8d9384bf9bbfe024560062eaf58bc6dd4ad29d71a39f02e00f6ca44ea68b9019387add513c767693d5535e46b3ff697aaeaeffe8e85b86ae877586fd706fbdcc492208c1b61556b80af1f80b018391a4d42e030d89e57c8c8c323c23805551954bcfeffb2c08f9043f24db22a9285f9edb6c66e1091b9dd8e51a228dac137df945491c53014a79b3e033305b1678d7664afc79bd04b0c397c0fb4a12fe3116b24e4d42830e3fb611b337f449c1e0e9667b09690b37789e45cc3007f4a56539c782fa41cbc30f8b213f36e03a1bcee413ae9b4706561c5c68e0ad645423eb5e799ca52a0cbb7e9468a7a0e253b5ea76f6a79a5dc9d72d5aab07703a814922f1fbe1eba0336659ae0acc46b46088b895846435a02bbacd4663f652c0e1289411bada43f1335d48d8ca7a021a60c8a19a8a894aa3375758a140bd040e24aabb0736f79ad95f2090a78418360cfba57398dbf3645bd6c964e53923ded0751512e8cadb650ab833ec3167e8bf385bfbbba46e0845e745810d0133cea434ddab18ef066caea680f16604baf0ee56b1f631f5ccf754fc79285af9d17d99346f7bcd7048dcbb3f0fbd6c2aaa415821f73e4ef5c09fffa911a7ecda2961342d0db95a92d597e8755e41fda1e39c65efc82ca82b22172b3e2017ec5bfbbdbecccc318190eca29ca4dfe393afbbaede3fbc53aa54fde14a1d98a3f0e673bd710d73a978cd7b37901915811c1a8478c61c4021792bd07d42a0e4f7f367139fd78ad1b6cc23c94bfc98bf73c8891c5c69c00c0aa4ba3d76472543fd8d2fef44f4fa928906a60f726a7aed2c6435ea80ffa1d91efc4a605b48845a1e66a7a79c92a869549383256e7724f796aa893c3a86c8c501dcef329d79d7ad5836cd41d48d0ddee68cd5dce8e59724bcf7a0d6872deae7dd15939db46b978fdb77158c3076ecc720b3fe3fefff15b28f7f1304c375a435f20c714576dfc8c9f53af9b6dd7d7ba14d8fe4408f8ffbd61aa0f1194e3c57d63519f96e42fdc97e7adfd686fdbef39bdca9a2716b337e406a909f3b2eed19e24408e8dbe91b5aa98fa62b6fb6f9f13dee6a5da24b24cd2cd859029aabb2bace5492de4985a19c508d2062e6b580bac1a55a41aecabf0d63f48315a6497f11a5a09bdfd1649203eedcd03069cac0bde4f7691e57e2a054e1c192f6d78f2647af7cfffc4daad033521b87103c5bbb81eafb0ff72c4cfc7beab3cd7074ed50f23021e917e85a0ea2dec4dd0d7f8efa68f15a1296ca768fac34f630014743eeeed57f80165e268c1cef7d5d385edb955195a3e44b8b388dcab72083fc2dc23d71913bb98ef2a34ad6df1675b936e294ebba47dbd74daa8098fcb627a1e17616d8775cf1fdec8676d57ce31bd4bfbe821a03ef251f651ce97dbae57f99c6755470e9cdd17699c568ada69a64621dd5625d95b0b550c596292b1816b9516cc7d8f02f8be32afda1f4357419b28363ced9bf7429e7687531fb00de4d2e03fe4ca448e66ad17c58d909df244f4f7ed265164b42273187816e0872e6818b8bdf48097d108f4c67ffa10038f7d2a705b4489c9af1284a7b34dec3e5b56f350c880277fca26427e0746eece173de1ae1104b7822a9fd45b262e5f3ce16a64dfa69e84f077296144f0c119bd2aac2251f463b3e8177dc259088c8a1794953b248b95e7c6e6f91ed45a7d3bce7e91ec72b98c06ba6c625bfdefc69c7416d89a0b1f3bcab5aed96370d74c6812ef0338368756f83f4be0331cde6d11d9a917483f25beda96af71882c3d4d1b3785932fa0bc93d611c919dcb116699db1a3d26ad6826937a984fa121fac7a45ff220520f702ee942793dbf7023b98c9cca4f150bccd29f26aff58e2255aa73fb7a7abd24b501bd403f24900d42e88c57494ab5ef8bacc07ff9904b100d709cc9b1018cacfa42d839476b7aeceeb2236e2c1151d441b167036bef84069401d67a1473d5d11cc109bd39a1fca5d5aa347c4fd5f6f3c12a8f5d1ec344dc1717f5e8e1aae6d7b7c42aa633ffdcb46c32ac667d933cb9fdaf6d83eefe77d8733a59fcf394d063efa474df67697f881991a34fa79bb78f3b19e9b29cc7b03ca7390b0ca6064a961f3fed249db4ff2c01840373b6242034cbac645d59743f1a90f372ee0c17efade2cef03e3f0edc640dfb629c6b98dc2f28ce06aff3574a2cbdb4b06fba31b2dfe34bba7e34e02a786fa4473d5ba847f4f1e644c1bad62ebd5ca9306219ad6beacb8a54ba299e1bad887293f1b65ff956ea2a562e290df607a608503afee3ae180d600f1d14a9459cd5a399c7e2c7bbde19c11ac869d34ea5e990a759e346c3d538108a277894d6ec7bc6fcd65862a2d9d0696551a4a37379feafb313a09f2575c52641db9f46f4cc5e851f67ce633572b6ffcea7b7c24b44b40d32e55e4f3b426e464c07741648f30d51fe3eb162cadcecf21b7182cc915ffd887e85c385b5989f87910c5c990d639f8d2cd9234c534400088ef49733c94f39131fd51d784a407a07eae6d5359acfa35994ec3760ca3866404a5faed0fb210ce1b849868a6007c8e839ac7518172928277bf2dc43d163d2a0f6146cca1738ec3526762e8e2caf69606a3980bd08fba42ec7cbf48d315e45b834bfb14221de8259250c4ae9590520288c73bfc7d8076d3fe46b772491173ea0daa76cb5cb40637a038ce734d72c0c020494062843715e762d71a8f8518fa7d837391c06b62c96efc17651158657db8ea9a57634b0b5628b06fd5d568fb02185a63a6beb56013cfb4fd1695b102fb58f39161232af39f6d87c5ff6af247df3d549b7f6f81cddf4e3cb12b18634e69df5af55127f72670a3104ce5aba7877c32ee4b0cfa076247a95750e830a240b092baec2f473e83581e5799d69593247f0e78ad8e44c0e0d09fc55888107c4badcdb20b2c82d5915b3b03060e53d199b20b29ad6742655bf62343421f826daf1a3c0c493c96bf719bdf0a8dc9a4fc3f75bcebec3aebfd898ef161cd4e2e33a142c36f673cd8da72edae4f691a4271881d326d77fca0af396bc1eaf9e9d2a047562f91f0e87972e3ae5abb75e352f28c81351c4be6a34e5a01b8ed8461f14e21d1afc9260d838b43e9e2ae078d64b6c718232bcd2b26d3c57beb3c605e00c6f9c1031a3bae4b1872ba5d6c23199253929f1cf57a2e961d798ca9d315fa6b9855c8e7efcc24ccde498a3f1ba23755360044f024753f886f97016bd45a56d802f3e9e040a84f6c46cd5aa99fd4471b97cdb0bd8d265853fb79c42b4cad7eda49ca08d3cefffee2d3f1b5f083a06ea4be4b0acf84ca27e5a8d579d3135f3e59bd5b823b2bef7708189f54c8f0d576e4c6bdbf932b55bc792bb302cddc5c555e4903eff45b493f9498f7bf184035335ad1ba1547795a443c9afb30f932e7d1b042fe1690cd34d98e2331cbe38108be26f8ed615590e8bd99fd01b700b21e6ed61de92297d8b447c723089cee359ccd4517328d54ebc43a3f9173698c4362a6130508c9a0ea57b9a8a74a997a21e3e2a7223ad3debd80f70aff2eba5a862aa667052462bf6635eca2dd3350ef70fda58f8492d34c5b819c802f97b8765680c39fcab3b92f8a8be88a93b5bfc1dbba3fbfd3051c4443e766f4cc6a9d0f96b66a081e9316a44efe5973479ae74bf13c18711218f75d7f4e6f70b0a34ff2a1aec8d1e3181a65b4d5f21f0c19789a2ff90ae5e1298e707628e97e6a5048ac29d916193577506a7f5a9cfb0c73d16a67a2e1f872c8026891e98df07579877460c845bf967f87d75295ed29ddf626340f313bb35a04f9304e34773eda19650f25a08b2bd603297d9edd7f7d1b88d0b18e7bc35b0593961e7403a03550a20a0eab83cb00e659f5fccc189d14b28f11b8f55db517ab124b3718e70868d2131c74640bc682ee785a75cf960a79fead7965d0798d98e386598efb5ce92b0ceeec4e63e2eee3a15642ac72691517c4197a667de3e57a56e2d6e4ecb5a2bc401f90ec2239baf6a9a418267fe2228f7776c7f932a048cd9aada01c2e6d9466ecc434ba61eb97a0d6eb00e719940b3dca3ae25b94e9040ee238184eeaf46e51b61d855ce476d10dd9cb09df18c585304bc4f9e88060e4bdd6e624dd90d7ae8874c0af1e17e67d3bb27babd15880cc61f22b6a0b24df6d03faa13f0c918a7b960f47d939934d9ae90edc40251fb53c9fde3ee255e49c8541d995a644d35b46ab202e56ad1de3da1c5ee587f167b398392d0fba4a43eedeaccb0ba16f571055381fe3885490c71e0805b1b3186bf2652b9a9df69d8d1232cf704fddfb5e7d3ff78ba5ae3b843f4f9b82161e223343240c33a9cd21eb312806163ebb2e60bc98b68b3d95bdd923f6ea831083c13ca65e4a06e999b2d014d0ed218d72c5b776fd21ae21d14e23e9074de20d6d16520b1061aa4db3b5b8077b1c43aa375c68a6243ad582a148dc6878ceb2ab6792cac38ef21765df51171436a412f60f5dc68fba51aae8c4909efa690340fd8a63cbfa4af6235c1c904a20578f54b9c91b1fb8017d05321e0bb9eda1502c1506f3d2939977af87d1f9329e237c129d5cb65e093396f016eb0c2f0aa5cab92a00259f6056532ef188be500fec4cd4614e29daf5b41da2b4742b02999e651c42d2f405344a232e36278785dc7a681d0ee2014ce3214f44ff9d2c3e083e18c299cd7cc8ddea4b805c673cb7479a553f28349235d37874ae3da878a5b6321e501c2b77470dd15b35ace69b1b8e3ba20cce47acb8350f206d136dfdcea697bf558bf3426bb1e0ebcf2797a1c7a181fad43b8c68633b361d40868c279896eb1c628656a9b57dcde8444ff92f2cc1d2dfa1998054487d8fcf11b852019ac21ae0582b1c8f4ff90f31d862e20740d7b803b0f109a8d1506137ca58167e8be1d13e6a5590e2bf2af5cbb7e79db2f4cdec83983463e1e830f54f8534e4c660039c0d372c7c757be3498f6be9ff6b6d13b88ca0ee07a0fd4df8cb13de0fa094cd3b9eb87032a6aaa757a6391ccf98fa7f9d99065b4f747e70ca497af77fbad520c589445d3401c67972ff7e274571b8c35a17ae78de90c81f791a69d70975208153f94ac7199c45de1ca5746887ec677452fd1a018b7287ac45e14ecdf1876229964153cfe6b39f1d50a9be63a0eb10016607ff338751cf9bb97c917d532be1174d0410e26dcfab873769b71db87758c0ad015b1db4b7565e244925ea0dc24313ac65f0355abcfa96c786b8ab7b32166bbf4c7ddae0d3f63d1aad63a9b105e05825aa012e075ba3e1c20b757e1dce75f6fe14e891a20988d365cb5e69206a1b7d8caf2effc73eb577330cb56495fbeaa6b7aef3467a32f53634e468208a8e55d626f98a2b51d39b48341c27306e59c0fc5c8058719b526eac245ce857288976abdfc9be1d4f220817f879c15cf0a258f89cd8269113821b0a1073165923748c6e8e0331ae9e7df11e62a80bf28559850cce385a98e0f48209ebcf69e8938a7605e96f4ffcf580b6c1df742766458763dc91b34035c12396b06ca5995b8feee35e1a3891cca0402fb9e739d8f8aa1a637b7c8c2c458493a323fbe5a76f866e2d9adf0d1d76950bc527a969f61c8519508eb5a93447d212e209c724aa16a949d8be1b14c8711d4c85e728e9d50b5b78b76242f9d59d866a86da0f129201a5b665611360ab3f4b678746cbba1b47884d2bfe4d3e38bf441fac354654c5077620cdf5870fda1fd5ca2bf4780d474a27cb660dd9d7ea83d423240c7ffe743dbefa3b922ac6d5f9544a7d5477dc44761a1d47633f67fe220f37630d678daeb62360b5f4f5d40493169f6554897c5d05c4909834fb2ef1494f8bbbf9e986761b931a26b0ab76b88d4f9b9bd9a024dc39819e0a139eefba8f617401811b4a7b97212aa82965e6008447979d19bfeacceedd48a24d65b8a1705d686fa8c44100d27dca9bc764b74345e1da71bfd9604e2f5bfdd28097f90e98f91ca81b08e827f7a3e742e6c019691afb612042a375985b01b94b3eb61a484fc2ece84f53ba5738273c80047663ec335d31f1ce43c6205a78fe7712626e8e6ff691b5bb9fe1a41909db60d8644d73936c4eb663bbfef030499c8c7d31f4eacae3cbf736a1eba6f85008139ba7eaf5f1ef8804f617e56c820c24f139b7036887f2ed2de32fd63574d0359ad4026e67c550b4ae960a2ce234a20e076da3f91a7ed60bd59a38e1acd7941a66bf3e755a431cead3f01600c6e47564167340f3f853efae37b036988bf4b30849d9dd5d0d09b1799bf9fadca76c497a1345018c8724065291bd8cc633e06359b72040a7673ffe5e86c240d043963bf2d76a0fbf50243a63d45d7f3358e1b9d1f3cbffd7e60429afee778f305e7d8f07c3e49a104f3a4e92118ce84cd11839f507656757d6e89ff296cf792ca2f1429aa80c8092b970d6f065eda3fb25b6b8a699561f8fe5236bbbc96f15860e29326a5a2671a88545a65e587d986615998a124a97820a65f81779b3101086e6f261177a66858d788c5c66521408a9e70238719614aa6232a3ef7a33e99d3b1dcdc20c33e8124b1dabe50ce9e4eadf34685560039e7d7e08f038f2004da7703bc4a30a28409719092e6640e743ee8a4e75dea106314a26ed5cae5d02bf9c8b0e96020a6b7941db7f0c311476f377a992caccff7f1919062f9db36ba72b29e9dc0880fb8eb24f41e0a6cbaa487058c6fbe6b062b372e0b84c9fcfd64d84724b6cda7fb3f582abaa6757782b20f9c1fad78f98273129caaa9496c1dbbbd167b52bae60dc327d1e18d82450ff9b6b108a0f20cbee5", 0x2000, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000045c0)={0x78, 0x0, 0x10006, {0x8, 0x7, 0x0, {0x0, 0x0, 0x1, 0x40000000000, 0x4, 0x100000000004, 0xe767, 0x8, 0x10000, 0x8000, 0xffffffff, 0x0, 0x0, 0x80000001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) getgroups(0x5, &(0x7f0000000380)=[0x0, 0x0, 0xffffffffffffffff, r2, r3]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x1d1282, 0x0) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r4, 0x4068aea3, &(0x7f0000000100)={0xa8, 0x0, 0x1}) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r5, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r6, &(0x7f0000000100), 0x41000004, 0x0) r7 = fsmount(r4, 0x0, 0x1) r8 = socket$inet_sctp(0x2, 0x5, 0x84) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r9 = socket$inet_sctp(0x2, 0x1, 0x84) r10 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r10, 0xc06c4124, 0x0) r11 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) r12 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000140)={'vlan0\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "e73d924d4b1fa0141555909d6357f7e6a019b9836fee0416b8e25b1622ecfab7", "75d1536b4553d07138dff241fa2b6652829393d7cc7528867d178a0f797d95a6", "624968dcaef91107ed2e11c12dfea4db74fd14034418e55246239bf117f1a9d2", "13d2d543f715de9edc88033e0d621acfd4ba72deb1ee3ae50587c26b9d73cbe9", "5c92f21472bf8147cf79ee7c122feb46c0f5c79b9b07c9d756710967e182671f", "05c12b6342cc20c30dd131e8", 0x6, 0x8, 0xfff, 0xfffffffa, 0x2}}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r11, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x0, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x7}], 0x8}) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000140)=@assoc_value={r13, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r13, 0x2, 0x2}, 0xc) 2.556203207s ago: executing program 4 (id=1473): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x2c2140, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d491009b3426c8928f3d97cb", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="100000000000000002010000b200000010000000000000000c010000de000000ef472a71b8c092d0ed38f8b61ea38ff4948d334d4c11832d94d577eaf428f5f7f241422300a60246680f2473e01878c41fe5df5331234c50777207fe319926d82ede7e134271f422997d3b7e1f1f6c0b5a9b9bd186242992ac7b92b5651b9401ffd8058206c90c1ac53a635232f52683cada62c66b21248541ecbb00000000000000"], 0x20}, 0x200400c1) r5 = getpgrp(0xffffffffffffffff) capset(&(0x7f00000000c0)={0x19980330, r5}, &(0x7f0000000100)={0x5, 0x4, 0xfffffff9, 0x3ff, 0x33c, 0x5}) r6 = socket(0x11, 0x3, 0xd) ioctl$sock_SIOCDELRT(r6, 0x890c, 0x0) preadv2(r2, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x7, 0xffbffffe, 0x2b) preadv2(r1, &(0x7f0000000400)=[{&(0x7f0000000140)=""/103, 0x67}, {&(0x7f00000001c0)=""/53, 0x35}, {&(0x7f0000000200)=""/109, 0x6d}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000540)=""/153, 0x99}], 0x5, 0x3, 0x800, 0x1) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000000)) 2.375802532s ago: executing program 0 (id=1474): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000cc0)={0x20, 0x5, 0x2, "19dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="000d0f020000d52c60a7aeb7a1e038caad284bcdaa"], 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 2.201330223s ago: executing program 4 (id=1475): r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f0000000000)) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 2.043201056s ago: executing program 4 (id=1476): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000040)=""/141, &(0x7f0000000100)=0x8d) creat(&(0x7f0000001380)='./file0\x00', 0x4c) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 1.811636964s ago: executing program 4 (id=1477): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) creat(0x0, 0x4) prlimit64(0x0, 0x7, 0x0, 0x0) pipe2(0x0, 0x0) (async) pipe2(0x0, 0x0) fadvise64(r0, 0x1000, 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x4580b000) futex(&(0x7f0000000040), 0x80, 0x0, 0x0, &(0x7f0000000000), 0x2) 1.697424847s ago: executing program 2 (id=1478): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 1.4988795s ago: executing program 2 (id=1479): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) fallocate(r2, 0x8, 0x1ff, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f00000000c0)=0x8) 1.203529529s ago: executing program 3 (id=1480): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) (async) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x40040, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, 0x0) read$FUSE(r1, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r2, &(0x7f00000002c0)={0x128, 0xfffffffffffffff5, r3, [{0x3, 0x1000, 0x0, 0x400}, {0x2, 0x2959, 0x1, 0x6, '&'}, {0x1, 0xfff, 0xd, 0x7, '/dev/rnullb0\x00'}, {0x6, 0x1, 0xd, 0x100, '/dev/rnullb0\x00'}, {0x2, 0x10000, 0xf, 0x7, '/dev/dlm_plock\x00'}, {0x5, 0x2, 0x1, 0xe, '['}, {0x1, 0x8, 0x2, 0xffff, '$,'}, {0x6, 0x27ba, 0xd, 0x4, '/dev/rnullb0\x00'}]}, 0x128) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) timer_settime(r5, 0x0, &(0x7f0000000140)={{}, {r6, r7+60000000}}, &(0x7f0000000180)) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000280), 0x121000, 0x0) ioctl$PTP_EXTTS_REQUEST(r8, 0x40103d02, 0x0) (async) ioctl$PTP_EXTTS_REQUEST(r8, 0x40103d02, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f7b01acfe2222d", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000080)=""/18, 0x220000, 0x800, 0x8, 0x2}, 0x20) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x9) (async) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x9) 784.729722ms ago: executing program 4 (id=1481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 273.962292ms ago: executing program 3 (id=1482): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) syz_open_dev$hiddev(&(0x7f0000000000), 0x8001, 0x200400) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000040)={0x0, 0x8, 0x1, 0x9, 0x100, 0x9e3}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={r2, 0x7fffffff, 0x20}, &(0x7f0000000140)=0xc) 127.773629ms ago: executing program 0 (id=1483): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) lsm_set_self_attr(0x67, &(0x7f0000000180)=ANY=[], 0x20, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x4f424752}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES8=r0]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) lsm_set_self_attr(0x67, &(0x7f0000000180)=ANY=[], 0x20, 0x0) (async) socket(0x40000000015, 0x5, 0x0) (async) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @private=0xa010100}, 0x10) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x4f424752}) (async) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRES8=r0]) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) (async) 0s ago: executing program 3 (id=1484): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x52}) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000080)="1566d650d854bc136ebdbae3cc1978ecd8b8e753fc53440215546ad1a8e49ecf6d84a015b5d3b9b414457646efb0b2ac80d218f292a5b3b78f04a2eaa4668bdaad41eb2d1fff475bceb668947c911a2aac41b0c804b0b3bb64d6767af22436262da64d8d29d89800a06ca440b60b0fabc938f4ad290f2ffe48a1410d"}, {&(0x7f00000005c0)="839e779037e081cd561f672735c3e735e0abeecbcc2ad1bd767ef7cf5e55701b1e361c4e9acf39bbbf083fda3fa6abae1271edbf589ab143105c2d71f5107f3815db097c82fd61ba8d179bbed620056a086a86ece7e47ccce831a7a15806710e14adca02d2846df0aa12539e6025e20290dcc5549cd094986cc01fa72f0b326ee5542cf0b6b846a80f383ec26b757aefa93b"}, {&(0x7f0000000100)="175913c025c0633229fc2b3ff27377c146eb64713805ef3d65f9799489160b491a2cf82c55c12d0fd744fce68b14d1693a82cc79c197"}, {&(0x7f0000001b00)="7962a9aa4d62f2325d0ef1e238c7ab254553c9212049def19b7fab4bf4a0c76e6e073174a07d798106aaa7207636f3376990b6d764d0471cc5a326272bdd328bc61991aec9b71d086815298151c977c3817d4dab05ae26941f6962b88f1214f3084c6626e5d71af92d9ed0300f7b016fbe9ce1e0954dec658353c4fc6317e0cb00"/144}, {&(0x7f00000001c0)="6323268d7a7f213597c9eb8852fa1a44c198222aa639afd3aee30002ebdab5786840d0cade24d3588ffed81d7e4b7209d5763d483b2037847a9090b2f2e10083c8d61276a6acb3a431d41cc4c7a6200a3f4d3f0f861bacca"}, {&(0x7f0000000140)="950e6f"}, {&(0x7f0000000740)="970f0c0e1f6e79f215ec98553d10987e9a3c7ffc73ffad707e8e79d8a8d256c5c5f5770f819d3a47ee707cae9d1b93c49e312c8209734631369e94ff1d1d3c3a62f0ac4df7e591ac96ffbb27c23ab6a4201b88048c920f1f34be39abc261da5ac2443ef8c391f046632172dc90c05ac4a6f1c6d25f92bccdbb247a00f7ccbb9cf9a8abf3f893d7fe2c2009ce5d4803"}, {&(0x7f0000000b00)="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"}, {&(0x7f0000000800)="25f97b933ca360e55b70c21965a144e32bc3fc5f5716f6d4d95f22fd6a219a72e5ec81aabfe364d47fd2d2d286a32349a4a688d057ccd9b3d347727172027f5f7bf99984d4b1971b63e3d9b3fe70617fbba056dbaf3dc63d184b439d7f1dfcd398db4e96a8143f898d60f1ffb7d1169120a65d93450ffdba76133e8570246b58912c4ea808f7f5cd932e082a3964b0ff4e1d634854450c329d807b88510fb050ee0361703b425569259cce087534055c123171c365342101e97ac6ce0fe154a112339fc2e48af0fcbcfbc68ffb49282bc74beb1ccd403938f2674c060757197c90fc6d93789c07c0"}, {&(0x7f0000000900)="ca8dfb72a5b9b6ea7d5fcce5367af886e7aa510bf763b069bd1fda6780399f0f177da18b0efb82999a7b698aae758761cd125bd4da494468c6bfee999c3ad4c441df9ebccccbe97bdf78bf5d5d80cd45a6b12c9fdd5fa625e5ea0adb0ad4d28f33"}], 0x0, 0x0, 0x0, 0x44000}, 0x4000) recvmsg(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/84, 0x54}], 0x1}, 0xa2) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x2, [{}, {}]}, 0x48) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000340)={r7}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r5, 0x7dfff000) kernel console output (not intermixed with test programs): 308.842070][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 308.877509][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.899304][ T24] usb 4-1: config 0 descriptor?? [ 309.318565][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.378922][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.402355][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.430255][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.443110][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.454451][ T9976] ocfs2_dlmfs: Unknown parameter 'trans' [ 309.458952][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.484690][ T9045] usbhid 3-1:0.0: can't add hid device: -71 [ 309.498964][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.519264][ T9045] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 309.557072][ T9978] tipc: Bearer : already 2 bearers with priority 10 [ 309.566903][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.617216][ T9045] usb 3-1: USB disconnect, device number 50 [ 309.623247][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.667458][ T24] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 309.781284][ T9978] tipc: Bearer : trying with adjusted priority [ 309.892804][ T24] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 309.929817][ T9979] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1073'. [ 309.976903][ T9978] tipc: Enabling of bearer rejected, failed to enable media [ 310.037375][ T24] usb 4-1: USB disconnect, device number 45 [ 310.209301][ T9045] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 310.255757][ T9986] fido_id[9986]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 310.330159][ C0] net_ratelimit: 7143 callbacks suppressed [ 310.330182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.348556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.349571][ T55] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 310.361145][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.368547][ T9045] usb 3-1: device descriptor read/64, error -71 [ 310.381969][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.399113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.411712][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.425456][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.437976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.450545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.464195][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.469032][ T9044] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 310.679143][ T9045] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 310.697710][ T55] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 310.712336][ T9044] usb 5-1: No LPM exit latency info found, disabling LPM. [ 310.730159][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.742281][ T9044] usb 5-1: config 129 has an invalid interface number: 216 but max is 1 [ 310.760764][ T55] usb 1-1: Product: syz [ 310.765136][ T9044] usb 5-1: config 129 has an invalid interface number: 3 but max is 1 [ 310.780722][ T55] usb 1-1: Manufacturer: syz [ 310.790687][ T55] usb 1-1: SerialNumber: syz [ 310.795831][ T9044] usb 5-1: config 129 has no interface number 0 [ 310.812516][ T55] usb 1-1: config 0 descriptor?? [ 310.827867][ T9045] usb 3-1: device descriptor read/64, error -71 [ 310.837973][ T9044] usb 5-1: config 129 has no interface number 1 [ 310.855095][ T9044] usb 5-1: config 129 interface 216 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 310.886872][ T9044] usb 5-1: config 129 interface 216 altsetting 6 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 310.928661][ T9044] usb 5-1: config 129 interface 216 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 310.959811][ T9045] usb usb3-port1: attempt power cycle [ 310.989908][ T9044] usb 5-1: config 129 interface 3 altsetting 28 endpoint 0x6 has invalid maxpacket 1024, setting to 8 [ 311.036634][ T9044] usb 5-1: config 129 interface 3 altsetting 28 endpoint 0x9 has invalid maxpacket 512, setting to 8 [ 311.085768][ T9044] usb 5-1: config 129 interface 3 altsetting 28 has a duplicate endpoint with address 0x6, skipping [ 311.132327][ T9044] usb 5-1: config 129 interface 3 altsetting 28 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 311.177346][ T9044] usb 5-1: config 129 interface 3 altsetting 28 endpoint 0x5 has invalid maxpacket 8, setting to 0 [ 311.229007][ T9044] usb 5-1: config 129 interface 216 has no altsetting 0 [ 311.258920][ T9044] usb 5-1: config 129 interface 3 has no altsetting 0 [ 311.339050][ T9045] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 311.398300][ T9045] usb 3-1: device descriptor read/8, error -71 [ 311.407259][ T9978] /dev/rnullb0: Can't open blockdev [ 311.681170][ T9045] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 311.735502][ T9045] usb 3-1: device descriptor read/8, error -71 [ 311.879727][ T9045] usb usb3-port1: unable to enumerate USB device [ 312.668223][ T55] usb 1-1: f81604_write: reg: 105 data: 8a failed: -EPROTO [ 312.688176][ T55] f81604 1-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 312.730413][ T55] f81604 1-1:0.0: probe with driver f81604 failed with error -71 [ 312.817797][ T55] usb 1-1: USB disconnect, device number 33 [ 313.189004][ T9044] usb 5-1: New USB device found, idVendor=0403, idProduct=e0f4, bcdDevice=1a.da [ 313.198086][ T9044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.244594][ T9993] efs: device does not support 512 byte blocks [ 313.294816][ T9993] device does not support 512 byte blocks [ 313.294816][ T9993] [ 313.345098][ T9044] usb 5-1: can't set config #129, error -71 [ 313.378668][ T9994] comedi comedi3: pcl812: a I/O base address must be specified [ 313.430722][ T9044] usb 5-1: USB disconnect, device number 12 [ 313.467212][ T9993] omfs: Invalid superblock (0) [ 313.951774][T10002] BFS-fs: bfs_fill_super(): No BFS filesystem on rnullb0 (magic=00000000) [ 314.799845][T10018] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1087'. [ 314.822245][T10018] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1087'. [ 315.090250][T10020] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 315.161652][T10022] QAT: failed to copy from user. [ 315.329935][T10027] /dev/rnullb0: Can't open blockdev [ 315.339036][ C0] net_ratelimit: 7385 callbacks suppressed [ 315.339060][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.357318][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.369834][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.383609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.396057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.408506][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.421955][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.434384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.435704][T10029] /dev/rnullb0: Can't open blockdev [ 315.446860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.465155][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 317.325922][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.332436][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.849376][ T9044] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 319.108954][ T9044] usb 1-1: Using ep0 maxpacket: 32 [ 319.124382][T10062] Mount JFS Failure: -22 [ 319.179349][ T9044] usb 1-1: config 0 has an invalid interface number: 247 but max is 0 [ 319.187597][ T9044] usb 1-1: config 0 has no interface number 0 [ 319.219326][ T9044] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 319.245765][ T9044] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 319.289188][ T9044] usb 1-1: Product: syz [ 319.310083][ T9044] usb 1-1: Manufacturer: syz [ 319.359126][ T9044] usb 1-1: config 0 descriptor?? [ 319.693064][ T55] usb 1-1: USB disconnect, device number 34 [ 319.788562][T10072] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 320.348955][ C0] net_ratelimit: 7490 callbacks suppressed [ 320.348976][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.367460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.379981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.393281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.405706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.418205][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.431615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.444134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.456847][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.470221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.599299][T10096] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 320.709736][T10098] fuse: Bad value for 'fd' [ 320.887288][T10101] XFS (rnullb0): Invalid superblock magic number [ 321.133907][T10111] comedi comedi2: fl512: I/O port conflict (0x9,16) [ 321.594454][T10121] omfs: Invalid superblock (0) [ 322.245632][T10130] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 322.281578][T10130] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 322.345252][T10130] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 322.395386][T10130] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 322.669191][ T24] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 322.929147][ T24] usb 4-1: config 202 has an invalid interface number: 113 but max is 0 [ 322.991509][ T24] usb 4-1: config 202 has no interface number 0 [ 323.015311][ T24] usb 4-1: config 202 interface 113 has no altsetting 0 [ 323.062542][ T24] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=7e.5f [ 323.078120][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.121157][ T24] usb 4-1: Product: syz [ 323.125358][ T24] usb 4-1: Manufacturer: syz [ 323.151294][ T24] usb 4-1: SerialNumber: syz [ 323.929098][T10170] batadv_slave_0: entered promiscuous mode [ 323.947331][T10171] syz.0.1127: attempt to access beyond end of device [ 323.947331][T10171] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 323.971114][T10168] batadv_slave_0: left promiscuous mode [ 324.369211][ T9044] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 324.549062][ T9044] usb 5-1: Using ep0 maxpacket: 16 [ 324.574888][ T9044] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 324.619148][ T9044] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 324.666834][ T9044] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 324.694171][ T9044] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.708721][ T9044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.747854][ T9044] usb 5-1: Product: syz [ 324.779475][ T9044] usb 5-1: Manufacturer: syz [ 324.794186][ T9044] usb 5-1: SerialNumber: syz [ 325.232587][ T9044] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 325.359025][ C0] net_ratelimit: 7136 callbacks suppressed [ 325.359045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.377621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.391544][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.403982][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.416487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.430070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.442484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.455030][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.468455][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.480879][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.737606][ T24] usb 4-1: NFC: intf ffff88807fe63000 id ffffffff8ef68900 [ 325.767076][T10190] omfs: Invalid superblock (0) [ 325.802967][ T24] usb 4-1: USB disconnect, device number 46 [ 326.124084][ T9044] usb 5-1: 2:1: cannot set freq 9338507 to ep 0x82 [ 326.382646][ T9044] usb 5-1: USB disconnect, device number 13 [ 326.447045][T10196] vxfs: WRONG superblock magic 00000000 at 1 [ 326.498971][ T24] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 326.534807][ T9906] udevd[9906]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.565716][T10196] vxfs: WRONG superblock magic 00000000 at 8 [ 326.606405][T10196] vxfs: can't find superblock. [ 326.739043][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 326.818336][ T24] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 326.855792][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.914813][ T24] usb 3-1: Product: syz [ 326.941947][ T24] usb 3-1: Manufacturer: syz [ 326.946581][ T24] usb 3-1: SerialNumber: syz [ 327.040068][ T24] usb 3-1: config 0 descriptor?? [ 327.127034][T10213] dns_resolver: Unsupported content type (254) [ 327.272986][ T9044] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 327.304968][T10216] /dev/rnullb0: Can't open blockdev [ 327.439300][ T9044] usb 4-1: device descriptor read/64, error -71 [ 327.469148][ T55] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 327.481968][ T24] airspy 3-1:0.0: Board ID: 00 [ 327.486773][ T24] airspy 3-1:0.0: Firmware version: [ 327.649155][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 327.697903][ T55] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 327.723517][ T9044] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 327.739928][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.767251][ T55] usb 5-1: Product: syz [ 327.794187][ T55] usb 5-1: Manufacturer: syz [ 327.818919][ T55] usb 5-1: SerialNumber: syz [ 327.889142][ T9044] usb 4-1: device descriptor read/64, error -71 [ 328.039161][ T9044] usb usb4-port1: attempt power cycle [ 328.280561][ T55] mxuport 5-1:254.0: mxuport_recv_ctrl_urb - short read (0 / 4) [ 328.308758][ T55] mxuport 5-1:254.0: probe with driver mxuport failed with error -5 [ 328.320543][ T24] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 328.340277][ T9045] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 328.393132][ T24] airspy 3-1:0.0: Registered as swradio24 [ 328.401661][ T9044] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 328.414990][ T24] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 328.460427][ T9044] usb 4-1: device descriptor read/8, error -71 [ 328.472079][ T24] usb 3-1: USB disconnect, device number 55 [ 328.551012][ T9045] usb 1-1: config index 0 descriptor too short (expected 69, got 36) [ 328.571863][ T9045] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.614217][ T9045] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 328.639763][ T9045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.676005][ T9045] usb 1-1: Product: syz [ 328.684896][ T9045] usb 1-1: Manufacturer: syz [ 328.706691][ T9045] usb 1-1: SerialNumber: syz [ 328.739109][ T9044] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 328.760769][ T9045] usb 1-1: config 0 descriptor?? [ 328.789771][ T9044] usb 4-1: device descriptor read/8, error -71 [ 328.797340][ T9045] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 328.919826][ T9044] usb usb4-port1: unable to enumerate USB device [ 329.048195][T10226] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 329.056667][T10226] /dev/rnullb0: Can't open blockdev [ 329.603619][T10223] /dev/rnullb0: Can't open blockdev [ 329.617965][ T9045] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 329.638095][ T9045] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 329.660490][ T9045] usb 1-1: USB disconnect, device number 35 [ 330.118503][ T9045] usb 5-1: USB disconnect, device number 14 [ 330.338118][T10236] netlink: 'syz.4.1149': attribute type 4 has an invalid length. [ 330.369262][ C0] net_ratelimit: 7377 callbacks suppressed [ 330.369282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.388546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.400405][T10240] hpfs: Bad magic ... probably not HPFS [ 330.400960][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.418578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.432009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.444437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.456937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.470570][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.482981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.495579][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.785512][T10250] qnx4: no qnx4 filesystem (no root dir). [ 330.801766][T10251] /dev/rnullb0: Can't open blockdev [ 330.852630][T10251] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 331.170053][ T9044] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 331.236323][T10262] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 331.349679][ T9044] usb 3-1: too many configurations: 227, using maximum allowed: 8 [ 331.370603][ T9044] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 331.378763][ T9044] usb 3-1: config 0 has no interface number 0 [ 331.393621][T10268] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 331.406531][ T9044] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 331.421266][T10268] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 331.435683][ T9044] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 331.459823][T10268] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 331.472208][T10268] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 331.481021][ T9044] usb 3-1: config 0 interface 48 has no altsetting 0 [ 331.494371][ T9044] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 331.548384][ T9044] usb 3-1: config 0 has no interface number 0 [ 331.563368][ T9044] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 331.598965][ T9044] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 331.632869][ T9044] usb 3-1: config 0 interface 48 has no altsetting 0 [ 331.652013][ T9044] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 331.668931][ T9044] usb 3-1: config 0 has no interface number 0 [ 331.682316][ T9044] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 331.714047][ T9044] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 331.747916][ T9044] usb 3-1: config 0 interface 48 has no altsetting 0 [ 331.762594][ T9044] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 331.776445][ T9044] usb 3-1: config 0 has no interface number 0 [ 331.786746][T10274] hpfs: Bad magic ... probably not HPFS [ 331.793209][ T9044] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 331.833928][ T9044] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 331.880508][ T9044] usb 3-1: config 0 interface 48 has no altsetting 0 [ 331.889019][ T9044] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 331.897153][ T9044] usb 3-1: config 0 has no interface number 0 [ 331.913720][ T9044] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 331.945297][ T9044] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 331.982996][ T9044] usb 3-1: config 0 interface 48 has no altsetting 0 [ 332.020544][ T9044] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 332.048071][ T9044] usb 3-1: config 0 has no interface number 0 [ 332.054856][ T9044] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 332.102756][ T9044] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 332.117442][ T9044] usb 3-1: config 0 interface 48 has no altsetting 0 [ 332.138727][ T9044] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 332.148159][ T9044] usb 3-1: config 0 has no interface number 0 [ 332.168034][ T9044] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 332.221565][ T9044] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 332.278686][ T9044] usb 3-1: config 0 interface 48 has no altsetting 0 [ 332.313269][ T9044] usb 3-1: config 0 has an invalid interface number: 48 but max is 0 [ 332.336565][ T9044] usb 3-1: config 0 has no interface number 0 [ 332.367061][ T9044] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 332.399034][T10281] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 332.422078][ T9044] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 332.477880][ T9044] usb 3-1: config 0 interface 48 has no altsetting 0 [ 332.497714][ T9044] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 332.559019][ T9044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.588606][ T9044] usb 3-1: config 0 descriptor?? [ 332.759171][ T9045] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 332.877297][ T9044] usb 3-1: string descriptor 0 read error: -71 [ 332.909041][ T9044] usb 3-1: USB disconnect, device number 56 [ 332.941867][ T9045] usb 1-1: Using ep0 maxpacket: 32 [ 333.015758][ T9045] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 333.034887][ T9045] usb 1-1: config 1 has no interface number 0 [ 333.060401][ T9045] usb 1-1: config 1 interface 3 has no altsetting 0 [ 333.086691][ T9045] usb 1-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce [ 333.100635][ T9045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.111012][ T9045] usb 1-1: Product: syz [ 333.115210][ T9045] usb 1-1: Manufacturer: syz [ 333.121945][ T9045] usb 1-1: SerialNumber: syz [ 333.393778][ T9045] usb 1-1: USB disconnect, device number 36 [ 334.314763][T10320] input: syz1 as /devices/virtual/input/input18 [ 334.531209][T10325] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1171'. [ 334.575865][T10325] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1171'. [ 335.378973][ T5851] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 335.379065][ C0] net_ratelimit: 6742 callbacks suppressed [ 335.379080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.404795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.419014][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 335.431609][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.444102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.456645][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.470771][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 335.483270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.495681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.508142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.550268][ T5851] usb 5-1: Using ep0 maxpacket: 32 [ 335.580676][ T5851] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 335.618246][ T5851] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 335.647789][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.676376][ T5851] usb 5-1: Product: é¯ãª»í›°â©³âª¸î‚²á•‡á¾ƒç¢¿á¯¨ä€‹î““ë²‚í‰¶î¹¦ê¶¶ä·˜î¡æž†å²”êƒî˜ÇŽå¾«å®¿æ¿šä‘µäºéµ‡â³§ç³œè¸²î¸’詯ᵅ℄㗀ê¼å¾—煮ྺ횔ãŽé½é £áƒµå—갭蓙畊媲胄ⱅ噄섙攒횩⩹鎧龿䇱䮶ᔭ䕩킄ã¼ïª–æ”€ë–»ìŸ±ä—³ë¥•å‡°ê—…ìŒ¿â˜·æ—Ÿášžä•¥ê±…å³…á€Ÿè™‚â¶–á¢°ê¶³ç©æ¼ æ™áš§êšë•¾í€’햔㠯é†ä¨­î‚Œá‚¤éŠ½ï€ŸëŸ†â¡­ã†¨ä¿³ã™žâ€·ë¢¸î “ë‚Šå¿·ç¡‘ê‹‘ [ 335.711152][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.806754][ T5851] usb 5-1: Manufacturer: Т [ 335.819107][ T5851] usb 5-1: SerialNumber: syz [ 336.067334][T10340] NILFS (rnullb0): couldn't find nilfs on the device [ 336.255770][ T5851] cdc_ncm 5-1:1.0: bind() failure [ 336.283376][ T5851] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 336.305307][T10345] gfs2: not a GFS2 filesystem [ 336.321540][ T5851] cdc_ncm 5-1:1.1: bind() failure [ 336.367973][ T5851] usb 5-1: USB disconnect, device number 15 [ 336.457829][T10349] /dev/sg0: Can't lookup blockdev [ 336.485381][T10351] /dev/sg0: Can't lookup blockdev [ 337.072224][T10356] /dev/rnullb0: Can't open blockdev [ 337.281090][T10363] syz.2.1187: attempt to access beyond end of device [ 337.281090][T10363] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 337.322423][T10363] exFAT-fs (nbd2): unable to read boot sector [ 337.328615][T10363] exFAT-fs (nbd2): failed to read boot sector [ 337.339943][T10363] exFAT-fs (nbd2): failed to recognize exfat type [ 337.749743][T10371] omfs: Invalid superblock (0) [ 337.959111][ T9044] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 338.139199][ T9044] usb 3-1: Using ep0 maxpacket: 16 [ 338.157450][ T9044] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.176062][ T9044] usb 3-1: config 6 has an invalid interface number: 253 but max is 0 [ 338.191820][ T9044] usb 3-1: config 6 has no interface number 0 [ 338.212072][ T9044] usb 3-1: config 6 interface 253 has no altsetting 0 [ 338.231784][ T9044] usb 3-1: New USB device found, idVendor=0830, idProduct=0061, bcdDevice=23.a6 [ 338.252886][ T9044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.273791][ T9044] usb 3-1: Product: syz [ 338.285398][ T9044] usb 3-1: Manufacturer: syz [ 338.311064][ T9044] usb 3-1: SerialNumber: syz [ 338.569699][ T9044] usb 3-1: active config #6 != 1 ?? [ 338.668542][ T9044] usb 3-1: USB disconnect, device number 57 [ 339.308522][T10397] hfs: can't find a HFS filesystem on dev rnullb0 [ 339.879013][ T9044] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 340.061989][ T9044] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 340.062019][ T9044] usb 5-1: config 0 has no interface number 0 [ 340.062058][ T9044] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 340.062081][ T9044] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 340.064080][ T9044] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 340.064108][ T9044] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.064127][ T9044] usb 5-1: Product: syz [ 340.064141][ T9044] usb 5-1: Manufacturer: syz [ 340.064155][ T9044] usb 5-1: SerialNumber: syz [ 340.066987][ T9044] usb 5-1: config 0 descriptor?? [ 340.068292][T10404] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 340.092199][ T9044] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 340.096365][ T9044] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 340.213521][T10409] XFS (rnullb0): Invalid superblock magic number [ 340.389072][ C0] net_ratelimit: 6590 callbacks suppressed [ 340.389095][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.389516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.391487][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 340.391805][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.392164][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.392608][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.394642][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 340.394963][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.395336][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.493880][T10415] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 1, id = 0 [ 340.497632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.539689][ T9044] usb 5-1: USB disconnect, device number 16 [ 340.565700][ T9044] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 340.566458][ T9044] cyberjack 5-1:0.69: device disconnected [ 341.009380][T10419] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 341.307722][T10427] GUP no longer grows the stack in syz.4.1208 (10427): 200000004000-20000000a000 (200000002000) [ 341.321970][T10427] CPU: 1 UID: 0 PID: 10427 Comm: syz.4.1208 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 341.321997][T10427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 341.322010][T10427] Call Trace: [ 341.322017][T10427] [ 341.322026][T10427] dump_stack_lvl+0x189/0x250 [ 341.322060][T10427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.322084][T10427] ? __pfx__printk+0x10/0x10 [ 341.322105][T10427] ? find_vma+0xe7/0x160 [ 341.322143][T10427] __get_user_pages+0x24d0/0x2ce0 [ 341.322189][T10427] ? mtree_load+0x100/0x700 [ 341.322219][T10427] get_user_pages_remote+0x2f1/0xad0 [ 341.322242][T10427] ? __pfx_mtree_load+0x10/0x10 [ 341.322267][T10427] ? __pfx_get_user_pages_remote+0x10/0x10 [ 341.322302][T10427] __access_remote_vm+0x215/0x5f0 [ 341.322336][T10427] ? __pfx___access_remote_vm+0x10/0x10 [ 341.322364][T10427] ? alloc_pages_noprof+0xbe/0x190 [ 341.322393][T10427] proc_pid_cmdline_read+0x440/0x840 [ 341.322435][T10427] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 341.322459][T10427] ? rw_verify_area+0x258/0x650 [ 341.322487][T10427] vfs_readv+0x5aa/0x850 [ 341.322508][T10427] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 341.322531][T10427] ? __pfx_vfs_readv+0x10/0x10 [ 341.322567][T10427] ? __fget_files+0x2a/0x420 [ 341.322590][T10427] ? __fget_files+0x3a0/0x420 [ 341.322609][T10427] ? __fget_files+0x2a/0x420 [ 341.322637][T10427] __x64_sys_preadv+0x197/0x2a0 [ 341.322658][T10427] ? __pfx___x64_sys_preadv+0x10/0x10 [ 341.322674][T10427] ? rcu_is_watching+0x15/0xb0 [ 341.322701][T10427] ? do_syscall_64+0xbe/0x3b0 [ 341.322726][T10427] do_syscall_64+0xfa/0x3b0 [ 341.322745][T10427] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.322764][T10427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.322781][T10427] ? clear_bhb_loop+0x60/0xb0 [ 341.322804][T10427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.322820][T10427] RIP: 0033:0x7efc5798e929 [ 341.322837][T10427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.322853][T10427] RSP: 002b:00007efc5873d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 341.322872][T10427] RAX: ffffffffffffffda RBX: 00007efc57bb5fa0 RCX: 00007efc5798e929 [ 341.322886][T10427] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000005 [ 341.322899][T10427] RBP: 00007efc57a10b39 R08: 0000000021000008 R09: 0000000000000000 [ 341.322911][T10427] R10: 0000000000000304 R11: 0000000000000246 R12: 0000000000000000 [ 341.322927][T10427] R13: 0000000000000000 R14: 00007efc57bb5fa0 R15: 00007ffc16aefe18 [ 341.322956][T10427] [ 341.327280][T10427] ieee802154 phy0 wpan0: encryption failed: -22 [ 345.399032][ C0] net_ratelimit: 9449 callbacks suppressed [ 345.399052][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.417220][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.429706][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.442974][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 345.455178][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.467577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.479901][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 345.493246][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 345.505485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.517887][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.872410][T10437] befs: (rnullb0): No write support. Marking filesystem read-only [ 349.900848][T10437] befs: (rnullb0): invalid magic header [ 350.191573][T10441] NILFS (rnullb0): couldn't find nilfs on the device [ 350.226161][T10444] gfs2: not a GFS2 filesystem [ 350.234184][T10445] gfs2: not a GFS2 filesystem [ 350.337383][T10431] batadv_slave_0: entered promiscuous mode [ 350.362452][T10431] batadv_slave_0: left promiscuous mode [ 350.409035][ C0] net_ratelimit: 10398 callbacks suppressed [ 350.409056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.427582][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.440055][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.454208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 350.466650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.479091][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.491565][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.505731][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 350.518207][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.531067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.829136][ T5851] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 350.872485][T10463] FAULT_INJECTION: forcing a failure. [ 350.872485][T10463] name failslab, interval 1, probability 0, space 0, times 0 [ 350.910424][T10463] CPU: 1 UID: 0 PID: 10463 Comm: syz.0.1220 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 350.910452][T10463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.910462][T10463] Call Trace: [ 350.910469][T10463] [ 350.910478][T10463] dump_stack_lvl+0x189/0x250 [ 350.910506][T10463] ? __pfx____ratelimit+0x10/0x10 [ 350.910526][T10463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.910548][T10463] ? __pfx__printk+0x10/0x10 [ 350.910577][T10463] ? __pfx___might_resched+0x10/0x10 [ 350.910597][T10463] ? fs_reclaim_acquire+0x7d/0x100 [ 350.910620][T10463] should_fail_ex+0x414/0x560 [ 350.910658][T10463] ? file_tty_write+0x2a8/0x990 [ 350.910681][T10463] should_failslab+0xa8/0x100 [ 350.910708][T10463] __kvmalloc_node_noprof+0x161/0x5f0 [ 350.910733][T10463] ? file_tty_write+0x2a8/0x990 [ 350.910762][T10463] file_tty_write+0x2a8/0x990 [ 350.910795][T10463] vfs_write+0x54b/0xa90 [ 350.910824][T10463] ? __pfx_tty_write+0x10/0x10 [ 350.910848][T10463] ? __pfx_vfs_write+0x10/0x10 [ 350.910883][T10463] ? __fget_files+0x2a/0x420 [ 350.910911][T10463] ksys_write+0x145/0x250 [ 350.910930][T10463] ? __pfx_ksys_write+0x10/0x10 [ 350.910944][T10463] ? rcu_is_watching+0x15/0xb0 [ 350.910971][T10463] ? do_syscall_64+0xbe/0x3b0 [ 350.910995][T10463] do_syscall_64+0xfa/0x3b0 [ 350.911013][T10463] ? lockdep_hardirqs_on+0x9c/0x150 [ 350.911032][T10463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.911048][T10463] ? clear_bhb_loop+0x60/0xb0 [ 350.911069][T10463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.911086][T10463] RIP: 0033:0x7f3b93f8e929 [ 350.911102][T10463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.911116][T10463] RSP: 002b:00007f3b94daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.911135][T10463] RAX: ffffffffffffffda RBX: 00007f3b941b5fa0 RCX: 00007f3b93f8e929 [ 350.911148][T10463] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000003 [ 350.911160][T10463] RBP: 00007f3b94daa090 R08: 0000000000000000 R09: 0000000000000000 [ 350.911171][T10463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.911182][T10463] R13: 0000000000000000 R14: 00007f3b941b5fa0 R15: 00007ffe44eb0ea8 [ 350.911212][T10463] [ 351.002898][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.002935][ T5851] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 351.007206][ T5851] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 351.007236][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.007255][ T5851] usb 3-1: Product: syz [ 351.007269][ T5851] usb 3-1: Manufacturer: syz [ 351.007284][ T5851] usb 3-1: SerialNumber: syz [ 351.010545][ T5851] usb 3-1: config 0 descriptor?? [ 351.220472][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 351.220491][ T30] audit: type=1800 audit(1752051828.058:76): pid=10454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1219" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 351.704012][T10473] FAT-fs (rnullb0): bogus number of reserved sectors [ 351.704045][T10473] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 352.113903][T10480] hpfs: Bad magic ... probably not HPFS [ 352.299095][ T9045] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 352.401492][T10488] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 352.462653][T10490] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 352.469202][T10490] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 352.491406][ T9045] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.505423][T10490] vhci_hcd vhci_hcd.0: Device attached [ 352.516665][ T9045] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 352.553769][ T9045] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 352.574417][ T9045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.592467][ T9045] usb 4-1: Product: syz [ 352.596955][ T9045] usb 4-1: Manufacturer: syz [ 352.602734][ T9045] usb 4-1: SerialNumber: syz [ 352.612737][ T9045] usb 4-1: config 0 descriptor?? [ 352.769147][ T5851] usb 34-1: SetAddress Request (2) to port 0 [ 352.777382][ T9044] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 352.802010][ T5851] usb 34-1: new SuperSpeed USB device number 2 using vhci_hcd [ 352.968992][ T9044] usb 1-1: Using ep0 maxpacket: 8 [ 352.970924][ T9044] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 352.970952][ T9044] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.974684][ T9044] usb 1-1: config 0 descriptor?? [ 352.993350][ T9044] hso 1-1:0.0: Can't find BULK IN endpoint [ 353.248680][ T9045] usb 1-1: USB disconnect, device number 37 [ 353.259571][T10491] vhci_hcd: connection reset by peer [ 353.275164][ T4447] vhci_hcd: stop threads [ 353.291275][ T4447] vhci_hcd: release socket [ 353.304252][ T4447] vhci_hcd: disconnect device [ 353.618779][ T9045] usb 3-1: USB disconnect, device number 58 [ 354.256617][T10511] FAULT_INJECTION: forcing a failure. [ 354.256617][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 354.316037][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.0.1236 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 354.316065][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.316075][T10511] Call Trace: [ 354.316084][T10511] [ 354.316092][T10511] dump_stack_lvl+0x189/0x250 [ 354.316120][T10511] ? __pfx____ratelimit+0x10/0x10 [ 354.316141][T10511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.316164][T10511] ? __pfx__printk+0x10/0x10 [ 354.316187][T10511] ? __might_fault+0xb0/0x130 [ 354.316222][T10511] should_fail_ex+0x414/0x560 [ 354.316252][T10511] _copy_from_iter+0x1db/0x16f0 [ 354.316285][T10511] ? __pfx__copy_from_iter+0x10/0x10 [ 354.316305][T10511] ? file_tty_write+0x2a8/0x990 [ 354.316336][T10511] ? file_tty_write+0x2e8/0x990 [ 354.316358][T10511] ? rcu_is_watching+0x15/0xb0 [ 354.316381][T10511] ? kfree+0x4d/0x440 [ 354.316407][T10511] file_tty_write+0x486/0x990 [ 354.316449][T10511] vfs_write+0x54b/0xa90 [ 354.316478][T10511] ? __pfx_tty_write+0x10/0x10 [ 354.316502][T10511] ? __pfx_vfs_write+0x10/0x10 [ 354.316538][T10511] ? __fget_files+0x2a/0x420 [ 354.316566][T10511] ksys_write+0x145/0x250 [ 354.316586][T10511] ? __pfx_ksys_write+0x10/0x10 [ 354.316599][T10511] ? rcu_is_watching+0x15/0xb0 [ 354.316625][T10511] ? do_syscall_64+0xbe/0x3b0 [ 354.316649][T10511] do_syscall_64+0xfa/0x3b0 [ 354.316666][T10511] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.316684][T10511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.316701][T10511] ? clear_bhb_loop+0x60/0xb0 [ 354.316722][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.316739][T10511] RIP: 0033:0x7f3b93f8e929 [ 354.316756][T10511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.316770][T10511] RSP: 002b:00007f3b94daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 354.316790][T10511] RAX: ffffffffffffffda RBX: 00007f3b941b5fa0 RCX: 00007f3b93f8e929 [ 354.316803][T10511] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000003 [ 354.316814][T10511] RBP: 00007f3b94daa090 R08: 0000000000000000 R09: 0000000000000000 [ 354.316825][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.316835][T10511] R13: 0000000000000000 R14: 00007f3b941b5fa0 R15: 00007ffe44eb0ea8 [ 354.316865][T10511] [ 354.776605][T10515] FAULT_INJECTION: forcing a failure. [ 354.776605][T10515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.793758][T10515] CPU: 1 UID: 0 PID: 10515 Comm: syz.4.1238 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 354.793786][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 354.793797][T10515] Call Trace: [ 354.793804][T10515] [ 354.793812][T10515] dump_stack_lvl+0x189/0x250 [ 354.793839][T10515] ? __pfx____ratelimit+0x10/0x10 [ 354.793860][T10515] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.793882][T10515] ? __pfx__printk+0x10/0x10 [ 354.793905][T10515] ? __might_fault+0xb0/0x130 [ 354.793941][T10515] should_fail_ex+0x414/0x560 [ 354.793969][T10515] _copy_from_user+0x2d/0xb0 [ 354.793994][T10515] ___sys_sendmsg+0x158/0x2a0 [ 354.794020][T10515] ? __pfx____sys_sendmsg+0x10/0x10 [ 354.794078][T10515] ? __fget_files+0x2a/0x420 [ 354.794095][T10515] ? __fget_files+0x3a0/0x420 [ 354.794124][T10515] __x64_sys_sendmsg+0x19b/0x260 [ 354.794149][T10515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 354.794181][T10515] ? __pfx_ksys_write+0x10/0x10 [ 354.794195][T10515] ? rcu_is_watching+0x15/0xb0 [ 354.794221][T10515] ? do_syscall_64+0xbe/0x3b0 [ 354.794244][T10515] do_syscall_64+0xfa/0x3b0 [ 354.794262][T10515] ? lockdep_hardirqs_on+0x9c/0x150 [ 354.794281][T10515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.794297][T10515] ? clear_bhb_loop+0x60/0xb0 [ 354.794315][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.794331][T10515] RIP: 0033:0x7efc5798e929 [ 354.794348][T10515] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.794363][T10515] RSP: 002b:00007efc5873d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.794382][T10515] RAX: ffffffffffffffda RBX: 00007efc57bb5fa0 RCX: 00007efc5798e929 [ 354.794395][T10515] RDX: 0000000020008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 354.794406][T10515] RBP: 00007efc5873d090 R08: 0000000000000000 R09: 0000000000000000 [ 354.794416][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.794434][T10515] R13: 0000000000000000 R14: 00007efc57bb5fa0 R15: 00007ffc16aefe18 [ 354.794461][T10515] [ 355.101900][ T9044] usb 4-1: USB disconnect, device number 51 [ 355.338982][ T9045] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 355.420702][ C0] net_ratelimit: 6545 callbacks suppressed [ 355.420721][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 355.439056][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.451367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.463677][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.476776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 355.489175][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.489244][ T9044] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 355.501778][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.521309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.531925][ T9045] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 355.535378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 355.554915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.559679][T10530] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 355.577188][ T9045] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 355.586262][ T9045] usb 3-1: Product: syz [ 355.594875][ T9045] usb 3-1: SerialNumber: syz [ 355.615826][ T9045] usb 3-1: config 0 descriptor?? [ 355.749068][ T9044] usb 4-1: Using ep0 maxpacket: 8 [ 355.773787][ T9044] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 355.784064][ T9044] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.795501][ T9044] usb 4-1: Product: syz [ 355.804796][ T9044] usb 4-1: Manufacturer: syz [ 355.812904][ T9044] usb 4-1: SerialNumber: syz [ 355.823341][ T9044] usb 4-1: config 0 descriptor?? [ 355.850130][T10517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.889424][ T9044] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244) [ 355.918346][T10517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.049525][T10535] random: crng reseeded on system resumption [ 356.126767][T10532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.502635][T10517] /dev/rnullb0: Can't open blockdev [ 356.572918][T10541] XFS (rnullb0): Invalid superblock magic number [ 356.968539][ T9045] usb 3-1: USB disconnect, device number 59 [ 357.101656][ T9044] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -32 [ 357.125793][ T9044] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 357.340856][T10556] FAULT_INJECTION: forcing a failure. [ 357.340856][T10556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.360579][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.0.1248 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 357.360605][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.360616][T10556] Call Trace: [ 357.360624][T10556] [ 357.360632][T10556] dump_stack_lvl+0x189/0x250 [ 357.360660][T10556] ? __pfx____ratelimit+0x10/0x10 [ 357.360681][T10556] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.360705][T10556] ? __pfx__printk+0x10/0x10 [ 357.360728][T10556] ? __might_fault+0xb0/0x130 [ 357.360763][T10556] should_fail_ex+0x414/0x560 [ 357.360793][T10556] _copy_from_iter+0x1db/0x16f0 [ 357.360828][T10556] ? __pfx__copy_from_iter+0x10/0x10 [ 357.360846][T10556] ? file_tty_write+0x1d8/0x990 [ 357.360869][T10556] ? __pfx_woken_wake_function+0x10/0x10 [ 357.360904][T10556] file_tty_write+0x486/0x990 [ 357.360948][T10556] vfs_write+0x54b/0xa90 [ 357.360978][T10556] ? __pfx_tty_write+0x10/0x10 [ 357.361003][T10556] ? __pfx_vfs_write+0x10/0x10 [ 357.361039][T10556] ? __fget_files+0x2a/0x420 [ 357.361068][T10556] ksys_write+0x145/0x250 [ 357.361088][T10556] ? __pfx_ksys_write+0x10/0x10 [ 357.361102][T10556] ? rcu_is_watching+0x15/0xb0 [ 357.361129][T10556] ? do_syscall_64+0xbe/0x3b0 [ 357.361151][T10556] do_syscall_64+0xfa/0x3b0 [ 357.361169][T10556] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.361192][T10556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.361208][T10556] ? clear_bhb_loop+0x60/0xb0 [ 357.361229][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.361245][T10556] RIP: 0033:0x7f3b93f8e929 [ 357.361261][T10556] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.361275][T10556] RSP: 002b:00007f3b94daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.361294][T10556] RAX: ffffffffffffffda RBX: 00007f3b941b5fa0 RCX: 00007f3b93f8e929 [ 357.361308][T10556] RDX: 0000000000001006 RSI: 0000200000001980 RDI: 0000000000000003 [ 357.361320][T10556] RBP: 00007f3b94daa090 R08: 0000000000000000 R09: 0000000000000000 [ 357.361331][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.361341][T10556] R13: 0000000000000000 R14: 00007f3b941b5fa0 R15: 00007ffe44eb0ea8 [ 357.361371][T10556] [ 357.754355][T10559] FAULT_INJECTION: forcing a failure. [ 357.754355][T10559] name failslab, interval 1, probability 0, space 0, times 0 [ 357.770061][T10559] CPU: 1 UID: 0 PID: 10559 Comm: syz.2.1250 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 357.770088][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.770098][T10559] Call Trace: [ 357.770105][T10559] [ 357.770114][T10559] dump_stack_lvl+0x189/0x250 [ 357.770142][T10559] ? __pfx____ratelimit+0x10/0x10 [ 357.770162][T10559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.770191][T10559] ? __pfx__printk+0x10/0x10 [ 357.770219][T10559] ? __pfx___might_resched+0x10/0x10 [ 357.770246][T10559] should_fail_ex+0x414/0x560 [ 357.770274][T10559] should_failslab+0xa8/0x100 [ 357.770301][T10559] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 357.770325][T10559] ? __alloc_skb+0x112/0x2d0 [ 357.770351][T10559] __alloc_skb+0x112/0x2d0 [ 357.770375][T10559] netlink_sendmsg+0x5c6/0xb30 [ 357.770404][T10559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.770427][T10559] ? aa_sock_msg_perm+0xf1/0x1d0 [ 357.770452][T10559] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 357.770472][T10559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 357.770493][T10559] __sock_sendmsg+0x21c/0x270 [ 357.770514][T10559] ____sys_sendmsg+0x505/0x830 [ 357.770543][T10559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.770574][T10559] ? import_iovec+0x74/0xa0 [ 357.770600][T10559] ___sys_sendmsg+0x21f/0x2a0 [ 357.770625][T10559] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.770681][T10559] ? __fget_files+0x2a/0x420 [ 357.770700][T10559] ? __fget_files+0x3a0/0x420 [ 357.770728][T10559] __x64_sys_sendmsg+0x19b/0x260 [ 357.770753][T10559] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.770785][T10559] ? __pfx_ksys_write+0x10/0x10 [ 357.770799][T10559] ? rcu_is_watching+0x15/0xb0 [ 357.770824][T10559] ? do_syscall_64+0xbe/0x3b0 [ 357.770848][T10559] do_syscall_64+0xfa/0x3b0 [ 357.770866][T10559] ? lockdep_hardirqs_on+0x9c/0x150 [ 357.770884][T10559] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.770900][T10559] ? clear_bhb_loop+0x60/0xb0 [ 357.770920][T10559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.770936][T10559] RIP: 0033:0x7f23a4b8e929 [ 357.770959][T10559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.770973][T10559] RSP: 002b:00007f23a5a03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.770993][T10559] RAX: ffffffffffffffda RBX: 00007f23a4db5fa0 RCX: 00007f23a4b8e929 [ 357.771010][T10559] RDX: 0000000020008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 357.771022][T10559] RBP: 00007f23a5a03090 R08: 0000000000000000 R09: 0000000000000000 [ 357.771033][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.771044][T10559] R13: 0000000000000000 R14: 00007f23a4db5fa0 R15: 00007fff2e2cbd08 [ 357.771071][T10559] [ 358.339228][ T5851] usb 34-1: device descriptor read/8, error -110 [ 358.462326][ T9044] usb 4-1: USB disconnect, device number 52 [ 358.663674][T10584] /dev/rnullb0: Can't open blockdev [ 358.750184][ T5851] usb usb34-port1: attempt power cycle [ 359.113809][T10592] IPVS: Unknown mcast interface: nicvf0 [ 359.382389][ T5851] usb usb34-port1: unable to enumerate USB device [ 359.453467][T10594] /dev/rnullb0: Can't open blockdev [ 359.900817][T10600] bad cache= option: none’[()bvتr [ 359.900817][T10600] ÜÙŸ »9Š;Ñ^ЬdÈ!å/™ê­7u\“—ÀÝ´ßMÙDÿÒ¥eYÿoî ˜–“­PÙ50œeÂB>KÜX’/¤æÆTJ*Ÿ)—J¨ý(ÔÅ)Õ€¶˜‘Kœ’¼÷™óµÌfË5&‹˜€Lq¾¼q£2ÞWµhWd¸çÂ0 [ 359.900817][T10600] [ 359.903854][T10600] CIFS: VFS: bad cache= option: none’[()bvتr [ 359.903854][T10600] ÜÙŸ »9Š;Ñ^ЬdÈ!å/™ê­7u\“—ÀÝ´ßMÙDÿÒ¥eYÿoî ˜–“­PÙ50œeÂB>KÜX’/¤æÆTJ*Ÿ)—J¨ý(ÔÅ)Õ€¶˜‘Kœ’¼÷™óµÌfË5&‹˜€Lq¾¼q£2ÞWµhWd¸çÂ0 [ 360.389908][ T5851] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 360.429004][ C0] net_ratelimit: 6256 callbacks suppressed [ 360.429023][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.447762][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.449849][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 360.472939][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.485360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.485825][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.487829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 360.523378][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.535954][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.536397][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.575929][ T5851] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.575987][ T5851] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 360.576009][ T5851] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.578795][ T5851] usb 5-1: config 0 descriptor?? [ 360.586246][ T5851] pwc: Askey VC010 type 2 USB webcam detected. [ 360.662163][ T9045] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 360.787347][ T5851] pwc: send_video_command error -71 [ 360.787366][ T5851] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 360.788542][ T5851] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 360.789119][ T9045] usb 3-1: device descriptor read/64, error -71 [ 360.803813][ T5851] usb 5-1: USB disconnect, device number 17 [ 361.059138][ T9045] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 361.089326][T10615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.089722][T10615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.189126][ T9045] usb 3-1: device descriptor read/64, error -71 [ 361.277256][T10617] fuse: Bad value for 'fd' [ 361.298943][ T9044] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 361.309618][ T9045] usb usb3-port1: attempt power cycle [ 361.497362][ T9044] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.523218][ T9044] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 361.544484][ T9044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.585978][ T9044] usb 5-1: config 0 descriptor?? [ 361.607787][ T9044] pwc: Askey VC010 type 2 USB webcam detected. [ 361.614173][ T9054] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 361.679393][ T9045] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 361.723517][ T9045] usb 3-1: device descriptor read/8, error -71 [ 361.779071][ T9054] usb 4-1: Using ep0 maxpacket: 32 [ 361.788461][ T9054] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.804042][ T9054] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 8 [ 361.824580][ T9044] pwc: send_video_command error -71 [ 361.836992][ T9054] usb 4-1: config 1 interface 0 altsetting 2 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.867134][ T9044] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 361.885757][ T9044] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 361.898318][ T9054] usb 4-1: config 1 interface 0 has no altsetting 0 [ 361.910851][ T9054] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.930905][ T9044] usb 5-1: USB disconnect, device number 18 [ 361.945632][ T9054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.953848][ T5851] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 361.978618][ T9054] usb 4-1: Product: ꧺë¯ç±Šá¯·æ¤ éœ©æ¨¹á•«æ½¸à¢å¤†í–ˆã¨˜éº­ì„’ӞᣡᲯ剣눠눮覆랋⋱㽪擗ëŒê“‰âŽšæ±ã¸³ïžšì½‘푃凔勦꼃譪᭞列㤟츰⾣裡é±ì§©î¶å²¨â‡“轤 [ 361.999163][ T9045] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 362.023343][ T9054] usb 4-1: Manufacturer: â° [ 362.028398][ T9054] usb 4-1: SerialNumber: syz [ 362.041596][ T9045] usb 3-1: device descriptor read/8, error -71 [ 362.069653][T10626] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 362.076981][T10626] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 362.119099][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 362.134287][ T5851] usb 1-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=38.b7 [ 362.147003][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.158453][ T9045] usb usb3-port1: unable to enumerate USB device [ 362.180584][ T5851] usb 1-1: Product: syz [ 362.184813][ T5851] usb 1-1: Manufacturer: syz [ 362.192684][ T5851] usb 1-1: SerialNumber: syz [ 362.210041][ T5851] usb 1-1: config 0 descriptor?? [ 362.222246][ T5851] hub 1-1:0.0: bad descriptor, ignoring hub [ 362.236945][ T5851] hub 1-1:0.0: probe with driver hub failed with error -5 [ 362.440784][T10630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.472758][T10630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.704664][T10636] FAULT_INJECTION: forcing a failure. [ 362.704664][T10636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 362.718238][T10636] CPU: 1 UID: 0 PID: 10636 Comm: syz.4.1273 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 362.718263][T10636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 362.718274][T10636] Call Trace: [ 362.718281][T10636] [ 362.718288][T10636] dump_stack_lvl+0x189/0x250 [ 362.718317][T10636] ? __pfx____ratelimit+0x10/0x10 [ 362.718340][T10636] ? __pfx_dump_stack_lvl+0x10/0x10 [ 362.718363][T10636] ? __pfx__printk+0x10/0x10 [ 362.718385][T10636] ? __might_fault+0xb0/0x130 [ 362.718420][T10636] should_fail_ex+0x414/0x560 [ 362.718448][T10636] _copy_from_iter+0x1db/0x16f0 [ 362.718475][T10636] ? rcu_is_watching+0x15/0xb0 [ 362.718498][T10636] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 362.718525][T10636] ? __pfx__copy_from_iter+0x10/0x10 [ 362.718547][T10636] ? __build_skb_around+0x257/0x3e0 [ 362.718573][T10636] ? netlink_sendmsg+0x642/0xb30 [ 362.718591][T10636] ? skb_put+0x11b/0x210 [ 362.718616][T10636] netlink_sendmsg+0x6b2/0xb30 [ 362.718645][T10636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.718668][T10636] ? aa_sock_msg_perm+0xf1/0x1d0 [ 362.718693][T10636] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 362.718712][T10636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 362.718733][T10636] __sock_sendmsg+0x21c/0x270 [ 362.718764][T10636] ____sys_sendmsg+0x505/0x830 [ 362.718793][T10636] ? __pfx_____sys_sendmsg+0x10/0x10 [ 362.718825][T10636] ? import_iovec+0x74/0xa0 [ 362.718849][T10636] ___sys_sendmsg+0x21f/0x2a0 [ 362.718871][T10636] ? __pfx____sys_sendmsg+0x10/0x10 [ 362.718928][T10636] ? __fget_files+0x2a/0x420 [ 362.718946][T10636] ? __fget_files+0x3a0/0x420 [ 362.718974][T10636] __x64_sys_sendmsg+0x19b/0x260 [ 362.718998][T10636] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 362.719031][T10636] ? rcu_is_watching+0x15/0xb0 [ 362.719057][T10636] ? do_syscall_64+0xbe/0x3b0 [ 362.719081][T10636] do_syscall_64+0xfa/0x3b0 [ 362.719098][T10636] ? lockdep_hardirqs_on+0x9c/0x150 [ 362.719117][T10636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.719133][T10636] ? clear_bhb_loop+0x60/0xb0 [ 362.719154][T10636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.719170][T10636] RIP: 0033:0x7efc5798e929 [ 362.719186][T10636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.719201][T10636] RSP: 002b:00007efc5873d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 362.719220][T10636] RAX: ffffffffffffffda RBX: 00007efc57bb5fa0 RCX: 00007efc5798e929 [ 362.719233][T10636] RDX: 0000000020008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 362.719245][T10636] RBP: 00007efc5873d090 R08: 0000000000000000 R09: 0000000000000000 [ 362.719255][T10636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.719265][T10636] R13: 0000000000000000 R14: 00007efc57bb5fa0 R15: 00007ffc16aefe18 [ 362.719294][T10636] [ 363.149401][ T9045] usb 1-1: USB disconnect, device number 38 [ 363.251027][ T9054] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 363.264549][ T9054] usb 4-1: USB disconnect, device number 53 [ 364.479109][ T9045] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 364.668117][ T9045] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 364.721184][T10659] FAT-fs (rnullb0): bogus number of reserved sectors [ 364.739427][ T9045] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.747880][T10659] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 364.772919][ T9045] usb 4-1: Product: syz [ 364.779156][ T9045] usb 4-1: Manufacturer: syz [ 364.783785][ T9045] usb 4-1: SerialNumber: syz [ 364.809596][T10659] FAT-fs (rnullb0): bogus number of reserved sectors [ 364.822920][ T9045] usb 4-1: config 0 descriptor?? [ 364.850997][T10659] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 365.069037][ T9045] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 365.439134][ C0] net_ratelimit: 6277 callbacks suppressed [ 365.439158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.448288][T10664] FAULT_INJECTION: forcing a failure. [ 365.448288][T10664] name failslab, interval 1, probability 0, space 0, times 0 [ 365.457386][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.482674][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.496811][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 365.509259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.521640][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.534115][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.545828][T10664] CPU: 1 UID: 0 PID: 10664 Comm: syz.2.1283 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 365.545855][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 365.545870][T10664] Call Trace: [ 365.545877][T10664] [ 365.545885][T10664] dump_stack_lvl+0x189/0x250 [ 365.545913][T10664] ? __pfx____ratelimit+0x10/0x10 [ 365.545933][T10664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 365.545955][T10664] ? __pfx__printk+0x10/0x10 [ 365.545981][T10664] ? __pfx___might_resched+0x10/0x10 [ 365.546003][T10664] ? fs_reclaim_acquire+0x7d/0x100 [ 365.546026][T10664] should_fail_ex+0x414/0x560 [ 365.546056][T10664] should_failslab+0xa8/0x100 [ 365.546083][T10664] __kmalloc_noprof+0xcb/0x4f0 [ 365.546104][T10664] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 365.546135][T10664] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 365.546166][T10664] genl_family_rcv_msg_doit+0xb8/0x300 [ 365.546194][T10664] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 365.546216][T10664] ? rcu_is_watching+0x15/0xb0 [ 365.546238][T10664] ? apparmor_capable+0x137/0x1b0 [ 365.546258][T10664] ? bpf_lsm_capable+0x9/0x20 [ 365.546279][T10664] ? security_capable+0x7e/0x2e0 [ 365.546307][T10664] genl_rcv_msg+0x60e/0x790 [ 365.546337][T10664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.546357][T10664] ? __pfx_devlink_nl_pre_doit_port+0x10/0x10 [ 365.546380][T10664] ? __pfx_devlink_nl_sb_port_pool_set_doit+0x10/0x10 [ 365.546402][T10664] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 365.546439][T10664] netlink_rcv_skb+0x205/0x470 [ 365.546459][T10664] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.546484][T10664] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.546520][T10664] ? down_read+0x1ad/0x2e0 [ 365.546544][T10664] genl_rcv+0x28/0x40 [ 365.546564][T10664] netlink_unicast+0x758/0x8d0 [ 365.546600][T10664] netlink_sendmsg+0x805/0xb30 [ 365.546629][T10664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.546652][T10664] ? aa_sock_msg_perm+0xf1/0x1d0 [ 365.546676][T10664] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.546695][T10664] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.546715][T10664] __sock_sendmsg+0x21c/0x270 [ 365.546736][T10664] ____sys_sendmsg+0x505/0x830 [ 365.546764][T10664] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.546796][T10664] ? import_iovec+0x74/0xa0 [ 365.546822][T10664] ___sys_sendmsg+0x21f/0x2a0 [ 365.546847][T10664] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.546904][T10664] ? __fget_files+0x2a/0x420 [ 365.546921][T10664] ? __fget_files+0x3a0/0x420 [ 365.546949][T10664] __x64_sys_sendmsg+0x19b/0x260 [ 365.546975][T10664] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.547006][T10664] ? __pfx_ksys_write+0x10/0x10 [ 365.547020][T10664] ? rcu_is_watching+0x15/0xb0 [ 365.547045][T10664] ? do_syscall_64+0xbe/0x3b0 [ 365.547068][T10664] do_syscall_64+0xfa/0x3b0 [ 365.547086][T10664] ? lockdep_hardirqs_on+0x9c/0x150 [ 365.547103][T10664] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.547119][T10664] ? clear_bhb_loop+0x60/0xb0 [ 365.547140][T10664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.547160][T10664] RIP: 0033:0x7f23a4b8e929 [ 365.547177][T10664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.547191][T10664] RSP: 002b:00007f23a5a03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.547209][T10664] RAX: ffffffffffffffda RBX: 00007f23a4db5fa0 RCX: 00007f23a4b8e929 [ 365.547222][T10664] RDX: 0000000020008000 RSI: 0000200000000100 RDI: 0000000000000003 [ 365.547234][T10664] RBP: 00007f23a5a03090 R08: 0000000000000000 R09: 0000000000000000 [ 365.547245][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.547255][T10664] R13: 0000000000000000 R14: 00007f23a4db5fa0 R15: 00007fff2e2cbd08 [ 365.547283][T10664] [ 365.911155][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 365.923599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.935985][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 366.100598][ T9045] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 367.033803][T10678] /dev/rnullb0: Can't open blockdev [ 368.119772][ T9045] usb 4-1: USB disconnect, device number 54 [ 368.387466][T10684] /dev/rnullb0: Can't open blockdev [ 368.619555][T10691] ./file0: Can't lookup blockdev [ 368.869086][ T9045] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 369.020511][ T9045] usb 4-1: device descriptor read/64, error -71 [ 369.269017][ T9045] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 369.410377][ T9045] usb 4-1: device descriptor read/64, error -71 [ 369.522731][ T9045] usb usb4-port1: attempt power cycle [ 369.868948][ T9045] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 369.903727][ T9045] usb 4-1: device descriptor read/8, error -71 [ 370.149097][ T9045] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 370.182542][ T9045] usb 4-1: device descriptor read/8, error -71 [ 370.304142][ T9045] usb usb4-port1: unable to enumerate USB device [ 370.449136][ C0] net_ratelimit: 8597 callbacks suppressed [ 370.449160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 370.467468][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.479705][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.492187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.505949][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 370.518404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.530697][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.543072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.556300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 370.568701][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 372.047509][T10703] tmpfs: Cannot change global quota limit on remount [ 372.144946][T10705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1297'. [ 372.616148][T10711] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 372.624954][T10711] /dev/rnullb0: Can't open blockdev [ 372.734098][T10715] /dev/rnullb0: Can't open blockdev [ 372.803282][T10717] overlay: ./file0 is not a directory [ 373.137330][T10721] /dev/rnullb0: Can't open blockdev [ 373.147975][T10722] /dev/rnullb0: Can't open blockdev [ 373.540048][ T9045] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 373.714081][ T9045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 373.726537][ T9045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.739875][ T9045] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 373.754845][ T9045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.769596][ T9045] usb 4-1: config 0 descriptor?? [ 374.221424][ T9045] nzxt-kraken2 0003:1E71:170E.0018: item fetching failed at offset 5/7 [ 374.238313][ T9045] nzxt-kraken2 0003:1E71:170E.0018: hid parse failed with -22 [ 374.246404][ T9045] nzxt-kraken2 0003:1E71:170E.0018: probe with driver nzxt-kraken2 failed with error -22 [ 374.607238][ T5851] usb 4-1: USB disconnect, device number 59 [ 374.662679][T10726] netlink: 'syz.0.1306': attribute type 11 has an invalid length. [ 374.688986][T10726] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1306'. [ 374.797192][T10728] /dev/rnullb0: Can't open blockdev [ 375.458957][ C0] net_ratelimit: 8650 callbacks suppressed [ 375.458981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.477575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 375.490029][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.502536][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.515356][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.529600][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.538624][T10743] /dev/rnullb0: Can't open blockdev [ 375.542204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 375.559567][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.572040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.584638][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 376.218210][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1315'. [ 377.075951][T10772] cgroup: Invalid name [ 377.222775][ T5851] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 377.409124][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 377.461490][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 377.507351][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 377.545597][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 377.588542][ T5851] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 377.612070][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.641371][ T5851] usb 3-1: config 0 descriptor?? [ 377.769229][ T9045] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 377.939057][ T9045] usb 5-1: Using ep0 maxpacket: 16 [ 377.951990][ T9045] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 377.965406][ T9045] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 377.984484][ T9045] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 377.995982][ T9045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.007567][ T9045] usb 5-1: Product: syz [ 378.016293][ T9045] usb 5-1: Manufacturer: syz [ 378.026629][ T9045] usb 5-1: SerialNumber: syz [ 378.039733][ T9045] usb 5-1: config 0 descriptor?? [ 378.061205][ T9045] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 378.075155][ T9045] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 378.093701][ T5851] hid_parser_main: 5 callbacks suppressed [ 378.093724][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.114598][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.129811][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.137501][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.149310][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.156879][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.172604][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.181678][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.192476][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.201504][ T5851] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 378.224066][ T5851] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 378.618285][T10786] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 378.642437][T10786] VFS: Can't find a romfs filesystem on dev rnullb0. [ 378.642437][T10786] [ 378.658806][ T9045] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 378.671230][ T9045] em28xx 5-1:0.0: Config register raw data: 0x30 [ 378.703507][ T9045] em28xx 5-1:0.0: I2S Audio (3 sample rate(s)) [ 378.719043][ T9045] em28xx 5-1:0.0: No AC97 audio processor [ 378.773683][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.783431][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.885731][T10789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.914708][T10780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.923914][T10789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.945225][T10780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.225560][ T5905] usb 3-1: USB disconnect, device number 64 [ 379.270580][T10800] ALSA: mixer_oss: invalid index 100000 [ 379.824633][T10806] pimreg: entered allmulticast mode [ 379.832801][T10808] syzkaller1: entered promiscuous mode [ 379.838302][T10808] syzkaller1: entered allmulticast mode [ 379.848595][ T9030] usb 5-1: USB disconnect, device number 19 [ 379.914178][T10808] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1333'. [ 380.324381][T10812] hpfs: Bad magic ... probably not HPFS [ 380.370419][T10815] bpf: Bad value for 'gid' [ 380.422050][T10819] netlink: 'syz.0.1336': attribute type 21 has an invalid length. [ 380.442561][T10819] netlink: 388 bytes leftover after parsing attributes in process `syz.0.1336'. [ 380.469114][ C0] net_ratelimit: 7202 callbacks suppressed [ 380.469131][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 380.476974][T10820] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 380.487403][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.507793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.520248][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.534307][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.546828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 380.559268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.571770][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.584212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 380.598221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 380.875752][T10828] hpfs: Bad magic ... probably not HPFS [ 380.918441][T10828] hpfs: Bad magic ... probably not HPFS [ 381.282359][T10837] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 381.348943][ T9045] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 381.510365][ T9045] usb 5-1: device descriptor read/64, error -71 [ 381.542061][T10847] trusted_key: syz.2.1344 sent an empty control message without MSG_MORE. [ 381.779330][ T9045] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 381.928928][ T9045] usb 5-1: device descriptor read/64, error -71 [ 382.079439][ T9045] usb usb5-port1: attempt power cycle [ 382.443373][ T9045] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 382.494216][ T9045] usb 5-1: device descriptor read/8, error -71 [ 382.769100][ T9045] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 382.804629][ T9045] usb 5-1: device descriptor read/8, error -71 [ 382.915063][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 382.927885][ T9045] usb usb5-port1: unable to enumerate USB device [ 383.175601][T10870] /dev/rnullb0: Can't open blockdev [ 383.188984][ T9045] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 383.325408][T10868] kvm: user requested TSC rate below hardware speed [ 383.358965][ T9045] usb 1-1: Using ep0 maxpacket: 32 [ 383.386508][ T9045] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 383.398374][ T9045] usb 1-1: config 0 has no interface number 0 [ 383.406466][ T9045] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 383.434785][ T9045] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 383.448392][ T9045] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 383.465493][ T9045] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 383.491283][ T9045] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 383.510160][ T9045] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 383.575923][ T9045] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 383.606232][ T9045] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 383.634447][ T9045] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 383.673155][ T9045] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.741222][ T9045] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 383.761476][ T9045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.779782][ T9045] usb 1-1: Product: syz [ 383.801751][ T9045] usb 1-1: Manufacturer: syz [ 383.816232][ T9045] usb 1-1: SerialNumber: syz [ 383.856595][ T9045] usb 1-1: config 0 descriptor?? [ 383.882811][T10866] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 383.921954][T10866] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 383.953039][ T9045] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 383.975967][ T9045] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 384.005693][ T9045] scsi host1: microtekX6 [ 384.079015][ T9044] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 384.176690][T10866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1349'. [ 384.195701][T10866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.203136][T10866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.224281][ T9054] usb 1-1: USB disconnect, device number 39 [ 384.248943][ T9044] usb 3-1: device descriptor read/64, error -71 [ 384.498635][ T9044] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 384.649075][ T9044] usb 3-1: device descriptor read/64, error -71 [ 384.777280][ T9044] usb usb3-port1: attempt power cycle [ 384.944147][T10902] fuse: Bad value for 'user_id' [ 384.952766][T10902] fuse: Bad value for 'user_id' [ 385.093759][T10907] i2c i2c-0: Invalid block write size 254 [ 385.164823][T10902] syz.3.1359: attempt to access beyond end of device [ 385.164823][T10902] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 385.185120][ T9044] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 385.238789][T10902] EXT4-fs (loop3): unable to read superblock [ 385.245882][ T9044] usb 3-1: device descriptor read/8, error -71 [ 385.480460][ C0] net_ratelimit: 6844 callbacks suppressed [ 385.480481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.499043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 385.499122][ T9044] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 385.511592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.531365][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.543915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.558296][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.559678][ T9044] usb 3-1: device descriptor read/8, error -71 [ 385.570788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 385.589208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 385.601709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.614308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 385.709612][ T9044] usb usb3-port1: unable to enumerate USB device [ 386.556829][T10913] input: syz1 as /devices/virtual/input/input19 [ 386.611708][T10913] syz.3.1362: attempt to access beyond end of device [ 386.611708][T10913] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 386.959461][ T9054] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 387.164920][ T9054] usb 4-1: unable to get BOS descriptor or descriptor too short [ 387.183476][ T9054] usb 4-1: not running at top speed; connect to a high speed hub [ 387.233643][ T9054] usb 4-1: config 13 has an invalid interface number: 104 but max is 0 [ 387.261127][ T9054] usb 4-1: config 13 has no interface number 0 [ 387.302694][ T9054] usb 4-1: config 13 interface 104 has no altsetting 0 [ 387.361385][ T9054] usb 4-1: New USB device found, idVendor=0c45, idProduct=624f, bcdDevice=64.37 [ 387.414007][ T9054] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.456585][ T9054] usb 4-1: Product: syz [ 387.471001][ T9054] usb 4-1: Manufacturer: syz [ 387.484456][ T9054] usb 4-1: SerialNumber: syz [ 387.927968][ T9045] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 388.042873][T10931] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 388.119266][ T9045] usb 1-1: Using ep0 maxpacket: 32 [ 388.139515][ T9045] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 388.147961][ T9045] usb 1-1: config 0 has no interface number 0 [ 388.176580][ T9045] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 388.188022][ T9045] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.667877][ T9045] usb 1-1: Product: syz [ 388.678673][ T9045] usb 1-1: Manufacturer: syz [ 388.691896][ T9045] usb 1-1: SerialNumber: syz [ 388.716687][ T9045] usb 1-1: config 0 descriptor?? [ 388.751064][ T9045] smsc95xx v2.0.0 [ 389.147085][ T9045] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 389.180837][ T9045] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 389.621230][ T9045] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 389.634272][T10923] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.674868][ T9045] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 389.725576][T10934] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.795524][ T9045] usb 1-1: USB disconnect, device number 40 [ 390.297955][ T9054] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:624f [ 390.345372][ T9054] gspca_sn9c20x: Write register 1000 failed -71 [ 390.366230][ T9054] gspca_sn9c20x: Device initialization failed [ 390.391417][ T9054] gspca_sn9c20x 4-1:13.104: probe with driver gspca_sn9c20x failed with error -71 [ 390.478979][ T9054] usb 4-1: USB disconnect, device number 60 [ 390.489660][ C0] net_ratelimit: 6475 callbacks suppressed [ 390.489678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.507960][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 390.520383][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.533512][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.545995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.559997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.572654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 390.585076][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 390.597481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.609925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 390.611648][T10948] hpfs: Bad magic ... probably not HPFS [ 390.699055][ T9045] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 390.869291][ T9044] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 390.881355][ T9045] usb 5-1: too many configurations: 172, using maximum allowed: 8 [ 390.924268][ T9045] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 390.944282][ T9045] usb 5-1: can't read configurations, error -61 [ 390.989597][T10957] qnx4: no qnx4 filesystem (no root dir). [ 391.070828][ T9044] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.093446][ T9044] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 391.105919][ T9045] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 391.127370][ T9044] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 391.143002][ T9044] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.182186][ T9044] usb 3-1: Product: syz [ 391.186536][ T9044] usb 3-1: Manufacturer: syz [ 391.194151][ T9044] usb 3-1: SerialNumber: syz [ 391.204481][ T9044] usb 3-1: config 0 descriptor?? [ 391.269657][ T9045] usb 5-1: too many configurations: 172, using maximum allowed: 8 [ 391.292214][ T9045] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 391.311668][ T9045] usb 5-1: can't read configurations, error -61 [ 391.321788][ T9045] usb usb5-port1: attempt power cycle [ 391.389433][ T9054] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 391.559830][ T9054] usb 1-1: Using ep0 maxpacket: 8 [ 391.573938][ T9054] usb 1-1: unable to get BOS descriptor or descriptor too short [ 391.585616][ T9054] usb 1-1: config 0 has an invalid interface number: 88 but max is 0 [ 391.595949][ T9054] usb 1-1: config 0 has no interface number 0 [ 391.604111][ T9054] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 391.617258][ T9054] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 391.633570][ T9054] usb 1-1: config 0 interface 88 has no altsetting 0 [ 391.641710][ T9054] usb 1-1: language id specifier not provided by device, defaulting to English [ 391.663329][ T9054] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 391.677721][ T9054] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 391.691889][ T9045] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 391.700875][ T9054] usb 1-1: Product: syz [ 391.706935][ T9054] usb 1-1: SerialNumber: syz [ 391.711874][ T5851] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 391.727088][ T9054] usb 1-1: config 0 descriptor?? [ 391.743283][ T9045] usb 5-1: too many configurations: 172, using maximum allowed: 8 [ 391.754778][ T9045] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 391.765125][ T9045] usb 5-1: can't read configurations, error -61 [ 391.849082][ T5851] usb 4-1: device descriptor read/64, error -71 [ 391.912252][ T9045] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 391.947332][ T9045] usb 5-1: too many configurations: 172, using maximum allowed: 8 [ 391.971273][ T9045] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 391.986488][ T9045] usb 5-1: can't read configurations, error -61 [ 392.003913][ T9045] usb usb5-port1: unable to enumerate USB device [ 392.119477][ T5851] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 392.279562][ T5851] usb 4-1: device descriptor read/64, error -71 [ 392.411440][ T5851] usb usb4-port1: attempt power cycle [ 392.455840][ T9054] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input20 [ 392.534969][ T9054] usb 1-1: USB disconnect, device number 41 [ 392.667679][T10461] udevd[10461]: Error opening device "/dev/input/event4": No such file or directory [ 392.680901][T10461] udevd[10461]: Unable to EVIOCGABS device "/dev/input/event4" [ 392.688770][T10461] udevd[10461]: Unable to EVIOCGABS device "/dev/input/event4" [ 392.770094][ T5851] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 392.802871][ T5851] usb 4-1: device descriptor read/8, error -71 [ 393.051066][ T5851] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 393.089769][ T5851] usb 4-1: device descriptor read/8, error -71 [ 393.209418][ T5851] usb usb4-port1: unable to enumerate USB device [ 393.386438][ T9045] usb 3-1: USB disconnect, device number 69 [ 393.481231][ T5851] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 393.574588][T10976] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1383'. [ 393.678989][ T5851] usb 1-1: Using ep0 maxpacket: 16 [ 393.693040][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 393.718412][ T5851] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 393.718441][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.718460][ T5851] usb 1-1: Product: syz [ 393.718474][ T5851] usb 1-1: Manufacturer: syz [ 393.718488][ T5851] usb 1-1: SerialNumber: syz [ 393.723921][ T5851] usb 1-1: config 0 descriptor?? [ 393.740685][ T5851] hub 1-1:0.0: bad descriptor, ignoring hub [ 393.740714][ T5851] hub 1-1:0.0: probe with driver hub failed with error -5 [ 393.743112][ T5851] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 394.185891][T10982] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1386'. [ 394.498941][ T5851] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 394.677075][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.694933][T10994] binder: Unknown parameter 'fsname' [ 394.703782][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 394.744046][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 394.775162][ T5851] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.812200][ T5851] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.836758][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.893119][ T5851] usb 3-1: config 0 descriptor?? [ 395.088970][ T9045] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 395.265207][ T9045] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.277434][ T9045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 395.293420][ T9045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 395.304030][ T9045] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 395.338561][ T5851] hid_parser_main: 5 callbacks suppressed [ 395.338584][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.352698][ T9045] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 395.370533][ T9045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.381091][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.412563][ T9045] usb 4-1: config 0 descriptor?? [ 395.420831][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.448922][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.464508][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.475688][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.487547][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.495660][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.499192][ C0] net_ratelimit: 7850 callbacks suppressed [ 395.499221][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.507584][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.509385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 395.540789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.546722][ T5851] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x0 [ 395.553176][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.572982][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.587015][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.599549][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 395.612045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 395.624604][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.632261][ T5851] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 395.637048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 395.735432][ T5851] usb 3-1: USB disconnect, device number 70 [ 395.874326][ T9045] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 395.898651][T10997] fido_id[10997]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 396.168752][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.198472][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.320165][ T5851] usb 1-1: USB disconnect, device number 42 [ 396.342444][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 396.457147][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1390'. [ 397.309085][ T9045] usb 4-1: reset high-speed USB device number 65 using dummy_hcd [ 400.509020][ C0] net_ratelimit: 8474 callbacks suppressed [ 400.509043][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.528683][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.541054][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 400.553522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.565971][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.578423][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.592099][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.604588][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 400.616944][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 400.629325][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 400.639142][ T55] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 400.799099][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 400.810383][ T55] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 400.823365][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 400.834713][ T55] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 400.851302][ T55] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 400.864016][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.875903][ T55] usb 5-1: Product: syz [ 400.884309][ T55] usb 5-1: Manufacturer: syz [ 400.890315][ T55] usb 5-1: SerialNumber: syz [ 401.310154][ T55] usb 5-1: 0:2 : does not exist [ 401.368116][T11038] QAT: Stopping all acceleration devices. [ 401.659107][ T9054] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 401.821493][ T9054] usb 1-1: device descriptor read/64, error -71 [ 401.869074][T11048] netlink: 'syz.2.1404': attribute type 4 has an invalid length. [ 401.973454][ T55] usb 5-1: USB disconnect, device number 28 [ 402.089018][ T9054] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 402.105471][T11036] udevd[11036]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.137080][ T9045] usb 4-1: device descriptor read/64, error -71 [ 402.259124][ T9054] usb 1-1: device descriptor read/64, error -71 [ 402.310755][ T24] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 402.384837][ T9054] usb usb1-port1: attempt power cycle [ 402.399063][ T9045] usb 4-1: reset high-speed USB device number 65 using dummy_hcd [ 402.411452][ T9045] usb 4-1: device reset changed ep0 maxpacket size! [ 402.422507][ T5851] usb 4-1: USB disconnect, device number 65 [ 402.483986][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 402.503152][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 402.514463][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 402.526787][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.548323][T11052] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 402.571598][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 402.605435][ T5851] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 402.731117][ T9054] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 402.769944][ T9054] usb 1-1: device descriptor read/8, error -71 [ 402.789658][ T24] usb 3-1: USB disconnect, device number 71 [ 402.800469][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 402.835176][ T5851] usb 4-1: unable to get BOS descriptor or descriptor too short [ 402.874865][ T5851] usb 4-1: config index 0 descriptor too short (expected 6674, got 18) [ 402.923251][ T5851] usb 4-1: config 108 has too many interfaces: 227, using maximum allowed: 32 [ 402.959498][ T5851] usb 4-1: config 108 has an invalid descriptor of length 136, skipping remainder of the config [ 402.989239][ T5851] usb 4-1: config 108 has 0 interfaces, different from the descriptor's value: 227 [ 403.025440][ T9054] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 403.056765][ T5851] usb 4-1: New USB device found, idVendor=1f71, idProduct=3306, bcdDevice=7f.b4 [ 403.068652][T11054] Can't find a SQUASHFS superblock on rnullb0 [ 403.121627][ T9054] usb 1-1: device descriptor read/8, error -71 [ 403.129204][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.158065][ T5851] usb 4-1: Product: syz [ 403.173039][ T5851] usb 4-1: Manufacturer: syz [ 403.194189][ T5851] usb 4-1: SerialNumber: syz [ 403.259520][ T9054] usb usb1-port1: unable to enumerate USB device [ 403.382799][T11058] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 403.393600][T11058] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 403.509407][T11045] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1402'. [ 403.632188][ T5851] usb 4-1: USB disconnect, device number 66 [ 403.976854][T11072] syz.2.1410: attempt to access beyond end of device [ 403.976854][T11072] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 404.032001][T11072] hpfs: hpfs_map_sector(): read error [ 404.369947][ T5851] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 404.569040][ T5851] usb 4-1: config index 0 descriptor too short (expected 65069, got 45) [ 404.619156][ T5851] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 404.647789][T11079] IPv6: NLM_F_CREATE should be specified when creating new route [ 404.687525][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.730246][ T5851] usb 4-1: config 0 has no interfaces? [ 404.762726][ T5851] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 404.795928][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.837937][ T5851] usb 4-1: config 0 descriptor?? [ 404.909063][ T9054] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 405.022311][T11088] /dev/rnullb0: Can't open blockdev [ 405.085179][T11074] /dev/rnullb0: Can't open blockdev [ 405.117190][ T24] usb 4-1: USB disconnect, device number 67 [ 405.125775][ T9054] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.152911][ T9054] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 405.227478][ T9054] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.238937][ T5851] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 405.267431][ T9054] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.286266][ T9054] usb 1-1: Product: syz [ 405.296384][ T9054] usb 1-1: Manufacturer: syz [ 405.321159][ T9054] usb 1-1: SerialNumber: syz [ 405.421015][ T5851] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.452180][ T5851] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.484552][ T5851] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 405.505525][T11097] /dev/rnullb0: Can't open blockdev [ 405.511478][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.519268][ C0] net_ratelimit: 7766 callbacks suppressed [ 405.519287][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.537947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 405.540234][ T5851] usb 3-1: Product: syz [ 405.550462][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.566927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.567000][ T5851] usb 3-1: Manufacturer: syz [ 405.579391][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.591319][T11082] fuse: Bad value for 'user_id' [ 405.598088][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.612895][ T5851] usb 3-1: SerialNumber: syz [ 405.613282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 405.624203][T11082] fuse: Bad value for 'user_id' [ 405.629897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 405.646931][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.650654][ T5851] usb 3-1: config 0 descriptor?? [ 405.659459][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 405.753341][ T9054] usb 1-1: 0:2 : does not exist [ 405.791520][ T9054] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 405.858186][ T9054] usb 1-1: USB disconnect, device number 47 [ 406.005299][T11036] udevd[11036]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.107240][T11103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1421'. [ 406.555697][T11105] loop6: detected capacity change from 0 to 7 [ 406.566687][T11105] loop6: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 406.581356][T11105] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 406.597518][T11105] loop6: p2 start 2602905181 is beyond EOD, truncated [ 406.635802][T11105] loop6: p3 start 1745589262 is beyond EOD, truncated [ 406.695113][T11105] loop6: p4 start 325178268 is beyond EOD, truncated [ 406.695162][T11105] loop6: p5 start 2326339850 is beyond EOD, truncated [ 406.695181][T11105] loop6: p6 start 2562259694 is beyond EOD, truncated [ 406.885882][T11036] udevd[11036]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 407.758216][T11130] IPv6: NLM_F_CREATE should be specified when creating new route [ 407.929311][ T9054] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 408.054760][ T24] usb 3-1: USB disconnect, device number 72 [ 408.091738][ T9054] usb 5-1: Using ep0 maxpacket: 32 [ 408.105949][ T9054] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 408.123934][ T9054] usb 5-1: config 0 has no interface number 0 [ 408.150291][ T9054] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 408.160801][T11142] /dev/rnullb0: Can't open blockdev [ 408.194025][ T9054] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.206394][ T9054] usb 5-1: Product: syz [ 408.213723][ T9054] usb 5-1: Manufacturer: syz [ 408.218482][ T9054] usb 5-1: SerialNumber: syz [ 408.231681][ T9054] usb 5-1: config 0 descriptor?? [ 408.252780][ T9054] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 408.261801][ T5851] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 408.449099][ T9054] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 408.464799][ T5851] usb 4-1: Using ep0 maxpacket: 16 [ 408.493489][ T5851] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.524880][ T9054] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 408.539434][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 408.576747][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 408.640999][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 6 [ 408.661341][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 408.741630][ T5851] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 408.786371][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.802305][ T5851] usb 4-1: Product: syz [ 408.806731][ T5851] usb 4-1: Manufacturer: syz [ 408.816044][ T5851] usb 4-1: SerialNumber: syz [ 408.824411][ T5851] usb 4-1: config 0 descriptor?? [ 408.838131][ T5851] xbox_remote_probe: Unexpected endpoint_in [ 408.909661][T11128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.990218][T11128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.040573][T11140] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1431'. [ 409.057305][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 409.078027][ T5851] usb 5-1: USB disconnect, device number 29 [ 409.132808][ T5851] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 409.149609][ T9054] usb 4-1: USB disconnect, device number 68 [ 409.218255][ T5851] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 409.239211][ T5851] quatech2 5-1:0.51: device disconnected [ 409.312088][T11156] /dev/rnullb0: Can't open blockdev [ 409.618547][T11160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1437'. [ 409.686851][T11162] /dev/rnullb0: Can't open blockdev [ 409.692865][T11160] /dev/rnullb0: Can't open blockdev [ 410.426887][T11177] /dev/rnullb0: Can't open blockdev [ 410.529855][ C0] net_ratelimit: 7460 callbacks suppressed [ 410.529876][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.548206][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 410.560650][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.573086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.585585][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.599603][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.612058][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 410.624510][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 410.624894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.625349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.886562][T11185] netlink: 'syz.4.1447': attribute type 1 has an invalid length. [ 411.029843][T11187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1448'. [ 411.535886][T11199] binder: 11193:11199 ioctl c0306201 200000000640 returned -22 [ 411.590935][T11199] syz.2.1450: attempt to access beyond end of device [ 411.590935][T11199] loop2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 411.648706][T11199] EXT4-fs (loop2): unable to read superblock [ 411.674329][T11205] kAFS: unable to lookup cell '.,c¾ûL' [ 411.890838][T11216] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 411.978967][T11219] /dev/rnullb0: Can't open blockdev [ 412.084743][T11221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.156976][T11221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.329059][ T5851] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 412.859921][T11239] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 412.877416][T11239] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 413.431024][T11256] ufs: failed to set blocksize [ 413.898499][T11268] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1471'. [ 414.044200][T11281] /dev/rnullb0: Can't open blockdev [ 414.054682][T11282] /dev/rnullb0: Can't open blockdev [ 414.108983][ T24] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 414.236063][T11285] /dev/rnullb0: Can't open blockdev [ 414.270979][ T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 414.292713][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.327255][ T24] usb 1-1: config 0 descriptor?? [ 414.399486][ T24] cp210x 1-1:0.0: cp210x converter detected [ 414.761955][ T24] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 415.003637][ T24] usb 1-1: cp210x converter now attached to ttyUSB0 [ 415.188712][T11275] /dev/rnullb0: Can't open blockdev [ 415.215394][ T24] usb 1-1: USB disconnect, device number 49 [ 415.247631][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 415.379041][ T24] cp210x 1-1:0.0: device disconnected [ 415.536910][T11300] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1481'. [ 415.538886][ C0] net_ratelimit: 7076 callbacks suppressed [ 415.538902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 415.564694][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.577281][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.589813][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.604902][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.617578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 415.630182][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 415.642680][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.655691][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.669773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 416.174912][ T36] [ 416.177280][ T36] ====================================================== [ 416.184298][ T36] WARNING: possible circular locking dependency detected [ 416.191328][ T36] 6.16.0-rc5-next-20250708-syzkaller #0 Not tainted [ 416.197913][ T36] ------------------------------------------------------ [ 416.204943][ T36] kworker/u8:2/36 is trying to acquire lock: [ 416.210923][ T36] ffff88806d87b358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 416.220164][ T36] [ 416.220164][ T36] but task is already holding lock: [ 416.227528][ T36] ffff8880243cf188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 416.237127][ T36] [ 416.237127][ T36] which lock already depends on the new lock. [ 416.237127][ T36] [ 416.247573][ T36] [ 416.247573][ T36] the existing dependency chain (in reverse order) is: [ 416.256585][ T36] [ 416.256585][ T36] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 416.265025][ T36] lock_acquire+0x120/0x360 [ 416.270054][ T36] down_write+0x96/0x1f0 [ 416.274821][ T36] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 416.281072][ T36] nbd_start_device+0x16c/0xac0 [ 416.286460][ T36] nbd_ioctl+0x636/0xeb0 [ 416.291221][ T36] blkdev_ioctl+0x5a5/0x6d0 [ 416.296260][ T36] __se_sys_ioctl+0xf9/0x170 [ 416.301382][ T36] do_syscall_64+0xfa/0x3b0 [ 416.306408][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.312820][ T36] [ 416.312820][ T36] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 416.320642][ T36] lock_acquire+0x120/0x360 [ 416.325668][ T36] __mutex_lock+0x182/0xe80 [ 416.330699][ T36] refcount_dec_and_mutex_lock+0x30/0xa0 [ 416.336864][ T36] nbd_config_put+0x2c/0x790 [ 416.341987][ T36] nbd_release+0xfe/0x140 [ 416.346837][ T36] bdev_release+0x533/0x650 [ 416.351866][ T36] blkdev_release+0x15/0x20 [ 416.357428][ T36] __fput+0x44c/0xa70 [ 416.361946][ T36] fput_close_sync+0x119/0x200 [ 416.367422][ T36] __x64_sys_close+0x7f/0x110 [ 416.372634][ T36] do_syscall_64+0xfa/0x3b0 [ 416.377755][ T36] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.384191][ T36] [ 416.384191][ T36] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 416.392109][ T36] validate_chain+0xb9b/0x2140 [ 416.397579][ T36] __lock_acquire+0xab9/0xd20 [ 416.402794][ T36] lock_acquire+0x120/0x360 [ 416.407835][ T36] __mutex_lock+0x182/0xe80 [ 416.412866][ T36] __del_gendisk+0x129/0x9e0 [ 416.418171][ T36] del_gendisk+0xe8/0x160 [ 416.423216][ T36] nbd_dev_remove_work+0x47/0xe0 [ 416.428782][ T36] process_scheduled_works+0xade/0x17b0 [ 416.434864][ T36] worker_thread+0x8a0/0xda0 [ 416.439989][ T36] kthread+0x711/0x8a0 [ 416.444772][ T36] ret_from_fork+0x3fc/0x770 [ 416.449983][ T36] ret_from_fork_asm+0x1a/0x30 [ 416.455286][ T36] [ 416.455286][ T36] other info that might help us debug this: [ 416.455286][ T36] [ 416.465522][ T36] Chain exists of: [ 416.465522][ T36] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 416.465522][ T36] [ 416.479710][ T36] Possible unsafe locking scenario: [ 416.479710][ T36] [ 416.487165][ T36] CPU0 CPU1 [ 416.492627][ T36] ---- ---- [ 416.497992][ T36] rlock(&set->update_nr_hwq_lock); [ 416.503289][ T36] lock(&nbd->config_lock); [ 416.510399][ T36] lock(&set->update_nr_hwq_lock); [ 416.518122][ T36] lock(&disk->open_mutex); [ 416.522723][ T36] [ 416.522723][ T36] *** DEADLOCK *** [ 416.522723][ T36] [ 416.530867][ T36] 3 locks held by kworker/u8:2/36: [ 416.535976][ T36] #0: ffff888025414148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 416.547057][ T36] #1: ffffc90000ac7bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 416.559435][ T36] #2: ffff8880243cf188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 416.569500][ T36] [ 416.569500][ T36] stack backtrace: [ 416.575435][ T36] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.16.0-rc5-next-20250708-syzkaller #0 PREEMPT(full) [ 416.575461][ T36] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.575474][ T36] Workqueue: nbd-del nbd_dev_remove_work [ 416.575505][ T36] Call Trace: [ 416.575512][ T36] [ 416.575520][ T36] dump_stack_lvl+0x189/0x250 [ 416.575546][ T36] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.575577][ T36] ? __pfx__printk+0x10/0x10 [ 416.575599][ T36] ? print_lock_name+0xde/0x100 [ 416.575621][ T36] print_circular_bug+0x2ee/0x310 [ 416.575644][ T36] check_noncircular+0x134/0x160 [ 416.575668][ T36] validate_chain+0xb9b/0x2140 [ 416.575691][ T36] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 416.575715][ T36] ? arch_stack_walk+0x11c/0x150 [ 416.575739][ T36] __lock_acquire+0xab9/0xd20 [ 416.575760][ T36] ? __del_gendisk+0x129/0x9e0 [ 416.575781][ T36] lock_acquire+0x120/0x360 [ 416.575798][ T36] ? __del_gendisk+0x129/0x9e0 [ 416.575818][ T36] ? check_path+0x21/0x40 [ 416.575840][ T36] __mutex_lock+0x182/0xe80 [ 416.575857][ T36] ? __del_gendisk+0x129/0x9e0 [ 416.575881][ T36] ? __del_gendisk+0x129/0x9e0 [ 416.575901][ T36] ? __pfx___mutex_lock+0x10/0x10 [ 416.575918][ T36] ? __pfx___might_resched+0x10/0x10 [ 416.575941][ T36] ? __lock_acquire+0xab9/0xd20 [ 416.575959][ T36] ? disk_del_events+0xb5/0x210 [ 416.575980][ T36] ? __del_gendisk+0xc1/0x9e0 [ 416.576001][ T36] __del_gendisk+0x129/0x9e0 [ 416.576021][ T36] ? del_gendisk+0xe0/0x160 [ 416.576044][ T36] ? __pfx___del_gendisk+0x10/0x10 [ 416.576066][ T36] ? down_read+0x1ad/0x2e0 [ 416.576085][ T36] del_gendisk+0xe8/0x160 [ 416.576107][ T36] nbd_dev_remove_work+0x47/0xe0 [ 416.576129][ T36] ? process_scheduled_works+0x9ef/0x17b0 [ 416.576150][ T36] process_scheduled_works+0xade/0x17b0 [ 416.576180][ T36] ? __pfx_process_scheduled_works+0x10/0x10 [ 416.576206][ T36] worker_thread+0x8a0/0xda0 [ 416.576227][ T36] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 416.576247][ T36] ? __kthread_parkme+0x7b/0x200 [ 416.576271][ T36] kthread+0x711/0x8a0 [ 416.576294][ T36] ? __pfx_worker_thread+0x10/0x10 [ 416.576313][ T36] ? __pfx_kthread+0x10/0x10 [ 416.576335][ T36] ? _raw_spin_unlock_irq+0x23/0x50 [ 416.576350][ T36] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.576366][ T36] ? __pfx_kthread+0x10/0x10 [ 416.576388][ T36] ret_from_fork+0x3fc/0x770 [ 416.576408][ T36] ? __pfx_ret_from_fork+0x10/0x10 [ 416.576429][ T36] ? __switch_to_asm+0x39/0x70 [ 416.576444][ T36] ? __switch_to_asm+0x33/0x70 [ 416.576458][ T36] ? __pfx_kthread+0x10/0x10 [ 416.576480][ T36] ret_from_fork_asm+0x1a/0x30 [ 416.576501][ T36] [ 416.838369][ C1] vkms_vblank_simulate: vblank timer overrun [ 416.854267][T11306] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/rnullb0": -EINTR [ 416.877494][T11312] input: syz0 as /devices/virtual/input/input21 [ 417.098317][T11312] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 417.321666][T11318] fuse: Unknown parameter 'd' [ 417.358036][T11320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1486'. [ 420.549390][ C0] net_ratelimit: 17154 callbacks suppressed [ 420.549406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.567516][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 420.579956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.592080][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.604265][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.617332][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.629568][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 420.641870][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 420.654255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.666481][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.558998][ C0] net_ratelimit: 24298 callbacks suppressed [ 425.559021][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.577409][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.590472][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.602751][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 425.615067][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.627272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.639612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 425.652825][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 425.665190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:9a:51:d2:52:c8:4b, vlan:0) [ 425.677457][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)