last executing test programs: 2m48.039521083s ago: executing program 0 (id=1733): prlimit64(0x0, 0x9, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r0, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r4, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x14, r5, 0x800, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x28014}, 0x81) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) uname(&(0x7f0000000040)=""/192) ioctl$RNDADDENTROPY(r6, 0x5206, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010d7b28e6f3931db5252100000008ea03000300", @ANYRES32=r2, @ANYBLOB="54002d802d"], 0x74}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) io_setup(0x6, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000595000/0x4000)=nil, 0x4000, 0xe) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r7, &(0x7f00000005c0)="f5", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r7, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="621c0000000005e5a456e7d998a5000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44000) 2m47.112605338s ago: executing program 0 (id=1736): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="0d32818e", 0x4}]) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x8082, 0x0) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) (async) io_setup(0x20, &(0x7f0000001140)) (async) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r1, &(0x7f0000000080)="0d32818e", 0x4}]) (async) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000080)) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (async) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (async) 2m46.877865671s ago: executing program 0 (id=1737): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mknodat$loop(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) listxattr(&(0x7f0000001cc0)='./bus\x00', &(0x7f0000001d00)=""/4096, 0x1000) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000025c0)={r3, 0x200, 0x10}, 0x8) r4 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCGPTPEER(r4, 0x5441, 0x63) 2m46.873025273s ago: executing program 0 (id=1738): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r1 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = socket(0x11, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000240)=0x4e6f, 0x4) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)={0x200, 0x30, 0x900, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x14, 0xfe, 0x0, 0x0, @ipv6=@mcast1}, @generic="0c6f76503bf6d7450e6b2d85697aa4bfa43ad492576374c2d9ff713ef65852faa57ea40dea32e4757e138edae6eeaaaee6afd0a5064b693067230a3b1368ae37847ea6e067199a8edd9c7607bb5b4ee8d7dfab0adca2cc26e5fdb8fe893bd211ae69a61c3e52c52cfaef1c47ebe62994e9a875c37eedf44d0072d69afb3b669d18eb96ee0403b3eb7ebfb487eb9ac767f4ffbb255e1d3347a8", @nested={0x13d, 0xf0, 0x0, 0x1, [@generic="2912c34da4a2df2426dd793fb36492ee77dff921e8719a5152a341f462ce482e9312030dd1e00e5bea646d3d3d75c9224be8c2f7a607b74bf4307c0e3e62783a58f7a9a84033ba134929f75be33b5dc8c91f7c215cbed28d915cde222fe605750fff10e75805fe4e00a07a905778ec2b8a02747329e4c18dc43db97cb0baee77bc580044d524694d7884c2ab90027fd4358eaae72a0222d6b81dd94173ee270b8c188a5c1de11ccafade1781f19f99120b842b3c640cc653427d2287b9ff62ba6eb3c82dd3d2cb1303ee5994ea78fef66e37e1a684629b36020d9f052249d8", @generic="1af7af25e9e942678df06f6bfdbba5ffca219edc9e014df5b8a45c3aeffffa9044c7b6ea438d716e69918512c573245c97d288583877950d33c618d9fe3558e7c0ae70ce04e58e10b6508946a614cfe02c3aa5997dd6", @nested={0x4, 0x146}]}]}, 0x200}], 0x1, 0x0, 0x0, 0x4000}, 0x1) splice(r1, &(0x7f0000000140)=0x3, r2, 0x0, 0x81, 0x4) accept4$unix(r2, &(0x7f0000000140), &(0x7f0000000200)=0x6e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x578, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {0x0, 0xb}, {}, {0xa}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c00018005000200000000000800040005000000080001"], 0x7c}}, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2a05004, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) 2m46.716453391s ago: executing program 0 (id=1740): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xb3) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr']) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r2, @ANYBLOB="0a00180003030303039e2884c600700005000100c37784570351c1537f00000000"], 0x34}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) 2m46.167328642s ago: executing program 0 (id=1746): openat$comedi(0xffffffffffffff9c, 0x0, 0x80403, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x20, 0x200000}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRES8], 0xf}}, {{&(0x7f0000000400)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)="bd4357c53345ed05273fe9a6705b7ea8db20f33bad05bb8eadbe7298cf634bf7bcfeb67b392d7a20638f1bfc8827be21ffc2aabbd76f022b8a8bdba4c3409fb76d50f2262d69b66729d6640a35208c4534fdcddb1be5c443ba86cadfe8a7b49be4a3dc66f191d04adb5a7cef919090c0f8c795b39782496747ac8a1ab38c5fcdf6a7416b490919cc99be06e3c1781a5247b13c4e06321f76cbca698d9bf0778fff3d4b8ffbcb3b4ddaa691e1a797476327878197789be5bfc7a880106f2cf15052d3897faf407742132abf4a8226715b79c5ab4fdabab237bb0d7d8e0beea42dbc7a5f978aadb3945e1cc183bd1041f95d34fd", 0xf3}], 0x1, &(0x7f0000002300)=[{0xf8, 0x102, 0xb, "27c4030000009730a2a90377ec964056da1c8ba736b31e521c9e11b285d3dc9c5e31f02703f1c9e6a9fea4fe271c9c11b5468e6df3ecd0d3b8dd4c42f1a78c2b13978ab26d1e09e618cf286d0c1f8d7bda4c9ade1df00d4bb266ae8274250b4e20a2cfdaebbcbd79d13f1c9ae561e0a18237f74776cdd63aa3997f096d4801e326c0c6f253465b909c7bbf7a646f0238f0a36f6f799fbf603435401950c200ca6848816f0e60895447560bf8f5a87c87a388f31343117a20558225d4e705e0fa853f49173d3f06d30a86f2ac3e42b4129055724ac673bc33cd4267f09a2668cd7d2f4000004be453"}, {0xc8, 0x10c, 0x2, "d0aecb32d38f90d0b73a7638528e79ad6489db369a94ddfb8f9978d8cacfb74994bc39c15483c368fe7a04d2175558717e5a6c3abe90aa334ab9fafe01889a305b211e3f2c15be2b7dbbf2fbcc6d9aafd2a63ff9231bfc4b36cea49e6747961fbc0b90abad7153c54ef438cafa5746d22026c9fcba102489863f4c62bce807335797ff3a61fb003a0a679d5495851af17a1bba3f3e32839e517001d08e01e0fc9ad7045551be48ec6b6e163f3664c085aa1c8c37"}, {0x48, 0x108, 0x4, "f41e6b1e3047721adbf0f36493694cd99fcd06b9d84a4d28507bd2fbd1467bb9241303d75cd5815c54507b7e390e8eff5bde30bc78b8b47b"}, {0x1010, 0x113, 0x7, "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"}], 0x1218}}, {{&(0x7f0000000580)=@llc={0x1a, 0x8, 0xe, 0x3, 0x0, 0x7, @multicast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001040)="8f06579d124d1edd0f7438094e969acd00f0b8ee7769d0aee08b2c1a5c9e78016eb7c398fdbd11cca4baf0aa059f46bd1614e3d053c4f48eb720b89915e8d97e8463a957f5c97b8d72d6353f4e7ef7e076eb21468900662dfdbc1f8ef066b219d68f30ae5ba32009802c927d8ede65a3128ab19d5e68df3703124d91c3b226841aec14677143f58d76532cb4290e4d33edb889f93f9e9f48cac534836652fb0a80faa8de9a609f30edd1ea125372928765a28fd303adc84350d7def28328ce0106fab60d20ea83374113a3f8ccbc02853f8660c51a82e8c459c6c12548a671e84d256cb85f956b693acbc9d9344fcb230f6e8884b5", 0xf5}, {&(0x7f0000000680)="131085e3dbd86e0cd97728fee36b90aacdd78f51a7b72fc338cdd222c576119522856ecd175d615801f5dd9744e02bd2ffc7cf0c72db9e9ed4711a1ac4db65f7526dcb1e7a30f0d8c33af431ed5349cefd8e423dfc160060e69a6166ccff6e1fbe564e0639caf0238be3e63306ee4ba63ffbac5798f88e0dea106ee9eb8aeb36a729f818af008ca98ac7f5bb57f60e6cfd32ec3a", 0x94}, {&(0x7f00000007c0)="69a0002fb676e8c3bd0ab4f93c7c43e640007e5cdaf90098fc004db4e063b441c8d776cf439c154adf8dc15f594015190e3eb0872d09e3b143223aec55c37f561e0f3ebeb5f19fff3ed11400"/94, 0x5e}, {&(0x7f0000001180)="b2ccbf20955ca4897db64c4154bbe8ec4e1457ef03407bcedb06e95f76b02ae4e96786fbf6d1bcffc7739550d91ddd699f93bf263761a20ca76cf41924898ebcd2c70a65de4a29997a2cf9c5554d3c200868edf9aa62e6a9757256318d8bd66edd59a5c9b2dbd8937a06fb702d3059925978699bd9ac6fee9eac950acecb2b503f5ab5095f879797a6d72d1eb3856dadb92d1c93584e44f79099208a0116be3396ee74c9645920e99c7e81a29bb1ba0415b98275c3fdef9d4c0f48f52449273e47f70565b0cb615f131f42698b2b59272f5bb297aaf208c7bf952f5dd17594d472f5f3f0a948da35d6a3", 0xea}], 0x4, &(0x7f0000000900)=[{0xc0, 0x11, 0x5, "78d55bead43ea40c1bc808ce16e57cc89f306fb26c2ec20b5ff701d1b518c022d19af3487ccfc4093252628b2dba5a16608769853ac11e37c67c163c796cbaa2c1417cb1bebcabf2939822d8dc63e66eba1467f276d49c560bf5a211a62975b524dd09335163679a5bfe17dd2503f8f8807776630e2004f4a61dbde4d1e40f795095e9bdbe092bed6b5efe325a45df4bb5abb5c079da218f20def77a6ea2757070152b3ad775c90802c0c9b2006e"}, {0xb8, 0x88, 0x8, "68006d7ec5701b89e3226951a46811c34f269b284f8c215f489e42eddf390575f93e0ec711d88c6aff3385395d2d6791507a9c27d012dae2e18afa89604b24be62d1013730ecbf493b1c710552915bbc324db483f6361f60d103b8421edb2cefb35ac3b525afde0bd68a40dd9b58b9ae420721fae964184dcb5b61e904d4c6d3762f854fc5e99580575d3836e502e5a2ecbfb992805f39e4211e1c75c756b0ab404878868d1e"}, {0x98, 0x111, 0x5, "08d7b5c3a602cefe33da294a870c4b54e96f5607e0667ec6d48761d6dabf4ae9de0da3b8dba3a10e40c42b3997dce7948dff1e246abbe8ebf321a0cee50368de61e7e95d58b8cb0eeb9c0ff08f25b2ea116baec25c6254d932c3273950a943dc83c1a63730a048af04e91dda7ed4c2a31dc7903602fcfc0ffdf4344cbbaa6555b553f31726996f"}, {0x90, 0x115, 0xfcbb, "1f56d1737bab848b770958555046ca9b8a0da9e5b99e14a0034b5fd2eccf2947f326bcade14bae6667026b36aa5f2965f1103d1ff5cdaa69c7b1e1dd9db9b9a4db6de00d618bbfbb79689a466b2275f80ec4ca57fa49fc923315740021aeb6e7f00db1b97d09f0b46b63cc7348168f6b09e7d789eea0c331ca8eff7e09a96a"}, {0xb8, 0x113, 0x399, "4cfb84c13b7ddf4d3d0c9c97f8f61065f44a1d249646634fbd76e9f642cf7a2dafd8fa87512aa2005a1417a3825973d404f98f87ce6defebf4cf6054f7bf0de92848d4c6555bd451a9273559549eeaf940a6781c3f1a9944eea7dce4a9c22d011bfaea7ce148b1bbb3b5ae27dd398533acce61b99c09df3a3b103918b6eb9dd51330979eafdca7a27b3dc9f2f91d7259c2cf0b3bb714f0cb4f0a427cb1c79a856d141fb66952"}], 0x358}}, {{&(0x7f0000000c80)=@xdp={0x2c, 0x2, 0x0, 0xb}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000d00)="b05130eed9721f97a660c80053c44abb61bf26a9100049fa6b969e3f34ec4a5c18d26c0c1a36e96e815021775392659b5f116bda6bbd914b372f58102aeaa49bd99e3d1b817dd7214704933a5d97b5187cd2c5aa900f1760a1c3f80f445248648d39ae844f5efb1c848f98aeee9c18457dd8c8d194e8e8493af99b93a63901edba336182c36430c7c9e571f9c62d332c4191adce071515697e6e6add1721907499126f552f3b907f2ac98b5d6bbe2dfc44206d0b232281bf76649ec8a0d4b7f6c44e29776a36ffce5b30ace5019f3f1dbc", 0xd1}, {&(0x7f0000000840)="8c7e13247ed2853f43999fb41655921c5aa943a5bc21174bd5d4a2e84d164ea1a64d893a3f8f04a5273acbf032496793af87300c679a6b7fe79fb835805097102fe38bc82e1198413577981d6e8166d7db4ba703", 0x54}, {&(0x7f0000000e00)="3d297e13c955791ccf075490c1a7108c29cb7a884af953a1141459b7f96f92d456b88ffe5bb7014c6edd54d5bb31886af5f3dec49aebb9570bb9045dabb97281f44dd81c83f7feef1c8f9a71bcc06ab433250e9aa39c033596f83e76f22c16b98819f1bfd50a5926332b8c6c2f80f95a3fe9f31899d47c613297e07f5a917035e8954154594a102efb9046fb32ed5d2d2472aebb4c962ec8cc67e919", 0x9c}, {&(0x7f0000000640)="82643eb537bea4cee60b3ab1d7b44ef0283440654d744ab5f223aa6f9c3bd9c1f390707703f3d9f2e9da36be9a3f8585a2d0aabc5f698c2337751e08", 0x3c}, {&(0x7f0000000740)="c54bb54aa9679649fe896581a9ab614f89af0d0a068747dad0ab1eb98b7ff2f6", 0x20}, {&(0x7f0000001280)="4c1c32833e8770777c4cfddeae5924884812002adf7a61e0c3be01eded679221be16f68475feb7bad4f2a3cdf905db4493af61aeade8f025e0fcec7c1bfa89beba3e9925591262670c03fec94158b1b6e197353456630b0a527809f20ce2e208c58aaafab407dea0538a89ad218427e473be8c98744874a7b003aeb4341334b8d69e0b946c9a27f242af40201e89807a3adea5e293f9957d598b6280c1860c1cc18af338245f005cb54f3253360acf299d3fa2f1f10550aa6f6b78a19ac0", 0xbe}, {&(0x7f0000000ec0)="73918e05f783fa38c0d81aaa449f0bb100ec9d0648471916c73dc50811e30e8ed7b9a48af92f5a979fc71997be8dec8a029f2ce47276f39c80780692fc6fb0ac4a2344fb5625389cccaffec57bd70e58ecd049d8d0a3cb21c0f1b9ffc5a5f95ceafa", 0x62}], 0x7, &(0x7f0000002300)}}], 0x4, 0x4004804) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r1, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000780)=[{&(0x7f0000000300)="e7", 0x1}], 0x1, 0x100, 0xf3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sigaltstack(&(0x7f00000001c0)={&(0x7f00000000c0)=""/169, 0x3, 0xa9}, &(0x7f0000000340)={&(0x7f0000000240)=""/181, 0x0, 0xb5}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r5 = fsopen(&(0x7f0000000180)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m45.921438019s ago: executing program 32 (id=1746): openat$comedi(0xffffffffffffff9c, 0x0, 0x80403, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5}) setrlimit(0x40000000000008, &(0x7f0000000000)={0x20, 0x200000}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) socket$packet(0x11, 0x3, 0x300) sendmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESOCT, @ANYRES8], 0xf}}, {{&(0x7f0000000400)=@in={0x2, 0x4e23, @loopback}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000480)="bd4357c53345ed05273fe9a6705b7ea8db20f33bad05bb8eadbe7298cf634bf7bcfeb67b392d7a20638f1bfc8827be21ffc2aabbd76f022b8a8bdba4c3409fb76d50f2262d69b66729d6640a35208c4534fdcddb1be5c443ba86cadfe8a7b49be4a3dc66f191d04adb5a7cef919090c0f8c795b39782496747ac8a1ab38c5fcdf6a7416b490919cc99be06e3c1781a5247b13c4e06321f76cbca698d9bf0778fff3d4b8ffbcb3b4ddaa691e1a797476327878197789be5bfc7a880106f2cf15052d3897faf407742132abf4a8226715b79c5ab4fdabab237bb0d7d8e0beea42dbc7a5f978aadb3945e1cc183bd1041f95d34fd", 0xf3}], 0x1, &(0x7f0000002300)=[{0xf8, 0x102, 0xb, "27c4030000009730a2a90377ec964056da1c8ba736b31e521c9e11b285d3dc9c5e31f02703f1c9e6a9fea4fe271c9c11b5468e6df3ecd0d3b8dd4c42f1a78c2b13978ab26d1e09e618cf286d0c1f8d7bda4c9ade1df00d4bb266ae8274250b4e20a2cfdaebbcbd79d13f1c9ae561e0a18237f74776cdd63aa3997f096d4801e326c0c6f253465b909c7bbf7a646f0238f0a36f6f799fbf603435401950c200ca6848816f0e60895447560bf8f5a87c87a388f31343117a20558225d4e705e0fa853f49173d3f06d30a86f2ac3e42b4129055724ac673bc33cd4267f09a2668cd7d2f4000004be453"}, {0xc8, 0x10c, 0x2, "d0aecb32d38f90d0b73a7638528e79ad6489db369a94ddfb8f9978d8cacfb74994bc39c15483c368fe7a04d2175558717e5a6c3abe90aa334ab9fafe01889a305b211e3f2c15be2b7dbbf2fbcc6d9aafd2a63ff9231bfc4b36cea49e6747961fbc0b90abad7153c54ef438cafa5746d22026c9fcba102489863f4c62bce807335797ff3a61fb003a0a679d5495851af17a1bba3f3e32839e517001d08e01e0fc9ad7045551be48ec6b6e163f3664c085aa1c8c37"}, {0x48, 0x108, 0x4, "f41e6b1e3047721adbf0f36493694cd99fcd06b9d84a4d28507bd2fbd1467bb9241303d75cd5815c54507b7e390e8eff5bde30bc78b8b47b"}, {0x1010, 0x113, 0x7, "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"}], 0x1218}}, {{&(0x7f0000000580)=@llc={0x1a, 0x8, 0xe, 0x3, 0x0, 0x7, @multicast}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001040)="8f06579d124d1edd0f7438094e969acd00f0b8ee7769d0aee08b2c1a5c9e78016eb7c398fdbd11cca4baf0aa059f46bd1614e3d053c4f48eb720b89915e8d97e8463a957f5c97b8d72d6353f4e7ef7e076eb21468900662dfdbc1f8ef066b219d68f30ae5ba32009802c927d8ede65a3128ab19d5e68df3703124d91c3b226841aec14677143f58d76532cb4290e4d33edb889f93f9e9f48cac534836652fb0a80faa8de9a609f30edd1ea125372928765a28fd303adc84350d7def28328ce0106fab60d20ea83374113a3f8ccbc02853f8660c51a82e8c459c6c12548a671e84d256cb85f956b693acbc9d9344fcb230f6e8884b5", 0xf5}, {&(0x7f0000000680)="131085e3dbd86e0cd97728fee36b90aacdd78f51a7b72fc338cdd222c576119522856ecd175d615801f5dd9744e02bd2ffc7cf0c72db9e9ed4711a1ac4db65f7526dcb1e7a30f0d8c33af431ed5349cefd8e423dfc160060e69a6166ccff6e1fbe564e0639caf0238be3e63306ee4ba63ffbac5798f88e0dea106ee9eb8aeb36a729f818af008ca98ac7f5bb57f60e6cfd32ec3a", 0x94}, {&(0x7f00000007c0)="69a0002fb676e8c3bd0ab4f93c7c43e640007e5cdaf90098fc004db4e063b441c8d776cf439c154adf8dc15f594015190e3eb0872d09e3b143223aec55c37f561e0f3ebeb5f19fff3ed11400"/94, 0x5e}, {&(0x7f0000001180)="b2ccbf20955ca4897db64c4154bbe8ec4e1457ef03407bcedb06e95f76b02ae4e96786fbf6d1bcffc7739550d91ddd699f93bf263761a20ca76cf41924898ebcd2c70a65de4a29997a2cf9c5554d3c200868edf9aa62e6a9757256318d8bd66edd59a5c9b2dbd8937a06fb702d3059925978699bd9ac6fee9eac950acecb2b503f5ab5095f879797a6d72d1eb3856dadb92d1c93584e44f79099208a0116be3396ee74c9645920e99c7e81a29bb1ba0415b98275c3fdef9d4c0f48f52449273e47f70565b0cb615f131f42698b2b59272f5bb297aaf208c7bf952f5dd17594d472f5f3f0a948da35d6a3", 0xea}], 0x4, &(0x7f0000000900)=[{0xc0, 0x11, 0x5, "78d55bead43ea40c1bc808ce16e57cc89f306fb26c2ec20b5ff701d1b518c022d19af3487ccfc4093252628b2dba5a16608769853ac11e37c67c163c796cbaa2c1417cb1bebcabf2939822d8dc63e66eba1467f276d49c560bf5a211a62975b524dd09335163679a5bfe17dd2503f8f8807776630e2004f4a61dbde4d1e40f795095e9bdbe092bed6b5efe325a45df4bb5abb5c079da218f20def77a6ea2757070152b3ad775c90802c0c9b2006e"}, {0xb8, 0x88, 0x8, "68006d7ec5701b89e3226951a46811c34f269b284f8c215f489e42eddf390575f93e0ec711d88c6aff3385395d2d6791507a9c27d012dae2e18afa89604b24be62d1013730ecbf493b1c710552915bbc324db483f6361f60d103b8421edb2cefb35ac3b525afde0bd68a40dd9b58b9ae420721fae964184dcb5b61e904d4c6d3762f854fc5e99580575d3836e502e5a2ecbfb992805f39e4211e1c75c756b0ab404878868d1e"}, {0x98, 0x111, 0x5, "08d7b5c3a602cefe33da294a870c4b54e96f5607e0667ec6d48761d6dabf4ae9de0da3b8dba3a10e40c42b3997dce7948dff1e246abbe8ebf321a0cee50368de61e7e95d58b8cb0eeb9c0ff08f25b2ea116baec25c6254d932c3273950a943dc83c1a63730a048af04e91dda7ed4c2a31dc7903602fcfc0ffdf4344cbbaa6555b553f31726996f"}, {0x90, 0x115, 0xfcbb, "1f56d1737bab848b770958555046ca9b8a0da9e5b99e14a0034b5fd2eccf2947f326bcade14bae6667026b36aa5f2965f1103d1ff5cdaa69c7b1e1dd9db9b9a4db6de00d618bbfbb79689a466b2275f80ec4ca57fa49fc923315740021aeb6e7f00db1b97d09f0b46b63cc7348168f6b09e7d789eea0c331ca8eff7e09a96a"}, {0xb8, 0x113, 0x399, "4cfb84c13b7ddf4d3d0c9c97f8f61065f44a1d249646634fbd76e9f642cf7a2dafd8fa87512aa2005a1417a3825973d404f98f87ce6defebf4cf6054f7bf0de92848d4c6555bd451a9273559549eeaf940a6781c3f1a9944eea7dce4a9c22d011bfaea7ce148b1bbb3b5ae27dd398533acce61b99c09df3a3b103918b6eb9dd51330979eafdca7a27b3dc9f2f91d7259c2cf0b3bb714f0cb4f0a427cb1c79a856d141fb66952"}], 0x358}}, {{&(0x7f0000000c80)=@xdp={0x2c, 0x2, 0x0, 0xb}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000d00)="b05130eed9721f97a660c80053c44abb61bf26a9100049fa6b969e3f34ec4a5c18d26c0c1a36e96e815021775392659b5f116bda6bbd914b372f58102aeaa49bd99e3d1b817dd7214704933a5d97b5187cd2c5aa900f1760a1c3f80f445248648d39ae844f5efb1c848f98aeee9c18457dd8c8d194e8e8493af99b93a63901edba336182c36430c7c9e571f9c62d332c4191adce071515697e6e6add1721907499126f552f3b907f2ac98b5d6bbe2dfc44206d0b232281bf76649ec8a0d4b7f6c44e29776a36ffce5b30ace5019f3f1dbc", 0xd1}, {&(0x7f0000000840)="8c7e13247ed2853f43999fb41655921c5aa943a5bc21174bd5d4a2e84d164ea1a64d893a3f8f04a5273acbf032496793af87300c679a6b7fe79fb835805097102fe38bc82e1198413577981d6e8166d7db4ba703", 0x54}, {&(0x7f0000000e00)="3d297e13c955791ccf075490c1a7108c29cb7a884af953a1141459b7f96f92d456b88ffe5bb7014c6edd54d5bb31886af5f3dec49aebb9570bb9045dabb97281f44dd81c83f7feef1c8f9a71bcc06ab433250e9aa39c033596f83e76f22c16b98819f1bfd50a5926332b8c6c2f80f95a3fe9f31899d47c613297e07f5a917035e8954154594a102efb9046fb32ed5d2d2472aebb4c962ec8cc67e919", 0x9c}, {&(0x7f0000000640)="82643eb537bea4cee60b3ab1d7b44ef0283440654d744ab5f223aa6f9c3bd9c1f390707703f3d9f2e9da36be9a3f8585a2d0aabc5f698c2337751e08", 0x3c}, {&(0x7f0000000740)="c54bb54aa9679649fe896581a9ab614f89af0d0a068747dad0ab1eb98b7ff2f6", 0x20}, {&(0x7f0000001280)="4c1c32833e8770777c4cfddeae5924884812002adf7a61e0c3be01eded679221be16f68475feb7bad4f2a3cdf905db4493af61aeade8f025e0fcec7c1bfa89beba3e9925591262670c03fec94158b1b6e197353456630b0a527809f20ce2e208c58aaafab407dea0538a89ad218427e473be8c98744874a7b003aeb4341334b8d69e0b946c9a27f242af40201e89807a3adea5e293f9957d598b6280c1860c1cc18af338245f005cb54f3253360acf299d3fa2f1f10550aa6f6b78a19ac0", 0xbe}, {&(0x7f0000000ec0)="73918e05f783fa38c0d81aaa449f0bb100ec9d0648471916c73dc50811e30e8ed7b9a48af92f5a979fc71997be8dec8a029f2ce47276f39c80780692fc6fb0ac4a2344fb5625389cccaffec57bd70e58ecd049d8d0a3cb21c0f1b9ffc5a5f95ceafa", 0x62}], 0x7, &(0x7f0000002300)}}], 0x4, 0x4004804) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) socket(0x2c, 0x3, 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r1, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x15) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r2, 0x4068aea3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000780)=[{&(0x7f0000000300)="e7", 0x1}], 0x1, 0x100, 0xf3) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sigaltstack(&(0x7f00000001c0)={&(0x7f00000000c0)=""/169, 0x3, 0xa9}, &(0x7f0000000340)={&(0x7f0000000240)=""/181, 0x0, 0xb5}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r5 = fsopen(&(0x7f0000000180)='9p\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x82) fchdir(r6) lchown(&(0x7f0000000000)='.\x00', 0xffffffffffffffff, 0xee01) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.101486689s ago: executing program 1 (id=2616): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000040)=0x2, 0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r4, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x20ef01a, 0x0, 0x0, 0xf, 0x1}}, 0x50) r5 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) shutdown(r5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8.033677842s ago: executing program 4 (id=2619): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206010200000000000000000000000014000780050014000700000008001240410500000900020073797a3200000000050001000700000011000300686173683a6e65742c6e657400000000050005000a000000050004"], 0x60}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r2, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x59327139ae2673af, 0x12, r1, 0x57789000) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x20040010) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) write$sndseq(r3, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x0, @time={0xf5}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time}], 0x70) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_mr_vif\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r6 = socket$alg(0x26, 0x5, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000080)={0x5, r2, 0x80000}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x64, r8, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x7, 0x80}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_SCAN_FREQUENCIES={0x24, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0xfb}, {0x8, 0x0, 0xffff03e1}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0x3}]}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x40}]}, 0x64}, 0x1, 0x0, 0x0, 0x48010}, 0x20000000) bind$alg(r6, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r9 = accept$alg(r6, 0x0, 0x0) write$binfmt_script(r9, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockname$packet(r5, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000740)=0x14) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000500)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000140)={@empty, @empty, @mcast1, 0x100001, 0x6, 0x0, 0x100, 0x10003, 0x180107, r12}) 7.999705529s ago: executing program 1 (id=2620): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xbf, 0x9}]}, 0x10) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000040)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 7.855119977s ago: executing program 1 (id=2623): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x191, 0x701802) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x60, 0x15, 0x80, 0x5, 0x16, 0x5, &(0x7f0000000040)="b5bdc567e2ab94daa36119007496fb61e96eedfd20af"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r3 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x12c43, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x8}, 0x2) mremap(&(0x7f00000c0000/0xa000)=nil, 0xa000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x191, 0x701802) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000640)=0x10) (async) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r2, 0x0) (async) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x60, 0x15, 0x80, 0x5, 0x16, 0x5, &(0x7f0000000040)="b5bdc567e2ab94daa36119007496fb61e96eedfd20af"}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) (async) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x12c43, 0x0) (async) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f0000000040)={0x1, 0x6}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x8}, 0x2) (async) mremap(&(0x7f00000c0000/0xa000)=nil, 0xa000, 0x2000, 0x3, &(0x7f00000b4000/0x2000)=nil) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) (async) 7.745603534s ago: executing program 1 (id=2625): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x44084) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a000000000000000080"], 0x26}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x808001, 0x0) 7.548528899s ago: executing program 4 (id=2626): r0 = socket$caif_stream(0x25, 0x1, 0x1) setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000000)=0x3, 0x4) close_range(r0, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x18, r4, 0xa17, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4800}, 0xc114) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfc, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x37}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xf8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) 7.548188376s ago: executing program 4 (id=2627): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x4004e502, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f0000000300)) chown(&(0x7f0000000080)='./file0\x00', r2, r3) (async) chown(&(0x7f0000000080)='./file0\x00', r2, r3) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) openat$ipvs(0xffffffffffffff9c, &(0x7f000000ac40)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) (async) openat$ipvs(0xffffffffffffff9c, &(0x7f000000ac40)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 7.545134241s ago: executing program 1 (id=2628): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) r3 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) r4 = socket(0x2c, 0x1, 0x1000) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0xe64, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000406d042fc500000000000109022400010000000109040000010300030009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000107"], 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x8001}, 0x0) inotify_init() r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0xfff) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r10, 0x0) r11 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r11, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r2, 0x2, &(0x7f0000000040)={0x3, 0x8000}, 0x0) 6.773788214s ago: executing program 4 (id=2634): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) (async) sendfile(r1, r0, 0x0, 0x7ffff000) (async) 6.69310135s ago: executing program 4 (id=2635): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_SET_TIME(r1, 0x40187013, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x9, 0x4f}) r2 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0xd1, 0x2, 0x7, 0x1, 0x2, 0x2, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x3, 0x6, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7f, 0x58, 0x4}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x110, 0x8, 0x0, 0xb3, 0x10, 0x10}, 0x73, &(0x7f0000000680)={0x5, 0xf, 0x73, 0x5, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0xff, 0xf000, 0x0, [0xc030, 0xff30, 0x0, 0xfffe80, 0xc000]}, @generic={0x25, 0x10, 0xa, "d7de71910b1051f62b5a66a50c3ee4ca7f5a7361d6379bca1e0f8db5b9f78647e772"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "b31a5fcea1fb23b289a9f5cb64ed4e3b"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0x7f, 0x81, 0xfb34, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0x9, 0x3}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x2401}}]}) syz_usb_control_io$printer(r2, &(0x7f0000000340)={0x14, &(0x7f0000000200)={0x40, 0x6, 0xcc, {0xcc, 0x6, "9445d7ddebe93c709212412f9cab344d036dae2d2a0db4586b7e3216ab089fdf0f7da1db5df03c944692b63c6c9ad18ceb4bf0b83469b8008ac69b4df946b62c279cf87a6346ab09956731b150f6596115becb3125e1f261d44e69169ccb24112537cea1b8cb528c2e0f71fddfc5c9dd33c6378dae867c3b7ecce8adc5bd5c4d1487f00e8466c3d92d4a4169285039c5daef570cd8400263b305f7b3c04548116fb31c3a61fb3451a3df74936bf387a83c75e7ef6b06feacfd81d48c215135d79785925fa47cdf3c559a"}}, &(0x7f0000000300)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}}, &(0x7f0000000600)={0x34, &(0x7f0000000380)={0x0, 0x12, 0xf9, "c9accb31a202ac9384cf005985af38b5afe1276b43718f62f96e10869ffca2108b54f710b49aa034e9d0133c0dce79b20ac11656c5ab8ac1772eb3e5ac24acbde9554d4950e005d7516be9c7e9f1cf27e7b063ef7b790e15830d164c802da452e4899144b39a98f8b6c7dded7669aa87c525f208c4a60f6acbe08ed24707427105ed34c0eca2b73357924ac3c50e3ebed5d331e9777a84f3843aaed172ea8b66336140ec6d7cecbd822a9d78b02adb743fb6c0a5a8ef4326229ebab17853139e0aae17d7a5177ad5c724d41a06ee9ed33f0d6209ee435e8f282a62b6af972040023e82c08bd9b5067bd460461d2d6286cec2e0f805b1bbc407"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000500)={0x20, 0x0, 0x56, {0x54, "34d09f58a9dc450aeed39c6bcb139c01731cc513439804a57801d777444d30c7b387dc9966af9d6a9634392726c5aa8a5d974e2beea83ec5c4f87221c1aae21a851fe62af373e946083754d545106bca803aff3f"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x0, 0x1}}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.490453182s ago: executing program 3 (id=2637): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYRESHEX=r2], 0x2c}}, 0x0) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 6.383291397s ago: executing program 3 (id=2638): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = socket(0x2c, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbe000) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sigaltstack(0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) 6.13391839s ago: executing program 3 (id=2639): prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) (async) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async, rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x8, @empty, 0x81, 0x3}, 0x20) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async, rerun: 32) mq_notify(r2, &(0x7f0000000200)={0x0, 0xd, 0x4, @thr={&(0x7f0000000080)="3d7474b5e4a63f8b7a39570cd6b1356955947018410bfe01c8c3180cc82e37d9c71b2ec27bb300c618cf8f981b6bd5ebd3a63e45ad7b55bffd21f69261376241d8d60c9aea31692399332afce5ebefe1bedb7d598b69833b9f9cd9", &(0x7f0000000100)="f4fd636911a7bfc4c718f02bdb1b1d2798d8f35d669ba5a78931401ee2501c212ac8b33cf91c5c13497439342eb5056263be77fc85e85eaceb29f6098cb1ddb145b98f6eb2fd9579ea6474024a3a55b661744d63de1d28a05859b03d03b9fafe8a67cdf1731696458cbed70b5e0c3ab879171a4d6d8694af72e6442b540f131eb1ff7043de89f52a4ab61abafd582f373311db188b259b9fa90823d912e126e10d20a423b828c4ba3f1b7a4f9385545aac7eb7bc7bcddeaf9f6ed122a88fa94813c306db2f879412373216b788486b46edeb94620741ebeca48a0655253a75224cf2c727447ebd2feae5c2571c86b14e99469db931cd"}}) (rerun: 32) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 6.128091354s ago: executing program 3 (id=2640): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'veth0_vlan\x00', @random="010000201000"}) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = fcntl$dupfd(r0, 0x406, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) flock(r3, 0x5) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 6.074136565s ago: executing program 3 (id=2641): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000700)=@getstat={0xe0, 0x15, 0x1, 0x70bd2a, 0x25dfdbfc, {{'ecb(cast5)\x00'}, '\x00', '\x00', 0x1400, 0x2600}}, 0xe0}, 0x1, 0x0, 0x0, 0x40}, 0x8800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000002060108000000000000000000000040050001000600000005000500020000000500040000000000090002006d0000000000000011000300686173683a69702c6d61726b00000000"], 0x4c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@uuid_off}]}) chdir(&(0x7f0000000140)='./bus\x00') r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r4 = fanotify_init(0xf00, 0x2) fanotify_mark(r4, 0x105, 0x8971, r3, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="81000000000000000000390000001c000d8018000280140005000d000c000500a90a01007dc500f00500"], 0x30}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x4, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}, @IPSET_ATTR_IP={0x0, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x0, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_CIDR={0x0, 0x3, 0x7}, @IPSET_ATTR_PROTO={0x0, 0x7, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x22052, r0, 0x2000) 5.961813779s ago: executing program 2 (id=2642): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) socket$packet(0x11, 0x2, 0x300) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) (async) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) (async) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYBLOB="8c027437c86aef5e269022a7bf65b41a63af5657b1edcc6a37bedcc989bbc3b40b5a3d2973d4e9880da625105caec6d71725323ca772d13544064b18ff3102efc2bf40e3203113e159085a57244412dd56626204bd4d396d5f41ba6550cfec8dd9b39ee1715b"], 0x14}}, 0x4001) (async) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="14000000", @ANYBLOB="8c027437c86aef5e269022a7bf65b41a63af5657b1edcc6a37bedcc989bbc3b40b5a3d2973d4e9880da625105caec6d71725323ca772d13544064b18ff3102efc2bf40e3203113e159085a57244412dd56626204bd4d396d5f41ba6550cfec8dd9b39ee1715b"], 0x14}}, 0x4001) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) (async) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) r6 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000200)={0x0, 0x33524742}) execve(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140), &(0x7f0000000480)={[&(0x7f0000000340)='\x00\x00\x00\x00\x00', &(0x7f0000000380)='/dev/rnullb0\x00', &(0x7f00000003c0)='/dev/rnullb0\x00', &(0x7f00000004c0)='@*[!,\x00', &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00']}) 5.948264072s ago: executing program 2 (id=2643): prlimit64(0x0, 0x9, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xc, 0x6}, &(0x7f0000000240)=0x90) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet(0x2, 0xa, 0x4) r2 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r2, 0xc04064aa, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x100000400040000) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x10, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="dc4fe336f20f00520066b80500000066b94d0000000f01c10f0016bf00f30f80348f0f92e6f30f96ffb8fb008ee00f0866b9800000c00f326635004000000f30", 0x40}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)={0x34, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x60, r9, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r10}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x42287dd7}}, {0x8, 0x6, r10}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000401}, 0x44084) io_setup(0x6, 0x0) 5.84186034s ago: executing program 2 (id=2644): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, 0x0, 0x0, 0x2, 0x4, 0x72, 0x1, 0x81}, &(0x7f00000001c0)=0x9c) ioprio_set$pid(0x2, 0xffffffffffffffff, 0x2000) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sendfile(r1, r1, 0x0, 0x7ffff000) 751.051722ms ago: executing program 1 (id=2645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x2000000000008b}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, 0x40}}, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000b7000040"]) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 393.196239ms ago: executing program 2 (id=2646): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_DEBUG_MODE={{0x8}, 0x5}}}, 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="500000000206030000000000000000000100ffff050001000700000005000400020000000c00078008001200000000000900020073797a30000000000c000300686173683a697000050005000a"], 0x50}, 0x1, 0x0, 0x0, 0x844}, 0x4040004) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x2010, r0, 0x2c39000) 389.27855ms ago: executing program 4 (id=2647): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'tunl0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000480), 0x81, 0x0) r6 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f0000000000)={0x0, [[0x5], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400], [0x4]], '\x00', [{}, {}, {0x0, 0xffffffff}], '\x00', 0x0, 0x0, 0x0, 0x2}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000040), 0x6) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f00000002c0)={@loopback, r4}, 0x14) write(r7, &(0x7f0000000080)="02ca568c87d5215b6caeb0b96186fe1d7c9fcfa92e7ecd4dd4edf0a3dde1ae23a6386b420f502b4253509467c4f3", 0x2e) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000004c0)=0x2) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000900)=0x8000) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000000000)=0x8000) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r10 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r10, &(0x7f0000000440)=""/49, 0x31) ioctl$SNDCTL_DSP_CHANNELS(r10, 0xc0045006, &(0x7f0000001c40)) ioctl$PPPIOCSMRU1(r5, 0x40047452, &(0x7f0000000280)=0x81) syz_usb_connect(0x5, 0x51, &(0x7f0000000000)=ANY=[@ANYRESHEX=r6], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) sendfile(r9, r0, 0x0, 0x2fe4) 170.404935ms ago: executing program 2 (id=2648): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x88c4) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f0000000080), 0x3, 0x4c4260) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f00000000c0)={0x0, "940eba4fb9c5c4f198f220c92e3ac5d5"}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f00000010c0)={r1, 0x8, 0x7, 0x1}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x22) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$BTRFS_IOC_DEFRAG_RANGE(r0, 0x40309410, &(0x7f00000014c0)={0xfffffffffffffff8, 0xe, 0x0, 0x6, 0x3, [0x400, 0x2, 0x6, 0xc]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000001500)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x15) fsconfig$FSCONFIG_SET_PATH(r3, 0x3, &(0x7f0000001540)='/dev/snd/controlC#\x00', &(0x7f0000001580)='./file0\x00', r3) fadvise64(r3, 0xfffffffffffffffa, 0xffffffffffffffff, 0x3) ioctl$IMHOLD_L1(r3, 0x80044948, &(0x7f00000015c0)=0x1) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000001600)) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, &(0x7f0000001640)={0x3, 0xf, 0xdea, 0x7, 0x7}) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000001680)={0xffffff35, 0x3, 0x4, 0x0, 0xf}) r4 = syz_open_dev$usbfs(&(0x7f00000016c0), 0x8b, 0x4000) ioctl$USBDEVFS_RELEASE_PORT(r4, 0x80045519, &(0x7f0000001700)=0x3) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r3, 0xc038943b, &(0x7f0000001780)={0x9, 0x30, '\x00', 0x0, &(0x7f0000001740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) bind$tipc(r3, &(0x7f00000017c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x2}}, 0x10) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(0xffffffffffffffff, 0x8008ae9d, &(0x7f0000001800)) ioctl$INOTIFY_IOC_SETNEXTWD(r3, 0x40044900, 0x261) r5 = syz_open_dev$radio(&(0x7f0000001840), 0x3, 0x2) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000001980)={0xa, @win={{0x2, 0x8, 0x3, 0x9}, 0x2, 0x9, &(0x7f0000001880)={{0x5, 0xfffffff7, 0x2, 0xfff}}, 0xdc, &(0x7f00000018c0)="1da7494167b51aeb32be69b02cf193b039a519d3f4fb84413ba36dbe0d5e5a8fcf0ad509fca5b61aa621e762709b516e4db9443eb6f73d801e79b7c19dc83e8377a2752ff45acfd9b9ebebc03e9d98bd5a4080827d9c7d4dbc0c87333ede059cbc82440638de18461124443e866409ab21b287d8ccbb164529a20dfafd8f37738f7e0b92d33dbca4eef992471526874664ffb74af0223dfeb70e44dc7e28f594134f5c7687", 0x81}}) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000001a80)) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000001b00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001ac0)={0xffffffffffffffff}, 0x106, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r3, &(0x7f0000001b40)={0x4, 0x8, 0xfa00, {r6, 0x7}}, 0x10) 166.669489ms ago: executing program 3 (id=2649): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) r4 = syz_io_uring_setup(0x1f85, &(0x7f0000000340)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000300)) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000040)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xfffffffffffffff9, 0x3a, 'F!\x14', 0x3a, '}', 0x3a, './file0'}, 0x2b) open$dir(&(0x7f0000000000)='./file0\x00', 0x40400, 0x4) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0x2, 0x3, 0x1, 0x3, 0x2c, {0x9, 0x21, 0x8a01, 0x7, 0x1, {0x22, 0x479}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x7, 0x81}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0x5, 0xd, 0x9}}]}}}]}}]}}, &(0x7f0000000680)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x13, 0x3, 0x6, 0xff, 0x6}, 0x32, &(0x7f0000000140)={0x5, 0xf, 0x32, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xfe, "2eebbd18c1e72a6992e6932a223b1977"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x22, 0xe, 0x5, 0x1, 0x6}, @wireless={0xb, 0x10, 0x1, 0xc, 0x12, 0xd, 0xf, 0xdd, 0x6}]}, 0x8, [{0x5e, &(0x7f00000001c0)=@string={0x5e, 0x3, "6fcfdc91a3682066d1841aee3a5ac4b741584df0bc304ec5c1aa9cd628715a8c1570993d8f4a1b5e0f85815fe80743a4dd6fe4da702bf956e13344b344cad9f02585a5a9a70ccdc27974e0061e9b14615423d8120454d73cb933ba3b"}}, {0x4a, &(0x7f0000000240)=@string={0x4a, 0x3, "f6bb8038a834d23beb4db1b2f463e7a803197bd5032c158a5297448f055a728239b61397ddf7d64c8a623e59ddc73665597b44e4c4dadabfacf0cf4ec228e48a807257a235ed99dd"}}, {0xf4, &(0x7f00000003c0)=@string={0xf4, 0x3, "3cc89f7b440c1737e1e46e6c24e13cef33f071dd7c8fed5607f0f1d0c9d2b7771fc15997b7abb094ba615e0fcab2ede3506cc05273c7b01d228c3ab5f9f750f265ec52ac6df70516f4c32cdd7310c1715b0dabba3292cfd9b0f7852954df5df1e3acb7ac71194e3fa2e9e5a28356521ab04a72a1be5a6262ab3b96adac9451ca5d069279a42d469974c2a1f2c6a1f40d9d24110c3c6530de7c6032e889a3998f50bd25956acba105ff76db1e2c3bf6b1b21331d4c8eabefedd6245f0199182a8c33fc46c67cfec1c83980dd9dcdcc6c38d341517cc5effaa04f5c41cd381f7f815a697f1b1f9a03da71ad9d94e8a3687fc10"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x62, &(0x7f00000004c0)=@string={0x62, 0x3, "616bad7a19526e1d4f2f92fbae427cd77cbe12e093d8fb4c37a9667be088a5134f50b702a3e05df8213a16fdbaad6e8f3cc314585914a7b716f3195be7ee8ec0f88726274ba6b5bb64e3cfbccd63b89228e30e0b27d37c1600dd984117fe4655"}}, {0xb8, &(0x7f0000000540)=@string={0xb8, 0x3, "f9d816ce6048807232b887047a4ae084848e4b4e45846be682ea093502120ee76bc4a3da4cbef953893e64c2e3e6e64d2f59705ea567c653ee986340c88535d448173d7d34ab4650d20d4b81442e00c08c01260e33c16cd1fbf50c6795bb69f36c7ec5841b0dc39e0de1c64203dc35d8af5eaaf719077b931d8e39c4e409686aa4f9f13d89f801e62908d0174cd1e93a2c3d9b59066eff218ebadf6c254ae8503421aab5d08b8201acc45e3d98a36c00100dee55f764"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x43e}}]}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0x8000b}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000180)=0xc00001, 0x4) bind$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0x10002, @loopback, 0xc}, 0x1c) listen(r7, 0x204) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_DEVICE_ATTR_vcpu(r3, 0x4018aee2, &(0x7f0000001280)=@attr_pmu_filter={0x0, 0x1, 0x1, 0x0}) 0s ago: executing program 2 (id=2650): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) r3 = inotify_init() r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r6}, 0xc) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0004000, @private=0xa010100, r6}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@multicast2, @multicast1, r2}, 0xc) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x28, 0x3, 0x8, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x4b9}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x20044804}, 0x48010) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) kernel console output (not intermixed with test programs): 367.447549][T12804] batadv_slave_1: entered promiscuous mode [ 367.519659][T12803] batadv_slave_1: left promiscuous mode [ 370.644696][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 371.122249][ T24] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 371.302195][ T24] usb 4-1: device descriptor read/64, error -71 [ 371.562297][ T24] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 371.702198][ T24] usb 4-1: device descriptor read/64, error -71 [ 371.825898][ T24] usb usb4-port1: attempt power cycle [ 372.248976][T12835] kvm: user requested TSC rate below hardware speed [ 372.462190][ T24] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 372.495873][ T24] usb 4-1: device descriptor read/8, error -71 [ 372.745905][ T24] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 372.773216][ T24] usb 4-1: device descriptor read/8, error -71 [ 372.903845][ T24] usb usb4-port1: unable to enumerate USB device [ 372.972236][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 373.122602][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 373.129441][ T44] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 373.141266][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 373.155266][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 373.166490][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 373.178089][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 373.191531][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 373.203547][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.317699][T12853] 9p: Could not find request transport: Ó\ºã [ 373.350753][T12857] /dev/rnullb0: Can't open blockdev [ 373.419699][ T44] usb 5-1: usb_control_msg returned -32 [ 373.426514][ T44] usbtmc 5-1:16.0: can't read capabilities [ 373.692329][ T6068] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 373.778674][T12862] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 373.788658][ T5901] usb 5-1: USB disconnect, device number 13 [ 373.790567][T12846] /dev/rnullb0: Can't open blockdev [ 373.844566][ T6068] usb 3-1: device descriptor read/64, error -71 [ 374.092200][ T6068] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 374.239803][T12873] /dev/rnullb0: Can't open blockdev [ 374.252563][ T6068] usb 3-1: device descriptor read/64, error -71 [ 374.366049][ T6068] usb usb3-port1: attempt power cycle [ 374.550045][T12889] pimreg: entered allmulticast mode [ 374.665353][T12891] /dev/rnullb0: Can't open blockdev [ 374.742987][ T6068] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 374.782745][ T6068] usb 3-1: device descriptor read/8, error -71 [ 374.855573][T12899] IPv6: NLM_F_CREATE should be specified when creating new route [ 374.879053][T12899] IPv6: NLM_F_REPLACE set, but no existing node found! [ 375.020110][T12907] syzkaller1: entered promiscuous mode [ 375.021857][T12909] Bluetooth: MGMT ver 1.23 [ 375.025946][ T6068] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 375.051331][T12907] syzkaller1: entered allmulticast mode [ 375.071916][T12907] /dev/rnullb0: Can't open blockdev [ 375.096172][ T6068] usb 3-1: device descriptor read/8, error -71 [ 375.158212][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 375.224397][ T6068] usb usb3-port1: unable to enumerate USB device [ 375.461572][T12928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2055'. [ 375.491643][T12928] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2055'. [ 375.524677][T12942] /dev/rnullb0: Can't open blockdev [ 375.553251][T12945] netlink: 'syz.1.2058': attribute type 1 has an invalid length. [ 375.578810][T12945] /dev/rnullb0: Can't open blockdev [ 375.643704][T12950] /dev/rnullb0: Can't open blockdev [ 375.923762][ T44] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 376.062267][ T44] usb 2-1: device descriptor read/64, error -71 [ 376.181039][T12977] /dev/rnullb0: Can't open blockdev [ 376.293373][T12987] syzkaller1: entered promiscuous mode [ 376.298998][T12987] syzkaller1: entered allmulticast mode [ 376.302272][ T44] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 376.442206][ T44] usb 2-1: device descriptor read/64, error -71 [ 376.554514][ T44] usb usb2-port1: attempt power cycle [ 376.602255][ T1172] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 376.752266][ T1172] usb 5-1: Using ep0 maxpacket: 8 [ 376.758858][ T1172] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 376.768160][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.781681][ T1172] usb 5-1: config 0 descriptor?? [ 376.872278][ T5900] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 376.892307][ T44] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 376.895299][T12997] /dev/rnullb0: Can't open blockdev [ 376.906241][T12997] kAFS: unable to lookup cell '/yz1' [ 376.914860][ T44] usb 2-1: device descriptor read/8, error -71 [ 376.926917][T12999] kAFS: unable to lookup cell '/yz1' [ 376.961797][T13002] No control pipe specified [ 377.002224][ T5900] usb 3-1: device descriptor read/64, error -71 [ 377.152286][ T44] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 377.196153][ T44] usb 2-1: device descriptor read/8, error -71 [ 377.252189][ T5900] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 377.314686][ T44] usb usb2-port1: unable to enumerate USB device [ 377.392198][ T5900] usb 3-1: device descriptor read/64, error -71 [ 377.512839][ T5900] usb usb3-port1: attempt power cycle [ 377.862252][ T5900] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 377.887231][ T5900] usb 3-1: device descriptor read/8, error -71 [ 377.955790][T13008] netlink: 'syz.3.2075': attribute type 11 has an invalid length. [ 378.056111][T13014] bpq0: entered allmulticast mode [ 378.142177][ T5900] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 378.172668][ T5900] usb 3-1: device descriptor read/8, error -71 [ 378.284120][ T5900] usb usb3-port1: unable to enumerate USB device [ 378.324303][ T6068] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 378.502169][ T6068] usb 4-1: Using ep0 maxpacket: 32 [ 378.507968][ T6068] usb 4-1: too many configurations: 192, using maximum allowed: 8 [ 378.527190][ T6068] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 240 [ 378.536122][ T6068] usb 4-1: can't read configurations, error -22 [ 378.688718][ T6068] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 378.852170][ T6068] usb 4-1: Using ep0 maxpacket: 32 [ 378.862521][ T6068] usb 4-1: too many configurations: 192, using maximum allowed: 8 [ 378.884264][ T6068] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 240 [ 378.893606][ T6068] usb 4-1: can't read configurations, error -22 [ 378.900257][ T6068] usb usb4-port1: attempt power cycle [ 379.072571][ T5921] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 379.236317][ T5921] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.246426][ T5921] usb 2-1: config 0 has no interface number 0 [ 379.252574][ T6068] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 379.264485][ T5921] usb 2-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 379.274117][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.285378][ T6068] usb 4-1: Using ep0 maxpacket: 32 [ 379.291046][ T6068] usb 4-1: too many configurations: 192, using maximum allowed: 8 [ 379.294979][ T5921] usb 2-1: config 0 descriptor?? [ 379.314825][ T6068] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 240 [ 379.323715][ T6068] usb 4-1: can't read configurations, error -22 [ 379.327236][ T5921] usb 2-1: selecting invalid altsetting 1 [ 379.337426][ T5921] dvb_ttusb_budget: ttusb_init_controller: error [ 379.345810][ T5921] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 379.443859][ T5921] DVB: Unable to find symbol cx22700_attach() [ 379.452445][ T6068] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 379.508180][ T5921] DVB: Unable to find symbol tda10046_attach() [ 379.523065][ T6068] usb 4-1: Using ep0 maxpacket: 32 [ 379.528780][ T6068] usb 4-1: too many configurations: 192, using maximum allowed: 8 [ 379.532618][ T1172] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 379.543376][ T6068] usb 4-1: invalid descriptor for config index 0: type = 0x2, length = 240 [ 379.562810][ T5921] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 379.592191][ T6068] usb 4-1: can't read configurations, error -22 [ 379.596919][ T1172] asix 5-1:0.0: probe with driver asix failed with error -71 [ 379.598838][ T6068] usb usb4-port1: unable to enumerate USB device [ 379.646273][ T1172] usb 5-1: USB disconnect, device number 14 [ 379.679006][ T5921] usb 2-1: USB disconnect, device number 85 [ 379.709215][T13024] /dev/rnullb0: Can't open blockdev [ 380.102612][ T1172] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 380.281153][ T1172] usb 5-1: device descriptor read/64, error -71 [ 380.509086][T13047] binder: BINDER_SET_CONTEXT_MGR already set [ 380.515507][T13047] binder: 13045:13047 ioctl 4018620d 200000000040 returned -16 [ 380.528322][T13046] overlayfs: failed to resolve './file1/file0': -2 [ 380.540494][ T1172] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 380.682758][ T1172] usb 5-1: device descriptor read/64, error -71 [ 380.823774][ T1172] usb usb5-port1: attempt power cycle [ 381.391127][T13063] netlink: zone id is out of range [ 381.420048][T13063] netlink: set zone limit has 4 unknown bytes [ 381.822932][ T9] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 382.004602][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 382.016751][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 382.034063][ T9] usb 3-1: too many configurations: 26, using maximum allowed: 8 [ 382.042400][ T1172] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 382.058176][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 382.073131][ T9] usb 3-1: can't read configurations, error -61 [ 382.073194][ T1172] usb 5-1: device descriptor read/8, error -71 [ 382.250011][T13074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2093'. [ 382.322314][ T1172] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 382.360666][ T1172] usb 5-1: device descriptor read/8, error -71 [ 382.482481][ T1172] usb usb5-port1: unable to enumerate USB device [ 382.764249][T13046] syz.1.2087 (13046): drop_caches: 1 [ 383.005001][T13081] netlink: 'syz.3.2096': attribute type 3 has an invalid length. [ 383.012951][T13081] netlink: 'syz.3.2096': attribute type 1 has an invalid length. [ 383.020757][T13081] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2096'. [ 383.030726][T13081] NCSI netlink: No device for ifindex 33022 [ 383.038440][T13081] /dev/rnullb0: Can't open blockdev [ 383.052387][ T9] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 383.117416][T13087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2097'. [ 383.127287][T13087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2097'. [ 383.136969][T13087] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2097'. [ 383.142779][ T1172] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 383.151290][T13088] No source specified [ 383.154475][T13087] No source specified [ 383.162754][T13088] /dev/rnullb0: Can't open blockdev [ 383.204045][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.217764][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 383.227660][ T9] usb 3-1: too many configurations: 26, using maximum allowed: 8 [ 383.237640][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 383.245299][ T9] usb 3-1: can't read configurations, error -61 [ 383.251796][ T9] usb usb3-port1: attempt power cycle [ 383.293620][ T1172] usb 2-1: device descriptor read/64, error -71 [ 383.532277][ T1172] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 383.592337][ T9] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 383.625809][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.637378][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 383.646472][ T9] usb 3-1: too many configurations: 26, using maximum allowed: 8 [ 383.662210][ T1172] usb 2-1: device descriptor read/64, error -71 [ 383.669228][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 383.678345][ T9] usb 3-1: can't read configurations, error -61 [ 383.772478][ T1172] usb usb2-port1: attempt power cycle [ 383.812215][ T9] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 383.844149][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 383.862845][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 383.870649][ T9] usb 3-1: too many configurations: 26, using maximum allowed: 8 [ 383.884618][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.893044][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.903513][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 383.913053][ T9] usb 3-1: can't read configurations, error -61 [ 383.919978][ T9] usb usb3-port1: unable to enumerate USB device [ 383.931673][T13100] sctp: [Deprecated]: syz.3.2100 (pid 13100) Use of int in maxseg socket option. [ 383.931673][T13100] Use struct sctp_assoc_value instead [ 384.112304][ T1172] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 384.132784][ T1172] usb 2-1: device descriptor read/8, error -71 [ 384.200139][T13104] rtc_cmos 00:00: Alarms can be up to one day in the future [ 384.208862][T13104] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 384.217502][T13104] UDF-fs: Scanning with blocksize 512 failed [ 384.224735][T13104] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 384.232309][ T5921] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 384.232690][T13104] UDF-fs: Scanning with blocksize 1024 failed [ 384.246327][T13104] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 384.253987][T13104] UDF-fs: Scanning with blocksize 2048 failed [ 384.260473][T13104] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 384.268281][T13104] UDF-fs: Scanning with blocksize 4096 failed [ 384.372405][ T1172] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 384.382192][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 384.388828][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 384.401653][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 384.401767][ T1172] usb 2-1: device descriptor read/8, error -71 [ 384.423653][ T5921] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 384.433264][ T5921] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 384.441467][ T5921] usb 4-1: Product: syz [ 384.447521][ T5921] usb 4-1: Manufacturer: syz [ 384.452495][ T5921] usb 4-1: SerialNumber: syz [ 384.460196][ T5921] usb 4-1: config 0 descriptor?? [ 384.487108][ T5921] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 384.515404][T13114] fuse: Unknown parameter '' [ 384.524528][ T1172] usb usb2-port1: unable to enumerate USB device [ 384.536268][T13114] overlayfs: missing 'lowerdir' [ 384.544695][T13115] overlayfs: missing 'lowerdir' [ 384.551361][ T30] audit: type=1326 audit(1756778902.549:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13113 comm="syz.4.2105" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f91bd58ebe9 code=0x0 [ 384.589124][T13117] Malformed UNC in devname [ 384.589124][T13117] [ 384.595923][T13117] CIFS: VFS: Malformed UNC in devname [ 384.636166][T13119] /dev/rnullb0: Can't open blockdev [ 384.672826][T13102] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 384.679914][T13102] /dev/rnullb0: Can't open blockdev [ 384.686377][ T59] usb 4-1: Failed to submit usb control message: -71 [ 384.686440][ T1172] usb 4-1: USB disconnect, device number 75 [ 384.693666][ T59] usb 4-1: unable to send the bmi data to the device: -71 [ 384.706695][ T59] usb 4-1: unable to get target info from device [ 384.713401][ T59] usb 4-1: could not get target info (-71) [ 384.719272][ T59] usb 4-1: could not probe fw (-71) [ 384.982304][ T9] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 385.152232][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 385.159018][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 385.169252][ T9] usb 3-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 385.182336][ T9] usb 3-1: config 1 interface 0 has no altsetting 0 [ 385.190600][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.40 [ 385.199840][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.207892][ T9] usb 3-1: Product: syz [ 385.212215][ T9] usb 3-1: Manufacturer: syz [ 385.216834][ T9] usb 3-1: SerialNumber: syz [ 385.600500][T13139] /dev/rnullb0: Can't open blockdev [ 385.922218][ T6068] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 385.954038][T13143] /dev/rnullb0: Can't open blockdev [ 386.123526][ T6068] usb 5-1: Using ep0 maxpacket: 8 [ 386.138124][ T6068] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 386.154461][ T6068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 386.177819][ T6068] usb 5-1: Product: syz [ 386.183075][ T6068] usb 5-1: Manufacturer: syz [ 386.190010][ T6068] usb 5-1: SerialNumber: syz [ 386.207590][ T6068] usb 5-1: config 0 descriptor?? [ 386.227311][ T6068] gspca_main: sq905-2.14.0 probing 2770:9120 [ 386.415481][T13155] /dev/rnullb0: Can't open blockdev [ 386.471603][ T6068] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 386.522199][ T6068] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 386.560272][ T6068] usb 5-1: USB disconnect, device number 19 [ 386.852427][ T5901] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 386.852449][ T1172] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 387.012494][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 387.031094][ T5901] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.043076][ T5901] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 387.044088][ T1172] usb 4-1: unable to get BOS descriptor or descriptor too short [ 387.061144][ T1172] usb 4-1: config 1 has an invalid interface number: 255 but max is 1 [ 387.072389][ T5901] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 387.073735][ T1172] usb 4-1: config 1 has no interface number 1 [ 387.086520][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.090633][ T1172] usb 4-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 387.109555][ T1172] usb 4-1: config 1 interface 0 has no altsetting 0 [ 387.110482][ T5901] usb 2-1: Product: syz [ 387.117637][ T1172] usb 4-1: config 1 interface 255 has no altsetting 0 [ 387.129695][ T1172] usb 4-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 387.130883][ T5901] usb 2-1: Manufacturer: syz [ 387.143724][ T1172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.152628][ T1172] usb 4-1: Product: syz [ 387.153210][ T5901] usb 2-1: SerialNumber: syz [ 387.156924][ T1172] usb 4-1: Manufacturer: syz [ 387.170931][ T1172] usb 4-1: SerialNumber: syz [ 387.212448][ T5921] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 387.362180][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 387.371142][ T5921] usb 5-1: config 0 has an invalid interface number: 21 but max is 0 [ 387.410954][ T5921] usb 5-1: config 0 has no interface number 0 [ 387.428960][ T5921] usb 5-1: config 0 interface 21 has no altsetting 0 [ 387.447887][ T5921] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=b4.00 [ 387.461217][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.488409][ T5921] usb 5-1: Product: syz [ 387.510395][ T1172] smsusb:smsusb_probe: board id=8, interface number 0 [ 387.520797][ T1172] smsusb:smsusb_probe: board id=8, interface number 255 [ 387.528214][ T5921] usb 5-1: Manufacturer: syz [ 387.535849][ T5921] usb 5-1: SerialNumber: syz [ 387.542637][ T1172] usb 4-1: USB disconnect, device number 76 [ 387.557533][ T5921] usb 5-1: config 0 descriptor?? [ 387.569487][ T5921] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 387.588145][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.610794][ T5921] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 387.632417][ T5921] usb 5-1: media controller created [ 387.660151][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.720256][ T5921] DVB: Unable to find symbol mt352_attach() [ 387.761275][ T5921] DVB: Unable to find symbol nxt6000_attach() [ 387.773739][T13183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.785655][T13183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.793854][ T5921] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 387.814211][ T5921] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 387.827695][ T5921] dvb-usb: schedule remote query interval to 1000 msecs. [ 387.834937][ T5921] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 387.851165][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 387.859103][ T9] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26 [ 387.859845][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 387.885963][ T5221] bcm5974 3-1:1.0: could not read from device [ 387.907852][ T5221] bcm5974 3-1:1.0: could not read from device [ 387.917826][ T9] usb 3-1: USB disconnect, device number 47 [ 387.930878][T13189] syzkaller1: entered promiscuous mode [ 387.952986][T13189] syzkaller1: entered allmulticast mode [ 388.019777][ T5901] usb 2-1: 0:2 : does not exist [ 388.036720][ T5901] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 388.066821][ T5901] usb 2-1: USB disconnect, device number 90 [ 388.100089][T13190] udevd[13190]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.261125][T13202] /dev/rnullb0: Can't open blockdev [ 388.554676][ T24] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 388.714738][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 388.975095][ T5921] dvb-usb: bulk message failed: -22 (7/0) [ 388.981125][ T5921] dvb-usb: error while querying for an remote control event. [ 388.989926][ T24] usb 3-1: config 2 has an invalid interface number: 170 but max is 1 [ 388.998199][ T24] usb 3-1: config 2 has an invalid interface number: 30 but max is 1 [ 389.014058][ T24] usb 3-1: config 2 has no interface number 0 [ 389.020201][ T24] usb 3-1: config 2 has no interface number 1 [ 389.030994][ T24] usb 3-1: config 2 interface 170 has no altsetting 0 [ 389.033469][ T5901] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 389.037881][ T24] usb 3-1: config 2 interface 30 has no altsetting 0 [ 389.053900][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=9941, bcdDevice=87.47 [ 389.063177][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.071201][ T24] usb 3-1: Product: syz [ 389.075451][ T24] usb 3-1: Manufacturer: syz [ 389.080066][ T24] usb 3-1: SerialNumber: syz [ 389.192240][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 389.202902][ T5901] usb 2-1: config 0 has an invalid interface number: 171 but max is -1 [ 389.211342][ T5901] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 389.219540][ T5901] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.231123][ T5901] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 0 [ 389.242035][ T5901] usb 2-1: config 0 has no interface number 1 [ 389.250788][ T5901] usb 2-1: config 0 interface 171 has no altsetting 0 [ 389.267196][ T5901] usb 2-1: New USB device found, idVendor=04de, idProduct=1414, bcdDevice=c5.b9 [ 389.283342][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.291604][ T5901] usb 2-1: Product: syz [ 389.296194][ T5901] usb 2-1: Manufacturer: syz [ 389.300833][ T5901] usb 2-1: SerialNumber: syz [ 389.316399][ T5901] usb 2-1: config 0 descriptor?? [ 389.496613][ T24] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in warm state. [ 389.506854][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.516899][ T24] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 389.525556][ T24] usb 3-1: media controller created [ 389.541840][T13209] netlink: 'syz.1.2136': attribute type 1 has an invalid length. [ 389.545821][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.555668][T13209] netlink: 'syz.1.2136': attribute type 2 has an invalid length. [ 389.567978][T13209] /dev/rnullb0: Can't open blockdev [ 389.593333][ T5901] usb 2-1: USB disconnect, device number 91 [ 389.705529][T13207] netlink: 'syz.2.2135': attribute type 1 has an invalid length. [ 389.715243][T13207] netlink: 'syz.2.2135': attribute type 2 has an invalid length. [ 389.728044][T13207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.741103][T13224] binder_alloc: binder_alloc_mmap_handler: 13223 200000ffd000-200001000000 already mapped failed -16 [ 389.765516][T13207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.872606][ T24] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 389.881324][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.893513][ T24] dvbdev: DVB: registering new adapter (Hauppauge Nova-T 500 Dual DVB-T) [ 389.907172][ T24] usb 3-1: media controller created [ 389.926988][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.964241][ T24] dvb-usb: no frontend was attached by 'Hauppauge Nova-T 500 Dual DVB-T' [ 389.978569][ T1172] usb 5-1: USB disconnect, device number 20 [ 390.096490][ T1172] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 390.120544][ T24] rc_core: IR keymap rc-dib0700-rc5 not found [ 390.142599][ T24] Registered IR keymap rc-empty [ 390.179475][ T24] dvb-usb: could not initialize remote control. [ 390.209260][ T24] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully initialized and connected. [ 390.256697][ T24] dvb-usb: found a 'Hauppauge Nova-T 500 Dual DVB-T' in cold state, will try to load a firmware [ 390.359316][ T24] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 390.388572][ T24] dib0700: firmware download failed at 7 with -22 [ 390.426631][ T24] usb 3-1: USB disconnect, device number 48 [ 390.598875][ T24] dvb-usb: Hauppauge Nova-T 500 Dual DVB-T successfully deinitialized and disconnected. [ 391.246169][T13249] /dev/rnullb0: Can't open blockdev [ 391.602334][ T5901] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 391.753317][ T5901] usb 2-1: device descriptor read/64, error -71 [ 391.782242][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 391.942534][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 391.949280][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 391.964184][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 391.977804][ T10] usb 5-1: can't read configurations, error -61 [ 392.002216][ T5901] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 392.113869][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 392.142338][ T5901] usb 2-1: device descriptor read/64, error -71 [ 392.252653][ T5901] usb usb2-port1: attempt power cycle [ 392.272912][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 392.292726][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 392.321572][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 392.331711][ T10] usb 5-1: can't read configurations, error -61 [ 392.339784][ T10] usb usb5-port1: attempt power cycle [ 392.521390][T13271] /dev/rnullb0: Can't open blockdev [ 392.602659][ T5901] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 392.628460][T13279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2157'. [ 392.638281][ T5901] usb 2-1: device descriptor read/8, error -71 [ 392.682259][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 392.701796][T13281] /dev/rnullb0: Can't open blockdev [ 392.712686][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 392.718316][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 392.733385][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 392.741008][ T10] usb 5-1: can't read configurations, error -61 [ 392.756194][T13286] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2159'. [ 392.770383][T13285] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2159'. [ 392.780419][T13286] ./cgroup: Can't lookup blockdev [ 392.883475][ T5901] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 392.892228][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 392.906528][T13289] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2160'. [ 392.917756][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 392.925129][ T5901] usb 2-1: device descriptor read/8, error -71 [ 392.931583][ T10] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 392.947105][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 392.954892][ T10] usb 5-1: can't read configurations, error -61 [ 392.972546][ T10] usb usb5-port1: unable to enumerate USB device [ 393.042405][ T5901] usb usb2-port1: unable to enumerate USB device [ 393.296445][T13301] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 393.548840][T13325] /dev/rnullb0: Can't open blockdev [ 393.692656][ T10] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 393.775701][T13330] netlink: 'syz.3.2172': attribute type 3 has an invalid length. [ 393.785944][T13330] netlink: 'syz.3.2172': attribute type 1 has an invalid length. [ 393.794201][T13330] netlink: 216 bytes leftover after parsing attributes in process `syz.3.2172'. [ 393.845394][ T10] usb 2-1: New USB device found, idVendor=0545, idProduct=800d, bcdDevice= 3.0a [ 393.859058][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.870489][ T10] usb 2-1: config 0 descriptor?? [ 393.886943][ T10] gspca_main: xirlink-cit-2.14.0 probing 0545:800d [ 393.896147][ T10] input: xirlink-cit as /devices/platform/dummy_hcd.1/usb2/2-1/input/input28 [ 394.093544][T13318] syzkaller1: entered promiscuous mode [ 394.099085][T13318] syzkaller1: entered allmulticast mode [ 394.699950][T13361] /dev/rnullb0: Can't open blockdev [ 394.852292][T13364] /dev/rnullb0: Can't open blockdev [ 395.302197][ T5908] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 395.362746][ T5901] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 395.455620][ T5908] usb 5-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 395.478612][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.496970][ T5908] usb 5-1: Product: syz [ 395.501188][ T5908] usb 5-1: Manufacturer: syz [ 395.522778][ T5908] usb 5-1: SerialNumber: syz [ 395.529127][ T5908] usb 5-1: config 0 descriptor?? [ 395.532708][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 395.547586][ T5908] usb 5-1: selecting invalid altsetting 3 [ 395.549410][ T5901] usb 4-1: config 166 has an invalid interface number: 177 but max is 1 [ 395.562076][ T5908] comedi comedi4: could not set alternate setting 3 in high speed [ 395.563409][ T5901] usb 4-1: config 166 has an invalid interface number: 34 but max is 1 [ 395.571254][ T5901] usb 4-1: config 166 has no interface number 0 [ 395.593197][ T5908] usbdux 5-1:0.0: driver 'usbdux' failed to auto-configure device. [ 395.604200][ T5908] usbdux 5-1:0.0: probe with driver usbdux failed with error -22 [ 395.609534][ T5901] usb 4-1: config 166 has no interface number 1 [ 395.621691][ T5901] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 395.633518][ T5901] usb 4-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 395.644997][ T5901] usb 4-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 395.656960][ T5901] usb 4-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 395.673455][ T5901] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 395.685547][ T5901] usb 4-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 395.697916][ T5901] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 395.709913][ T5901] usb 4-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 395.720990][ T5901] usb 4-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 395.734444][ T5901] usb 4-1: config 166 interface 177 has no altsetting 0 [ 395.741503][ T5901] usb 4-1: config 166 interface 34 has no altsetting 0 [ 395.750613][ T5901] usb 4-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 395.757190][T13366] /dev/rnullb0: Can't open blockdev [ 395.760169][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.768519][ T1172] usb 5-1: USB disconnect, device number 25 [ 395.782679][ T5901] usb 4-1: Product: syz [ 395.792161][ T5901] usb 4-1: Manufacturer: syz [ 395.796797][ T5901] usb 4-1: SerialNumber: syz [ 395.922339][ T10] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 396.020621][T13368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.037180][T13368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.062060][ T5901] ums-realtek 4-1:166.177: USB Mass Storage device detected [ 396.094686][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 396.117833][ T5901] ums-realtek 4-1:166.34: USB Mass Storage device detected [ 396.191443][ T5901] ums-realtek 4-1:166.34: probe with driver ums-realtek failed with error -5 [ 396.204879][ T5901] usb 4-1: Found UVC 0.00 device syz (0bda:0138) [ 396.211383][ T5901] usb 4-1: No valid video chain found. [ 396.223728][ T5901] usb 4-1: USB disconnect, device number 77 [ 396.242224][ T10] usb 3-1: new low-speed USB device number 50 using dummy_hcd [ 396.616797][ T1172] usb 2-1: USB disconnect, device number 96 [ 396.649332][T13378] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 396.680072][T13378] SQUASHFS error: Failed to read block 0x0: -5 [ 396.710300][T13378] unable to read squashfs_super_block [ 396.924072][T13388] overlayfs: missing 'lowerdir' [ 396.990904][T13390] ceph: Path missing in source [ 396.998337][ T51] Bluetooth: hci3: ISO packet too small [ 397.009276][T13392] ceph: Path missing in source [ 397.215268][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 397.245865][ T10] usb usb3-port1: attempt power cycle [ 397.321308][T13405] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2191'. [ 397.335542][T13405] nbd: must specify at least one socket [ 397.589741][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2194'. [ 397.602567][ T10] usb 3-1: new low-speed USB device number 51 using dummy_hcd [ 397.622207][ T1172] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 397.634511][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 397.775668][ T10] usb 3-1: new low-speed USB device number 52 using dummy_hcd [ 397.805015][ T1172] usb 4-1: device descriptor read/64, error -71 [ 397.823865][ T10] usb 3-1: Invalid ep0 maxpacket: 32 [ 397.829750][ T10] usb usb3-port1: unable to enumerate USB device [ 398.054228][ T1172] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 398.212533][ T1172] usb 4-1: device descriptor read/64, error -71 [ 398.344477][ T1172] usb usb4-port1: attempt power cycle [ 398.435174][T13426] CIFS mount error: No usable UNC path provided in device string! [ 398.435174][T13426] [ 398.457272][T13426] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 398.594913][T13430] ieee802154 phy0 wpan0: encryption failed: -22 [ 398.712201][ T1172] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 398.762526][ T1172] usb 4-1: device descriptor read/8, error -71 [ 398.836149][T13438] /dev/rnullb0: Can't open blockdev [ 398.857592][T13439] /dev/rnullb0: Can't open blockdev [ 398.936272][T13442] /dev/rnullb0: Can't open blockdev [ 399.016269][ T1172] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 399.044830][ T1172] usb 4-1: device descriptor read/8, error -71 [ 399.110502][T13447] binder: 13446:13447 ioctl 4068aea3 200000000240 returned -22 [ 399.154067][ T1172] usb usb4-port1: unable to enumerate USB device [ 399.786942][T13463] /dev/rnullb0: Can't open blockdev [ 400.553987][T13474] /dev/rnullb0: Can't open blockdev [ 400.785057][T13485] /dev/rnullb0: Can't open blockdev [ 400.835491][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 400.922402][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 400.956961][T13493] /dev/rnullb0: Can't open blockdev [ 400.964047][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 401.062475][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 401.071904][T13486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 401.425553][T13511] delete_channel: no stack [ 401.435848][T13511] delete_channel: no stack [ 401.447833][T13512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2225'. [ 401.582933][T13512] /dev/rnullb0: Can't open blockdev [ 401.962543][ T10] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 402.167884][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.211793][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.250638][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 402.285027][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 402.317088][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.347815][ T10] usb 3-1: config 0 descriptor?? [ 402.620504][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 402.633687][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 402.676112][ T10] usb 3-1: USB disconnect, device number 53 [ 402.882454][ T5901] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 402.959544][T13537] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.053641][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 403.065943][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 403.078740][T13539] /dev/rnullb0: Can't open blockdev [ 403.159571][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 403.187321][ T5901] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 403.236083][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.245240][ T5901] usb 5-1: Product: syz [ 403.249540][ T5901] usb 5-1: Manufacturer: syz [ 403.255210][ T5901] usb 5-1: SerialNumber: syz [ 403.269612][ T5901] usb 5-1: config 0 descriptor?? [ 403.278942][ T5901] iguanair 5-1:0.0: probe with driver iguanair failed with error -12 [ 403.435062][T13552] overlay: ./file0 is not a directory [ 403.480969][T13525] /dev/rnullb0: Can't open blockdev [ 403.488346][ T1172] usb 5-1: USB disconnect, device number 26 [ 403.820266][T13561] /dev/rnullb0: Can't open blockdev [ 404.062455][ T5901] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 404.130729][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2246'. [ 404.264812][ T5901] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 404.288199][ T5901] usb 3-1: config 0 interface 0 has no altsetting 0 [ 404.304905][ T5901] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 404.324965][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 404.335294][ T5901] usb 3-1: Product: syz [ 404.339507][ T5901] usb 3-1: Manufacturer: syz [ 404.346499][ T5901] usb 3-1: SerialNumber: syz [ 404.354835][ T5901] usb 3-1: config 0 descriptor?? [ 404.364916][ T5901] usb 3-1: selecting invalid altsetting 0 [ 404.482546][T13187] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 404.538232][ T5908] hid-generic 0008:000A:0C19.0012: unknown main item tag 0x0 [ 404.545768][ T5908] hid-generic 0008:000A:0C19.0012: item fetching failed at offset 26/102 [ 404.558481][ T5908] hid-generic 0008:000A:0C19.0012: probe with driver hid-generic failed with error -22 [ 404.593021][ T5908] usb 3-1: USB disconnect, device number 54 [ 404.653867][T13187] usb 5-1: Using ep0 maxpacket: 8 [ 404.655457][T13584] binder: BINDER_SET_CONTEXT_MGR already set [ 404.661067][T13187] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 404.667270][T13584] binder: 13582:13584 ioctl 4018620d 2000000002c0 returned -16 [ 404.675337][T13187] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 404.714651][T13584] binder: 13582:13584 ioctl c1007c01 200000000600 returned -22 [ 404.720042][T13187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 404.726842][T13584] binder: 13582:13584 unknown command 64 [ 404.738146][T13584] binder: 13582:13584 ioctl c0306201 200000000100 returned -22 [ 404.740188][T13586] /dev/rnullb0: Can't open blockdev [ 404.748035][ T30] audit: type=1326 audit(1756778922.749:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13582 comm="syz.3.2253" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd67698ebe9 code=0x0 [ 404.773747][T13187] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 404.773777][T13187] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 404.773819][T13187] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 404.773848][T13187] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.024771][T13187] usb 5-1: GET_CAPABILITIES returned 0 [ 405.030630][T13187] usbtmc 5-1:16.0: can't read capabilities [ 405.169098][T13592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2256'. [ 405.296853][T13187] usb 5-1: USB disconnect, device number 27 [ 405.307980][T13572] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 405.370547][T13598] /dev/rnullb0: Can't open blockdev [ 405.417114][T13600] /dev/rnullb0: Can't open blockdev [ 405.457339][T13604] /dev/rnullb0: Can't open blockdev [ 405.527474][T13572] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 405.922495][T13187] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 406.095337][T13187] usb 2-1: Using ep0 maxpacket: 8 [ 406.102797][T13187] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 406.114437][T13187] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 406.123567][T13187] usb 2-1: config 1 has no interface number 1 [ 406.130260][T13187] usb 2-1: too many endpoints for config 1 interface 2 altsetting 2: 59, using maximum allowed: 30 [ 406.142552][T13187] usb 2-1: config 1 interface 2 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 59 [ 406.156627][T13187] usb 2-1: config 1 interface 2 has no altsetting 0 [ 406.165408][T13187] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 406.174662][ T5901] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 406.183614][T13187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.191887][T13187] usb 2-1: Product: 궣욜着筨龮â«à¢‹æŠµëµ‘෿桓솮౭쌑㲹훙í†çš¤è¶£ï³¿ä˜…洙믺áîšà¢²æ±äŽáŽã›ºäŒ·ãœ£Åºæ¥ì“‡î¿¾ã«µãŒŸå˜´Ù¬ã­“㤞櫓熟䌵궆î§ëƒ£ä‰¸é¢†á¼ èˆºãŸªä²ˆè®°éµ›îŽà¾°ê¶–í¡éœ±î´¨æª˜è¸¼î¤’悒렖㼦蛑顚妺ⅆ歓烌嵪隑ëˆéŒ€ê‹äš¾í’¶è¤± [ 406.217833][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.230305][T13633] openvswitch: netlink: EtherType 50a is less than min 600 [ 406.237994][T13187] usb 2-1: Manufacturer: Ñ [ 406.242981][T13187] usb 2-1: SerialNumber: П [ 406.281198][T13636] /dev/rnullb0: Can't open blockdev [ 406.382206][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 406.388267][ T5862] Bluetooth: hci1: unexpected event 0x0f length: 0 < 4 [ 406.390435][ T5901] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 406.397844][T13642] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 406.415145][T13642] /dev/rnullb0: Can't open blockdev [ 406.415657][ T5901] usb 4-1: config 0 has no interface number 0 [ 406.436363][ T5901] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 406.449501][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.459300][T13618] netlink: 'syz.1.2264': attribute type 1 has an invalid length. [ 406.468890][ T5901] usb 4-1: Product: syz [ 406.492252][ T5901] usb 4-1: Manufacturer: syz [ 406.496941][ T5901] usb 4-1: SerialNumber: syz [ 406.525665][ T5901] usb 4-1: config 0 descriptor?? [ 406.539012][ T5901] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 406.740843][T13627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.762532][T13627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.167853][T13627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.190423][T13627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.208358][T13627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.229433][T13627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.260412][T13627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.343068][T13627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.360851][T13627] /dev/rnullb0: Can't open blockdev [ 407.368623][ T5901] gspca_spca1528: reg_w err -71 [ 407.402883][ T5901] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 407.427102][ T5901] usb 4-1: USB disconnect, device number 82 [ 408.432209][ T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 408.443041][ T5862] Bluetooth: hci1: command 0x1003 tx timeout [ 408.449116][ T51] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 408.508333][T13670] ./cgroup: Can't lookup blockdev [ 408.550507][T13672] veth1_to_bridge: entered allmulticast mode [ 408.556923][T13672] veth1_to_bridge: left allmulticast mode [ 408.602344][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 408.619384][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.666607][ T9] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 408.678796][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.691420][ T9] usb 3-1: config 0 descriptor?? [ 408.779223][T13187] usb 2-1: USB disconnect, device number 97 [ 408.780477][T13674] netlink: 288 bytes leftover after parsing attributes in process `syz.4.2281'. [ 408.815115][T13190] udevd[13190]: setting mode of /dev/bus/usb/002/097 to 020664 failed: No such file or directory [ 408.839699][T13190] udevd[13190]: setting owner of /dev/bus/usb/002/097 to uid=0, gid=0 failed: No such file or directory [ 408.870329][T13190] udevd[13190]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.948455][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 408.978353][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 408.995584][T13689] /dev/rnullb0: Can't open blockdev [ 409.006919][ T9] usb 3-1: USB disconnect, device number 55 [ 409.062586][T13692] rdma_rxe: rxe_newlink: failed to add wlan1 [ 409.138583][T13701] fuse: Unknown parameter 'fd0x0000000000000004' [ 409.462761][ T9] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 409.635644][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.647424][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 409.656959][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.666767][T13187] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 409.680989][ T9] usb 3-1: config 0 descriptor?? [ 409.806192][T13187] usb 2-1: device descriptor read/64, error -71 [ 410.040041][T13716] (syz.3.2292,13716,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 410.061819][T13716] (syz.3.2292,13716,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 410.070089][T13187] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 410.084840][T13721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2292'. [ 410.095248][T13716] (syz.3.2292,13716,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 410.106218][T13716] (syz.3.2292,13716,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 410.106938][ T9] hid (null): report_id 0 is invalid [ 410.130407][ T9] logitech-djreceiver 0003:046D:C71F.0013: report_id 0 is invalid [ 410.140850][ T9] logitech-djreceiver 0003:046D:C71F.0013: item 0 0 1 8 parsing failed [ 410.150314][ T9] logitech-djreceiver 0003:046D:C71F.0013: logi_dj_probe: parse failed [ 410.160524][ T9] logitech-djreceiver 0003:046D:C71F.0013: probe with driver logitech-djreceiver failed with error -22 [ 410.203624][T13187] usb 2-1: device descriptor read/64, error -71 [ 410.305633][T13731] /dev/rnullb0: Can't open blockdev [ 410.316945][T13187] usb usb2-port1: attempt power cycle [ 410.328721][T13731] /dev/rnullb0: Can't open blockdev [ 410.335004][ T9] usb 3-1: USB disconnect, device number 56 [ 410.348094][T13731] /dev/rnullb0: Can't open blockdev [ 410.354501][T13731] /dev/rnullb0: Can't open blockdev [ 410.360418][T13731] /dev/rnullb0: Can't open blockdev [ 410.369213][T13731] /dev/rnullb0: Can't open blockdev [ 410.379054][T13731] /dev/rnullb0: Can't open blockdev [ 410.385325][T13731] /dev/rnullb0: Can't open blockdev [ 410.391350][T13731] /dev/rnullb0: Can't open blockdev [ 410.402366][T13731] /dev/rnullb0: Can't open blockdev [ 410.408256][T13731] /dev/rnullb0: Can't open blockdev [ 410.416645][T13731] /dev/rnullb0: Can't open blockdev [ 410.423088][T13731] /dev/rnullb0: Can't open blockdev [ 410.430290][T13731] /dev/rnullb0: Can't open blockdev [ 410.437969][T13731] /dev/rnullb0: Can't open blockdev [ 410.445372][T13731] /dev/rnullb0: Can't open blockdev [ 410.451418][T13731] /dev/rnullb0: Can't open blockdev [ 410.459388][T13731] /dev/rnullb0: Can't open blockdev [ 410.465765][T13731] /dev/rnullb0: Can't open blockdev [ 410.471796][T13731] /dev/rnullb0: Can't open blockdev [ 410.479552][T13731] /dev/rnullb0: Can't open blockdev [ 410.486068][T13731] /dev/rnullb0: Can't open blockdev [ 410.491983][T13731] /dev/rnullb0: Can't open blockdev [ 410.499758][T13731] /dev/rnullb0: Can't open blockdev [ 410.509285][T13731] /dev/rnullb0: Can't open blockdev [ 410.517213][T13731] /dev/rnullb0: Can't open blockdev [ 410.523753][T13731] /dev/rnullb0: Can't open blockdev [ 410.531510][T13731] /dev/rnullb0: Can't open blockdev [ 410.539213][T13731] /dev/rnullb0: Can't open blockdev [ 410.545552][T13731] /dev/rnullb0: Can't open blockdev [ 410.554719][T13731] /dev/rnullb0: Can't open blockdev [ 410.560655][T13731] /dev/rnullb0: Can't open blockdev [ 410.567579][T13731] /dev/rnullb0: Can't open blockdev [ 410.575073][T13731] /dev/rnullb0: Can't open blockdev [ 410.581114][T13731] /dev/rnullb0: Can't open blockdev [ 410.589013][T13731] /dev/rnullb0: Can't open blockdev [ 410.596759][T13731] /dev/rnullb0: Can't open blockdev [ 410.603038][T13731] /dev/rnullb0: Can't open blockdev [ 410.609098][T13731] /dev/rnullb0: Can't open blockdev [ 410.619922][T13731] /dev/rnullb0: Can't open blockdev [ 410.626467][T13731] /dev/rnullb0: Can't open blockdev [ 410.635294][T13731] /dev/rnullb0: Can't open blockdev [ 410.641193][T13731] /dev/rnullb0: Can't open blockdev [ 410.647823][T13731] /dev/rnullb0: Can't open blockdev [ 410.655491][T13731] /dev/rnullb0: Can't open blockdev [ 410.661487][T13731] /dev/rnullb0: Can't open blockdev [ 410.667781][T13731] /dev/rnullb0: Can't open blockdev [ 410.675953][T13731] /dev/rnullb0: Can't open blockdev [ 410.681849][T13731] /dev/rnullb0: Can't open blockdev [ 410.687291][T13187] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 410.697810][T13731] /dev/rnullb0: Can't open blockdev [ 410.703936][T13731] /dev/rnullb0: Can't open blockdev [ 410.709929][T13731] /dev/rnullb0: Can't open blockdev [ 410.717594][T13187] usb 2-1: device descriptor read/8, error -71 [ 410.727520][T13731] /dev/rnullb0: Can't open blockdev [ 410.736291][T13731] /dev/rnullb0: Can't open blockdev [ 410.742488][T13731] /dev/rnullb0: Can't open blockdev [ 410.748408][T13731] /dev/rnullb0: Can't open blockdev [ 410.756101][T13731] /dev/rnullb0: Can't open blockdev [ 410.761994][T13731] /dev/rnullb0: Can't open blockdev [ 410.768318][T13731] /dev/rnullb0: Can't open blockdev [ 410.775994][T13731] /dev/rnullb0: Can't open blockdev [ 410.781896][T13731] /dev/rnullb0: Can't open blockdev [ 410.788449][T13731] /dev/rnullb0: Can't open blockdev [ 410.796719][T13731] /dev/rnullb0: Can't open blockdev [ 410.802836][T13731] /dev/rnullb0: Can't open blockdev [ 410.869111][ T51] Bluetooth: hci3: unexpected event for opcode 0x0413 [ 410.973179][T13187] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 411.003258][T13187] usb 2-1: device descriptor read/8, error -71 [ 411.114388][T13187] usb usb2-port1: unable to enumerate USB device [ 411.142274][ T9] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 411.172325][ T1172] usb 4-1: new full-speed USB device number 83 using dummy_hcd [ 411.326085][ T1172] usb 4-1: config 9 has an invalid descriptor of length 146, skipping remainder of the config [ 411.344304][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 411.352366][ T1172] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 411.352411][ T1172] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 411.352434][ T1172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.380013][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 411.388713][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 411.401914][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.416480][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.425637][ T9] usb 3-1: Product: syz [ 411.429842][ T9] usb 3-1: Manufacturer: syz [ 411.436112][ T9] usb 3-1: SerialNumber: syz [ 411.658489][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 411.668062][ T1172] usb 4-1: string descriptor 0 read error: -71 [ 411.684831][ T1172] usb 4-1: USB disconnect, device number 83 [ 411.701132][ T9] usb 3-1: USB disconnect, device number 57 [ 411.724706][T13190] udevd[13190]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 412.028766][T13757] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 412.197577][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 412.269582][T13765] /dev/rnullb0: Can't open blockdev [ 412.310567][T13767] /dev/rnullb0: Can't open blockdev [ 412.453362][T13187] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 412.622302][T13187] usb 4-1: Using ep0 maxpacket: 16 [ 412.631646][T13187] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 412.640070][T13187] usb 4-1: config 0 has no interface number 0 [ 412.646299][T13187] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.657501][T13187] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.668344][T13187] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 412.678189][T13187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.689620][T13187] usb 4-1: config 0 descriptor?? [ 412.873444][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2312'. [ 412.883061][T13776] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2312'. [ 412.895936][T13776] /dev/rnullb0: Can't open blockdev [ 412.965419][T13781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.973385][T13781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.981507][T13781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.990941][T13781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.310126][T13760] /dev/rnullb0: Can't open blockdev [ 413.318358][T13187] usbhid 4-1:0.1: can't add hid device: -71 [ 413.337588][T13187] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 413.358641][T13187] usb 4-1: USB disconnect, device number 84 [ 413.555199][ T10] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 413.736685][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 413.747048][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 413.756493][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 413.776139][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.798029][ T10] usb 2-1: config 0 descriptor?? [ 413.888844][T13804] /dev/rnullb0: Can't open blockdev [ 413.913335][T13805] /dev/rnullb0: Can't open blockdev [ 414.273200][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 414.462212][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 414.471338][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 414.480630][ T10] usb 3-1: config 82 has an invalid interface number: 96 but max is 0 [ 414.490256][ T10] usb 3-1: config 82 has no interface number 0 [ 414.499141][ T10] usb 3-1: config 82 interface 96 altsetting 225 has an endpoint descriptor with address 0x11, changing to 0x1 [ 414.527130][ T10] usb 3-1: config 82 interface 96 altsetting 225 endpoint 0x1 has invalid wMaxPacketSize 0 [ 414.538214][ T10] usb 3-1: config 82 interface 96 has no altsetting 0 [ 414.547514][ T10] usb 3-1: New USB device found, idVendor=16ab, idProduct=7802, bcdDevice=ce.24 [ 414.558690][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.567107][ T10] usb 3-1: Product: syz [ 414.571689][ T10] usb 3-1: Manufacturer: syz [ 414.576862][ T10] usb 3-1: SerialNumber: syz [ 414.919233][T13834] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2331'. [ 414.930206][T13835] /dev/rnullb0: Can't open blockdev [ 414.936860][T13834] /dev/rnullb0: Can't open blockdev [ 414.959178][ T10] usb 3-1: Could not find all expected endpoints [ 414.981061][ T10] usb 3-1: USB disconnect, device number 58 [ 415.215311][T13845] /dev/rnullb0: Can't open blockdev [ 415.422314][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 415.612267][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 415.621565][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 415.630347][ T10] usb 5-1: config 59 has an invalid interface number: 141 but max is 0 [ 415.639919][ T10] usb 5-1: config 59 has no interface number 0 [ 415.646665][ T10] usb 5-1: config 59 interface 141 altsetting 6 endpoint 0xC has an invalid bInterval 160, changing to 11 [ 415.660361][ T10] usb 5-1: config 59 interface 141 has no altsetting 0 [ 415.669031][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.72 [ 415.679381][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.687488][ T10] usb 5-1: Product: syz [ 415.691759][ T10] usb 5-1: Manufacturer: syz [ 415.697361][ T10] usb 5-1: SerialNumber: syz [ 415.732259][ T24] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 415.882201][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 415.889649][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 415.898650][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.40 [ 415.911474][T13843] /dev/rnullb0: Can't open blockdev [ 415.922161][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.927204][ T10] usbtest 5-1:59.141: couldn't get endpoints, -71 [ 415.930188][ T24] usb 3-1: Product: syz [ 415.930206][ T24] usb 3-1: Manufacturer: syz [ 415.930221][ T24] usb 3-1: SerialNumber: syz [ 415.960151][ T10] usbtest 5-1:59.141: probe with driver usbtest failed with error -71 [ 415.973586][ T10] usb 5-1: USB disconnect, device number 28 [ 416.153211][T13855] /dev/rnullb0: Can't open blockdev [ 416.175112][ T24] usbhid 3-1:1.0: can't add hid device: -71 [ 416.181300][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 416.192947][ T24] usb 3-1: USB disconnect, device number 59 [ 416.317294][ T5908] usb 2-1: USB disconnect, device number 102 [ 417.498065][T13886] /dev/rnullb0: Can't open blockdev [ 417.534438][T13886] /dev/rnullb0: Can't open blockdev [ 418.162491][ T5908] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 418.355059][ T5908] usb 2-1: config 0 has an invalid interface number: 23 but max is 0 [ 418.363399][ T5908] usb 2-1: config 0 has no interface number 0 [ 418.369525][ T5908] usb 2-1: config 0 interface 23 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 418.452180][ T5908] usb 2-1: config 0 interface 23 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 418.481853][ T5908] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 418.500618][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.527468][ T5908] usb 2-1: Product: syz [ 418.535502][ T5908] usb 2-1: Manufacturer: syz [ 418.540153][ T5908] usb 2-1: SerialNumber: syz [ 418.547020][ T5908] usb 2-1: config 0 descriptor?? [ 418.553682][T13902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 418.561078][T13902] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 418.571689][ T5908] ums-usbat 2-1:0.23: USB Mass Storage device detected [ 418.603450][T13927] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2355'. [ 418.630170][T13929] mkiss: ax0: crc mode is auto. [ 418.641176][T13927] /dev/rnullb0: Can't open blockdev [ 418.648095][T13928] tmpfs: Unknown parameter 'noprefix' [ 418.648668][T13931] /dev/rnullb0: Can't open blockdev [ 418.705886][T13934] /dev/rnullb0: Can't open blockdev [ 418.713011][T13933] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 418.763830][ T5921] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 418.859619][ T5908] ums-usbat 2-1:0.23: probe with driver ums-usbat failed with error -5 [ 418.880762][ T5908] usb 2-1: USB disconnect, device number 103 [ 418.932876][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 418.946356][ T5921] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 418.959176][T13948] /dev/rnullb0: Can't open blockdev [ 418.962471][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.975242][ T5921] usb 5-1: config 0 has no interface number 0 [ 418.981371][ T5921] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 418.993248][ T5921] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.012388][ T5921] usb 5-1: config 0 interface 52 has no altsetting 0 [ 419.020475][ T5921] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 419.032359][ T5921] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 419.044255][ T5921] usb 5-1: Manufacturer: syz [ 419.059121][ T5921] usb 5-1: config 0 descriptor?? [ 419.269797][ T5921] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input31 [ 419.292354][ T1172] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 419.464656][ T1172] usb 3-1: Using ep0 maxpacket: 8 [ 419.482663][ T1172] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 419.492582][ T1172] usb 3-1: config 179 has no interface number 0 [ 419.511743][ T1172] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 419.542209][ T1172] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 419.559573][T13963] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2366'. [ 419.578983][ T1172] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 419.611442][ T1172] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 419.644325][ T1172] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 419.672220][ T1172] usb 3-1: config 179 interface 65 has no altsetting 0 [ 419.679246][ T1172] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 419.702341][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.750553][ T1172] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input32 [ 419.797707][ T9] usb 5-1: USB disconnect, device number 29 [ 419.797855][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 419.927101][T13953] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 420.004061][ T1172] usb 3-1: USB disconnect, device number 60 [ 420.010064][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 420.412171][ T9] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 420.592225][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 420.615899][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 420.655551][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.668849][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 420.781145][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 420.790557][ T9] pvrusb2: ********** [ 420.795966][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 420.806851][ T9] pvrusb2: Important functionality might not be entirely working. [ 420.816195][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 420.827850][ T9] pvrusb2: ********** [ 420.857169][ T10] usb 3-1: config 6 has an invalid interface number: 255 but max is 0 [ 420.866505][ T10] usb 3-1: config 6 has no interface number 0 [ 420.876975][ T10] usb 3-1: config 6 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1023 [ 420.890988][ T10] usb 3-1: New USB device found, idVendor=0586, idProduct=0102, bcdDevice=37.5a [ 420.901644][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.910127][ T10] usb 3-1: Product: syz [ 420.916469][ T10] usb 3-1: Manufacturer: syz [ 420.921157][ T10] usb 3-1: SerialNumber: syz [ 420.933243][T13985] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 420.945984][ T10] HFC-S_USB 3-1:6.255: probe with driver HFC-S_USB failed with error -5 [ 420.980236][ T2344] pvrusb2: Invalid write control endpoint [ 421.042500][ T2344] pvrusb2: Invalid write control endpoint [ 421.050773][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 421.062337][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 421.069909][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 421.084909][ T2344] pvrusb2: Device being rendered inoperable [ 421.090984][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 421.099829][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 421.113299][ T2344] pvrusb2: Attached sub-driver cx25840 [ 421.118876][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 421.130105][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 421.179939][T13976] pvrusb2: Attempted to execute control transfer when device not ok [ 421.189712][T13976] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2369'. [ 421.616170][T13997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.626125][T13997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.651657][ T9] usb 4-1: USB disconnect, device number 85 [ 423.302804][ T9] usb 3-1: USB disconnect, device number 61 [ 445.334971][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.341339][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 447.780841][T14005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.814190][T14006] /dev/rnullb0: Can't open blockdev [ 448.043450][ T9] usb 2-1: new full-speed USB device number 104 using dummy_hcd [ 448.114436][T14032] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2380'. [ 448.152728][T14034] overlay: filesystem on ./bus not supported as upperdir [ 448.211772][T14030] block nbd3: Attempted send on invalid socket [ 448.227897][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 448.240289][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 448.251810][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 448.261926][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 448.274799][T14030] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 448.302426][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 448.316462][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 448.324956][ T9] usb 2-1: Manufacturer: syz [ 448.338353][ T9] usb 2-1: config 0 descriptor?? [ 448.685902][ T9] rc_core: IR keymap rc-hauppauge not found [ 448.712202][ T9] Registered IR keymap rc-empty [ 448.717428][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.763223][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.803127][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 448.856765][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input33 [ 448.926259][T14063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2387'. [ 448.946224][T14063] netlink: 'syz.2.2387': attribute type 1 has an invalid length. [ 448.960934][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 448.985200][T14063] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2387'. [ 449.032250][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.074119][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.154364][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.186099][T14068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.196500][T14068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.219226][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.263196][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.322248][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.342195][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.362202][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.412308][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 449.444232][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 449.473190][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 449.510679][ T9] usb 2-1: USB disconnect, device number 104 [ 449.922159][ T9] usb 2-1: new full-speed USB device number 105 using dummy_hcd [ 450.033177][ T10] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 450.052262][ T9] usb 2-1: device descriptor read/64, error -71 [ 450.112215][ T5901] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 450.172249][ T10] usb 5-1: device descriptor read/64, error -71 [ 450.262167][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 450.269921][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 36096, setting to 64 [ 450.283163][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 450.300921][ T5901] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 450.310301][ T9] usb 2-1: new full-speed USB device number 106 using dummy_hcd [ 450.319408][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.328404][ T5901] usb 4-1: Product: syz [ 450.334701][ T5901] usb 4-1: Manufacturer: syz [ 450.339445][ T5901] usb 4-1: SerialNumber: syz [ 450.346421][ T5901] usb 4-1: config 0 descriptor?? [ 450.355224][ T5901] usb 4-1: no audio or video endpoints found [ 450.389484][T14102] /dev/rnullb0: Can't open blockdev [ 450.396986][T14102] /dev/rnullb0: Can't open blockdev [ 450.422251][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 450.462257][ T9] usb 2-1: device descriptor read/64, error -71 [ 450.496158][T14108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.511184][T14108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.563080][T14092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.575350][ T10] usb 5-1: device descriptor read/64, error -71 [ 450.582426][T14092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.582652][ T9] usb usb2-port1: attempt power cycle [ 450.596951][ T5921] usb 4-1: USB disconnect, device number 86 [ 450.727387][ T10] usb usb5-port1: attempt power cycle [ 450.732543][ T1172] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 450.872217][ T1172] usb 3-1: device descriptor read/64, error -71 [ 451.072168][ T9] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 451.081007][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 451.103522][ T9] usb 2-1: device descriptor read/8, error -71 [ 451.109936][ T10] usb 5-1: device descriptor read/8, error -71 [ 451.121449][ T1172] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 451.303518][ T1172] usb 3-1: device descriptor read/64, error -71 [ 451.363550][ T9] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 451.400620][ T9] usb 2-1: device descriptor read/8, error -71 [ 451.473211][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 451.502222][ T1172] usb usb3-port1: attempt power cycle [ 451.518141][ T10] usb 5-1: device descriptor read/8, error -71 [ 451.524935][ T9] usb usb2-port1: unable to enumerate USB device [ 451.656436][ T10] usb usb5-port1: unable to enumerate USB device [ 451.862260][ T1172] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 451.885057][ T1172] usb 3-1: device descriptor read/8, error -71 [ 452.122185][ T1172] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 452.142631][ T1172] usb 3-1: device descriptor read/8, error -71 [ 452.273398][ T1172] usb usb3-port1: unable to enumerate USB device [ 452.520235][T14117] netlink: 'syz.1.2402': attribute type 3 has an invalid length. [ 452.756783][T14121] netlink: 'syz.1.2403': attribute type 27 has an invalid length. [ 453.102451][T14128] support for the xor transformation has been removed. [ 453.116491][T14128] /dev/rnullb0: Can't open blockdev [ 453.173735][T14133] /dev/rnullb0: Can't open blockdev [ 453.180746][T14133] /dev/rnullb0: Can't open blockdev [ 453.622210][ T9] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 453.805288][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 453.815528][ T9] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 453.825810][ T9] usb 2-1: config 0 has no interface number 0 [ 453.831950][ T9] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 453.925924][ T5901] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 454.012113][ T9] usb 2-1: config 0 interface 85 has no altsetting 0 [ 454.024791][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 454.036192][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.128580][T14154] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 454.142650][T14154] /dev/rnullb0: Can't open blockdev [ 454.156974][ T9] usb 2-1: Product: syz [ 454.161235][ T9] usb 2-1: Manufacturer: syz [ 454.166833][ T9] usb 2-1: SerialNumber: syz [ 454.187905][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 454.193271][ T9] usb 2-1: config 0 descriptor?? [ 454.201342][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.212654][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.232375][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 454.264007][ T5901] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 454.422615][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.433351][ T5901] usb 3-1: config 0 descriptor?? [ 454.573359][T14158] /dev/rnullb0: Can't open blockdev [ 454.823493][ T9] appletouch 2-1:0.85: Geyser mode initialized. [ 454.835964][ T9] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input34 [ 454.843404][T14148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.861858][T14148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.881392][T14148] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2412'. [ 454.907151][ T5901] microsoft 0003:045E:07DA.0014: unknown main item tag 0x2 [ 454.925823][ T5901] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 454.941378][ T5901] microsoft 0003:045E:07DA.0014: unknown main item tag 0x2 [ 454.961828][ T5901] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0 [ 454.978535][ T5901] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 455.008159][ T5901] microsoft 0003:045E:07DA.0014: no inputs found [ 455.016139][ T5901] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway [ 455.041414][T14138] /dev/rnullb0: Can't open blockdev [ 455.047884][ T1172] usb 2-1: USB disconnect, device number 109 [ 455.063084][ T1172] appletouch 2-1:0.85: input: appletouch disconnected [ 455.187806][ T5901] usb 3-1: USB disconnect, device number 66 [ 455.867540][T14178] /dev/rnullb0: Can't open blockdev [ 455.883480][T14180] /dev/rnullb0: Can't open blockdev [ 456.162273][ T5921] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 456.314573][ T5921] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 456.326434][ T5921] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 456.352214][ T5921] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 456.384111][ T5921] usb 2-1: config 220 has no interface number 2 [ 456.390536][ T5921] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 456.438377][ T5921] usb 2-1: config 220 interface 0 has no altsetting 0 [ 456.445978][ T5921] usb 2-1: config 220 interface 76 has no altsetting 0 [ 456.455329][ T5921] usb 2-1: config 220 interface 1 has no altsetting 0 [ 456.464892][ T5921] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 456.474502][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.482596][ T5921] usb 2-1: Product: syz [ 456.487275][ T5921] usb 2-1: Manufacturer: syz [ 456.491945][ T5921] usb 2-1: SerialNumber: syz [ 456.672408][ T1172] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 456.762382][ T5908] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 456.802242][ T1172] usb 5-1: device descriptor read/64, error -71 [ 456.862248][ T24] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 456.914498][ T5908] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 456.923829][ T5908] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 456.932926][ T5908] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 456.943307][ T5908] usb 3-1: config 8 has no interface number 0 [ 456.949425][ T5908] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 456.960534][ T5908] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.975432][ T5908] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 456.984768][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.993098][ T5908] usb 3-1: Product: syz [ 456.997284][ T5908] usb 3-1: Manufacturer: syz [ 457.001928][ T5908] usb 3-1: SerialNumber: syz [ 457.006659][ T24] usb 4-1: device descriptor read/64, error -71 [ 457.052235][ T1172] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 457.182187][ T1172] usb 5-1: device descriptor read/64, error -71 [ 457.218590][T14195] syz_tun: entered allmulticast mode [ 457.243899][T14194] syz_tun: left allmulticast mode [ 457.256407][ T24] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 457.266393][ T5908] usb 3-1: USB disconnect, device number 67 [ 457.295771][ T1172] usb usb5-port1: attempt power cycle [ 457.402494][ T24] usb 4-1: device descriptor read/64, error -71 [ 457.522643][ T24] usb usb4-port1: attempt power cycle [ 457.642242][ T1172] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 457.645777][T14215] netlink: 'syz.1.2435': attribute type 1 has an invalid length. [ 457.658890][T14215] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2435'. [ 457.664717][ T1172] usb 5-1: device descriptor read/8, error -71 [ 457.674393][T14215] netlink: 'syz.1.2435': attribute type 1 has an invalid length. [ 457.674411][T14215] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2435'. [ 457.872360][ T24] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 457.902743][ T24] usb 4-1: device descriptor read/8, error -71 [ 457.932249][ T1172] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 457.953077][ T1172] usb 5-1: device descriptor read/8, error -71 [ 458.047745][T14229] /dev/rnullb0: Can't open blockdev [ 458.062487][ T1172] usb usb5-port1: unable to enumerate USB device [ 458.080144][T14234] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2441'. [ 458.092185][T14234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.107278][T14234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.113102][T14236] /dev/rnullb0: Can't open blockdev [ 458.152419][ T24] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 458.161779][T14239] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 458.170020][T14239] /dev/rnullb0: Can't open blockdev [ 458.176596][ T24] usb 4-1: device descriptor read/8, error -71 [ 458.182361][T14240] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 458.189056][T14242] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 458.292489][ T24] usb usb4-port1: unable to enumerate USB device [ 458.815647][T14244] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 458.822954][T14244] /dev/rnullb0: Can't open blockdev [ 459.029942][T14254] /dev/rnullb0: Can't open blockdev [ 459.352271][ T5901] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 459.534533][ T5901] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 459.553290][ T5901] usb 3-1: config 0 has no interface number 0 [ 459.567729][ T5901] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 459.592145][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.610449][ T5901] usb 3-1: Product: syz [ 459.620611][ T5901] usb 3-1: Manufacturer: syz [ 459.626447][ T5901] usb 3-1: SerialNumber: syz [ 459.646118][ T5901] usb 3-1: config 0 descriptor?? [ 459.828829][T14266] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 459.840947][T14266] overlayfs: missing 'lowerdir' [ 459.892246][ T5900] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 460.054164][ T5900] usb 5-1: config 54 has an invalid interface number: 54 but max is 0 [ 460.075663][ T5900] usb 5-1: config 54 has no interface number 0 [ 460.107298][ T5900] usb 5-1: New USB device found, idVendor=093b, idProduct=a102, bcdDevice= 0.01 [ 460.123451][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.150557][ T5900] usb 5-1: Product: syz [ 460.159262][ T5900] usb 5-1: Manufacturer: syz [ 460.168506][ T5900] usb 5-1: SerialNumber: syz [ 460.327725][T14256] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2447'. [ 460.360277][T14256] netlink: 'syz.2.2447': attribute type 3 has an invalid length. [ 460.368217][T14256] netlink: 'syz.2.2447': attribute type 1 has an invalid length. [ 460.372225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 460.376140][T14256] netlink: 220 bytes leftover after parsing attributes in process `syz.2.2447'. [ 460.402286][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 460.522670][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 460.531316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 460.539931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 460.548568][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 460.558689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 460.568803][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 460.577379][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 460.586012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 460.626321][T14272] /dev/rnullb0: Can't open blockdev [ 460.663382][ T5901] usb 3-1: Firmware version (0.0) predates our first public release. [ 460.671534][ T5901] usb 3-1: Please update to version 0.2 or newer [ 460.778800][ T5901] usb 3-1: USB disconnect, device number 68 [ 460.987417][T14281] /dev/rnullb0: Can't open blockdev [ 461.091048][T14287] /dev/rnullb0: Can't open blockdev [ 461.574302][ T5921] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 461.580891][ T5921] usb 2-1: No valid video chain found. [ 461.593780][ T5921] usb 2-1: selecting invalid altsetting 0 [ 461.618233][ T5921] usb 2-1: selecting invalid altsetting 0 [ 461.631772][ T5921] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 462.630310][ T5900] go7007 5-1:54.54: probe with driver go7007 failed with error -12 [ 462.652784][ T5900] usb 5-1: USB disconnect, device number 38 [ 462.812828][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.821521][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.904519][T14311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.933813][T14311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.107507][T14333] /dev/rnullb0: Can't open blockdev [ 463.114858][T14333] /dev/rnullb0: Can't open blockdev [ 463.158329][T14341] /dev/rnullb0: Can't open blockdev [ 463.281162][T14350] /dev/rnullb0: Can't open blockdev [ 463.522242][ T1172] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 463.562199][ T5921] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 463.656524][T14363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 463.677038][ T1172] usb 3-1: config 0 has an invalid interface number: 3 but max is 2 [ 463.685556][ T1172] usb 3-1: config 0 has an invalid interface number: 176 but max is 2 [ 463.694139][ T1172] usb 3-1: config 0 has no interface number 1 [ 463.705814][ T1172] usb 3-1: config 0 has no interface number 2 [ 463.711976][ T1172] usb 3-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 463.721729][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 463.727517][ T1172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.737596][ T5921] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 463.747578][ T5921] usb 5-1: config 0 has no interface number 0 [ 463.754527][ T1172] usb 3-1: config 0 descriptor?? [ 463.764787][ T5921] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 463.782133][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.792973][ T5921] usb 5-1: Product: syz [ 463.797204][ T5921] usb 5-1: Manufacturer: syz [ 463.801907][ T5921] usb 5-1: SerialNumber: syz [ 463.825005][ T5921] usb 5-1: config 0 descriptor?? [ 463.890387][T14366] netlink: 'syz.1.2483': attribute type 19 has an invalid length. [ 463.899097][T14366] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2483'. [ 463.964561][T14352] /dev/rnullb0: Can't open blockdev [ 463.971080][ T1172] usb 3-1: Could not set interface, error -71 [ 464.008102][ T1172] usb 3-1: USB disconnect, device number 69 [ 464.035404][T14354] /dev/rnullb0: Can't open blockdev [ 464.046668][ T5921] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.106991][ T5921] usb 5-1: USB disconnect, device number 39 [ 464.138592][T14273] udevd[14273]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.521736][T14382] netlink: 'syz.2.2488': attribute type 33 has an invalid length. [ 464.530771][T14382] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2488'. [ 465.521521][T14395] /dev/rnullb0: Can't open blockdev [ 465.588328][T14391] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2491'. [ 465.667534][T14393] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2491'. [ 465.949462][T14405] netlink: 'syz.4.2495': attribute type 7 has an invalid length. [ 465.958690][T14405] /dev/rnullb0: Can't open blockdev [ 466.074763][T14413] /dev/rnullb0: Can't open blockdev [ 466.087800][T14413] /dev/rnullb0: Can't open blockdev [ 466.097631][T14411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2497'. [ 467.086156][T14438] /dev/rnullb0: Can't open blockdev [ 467.168702][T14442] binder: Binderfs stats mode cannot be changed during a remount [ 467.222270][ T5921] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 467.307748][T14454] sp0: Synchronizing with TNC [ 467.374796][ T5921] usb 3-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e [ 467.384211][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.402529][ T5921] pwc: Logitech/Cisco VT Camera webcam detected. [ 467.409947][T14464] /dev/rnullb0: Can't open blockdev [ 467.601631][T14436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.611090][T14436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.632184][ T1172] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 467.783058][ T1172] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 467.791972][ T1172] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.803158][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.817018][ T1172] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.828476][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.842371][ T1172] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.853348][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.867628][ T1172] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.879635][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.894366][ T1172] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.905281][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.919255][ T1172] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.930165][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.944032][ T1172] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.954967][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.971349][ T1172] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 467.982728][ T1172] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 467.998345][ T1172] usb 5-1: New USB device found, idVendor=1758, idProduct=7fc5, bcdDevice=5f.27 [ 468.007618][ T1172] usb 5-1: New USB device strings: Mfr=56, Product=136, SerialNumber=234 [ 468.016167][ T1172] usb 5-1: Product: syz [ 468.020375][ T1172] usb 5-1: Manufacturer: syz [ 468.025146][ T1172] usb 5-1: SerialNumber: syz [ 468.031461][ T1172] usb 5-1: config 0 descriptor?? [ 468.312315][ T30] audit: type=1326 audit(1756778986.309:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14477 comm="syz.3.2516" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd67698ebe9 code=0x0 [ 468.420923][T14455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.457673][ T1172] usbhid 5-1:0.0: can't add hid device: -71 [ 468.466435][ T1172] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 468.480364][ T1172] usb 5-1: USB disconnect, device number 40 [ 468.622402][ T5900] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 468.799499][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.812409][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.822681][ T5900] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 468.831750][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.842447][ T5900] usb 4-1: config 0 descriptor?? [ 469.251251][ T5900] usbhid 4-1:0.0: can't add hid device: -32 [ 469.277125][ T5900] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 469.311778][ T1172] usb 4-1: USB disconnect, device number 91 [ 469.591243][ T5900] usb 2-1: USB disconnect, device number 110 [ 469.928105][T14157] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 469.936748][T14157] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 469.947496][T14157] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 469.957134][T14157] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 469.966442][T14157] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.001717][ T5921] pwc: Failed to set LED on/off time (-71) [ 470.049986][ T5921] pwc: send_video_command error -71 [ 470.074930][ T5921] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 470.099639][ T5921] Philips webcam 3-1:127.0: probe with driver Philips webcam failed with error -71 [ 470.129113][T14510] /dev/rnullb0: Can't open blockdev [ 470.151578][ T5921] usb 3-1: USB disconnect, device number 70 [ 470.222955][T14500] wlan1 speed is unknown, defaulting to 1000 [ 470.392497][T14500] lo speed is unknown, defaulting to 1000 [ 470.492139][ T5921] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 470.607436][ T6669] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.650369][ T6669] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.661989][ T5921] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 470.676294][ T5921] usb 3-1: config 0 has no interface number 0 [ 470.681079][T14500] chnl_net:caif_netlink_parms(): no params data found [ 470.683826][ T5921] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 470.700816][ T5921] usb 3-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 470.718693][ T5921] usb 3-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 470.732116][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.748742][ T5921] usb 3-1: Product: syz [ 470.753238][ T5921] usb 3-1: Manufacturer: syz [ 470.758506][ T5921] usb 3-1: SerialNumber: syz [ 470.769679][ T5921] usb 3-1: config 0 descriptor?? [ 470.784582][ T6669] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.847791][ T6669] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.864367][T14500] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.871595][T14500] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.887016][T14500] bridge_slave_0: entered allmulticast mode [ 470.896831][T14500] bridge_slave_0: entered promiscuous mode [ 470.904574][T14535] input: syz0 as /devices/virtual/input/input37 [ 470.916521][T14500] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.920043][T14535] /dev/rnullb0: Can't open blockdev [ 470.925692][T14500] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.938200][T14500] bridge_slave_1: entered allmulticast mode [ 470.946301][T14500] bridge_slave_1: entered promiscuous mode [ 470.984224][ T5921] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 471.009867][ T5921] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 471.022948][ T5921] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 471.031177][ T5921] usb 3-1: media controller created [ 471.051913][ T5921] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.080010][T14500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.115296][ T5921] DVB: Unable to find symbol dib7000p_attach() [ 471.121732][ T5921] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 471.134827][T14500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.225478][ T5921] rc_core: IR keymap rc-dib0700-rc5 not found [ 471.235551][ T5921] Registered IR keymap rc-empty [ 471.241764][T14500] team0: Port device team_slave_0 added [ 471.254644][ T5921] dvb-usb: could not initialize remote control. [ 471.264340][ T5921] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 471.264480][T14500] team0: Port device team_slave_1 added [ 471.274360][ T5921] dib0700: There's no endpoint for remote controller [ 471.292916][ T6669] team0: left allmulticast mode [ 471.298070][ T6669] team_slave_0: left allmulticast mode [ 471.312431][ T6669] team_slave_1: left allmulticast mode [ 471.332315][ T6669] bridge0: port 3(team0) entered disabled state [ 471.340861][ T6669] bridge_slave_1: left allmulticast mode [ 471.348812][ T6669] bridge_slave_1: left promiscuous mode [ 471.362897][ T6669] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.371579][ T6669] bridge_slave_0: left allmulticast mode [ 471.389468][ T6669] bridge_slave_0: left promiscuous mode [ 471.403126][ T6669] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.652508][ T6669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.727174][ T6669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.750263][ T6669] bond0 (unregistering): Released all slaves [ 471.860106][T14500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.893305][T14500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.925042][T14500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.937290][T14500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.946132][T14500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.992807][T14500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.051099][ T59] smc: removing ib device syz0 [ 472.056290][T14157] Bluetooth: hci1: command tx timeout [ 472.091443][ T5901] wlan1 speed is unknown, defaulting to 1000 [ 472.098392][ T5901] syz0: Port: 1 Link DOWN [ 472.102930][ T9] wlan1 speed is unknown, defaulting to 1000 [ 472.499562][T14500] hsr_slave_0: entered promiscuous mode [ 472.632214][T14500] hsr_slave_1: entered promiscuous mode [ 473.083614][T14157] Bluetooth: hci3: command 0x0c1a tx timeout [ 473.088977][ T5908] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 473.111239][ T5908] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 473.141208][ T5921] usb 3-1: USB disconnect, device number 71 [ 473.305860][ T5921] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 473.390390][T14591] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 473.415332][T14591] /dev/rnullb0: Can't open blockdev [ 473.453799][T14595] 9p: Bad value for 'wfdno' [ 473.967815][T14500] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 473.979667][T14500] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 473.989681][T14500] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.001138][T14500] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.074085][ T5921] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 474.089359][T14500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.109807][T14500] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.123998][ T3541] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.131148][ T3541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.133280][T14157] Bluetooth: hci1: command tx timeout [ 474.149094][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.156287][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.162542][ T9] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 474.265498][ T5921] usb 5-1: config 4 has an invalid interface number: 24 but max is 0 [ 474.282225][ T5921] usb 5-1: config 4 has no interface number 0 [ 474.305619][ T5921] usb 5-1: New USB device found, idVendor=17ef, idProduct=a387, bcdDevice=99.3c [ 474.328080][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.352459][ T5921] usb 5-1: Product: syz [ 474.356683][ T5921] usb 5-1: Manufacturer: syz [ 474.367264][ T9] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 474.375170][ T5921] usb 5-1: SerialNumber: syz [ 474.375809][ T9] usb 4-1: config 0 has no interface number 0 [ 474.387436][ T5921] r8152-cfgselector 5-1: Unknown version 0x0000 [ 474.406768][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 474.428673][ T9] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 474.451661][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 474.463699][ T9] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 474.484033][ T9] usb 4-1: Product: syz [ 474.488338][ T9] usb 4-1: SerialNumber: syz [ 474.496664][ T9] usb 4-1: config 0 descriptor?? [ 474.511313][ T9] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 474.523363][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input39 [ 474.540274][T14500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.604450][T14610] program syz.4.2539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.667954][ T5921] r8152-cfgselector 5-1: USB disconnect, device number 41 [ 474.688686][T14500] veth0_vlan: entered promiscuous mode [ 474.724992][T14500] veth1_vlan: entered promiscuous mode [ 474.771120][T14500] veth0_macvtap: entered promiscuous mode [ 474.787993][T14500] veth1_macvtap: entered promiscuous mode [ 474.829705][T14500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 474.863784][T14500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 474.898829][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.932553][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.963716][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.995451][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.014364][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 475.014659][ T24] usb 4-1: USB disconnect, device number 92 [ 475.021369][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 475.084460][ T24] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 475.722471][ T5908] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 475.734741][ T5908] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 475.871197][ T6669] hsr_slave_0: left promiscuous mode [ 475.897497][ T6669] hsr_slave_1: left promiscuous mode [ 475.921689][ T6669] veth1_macvtap: left promiscuous mode [ 475.946820][ T6669] veth0_macvtap: left promiscuous mode [ 475.965934][ T6669] veth1_vlan: left promiscuous mode [ 475.971327][ T6669] veth0_vlan: left promiscuous mode [ 476.143956][ T6669] team_slave_1 (unregistering): left promiscuous mode [ 476.156661][ T6669] team0 (unregistering): Port device team_slave_1 removed [ 476.188917][ T6669] team_slave_0 (unregistering): left promiscuous mode [ 476.206568][ T6669] team0 (unregistering): Port device team_slave_0 removed [ 476.242246][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 476.300116][T14703] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 476.312599][ T9] lo speed is unknown, defaulting to 1000 [ 476.313453][T14703] bond0: (slave lo): Error: Device can not be enslaved while up [ 476.320143][ T9] infiniband syz2: ib_query_port failed (-19) [ 476.337758][ T3541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.368546][ T3541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.407845][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.418544][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.432269][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 476.444132][ T10] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 476.468624][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.480290][ T10] usb 5-1: config 0 has no interface number 0 [ 476.486647][ T10] usb 5-1: too many endpoints for config 0 interface 54 altsetting 205: 134, using maximum allowed: 30 [ 476.501258][ T10] usb 5-1: config 0 interface 54 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 134 [ 476.521264][ T10] usb 5-1: config 0 interface 54 has no altsetting 0 [ 476.531377][ T10] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 476.541046][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.569497][ T10] usb 5-1: Product: syz [ 476.578574][ T10] usb 5-1: Manufacturer: syz [ 476.586510][ T10] usb 5-1: SerialNumber: syz [ 476.589655][ T6669] IPVS: stop unused estimator thread 0... [ 476.601123][ T10] usb 5-1: config 0 descriptor?? [ 476.819139][T14697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.833667][T14697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.903384][ T5908] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 476.977741][ T1172] usb 5-1: USB disconnect, device number 42 [ 477.063829][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 477.072580][ T5908] usb 2-1: too many configurations: 10, using maximum allowed: 8 [ 477.093441][ T5908] usb 2-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 477.103556][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.111653][ T5908] usb 2-1: Product: syz [ 477.116299][ T5908] usb 2-1: Manufacturer: syz [ 477.120991][ T5908] usb 2-1: SerialNumber: syz [ 477.127583][ T5908] usb 2-1: config 0 descriptor?? [ 477.636273][T14736] block nbd4: Attempted send on invalid socket [ 477.644568][T14736] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 1 [ 477.692167][T14736] SQUASHFS error: Failed to read block 0x0: -5 [ 477.703191][T14736] unable to read squashfs_super_block [ 477.741723][ T5908] usb 2-1: USB disconnect, device number 111 [ 478.020372][T14749] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 478.030003][T14749] /dev/rnullb0: Can't open blockdev [ 478.042310][ T5921] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 478.065136][T14754] netlink: 45 bytes leftover after parsing attributes in process `syz.1.2566'. [ 478.082986][T14754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2566'. [ 478.095395][T14754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2566'. [ 478.142249][ T9] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 478.172528][ T5921] usb 5-1: device descriptor read/64, error -71 [ 478.316887][ T9] usb 3-1: No LPM exit latency info found, disabling LPM. [ 478.325796][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 32, setting to 0 [ 478.339030][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 64, setting to 0 [ 478.350557][ T9] usb 3-1: config 1 interface 1 has no altsetting 0 [ 478.412220][ T5921] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 478.542224][ T5921] usb 5-1: device descriptor read/64, error -71 [ 478.562205][ T1172] usb 2-1: new full-speed USB device number 112 using dummy_hcd [ 478.652545][ T5921] usb usb5-port1: attempt power cycle [ 478.692170][ T1172] usb 2-1: device descriptor read/64, error -71 [ 478.934730][ T1172] usb 2-1: new full-speed USB device number 113 using dummy_hcd [ 478.993635][ T5921] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 479.023272][ T5921] usb 5-1: device descriptor read/8, error -71 [ 479.082371][ T1172] usb 2-1: device descriptor read/64, error -71 [ 479.192454][ T1172] usb usb2-port1: attempt power cycle [ 479.262145][ T5921] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 479.282699][ T5921] usb 5-1: device descriptor read/8, error -71 [ 479.397733][ T5921] usb usb5-port1: unable to enumerate USB device [ 479.532203][ T1172] usb 2-1: new full-speed USB device number 114 using dummy_hcd [ 479.555229][ T1172] usb 2-1: device descriptor read/8, error -71 [ 479.792168][ T1172] usb 2-1: new full-speed USB device number 115 using dummy_hcd [ 479.812794][ T1172] usb 2-1: device descriptor read/8, error -71 [ 479.922458][ T1172] usb usb2-port1: unable to enumerate USB device [ 480.042326][ T5901] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 480.212205][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 480.219387][ T5901] usb 4-1: config 162 has an invalid interface number: 84 but max is 2 [ 480.227828][ T5901] usb 4-1: config 162 has an invalid interface number: 3 but max is 2 [ 480.236207][ T5901] usb 4-1: config 162 has no interface number 0 [ 480.242690][ T5901] usb 4-1: config 162 has no interface number 1 [ 480.249022][ T5901] usb 4-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 480.262265][ T5901] usb 4-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 480.273361][ T5901] usb 4-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 480.285600][ T5901] usb 4-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 480.297062][ T5901] usb 4-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 480.307307][ T5901] usb 4-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 480.320425][ T5901] usb 4-1: config 162 interface 84 has no altsetting 0 [ 480.327348][ T5901] usb 4-1: config 162 interface 2 has no altsetting 0 [ 480.334223][ T5901] usb 4-1: config 162 interface 3 has no altsetting 0 [ 480.344133][ T5901] usb 4-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23 [ 480.353409][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.361423][ T5901] usb 4-1: Product: syz [ 480.365698][ T5901] usb 4-1: Manufacturer: syz [ 480.370331][ T5901] usb 4-1: SerialNumber: syz [ 480.580496][T14765] /dev/rnullb0: Can't open blockdev [ 480.597225][T14157] Bluetooth: hci2: Opcode 0x0c03 failed: -71 [ 480.608243][ T5901] usb 4-1: USB disconnect, device number 93 [ 480.831088][ T9] usb 3-1: string descriptor 0 read error: -71 [ 480.865574][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.884189][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.909123][ T9] usb 3-1: can't set config #1, error -71 [ 480.983051][ T9] usb 3-1: USB disconnect, device number 72 [ 481.073968][T14781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.363857][T14790] netlink: 'syz.1.2579': attribute type 21 has an invalid length. [ 481.371783][T14790] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2579'. [ 481.429520][ T5921] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 481.586509][ T5921] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4 [ 481.598689][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.606947][ T5921] usb 5-1: Product: syz [ 481.611359][ T5921] usb 5-1: Manufacturer: syz [ 481.616226][ T5921] usb 5-1: SerialNumber: syz [ 481.622822][ T5921] usb 5-1: config 0 descriptor?? [ 481.752289][ T5900] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 481.833302][ T9] usb 5-1: USB disconnect, device number 47 [ 481.903911][ T5900] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.913897][ T5900] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 481.927218][ T5900] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.942793][ T5900] usb 4-1: config 0 descriptor?? [ 482.578707][ T5900] razer 0003:1532:010E.0015: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 482.779830][T14794] /dev/rnullb0: Can't open blockdev [ 482.790371][ T5900] usb 4-1: USB disconnect, device number 94 [ 482.995948][T14821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2590'. [ 483.006275][T14821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2590'. [ 483.017768][T14821] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2590'. [ 483.582281][ T5921] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 483.743529][ T5921] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.759652][ T5921] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.777492][ T5921] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 483.787071][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 483.802154][ T5921] usb 5-1: SerialNumber: syz [ 483.826270][ T5921] usb 5-1: 0:2 : does not exist [ 484.165786][T14845] /dev/rnullb0: Can't open blockdev [ 484.217972][T14847] /dev/rnullb0: Can't open blockdev [ 484.239613][T14852] /dev/rnullb0: Can't open blockdev [ 484.305590][ T5921] usb 5-1: USB disconnect, device number 48 [ 484.427986][ T30] audit: type=1326 audit(1756779002.429:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14857 comm="syz.2.2604" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55d858ebe9 code=0x0 [ 484.474892][T14863] /dev/rnullb0: Can't open blockdev [ 484.639948][T14872] binder: 14871:14872 ioctl 40046205 0 returned -22 [ 484.780424][T14874] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=3809 (7618 ns) > initial count (2 ns). Using initial count to start timer. [ 484.835306][T14874] /dev/rnullb0: Can't open blockdev [ 485.082414][ T5900] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 485.252324][ T5900] usb 4-1: Using ep0 maxpacket: 32 [ 485.260561][ T5900] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 485.269235][ T5900] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.282995][ T5900] usb 4-1: config 0 has no interface number 0 [ 485.290181][ T5900] usb 4-1: config 0 interface 184 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 485.304336][ T5900] usb 4-1: config 0 interface 184 has no altsetting 0 [ 485.314048][ T5900] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 485.323486][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.331609][ T5900] usb 4-1: Product: syz [ 485.336246][ T5900] usb 4-1: Manufacturer: syz [ 485.340943][ T5900] usb 4-1: SerialNumber: syz [ 485.352606][ T5900] usb 4-1: config 0 descriptor?? [ 485.362987][ T5900] smsc75xx v1.0.0 [ 485.368638][ T5900] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 485.379324][ T5900] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 485.597629][T14896] /dev/rnullb0: Can't open blockdev [ 485.683916][T14905] /dev/rnullb0: Can't open blockdev [ 485.699061][T14907] /dev/rnullb0: Can't open blockdev [ 485.823333][T14911] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2622'. [ 485.925136][T14922] block nbd1: Attempted send on invalid socket [ 485.931373][T14922] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 485.941112][T14922] EXT4-fs (nbd1): unable to read superblock [ 485.951536][T14924] /dev/rnullb0: Can't open blockdev [ 486.252198][ T5921] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 486.425216][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 486.444969][ T5921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.457054][T14935] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2629'. [ 486.466172][ T5921] usb 2-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 486.476989][ T5921] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.489479][ T5921] usb 2-1: config 0 descriptor?? [ 486.515302][T14937] virtiofs: Unknown parameter 'always 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 21 vxcan0 : 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 22 vxcan1 : 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 23 veth0 : 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 24 veth1 : 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 25 wg0 : 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 26 wg1 : 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 27 wg2 : 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 28 veth0_to_bridge: 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 29 bridge_slave_0: 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 30 veth1_to_bridge: 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 31 bridge_slave_1: 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 32 veth0_to_bond: 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 33 bond_slave_0: 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 34 veth1_to_bond: 1 V3 [ 486.515302][T14937] 010000E0 1 0:00000000 0 [ 486.515302][T14937] 35 bond_slave_1: 1 V3 [ 486.515302][T14937] 010000E0 [ 486.517272][T14937] /dev/rnullb0: Can't open blockdev [ 486.751190][T14941] /dev/rnullb0: Can't open blockdev [ 487.093491][ T5921] logitech-djreceiver 0003:046D:C52F.0016: unknown main item tag 0x0 [ 487.101992][ T5921] logitech-djreceiver 0003:046D:C52F.0016: unknown main item tag 0x0 [ 487.112503][ T5921] logitech-djreceiver 0003:046D:C52F.0016: unknown main item tag 0x0 [ 487.120733][ T5921] logitech-djreceiver 0003:046D:C52F.0016: unknown main item tag 0x0 [ 487.133266][ T5921] logitech-djreceiver 0003:046D:C52F.0016: unknown main item tag 0x0 [ 487.141628][ T5921] logitech-djreceiver 0003:046D:C52F.0016: unknown main item tag 0x0 [ 487.150236][ T5921] logitech-djreceiver 0003:046D:C52F.0016: unknown main item tag 0x0 [ 487.365775][ T5921] usb 2-1: USB disconnect, device number 116 [ 487.392374][ T5900] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 487.532378][ T5900] usb 5-1: device descriptor read/64, error -71 [ 487.561061][T14968] /dev/rnullb0: Can't open blockdev [ 487.678510][T14974] /dev/rnullb0: Can't open blockdev [ 487.686266][T14975] /dev/rnullb0: Can't open blockdev [ 487.782257][ T5900] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 487.922214][ T5900] usb 5-1: device descriptor read/64, error -71 [ 493.244639][ T5900] usb usb5-port1: attempt power cycle [ 493.406585][T14989] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 493.432334][T14989] /dev/rnullb0: Can't open blockdev [ 493.594938][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.628533][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.925082][ T9] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 493.992216][ T5900] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 494.022706][ T5900] usb 5-1: device descriptor read/8, error -71 [ 494.106608][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 494.122557][ T9] usb 3-1: config 0 has no interface number 0 [ 494.128887][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 494.147978][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 494.161548][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 494.174990][ T9] usb 3-1: Product: syz [ 494.179247][ T9] usb 3-1: SerialNumber: syz [ 494.194685][ T9] usb 3-1: config 0 descriptor?? [ 494.206995][ T9] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 494.272289][ T5900] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 494.313792][ T5900] usb 5-1: device descriptor read/8, error -71 [ 494.397797][T14997] ------------[ cut here ]------------ [ 494.403464][T14997] kernel BUG at ./include/linux/pagemap.h:1404! [ 494.409847][T14997] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 494.416134][T14997] CPU: 1 UID: 0 PID: 14997 Comm: syz.1.2645 Not tainted syzkaller #0 PREEMPT(full) [ 494.421751][T15005] /dev/rnullb0: Can't open blockdev [ 494.425578][T14997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.425608][T14997] RIP: 0010:mpage_readahead+0x765/0x790 [ 494.425637][T14997] Code: c6 80 25 ba 8b e8 ab ef de fe 90 0f 0b e8 f3 bb 77 ff 4c 89 ff 48 c7 c6 60 24 ba 8b e8 94 ef de fe 90 0f 0b e8 dc bb 77 ff 90 <0f> 0b e8 d4 bb 77 ff 4c 89 ff 48 c7 c6 80 25 ba 8b e8 75 ef de fe [ 494.432679][ T9] usb 3-1: USB disconnect, device number 73 [ 494.440906][T14997] RSP: 0018:ffffc900195a7100 EFLAGS: 00010283 [ 494.456130][ T5900] usb usb5-port1: unable to enumerate USB device [ 494.466078][T14997] [ 494.466092][T14997] RAX: ffffffff824912f4 RBX: 0000000000000008 RCX: 0000000000080000 [ 494.466110][T14997] RDX: ffffc9000f6da000 RSI: 000000000000023d RDI: 000000000000023e [ 494.466123][T14997] RBP: ffffc900195a72f0 R08: ffffea000086ba07 R09: 1ffffd400010d740 [ 494.466138][T14997] R10: dffffc0000000000 R11: fffff9400010d741 R12: ffffc900195a7728 [ 494.466154][T14997] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc900195a7740 [ 494.466169][T14997] FS: 00007f966cd296c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 494.535680][T14997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.542276][T14997] CR2: 00007ffdd394df18 CR3: 000000004380c000 CR4: 00000000003526f0 [ 494.550264][T14997] Call Trace: [ 494.553551][T14997] [ 494.556491][T14997] ? __pfx_mpage_readahead+0x10/0x10 [ 494.561779][T14997] ? rcu_is_watching+0x15/0xb0 [ 494.566556][T14997] ? __pfx_blkdev_get_block+0x10/0x10 [ 494.571941][T14997] ? blk_start_plug+0x6f/0x1b0 [ 494.576715][T14997] read_pages+0x177/0x580 [ 494.581052][T14997] ? __pfx_read_pages+0x10/0x10 [ 494.585906][T14997] ? filemap_add_folio+0x1af/0x270 [ 494.591022][T14997] page_cache_ra_unbounded+0x6b0/0x7b0 [ 494.596492][T14997] page_cache_sync_ra+0x3b9/0xb10 [ 494.601525][T14997] filemap_get_pages+0x468/0x1de0 [ 494.606562][T14997] ? is_bpf_text_address+0x26/0x2b0 [ 494.611771][T14997] ? __pfx_filemap_get_pages+0x10/0x10 [ 494.617236][T14997] ? stack_trace_save+0x9c/0xe0 [ 494.622094][T14997] ? __pfx_stack_trace_save+0x10/0x10 [ 494.627471][T14997] ? __pfx___might_resched+0x10/0x10 [ 494.632764][T14997] filemap_splice_read+0x581/0xc60 [ 494.637892][T14997] ? __pfx_filemap_splice_read+0x10/0x10 [ 494.643542][T14997] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 494.648919][T14997] ? alloc_pipe_info+0x374/0x4d0 [ 494.653861][T14997] ? __pfx_filemap_splice_read+0x10/0x10 [ 494.659500][T14997] splice_direct_to_actor+0x4a6/0xcc0 [ 494.664884][T14997] ? __pfx_direct_splice_actor+0x10/0x10 [ 494.670527][T14997] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 494.676432][T14997] do_splice_direct+0x181/0x270 [ 494.681290][T14997] ? __pfx_do_splice_direct+0x10/0x10 [ 494.686669][T14997] ? common_file_perm+0x1b5/0x230 [ 494.691701][T14997] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 494.697603][T14997] ? bpf_lsm_file_permission+0x9/0x20 [ 494.702988][T14997] ? security_file_permission+0x75/0x290 [ 494.708624][T14997] ? rw_verify_area+0x255/0x4d0 [ 494.713480][T14997] do_sendfile+0x4da/0x7e0 [ 494.717929][T14997] ? __pfx_do_sendfile+0x10/0x10 [ 494.722879][T14997] ? __se_sys_futex+0x36f/0x400 [ 494.727748][T14997] __se_sys_sendfile64+0x13e/0x190 [ 494.732866][T14997] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 494.738509][T14997] ? rcu_is_watching+0x15/0xb0 [ 494.743281][T14997] do_syscall_64+0xfa/0xfa0 [ 494.747795][T14997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.753864][T14997] ? clear_bhb_loop+0x60/0xb0 [ 494.758550][T14997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.764449][T14997] RIP: 0033:0x7f966bf8ebe9 [ 494.768868][T14997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.788486][T14997] RSP: 002b:00007f966cd29038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 494.796909][T14997] RAX: ffffffffffffffda RBX: 00007f966c1c6090 RCX: 00007f966bf8ebe9 [ 494.804884][T14997] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 494.812859][T14997] RBP: 00007f966c011e19 R08: 0000000000000000 R09: 0000000000000000 [ 494.820837][T14997] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000000 [ 494.828834][T14997] R13: 00007f966c1c6128 R14: 00007f966c1c6090 R15: 00007fff61a571f8 [ 494.836823][T14997] [ 494.839884][T14997] Modules linked in: [ 494.844810][T14997] ---[ end trace 0000000000000000 ]--- [ 494.854451][T14997] RIP: 0010:mpage_readahead+0x765/0x790 [ 494.860054][T14997] Code: c6 80 25 ba 8b e8 ab ef de fe 90 0f 0b e8 f3 bb 77 ff 4c 89 ff 48 c7 c6 60 24 ba 8b e8 94 ef de fe 90 0f 0b e8 dc bb 77 ff 90 <0f> 0b e8 d4 bb 77 ff 4c 89 ff 48 c7 c6 80 25 ba 8b e8 75 ef de fe [ 494.880650][T14997] RSP: 0018:ffffc900195a7100 EFLAGS: 00010283 [ 494.886974][T14997] RAX: ffffffff824912f4 RBX: 0000000000000008 RCX: 0000000000080000 [ 494.895160][T14997] RDX: ffffc9000f6da000 RSI: 000000000000023d RDI: 000000000000023e [ 494.903301][T14997] RBP: ffffc900195a72f0 R08: ffffea000086ba07 R09: 1ffffd400010d740 [ 494.911644][T14997] R10: dffffc0000000000 R11: fffff9400010d741 R12: ffffc900195a7728 [ 494.920265][T14997] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc900195a7740 [ 494.930479][T14997] FS: 00007f966cd296c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 494.939496][T14997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.946141][T14997] CR2: 0000558d26a12168 CR3: 000000004380c000 CR4: 00000000003526f0 [ 494.954471][T14997] Kernel panic - not syncing: Fatal exception [ 494.960844][T14997] Kernel Offset: disabled [ 494.965173][T14997] Rebooting in 86400 seconds..