last executing test programs: 1m0.473481849s ago: executing program 0 (id=1512): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000140)=0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x3, 0x42, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x86, 0x2f, 0x0, @empty, @local}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x20, 0x7, 0x7fffffd, 0x6, {{0x5, 0x4, 0x0, 0x16, 0xfffffffffffffe8b, 0xfffc, 0x0, 0x7f, 0x4, 0x0, @empty, @empty}}}}) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_CALL(r3, 0x4001af84, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), r6) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000007e40)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f0000007f80)={0x0, 0x0, &(0x7f0000007f40)={&(0x7f0000000000)={0x24, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0xffffffff, @loopback, 0xfffffffd}, 0x1c) shutdown(r5, 0x0) sendto$inet6(r5, &(0x7f0000000100)="bc", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) ioctl$HIDIOCGRAWPHYS(r9, 0x4004480d, 0x0) dup(r9) r10 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r10, 0x1, 0x10, &(0x7f0000000040)=0x888b, 0x4) socket$packet(0x11, 0x2, 0x300) socket$phonet(0x23, 0x2, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 1m0.027290478s ago: executing program 0 (id=1518): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @remote}, 0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macsec0\x00'}) (async) sendto$packet(r0, &(0x7f0000000080)="330320000a00140000007ef52f555f2a0c0900000000894f00f786dd3baa4b1f0f858c4632f47042195e", 0x2a, 0x40008c1, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x62, 0x6, @remote}, 0x14) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) (async) 59.955363757s ago: executing program 0 (id=1521): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, 0x0, &(0x7f0000000040)) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8000002b) (async, rerun: 64) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async, rerun: 64) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) (async) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2, 0x1}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x20011, r3, 0xf648d000) (async, rerun: 32) mlock(&(0x7f0000019000/0x2000)=nil, 0x2000) (rerun: 32) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007800010600000000000092ec07"], 0x18}], 0x1}, 0x0) (async) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 59.716726215s ago: executing program 0 (id=1523): mount(&(0x7f0000000100)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0x0}}, './cgroup\x00'}) chown(&(0x7f0000000000)='./cgroup\x00', r0, r3) mount$9p_xen(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000022c0)={'trans=xen,', {[{@access_uid={'access', 0x3d, r2}}, {@version_L}, {@version_L}, {@cache_mmap}, {@version_L}], [{@dont_hash}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mount$bind(&(0x7f0000002340)='./file1\x00', &(0x7f0000002380)='./file1\x00', &(0x7f00000023c0), 0x1000000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}, 0x1, 0x0, 0x0, 0x800}, 0x0) write$tcp_congestion(r1, &(0x7f0000002400)='highspeed\x00', 0x1a) 59.690301526s ago: executing program 0 (id=1524): r0 = syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r0, 0xc01c64ae, &(0x7f00000000c0)={0x0, 0x13, 0x4, 0x6162f01a, 0x20, 0x18, 0xfca}) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000080)={0xff, 0xffff6bf6, 0x2, 0x9, 0x1, 0x200}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r1, 0x40096100, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x12c) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 59.535120861s ago: executing program 0 (id=1525): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) dup2(r0, r0) 59.448243272s ago: executing program 32 (id=1525): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) dup2(r0, r0) 4.136742989s ago: executing program 4 (id=1967): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x18, 0x209, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @u32}, @nested={0x4, 0x8}]}, 0x20}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) fadvise64(r1, 0x7, 0x1ff, 0x1) sendfile(r1, r1, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 4.008899179s ago: executing program 1 (id=1970): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mount$overlay(0x0, 0x0, 0x0, 0x1001002, &(0x7f0000004180)) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x323f02, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.679317713s ago: executing program 1 (id=1971): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = socket(0x2, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000000000034"], 0x18}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000100000000017c00000400fc800c0001800600060065"], 0x34}}, 0xc010) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000027c"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$TCXONC(r0, 0x5608, 0x1) 3.678551882s ago: executing program 2 (id=1972): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) syz_open_dev$loop(&(0x7f0000000080), 0x88, 0x62800) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$sock_int(r1, 0x1, 0x2f, 0x0, 0x0) r2 = memfd_create(&(0x7f0000000000)='/dev/loop#\x00', 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x7, 0x12, r2, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) 3.53192145s ago: executing program 2 (id=1975): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000005c0)="3504000041000511d25a35400c00020001ffe72037153e370c04018006041000450000002a560000e7ff0040", 0x2c}, {&(0x7f0000000600)="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", 0x3bf}, {&(0x7f0000000000), 0x700}, {&(0x7f0000000040)="9d493c13b6b02affcc19cb904ec2bd74085b0bd225277e5a44d681809b6d764ecab211ef0c90ba361a4378457b19705b18406f35071130b4e06c4a3b1a6e9a9d7cf1453aeb21e4c30a85207027af69f536ec61a4a59614b3f59314c649223b791213aafb18e08f295189c63c72d255f34987edf7a120ed0fd80500000000000000c4bf95e695a7b864e534d2af6abeee35de087c976a02f4e4b20bdea333455b73232f9297ce2197ce", 0xa9}], 0x4}, 0x10049014) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000e8010000030a01020000000000000000010000000900030073797a3200000000280004800800024000000000080001400000000514000300626174616476300000000000000000000900010073797a31000000000900010073797a3100000000340008800c00024000000000000080010c00024000000000000000040c00014000000000000000000c00014000000000000000014c000480080002404c82f47c080001400000000008000140000000010800014000000003080002404f32945f080001400000000308000140000000020800024019885f270800014000000003fd000c00a03ac330bf11a2145946e6d945deece8485ee69dbc29a8dd5dbce127f829a3adf5c4171b4bedbbc9b913a67b9ee679020f0200000064419faae0136b893d91d95b1174f115798a1abfdc06983fb83f2116a85a00dd35cdf9d8f81683e5e2ebcca132a712e0be44c12c02ac92fbbb86ed717ce0cbd6a0134f899e23ca6d2f063d26be86555cc0e9c7a25d77e6c0f4217794be96b5d797e3116d874c3adfb096e0567ec28bd1e4d8d6713109695f1f3a877d89d20e19304501aeb851d14c4f9b2d769d554fe5308810d19bb040c1977bce50b894f2c45a1f0e80c8256b6dcb072f9d91d94a67bba9f62eb2f192fa4b3786d9a774b99aa332dfbb000000080007"], 0x25c}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000000)={0x8000001, 0x0, 0x0, 0x0, 0x80000000}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x44, r5, 0x1, 0x70bd29, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8800}, 0x4000000) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 3.500820953s ago: executing program 1 (id=1976): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa10100000009b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad7c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af801034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x10000}, &(0x7f00000002c0)=0x8) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x4c2041, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020}, 0x2020) syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) (async) r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) sendfile(r4, r2, 0x0, 0x7ffff000) (async) sendfile(r4, r2, 0x0, 0x7ffff000) 3.355186342s ago: executing program 1 (id=1977): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) r2 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905020340"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_ep_read(r2, 0x2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r2, 0x81, 0x2, &(0x7f0000000000)="fe71") ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1}) r3 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000040)={0x9, &(0x7f0000000340)=[{0x81, 0x81, 0x7, 0x5}, {0x5, 0x9, 0x2e, 0x80000000}, {0x992a, 0x6, 0x2, 0x10001}, {0x8000, 0x6, 0xed}, {0xfff9, 0x37, 0x1, 0x33}, {0x9, 0xf8, 0x3, 0x5}, {0x200, 0x8, 0x97, 0x10000}, {0x81, 0x7, 0x1, 0x8001}, {0x6, 0x7, 0x1, 0x9f}]}, 0x10) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000180)={0x48, 0x1, r1, 0x0, 0xfffffffffffffff9, 0x6}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000001340)={0x28, 0x2, r1, 0x0, &(0x7f00003bd000/0x3000)=nil, 0x3000, 0x80}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_X2APIC_API(r6, 0x4068aea3, &(0x7f0000000d40)={0xdb}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) clock_gettime(0x4, &(0x7f0000000080)) 3.306190506s ago: executing program 2 (id=1979): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20008894) bind$inet6(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x31, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000080)) ioctl$PPPIOCSMAXCID(r3, 0x40047451, &(0x7f0000000200)=0x2) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000001a00)="002147c3d907000000fd03063935d4a0abb4020a469d", 0x16}], 0x1, 0x7, 0xfffffff9) socket$netlink(0x10, 0x3, 0x6) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x0, 0x0, {0xb, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38012, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3.263253051s ago: executing program 4 (id=1980): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/vlan0\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r3, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r3, &(0x7f0000000b80)="51e251578851f74182a74b89b27df427aeef44966d202e4138b5a18e75a0424e7fe93b0d32c7abba87b65f97aba1c26a06b6d94c4aefd8fdca10e744391062c8e612721c20051608d9aa6dacf61e1eb331a4daad402b9885599d56130f7149fb1111fa116e94324d585a0569fbd311dad54cb4e32ff7f02216844ef42eeb66c3d526c878d5135ad1c9262239339c18885e2a0a95854d6cde3dd2feeaa50216af6c5760923413af81199a65a6332b02ec7bbf79d557c033cbe032fdc44f66a5c59cc4a3c5d218f5896b359d1efd60baf98df6396567478f7b817ce6e11d59a7def452a068e9607f57f626a5b8d476636ef1ee76307524009ae49be402000000000000001e80fed632155e14da1f7324d97bc61a3c1edc4431ee8a6caa2ed9f85cea5a2a9b263630c7d6fc35dda6002da571a2e51917e7c1019d8ce21a608147e408074c7c5f444fab931bda86d977d7c9ccefd881e5ef05b287f41eea526862885881c2cdc687dff02ba9b70a9b08734ac4d62c7f34465c34aa9e9f136c7f796d9eea41aa37f61830508338bb1f887089070567a1dd96cd700e7a098dabedb60f31acd17d487bc8be1a3101d2b5ac1715003793596c6daa93a27f4adb4d6fbea5669cc43c320544317ea18a2c762457f1bc945fec8f849641d44e7e2a24faeee28f3f266395fe18b0dce20c1f64e8896c8ff0e4a44a116fb32462471a0fcde143e551723d57339722765673b4163d66f473ac10f988cb252f106632f9884a47866d284b4efc6bb1aa74ed48d4a6535795f0873a99907ebc22be2337364cf9acc063e32f7d2e02fad64d04aa405d2dbdee1128ab1e4761d2dd30885ad37dd168478f10789d172feef4c817a5cd372caade57f23300e45f47e001e3ea09364ab42ee9802477368b9910f4e24037c871cb8251568c792287a6f49fa61b7c2600accaa0e7b40c59d88a29af5886c1f5dfc6837c58aaef12a9e100225c70441144ffa82927fa4802ed9ebb03eea8e945af5f4993f21a7f53baf7ec5bb6cc96b917dde82c18840c3500e9565f68f687b1c73d834c0d99d4acb002dc5682dbcdb1217a98f6c3ef8318b7fa93894e8a097b4511ba5c035e27c9fe8bfe7754741ac21bbc0303b81672e3117e5590fe2d92f912759b9937f64204ec5caa92e218daa5a3ef64617beb30cccb31016b13ed8d7bcabb03e176b1c9bda3bf1c1256ab74ab6f42ed9bafbbd0096263be1a7da1e1c88deec55a653d170e1e13c77dacaa60a37a6ba2383e661ebc9f13dbaade2dd884c9951819fb4608e19e70cd2496ccfb12f24c71f496cfe90400fe1bbea1e9a24b1d4664fb0776aca6269b396779680e52f86877d9209988d12ccb137be01ab7496d00547a7d4849d365a18dbb55c429cde87d33c4b74ad2273cdfee88b5418866ef327f25e9cbcd5a64d97184339f7e4cb5f8de171d2779c0f68884ae835e398f982d5749f085628d3608986656ea04b721f828202e9342bd7d19dfa091e772aebf9718030167a8c029df7c58b7f40029d7cfcaf26fd1900d8775ef373e8e2c5bf3525f907add3be426cd5a079c49abffe933e9ee213a3baf34f932d1299312691e1c53e6247ae0989ad66070d51fad22856a8b6b28954e7d41189b11c5321789eec8670de9e8db0b0473ba2e02731e60e7222697d61e052c18d4bcc6d1572fdf426f7b2fee6c1dee66c85c497b90facaf63b8ec5cde4a73400f9180bcfc0f81eca9580a7c81462a077f9034026bf72aa7c6de4b3c15d4a2dbd6fd7d87084aea9f25fb4bf5ec83eb56874a760533792dff2695407ccdd6a7375e0007230fd3f6501c152f1c1ff279b1d67cc95f2820762b7927659368e41657bdef2dd15b63498a93b7884db26809d734aaf98b86fcf9fc643a34d03ebbe072820662d20d4774d66c5ae270adade5b8f6242a059b926221ee3d677487471c432b0d6d64dad030703475bb3ecac3909750f46a9a8e76a13264ed2b654b9a6eb1809", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) recvfrom(r3, 0x0, 0x0, 0x40, 0x0, 0x0) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000100)={'syz_tun\x00', 0x40}) syz_genetlink_get_family_id$nl80211(0x0, r1) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000814}, 0x20004000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000080)={0x2c, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) read$FUSE(r1, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[{0x18, 0x110, 0xe, "8f85"}], 0x18}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001880)={0x4c, r5, 0x1, 0x0, 0x0, {0x21}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x4c}}, 0x0) munlockall() mlock2(&(0x7f0000381000/0x4000)=nil, 0x4000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) creat(&(0x7f0000000140)='./file0\x00', 0x71) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000001a00)={0x12b4, 0x0, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [{{0x254, 0x1, {{0x2, 0x7}, 0x2, 0x3, 0xf, 0x80, 0x1, 'syz1\x00', "c0a197797234168b1b6c0956d918c35a342b6866b083848bf50e7c89e1a93738", "6beb70e30619d629f5ca40fac9b44eecde8191b5a52703841b427e4609f9fcdf", [{0x81, 0xfff9, {0x3, 0x5}}, {0x8, 0x2, {0x3, 0x300000}}, {0xffff, 0x9, {0x0, 0x6}}, {0x5, 0x5, {0x0, 0x3ff}}, {0x0, 0xb6, {0x3, 0xc4a}}, {0xe4, 0xb, {0x1, 0x2}}, {0x400, 0x2, {0x3, 0x7}}, {0x8001, 0x6, {0x1, 0x3}}, {0x2, 0x2, {0x1, 0x2}}, {0xf9, 0x9, {0x1, 0xd9c}}, {0x7, 0x1, {0x2, 0x7}}, {0x800, 0x2, {0x1, 0x101}}, {0x8, 0xff, {0x3, 0x6}}, {0x7, 0x2, {0x2}}, {0xcc, 0x8, {0x1, 0x7f}}, {0x5, 0x9, {0x3, 0x10001}}, {0x7, 0x3, {0x0, 0x7fffffff}}, {0xa, 0x8001, {0x1, 0x6}}, {0xfffa, 0x8001}, {0x0, 0xff00, {0x1, 0x2}}, {0x3, 0x7, {0x3}}, {0x2, 0x1, {0x0, 0x8}}, {0x0, 0x9, {0x0, 0x6}}, {0xfc00, 0xd0b, {0x0, 0xfffffff8}}, {0x9, 0x1, {0x1, 0x20000000}}, {0xb, 0x7, {0x0, 0x6}}, {0x4, 0x9, {0x1, 0x2}}, {0xa69, 0x400, {0x2, 0xfffffff9}}, {0x80, 0x7, {0x3, 0x5}}, {0xd4, 0x8, {0x3, 0x2}}, {0x7, 0x8, {0x0, 0x6}}, {0x596, 0x0, {0x1, 0x8}}, {0x3, 0x26b8, {0x1}}, {0xc, 0x4, {0x1, 0x7}}, {0xba37, 0x0, {0x2, 0x8}}, {0x8, 0x8, {0x16e4872de1c8e3d5, 0x165}}, {0x9c0, 0x5, {0x2, 0xffffffff}}, {0xe, 0x0, {0x3, 0x2}}, {0x1, 0x7, {0x1, 0x1}}, {0x4, 0x5, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x0, 0x4}, 0x99, 0x9, 0x3, 0xff, 0x8, 'syz1\x00', "352e27df9f4d38c7fe7780d1abaf2da471bc76d424210c399c240b3c3b58cc8a", "75d2ebf3aa53309e41c49f3845edad70c1b280381933c539e77031168df11ea0", [{0x2, 0x2, {0x1, 0x7}}, {0x101, 0x3, {0x0, 0xafe9}}, {0x8, 0x429e, {0x0, 0x7}}, {0x8, 0x0, {0x3, 0x9}}, {0x7, 0x24, {0x3, 0x1}}, {0x0, 0x4, {0x1, 0x7ec}}, {0x5, 0xfff2, {0x3}}, {0x5, 0x9}, {0x8c5b, 0x3, {0x1, 0x6}}, {0x271, 0x8, {0x3}}, {0x6, 0xffff, {0x0, 0x3}}, {0x2, 0x200, {0x0, 0x1000000}}, {0x3, 0x6, {0x1, 0x80c}}, {0x4, 0x4, {0x1, 0x50b6}}, {0x9, 0xfff, {0x0, 0x8}}, {0xe, 0x5, {0x1, 0x93be}}, {0x101, 0x2, {0x3, 0x79}}, {0x7, 0x8000, {0x0, 0x79b58000}}, {0xf, 0xfffe, {0x2, 0x7}}, {0xadb, 0x200, {0x3, 0x8}}, {0xfff7, 0x2, {0x0, 0x6}}, {0x7fff, 0x3, {0x1, 0x7ff}}, {0x5980, 0xa, {0x1, 0x7}}, {0xfffa, 0x9, {0x2, 0x1}}, {0x200, 0x8, {0x1, 0xffff657f}}, {0x5, 0x4, {0x1, 0xf17}}, {0x0, 0x29fb, {0x3, 0xa}}, {0x7, 0x4, {0x0, 0x3f}}, {0x5, 0x0, {0x2, 0x1}}, {0x101, 0x1, {0x0, 0x7}}, {0xab, 0x8, {0x2, 0xf}}, {0x4d, 0x3, {0x0, 0x28}}, {0x1, 0x9, {0x1, 0x10000}}, {0x5, 0x7ed, {0x3, 0x7}}, {0x8, 0x5, {0x0, 0x2}}, {0xd77b, 0xfffc, {0x2, 0x2}}, {0x3, 0x6, {0x3, 0x3}}, {0x7, 0x6, {0x3, 0x6}}, {0xfff9, 0x0, {0x0, 0x9}}, {0x8, 0x8, {0x2, 0x10001}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x40, 0xf7, 0x3, 0x237, 0x25, 'syz1\x00', "12fbefd92d36a8e8c3d78ae8e3afd8f3ba00076e796c91d970aeb47faa74855d", "347c725cf8c70760efc4d5d791b4d39ed1869e0bd894a7f39d8be82eed15223d", [{0xc, 0x8, {0x3, 0xff}}, {0xfff9, 0xb86c, {0x0, 0x8001}}, {0x5, 0x5, {0x1}}, {0x6, 0x3, {0x0, 0x9}}, {0xcf, 0x81, {0x3, 0x69e}}, {0x734, 0x3, {0x2, 0x7ff}}, {0x5, 0x8, {0x0, 0x80000001}}, {0x0, 0x6, {0x2, 0x7}}, {0xb800, 0x26, {0x0, 0x401}}, {0xffff, 0x8, {0x0, 0x1}}, {0x7, 0x4, {0x3, 0x1}}, {0x6, 0x6, {0x2, 0x7}}, {0x8aa, 0x4919, {0x1, 0x4}}, {0x80, 0x1, {0x1, 0x2}}, {0xba9, 0x5, {0x2, 0x9}}, {0x9, 0xf4f8, {0x0, 0x30ae}}, {0x7ff, 0x2, {0x2, 0x296}}, {0x0, 0xa56a, {0x1, 0x9}}, {0x7, 0x5, {0x1, 0xe}}, {0xfff7, 0x1, {0x0, 0x9}}, {0x6, 0xfd93, {0x1, 0x9}}, {0x81, 0xfff3, {0x2, 0x8}}, {0x2, 0x4, {0x0, 0x4}}, {0x9, 0x5, {0x1, 0x7750}}, {0x0, 0x4, {0x1, 0x2}}, {0x3, 0x81, {0x3}}, {0x2, 0x3, {0x1, 0xfffffe01}}, {0xc, 0x5, {0x1, 0xf22d}}, {0x0, 0x3, {0x2, 0x8}}, {0x8001, 0x80, {0x0, 0x10000}}, {0xbf, 0xfff1, {0x0, 0x1}}, {0x6, 0x2, {0x1, 0xd982}}, {0x7, 0x0, {0x2, 0x80000001}}, {0x8, 0x2, {0x0, 0x4}}, {0x7, 0xe264, {0x1, 0xfc5}}, {0x7ff, 0x9, {0x4eb4f61fb7b9a3f7, 0x1}}, {0xe, 0x1a77, {0x3, 0x5b4}}, {0x1, 0xfffd, {0x1, 0x200}}, {0x8, 0x9, {0x2, 0x4}}, {0x3, 0x7, {0x0, 0x400}}]}}}, {{0x254, 0x1, {{0x2, 0x1}, 0x6, 0x3, 0xfffe, 0x3, 0x5, 'syz0\x00', "6edee7e0629b97e3c748bf62e906cef41c7df4c1ee4cd24c197e6af86a3b2b58", "3ec514413b027348784471f19df8ab8af00356d21f42e7db2441bb29a979485c", [{0x7, 0xc, {0x1, 0x7ff}}, {0x9, 0x2, {0x1, 0x80000001}}, {0x40, 0x6, {0x1, 0x1}}, {0xe, 0x400, {0x3, 0x2}}, {0x6, 0xff, {0xf934167115ff814d, 0x3}}, {0x8, 0x3, {0x0, 0x8}}, {0x5, 0xcfc, {0x0, 0x2}}, {0x6, 0x1, {0x1, 0x400}}, {0x4, 0x0, {0x0, 0x7}}, {0x5ec1, 0xfffc, {0x3, 0x1}}, {0x8, 0x101, {0x0, 0x14ef}}, {0x1ff, 0xffa7, {0x1, 0x7}}, {0xff22, 0x200, {0x3, 0x3}}, {0x3, 0x800, {0x1, 0x7}}, {0x1, 0x0, {0x1}}, {0x7fff, 0x579b, {0x3, 0xffffffff}}, {0x0, 0x6, {0x0, 0x2}}, {0x1aa, 0x8, {0x2, 0x7}}, {0x9, 0x6, {0x1}}, {0x40a, 0x3, {0x3, 0x3}}, {0x8001, 0x7f1, {0x2, 0x5}}, {0xfffb, 0x4, {0x2, 0x8}}, {0x19, 0x9, {0x1, 0x6}}, {0x100, 0x9, {0x2, 0xf7}}, {0x1000, 0xfffd, {0x3, 0x3ff}}, {0x5, 0x2, {0x2, 0x1}}, {0x1000, 0x5, {0x2, 0x6}}, {0x7, 0x0, {0x0, 0xeb}}, {0x0, 0x8}, {0x5, 0x8, {0x3}}, {0x4, 0x7, {0x1, 0x6dce5c7e}}, {0x5, 0x7, {0x1, 0x4}}, {0x0, 0x1a84, {0x1, 0x3}}, {0x31f, 0x4, {0x2, 0x6}}, {0x3b, 0x4, {0x2}}, {0xfffb, 0x9, {0x1, 0x4}}, {0x1ff, 0x5, {0x1, 0x7}}, {0x7, 0x0, {0x3, 0x5}}, {0x12f, 0x11, {0x2, 0x2}}, {0x0, 0x0, {0x3, 0x5}}]}}}, {{0x254, 0x1, {{0x7, 0x1}, 0x0, 0x5a, 0x9, 0x7, 0x0, 'syz0\x00', "e0caf50d588b60357f5581ba2cd5799b809dc9093b6c0310613aa26a294bc657", "c1ee1452334a60dfaf627822ffe3f9de372c95c769162444d2c180efa82eb19b", [{0x3df, 0x7, {0x2, 0x80}}, {0x0, 0x7, {0x3, 0x7f}}, {0x2, 0x9, {0x3, 0x3}}, {0x101, 0x8000, {0x1, 0x9}}, {0x5, 0x2, {0x0, 0x3}}, {0x3, 0x8001, {0x3, 0x126}}, {0x84, 0x4, {0x2, 0x7}}, {0x3, 0x7, {0x3, 0x5}}, {0xd4f, 0xb, {0x2}}, {0x8, 0x2, {0x1, 0x8}}, {0x3, 0xd494, {0x3, 0xfffffa5c}}, {0x1, 0x1000, {0x3, 0xf088}}, {0x1ff, 0x312, {0x1, 0x6}}, {0x1ff, 0x2, {0x1, 0x1}}, {0x4800, 0xff, {0x0, 0x9}}, {0x6, 0x2, {0x1, 0x3470}}, {0xac95, 0xff, {0x1, 0x9}}, {0xfd, 0x6, {0x2, 0x2}}, {0x2, 0xffff, {0x1, 0x80}}, {0x800, 0xe, {0x1, 0x8}}, {0x10, 0x3, {0x3, 0x3d59b9db}}, {0x7, 0x5, {0x0, 0x5e0}}, {0x4, 0xa, {0x0, 0x3479747b}}, {0x3ff, 0x2, {0x2, 0xfffffffb}}, {0x384, 0x7, {0x1, 0x9029}}, {0x4, 0x0, {0x3, 0x5}}, {0xfff5, 0x18, {0x0, 0x1}}, {0xffff, 0x1, {0x0, 0x384f}}, {0xffff, 0x7f, {0x0, 0x100}}, {0x7, 0x15, {0x2, 0x9}}, {0xc60, 0x80, {0x1, 0x9}}, {0x8, 0x4, {0x2, 0xc697}}, {0xf, 0xa3, {0x1, 0x7}}, {0x8, 0xa1, {0x2, 0x10001}}, {0x1, 0x7ff, {0x0, 0x8}}, {0x2, 0x7, {0x3, 0x5}}, {0x0, 0x8001, {0x3, 0x7}}, {0x100, 0x7, {0x2, 0x3}}, {0x8, 0x451a, {0x0, 0x5}}, {0x3, 0x9, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x3}, 0x9, 0x9, 0x5, 0x6, 0xc, 'syz1\x00', "8995bbcc1559971f9669d20bf30c250a2caeab88b9659747775b482bb67d4743", "1fb3b02283daa234bd50606b6684d19c1fdfe89be189e37c9e822669ca36b3b6", [{0xfff7, 0x1000, {0x2, 0x3}}, {0x7, 0x7, {0x3, 0xf6e}}, {0x0, 0x11d8, {0x3, 0x1}}, {0x0, 0x1, {0x2, 0x4}}, {0x3, 0xfffe, {0x3, 0xe260}}, {0xf1, 0x33, {0x2}}, {0x2, 0x3, {0x0, 0x7}}, {0xff18, 0x952c, {0x1, 0x10}}, {0x0, 0x6, {0x2, 0xffffffff}}, {0x8000, 0x55, {0x2, 0x8}}, {0x6, 0xb8, {0x3, 0x80000001}}, {0x4, 0xbfe, {0x3, 0xf2c8}}, {0x7, 0xdf4c, {0x3, 0x3ff}}, {0x1d, 0x3, {0x1, 0x8000}}, {0x7, 0x5, {0x0, 0x30dc}}, {0x3, 0xe, {0x0, 0x101}}, {0x63, 0x0, {0x2, 0x7}}, {0x9, 0x2, {0x3, 0xa}}, {0x2, 0xa, {0x1, 0xf1ed}}, {0x8001, 0xa, {0x0, 0x1}}, {0x0, 0x28f7, {0x0, 0x2}}, {0xc46, 0x63c9, {0x3, 0x313}}, {0xa, 0x5}, {0x6, 0x5000, {0x1, 0xc}}, {0x100, 0xffff, {0x1, 0x66f79db4}}, {0xb72a, 0x16c, {0x1, 0xf}}, {0x7, 0xa, {0x0, 0x4}}, {0xfff7, 0xf68, {0x2, 0x6e2}}, {0x101, 0x2, {0x3, 0xfffffffd}}, {0x3, 0x2, {0x2, 0x4}}, {0x200, 0x3, {0x2, 0xee7}}, {0x1, 0x5, {0x2, 0x7ff}}, {0x7ff, 0x0, {0x3, 0x9}}, {0xe385, 0xb, {0x2, 0xd6de}}, {0x8, 0x7, {0x1, 0x2}}, {0xe2c, 0x3}, {0x100, 0x401, {0x2, 0x26d}}, {0x8}, {0x6, 0x5, {0x3, 0x8}}, {0x8000, 0x10, {0x0, 0x80}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x98, 0xf, 0x5, 0x6, 0x26, 'syz0\x00', "a5c98ca4c5dc13b51e0fc319bc7853934bc35ececd93e8624a255a0ccd32e8dc", "c3265392ae4ded9368254315aefb86b947add438e888e022a5b6020c7368d750", [{0x1, 0x3ff, {0x0, 0x2}}, {0x1d57, 0xff, {0x1, 0x5}}, {0x92, 0x7, {0x1, 0x99}}, {0xc, 0xd44, {0x0, 0x9}}, {0x0, 0xff, {0x2, 0x9}}, {0x5, 0x2, {0x3, 0x3}}, {0xa, 0x8, {0x3, 0x7}}, {0x930a, 0x3ff, {0x0, 0x1}}, {0x1, 0x50, {0x0, 0x3}}, {0x50, 0x1000, {0x0, 0xb906}}, {0x1, 0x2, {0xd75c45e3a482092e, 0x7}}, {0xfffc, 0xeafa, {0x0, 0x2}}, {0x8, 0xfff, {0x3, 0x1}}, {0x463f, 0x3, {0x3, 0xd}}, {0x9, 0x7bd0, {0x0, 0x5}}, {0x0, 0xc69, {0x2, 0x6}}, {0x7fff, 0xfff, {0x3, 0xc0000000}}, {0x9, 0x9}, {0x6, 0x10, {0x2, 0x2}}, {0x7, 0x1, {0x1, 0x6}}, {0x3, 0x1800, {0x0, 0xf}}, {0x0, 0x4, {0x2, 0x6}}, {0x1000, 0x9, {0x2, 0x4}}, {0x794, 0x8, {0x2, 0x9}}, {0x6, 0x2, {0x2, 0x1}}, {0x8000, 0x84, {0x1, 0x2}}, {0xcb, 0x5, {0x2, 0x101}}, {0x9, 0x7f, {0x3, 0x3}}, {0x401, 0x7, {0x2}}, {0x1, 0x4, {0x0, 0xfffffffd}}, {0x5, 0x2a27, {0x0, 0x5}}, {0xfffc, 0x5, {0xdf32bf0135b5f458, 0xa}}, {0x2, 0x4, {0x1, 0xe}}, {0x100, 0x6, {0x2, 0xc1}}, {0x2, 0x3, {0x1, 0x1ff}}, {0x4000, 0xbab5, {0x1, 0x4}}, {0x777, 0x2, {0x2, 0x5}}, {0x6, 0x401, {0x0, 0x8}}, {0x7f, 0x2, {0x3, 0x3b}}, {0x2527, 0x1, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x1}, 0x3, 0x3, 0x848, 0x80, 0x20, 'syz1\x00', "11b3f039021bfea47fa87bc153cf386d920cf718a82cfa0a03182c3cda912a34", "0f0b228e37fd1714713b74bfc19cdc7feb84f603b11b470535a5668c3d39db09", [{0x80, 0x1, {0x3, 0x2}}, {0x3, 0x400, {0x0, 0x19}}, {0x8, 0xfb3e, {0x2, 0x7fff0000}}, {0x3, 0x9, {0x1, 0x8000}}, {0x0, 0x3, {0x2, 0x5}}, {0x3, 0x100, {0x0, 0x6}}, {0x9, 0x7, {0x3, 0xd}}, {0x2, 0x1, {0x2, 0x81}}, {0xf, 0x0, {0x1, 0x3}}, {0x8, 0x8a, {0x1}}, {0x6, 0x60, {0x3, 0x79}}, {0x17, 0xfffd, {0x2, 0x3adeb2b2}}, {0x48, 0x40, {0x0, 0xa}}, {0x200, 0xf3d0, {0x0, 0xc}}, {0x6100, 0x2, {0x1, 0xdeeb}}, {0x1, 0x1, {0x0, 0xc}}, {0x7f, 0x10, {0x3, 0x80000001}}, {0x0, 0x81, {0x2, 0x40}}, {0x8, 0x800, {0x3, 0x2f1}}, {0x0, 0x8, {0x1, 0x2}}, {0x1, 0x107, {0x3}}, {0x7610, 0x5, {0x3, 0x9}}, {0xa46, 0x89b, {0x2, 0x6}}, {0x0, 0x4, {0x2, 0xfffffffb}}, {0xd1, 0x3, {0x2}}, {0x4, 0x6, {0x2}}, {0x3, 0x0, {0x3, 0x6}}, {0x3, 0x1, {0x0, 0x6}}, {0x37e, 0x4, {0x3, 0x6a7543de}}, {0x3, 0x7, {0x2, 0x1ff}}, {0x389b, 0x1, {0x3}}, {0xe6b, 0x2, {0x3, 0x8}}, {0xff, 0x400, {0x1, 0x7}}, {0x4, 0x5, {0x2, 0x3}}, {0x2, 0x8000, {0x0, 0xed65}}, {0x8, 0x27, {0x1, 0x8}}, {0x1, 0x0, {0x1, 0x10}}, {0x0, 0xe4, {0x1, 0x8c}}, {0x2, 0x40, {0x3, 0x9}}, {0xffff, 0x3, {0x3, 0x4}}]}}}]}, 0x12b4}, 0x1, 0x0, 0x0, 0x840}, 0x4000) r6 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7b, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000200)={0x3, @pix_mp={0x3, 0x7, 0x47524247, 0x9, 0x6, [{0xf7164c60, 0x7}, {0x800, 0x80000000}, {0xfff, 0x17c}, {0x4, 0x8}, {0x80000000, 0x5}, {0xfffffff9, 0x376a}, {0x3, 0xce1}, {0x0, 0x5}], 0xd7, 0x8, 0x3, 0x2, 0x1}}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 2.995258892s ago: executing program 2 (id=1981): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2e9b00, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="640000001900010000000000fbdbdf251d"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000030000000000000000000000050000000000000000000000000000000000000000000000000000000000000005"]) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') rmdir(&(0x7f00000000c0)='./file0\x00') chdir(&(0x7f0000000280)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) fallocate(r5, 0x1, 0x9, 0x81) syz_clone(0x2000000, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x18, 0x0, &(0x7f0000000040)=0x5b) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x1c) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 2.994979929s ago: executing program 2 (id=1982): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r0, 0x110, 0x4, 0x0, 0x0) eventfd2(0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05", @ANYRES16=r1, @ANYRES16, @ANYRES16], 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 2.78478348s ago: executing program 2 (id=1983): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f00000000c0)={&(0x7f0000000000)="5307f4526a35e2fb903ef63d1cccc6e207a212c2d6c2610e88041b9d4c47c27514eab61cfbb576a5b7118c3e4354524d40196d4d094564a69f83faac89c8", 0x3e, &(0x7f0000000040)=""/117, 0x75}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 2.606327588s ago: executing program 33 (id=1983): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$BLKCRYPTOIMPORTKEY(r0, 0xc0401289, &(0x7f00000000c0)={&(0x7f0000000000)="5307f4526a35e2fb903ef63d1cccc6e207a212c2d6c2610e88041b9d4c47c27514eab61cfbb576a5b7118c3e4354524d40196d4d094564a69f83faac89c8", 0x3e, &(0x7f0000000040)=""/117, 0x75}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 2.602595279s ago: executing program 4 (id=1985): r0 = syz_open_dev$video(&(0x7f0000000640), 0x7, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x5}) (async) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000)={0x5}) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x11, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x1) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000040)=0x1000) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000100)=[0x87c, 0x5dd]) fsetxattr$trusted_overlay_upper(r5, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x51, 0x4, 0x6, "8c7e138694b8b0cd91b36ac102d38623", "d0eaab27d130b2a3330b7d2949b8deadfb542edcc27c86199be3e766fc756a865ff77c8be1032a898713837e957c8fc59fd21261d10065e13bc59206"}, 0x51, 0x3) (async) fsetxattr$trusted_overlay_upper(r5, &(0x7f00000001c0), &(0x7f0000000200)={0x0, 0xfb, 0x51, 0x4, 0x6, "8c7e138694b8b0cd91b36ac102d38623", "d0eaab27d130b2a3330b7d2949b8deadfb542edcc27c86199be3e766fc756a865ff77c8be1032a898713837e957c8fc59fd21261d10065e13bc59206"}, 0x51, 0x3) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRESDEC=r5], 0x30}}, 0x20008800) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES8=r5, @ANYRESDEC=r5], 0x30}}, 0x20008800) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 2.463088069s ago: executing program 4 (id=1986): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x57789000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x2, 0x4, 0x9, 0x68, 0x3, 0x9}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x3c, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa0100fe, @remote}, {0x4f20, 0x4e22, 0x4d, 0x0, @gue={{0x2, 0x0, 0x3, 0x2, 0x0, @val=0x80}, "6279cb22459ff50866ff829694a603d3c443eead410baf7b35c112fa17932138ee8f6a6d2afdde33d5a4ff97f976b3ac6d8c10e10601d52cd3b5a4a38a"}}}}, 0x6f) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.876891756s ago: executing program 4 (id=1987): r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x0, 0x12, r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x28, 0x5, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x42, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)={0x1}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x127, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x8, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 1.499403971s ago: executing program 3 (id=1989): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='jfs\x00', 0xe0000, 0x0) 1.467022126s ago: executing program 3 (id=1990): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xdcc3b000) syz_open_procfs(0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r1, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/144, 0x90}], 0x1, 0x800, 0xfffffc00) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.265139504s ago: executing program 3 (id=1991): openat$pidfd(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) lseek(0xffffffffffffffff, 0x9279, 0x1) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6e40c2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0xdcc3b000) syz_open_procfs(0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000009c0), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @remote}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) execve(0x0, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x0, @local}, 0x2}}, 0x26) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd60000400000005000008000c00a80a000008000b0000000000060001000700"/46], 0x34}}, 0x20) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x81, 0x0) ioctl$BLKZEROOUT(r8, 0x127f, &(0x7f0000000240)={0x0, 0x1000000}) r9 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r9) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r10) r11 = syz_open_dev$radio(&(0x7f0000000140), 0x2, 0x2) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESOCT=r11]) 1.096243151s ago: executing program 3 (id=1992): syz_open_dev$vcsu(&(0x7f0000001340), 0x1ff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x1ea) r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x1fb, 0x10001, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffd, 0x1fd, 0x9, 0x2c, 0x49200000, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ad0b19196c79eb5}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 1.007393578s ago: executing program 4 (id=1993): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x20010, r0, 0x725b0000) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000551000/0x400000)=nil) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000080)={0xbf7, 0xffffffff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) pause() mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000012040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000011fc0)=ANY=[]) setresgid(0xee00, 0x0, 0x0) faccessat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', 0x2) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) 735.273116ms ago: executing program 1 (id=1994): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffcc835d9d4affffff"], 0x24}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000340)='net/nfsfs\x00') getdents64(r3, &(0x7f0000000380)=""/190, 0xbe) getdents(r3, 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='pids.events\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83ba000) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(r6) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 575.100598ms ago: executing program 1 (id=1995): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'tunl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09", 0xf, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0)='./cgroup/syz0\x00', 0x1ff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2$watch_queue(0x0, 0x80) add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffffe) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000480), 0x4000, 0x0) r4 = socket(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000140)={0xa, 0xe64, 0xb, @ipv4={'\x00', '\xff\xff', @empty}, 0x1}, 0x1c) r5 = socket(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0xe64, 0xffffff01, @loopback, 0xc3}, 0x1c) ioctl$DRM_IOCTL_ADD_MAP(r3, 0xc0286415, &(0x7f0000000880)={&(0x7f0000576000/0x3000)=nil, 0x100000003, 0x1, 0xdc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x93774000) r6 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xeef, 0xa001, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x40, 0x2, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x87a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0x9, 0x8}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x96, 0x3, 0x9}}]}}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x9, 0xde, 0xb2, 0x20, 0x10}, 0x23, &(0x7f0000000180)={0x5, 0xf, 0x23, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x8, 0x5, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "4e67a97f85225274113407c61a043131"}]}, 0x2, [{0x2a, &(0x7f00000001c0)=@string={0x2a, 0x3, "e4b46f74492426b5dc3cf97e97337fa522c0d57a2671dba35ef15dbcce844ac9fc816160aa7b05ef"}}, {0xf0, &(0x7f0000000200)=@string={0xf0, 0x3, "27d2f920ea23d53c87218dffc71355d9991a18df502d1f55bec0e59c88b65536c2bdacf685c6fd46aa66aa991d9913ad51e89495cd28178b63791e5f850084dd808a66b7654184454f5e6f6979d565d2a5910210472d3101d71797583110e0606a8ab66daf16dd3627676017f759b03dbe59d515b73af3eb8483106eba35852ca137986193b6b8ddb94271e69c24eec834654f0553403dd7f2b697f616e4de5b682009cacecf5a7e6585bc52f42b60955c9879985bcee1566512efd75eb595cd3fbc0e80c066fb2e6475b44466742c61b379c16390fd8612118fc0b4b96387c8aae56cca683f08d6ed50c6c383ce"}}]}) syz_usb_control_io$hid(r6, &(0x7f0000000500)={0x24, &(0x7f0000000340)={0x40, 0x10, 0xe4, {0xe4, 0xf, "c11c11c6851e41ceb9431cc5c908b95976d1354e48f5a9d68a0630c31f422c6b06ef5e7783b0a3308bebacfdf9dc66b413e84c773219b05dc3a4b858524dfe66eb38ea08d952587f18c6e3cfce29147965ecd1194c2c215b2505035e868492fd0cc5aa3c2323d8a885bc9418b204bb7ef6b598da30db491e07dfb8453665ebe0cb772bc2012ec19df3af3e48ebf55e5a6543f87ec0dac67d8e7cc919ac85f209d0aff05d668cdc278a5d5b69737ea9e24c9017a381da057992dcf3740e023e1b0303d8b17bd1267214d6360d2442537e4d09dce17f3d8b6c2cd147a7c5f0e7b3c0dc"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x860}}, &(0x7f0000000840)={0x0, 0x22, 0x21, {[@global=@item_4={0x3, 0x1, 0x9, "95c3586c"}, @main=@item_012={0x0, 0x0, 0xa}, @local=@item_4={0x3, 0x2, 0xa, "de3837ff"}, @main=@item_4={0x3, 0x0, 0x9, "9b347899"}, @local=@item_4={0x3, 0x2, 0x9, "58a0bd07"}, @main=@item_4={0x3, 0x0, 0x9, "5cee0030"}, @global=@item_4={0x3, 0x1, 0x3, "04e3e9d7"}, @global=@item_012={0x1, 0x1, 0x8, 'F'}]}}, &(0x7f00000004c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x3, 0x1, {0x22, 0x82b}}}}, &(0x7f0000000800)={0x2c, &(0x7f0000000540)={0x40, 0x3, 0xec, "a4fb6a427996696a591dce083a7d3ca3ac1da12d22f485b279d6de4a133dc85f0df9ea18ba2416110ec34970d3dfe4ccfa5dbf441f16dcfde643ee1158989bd2c0388b988db33f21b68d7953de136d02fdc6ba5e112de0f2f3ebcebf40fc75d8198feb6fbcabf52545f142a96ff4b5e66a6f98371a44ae9db7e4ccb3b81b1910e2d719dd4f1177b90199c75d249922bfebca7d476123e696dfb0bdf15305755c51568c9674575669b596ec944eac595c6ea305ca6433081f96194708260b99c459e75527cf186d9e05da987c19e0a70cb8058134c9133e1b7524588ad634a115ddf385c1680b9f5e586e5e50"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0xf9}, &(0x7f00000006c0)={0x20, 0x1, 0xe6, "f7e4e30d82ad56b1e7f8f3afae77250d9d47651b769c27ac0d720482156852f934bd4e66881adf36518be5983e0acb23ddb0fe76b267e74b4397d2eafae1dded5dea39ccb6e5478ae1a0451bdf5c6cc8810e645d460ee35c63401370d439689134d2d5c905dd2da2047d180d99372a51ba9f0b74a19a1abdad0caf5b346d30e6a103d438ae652a4a5eb5a9c178b7646abebd88cb096e4863f505da6ed2237517703f702939636ca583c0f3ffd90beeb3fb0d56094e0dcd27b309892d8d76dad840139cb6353deee1903691054fc75c092ebce7e81d9cf95f74e8f123f08184a3c97ecf01a3b9"}, &(0x7f00000007c0)={0x20, 0x3, 0x1, 0x7e}}) 258.189435ms ago: executing program 3 (id=1996): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xd83ba000) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x8) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8800) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 3 (id=1997): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xffffffffffffffff, 0x580000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mremap(&(0x7f0000155000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000416000/0x3000)=nil) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x3}, 0x4) sendfile(r0, r0, 0x0, 0x7ffff000) kernel console output (not intermixed with test programs): fr=0, Product=0, SerialNumber=3 [ 291.582394][ T2151] usb 3-1: SerialNumber: syz [ 291.796668][ T2151] usb 3-1: 0:2 : does not exist [ 291.822045][ T2151] usb 3-1: USB disconnect, device number 75 [ 291.855394][ T9828] udevd[9828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.611243][ T6005] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 292.772547][ T6005] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.784685][ T6005] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 292.891260][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.901784][ T6005] usb 1-1: config 0 descriptor?? [ 293.328587][ T6005] waterforce 0003:1044:7A4D.0018: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.0-1/input0 [ 293.411400][ T6005] waterforce 0003:1044:7A4D.0018: fw version request failed with -38 [ 293.530556][T10534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.543041][T10534] netlink: 'syz.3.1436': attribute type 4 has an invalid length. [ 293.937958][ T6005] usb 1-1: USB disconnect, device number 105 [ 294.836129][T10556] /dev/rnullb0: Can't open blockdev [ 295.131246][ T10] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 295.281717][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 295.299577][ T10] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 295.318577][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.328755][ T10] usb 3-1: Product: syz [ 295.333204][ T10] usb 3-1: Manufacturer: syz [ 295.337922][ T10] usb 3-1: SerialNumber: syz [ 295.346646][ T10] usb 3-1: config 0 descriptor?? [ 295.357176][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 296.501732][ T120] usb 2-1: new full-speed USB device number 107 using dummy_hcd [ 296.570732][T10558] /dev/rnullb0: Can't open blockdev [ 296.578928][ T10] gspca_ov534_9: reg_w failed -71 [ 296.652375][ T120] usb 2-1: device descriptor read/64, error -71 [ 296.871349][ T10] gspca_ov534_9: Unknown sensor 0000 [ 296.871419][ T10] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 296.887848][ T10] usb 3-1: USB disconnect, device number 76 [ 296.896267][ T120] usb 2-1: new full-speed USB device number 108 using dummy_hcd [ 297.031239][ T120] usb 2-1: device descriptor read/64, error -71 [ 297.115626][T10589] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 297.142836][ T120] usb usb2-port1: attempt power cycle [ 297.171266][ T6005] usb 1-1: new low-speed USB device number 106 using dummy_hcd [ 297.322931][ T6005] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.347432][ T6005] usb 1-1: config 0 has no interface number 0 [ 297.354727][ T6005] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 297.368651][ T6005] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 297.380985][ T6005] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 297.390791][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.405828][ T6005] usb 1-1: config 0 descriptor?? [ 297.420337][T10587] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 297.448029][ T6005] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 297.449123][T10602] /dev/rnullb0: Can't lookup blockdev [ 297.492232][ T120] usb 2-1: new full-speed USB device number 109 using dummy_hcd [ 297.514971][ T120] usb 2-1: device descriptor read/8, error -71 [ 297.647698][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 297.656814][ T10] usb 1-1: USB disconnect, device number 106 [ 297.761330][ T120] usb 2-1: new full-speed USB device number 110 using dummy_hcd [ 297.783071][ T120] usb 2-1: device descriptor read/8, error -71 [ 297.901471][ T120] usb usb2-port1: unable to enumerate USB device [ 298.101240][ T6005] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 298.233813][ T5186] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 298.251642][ T6005] usb 1-1: Using ep0 maxpacket: 8 [ 298.258784][ T6005] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.266897][ T6005] usb 1-1: config 0 has no interface number 0 [ 298.273205][ T6005] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 298.284105][ T6005] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 298.293217][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.303306][ T6005] usb 1-1: config 0 descriptor?? [ 298.311090][ T6005] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 298.481235][ T120] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 298.621276][ T120] usb 3-1: device descriptor read/64, error -71 [ 298.861265][ T120] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 298.991234][ T120] usb 3-1: device descriptor read/64, error -71 [ 299.111785][ T120] usb usb3-port1: attempt power cycle [ 299.345128][T10630] /dev/rnullb0: Can't open blockdev [ 299.355517][ T30] audit: type=1800 audit(1755532729.104:19): pid=10636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1474" name="nullb0" dev="tmpfs" ino=1761 res=0 errno=0 [ 299.461407][ T120] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 299.491633][ T120] usb 3-1: device descriptor read/8, error -71 [ 299.567918][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1480'. [ 299.637147][T10663] batadv_slave_1: entered promiscuous mode [ 299.716639][T10666] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1484'. [ 299.727028][T10666] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1484'. [ 299.731256][ T120] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 299.744228][T10666] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 299.772080][ T120] usb 3-1: device descriptor read/8, error -71 [ 299.881917][ T120] usb usb3-port1: unable to enumerate USB device [ 300.232171][ T6005] usb 1-1: USB disconnect, device number 107 [ 300.483337][T10662] batadv_slave_1: left promiscuous mode [ 300.490794][T10677] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 300.606629][T10682] /dev/rnullb0: Can't open blockdev [ 300.635611][T10684] /dev/rnullb0: Can't open blockdev [ 300.720063][T10695] /dev/rnullb0: Can't open blockdev [ 300.951249][ T6005] usb 1-1: new low-speed USB device number 108 using dummy_hcd [ 300.991396][ T5927] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 301.102716][ T6005] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 301.110794][ T6005] usb 1-1: config 0 has no interface number 0 [ 301.116984][ T6005] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 301.128851][ T6005] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 301.139684][ T6005] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 301.148766][ T6005] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.156822][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 301.164996][ T6005] usb 1-1: config 0 descriptor?? [ 301.170461][T10693] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 301.170936][ T5927] usb 2-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 301.187893][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 32695, setting to 1024 [ 301.200665][ T5927] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 301.212458][ T6005] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 301.224464][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.239647][ T5927] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 301.248825][ T5927] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 301.256864][ T5927] usb 2-1: Manufacturer: syz [ 301.268400][ T5927] usb 2-1: config 0 descriptor?? [ 301.275080][T10697] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 301.298589][T10699] /dev/rnullb0: Can't open blockdev [ 301.391128][ T120] usb 1-1: USB disconnect, device number 108 [ 301.397213][ C0] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 302.134164][T10707] fuse: Bad value for 'user_id' [ 302.139230][T10707] fuse: Bad value for 'user_id' [ 302.148200][T10707] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1498'. [ 302.290637][T10713] comedi comedi1: pcl730: I/O port conflict (0x4f27,4) [ 302.446118][T10720] /dev/rnullb0: Can't open blockdev [ 302.479271][T10721] /dev/rnullb0: Can't open blockdev [ 302.900020][T10733] nfs4: Unknown parameter 'afs' [ 302.907708][T10733] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1506'. [ 303.436371][T10739] /dev/rnullb0: Can't open blockdev [ 303.486841][T10741] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 303.644256][ T5948] hid_parser_main: 159 callbacks suppressed [ 303.644348][ T5948] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 303.668903][ T5948] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 303.757407][ T120] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 303.923420][ T120] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 303.942328][ T120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.952953][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 303.968375][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.975910][ T5987] usb 2-1: USB disconnect, device number 111 [ 303.978198][ T120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 303.997473][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 304.010064][T10763] 9pnet_fd: p9_fd_create_tcp (10763): problem binding to privport [ 304.027099][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.030217][T10765] /dev/rnullb0: Can't open blockdev [ 304.044117][ T120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.051817][T10765] /dev/rnullb0: Can't open blockdev [ 304.060509][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 304.074997][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.082576][ T120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.090097][T10770] overlayfs: failed to clone upperpath [ 304.099283][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 304.110556][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.119444][ T120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.128447][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 304.139539][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.150138][ T120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.159097][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 304.171772][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.180548][ T120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.194964][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 304.208335][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.217382][ T120] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.227697][ T120] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 304.241001][ T120] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.250104][ T120] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 304.260401][ T120] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 304.268886][ T120] usb 3-1: Product: syz [ 304.274226][ T120] usb 3-1: Manufacturer: syz [ 304.278832][ T120] usb 3-1: SerialNumber: syz [ 304.290394][ T120] usb 3-1: config 0 descriptor?? [ 304.306404][ T120] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 304.391267][ T5987] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 304.531915][ T5987] usb 2-1: device descriptor read/64, error -71 [ 304.552012][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 304.569682][ T120] usb 3-1: USB disconnect, device number 81 [ 304.576976][ T120] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 304.733848][ T5871] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 304.741108][ T5871] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 304.748475][ T5871] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 304.757918][ T5871] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 304.765452][ T5871] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 304.772558][ T5987] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 304.893617][T10781] chnl_net:caif_netlink_parms(): no params data found [ 304.921386][ T5987] usb 2-1: device descriptor read/64, error -71 [ 304.952049][T10781] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.959149][T10781] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.966769][T10781] bridge_slave_0: entered allmulticast mode [ 304.973734][T10781] bridge_slave_0: entered promiscuous mode [ 304.981088][T10781] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.988214][T10781] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.995906][T10781] bridge_slave_1: entered allmulticast mode [ 305.002999][T10781] bridge_slave_1: entered promiscuous mode [ 305.029972][T10781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.039224][ T5987] usb usb2-port1: attempt power cycle [ 305.047180][T10781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.077341][T10781] team0: Port device team_slave_0 added [ 305.086372][T10781] team0: Port device team_slave_1 added [ 305.109198][T10781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.118466][T10781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.145154][T10781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.157134][T10781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.164121][T10781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.190113][T10781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.234886][T10781] hsr_slave_0: entered promiscuous mode [ 305.244611][T10781] hsr_slave_1: entered promiscuous mode [ 305.250777][T10781] debugfs: 'hsr0' already exists in 'hsr' [ 305.257252][T10781] Cannot create hsr debugfs directory [ 305.340128][T10781] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 305.348853][T10781] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 305.358275][T10781] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 305.369851][T10781] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 305.392943][T10781] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.400130][T10781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.407511][T10781] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.414638][T10781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.432349][ T5987] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 305.469398][ T5987] usb 2-1: device descriptor read/8, error -71 [ 305.494383][T10781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.508522][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.516349][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.530262][T10781] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.548585][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.555720][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.569067][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.576226][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.618232][T10814] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1534'. [ 305.721291][ T5987] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 305.724706][T10781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.743705][ T5987] usb 2-1: device descriptor read/8, error -71 [ 305.851647][ T5987] usb usb2-port1: unable to enumerate USB device [ 305.881097][T10781] veth0_vlan: entered promiscuous mode [ 305.890442][T10781] veth1_vlan: entered promiscuous mode [ 305.901466][ T5948] usb 3-1: new low-speed USB device number 82 using dummy_hcd [ 305.918921][T10781] veth0_macvtap: entered promiscuous mode [ 305.928392][T10781] veth1_macvtap: entered promiscuous mode [ 305.943434][T10781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.955209][T10781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.966656][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.976103][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.988911][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.998154][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.046494][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.064697][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.072302][ T5948] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.082357][ T5948] usb 3-1: config 0 has no interface number 0 [ 306.088751][ T5948] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 306.107907][ T5948] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 306.113404][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.119576][ T5948] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 306.128569][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.137843][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.192800][ T5948] usb 3-1: config 0 descriptor?? [ 306.207722][T10818] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 306.219928][T10834] No control pipe specified [ 306.241719][ T5948] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 306.302649][T10832] tmpfs: Cannot retroactively limit inodes [ 306.433075][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.443768][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.454544][ T2151] usb 3-1: USB disconnect, device number 82 [ 306.454566][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 306.793106][T10861] bridge0: port 3(hsr_slave_1) entered blocking state [ 306.800015][T10861] bridge0: port 3(hsr_slave_1) entered disabled state [ 306.806913][ T5186] Bluetooth: hci0: command tx timeout [ 306.813265][T10861] hsr_slave_1: entered allmulticast mode [ 306.819606][T10861] hsr_slave_1: left allmulticast mode [ 306.942185][T10868] /dev/rnullb0: Can't open blockdev [ 307.139905][T10872] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 307.147821][T10873] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 307.421264][ T5987] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 307.583336][ T5987] usb 5-1: config 9 has an invalid interface number: 88 but max is 1 [ 307.601809][ T5987] usb 5-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 307.622260][ T5987] usb 5-1: config 9 has an invalid interface number: 151 but max is 1 [ 307.639363][ T5987] usb 5-1: config 9 has an invalid descriptor of length 1, skipping remainder of the config [ 307.657878][ T5987] usb 5-1: config 9 has no interface number 0 [ 307.665189][ T5987] usb 5-1: config 9 has no interface number 1 [ 307.671407][ T5987] usb 5-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 307.683550][ T5987] usb 5-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 307.694491][ T5987] usb 5-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 307.706284][ T5987] usb 5-1: too many endpoints for config 9 interface 151 altsetting 38: 131, using maximum allowed: 30 [ 307.721411][ T8793] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 307.724532][ T5987] usb 5-1: config 9 interface 151 altsetting 38 has 0 endpoint descriptors, different from the interface descriptor's value: 131 [ 307.755628][ T5987] usb 5-1: config 9 interface 88 has no altsetting 0 [ 307.762789][ T5987] usb 5-1: config 9 interface 151 has no altsetting 0 [ 307.771557][ T5987] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 307.784310][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.801196][ T5987] usb 5-1: Product: syz [ 307.805442][ T5987] usb 5-1: Manufacturer: syz [ 307.810056][ T5987] usb 5-1: SerialNumber: syz [ 307.885747][ T8793] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 307.895533][ T8793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.910806][ T8793] usb 3-1: Product: syz [ 307.924812][ T8793] usb 3-1: Manufacturer: syz [ 307.939628][ T8793] usb 3-1: SerialNumber: syz [ 307.949030][ T8793] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 307.965317][ T10] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 308.379484][T10883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1554'. [ 308.653832][ T5987] qmi_wwan 5-1:9.88: skipping garbage [ 308.670386][ T5987] qmi_wwan 5-1:9.88: probe with driver qmi_wwan failed with error -22 [ 308.708222][ T5987] usb 5-1: USB disconnect, device number 2 [ 308.891286][ T5186] Bluetooth: hci0: command tx timeout [ 309.181446][ T8793] usb 3-1: USB disconnect, device number 83 [ 309.191373][ T10] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 309.198350][ T10] ath9k_htc: Failed to initialize the device [ 309.214588][ T8793] usb 3-1: ath9k_htc: USB layer deinitialized [ 309.472523][ T30] audit: type=1804 audit(1755532739.224:20): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1566" name="rnullb0" dev="tmpfs" ino=1380 res=1 errno=0 [ 309.561507][ T5948] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 309.711608][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 309.727376][ T5948] usb 5-1: too many configurations: 216, using maximum allowed: 8 [ 309.742931][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 309.760962][ T5948] usb 5-1: can't read configurations, error -61 [ 309.901248][ T5948] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 310.061408][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 310.077277][ T5948] usb 5-1: too many configurations: 216, using maximum allowed: 8 [ 310.096778][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 310.111198][ T5948] usb 5-1: can't read configurations, error -61 [ 310.128519][ T5948] usb usb5-port1: attempt power cycle [ 310.471275][ T5948] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 310.503516][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 310.509209][ T5948] usb 5-1: too many configurations: 216, using maximum allowed: 8 [ 310.518635][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 310.527913][ T5948] usb 5-1: can't read configurations, error -61 [ 310.661282][ T5948] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 310.691707][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 310.697385][ T5948] usb 5-1: too many configurations: 216, using maximum allowed: 8 [ 310.712381][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 310.730164][ T5948] usb 5-1: can't read configurations, error -61 [ 310.736772][ T5948] usb usb5-port1: unable to enumerate USB device [ 310.961869][ T5186] Bluetooth: hci0: command tx timeout [ 311.441607][ T5987] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 311.611696][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.621985][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 311.634953][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 311.646552][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 311.656980][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 311.678119][ T5987] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 311.687995][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 311.697400][ T5987] usb 2-1: Product: syz [ 311.702187][ T5987] usb 2-1: Manufacturer: syz [ 311.706799][ T5987] usb 2-1: SerialNumber: syz [ 311.714364][ T5987] usb 2-1: config 0 descriptor?? [ 311.922412][ T5987] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 311.929221][ T5987] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 312.018184][ T2940] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.050272][T10959] /dev/rnullb0: Can't open blockdev [ 312.058751][T10959] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1578'. [ 312.070104][ T2940] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.083726][T10959] IPVS: Error joining to the multicast group [ 312.125143][ T5987] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 312.139472][ T5987] radio-si470x 2-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 312.140331][ T2940] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.159652][ T5987] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 312.171892][ T5987] usb 2-1: USB disconnect, device number 116 [ 312.247093][ T2940] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.337885][T10949] syz.1.1573: attempt to access beyond end of device [ 312.337885][T10949] loop1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 312.359203][T10949] gfs2: error -5 reading superblock [ 312.405048][ T2940] bridge_slave_1: left allmulticast mode [ 312.414545][ T2940] bridge_slave_1: left promiscuous mode [ 312.422834][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.441634][ T2940] bridge_slave_0: left allmulticast mode [ 312.447383][ T2940] bridge_slave_0: left promiscuous mode [ 312.477892][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.480828][T10972] netlink: 'syz.3.1584': attribute type 2 has an invalid length. [ 312.688366][ T2940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.718169][ T2940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.742888][ T2940] bond0 (unregistering): Released all slaves [ 312.754488][T10994] fuse: Bad value for 'group_id' [ 312.759454][T10994] fuse: Bad value for 'group_id' [ 312.772296][T10994] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1592'. [ 312.800133][T10996] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 312.952147][ T8793] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 313.041362][ T5186] Bluetooth: hci0: command tx timeout [ 313.092087][ T2940] hsr_slave_0: left promiscuous mode [ 313.126581][ T8793] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 313.142805][ T2940] hsr_slave_1: left promiscuous mode [ 313.160395][ T8793] usb 5-1: config 0 has no interface number 0 [ 313.189676][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.328733][ T2940] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.347604][ T8793] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 313.367741][ T2940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.376486][ T8793] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 313.392993][ T8793] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.413763][ T8793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.477817][ T2940] veth1_macvtap: left promiscuous mode [ 313.501409][ T2940] veth0_macvtap: left promiscuous mode [ 313.522167][ T2940] veth1_vlan: left promiscuous mode [ 313.541729][ T2940] veth0_vlan: left promiscuous mode [ 313.763045][ T8793] usb 5-1: config 0 descriptor?? [ 313.771709][T10992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 313.782716][ T8793] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 313.865855][ T2940] team0 (unregistering): Port device team_slave_1 removed [ 313.880646][T11035] program syz.1.1600 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 313.921665][ T2940] team0 (unregistering): Port device team_slave_0 removed [ 313.989117][ T8793] usb 5-1: USB disconnect, device number 7 [ 313.995008][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 315.021422][ T8793] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 315.174231][ T8793] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 315.182613][ T8793] usb 3-1: config 0 has no interface number 0 [ 315.194639][ T8793] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 315.204683][ T8793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.212845][ T5948] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 315.220658][ T8793] usb 3-1: Product: syz [ 315.226689][ T8793] usb 3-1: Manufacturer: syz [ 315.231606][ T8793] usb 3-1: SerialNumber: syz [ 315.247320][ T8793] usb 3-1: config 0 descriptor?? [ 315.383397][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 315.392423][ T5948] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 315.429753][ T5948] usb 5-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.40 [ 315.463128][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.472915][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.480966][ T5948] usb 5-1: Product: syz [ 315.501736][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.524376][ T5948] usb 5-1: Manufacturer: syz [ 315.530292][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.547058][ T5948] usb 5-1: SerialNumber: syz [ 315.551484][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.576753][T11064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.592661][T11064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.747620][ T8793] usb 3-1: Found UVC 0.08 device syz (046d:0823) [ 315.756548][ T8793] usb 3-1: No valid video chain found. [ 315.785287][ T8793] usb 3-1: USB disconnect, device number 84 [ 315.856402][ T5948] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input44 [ 315.900070][ T5948] usb 5-1: USB disconnect, device number 8 [ 315.906467][ T5220] bcm5974 5-1:1.0: could not read from device [ 315.915341][ T30] audit: type=1326 audit(1755532745.654:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.4.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b278ebe9 code=0x7ffc0000 [ 315.952625][ T5220] bcm5974 5-1:1.0: could not read from device [ 316.007816][ T30] audit: type=1326 audit(1755532745.654:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.4.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b278ebe9 code=0x7ffc0000 [ 316.031826][ T9856] udevd[9856]: Error opening device "/dev/input/event4": No such device [ 316.036076][ T30] audit: type=1326 audit(1755532745.654:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="syz.4.1611" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f98b278ebe9 code=0x7ffc0000 [ 316.040759][ T9856] udevd[9856]: Unable to EVIOCGABS device "/dev/input/event4" [ 316.062825][ T30] audit: type=1326 audit(1755532745.654:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b278ebe9 code=0x7ffc0000 [ 316.096672][ T30] audit: type=1326 audit(1755532745.654:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b278ebe9 code=0x7ffc0000 [ 316.111561][ T9856] udevd[9856]: Unable to EVIOCGABS device "/dev/input/event4" [ 316.120092][ T30] audit: type=1326 audit(1755532745.654:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f98b278ebe9 code=0x7ffc0000 [ 316.148932][ T30] audit: type=1326 audit(1755532745.654:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b278ebe9 code=0x7ffc0000 [ 316.162409][ T9856] udevd[9856]: Unable to EVIOCGABS device "/dev/input/event4" [ 316.196311][T11122] ./file0: Can't lookup blockdev [ 316.204558][ T9856] udevd[9856]: Unable to EVIOCGABS device "/dev/input/event4" [ 316.223731][ T30] audit: type=1326 audit(1755532745.654:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98b278e7eb code=0x7ffc0000 [ 316.254240][ T30] audit: type=1326 audit(1755532745.654:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98b278ebe9 code=0x7ffc0000 [ 316.276843][ T30] audit: type=1326 audit(1755532745.654:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11119 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f98b278d550 code=0x7ffc0000 [ 316.527338][T11130] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.691671][ T5948] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 316.821281][ T8793] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 316.841700][ T5948] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 316.850215][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.859367][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.870325][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.877774][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.887396][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.899059][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.906518][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.915441][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.926357][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.933801][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.942738][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.953681][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.961133][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.970084][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 316.981041][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 316.988639][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 316.997913][ T8793] usb 5-1: config 9 has an invalid interface number: 12 but max is 0 [ 317.006052][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.016939][ T8793] usb 5-1: config 9 has no interface number 0 [ 317.023094][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.029785][ T8793] usb 5-1: config 9 interface 12 has no altsetting 0 [ 317.038373][ T8793] usb 5-1: New USB device found, idVendor=0c45, idProduct=6260, bcdDevice=85.87 [ 317.047555][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.056466][ T8793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.064529][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.077011][ T8793] usb 5-1: Product: syz [ 317.083774][ T8793] usb 5-1: Manufacturer: syz [ 317.088401][ T8793] usb 5-1: SerialNumber: syz [ 317.096955][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.105279][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 317.109952][T11139] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1619'. [ 317.114758][ T5948] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 317.134569][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.139182][ T5948] usb 3-1: config 0 interface 0 has no altsetting 0 [ 317.143103][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.159105][ T5948] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 317.169387][ T5948] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 317.185572][ T5948] usb 3-1: Product: syz [ 317.189983][ T5948] usb 3-1: Manufacturer: syz [ 317.191509][T11142] libceph: resolve '400' (ret=-3): failed [ 317.195902][ T5948] usb 3-1: SerialNumber: syz [ 317.211828][ T5948] usb 3-1: config 0 descriptor?? [ 317.233188][ T5948] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 317.420417][T11156] /dev/rnullb0: Can't lookup blockdev [ 317.449649][T11132] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1617'. [ 317.490721][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 317.493317][ T5927] usb 3-1: USB disconnect, device number 85 [ 317.524207][ T5927] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 317.708616][ T8793] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6260 [ 317.716005][ T8793] gspca_sn9c20x: Write register 1000 failed -71 [ 317.722709][ T8793] gspca_sn9c20x: Device initialization failed [ 317.728821][ T8793] gspca_sn9c20x 5-1:9.12: probe with driver gspca_sn9c20x failed with error -71 [ 317.743424][ T8793] usb 5-1: USB disconnect, device number 9 [ 317.911367][ T5948] usb 2-1: new low-speed USB device number 117 using dummy_hcd [ 318.062830][ T5948] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.070876][ T5948] usb 2-1: config 0 has no interface number 0 [ 318.077311][ T5948] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 318.088332][ T5948] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 318.099162][ T5948] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 318.108254][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.119170][ T5948] usb 2-1: config 0 descriptor?? [ 318.124826][T11167] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 318.136153][ T5948] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 318.296890][T11177] /dev/rnullb0: Can't open blockdev [ 318.341040][ T5948] usb 2-1: USB disconnect, device number 117 [ 318.347136][ C0] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 318.748270][T11202] /dev/rnullb0: Can't open blockdev [ 318.887460][T11210] /dev/rnullb0: Can't open blockdev [ 319.051362][ T5927] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 319.110424][T11223] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 319.130848][T11223] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 319.139560][T11223] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 319.154984][T11223] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 319.166957][T11223] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 319.235897][ T5927] usb 3-1: not running at top speed; connect to a high speed hub [ 319.247360][ T5927] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 319.259575][ T5927] usb 3-1: config 1 interface 0 altsetting 4 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 319.275687][ T5927] usb 3-1: config 1 interface 0 has no altsetting 0 [ 319.285551][ T5927] usb 3-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.40 [ 319.298793][T11229] /dev/rnullb0: Can't open blockdev [ 319.307385][T11229] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 319.311461][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.331216][ T5927] usb 3-1: Product: 㘙뷟䑓쥝踿禓ﲸ䎢◥᢭䌜핣⅃鮷쩍ᘛ궿멚瘙④츀ﭟẨ༇䶼啨ꀼ틢˾跸塼घꀨ嫌呡첰臷쩔਻⹽機쒛◓˭圜ነ浑苴౺젾藫韓螩棛ᛯ௣涱灝ꨙߙ莇৭鋄깘蜍鍵ज罴﮹ꚬ薧훸셀宔 [ 319.362409][ T5927] usb 3-1: Manufacturer: ఠ㴦࡭俱Ձ跔購稟紕ൽ⫡䖄뻩첺䆕 [ 319.371046][ T5927] usb 3-1: SerialNumber: 痠盧귊 [ 319.379480][T11204] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 319.386816][ T6005] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 319.555097][ T6005] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 319.658323][ T6005] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 319.674711][ T6005] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 319.685074][ T6005] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 319.697009][ T6005] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 319.708081][ T5927] usbhid 3-1:1.0: can't add hid device: -71 [ 319.714380][ T5927] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 319.722357][ T6005] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 319.735411][ T5927] usb 3-1: USB disconnect, device number 86 [ 319.744060][ T6005] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 319.756821][ T6005] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 319.765058][ T6005] usb 5-1: Product: syz [ 319.769240][ T6005] usb 5-1: Manufacturer: syz [ 319.788345][ T6005] cdc_wdm 5-1:1.0: skipping garbage [ 319.796114][ T6005] cdc_wdm 5-1:1.0: skipping garbage [ 319.801430][ T6005] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 320.015622][T11225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.038422][T11225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.057968][T11225] /dev/rnullb0: Can't open blockdev [ 320.066792][ T5927] usb 5-1: USB disconnect, device number 10 [ 320.446474][T11246] /dev/rnullb0: Can't lookup blockdev [ 320.561354][ T5927] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 320.637646][T11270] netlink: 'syz.2.1663': attribute type 39 has an invalid length. [ 320.692502][ T5927] usb 2-1: device descriptor read/64, error -71 [ 320.703371][T11274] /dev/rnullb0: Can't open blockdev [ 320.717175][T11274] /dev/rnullb0: Can't open blockdev [ 320.735081][T11274] /dev/rnullb0: Can't open blockdev [ 320.750441][T11274] /dev/rnullb0: Can't open blockdev [ 320.756455][T11274] /dev/rnullb0: Can't open blockdev [ 320.762390][T11274] /dev/rnullb0: Can't open blockdev [ 320.768109][T11274] /dev/rnullb0: Can't open blockdev [ 320.775480][T11274] /dev/rnullb0: Can't open blockdev [ 320.785833][ T8793] IPVS: starting estimator thread 0... [ 320.796993][T11274] /dev/rnullb0: Can't open blockdev [ 320.803092][T11274] /dev/rnullb0: Can't open blockdev [ 320.808784][T11274] /dev/rnullb0: Can't open blockdev [ 320.815133][T11274] /dev/rnullb0: Can't open blockdev [ 320.822230][T11274] /dev/rnullb0: Can't open blockdev [ 320.827919][T11274] /dev/rnullb0: Can't open blockdev [ 320.834020][T11274] /dev/rnullb0: Can't open blockdev [ 320.839731][T11274] /dev/rnullb0: Can't open blockdev [ 320.848879][T11274] /dev/rnullb0: Can't open blockdev [ 320.856174][T11274] /dev/rnullb0: Can't open blockdev [ 320.862384][T11274] /dev/rnullb0: Can't open blockdev [ 320.868072][T11274] /dev/rnullb0: Can't open blockdev [ 320.869204][T11285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 320.876167][T11274] /dev/rnullb0: Can't open blockdev [ 320.882912][T11280] IPVS: using max 45 ests per chain, 108000 per kthread [ 320.889146][T11274] /dev/rnullb0: Can't open blockdev [ 320.902347][T11274] /dev/rnullb0: Can't open blockdev [ 320.907998][T11274] /dev/rnullb0: Can't open blockdev [ 320.913985][T11274] /dev/rnullb0: Can't open blockdev [ 320.919691][T11274] /dev/rnullb0: Can't open blockdev [ 320.925545][T11274] /dev/rnullb0: Can't open blockdev [ 320.931290][T11274] /dev/rnullb0: Can't open blockdev [ 320.937082][T11274] /dev/rnullb0: Can't open blockdev [ 320.944489][T11274] /dev/rnullb0: Can't open blockdev [ 320.950243][T11274] /dev/rnullb0: Can't open blockdev [ 320.955813][ T5927] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 320.987963][T11274] /dev/rnullb0: Can't open blockdev [ 321.005270][T11274] /dev/rnullb0: Can't open blockdev [ 321.021055][T11274] /dev/rnullb0: Can't open blockdev [ 321.039147][T11274] /dev/rnullb0: Can't open blockdev [ 321.057556][T11274] /dev/rnullb0: Can't open blockdev [ 321.078168][T11274] /dev/rnullb0: Can't open blockdev [ 321.096554][T11274] /dev/rnullb0: Can't open blockdev [ 321.111291][ T5927] usb 2-1: device descriptor read/64, error -71 [ 321.119641][T11274] /dev/rnullb0: Can't open blockdev [ 321.135084][T11274] /dev/rnullb0: Can't open blockdev [ 321.148941][T11274] /dev/rnullb0: Can't open blockdev [ 321.162564][T11274] /dev/rnullb0: Can't open blockdev [ 321.175658][T11274] /dev/rnullb0: Can't open blockdev [ 321.187125][T11274] /dev/rnullb0: Can't open blockdev [ 321.203045][T11274] /dev/rnullb0: Can't open blockdev [ 321.216580][T11274] /dev/rnullb0: Can't open blockdev [ 321.229131][T11274] /dev/rnullb0: Can't open blockdev [ 321.239056][ T5927] usb usb2-port1: attempt power cycle [ 321.261741][T11274] /dev/rnullb0: Can't open blockdev [ 321.280036][T11274] /dev/rnullb0: Can't open blockdev [ 321.305495][T11274] /dev/rnullb0: Can't open blockdev [ 321.326028][T11274] /dev/rnullb0: Can't open blockdev [ 321.344974][T11274] /dev/rnullb0: Can't open blockdev [ 321.363393][T11274] /dev/rnullb0: Can't open blockdev [ 321.382900][T11274] /dev/rnullb0: Can't open blockdev [ 321.404387][T11274] /dev/rnullb0: Can't open blockdev [ 321.426731][T11274] /dev/rnullb0: Can't open blockdev [ 321.444780][T11274] /dev/rnullb0: Can't open blockdev [ 321.456156][T11274] /dev/rnullb0: Can't open blockdev [ 321.591282][ T5927] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 321.635069][ T5927] usb 2-1: device descriptor read/8, error -71 [ 321.653492][T11295] /dev/rnullb0: Can't open blockdev [ 321.901946][ T5927] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 321.942899][ T5927] usb 2-1: device descriptor read/8, error -71 [ 322.040157][T11312] /dev/rnullb0: Can't lookup blockdev [ 322.053410][ T5927] usb usb2-port1: unable to enumerate USB device [ 322.535878][T11321] /dev/rnullb0: Can't open blockdev [ 322.835406][T11326] netlink: 'syz.4.1681': attribute type 19 has an invalid length. [ 322.859507][T11326] /dev/rnullb0: Can't open blockdev [ 322.918165][T11328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.966058][T11328] netlink: 54 bytes leftover after parsing attributes in process `syz.3.1683'. [ 323.233088][T11342] IPVS: set_ctl: invalid protocol: 59 100.1.1.0:20004 [ 323.315359][T11346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1688'. [ 323.649258][T11356] loop6: detected capacity change from 0 to 63 [ 323.669332][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.691442][T11356] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.709588][T11356] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.725208][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.739308][T11359] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.755154][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.781863][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.799970][T11362] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.819504][T11359] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.832239][T11356] Buffer I/O error on dev loop6, logical block 0, async page read [ 323.963515][T11368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.018226][T11368] netlink: 54 bytes leftover after parsing attributes in process `syz.4.1695'. [ 324.331296][ T6005] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 324.411229][ T5927] usb 2-1: new full-speed USB device number 122 using dummy_hcd [ 324.481237][ T6005] usb 3-1: Using ep0 maxpacket: 32 [ 324.486418][ T2151] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 324.495488][ T6005] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 324.507027][ T6005] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.518435][ T6005] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 324.527533][ T6005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.535564][ T6005] usb 3-1: Product: syz [ 324.539734][ T6005] usb 3-1: Manufacturer: syz [ 324.544403][ T6005] usb 3-1: SerialNumber: syz [ 324.550145][ T6005] usb 3-1: config 0 descriptor?? [ 324.558533][ T6005] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 324.566323][ T6005] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 324.575048][ T6005] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 324.583578][ T5927] usb 2-1: unable to get BOS descriptor or descriptor too short [ 324.591421][ T6005] keyspan 3-1:0.0: unsupported endpoint type 0 [ 324.597622][ T6005] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 324.605469][ T6005] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 324.613130][ T6005] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 324.620859][ T5927] usb 2-1: not running at top speed; connect to a high speed hub [ 324.628781][ T6005] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 324.637359][ T5927] usb 2-1: config 9 has an invalid interface number: 49 but max is 0 [ 324.645749][ T6005] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 324.653790][ T2151] usb 5-1: Using ep0 maxpacket: 16 [ 324.658935][ T5927] usb 2-1: config 9 has no interface number 0 [ 324.667106][ T5927] usb 2-1: config 9 interface 49 has no altsetting 0 [ 324.677910][ T2151] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 324.689328][ T5927] usb 2-1: New USB device found, idVendor=c251, idProduct=4003, bcdDevice= 1.00 [ 324.698470][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.706824][ T5927] usb 2-1: Product: syz [ 324.711027][ T5927] usb 2-1: Manufacturer: syz [ 324.715818][ T5927] usb 2-1: SerialNumber: syz [ 324.721093][ T2151] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 324.730539][ T2151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.739200][ T2151] usb 5-1: Product: syz [ 324.743673][ T2151] usb 5-1: Manufacturer: syz [ 324.748763][ T2151] usb 5-1: SerialNumber: syz [ 324.761036][ T2151] usb 5-1: config 0 descriptor?? [ 324.774332][ T2151] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 324.779433][ T120] usb 3-1: USB disconnect, device number 87 [ 324.783603][ T2151] em28xx 5-1:0.0: DVB interface 0 found: isoc [ 324.798001][T11379] /dev/rnullb0: Can't open blockdev [ 324.818879][ T120] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 324.832137][ T120] keyspan 3-1:0.0: device disconnected [ 324.969988][ T5927] usb-storage 2-1:9.49: USB Mass Storage device detected [ 324.984534][T11396] /dev/rnullb0: Can't open blockdev [ 324.994540][ T5927] usb-storage 2-1:9.49: Quirks match for vid c251 pid 4003: 80 [ 325.049964][ T5927] usb 2-1: USB disconnect, device number 122 [ 325.085747][T11406] /dev/rnullb0: Can't open blockdev [ 325.140023][T11410] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 325.295250][T11417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.309992][T11417] netlink: 54 bytes leftover after parsing attributes in process `syz.1.1711'. [ 325.384001][T11425] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1714'. [ 325.404449][T11423] /dev/rnullb0: Can't open blockdev [ 325.410901][T11423] /dev/rnullb0: Can't open blockdev [ 325.553156][ T2151] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 325.626064][ T2151] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 325.634979][ T5927] usb 2-1: new low-speed USB device number 123 using dummy_hcd [ 325.656138][ T2151] em28xx 5-1:0.0: board has no eeprom [ 325.700171][T11439] /dev/rnullb0: Can't open blockdev [ 325.761277][ T2151] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 325.769212][ T2151] em28xx 5-1:0.0: dvb set to isoc mode. [ 325.793516][ T6005] em28xx 5-1:0.0: Binding DVB extension [ 325.795419][T11444] /dev/rnullb0: Can't open blockdev [ 325.816089][ T2151] usb 5-1: USB disconnect, device number 11 [ 325.832610][ T5927] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.840623][ T5927] usb 2-1: config 0 has no interface number 0 [ 325.856038][ T2151] em28xx 5-1:0.0: Disconnecting em28xx [ 325.871415][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 325.893058][ T6005] em28xx 5-1:0.0: Registering input extension [ 325.904638][ T5927] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 325.915794][ T2151] em28xx 5-1:0.0: Closing input extension [ 325.922078][ T5927] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 325.934385][ T2151] em28xx 5-1:0.0: Freeing device [ 325.954285][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.980042][ T5927] usb 2-1: config 0 descriptor?? [ 325.992062][T11425] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 326.004491][ T5927] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 326.217751][ T2151] usb 2-1: USB disconnect, device number 123 [ 326.223880][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 326.390642][T11462] /dev/rnullb0: Can't open blockdev [ 326.595855][T11467] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1725'. [ 326.681332][ T5948] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 326.841446][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 326.853071][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.876273][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.897227][ T5948] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 326.916856][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.941783][ T5948] usb 3-1: config 0 descriptor?? [ 327.034359][T11490] fuse: Unknown parameter 'ǽ0x0000000000000003' [ 327.045685][T11489] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1733'. [ 327.355505][ T5948] ft260 0003:0403:6030.001A: item fetching failed at offset 0/2 [ 327.397001][ T5948] ft260 0003:0403:6030.001A: failed to parse HID [ 327.416263][ T5948] ft260 0003:0403:6030.001A: probe with driver ft260 failed with error -22 [ 327.560839][ T120] usb 3-1: USB disconnect, device number 88 [ 327.583929][T11522] syz.1.1740: attempt to access beyond end of device [ 327.583929][T11522] loop1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 327.618737][T11522] EXT4-fs (loop1): unable to read superblock [ 327.714819][T11533] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 327.762406][T11529] fuse: Unknown parameter 'l pL' [ 327.769094][T11533] loop6: detected capacity change from 0 to 524287999 [ 327.777083][T11533] ldm_validate_partition_table(): Disk read failed. [ 327.786775][T11533] Dev loop6: unable to read RDB block 0 [ 327.794394][T11533] loop6: unable to read partition table [ 327.800302][T11533] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 327.821945][T11529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1742'. [ 327.831433][T11529] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1742'. [ 328.502390][T11561] /dev/rnullb0: Can't open blockdev [ 328.601430][ T120] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 328.773965][ T120] usb 3-1: Using ep0 maxpacket: 16 [ 328.798054][ T120] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.831075][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.871225][ T120] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 328.904214][ T120] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 328.929870][ T120] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 328.977981][ T120] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 328.993647][ T120] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 329.011125][ T120] usb 3-1: Manufacturer: syz [ 329.031617][ T120] usb 3-1: config 0 descriptor?? [ 329.180377][ T5871] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 329.187980][ T5871] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 329.198587][ T5871] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 329.206635][ T5871] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 329.218354][ T5871] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.321391][ T120] rc_core: IR keymap rc-hauppauge not found [ 329.327322][ T120] Registered IR keymap rc-empty [ 329.342134][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.381355][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.402557][ T120] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 329.439200][T11599] chnl_net:caif_netlink_parms(): no params data found [ 329.450540][ T120] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input47 [ 329.486835][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.511368][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.527473][T11599] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.531383][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.542321][T11599] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.549528][T11599] bridge_slave_0: entered allmulticast mode [ 329.556737][T11599] bridge_slave_0: entered promiscuous mode [ 329.562721][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.571921][T11599] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.579075][T11599] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.586634][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.587336][T11599] bridge_slave_1: entered allmulticast mode [ 329.600772][T11599] bridge_slave_1: entered promiscuous mode [ 329.613088][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.629552][T11599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.631421][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.640957][T11599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 329.662954][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.681523][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.682291][T11599] team0: Port device team_slave_0 added [ 329.697163][T11599] team0: Port device team_slave_1 added [ 329.701618][ T120] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 329.720257][T11599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.724577][ T120] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 329.727341][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.736220][ T120] mceusb 3-1:0.0: 2 tx ports (0x1 cabled) and 2 rx sensors (0x0 active) [ 329.761793][T11599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.782610][T11614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.794359][T11614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.813702][ T5927] usb 3-1: USB disconnect, device number 89 [ 329.819575][T11599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.841296][T11599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.867842][T11599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.883659][T11618] /dev/rnullb0: Can't open blockdev [ 329.914252][T11599] hsr_slave_0: entered promiscuous mode [ 329.920611][T11599] hsr_slave_1: entered promiscuous mode [ 329.926979][T11599] debugfs: 'hsr0' already exists in 'hsr' [ 329.933829][T11599] Cannot create hsr debugfs directory [ 329.948645][T11625] /dev/rnullb0: Can't open blockdev [ 330.011035][T11599] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.065369][T11599] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.115531][T11599] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.155506][T11599] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.220829][T11599] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 330.231022][T11599] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 330.239692][T11599] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 330.249143][T11599] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 330.269634][T11599] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.276712][T11599] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.284071][T11599] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.291143][T11599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.298762][ T5927] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 330.336518][T11599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.349052][ T2940] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.356689][ T2940] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.369246][T11599] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.380160][ T3022] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.387311][ T3022] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.398745][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.405877][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.451495][ T5927] usb 3-1: Using ep0 maxpacket: 16 [ 330.458004][ T5927] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 330.470042][ T5927] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 330.485591][ T5927] usb 3-1: config 8 has no interface number 0 [ 330.492195][ T5927] usb 3-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 330.505551][T11634] fuse: Bad value for 'user_id' [ 330.512099][T11634] fuse: Bad value for 'user_id' [ 330.517080][ T5927] usb 3-1: config 8 interface 39 has no altsetting 0 [ 330.526214][ T5927] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 330.538603][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.546712][ T5927] usb 3-1: Product: syz [ 330.550502][T11634] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1757'. [ 330.550922][ T5927] usb 3-1: Manufacturer: syz [ 330.567403][ T5927] usb 3-1: SerialNumber: syz [ 330.615097][T11599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.647072][T11599] veth0_vlan: entered promiscuous mode [ 330.656536][T11599] veth1_vlan: entered promiscuous mode [ 330.677588][T11599] veth0_macvtap: entered promiscuous mode [ 330.687655][T11599] veth1_macvtap: entered promiscuous mode [ 330.704907][T11599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.718050][T11599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.730448][ T2910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.739369][ T2910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.749125][ T2910] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.758419][ T2910] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.784061][ T5927] ipheth 3-1:8.39: Unable to find endpoints [ 330.795924][ T5927] usb 3-1: USB disconnect, device number 90 [ 330.811263][ T5948] usb 2-1: new full-speed USB device number 124 using dummy_hcd [ 330.821023][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.837624][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.853986][ T2910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.862772][ T2910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.983798][ T5948] usb 2-1: config 0 has an invalid interface number: 10 but max is 0 [ 330.991983][ T5948] usb 2-1: config 0 has no interface number 0 [ 330.998076][ T5948] usb 2-1: too many endpoints for config 0 interface 10 altsetting 2: 48, using maximum allowed: 30 [ 331.010039][ T5948] usb 2-1: config 0 interface 10 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 331.023625][ T5948] usb 2-1: config 0 interface 10 has no altsetting 0 [ 331.031925][ T5948] usb 2-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72 [ 331.041088][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.051983][ T5948] usb 2-1: Product: syz [ 331.056168][ T5948] usb 2-1: Manufacturer: syz [ 331.060777][ T5948] usb 2-1: SerialNumber: syz [ 331.067236][ T5948] usb 2-1: config 0 descriptor?? [ 331.211281][ T6005] usb 4-1: new low-speed USB device number 76 using dummy_hcd [ 331.278574][ T5948] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3 [ 331.281989][ T5871] Bluetooth: hci4: command tx timeout [ 331.292337][ T5948] gspca_sn9c20x: Write register 1000 failed -71 [ 331.299520][ T5948] gspca_sn9c20x: Device initialization failed [ 331.306227][ T5948] gspca_sn9c20x 2-1:0.10: probe with driver gspca_sn9c20x failed with error -71 [ 331.321567][ T5948] usb 2-1: USB disconnect, device number 124 [ 331.363128][ T6005] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 331.372369][ T6005] usb 4-1: config 0 has no interface number 0 [ 331.378603][ T6005] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 331.392320][ T6005] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 331.403177][ T6005] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 331.412336][ T6005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.427378][ T6005] usb 4-1: config 0 descriptor?? [ 331.434287][T11643] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.449511][ T6005] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 331.648191][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 331.659160][ T6005] usb 4-1: USB disconnect, device number 76 [ 332.473980][T11670] /dev/rnullb0: Can't open blockdev [ 332.481505][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 332.490597][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 332.504752][T11672] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1770'. [ 333.363270][ T5871] Bluetooth: hci4: command tx timeout [ 333.473851][T11688] loop6: detected capacity change from 0 to 63 [ 333.483327][T11688] buffer_io_error: 23 callbacks suppressed [ 333.483341][T11688] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.519994][T11691] /dev/rnullb0: Can't open blockdev [ 333.527019][T11688] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.556339][T11688] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.656141][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.711703][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.719979][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.766786][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.785804][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 333.883184][T11709] /dev/rnullb0: Can't open blockdev [ 334.054159][ T2151] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 334.080247][T11715] ubi0: attaching mtd0 [ 334.087012][T11705] /dev/rnullb0: Can't open blockdev [ 334.115229][T11717] /dev/rnullb0: Can't open blockdev [ 334.120746][ T2151] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 334.122364][T11715] ubi0: scanning is finished [ 334.198114][T11720] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 334.198983][T11715] ubi0: empty MTD device detected [ 334.216788][T11720] /dev/rnullb0: Can't open blockdev [ 334.301960][T11715] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 334.309557][T11715] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 334.320531][T11715] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 334.341839][T11715] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 334.361110][T11715] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 334.372488][T11715] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 334.390257][T11715] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3299251491 [ 334.434324][T11715] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 334.441059][T11712] /dev/rnullb0: Can't open blockdev [ 334.461824][T11726] ubi0: background thread "ubi_bgt0d" started, PID 11726 [ 334.765174][T11740] /dev/rnullb0: Can't open blockdev [ 334.802126][T11743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1793'. [ 334.890243][T11753] Falling back ldisc for ptm0. [ 334.963237][T11753] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 334.971644][ T5948] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 335.131514][ T120] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 335.143440][ T5948] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 335.154381][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.162809][ T5948] usb 3-1: Product: syz [ 335.167103][ T5948] usb 3-1: Manufacturer: syz [ 335.174467][ T5948] usb 3-1: SerialNumber: syz [ 335.180666][ T5948] usb 3-1: config 0 descriptor?? [ 335.192342][ T5948] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 091 [ 335.293295][T11761] /dev/rnullb0: Can't open blockdev [ 335.311407][ T120] usb 5-1: Using ep0 maxpacket: 16 [ 335.319124][ T120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.330900][ T120] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 335.340400][ T120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.349571][ T120] usb 5-1: config 0 descriptor?? [ 335.441256][ T5871] Bluetooth: hci4: command tx timeout [ 335.471233][ T5927] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 335.574509][ T120] usbhid 5-1:0.0: can't add hid device: -71 [ 335.581616][ T120] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 335.612557][ T120] usb 5-1: USB disconnect, device number 12 [ 335.614278][T11777] /dev/rnullb0: Can't open blockdev [ 335.631319][ T5927] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 335.651893][ T5927] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 43926, setting to 64 [ 335.684399][ T5927] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 335.701230][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.709315][ T5927] usb 2-1: Product: syz [ 335.719657][ T5927] usb 2-1: Manufacturer: syz [ 335.728402][T11785] loop7: detected capacity change from 0 to 7 [ 335.734944][T11782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.735208][T11782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.745401][ T5927] usb 2-1: SerialNumber: syz [ 335.759621][ T5927] usb 2-1: config 0 descriptor?? [ 335.765333][T11758] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 335.802749][T11736] /dev/rnullb0: Can't open blockdev [ 335.812956][ T5948] i2c i2c-2: failure reading functionality [ 335.820882][ T5948] i2c i2c-2: connected i2c-tiny-usb device [ 335.831602][ T5927] rc_core: IR keymap rc-streamzap not found [ 335.835762][ T5948] usb 3-1: USB disconnect, device number 91 [ 335.864679][ T5927] Registered IR keymap rc-empty [ 335.870221][ T5927] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 335.883991][ T5927] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 335.955145][ C1] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 335.964964][ C1] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 335.973692][T11785] Dev loop7: unable to read RDB block 7 [ 335.974047][ T6005] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 335.979397][T11785] loop7: unable to read partition table [ 335.979529][T11785] loop7: partition table beyond EOD, truncated [ 335.979552][T11785] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 336.039454][ T5927] usb 2-1: USB disconnect, device number 125 [ 336.144644][ T5235] Dev loop7: unable to read RDB block 7 [ 336.150296][ T5235] loop7: unable to read partition table [ 336.156395][ T5235] loop7: partition table beyond EOD, truncated [ 336.197572][ T6005] usb 4-1: unable to get BOS descriptor or descriptor too short [ 336.207179][ T6005] usb 4-1: not running at top speed; connect to a high speed hub [ 336.216839][ T6005] usb 4-1: config 13 has an invalid interface number: 120 but max is 0 [ 336.225972][ T6005] usb 4-1: config 13 has no interface number 0 [ 336.232622][ T6005] usb 4-1: config 13 interface 120 has no altsetting 0 [ 336.240983][ T6005] usb 4-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9 [ 336.252732][ T6005] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.260815][ T6005] usb 4-1: Product: syz [ 336.265176][ T6005] usb 4-1: Manufacturer: syz [ 336.269758][ T6005] usb 4-1: SerialNumber: syz [ 336.360077][ T5948] IPVS: starting estimator thread 0... [ 336.421294][ T44] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 336.451240][T11796] IPVS: using max 54 ests per chain, 129600 per kthread [ 336.574944][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 336.584299][ T44] usb 5-1: config 8 has an invalid interface number: 43 but max is 0 [ 336.594454][ T44] usb 5-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 336.603491][ T44] usb 5-1: config 8 has no interface number 0 [ 336.609768][ T44] usb 5-1: config 8 interface 43 altsetting 255 endpoint 0x4 has invalid maxpacket 12032, setting to 1024 [ 336.611222][ T5948] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 336.623421][ T44] usb 5-1: config 8 interface 43 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 1024 [ 336.642755][ T44] usb 5-1: config 8 interface 43 has no altsetting 0 [ 336.653465][ T44] usb 5-1: New USB device found, idVendor=0582, idProduct=935b, bcdDevice=be.6c [ 336.663772][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=33 [ 336.667714][T11799] /dev/rnullb0: Can't open blockdev [ 336.673300][ T44] usb 5-1: Product: syz [ 336.683145][ T44] usb 5-1: Manufacturer: syz [ 336.687788][ T44] usb 5-1: SerialNumber: syz [ 336.702950][T11793] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 336.802546][ T5948] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.811357][ T5948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.821597][ T5948] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.830728][ T5948] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.843014][ T5948] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.852853][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.862306][ T5948] usb 3-1: Product: syz [ 336.866567][ T5948] usb 3-1: Manufacturer: syz [ 336.885794][ T5948] cdc_wdm 3-1:1.0: skipping garbage [ 336.891089][ T5948] cdc_wdm 3-1:1.0: skipping garbage [ 336.892707][T11808] netlink: 'syz.1.1811': attribute type 15 has an invalid length. [ 336.897915][ T5948] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 336.904225][T11808] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1811'. [ 336.925216][ T5948] cdc_wdm 3-1:1.0: Unknown control protocol [ 337.021462][ T44] usb 5-1: USB disconnect, device number 13 [ 337.048977][ T9856] udevd[9856]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:8.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 337.089132][ T5927] usb 3-1: USB disconnect, device number 92 [ 337.361314][ T5948] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 337.501261][ T5948] usb 2-1: device descriptor read/64, error -71 [ 337.531384][ T5871] Bluetooth: hci4: command tx timeout [ 337.552191][ T5927] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 337.712642][ T5927] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 337.721445][ T5927] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.732684][ T5927] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 337.742043][ T5927] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.743590][ T5948] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 337.754884][ T5927] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 337.770142][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 337.790713][ T5927] usb 3-1: Product: syz [ 337.794969][ T5927] usb 3-1: Manufacturer: syz [ 337.804634][ T5927] cdc_wdm 3-1:1.0: skipping garbage [ 337.812158][ T5927] cdc_wdm 3-1:1.0: skipping garbage [ 337.818696][ T5927] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 337.825125][ T5927] cdc_wdm 3-1:1.0: Unknown control protocol [ 337.911296][ T5948] usb 2-1: device descriptor read/64, error -71 [ 338.021457][ T5948] usb usb2-port1: attempt power cycle [ 338.361237][ T5948] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 338.381597][ T5948] usb 2-1: device descriptor read/8, error -71 [ 338.621245][ T5948] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 338.641619][ T5948] usb 2-1: device descriptor read/8, error -71 [ 338.704918][ T6005] usb 4-1: USB disconnect, device number 77 [ 338.718922][T11829] /dev/rnullb0: Can't open blockdev [ 338.753617][ T9856] udevd[9856]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.779454][ T5948] usb usb2-port1: unable to enumerate USB device [ 338.872879][T11840] usb usb8: check_ctrlrecip: process 11840 (syz.3.1819) requesting ep 01 but needs 81 [ 338.887149][T11840] usb usb8: usbfs: process 11840 (syz.3.1819) did not claim interface 0 before use [ 338.905406][T11840] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 339.844094][T11865] No control pipe specified [ 339.873700][ T10] usb 3-1: USB disconnect, device number 93 [ 340.192813][T11879] /dev/rnullb0: Can't open blockdev [ 340.361331][ T10] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 340.423422][T11889] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 340.523041][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 340.574954][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 340.600627][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 340.627509][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.662842][ T10] usb 3-1: config 0 descriptor?? [ 340.686358][T11876] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 340.697698][ T10] hub 3-1:0.0: USB hub found [ 340.917633][ T10] hub 3-1:0.0: 2 ports detected [ 340.961311][ T8793] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 341.142582][ T8793] usb 4-1: Using ep0 maxpacket: 32 [ 341.168975][ T8793] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 341.211280][ T8793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.252246][ T8793] usb 4-1: config 0 descriptor?? [ 341.297623][ T8793] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 341.319347][T11876] vxcan1: tx drop: invalid da for name 0x0000000000000003 [ 341.338669][T11876] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1829'. [ 341.557388][ T10] hub 3-1:0.0: set hub depth failed [ 341.599011][ T10] usb 3-1: USB disconnect, device number 94 [ 342.107111][T11903] input: syz0 as /devices/virtual/input/input49 [ 342.134783][T11906] /dev/rnullb0: Can't open blockdev [ 342.202127][T11909] FAULT_INJECTION: forcing a failure. [ 342.202127][T11909] name failslab, interval 1, probability 0, space 0, times 1 [ 342.224975][T11909] CPU: 1 UID: 0 PID: 11909 Comm: syz.2.1839 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 342.224999][T11909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.225010][T11909] Call Trace: [ 342.225017][T11909] [ 342.225027][T11909] dump_stack_lvl+0x189/0x250 [ 342.225060][T11909] ? __pfx____ratelimit+0x10/0x10 [ 342.225082][T11909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.225107][T11909] ? __pfx__printk+0x10/0x10 [ 342.225134][T11909] ? __pfx___might_resched+0x10/0x10 [ 342.225157][T11909] ? lock_acquire+0x5f/0x360 [ 342.225200][T11909] should_fail_ex+0x414/0x560 [ 342.225230][T11909] should_failslab+0xa8/0x100 [ 342.225281][T11909] __kmalloc_noprof+0xcb/0x4f0 [ 342.225301][T11909] ? kfree+0x4d/0x440 [ 342.225319][T11909] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 342.225353][T11909] tomoyo_realpath_from_path+0xe3/0x5d0 [ 342.225385][T11909] ? tomoyo_domain+0xd9/0x130 [ 342.225406][T11909] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 342.225431][T11909] tomoyo_path_number_perm+0x1e8/0x5a0 [ 342.225456][T11909] ? lock_release+0x4b/0x3e0 [ 342.225480][T11909] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 342.225508][T11909] ? rcu_is_watching+0x15/0xb0 [ 342.225534][T11909] ? lock_release+0x4b/0x3e0 [ 342.225555][T11909] ? vfs_write+0x956/0xb30 [ 342.225582][T11909] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 342.225616][T11909] ? lock_release+0x4b/0x3e0 [ 342.225642][T11909] ? __fget_files+0x2a/0x420 [ 342.225669][T11909] ? __fget_files+0x3a0/0x420 [ 342.225695][T11909] ? __fget_files+0x2a/0x420 [ 342.225724][T11909] security_file_ioctl+0xcb/0x2d0 [ 342.225749][T11909] __se_sys_ioctl+0x47/0x170 [ 342.225772][T11909] do_syscall_64+0xfa/0x3b0 [ 342.225799][T11909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.225819][T11909] ? clear_bhb_loop+0x60/0xb0 [ 342.225841][T11909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.225860][T11909] RIP: 0033:0x7f875258ebe9 [ 342.225878][T11909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.225896][T11909] RSP: 002b:00007f8753424038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 342.225918][T11909] RAX: ffffffffffffffda RBX: 00007f87527b5fa0 RCX: 00007f875258ebe9 [ 342.225933][T11909] RDX: 0000000000000001 RSI: 0000000000005608 RDI: 0000000000000003 [ 342.225945][T11909] RBP: 00007f8753424090 R08: 0000000000000000 R09: 0000000000000000 [ 342.225957][T11909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.225968][T11909] R13: 00007f87527b6038 R14: 00007f87527b5fa0 R15: 00007fffb92bd388 [ 342.225990][T11909] [ 342.225999][T11909] ERROR: Out of memory at tomoyo_realpath_from_path. [ 342.606562][T11912] CUSE: info not properly terminated [ 343.888198][ T8793] usb 4-1: USB disconnect, device number 78 [ 344.108119][T11940] FAULT_INJECTION: forcing a failure. [ 344.108119][T11940] name failslab, interval 1, probability 0, space 0, times 0 [ 344.123151][T11940] CPU: 0 UID: 0 PID: 11940 Comm: syz.3.1849 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 344.123175][T11940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 344.123186][T11940] Call Trace: [ 344.123193][T11940] [ 344.123199][T11940] dump_stack_lvl+0x189/0x250 [ 344.123230][T11940] ? __pfx____ratelimit+0x10/0x10 [ 344.123251][T11940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.123275][T11940] ? __pfx__printk+0x10/0x10 [ 344.123297][T11940] ? read_seqbegin+0x1ac/0x250 [ 344.123318][T11940] ? __pfx___might_resched+0x10/0x10 [ 344.123341][T11940] ? lock_acquire+0x5f/0x360 [ 344.123361][T11940] should_fail_ex+0x414/0x560 [ 344.123390][T11940] should_failslab+0xa8/0x100 [ 344.123411][T11940] __kmalloc_noprof+0xcb/0x4f0 [ 344.123428][T11940] ? tomoyo_encode+0x28b/0x550 [ 344.123455][T11940] tomoyo_encode+0x28b/0x550 [ 344.123483][T11940] tomoyo_realpath_from_path+0x58d/0x5d0 [ 344.123513][T11940] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 344.123534][T11940] tomoyo_path_number_perm+0x1e8/0x5a0 [ 344.123556][T11940] ? lock_release+0x4b/0x3e0 [ 344.123575][T11940] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 344.123598][T11940] ? rcu_is_watching+0x15/0xb0 [ 344.123620][T11940] ? lock_release+0x4b/0x3e0 [ 344.123637][T11940] ? vfs_write+0x956/0xb30 [ 344.123660][T11940] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 344.123689][T11940] ? lock_release+0x4b/0x3e0 [ 344.123711][T11940] ? __fget_files+0x2a/0x420 [ 344.123734][T11940] ? __fget_files+0x3a0/0x420 [ 344.123756][T11940] ? __fget_files+0x2a/0x420 [ 344.123781][T11940] security_file_ioctl+0xcb/0x2d0 [ 344.123802][T11940] __se_sys_ioctl+0x47/0x170 [ 344.123822][T11940] do_syscall_64+0xfa/0x3b0 [ 344.123844][T11940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.123862][T11940] ? clear_bhb_loop+0x60/0xb0 [ 344.123880][T11940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.123897][T11940] RIP: 0033:0x7fbe44b8ebe9 [ 344.123912][T11940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.123927][T11940] RSP: 002b:00007fbe45ae0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.123946][T11940] RAX: ffffffffffffffda RBX: 00007fbe44db5fa0 RCX: 00007fbe44b8ebe9 [ 344.123958][T11940] RDX: 0000000000000001 RSI: 0000000000005608 RDI: 0000000000000003 [ 344.123968][T11940] RBP: 00007fbe45ae0090 R08: 0000000000000000 R09: 0000000000000000 [ 344.123978][T11940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.123987][T11940] R13: 00007fbe44db6038 R14: 00007fbe44db5fa0 R15: 00007ffcda307518 [ 344.124006][T11940] [ 344.124020][T11940] ERROR: Out of memory at tomoyo_realpath_from_path. [ 344.681264][ T8793] usb 3-1: new full-speed USB device number 95 using dummy_hcd [ 344.702177][T11957] netlink: 'syz.4.1855': attribute type 2 has an invalid length. [ 344.723917][T11957] netlink: 'syz.4.1855': attribute type 1 has an invalid length. [ 344.831313][ T8793] usb 3-1: device descriptor read/64, error -71 [ 344.971394][ T5948] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 345.071229][ T8793] usb 3-1: new full-speed USB device number 96 using dummy_hcd [ 345.127022][ T5948] usb 5-1: unable to get BOS descriptor or descriptor too short [ 345.148370][ T5948] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 345.166556][ T5948] usb 5-1: can't read configurations, error -71 [ 345.211232][ T8793] usb 3-1: device descriptor read/64, error -71 [ 345.322164][ T8793] usb usb3-port1: attempt power cycle [ 345.671308][ T8793] usb 3-1: new full-speed USB device number 97 using dummy_hcd [ 345.693174][ T8793] usb 3-1: device descriptor read/8, error -71 [ 345.731403][T11969] FAULT_INJECTION: forcing a failure. [ 345.731403][T11969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.752597][T11969] CPU: 0 UID: 0 PID: 11969 Comm: syz.4.1860 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 345.752623][T11969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 345.752634][T11969] Call Trace: [ 345.752641][T11969] [ 345.752648][T11969] dump_stack_lvl+0x189/0x250 [ 345.752680][T11969] ? __pfx____ratelimit+0x10/0x10 [ 345.752702][T11969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.752728][T11969] ? __pfx__printk+0x10/0x10 [ 345.752756][T11969] ? rcu_is_watching+0x15/0xb0 [ 345.752781][T11969] should_fail_ex+0x414/0x560 [ 345.752811][T11969] _copy_to_user+0x31/0xb0 [ 345.752837][T11969] simple_read_from_buffer+0xe1/0x170 [ 345.752862][T11969] proc_fail_nth_read+0x1b3/0x220 [ 345.752881][T11969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.752900][T11969] ? rw_verify_area+0x2a6/0x4d0 [ 345.752921][T11969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.752946][T11969] vfs_read+0x1fd/0xa30 [ 345.752966][T11969] ? fdget_pos+0x247/0x320 [ 345.752993][T11969] ? __pfx___mutex_lock+0x10/0x10 [ 345.753017][T11969] ? __pfx_vfs_read+0x10/0x10 [ 345.753041][T11969] ? __fget_files+0x3a0/0x420 [ 345.753065][T11969] ? __fget_files+0x2a/0x420 [ 345.753092][T11969] ksys_read+0x145/0x250 [ 345.753113][T11969] ? __fget_files+0x3a0/0x420 [ 345.753137][T11969] ? __pfx_ksys_read+0x10/0x10 [ 345.753157][T11969] ? __pfx_tty_ioctl+0x10/0x10 [ 345.753179][T11969] ? rcu_is_watching+0x15/0xb0 [ 345.753203][T11969] do_syscall_64+0xfa/0x3b0 [ 345.753227][T11969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.753245][T11969] ? clear_bhb_loop+0x60/0xb0 [ 345.753265][T11969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.753282][T11969] RIP: 0033:0x7f98b278d5fc [ 345.753298][T11969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 345.753314][T11969] RSP: 002b:00007f98b3606030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.753333][T11969] RAX: ffffffffffffffda RBX: 00007f98b29b5fa0 RCX: 00007f98b278d5fc [ 345.753346][T11969] RDX: 000000000000000f RSI: 00007f98b36060a0 RDI: 0000000000000004 [ 345.753357][T11969] RBP: 00007f98b3606090 R08: 0000000000000000 R09: 0000000000000000 [ 345.753368][T11969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.753378][T11969] R13: 00007f98b29b6038 R14: 00007f98b29b5fa0 R15: 00007ffc555619f8 [ 345.753398][T11969] [ 346.000204][ T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 346.047050][T11971] /dev/rnullb0: Can't open blockdev [ 346.054562][T11971] /dev/rnullb0: Can't open blockdev [ 346.060809][T11971] /dev/rnullb0: Can't open blockdev [ 346.066966][T11971] /dev/rnullb0: Can't open blockdev [ 346.072845][T11971] /dev/rnullb0: Can't open blockdev [ 346.078457][T11971] /dev/rnullb0: Can't open blockdev [ 346.084431][T11971] /dev/rnullb0: Can't open blockdev [ 346.089983][T11971] /dev/rnullb0: Can't open blockdev [ 346.095670][T11971] /dev/rnullb0: Can't open blockdev [ 346.102774][T11971] /dev/rnullb0: Can't open blockdev [ 346.108629][T11971] /dev/rnullb0: Can't open blockdev [ 346.114269][T11971] /dev/rnullb0: Can't open blockdev [ 346.119913][T11971] /dev/rnullb0: Can't open blockdev [ 346.125626][T11971] /dev/rnullb0: Can't open blockdev [ 346.131687][T11971] /dev/rnullb0: Can't open blockdev [ 346.137160][T11971] /dev/rnullb0: Can't open blockdev [ 346.143054][T11971] /dev/rnullb0: Can't open blockdev [ 346.148641][T11971] /dev/rnullb0: Can't open blockdev [ 346.154334][T11971] /dev/rnullb0: Can't open blockdev [ 346.159897][T11971] /dev/rnullb0: Can't open blockdev [ 346.166312][T11971] /dev/rnullb0: Can't open blockdev [ 346.172589][T11971] /dev/rnullb0: Can't open blockdev [ 346.179301][T11971] /dev/rnullb0: Can't open blockdev [ 346.185053][T11971] /dev/rnullb0: Can't open blockdev [ 346.190569][T11971] /dev/rnullb0: Can't open blockdev [ 346.196288][T11971] /dev/rnullb0: Can't open blockdev [ 346.201861][T11971] /dev/rnullb0: Can't open blockdev [ 346.207394][T11971] /dev/rnullb0: Can't open blockdev [ 346.213337][T11971] /dev/rnullb0: Can't open blockdev [ 346.218816][T11971] /dev/rnullb0: Can't open blockdev [ 346.221322][ T8793] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 346.225202][T11971] /dev/rnullb0: Can't open blockdev [ 346.237103][T11971] /dev/rnullb0: Can't open blockdev [ 346.243867][T11971] /dev/rnullb0: Can't open blockdev [ 346.251309][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 346.257391][ T8793] usb 3-1: device descriptor read/8, error -71 [ 346.266789][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 346.275653][ T10] usb 2-1: config 0 has no interface number 0 [ 346.283405][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 346.292161][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 346.301397][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.301420][ T10] usb 2-1: Product: syz [ 346.301453][ T10] usb 2-1: Manufacturer: syz [ 346.301467][ T10] usb 2-1: SerialNumber: syz [ 346.302941][ T10] usb 2-1: config 0 descriptor?? [ 346.382525][ T8793] usb usb3-port1: unable to enumerate USB device [ 346.451340][ T5948] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 346.613368][ T5948] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.621707][ T5948] usb 5-1: config 0 has no interface number 0 [ 346.627889][ T5948] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 346.639630][ T5948] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 346.650607][ T5948] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 346.660063][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.669806][ T5948] usb 5-1: config 0 descriptor?? [ 346.676220][T11974] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 346.699519][ T5948] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 346.913308][ T5948] usb 5-1: USB disconnect, device number 16 [ 346.937796][ T10] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 346.950870][ T10] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 346.960269][ T10] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 346.975642][ T10] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 347.028640][ T10] usb 2-1: USB disconnect, device number 4 [ 347.177479][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 347.177499][ T30] audit: type=1400 audit(1755532776.924:55): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=11994 comm="syz.3.1870" [ 347.315261][T12001] Dead loop on virtual device ip6_vti0, fix it urgently! [ 347.323617][T12001] Dead loop on virtual device ip6_vti0, fix it urgently! [ 347.330777][T12001] Dead loop on virtual device ip6_vti0, fix it urgently! [ 347.338056][T12001] Dead loop on virtual device ip6_vti0, fix it urgently! [ 347.345362][T12001] Dead loop on virtual device ip6_vti0, fix it urgently! [ 347.352638][T12001] Dead loop on virtual device ip6_vti0, fix it urgently! [ 347.466056][T12005] syz.2.1874: attempt to access beyond end of device [ 347.466056][T12005] loop2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 347.485136][T12005] hfs: can't find a HFS filesystem on dev loop2 [ 347.516882][T12011] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1877'. [ 347.544266][T12007] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 347.644187][T12021] netlink: 'syz.2.1880': attribute type 21 has an invalid length. [ 347.652688][T12021] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1880'. [ 347.782123][ T5927] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 347.921358][ T2151] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 347.941321][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 347.949257][ T5927] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 347.971436][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 348.007660][ T5927] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.022687][ T5927] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.036942][ T5927] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.046334][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.055022][T12033] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1884'. [ 348.072526][T12033] /dev/rnullb0: Can't open blockdev [ 348.082741][ T2151] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 348.084500][T12033] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1884'. [ 348.093106][ T2151] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 348.119021][ T2151] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 348.143773][ T2151] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 348.152900][ T2151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.165150][ T2151] usb 3-1: Product: syz [ 348.169363][ T2151] usb 3-1: Manufacturer: ࠾ [ 348.178991][ T2151] usb 3-1: SerialNumber: syz [ 348.268745][ T5927] usb 2-1: GET_CAPABILITIES returned 0 [ 348.275231][ T5927] usbtmc 2-1:16.0: can't read capabilities [ 348.400676][ T2151] usb 3-1: 0:2 : does not exist [ 348.418735][ T2151] usb 3-1: USB disconnect, device number 99 [ 348.444228][ T9828] udevd[9828]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.995085][T12048] loop6: detected capacity change from 0 to 63 [ 349.008191][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.011928][T12053] 9p: Unknown access argument 18446744073709551615: -34 [ 349.028430][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.041836][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.055068][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.064083][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 349.202064][T12061] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1891'. [ 349.218463][T12058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1891'. [ 349.681474][ T5927] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 349.841324][ T5927] usb 5-1: Using ep0 maxpacket: 32 [ 349.847956][ T5927] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.869262][ T5927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 349.876079][ T5927] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 349.885247][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.908605][ T5927] usb 5-1: config 0 descriptor?? [ 350.201251][ T10] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 350.351972][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 350.363202][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.375165][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.386885][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.397453][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.407399][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.419936][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.429067][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.440824][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.454791][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.462843][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.474467][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.487310][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.496997][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.506353][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.524549][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.544081][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.556961][ T5948] usb 2-1: USB disconnect, device number 5 [ 350.573440][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.601522][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.629488][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.643248][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.657325][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.665298][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.694363][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.732758][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.757164][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 350.785618][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 350.818846][ T5927] corsair-cpro 0003:1B1C:0C10.001C: item fetching failed at offset 3/5 [ 350.827601][ T10] usb 3-1: Product: syz [ 350.852340][ T10] usb 3-1: Manufacturer: syz [ 350.867087][ T10] usb 3-1: SerialNumber: syz [ 350.888938][ T10] usb 3-1: config 0 descriptor?? [ 350.912595][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 351.059931][ T5927] corsair-cpro 0003:1B1C:0C10.001C: probe with driver corsair-cpro failed with error -22 [ 351.363014][ T44] usb 3-1: USB disconnect, device number 100 [ 351.378751][ T2151] usb 5-1: USB disconnect, device number 17 [ 351.386247][ T44] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 351.431433][ T5927] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 351.612324][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 351.618745][ T5927] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.629949][ T5927] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.639839][ T5927] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.652790][ T5927] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.666831][ T5927] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.677501][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.733722][ T6005] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 351.911202][ T6005] usb 2-1: Using ep0 maxpacket: 16 [ 351.921465][ T6005] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 351.939765][ T6005] usb 2-1: config 0 has no interface number 0 [ 351.950917][ T5927] usb 4-1: usb_control_msg returned -71 [ 351.956639][ T6005] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.971378][ T5927] usbtmc 4-1:16.0: can't read capabilities [ 351.991102][ T6005] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.003108][ T5927] usb 4-1: USB disconnect, device number 79 [ 352.021401][ T6005] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 352.039133][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.052777][ T6005] usb 2-1: config 0 descriptor?? [ 352.129083][T12101] /dev/rnullb0: Can't open blockdev [ 352.346271][ T8791] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 352.368544][ T8791] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 352.426360][T12139] netlink: 'syz.2.1913': attribute type 2 has an invalid length. [ 352.482792][ T6005] uclogic 0003:28BD:0071.001E: pen parameters not found [ 352.495197][ T6005] uclogic 0003:28BD:0071.001E: interface is invalid, ignoring [ 352.756048][T12133] /dev/rnullb0: Can't open blockdev [ 352.962071][ T5871] Bluetooth: hci4: command tx timeout [ 353.443127][T12164] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 353.456868][T12164] bond0: (slave lo): Error: Device can not be enslaved while up [ 353.467560][T12164] /dev/rnullb0: Can't open blockdev [ 353.578119][T12172] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1921'. [ 353.849690][T12175] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1923'. [ 353.892511][T12177] netlink: 'syz.2.1924': attribute type 1 has an invalid length. [ 353.913759][T12177] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1924'. [ 354.521863][ T5927] usb 2-1: USB disconnect, device number 6 [ 354.654180][T12197] loop6: detected capacity change from 0 to 63 [ 354.688429][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.706854][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.723679][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.742923][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.764635][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.784158][T12198] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.799917][T12197] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.825245][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.844249][T12198] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.863271][ T9828] Buffer I/O error on dev loop6, logical block 0, async page read [ 354.883164][ T5927] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 355.041393][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 355.048005][ T5927] usb 2-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.062588][ T5927] usb 2-1: config 1 interface 0 has no altsetting 0 [ 355.070999][ T5927] usb 2-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 355.080662][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.090534][ T5927] usb 2-1: Product: syz [ 355.095023][ T5927] usb 2-1: Manufacturer: syz [ 355.099683][ T5927] usb 2-1: SerialNumber: syz [ 355.181516][ T8791] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 355.312724][T12203] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1933'. [ 355.322080][T12207] /dev/rnullb0: Can't open blockdev [ 355.326721][ T5927] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input50 [ 355.341211][ T8791] usb 5-1: Using ep0 maxpacket: 8 [ 355.346854][ T5220] bcm5974 2-1:1.0: could not read from device [ 355.347963][ T5927] usb 2-1: USB disconnect, device number 7 [ 355.360384][ T5220] bcm5974 2-1:1.0: could not read from device [ 355.360869][ T8791] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 355.377213][ T8791] usb 5-1: config 1 has an invalid descriptor of length 164, skipping remainder of the config [ 355.387774][ T8791] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 355.399230][ T8791] usb 5-1: config 1 has no interface number 1 [ 355.421197][ T8791] usb 5-1: too many endpoints for config 1 interface 3 altsetting 8: 86, using maximum allowed: 30 [ 355.445393][ T8791] usb 5-1: config 1 interface 3 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 86 [ 355.458675][ T8791] usb 5-1: config 1 interface 3 has no altsetting 0 [ 355.467134][ T8791] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 355.476770][ T8791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.487450][ T8791] usb 5-1: Product: Ъ [ 355.491613][ T8791] usb 5-1: Manufacturer: 递ꁄ芡奒ࡖ읗珆竩恦䤮岇뼐ﲶᗲ䄷ᅶ煵뼤톆酎꒵긲⦱羽뚘聺敾㧅껾❀䜳䥦켍언ڔ㤨㝨邱Ḓ䴆搻榧薧晞绣इ뒾孫퇮醑㰉╝埣ꭼ廗燕룮ႇ됮忆塀ᦖ蚡ⳟ쎿⃗憦臌⟃⡏섿䲏肮၀銡읚↣䲅一弻 [ 355.520119][ T8791] usb 5-1: SerialNumber: Л [ 355.551342][ T6005] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 355.702689][ T6005] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 355.714044][ T6005] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 355.723116][ T6005] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.731367][T12201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.733413][ T6005] usb 4-1: config 0 descriptor?? [ 355.745332][T12201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.760891][ T8791] usb 5-1: 0:2 : does not exist [ 355.775598][ T8791] usb 5-1: USB disconnect, device number 18 [ 355.791947][ T9828] udevd[9828]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.850290][T12215] delete_channel: no stack [ 355.856080][T12215] delete_channel: no stack [ 355.951563][ T6005] ath6kl: Failed to submit usb control message: -71 [ 355.961337][ T6005] ath6kl: unable to send the bmi data to the device: -71 [ 355.968394][ T6005] ath6kl: Unable to send get target info: -71 [ 355.974738][ T6005] ath6kl: Failed to init ath6kl core: -71 [ 355.981170][ T6005] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 355.996947][T12218] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 355.997515][ T6005] usb 4-1: USB disconnect, device number 80 [ 356.006763][T12218] syz.1.1938: attempt to access beyond end of device [ 356.006763][T12218] loop1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 356.397523][T12227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.417826][T12227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.902411][ T6005] usb 3-1: new full-speed USB device number 101 using dummy_hcd [ 357.277378][ T6005] usb 3-1: device descriptor read/64, error -71 [ 357.509505][T12233] netlink: 596 bytes leftover after parsing attributes in process `syz.3.1945'. [ 357.600539][T12238] /dev/rnullb0: Can't open blockdev [ 358.431414][ T6005] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 358.449099][T12256] netlink: 8288 bytes leftover after parsing attributes in process `syz.3.1953'. [ 358.807593][T12261] /dev/rnullb0: Can't open blockdev [ 359.279863][ T6005] usb 3-1: device descriptor read/64, error -71 [ 359.319090][T12267] ufs: You didn't specify the type of your ufs filesystem [ 359.319090][T12267] [ 359.319090][T12267] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 359.319090][T12267] [ 359.319090][T12267] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 359.353931][T12267] ufs: ufstype=old is supported read-only [ 359.359922][T12267] syz.3.1956: attempt to access beyond end of device [ 359.359922][T12267] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 359.401370][ T6005] usb usb3-port1: attempt power cycle [ 359.540394][T12268] /dev/rnullb0: Can't open blockdev [ 359.908536][T12295] /dev/rnullb0: Can't open blockdev [ 360.484313][T12310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1971'. [ 360.599494][T12317] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1975'. [ 360.630893][T12317] netlink: zone id is out of range [ 360.636459][T12317] netlink: zone id is out of range [ 360.642236][T12317] netlink: zone id is out of range [ 360.647365][T12317] netlink: zone id is out of range [ 360.660891][T12317] netlink: zone id is out of range [ 360.687285][T12317] netlink: zone id is out of range [ 360.695820][T12317] netlink: zone id is out of range [ 360.702649][T12317] netlink: zone id is out of range [ 360.707872][T12317] netlink: zone id is out of range [ 360.719059][T12317] netlink: zone id is out of range [ 360.820604][T12329] @: renamed from syz_tun (while UP) [ 360.838278][T12329] /dev/rnullb0: Can't open blockdev [ 360.951320][ T8791] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 360.971216][ T6005] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 361.111320][ T8791] usb 4-1: Using ep0 maxpacket: 32 [ 361.121226][ T6005] usb 2-1: Using ep0 maxpacket: 32 [ 361.128784][ T8791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 361.129050][ T6005] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 361.158219][ T8791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 361.161175][ T6005] usb 2-1: config 0 interface 0 has no altsetting 0 [ 361.181041][ T6005] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 361.190145][ T8791] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.208171][ T6005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.209793][ T8791] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 361.228818][ T8791] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 361.233725][ T6005] usb 2-1: config 0 descriptor?? [ 361.243564][ T8791] usb 4-1: Product: syz [ 361.247779][ T8791] usb 4-1: Manufacturer: syz [ 361.253093][ T8791] usb 4-1: SerialNumber: syz [ 361.267402][ T8791] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input51 [ 361.291499][ T3022] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.356696][ T3022] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.426538][ T3022] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.491904][ T3022] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.506756][T12339] /dev/rnullb0: Can't open blockdev [ 361.514149][T12323] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1978'. [ 361.523607][T12341] /dev/rnullb0: Can't open blockdev [ 361.644431][T12344] syzkaller1: entered promiscuous mode [ 361.660118][T12344] syzkaller1: entered allmulticast mode [ 361.676771][ T3022] bridge_slave_1: left allmulticast mode [ 361.733188][ T3022] bridge_slave_1: left promiscuous mode [ 361.752388][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.769704][ T3022] bridge_slave_0: left allmulticast mode [ 361.775517][ T3022] bridge_slave_0: left promiscuous mode [ 361.784450][ T3022] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.797688][ T5186] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 361.805608][ T5186] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 361.813093][ T5186] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 361.820831][ T5186] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 361.830143][ T5186] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.924930][ T3022] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.935416][ T3022] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.946059][ T3022] bond0 (unregistering): Released all slaves [ 362.021614][ T6005] corsair-psu 0003:1B1C:1C09.001F: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 362.047561][ T3022] tipc: Left network mode [ 362.215979][ T6005] corsair-psu 0003:1B1C:1C09.001F: unable to initialize device (-95) [ 362.233222][ T6005] corsair-psu 0003:1B1C:1C09.001F: probe with driver corsair-psu failed with error -95 [ 362.260360][T12362] /dev/rnullb0: Can't open blockdev [ 362.279367][ T3022] hsr_slave_0: left promiscuous mode [ 362.288383][ T3022] hsr_slave_1: left promiscuous mode [ 362.301677][ T3022] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.314732][ T3022] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.330312][ T3022] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.354519][ T3022] veth1_macvtap: left promiscuous mode [ 362.370325][ T3022] veth0_macvtap: left promiscuous mode [ 362.380482][ T3022] veth1_vlan: left promiscuous mode [ 362.390730][ T3022] veth0_vlan: left promiscuous mode [ 362.425492][T12325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 362.520408][ T3022] pimreg (unregistering): left allmulticast mode [ 362.678741][ T3022] team0 (unregistering): Port device team_slave_1 removed [ 362.694189][ T3022] team0 (unregistering): Port device team_slave_0 removed [ 362.714990][ T5927] usb 2-1: USB disconnect, device number 8 [ 362.822065][T12345] chnl_net:caif_netlink_parms(): no params data found [ 362.827833][T12376] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1991'. [ 362.870528][T12376] 9p: Bad value for 'rfdno' [ 362.958203][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.966868][T12345] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.975867][T12345] bridge_slave_0: entered allmulticast mode [ 362.982874][T12345] bridge_slave_0: entered promiscuous mode [ 362.990298][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.997496][T12345] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.005488][T12387] /dev/rnullb0: Can't open blockdev [ 363.011370][T12345] bridge_slave_1: entered allmulticast mode [ 363.018306][T12345] bridge_slave_1: entered promiscuous mode [ 363.061096][T12345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.080563][T12345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.095677][ T3022] IPVS: stop unused estimator thread 0... [ 363.126646][T12345] team0: Port device team_slave_0 added [ 363.136124][T12345] team0: Port device team_slave_1 added [ 363.169648][T12345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.181726][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.210678][T12345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.223259][T12345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.230244][T12345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.259652][T12345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.316280][T12345] hsr_slave_0: entered promiscuous mode [ 363.339170][T12345] hsr_slave_1: entered promiscuous mode [ 363.346109][T12345] debugfs: 'hsr0' already exists in 'hsr' [ 363.353357][T12345] Cannot create hsr debugfs directory [ 363.371510][ T10] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 363.526789][T12345] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.537632][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 363.549771][T12345] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.554649][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.566784][ T10] usb 5-1: Product: syz [ 363.569196][T12345] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.571016][ T10] usb 5-1: Manufacturer: syz [ 363.586922][T12345] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.600446][ T10] usb 5-1: SerialNumber: syz [ 363.618115][ T10] usb 5-1: config 0 descriptor?? [ 363.662446][T12345] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.669580][T12345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.676959][T12345] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.684099][T12345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.771005][T12345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.790646][T12345] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.815766][ T3022] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.837090][ T10] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 363.852109][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.852263][ T5871] Bluetooth: hci2: command tx timeout [ 363.859222][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.002236][ T5948] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 364.115968][T12433] ================================================================== [ 364.124083][T12433] BUG: KASAN: slab-use-after-free in __se_sys_mremap+0xb33/0x1150 [ 364.131915][T12433] Read of size 8 at addr ffff88807d3e3e18 by task syz.3.1997/12433 [ 364.139944][T12433] [ 364.142280][T12433] CPU: 0 UID: 0 PID: 12433 Comm: syz.3.1997 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 364.142306][T12433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.142319][T12433] Call Trace: [ 364.142326][T12433] [ 364.142334][T12433] dump_stack_lvl+0x189/0x250 [ 364.142367][T12433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.142395][T12433] ? lock_release+0x4b/0x3e0 [ 364.142418][T12433] ? __virt_addr_valid+0x4a5/0x5c0 [ 364.142437][T12433] print_report+0xca/0x240 [ 364.142454][T12433] ? __se_sys_mremap+0xb33/0x1150 [ 364.142478][T12433] kasan_report+0x118/0x150 [ 364.142498][T12433] ? __se_sys_mremap+0xb33/0x1150 [ 364.142524][T12433] __se_sys_mremap+0xb33/0x1150 [ 364.142558][T12433] ? __pfx___se_sys_mremap+0x10/0x10 [ 364.142591][T12433] ? rcu_is_watching+0x15/0xb0 [ 364.142614][T12433] ? __x64_sys_mremap+0x20/0xc0 [ 364.142640][T12433] do_syscall_64+0xfa/0x3b0 [ 364.142664][T12433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.142681][T12433] ? clear_bhb_loop+0x60/0xb0 [ 364.142700][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.142718][T12433] RIP: 0033:0x7fbe44b8ebe9 [ 364.142758][T12433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.142775][T12433] RSP: 002b:00007fbe45ae0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 364.142795][T12433] RAX: ffffffffffffffda RBX: 00007fbe44db5fa0 RCX: 00007fbe44b8ebe9 [ 364.142809][T12433] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000155000 [ 364.142821][T12433] RBP: 00007fbe44c11e19 R08: 0000200000416000 R09: 0000000000000000 [ 364.142833][T12433] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 364.142844][T12433] R13: 00007fbe44db6038 R14: 00007fbe44db5fa0 R15: 00007ffcda307518 [ 364.142870][T12433] [ 364.142876][T12433] [ 364.327434][T12433] Allocated by task 11599: [ 364.331835][T12433] kasan_save_track+0x3e/0x80 [ 364.336519][T12433] __kasan_slab_alloc+0x6c/0x80 [ 364.341365][T12433] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 364.346820][T12433] vm_area_dup+0x2b/0x680 [ 364.351148][T12433] dup_mmap+0x90c/0x1ac0 [ 364.355387][T12433] copy_mm+0x13c/0x4b0 [ 364.359460][T12433] copy_process+0x1706/0x3c00 [ 364.364135][T12433] kernel_clone+0x21e/0x840 [ 364.368642][T12433] __x64_sys_clone+0x18b/0x1e0 [ 364.373406][T12433] do_syscall_64+0xfa/0x3b0 [ 364.377906][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.383804][T12433] [ 364.386120][T12433] Freed by task 15: [ 364.389918][T12433] kasan_save_track+0x3e/0x80 [ 364.394597][T12433] kasan_save_free_info+0x46/0x50 [ 364.399618][T12433] __kasan_slab_free+0x5b/0x80 [ 364.404376][T12433] slab_free_after_rcu_debug+0x129/0x2a0 [ 364.410018][T12433] rcu_core+0xca8/0x1770 [ 364.414262][T12433] handle_softirqs+0x283/0x870 [ 364.419028][T12433] run_ksoftirqd+0x9b/0x100 [ 364.423529][T12433] smpboot_thread_fn+0x542/0xa60 [ 364.428465][T12433] kthread+0x711/0x8a0 [ 364.432523][T12433] ret_from_fork+0x3f9/0x770 [ 364.437113][T12433] ret_from_fork_asm+0x1a/0x30 [ 364.441879][T12433] [ 364.444196][T12433] Last potentially related work creation: [ 364.449900][T12433] kasan_save_stack+0x3e/0x60 [ 364.454592][T12433] kasan_record_aux_stack+0xbd/0xd0 [ 364.459793][T12433] kmem_cache_free+0x2f6/0x400 [ 364.464549][T12433] vms_complete_munmap_vmas+0x626/0x8a0 [ 364.470091][T12433] do_vmi_align_munmap+0x358/0x420 [ 364.475199][T12433] do_vmi_munmap+0x253/0x2e0 [ 364.479791][T12433] do_munmap+0xe1/0x140 [ 364.483937][T12433] mremap_to+0x2df/0x7a0 [ 364.488179][T12433] __se_sys_mremap+0xadf/0x1150 [ 364.493029][T12433] do_syscall_64+0xfa/0x3b0 [ 364.497536][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.503436][T12433] [ 364.505767][T12433] The buggy address belongs to the object at ffff88807d3e3dc0 [ 364.505767][T12433] which belongs to the cache vm_area_struct of size 256 [ 364.520086][T12433] The buggy address is located 88 bytes inside of [ 364.520086][T12433] freed 256-byte region [ffff88807d3e3dc0, ffff88807d3e3ec0) [ 364.533818][T12433] [ 364.536149][T12433] The buggy address belongs to the physical page: [ 364.542576][T12433] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d3e3 [ 364.551338][T12433] memcg:ffff888059f04601 [ 364.555574][T12433] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 364.562687][T12433] page_type: f5(slab) [ 364.566674][T12433] raw: 00fff00000000000 ffff88801bae2b40 dead000000000100 dead000000000122 [ 364.575263][T12433] raw: 0000000000000000 00000000000c000c 00000000f5000000 ffff888059f04601 [ 364.583843][T12433] page dumped because: kasan: bad access detected [ 364.590257][T12433] page_owner tracks the page as allocated [ 364.595988][T12433] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5245, tgid 5245 (udevd), ts 31666944834, free_ts 31622786471 [ 364.614666][T12433] post_alloc_hook+0x240/0x2a0 [ 364.619436][T12433] get_page_from_freelist+0x21e4/0x22c0 [ 364.625000][T12433] __alloc_frozen_pages_noprof+0x181/0x370 [ 364.630805][T12433] alloc_pages_mpol+0x232/0x4a0 [ 364.635650][T12433] allocate_slab+0x8a/0x370 [ 364.640160][T12433] ___slab_alloc+0xbeb/0x1410 [ 364.644833][T12433] kmem_cache_alloc_noprof+0x283/0x3c0 [ 364.650285][T12433] vm_area_dup+0x2b/0x680 [ 364.654612][T12433] dup_mmap+0x90c/0x1ac0 [ 364.658875][T12433] copy_mm+0x13c/0x4b0 [ 364.662952][T12433] copy_process+0x1706/0x3c00 [ 364.667633][T12433] kernel_clone+0x21e/0x840 [ 364.672134][T12433] __x64_sys_clone+0x18b/0x1e0 [ 364.676902][T12433] do_syscall_64+0xfa/0x3b0 [ 364.681408][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.687294][T12433] page last free pid 15 tgid 15 stack trace: [ 364.693262][T12433] __free_frozen_pages+0xbc4/0xd30 [ 364.698375][T12433] __tlb_remove_table+0x2d2/0x3b0 [ 364.703406][T12433] tlb_remove_table_rcu+0x85/0x100 [ 364.708513][T12433] rcu_core+0xca8/0x1770 [ 364.712764][T12433] handle_softirqs+0x283/0x870 [ 364.717537][T12433] run_ksoftirqd+0x9b/0x100 [ 364.722041][T12433] smpboot_thread_fn+0x542/0xa60 [ 364.726980][T12433] kthread+0x711/0x8a0 [ 364.731046][T12433] ret_from_fork+0x3f9/0x770 [ 364.735656][T12433] ret_from_fork_asm+0x1a/0x30 [ 364.740423][T12433] [ 364.742737][T12433] Memory state around the buggy address: [ 364.748355][T12433] ffff88807d3e3d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.756423][T12433] ffff88807d3e3d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 364.764490][T12433] >ffff88807d3e3e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 364.772896][T12433] ^ [ 364.777750][T12433] ffff88807d3e3e80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 364.785814][T12433] ffff88807d3e3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 364.793884][T12433] ================================================================== [ 364.839084][T12345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.847894][T12433] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 364.855120][T12433] CPU: 0 UID: 0 PID: 12433 Comm: syz.3.1997 Not tainted 6.17.0-rc2-next-20250818-syzkaller #0 PREEMPT(full) [ 364.866666][T12433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 364.876728][T12433] Call Trace: [ 364.880015][T12433] [ 364.882966][T12433] dump_stack_lvl+0x99/0x250 [ 364.887577][T12433] ? __asan_memcpy+0x40/0x70 [ 364.892189][T12433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.897416][T12433] ? __pfx__printk+0x10/0x10 [ 364.902137][T12433] vpanic+0x281/0x750 [ 364.906130][T12433] ? preempt_schedule+0xae/0xc0 [ 364.910987][T12433] ? __pfx_vpanic+0x10/0x10 [ 364.915492][T12433] ? preempt_schedule_common+0x83/0xd0 [ 364.920960][T12433] ? preempt_schedule+0xae/0xc0 [ 364.925815][T12433] ? __pfx_preempt_schedule+0x10/0x10 [ 364.931214][T12433] panic+0xb9/0xc0 [ 364.934946][T12433] ? __pfx_panic+0x10/0x10 [ 364.939369][T12433] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 364.945289][T12433] ? __se_sys_mremap+0xb33/0x1150 [ 364.950331][T12433] check_panic_on_warn+0x89/0xb0 [ 364.955286][T12433] ? __se_sys_mremap+0xb33/0x1150 [ 364.960319][T12433] end_report+0x78/0x160 [ 364.964558][T12433] kasan_report+0x129/0x150 [ 364.969059][T12433] ? __se_sys_mremap+0xb33/0x1150 [ 364.974099][T12433] __se_sys_mremap+0xb33/0x1150 [ 364.978961][T12433] ? __pfx___se_sys_mremap+0x10/0x10 [ 364.984251][T12433] ? rcu_is_watching+0x15/0xb0 [ 364.989026][T12433] ? __x64_sys_mremap+0x20/0xc0 [ 364.993886][T12433] do_syscall_64+0xfa/0x3b0 [ 364.998413][T12433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.004491][T12433] ? clear_bhb_loop+0x60/0xb0 [ 365.009163][T12433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.015051][T12433] RIP: 0033:0x7fbe44b8ebe9 [ 365.019461][T12433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.039064][T12433] RSP: 002b:00007fbe45ae0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 365.047568][T12433] RAX: ffffffffffffffda RBX: 00007fbe44db5fa0 RCX: 00007fbe44b8ebe9 [ 365.055547][T12433] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000155000 [ 365.063524][T12433] RBP: 00007fbe44c11e19 R08: 0000200000416000 R09: 0000000000000000 [ 365.071498][T12433] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 365.079471][T12433] R13: 00007fbe44db6038 R14: 00007fbe44db5fa0 R15: 00007ffcda307518 [ 365.087454][T12433] [ 365.090818][T12433] Kernel Offset: disabled [ 365.095146][T12433] Rebooting in 86400 seconds..