last executing test programs: 4m47.683511326s ago: executing program 0 (id=566): creat(&(0x7f0000000000)='./file0\x00', 0x1ea) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2a) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r3, @ANYRES64=r2], 0x0) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x800) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 4m46.025858275s ago: executing program 0 (id=571): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r0, &(0x7f0000000100)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x24) (async) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f0000000180)={0x20, r3, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]}) (async) bind$rxrpc(r1, &(0x7f0000000180)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @rand_addr=0x64010101}}, 0x24) r4 = socket(0x11, 0xa, 0x0) (async) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000300)={0x0, 0x100000029}, 0x8, 0x0, 0x0, 0x4000847}, 0x0) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='cdg\x00', 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r5, 0x5421, &(0x7f0000000100)=0x9) (async) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r5) (async) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x4) close(r7) (async) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000f40)=@ethtool_gstrings={0x1b, 0x3}}) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x20}, 0x20008894) (async) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc0080019a107000200060018c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r6, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40800, 0x84) landlock_restrict_self(r9, 0x4) 4m45.717973542s ago: executing program 0 (id=573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x20300) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) 4m45.458801411s ago: executing program 0 (id=576): getpgid(0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000040)=0x9, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000140)) (async) r1 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x8941, 0x0) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0881) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0xcf, 0xfffffffb, 0x0, 'queue0\x00'}) (async) write$sndseq(r3, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r3, 0x402c5342, &(0x7f0000000100)={0x0, 0x5, 0x160, {0xd34b, 0x7}, 0x10, 0x4}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r2, 0x2000) 4m45.281953203s ago: executing program 0 (id=577): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000180)="e370d6", 0x3}], 0x1) socket(0x11, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xfd, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffc, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0) sendfile(r2, r2, &(0x7f0000000080), 0x7f03) 4m43.744426011s ago: executing program 0 (id=589): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000002580)={0x5, 0xb, 0xc, 0x2, 0x80000000, 0x7, 0x6}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000002540)={0x3, &(0x7f0000002180)=[{}, {}, {}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='nilfs2\x00', 0x4e080b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000002480)={0xa, 0xfffe, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000008a00)=0xc, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = socket$nl_crypto(0x10, 0x3, 0x15) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000002140)=0xc) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) pwritev2(r8, &(0x7f00000007c0)=[{&(0x7f00000000c0)="cb19", 0x2}], 0x1, 0x9, 0x7f, 0xb) r9 = dup(r4) sendto$inet6(r9, &(0x7f0000000800)="1e", 0x1, 0x4041, 0x0, 0x0) read$FUSE(r9, &(0x7f0000000100)={0x2020}, 0x2020) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000024c0)=ANY=[@ANYBLOB="12011001392518f5ae00000020bd2809094f000102030109022400010108c00d0904000502030100c409210300000022220e09058103c7d00946e1c00c31498ca79ece7ac1449758f90be414754e95d51a9427d32863"], &(0x7f0000002400)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x340, 0x9, 0xa0, 0x6a, 0x40, 0xc2}, 0x5, &(0x7f0000002200)={0x5, 0xf, 0x5}, 0x5, [{0x3c, &(0x7f0000002240)=ANY=[@ANYBLOB="3c03b6f5d744a877fe66de5e47258c6ee1d522e30cdd99b528fe8aedc79a66f67a00a96cfa3efcfff5552cbd22dd32025c6133555542f4f96a0583ee"]}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x439}}, {0x9a, &(0x7f0000002300)=@string={0x9a, 0x3, "7f8d3df0120b21582c51e24ecdb490615543164b5d7bea0178165bd8e759994afe0bf4312197e9007e7fb062a655ab691a6d78687af41b8e5f51897425311eabfe3f2f2a179f7c94eaa482a45162dddf5c848faabcd660def16587e9ab12515c53901d4e84b15b6d9138e446a261ed106dafec7492ebfb60dd6c736061430d394e87ce272faa3d7b397e78f2047bdc9318e912505e9f4ce1"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4}}]}) 4m28.203011737s ago: executing program 32 (id=589): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x32) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x22601, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x2, "94c492eb0165203d36bec70800890100000000000000e1100a0000005900", 0xffffffffffffffff}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000002580)={0x5, 0xb, 0xc, 0x2, 0x80000000, 0x7, 0x6}) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000002540)={0x3, &(0x7f0000002180)=[{}, {}, {}]}) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='nilfs2\x00', 0x4e080b, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000002480)={0xa, 0xfffe, 0x0, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000008a00)=0xc, 0x4) shutdown(r5, 0x0) recvmmsg(r5, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000340)="fb", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = socket$nl_crypto(0x10, 0x3, 0x15) getpeername$netlink(r7, &(0x7f0000000000), &(0x7f0000002140)=0xc) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) pwritev2(r8, &(0x7f00000007c0)=[{&(0x7f00000000c0)="cb19", 0x2}], 0x1, 0x9, 0x7f, 0xb) r9 = dup(r4) sendto$inet6(r9, &(0x7f0000000800)="1e", 0x1, 0x4041, 0x0, 0x0) read$FUSE(r9, &(0x7f0000000100)={0x2020}, 0x2020) syz_usb_connect$hid(0x1, 0x36, &(0x7f00000024c0)=ANY=[@ANYBLOB="12011001392518f5ae00000020bd2809094f000102030109022400010108c00d0904000502030100c409210300000022220e09058103c7d00946e1c00c31498ca79ece7ac1449758f90be414754e95d51a9427d32863"], &(0x7f0000002400)={0xa, &(0x7f00000021c0)={0xa, 0x6, 0x340, 0x9, 0xa0, 0x6a, 0x40, 0xc2}, 0x5, &(0x7f0000002200)={0x5, 0xf, 0x5}, 0x5, [{0x3c, &(0x7f0000002240)=ANY=[@ANYBLOB="3c03b6f5d744a877fe66de5e47258c6ee1d522e30cdd99b528fe8aedc79a66f67a00a96cfa3efcfff5552cbd22dd32025c6133555542f4f96a0583ee"]}, {0x4, &(0x7f0000002280)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000022c0)=@lang_id={0x4, 0x3, 0x439}}, {0x9a, &(0x7f0000002300)=@string={0x9a, 0x3, "7f8d3df0120b21582c51e24ecdb490615543164b5d7bea0178165bd8e759994afe0bf4312197e9007e7fb062a655ab691a6d78687af41b8e5f51897425311eabfe3f2f2a179f7c94eaa482a45162dddf5c848faabcd660def16587e9ab12515c53901d4e84b15b6d9138e446a261ed106dafec7492ebfb60dd6c736061430d394e87ce272faa3d7b397e78f2047bdc9318e912505e9f4ce1"}}, {0x4, &(0x7f00000023c0)=@lang_id={0x4}}]}) 3m9.930865223s ago: executing program 1 (id=1238): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@metacopy_on}]}) syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') r2 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001140)=ANY=[@ANYBLOB="440300001100010226bd7000fcdbdf2564010100000000000000000000000000000004d20a0032"], 0x344}, 0x1, 0x0, 0x0, 0x40884}, 0x0) pread64(r2, &(0x7f0000000100)=""/215, 0xd7, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x5708e000) 3m9.385823952s ago: executing program 1 (id=1242): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) (async) sendto$packet(r1, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) readv(r1, &(0x7f0000000700)=[{&(0x7f0000000500)=""/218, 0xda}], 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r0, 0xebe3b000) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r3, &(0x7f0000001e00)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/122, 0x7a}, {&(0x7f0000000680)=""/190, 0xbe}, {&(0x7f00000005c0)=""/140, 0x8c}, {&(0x7f0000000240)=""/36, 0x24}, {&(0x7f0000000140)=""/127, 0x7f}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f0000000280)=""/64, 0x40}, {&(0x7f0000000380)=""/19, 0x13}, {&(0x7f0000000500)=""/150, 0x96}, {&(0x7f0000003580)=""/4082, 0xff2}, {&(0x7f00000009c0)=""/239, 0xef}], 0xc}, 0x2}], 0x3, 0x2120, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) kexec_load(0xf5, 0x1, &(0x7f0000000b80)=[{&(0x7f00000004c0)=')', 0x1, 0x0, 0x1000}], 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) (async) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000300)=0x30, 0x1) 3m9.3616153s ago: executing program 1 (id=1244): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_setattr(r0, &(0x7f0000000100)={0x38, 0x0, 0x2, 0x1000, 0x69, 0x9, 0x5, 0x5, 0x9, 0x9}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 3m9.22199235s ago: executing program 1 (id=1245): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x1004040, 0x0) chroot(&(0x7f0000000180)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00') prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x81}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x7ffd) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) getrlimit(0x4, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x7ffff000) 3m9.21775784s ago: executing program 1 (id=1246): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, &(0x7f0000000240)=0x7ffb, 0x4) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000090400000302060000052406000005240000000d240f010000000000000000000905820240000000000905"], 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 3m8.73303586s ago: executing program 1 (id=1250): r0 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) fstat(r1, &(0x7f0000000180)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=@flushpolicy={0x10, 0x1d, 0x1, 0x70bd29, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000800) mmap(&(0x7f0000803000/0x1000)=nil, 0x1000, 0x3000001, 0x22052, r0, 0x2000) r3 = getpid() waitid(0x1, r3, 0x0, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x2, 0x4000001b}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4) 2.154902626s ago: executing program 4 (id=1608): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000000)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r1, 0x1a1c1000) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) 2.073917873s ago: executing program 4 (id=1609): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) read$eventfd(r1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$inet(r4, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000080)="1e", 0x1}], 0x1}, 0x4000001) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r3, 0x2300}, {r3, 0x20}, {r4, 0x40}, {r4, 0x61c0}, {r1, 0xa00}, {r4, 0x4000}], 0x6, &(0x7f00000001c0)={r5, r6+10000000}, &(0x7f0000000240)={[0x8]}, 0x8) recvmsg(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f0000000200)={r2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 2.073536267s ago: executing program 2 (id=1610): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) dup(0xffffffffffffffff) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, 0x1411, 0x1, 0x70bd2d, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x24040800) (async) dup(0xffffffffffffffff) (async) 2.063459889s ago: executing program 3 (id=1611): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x10, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r2, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048044}, 0x800) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x60, r4, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_SECCTX={0x30, 0x7, 'system_u:object_r:system_dbusd_var_lib_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x58, 0xa, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_ADT={0x30, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x74, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x44000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000006c0), r0) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000740), r0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x50, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x10001}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffff8}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1f}]}, 0x50}, 0x1, 0x0, 0x0, 0x4800}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x5c, r2, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000a00)=0x14) ioctl$sock_ifreq(0xffffffffffffffff, 0x8920, &(0x7f0000000a40)={'bridge0\x00', @ifru_addrs=@xdp={0x2c, 0x0, r7, 0x35}}) syz_genetlink_get_family_id$nbd(&(0x7f0000000a80), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000b00)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x884) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SHORT_ADDR(r8, &(0x7f0000000d80)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x20002}, 0xc, &(0x7f0000000d40)={&(0x7f0000000cc0)={0x64, r2, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xffff}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x555e}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}}, 0x990) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r8) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000fc0)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e40)={0x13c, r2, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x5}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x94}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x13c}, 0x1, 0x0, 0x0, 0x4011}, 0x42) r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000001000), 0x410000, 0x0) write$nci(r11, &(0x7f0000001040)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x1, 0x2, 0x0, 0x80, 0x1}, 0x4) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r8, &(0x7f0000001140)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r2, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040004}, 0x20008000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r8, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x28, r2, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040081}, 0x20000000) syz_usb_connect(0x5, 0x2ea, &(0x7f0000001280)={{0x12, 0x1, 0x250, 0xa, 0x54, 0x1a, 0x20, 0xfb8, 0x3002, 0x7a43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d8, 0x1, 0x6, 0x6, 0x10, 0xa, [{{0x9, 0x4, 0x94, 0x1, 0x6, 0xb2, 0x6a, 0xcf, 0x8, [], [{{0x9, 0x5, 0x6, 0x0, 0x240, 0x7, 0x8, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x20, 0x1, 0x8, 0xab}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x5, 0x62, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xc, 0x2}]}}, {{0x9, 0x5, 0x80, 0x10, 0x200, 0x4, 0x7, 0x1, [@generic={0x9b, 0x4, "046e324dcd685120b9064fbc755a665d5a9ed11d4d8b74d823eec1f3533d2f66d0426c14b3e24a523bee545c1e2630280b163285979b2bc3d3db063f9a9ab917e80747d8f8730e6dd23f570e1ec9da96437e1a1ade08ebc9282a815d7f166b67aa43cd61157badfb7a2537094eaea09188836ac65e1ed0da399b8a9c40ea33740182a561953b031c53bc8e857206a2d9ce0e8f0b76ef008f0f"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x8, 0x6, 0xfb, 0x5, [@generic={0xca, 0x0, "0cccf09ce26c77509a8c6a561ec5efb5fbad517c3333a9b20b89a498fb3620392a2aa884b0d9122486420f05f8ba2387eaf60e80d0f5097588f35464027a2ae6a4380d2d02058386aa2a8ca422ba537452967df1b69d4ef654d8bb34e62548522774ec8026541de990ecc99e1a4e216eddc7c732622af37fbc9334169535c809f66a9bbbe120a5877802c4a1e98115d29815cc1780c588f77a3f735551df95dcdcb799a8a5666081ee17d9fe84d1041474679f5528d5699f308a5ff3e0bf85cc482f47e6305f3e27"}, @generic={0x54, 0xa, "10056b80f1d635233dd18db404434eaca195885d005ec1141c06229af3fae0b31b97a930b39b9cf4e8c416fcf650f01fa820094cd11b0b47eb834078ce45f70331dc1f41d294001af1ffc2e4f1f6a5c7f878"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0xc, 0xd, 0x40, [@generic={0xc2, 0x6, "52fa52f3a14cea78d4c2aa64fc7187eae34f66463e73c37003d3605a53e236580b274f3959b7a4722503eda1d9be36321c4b6ff60c1244859ff4600fe08313f9a0bc8fa4b3f1e80886002eddd75f415138121c5270d0ecc17669081ceef8d6c4e290940e582f5151361df60343377dce798bb2227292f867b19605266a417d5312d4b12ecf14e1ea6e5f70f14792c4bf2d22b1dca81c32d9aabf8269f91e0e1cb1e0fb87439a5ccb6b701ea07f79dbf224f1ebc31e7c3e32320310dbf669fd09"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x9}]}}]}}]}}]}}, &(0x7f0000001740)={0xa, &(0x7f0000001580)={0xa, 0x6, 0x201, 0x1, 0x0, 0x1, 0x40, 0x19}, 0x5, &(0x7f00000015c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x439}}, {0xcf, &(0x7f0000001640)=@string={0xcf, 0x3, "2a9d8ebf203a46d723a6972f36c0ce6eb66259b66870a417db4d0c1454396d2b35f36f71c27f06940306eebffca322865a92e1ce1ba9b4c7b3fe45784122432a1a94fd3b9420c45519560b074d05be0acf99962115b30234605d0a6bdedd35d7a5e522823f671fa56be54daf801777b956aa57c63eb6444a212cc7699718a60043e16fbf2ee4f82f19eafe1188296ae7f6d80a4c862a419196cf0bc784cf0b33f27ab447a5c23f48f1f0984d8f0631db1d1f771464141584010167f3cc2376bdc732f0a5d2872be644969a8769"}}]}) 1.9830481s ago: executing program 2 (id=1613): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xac, r0, 0x4, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffa}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x6c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffffff01}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x37}}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffff}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffb25}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x24040082}, 0x2) r1 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000037c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003780)={&(0x7f0000000200)={0x3570, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x100d, 0x80, [@supported_rates={0x1, 0x2, [{0x6, 0x1}, {0x1, 0x1}]}, @measure_req={0x26, 0x1003, {0x45, 0x80, 0xfb, "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"}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1d, 0x7f, [@ssid={0x0, 0x6, @default_ibss_ssid}, @cf={0x4, 0x6, {0x2, 0x8, 0x2, 0x5}}, @sec_chan_ofs={0x3e, 0x1, 0x3}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x2, 0xaf, 0x1}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x1a, 0x7f, [@peer_mgmt={0x75, 0x14, {0x0, 0x3, @void, @void, @val="745cefbf2f11b7bd02f02fbd6739af6b"}}]}], @beacon=[@NL80211_ATTR_BEACON_HEAD={0x1ea, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x1}, @device_b, @device_b, @initial, {0x4, 0x3}}, 0xffffffff, @default, 0xa280, @val={0x0, 0xf, @random="4c55165904b6d55a477d44073bc1e6"}, @val={0x1, 0x3, [{0x1, 0x1}, {0x18}, {0x12}]}, @val={0x3, 0x1, 0x70}, @val={0x4, 0x6, {0x7b, 0x7, 0x6, 0xe4}}, @val={0x6, 0x2, 0x5}, @void, @val={0x25, 0x3, {0x1, 0x2c, 0x4a}}, @void, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x7, 0x0, {0xfff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, 0x400, 0x5}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x1, 0x7, 0x3}}, [{0xdd, 0x21, "24243837be27785f6978bf0bfec750c6dcc9467cd7603966c0f7ab07ebb566f6cf"}, {0xdd, 0xf0, "475c6db52d449cda4d966d90ed8c256a023cfb18f87e1d5b7481783f6e07979475b83bc6ce361061fee0725bcc33ea7a428abaf7a112e4be8618ea82dace18614472415d80a2403154290a4775d95aff195132b78395b63a143162b6b3619b4586c04abb64ab19a401b1b8d4d20f73476fcd52ede8544d0bfac1b3af32bd8a1110248b665dc9301ebcae780a59b04bd0be32f2258c4040a36e3d5d27ca6a924e38fcfe25e308bfbe49ea93fb6a545ff9adc3cfe12fcf58562ce21578f1fc93a9699d4eb3dec341fb1cf799a6b284095019564a1996ad762a17486eba183ca64bfa9bb27078aeff8f22975586fd70ab98"}, {0xdd, 0x1d, "7422b70e9e88f3e4649af6318d8ea5865b2188fe3b85b317e8e69389fa"}, {0xdd, 0x36, "5d755c55549750869c4d54c6d5d503200671f72c4172bbac03d5a3fecdf08045ee3d53647d326fe171e7d3161b78f81043b2531e3a24"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x11b5, 0x80, [@peer_mgmt={0x75, 0x6, {0x1, 0x4, @void, @val=0x2f, @void}}, @measure_req={0x26, 0x1003, {0x2, 0x3, 0x6, "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"}}, @preq={0x82, 0x62, {{0x1, 0x1, 0x0, 0x0, 0x1}, 0x40, 0xe, 0x7, @device_a, 0x4, @value, 0x80000001, 0x101, 0x6, [{{0x1, 0x0, 0x1}, @broadcast, 0x5}, {{0x1}, @device_b, 0x1}, {{0x0, 0x0, 0x1}, @broadcast, 0xff}, {{0x1, 0x0, 0x1}, @broadcast}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x1}, @device_b, 0x2}]}}, @preq={0x82, 0x67, {{0x1, 0x1}, 0x5, 0x6, 0x6, @device_b, 0x5, @void, 0x1, 0x6, 0x7, [{{}, @broadcast, 0x4}, {{}, @device_a, 0x191}, {{0x1}, @device_a, 0xaf}, {{0x1}, @broadcast, 0x2}, {{0x1}, @device_b, 0x1}, {{}, @device_b, 0x81}, {{}, @device_a, 0x5}]}}, @rann={0x7e, 0x15, {{0x0, 0x6}, 0x0, 0x5, @broadcast, 0x602a, 0x2, 0x5}}, @random={0x4, 0x9d, "5236a1d54c86878fb6241fbb2cdc19d2b8b7bedc64669fd35c22c3b0280105bb155c32ca3ac80783492aa57ceb90a63f50632b247c0d877ed85bea95cacacf93046b6148edb66ba7050dc3c69f3b7eb5f24f5a46c0dfbf875902ef00a5b397b313bb82cb735d11c3de4455ef372f47d937744c09f85c91b51d72dab00c370aa224ad542ce5db4bcaaa847a30d8e825d2478f6d826c390193da2f5002f0"}, @ht={0x2d, 0x1a, {0x8000, 0x1, 0x0, 0x0, {0x101, 0x7, 0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x800, 0xcea2}}, @supported_rates, @challenge={0x10, 0x1, 0x55}]}, @NL80211_ATTR_FTM_RESPONDER={0xb4, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xb0, 0x2, "9e3eb8cb33ccbb72bdd83edc70ce2d348f6388b6676869f87fa7f328333bc750eae1297dc9951b98f3e4cdef705005431791c59b2ed3bf483fafead7f22ce2ac06772d680674431729a50a34465915e503253dfe3f5e1a8dbc32a351caa5908041459ca6f3655ef99d5c2cf96374a896dad1dea8b317b961dbe9f85f8aaccea4737003592bdf625ac73827b15f4a452f861aa3bd4916ee18fd4f6cd59a65a5ca25224801cc38967f6d565e98"}]}, @NL80211_ATTR_PROBE_RESP={0x418, 0x91, "5eb07014fb604d10a027be46a4e874afb0fb17619c43b54b5233cba6fbaab5c6d29c67ac337c0707112a665bfbce6f79fc534e405930eca5625d9dd931245d44b277e6a7d35747237d063cbfb4b2078a1d6238f77a659eaab47b476b372eff9db8f41594c7e20262ba8c3ebffda2416315fab7b02f22f43408c8a9f3526448fe927c16bb538adb5e596cbb03f3d87ae321163b2502d5a8513ef41a9f4e2cf9022501ab4f831d4f98fabd0416aefde41dcb90662885d9f3a0f11708d0fcc0c6af923b136f15e3b840d80f36ad2d016b643fbb6796ff549155e696abf6ba2dffa8caf20106898adc83c653b605f3ffa8dfe0b9e79153d836e3525c35cc2855c492d7d1fe2349adf36734966ea8da7c0699f412472428b6e21884fd388225e83e63e7e042f0981090bf43afc581c46e8465d309a60ad0e1d133eced7630057f48a051e5782088e99d6f129c5f31b461745f3544c238f2f3d2e10a685b7017a56f249512ece57fbf846c132d723d7d0c8f53bb7e4439fcc9a417e3b902e4c277b8a917e6550f8a51209124c8ef2c216511d90a14619afcfd557516e1272f702c4d8a6f6a451b83db9641fddc33d36a81f8b475e2dae92bf4ec7ccd89208dcd15664d154a375950b814bbf1dbf8314dc656e1478520e05f8534bd84f0a1fc485cd42bac7f6a516df2807402ed0ed95ec0a142bff3980b3bcfe4f269c978f404325dc26c9deb8ae31e7dc66393a2d1731cbb238c742e2a1dad229cfe0e674d518d93c0fbcffc3f84b263b0bcf76e3bdc51c7a0beae1969a1f75ad5efcaca693f0e84737dd05812df6b4776fd110fbe32d1b7de20bf3cd7b9a85c541d331ed9484eb0d30fa558be9840047208c8afff598c55201fac738929350bd7a0dfd46ee732d362ef232a77b603d0b6424914feb232f0b4fd6527af3f76f783efc2a221507fa9c351f0bc35f24421d27b53a1dce178b76beca762c08022864abd45476a026a1fb1a88b77a1cc2e56a6090b481e2f0f797b47cdfb667c45ed1d839bcf4b9696c4e85e5e41746b3ae48d293ff394d5c340f542e8a46d271643be681d8d5c0557c3c6446a431b288a68deb06de026f1e84f2853d3c67063d6bf6edd6c649f9239cb4d5ea0e3430ed5edfaac34bc944ebcf1d37b6265fb9315074a4768ee2869dbf99193bfb5a3f47e7b2128a6cfbd68e7ed652c6561acea164e99d232de3814f7648fb01ee38584ad1090ea8cdcf8554fe7a4e557ca81757b598870414bd4e797f03c00629d0c99b9f54e86666098dc6c98a66c952efb598736bda3b87a197dfbd342997586af98dde50a204ff35783c5dfde071329af29c4252b3bd6c4b981519c4c7dd98de27f048f9a783082c57792bddb2fecc4746b714539600cef0a96e7b990629ddc85b89cd712e673c7f1b1a870cffdc0f83d72c1affa6f516f64c1234daf6088032748bd58419b9bf0f7ddfe0c38a91f546e"}, @NL80211_ATTR_IE_ASSOC_RESP={0x4d, 0x80, [@rann={0x7e, 0x15, {{0x1, 0x37}, 0x0, 0x3, @device_a, 0x4, 0x2, 0x1}}, @ht={0x2d, 0x1a, {0xa0, 0x2, 0x1, 0x0, {0x7fff, 0x3, 0x0, 0x61, 0x0, 0x0, 0x1}, 0x8, 0x6, 0x4}}, @peer_mgmt={0x75, 0x14, {0x1, 0x5, @void, @void, @val="1950cf9fa760df1677c5a70e66a0fd34"}}]}, @NL80211_ATTR_PROBE_RESP={0x7e4, 0x91, "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"}, @NL80211_ATTR_BEACON_TAIL={0x26, 0xf, [@ht={0x2d, 0x1a, {0x2, 0x0, 0x2, 0x0, {0x2, 0x1ffb, 0x0, 0xff, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x1, 0x8, 0x7}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0x5, 0x1}}]}, @NL80211_ATTR_FTM_RESPONDER={0x3ac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xdc, 0x3, "8fcf128094b8d1bf5463a013bbfbc98f03d2bf3cad3b870c637bb65bd349c27e42dde53d0ad64c6343158caeee126acc04c18805acbb5cebd6624d0d1f8dbd830ac77e42a8f114d1c87d29cc14b73c2c4a517c5d33c8c13fc42cb60f86be89cccb060cff2ed21c6cce3bc7a2e43b3aa52340d2fbd20ecf0d2b21a5053faece93434d547f56398aaa46f30c14521c10e5b23e3b1b0dc7d7236d5cf6a3b77409c7e2af645c1427d091e13bb735bce0a16c9489eda18d40bcd3f0190dbe2bc1d14190800592cd9af0f0be1b16e6112fe829834de650a3cd479e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x66, 0x3, "a4806336f371ca48aa503732e0e87c272a6804170fea17c40b28f04c38b60383b01871733ba10553bbe1771959c1d2fed8e2695b8ab74a8155737fb3865bbe8b1f2dcdf17d9d6173e53ef17afd974e15e022e771521538b86d3d744b7ebd22774c0c"}, @NL80211_FTM_RESP_ATTR_LCI={0xf6, 0x2, "51a04fd6a640807b842c4fc43fc309ba2480b59275be52dfd19a4ca03ae84f5c0efc5d4fc4059b9d35bf1d7d4c57ff72e03b5334f156785bc5465f8623023aead839b760d28ec0c13255f72d0be0ca040fc9dca43bf5ab4e95f193f853cade3a0ea2cac6ae6178a6681f0a57d305954787697c2c59d4538d0cc3cf075bee5da0c194b886c5653c588737d6ac86f7ff5c2ed2a10d80ed811da0a0ce736bde89fd285bc7cbeae75b39f2acc667629a648a114399780f3fefb14c151d616920096f3b5f6040047fa6c091d535ccf1439a7d26f38ec779e9f410b0a9909b300abfc4f6704d9dfc6896d01c7b8c47805eda65fd8b"}, @NL80211_FTM_RESP_ATTR_LCI={0xff, 0x2, "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"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x54, 0x3, "80b17fb94aa784b635be3b5686475c6331742ea75dacb94c4172bd957388263c0a26083caa6538d61f9173bd8b1ffd73bd6f87198f55d14ef92c6ab265bcd9493cc6eaaa3e5b09165aec75abf9ad2f80"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x13, 0x3, "9b89496ecf9d0557b5ef6e9946abb5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@supported_rates={0x1, 0x5, [{0x1, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x6}, {0x30, 0x1}]}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0x2c, 0x8}}, @ibss={0x6, 0x2}, @challenge={0x10, 0x1, 0xc8}]}], @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5}, @NL80211_ATTR_HE_OBSS_PD={0x28, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0x6}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "5e1b0b5c10f28e92"}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xc0}]}, @NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x1b}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xc}]}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8001}]}, 0x3570}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003800), r1) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000038c0)={0x0, &(0x7f0000003840)=[@uexit={0x0, 0x18, 0x8000000000000001}, @wr_crn={0x46, 0x20, {0x0, 0x7}}, @wrmsr={0x1e, 0x20, {0x10d}}, @wr_crn={0x46, 0x20, {0x3, 0x7ff}}], 0x78}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000003940)=[@text64={0x40, &(0x7f0000003900)="3e45dae90f00d9c4827d18d0c402792b5e00660fc7760566bad104b808000000ef66baa10066ed0f01c83e64f30f1bca65640f01c9", 0x35}], 0x1, 0x62, &(0x7f0000003980)=[@cstype0={0x4, 0xf}, @dstype3={0x7, 0x4}], 0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000039c0)={'ah\x00'}, &(0x7f0000003a00)=0x1e) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000003a40)) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000003ec0)={0x10200, 0x300, 0x380, &(0x7f0000003ac0)=[0x2, 0x54dc, 0xa4c, 0x1000, 0x4, 0xffffffffffffffff, 0x2, 0x9, 0x9, 0xfffffffffffffffc, 0xa51a, 0x224f, 0xb, 0x2, 0x3, 0x8, 0xffff, 0x8, 0x3, 0xf, 0x3, 0xcbbe, 0x3, 0x8, 0x5, 0x8, 0xf, 0xfd, 0x4, 0x7e1a3fa6, 0x7, 0x0, 0x8000000000000000, 0x6, 0x3, 0x0, 0x8, 0x4, 0x0, 0x9, 0xff, 0x81, 0x1, 0x2, 0x0, 0x7fffffff, 0xfffffffffffffc15, 0xffffffffffffffac, 0x100000001, 0x8, 0xffffffffffffffc0, 0x9, 0xa5, 0x10200000000000, 0x0, 0x3, 0x9, 0xa17f, 0x5, 0x9, 0x1000, 0x6ec3f5c6, 0xf45, 0xb1, 0x1, 0x8, 0x7fffffff, 0x7, 0x6, 0x6, 0x959e, 0x4, 0x0, 0x7, 0xcfc, 0x5, 0x10000000000000, 0x40, 0x5, 0x9, 0x66c50227, 0x4, 0x2, 0xfffffffffffffffe, 0x4, 0x0, 0xffff, 0x955, 0xfffffffffffffffe, 0xe, 0x334f, 0xe7, 0x1, 0x7, 0x5, 0x5, 0x100000000, 0x7, 0x1e, 0x5791, 0x6, 0x4, 0x9, 0x3ff, 0x3, 0x6, 0x89, 0x3ff, 0x4, 0x71, 0x3, 0xe, 0x8, 0x6, 0xee, 0xffffffffffffffff, 0x6, 0x4, 0x10000, 0x8, 0x3, 0x6, 0x7, 0x7, 0xffffffffffffffff, 0x6, 0x7ff, 0x3]}) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x0) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000003f00)) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000005280)={&(0x7f0000003f40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005240)={&(0x7f0000003f80)={0x1288, 0x13, 0x10, 0x70bd2a, 0x25dfdbff, {0xb, 0x0, 0x1, 0x6b, {0x4e20, 0x4e24, [0x7, 0x80000001, 0x9], [0x5, 0x800, 0x2, 0xee1], 0x0, [0x0, 0x4]}, 0x6, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x24, 0x1, "a1637148fb1b657dce0fcbbab3699a706f384d1c8d8ed0f5c72b1cffb041d880"}, @INET_DIAG_REQ_BYTECODE={0xa, 0x1, "c5a77dcbcf20"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "46e42dd7f2276e5cee5e72d937c7188bea01d50f7000b503dd8b58ac9a70823d0c223546a47f7a961201460694ce609a14f7a6a996b576325659a525ba3f84985df90e69fcfc205bae08fa7ffee6fd5be43c11297ca2de5552dc5bdf12f05301697aa4dfe3eda652e54e07078e0b590772b7d178caa016adfabd1cf73f0ac67220b55ca4fe39ec3d6353458c919f38d944997d6155525ab08d3989779d73a8956c755c90f5e930b9d3aa5b6811b6cfa4900876787df2cb32d613913a263b2ab7145c1bfb19a41091d37ff5c6cc06ac30d744dd6a08dd2ca6e92592"}, @INET_DIAG_REQ_BYTECODE={0x49, 0x1, "d54e0ef26b1fa9a7debd99ad16842517b393b7c858de03930ce08d0e68b896698a4b757739996d79ae0f7311a4b010f2907ae7972e34561c559326a7c92e99b716a925971c"}, @INET_DIAG_REQ_BYTECODE={0xda, 0x1, "e616173c02fd2beddec3bdce45831e80305eaf1e3b7a9d07caf6e754e5acf49837c5dc2da50e868066ab10e0ee6a266a2bf0c0d987eab48c684ca59706ee5bba19c41503138d8dbb086909cfd42df8ab965fe2d7e89a71db6a4ff710effd7419611e63518c6a3d9c11c8f94054bcdfb64ef349b9c18b7f848088cdfd94f1fcd7a6a57eedefa53c208debb5e6f3d1ef3026d4b061e2c2a6e96e04c44fef249ad61a7e9aee9c2695e389f5fc84c477e517100811e319e81fcf520d2acbdbeb2d077aad2631c7c27ee12af81a18100502ae1896cf9d761a"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x1288}, 0x1, 0x0, 0x0, 0x44001}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000052c0)=0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000005300)={0x27, r4, 0x1, 0x2, 0x8, 0x2, "9766618d143d5a3f4c334d2f2fa460fdf09a7bb370efbb6fc65291e53e8a07695da57bbe6cb83fcdbf677a6236882ffff3145f812dc9f6596813bcf8fcbd86", 0x3}, 0x60) r5 = openat(r1, &(0x7f0000005380)='./file0\x00', 0x100, 0x82) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000005400), r5) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f0000005580)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000005540)={&(0x7f0000005440)={0xd4, r6, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f00000055c0)={0x0, 0x8, 0xfffa, 0x7ff, 0x3, 0x3ff}, &(0x7f0000005600)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000005640)={r7, 0x2, 0x10}, 0xc) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000005740)={&(0x7f0000005680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000005700)={&(0x7f00000056c0)={0x1c, r2, 0x300, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x62}, @void, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x40) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000005780)={0x42, 0x820a, 0x3, 0x4, r7}, &(0x7f00000057c0)=0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000005800)=@assoc_value={r8, 0x6}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000005840)={0x5, 0x99, 0x20e, 0x0, 0xf, 0x800, 0x200, 0x6, r7}, &(0x7f0000005880)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000058c0)={0x763, 0x3, 0x204, 0xfffffff8, 0x200, 0x9, 0x6, 0x1d, r9}, 0x20) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000005900)={0x1}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005940)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000005a80)={&(0x7f0000005980)={0x1d, r10}, 0x10, &(0x7f0000005a40)={&(0x7f00000059c0)=@canfd={{0x4, 0x1}, 0x17, 0x3, 0x0, 0x0, "face65d5f27297f43cdc5064135f22ca31e0ddec2899f954069961b5ee7258f2cc94477fc0e78301b2ca421ff4c3065d0d8a66de1e48a14c453b697647fbcaef"}, 0x48}, 0x1, 0x0, 0x0, 0x4040040}, 0x4004000) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000005ac0)={0x9, 'syz1\x00'}) 1.829956133s ago: executing program 2 (id=1614): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000240)={0x80000000}) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r5, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) preadv(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 1.262933014s ago: executing program 2 (id=1615): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512-ce\x00'}, 0x58) add_key(&(0x7f0000000080)='cifs.idmap\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="c0a3959a20f14bfb88f36aa2d95a8e17b9d84cdbf47a1df4825e391e60f360fcd0", 0x21, 0xfffffffffffffffd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) accept4(r2, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x2c, 0xfffff030}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000fbe77fb69379de45bdf5dad39c000000000000cdda4fb6154013cee98fff0188e133c00fd298c863ca240d3f58726c639aa6c26547c55da96943ac7c85c1c06f4c43d18b22fe1f4b79941401b456abe9fd8fa3c62134511ac405c7e6f80992e68dc5bb00", @ANYRES16=r4, @ANYBLOB="0507000040000400000001000000100002800c00018008002e0005000000"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x1c0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xeb) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x4e21, 0x9, @mcast1, 0x6}, 0x1c) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x2040, 0x1, 0x2}, 0x18, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1/file4/file7\x00', 0x0, 0x50) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000340)={0x2000, r9}, 0x0) landlock_restrict_self(r8, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0604250c"], 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r1, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) 1.156245436s ago: executing program 4 (id=1616): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vxfs\x00', 0x200000, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000000380)={&(0x7f0000000400)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/42, 0x2a}, {&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f00000001c0)=""/18, 0x12}, {&(0x7f0000000200)=""/223, 0xdf}], 0x4, &(0x7f0000000340)=""/3, 0x3}, 0x2100) 1.049019487s ago: executing program 4 (id=1618): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f00000010c0), 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000200)={0x2, 0x100}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000080)={'dac02\x00', [0x6, 0xd9c7, 0x7, 0x1, 0x0, 0x0, 0x1, 0x6, 0x5, 0x101, 0xfffffffc, 0x10, 0x0, 0x2, 0x3, 0x7, 0x1, 0x6, 0x7, 0x10, 0xece7, 0x1, 0x100, 0xc, 0xbc2777b, 0xde, 0xffff, 0xfffffff7, 0x101, 0xf07, 0x9, 0x80]}) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r3, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x2000) fadvise64(r0, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) 737.597562ms ago: executing program 5 (id=1620): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000a600000000000001080008001d000000", 0x24) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed9bebbbd, 0xa0011, r4, 0x52fbb000) ioctl$KVM_SET_XSAVE(r3, 0x5000aea5, &(0x7f0000001180)={[0x6, 0x1, 0x49d6069d, 0x3f5, 0x2, 0x0, 0x5, 0x3, 0x3df, 0x1, 0x4, 0x4, 0xe, 0x1000, 0x0, 0x2, 0x4, 0x6, 0xffff, 0x1, 0xd, 0xb, 0x9, 0x3, 0x75d6, 0x3, 0x4, 0xffff, 0x10001, 0x0, 0x553, 0x3, 0x7, 0xda, 0x1, 0x0, 0xfffffffa, 0x0, 0xa, 0x2, 0x8, 0xffffffff, 0xffff2cd5, 0x3, 0xf, 0x8, 0x3, 0xbc1, 0x1, 0x0, 0x5620, 0x7, 0xa4b, 0xffff, 0x5, 0x9, 0x2, 0x4, 0x8000, 0x4, 0x400, 0x6, 0x4a, 0x3, 0x401, 0x0, 0x80000000, 0x62, 0xfff, 0x6, 0x8, 0x800000, 0x5, 0x1, 0x3, 0xc, 0x900, 0x9, 0xfffff801, 0xd14, 0xffffffff, 0x7f, 0x9, 0x7, 0x6, 0x7, 0x5, 0x5, 0x1, 0xfab7, 0x4, 0x8, 0x8, 0x5ab6, 0x80000000, 0x0, 0x99, 0x5, 0x9, 0x1ff, 0x6, 0x80, 0x915f, 0x1, 0xdcde, 0x2, 0x450, 0x2, 0x1, 0x8, 0x1, 0x0, 0x9, 0x6, 0x9, 0xfff00000, 0x0, 0x4, 0x4, 0x9, 0x7, 0x2dec, 0x2, 0x8073, 0x6, 0xa, 0x2, 0xfffffff9, 0x0, 0x7d3, 0x4, 0x1, 0x80000000, 0x4, 0xe, 0xe, 0x0, 0x6, 0x7fffffff, 0x9, 0x6, 0xfffffff3, 0x40, 0xee, 0xadb, 0x5, 0x2, 0xa00, 0xd13, 0x55de, 0x8, 0x2, 0x0, 0x4, 0x6bbe, 0xb18, 0x6, 0x800, 0x8, 0x8, 0xda3f, 0xaf, 0x4, 0x2, 0x100, 0x80, 0x7, 0x5, 0x4, 0x2, 0x80000001, 0x400, 0xffff2826, 0x9, 0x7, 0x2, 0x487f4171, 0x3, 0x5, 0x800, 0x80000000, 0x7, 0x4, 0x871, 0x50, 0x0, 0xff, 0x0, 0x7, 0x5, 0x1, 0x10000, 0xfffffffe, 0x5, 0x2, 0xb0, 0xfffffff5, 0x319, 0x2392, 0xbfd, 0x7, 0x80, 0x13, 0x6, 0x448, 0xeb48, 0x6, 0x5, 0x6c, 0x100, 0x80, 0x4, 0x5, 0x0, 0xe3a1, 0xffff, 0x17f, 0x4, 0x2, 0x6, 0x32c, 0x1000, 0x5, 0x4, 0xfffffff0, 0x3, 0x6, 0x7, 0x8, 0x9, 0x10, 0x6, 0x9, 0x915e, 0x7, 0x7, 0x738d, 0x10, 0x7, 0x1, 0xf, 0x7446, 0xfffffff9, 0x1, 0x7, 0xfffffff8, 0x9, 0xff, 0x0, 0x3, 0xe5, 0x2e2, 0x26210000, 0x3, 0x9, 0x40, 0xe, 0x7fffffff, 0x1, 0x4, 0x1, 0x75ee915a, 0x0, 0x1, 0x6, 0xa8ba, 0x0, 0x2, 0x5, 0x6, 0x7fff, 0x7ff, 0x4, 0x565, 0x80000000, 0x81, 0x7, 0xc, 0x0, 0xffffffff, 0x10, 0x2, 0xe, 0x5, 0x3, 0x8, 0x6, 0x9, 0x7, 0x2, 0x2, 0x3, 0x8, 0x6, 0x9, 0xb, 0x3, 0xb58d, 0x4, 0xfffffff8, 0xa9, 0x4, 0x9, 0xffff0000, 0x8, 0x7, 0x9, 0xfffffffa, 0x1, 0x7, 0x1, 0x7fffffff, 0x5, 0x8, 0x7b, 0xf, 0xc, 0xb08f, 0x5, 0x7ff, 0x2, 0xcaab, 0x9, 0x5, 0x7ff, 0x9, 0x3, 0x6, 0xffffff01, 0xd12, 0x3, 0x8, 0x6, 0x400, 0x3, 0x7, 0xa935, 0x300000, 0xa3, 0xc, 0x5, 0x5, 0x7ff, 0x7, 0x10000, 0x2, 0x8, 0x10001, 0x3ff, 0x3, 0x3, 0x3, 0x66a, 0x3, 0xff, 0x1ff, 0x6, 0x6, 0x6, 0x2, 0x80, 0x0, 0x8, 0x88c, 0x56c, 0x7, 0x98, 0x5, 0x2, 0x8, 0x8, 0x1, 0x7ff, 0x0, 0x5a3c, 0x7fffffff, 0x7, 0x9c, 0x1ff, 0xa00000, 0xffff, 0xd, 0xc6ea, 0xfff, 0x7ff, 0xc594, 0x3, 0x18, 0xa, 0x726c, 0x8, 0x3, 0xd71, 0xc, 0x9, 0x8, 0x2, 0x5, 0x0, 0x10, 0x0, 0xb9, 0x4, 0x9, 0xfff, 0x12, 0x7fff, 0x9, 0x8, 0x7fff, 0x9, 0xb4b, 0x6, 0x1, 0xa312, 0x553, 0x1, 0x0, 0xfffffffc, 0x2, 0xf, 0xe, 0x1, 0x3, 0x48, 0xf2, 0xa28, 0x4, 0xb3c, 0x4, 0xfffffffe, 0xf726, 0x0, 0x4, 0x80000000, 0x1, 0x8, 0xf4, 0x9, 0x2, 0x3, 0x8, 0x4, 0xfffffffe, 0x7, 0x7, 0x48, 0xf, 0xbab, 0xfffffe00, 0x2, 0x7fffffff, 0xfffffffc, 0x10000, 0x4, 0x36c, 0x1, 0x100, 0x3, 0x101, 0x7, 0x0, 0x6, 0x2, 0x5, 0x1, 0x800000, 0x4, 0x5, 0x100, 0x1000, 0x9, 0xde5c, 0x200, 0x80000001, 0xff, 0x0, 0xd, 0x4, 0x0, 0x7cbe8276, 0x3d4, 0x186, 0x1, 0x4, 0x6, 0xfffffffa, 0x1, 0xa000, 0x8, 0x3ad3125e, 0xfffff491, 0x81, 0x2, 0xffffff01, 0x800, 0x3ff, 0x39ae, 0xdf3, 0xe1d2, 0xffffee22, 0x1, 0x1000, 0x1a2f91b4, 0x6, 0x8, 0xfb3, 0x8, 0x3, 0x8, 0xc, 0x1, 0x152, 0xfffffff9, 0x2a, 0x5, 0xfff, 0x7fffffff, 0x4, 0x3000, 0x9, 0x8, 0x7fff, 0x10, 0x3, 0x8, 0x10, 0x57, 0xf, 0x8, 0x2, 0xff, 0xe1, 0xa9, 0x8, 0x8, 0x8c, 0x69e8, 0x130a, 0x4, 0x9, 0x80, 0x2, 0x8, 0x9, 0xfff, 0x7fff, 0x10000, 0x7ff80, 0x8, 0x2, 0x4, 0x90000000, 0x1, 0x7, 0xfffffffd, 0xa12, 0x7, 0xea8, 0x5bf8, 0x2, 0x6ab, 0x3, 0xf, 0xffff, 0x1, 0xfffffffb, 0x80000001, 0x80000001, 0x5, 0x0, 0x78, 0x8, 0x0, 0x0, 0x8001, 0x1, 0x6, 0x4, 0x7, 0x6, 0x400, 0x1, 0xb72, 0x0, 0x4800, 0xdd7f, 0x7, 0x6, 0x9, 0xe, 0x95f, 0x1ff, 0xe5, 0x37ae, 0x0, 0xa92, 0x4, 0x5, 0x9, 0x1, 0x6, 0x2, 0x3ff, 0x3b, 0xb, 0x4, 0x1, 0x12e7, 0x2, 0x10001, 0x7, 0xc5, 0x6, 0x5, 0x1, 0x1, 0x7fffffff, 0x5, 0xa1, 0xffffffff, 0x1, 0x1, 0x743, 0x1, 0x7, 0xffffe9fb, 0xb, 0x7, 0x1, 0x0, 0x100, 0xfffffff7, 0x0, 0x7ff, 0x1, 0x6, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1, 0x9, 0x5, 0x10001, 0x3, 0x8, 0x4, 0x3, 0xb4, 0x80000001, 0x1, 0xbe8b, 0x0, 0x9, 0x3, 0x81, 0x3, 0xdf8, 0x4, 0x71, 0x3, 0x3, 0x9, 0x4edc, 0x100, 0x8, 0x0, 0x2, 0x10, 0x8, 0x7, 0x7f, 0xa58, 0x6, 0x81, 0xfffffffa, 0x3, 0xff, 0xfffff000, 0x1237, 0x71a66a2a, 0x6, 0x1, 0x1, 0xcf0c, 0x4, 0x81, 0xff, 0x1, 0x698fdd79, 0xfffffffc, 0x8, 0x6, 0x7, 0x7f9a, 0x0, 0x0, 0x3, 0x6f5, 0xa, 0x6, 0xfffffffd, 0x2, 0x3, 0xffffffff, 0xfffffff3, 0x3, 0x6, 0x0, 0x200, 0x3cf5dd3d, 0x7, 0x1, 0xa, 0x200, 0x200, 0x92fe25b, 0xc, 0x1, 0x9, 0x81, 0x7, 0x7, 0x1000, 0xc651, 0xf, 0x3, 0x8, 0x6, 0x0, 0x0, 0x7fffffff, 0xffffffff, 0xffffffff, 0x5, 0xd02, 0x2, 0x7, 0x10001, 0x0, 0x9, 0x7, 0xfffffffb, 0x64e, 0x4403c5ae, 0xc, 0xfffffffc, 0x0, 0x3, 0x7f, 0x1, 0x4, 0x1, 0xfffffff6, 0x516, 0x5, 0x2, 0x200, 0xc3, 0x2b1c, 0x6, 0x4, 0x0, 0x81, 0x5, 0x6fa, 0x6, 0x2, 0x80000000, 0x6e7, 0x7f, 0x7, 0x8, 0xfffffff9, 0x3, 0x7f, 0x10000, 0x3, 0x6, 0x37, 0x89, 0x2, 0x2, 0x89a, 0xb, 0x80000000, 0x4, 0x10, 0x6, 0x1, 0x0, 0x5, 0xf8d9, 0x5, 0x2, 0x2, 0x9, 0x2, 0xb8, 0x74e2, 0x2, 0x3ff, 0x1, 0x9, 0x2, 0x1, 0x7, 0x2, 0x0, 0x8, 0x1000, 0x2, 0x6, 0x1, 0x8, 0x7, 0x3, 0x7, 0x7, 0xf, 0x7ff, 0xffffffc6, 0x9, 0xcc9, 0x7, 0x5, 0xb0, 0xe4, 0x5, 0x80000001, 0xc410, 0x8000, 0x7fffffff, 0x3, 0x6, 0x1c000000, 0x101, 0x79, 0xfffffffb, 0x3, 0x1, 0xff, 0x6, 0x81, 0xfffffffc, 0x6, 0x30000, 0x6, 0x7, 0x6, 0x8, 0xc0e1, 0x5, 0x3, 0x6f, 0x5, 0x5, 0x800, 0x1, 0x80000000, 0x8, 0x81, 0x2, 0x9, 0x0, 0x7a8, 0x8e, 0x4, 0x1356, 0x3, 0x80000000, 0x8, 0x7, 0x81, 0x8, 0x1, 0x0, 0x5, 0xa, 0x1d, 0xa22, 0x5, 0xffffffc5, 0xc, 0xa, 0x7, 0x81, 0x2d063505, 0x223, 0xd7, 0x80000001, 0x5, 0xff, 0x4800000, 0x80000000, 0x8001, 0x8, 0x10, 0x9, 0x200, 0x5, 0xfffffffa, 0xd093, 0x3, 0x1, 0x3, 0x5, 0x5, 0x5, 0x589c1fd7, 0xd0f, 0x4, 0x0, 0xb55d, 0x920, 0x7f, 0x3ff, 0x4, 0x7, 0xfffffffd, 0x9, 0x0, 0xe, 0x3ff, 0x0, 0x5, 0x1, 0xffff4bfc, 0x1, 0x10001, 0xfe05, 0x5, 0x79, 0x1000, 0x9, 0x10000, 0xf8b9, 0x4, 0x3832, 0x1, 0xd, 0x81, 0x8, 0x5, 0xbd, 0x4, 0x800, 0x5, 0x826, 0xffffed29, 0x7f, 0x60b8, 0x200, 0x7, 0x6, 0x9, 0x101, 0x0, 0xfffffff8, 0x8, 0x8, 0x401, 0x5, 0x4d800000, 0xa44, 0x3, 0x6, 0xc00, 0x5, 0x2, 0x0, 0x3, 0x200, 0x1fc000, 0x3, 0x3, 0x5, 0x2, 0x8, 0xd, 0x1, 0x80000000, 0xbd1a, 0x0, 0x1, 0xfc4, 0x3, 0xfb1c, 0x42, 0x0, 0x400, 0x7, 0x8d7, 0xd, 0xfffffff9, 0x1, 0xc27a, 0x2, 0x5, 0x5, 0x101, 0x7, 0x0, 0x5, 0x7f, 0x2, 0x8, 0x8, 0x4, 0x8, 0x4, 0x7, 0x9, 0x1, 0x3, 0x3ff, 0x4b6, 0x9, 0x9, 0x3, 0x0, 0x5]}) 703.158646ms ago: executing program 4 (id=1621): creat(&(0x7f0000000000)='./file0\x00', 0x1ea) (async, rerun: 32) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='vfat\x00', 0x0, 0x0) (rerun: 32) 691.933818ms ago: executing program 2 (id=1622): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) keyctl$search(0xa, 0x0, &(0x7f0000000800)='.dead\x00', 0x0, 0xfffffffffffffffc) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) (async) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) (async) syz_usb_control_io(r3, &(0x7f0000000000)={0x2c, &(0x7f0000000040)={0x20, 0x12, 0x5, {0x5, 0x1, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) getsockopt$inet6_tcp_buf(r1, 0x6, 0x21, 0x0, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) (async) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000040)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000045}, 0x20004000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x22052, r0, 0x2000) 505.930441ms ago: executing program 5 (id=1623): creat(&(0x7f0000001380)='./file0\x00', 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x3f, 0x1a, "3eccd25569e20900"}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TCSETS(r0, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x6, 0x3f, 0x1a, "3eccd25569e20900"}) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) (async) 505.217876ms ago: executing program 3 (id=1624): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x127242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 454.523579ms ago: executing program 5 (id=1625): prlimit64(0x0, 0x9, 0x0, 0x0) (async) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x4) sendmsg$nl_route_sched_retired(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@delqdisc={0x1b0, 0x25, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x3, 0xffe0}, {0x10, 0xb}, {0xb, 0xfff3}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}]}}, @q_dsmark={{0xb}, {0x44, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x31}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xa}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7f}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xa3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff}]}}, @q_dsmark={{0xb}, {0x24, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x14}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x80}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x98}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x4}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}]}}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) (async) r2 = socket$inet(0x2, 0xa, 0x4) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) (async) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r5, &(0x7f0000000000)={0x1f, @none}, 0x8) listen(r5, 0x0) (async) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, 0x0, 0x0) (async) ioctl$TCSETSW(r4, 0x5403, &(0x7f0000000080)={0x717d, 0x3, 0xbe14, 0x9c, 0x0, "e88e76d49ad96dc88b09cc45015aeeb796f418"}) (async, rerun: 64) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) (rerun: 64) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000580)={0xb, {'syz0\x00', 'syz0\x00', 'syz1\x00', 0x5b, 0x0, 0x53d5fa4d, 0x7fff, 0x10001, 0x101, "41366f1f3ca325b9cfd430525657b780731459ba7af8220a3f6ca4ecfd682955c843814a8abb37dd8f523c881e6cbff39c1da25886029136e65a9156a906eb4d38f25abd86d94a1e8a3b74fc1160fbd28f452e1bb8affde43366fc"}}, 0x173) io_setup(0x6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r7, 0x1, 0x6, 0x0, &(0x7f00000001c0)) (async) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (rerun: 32) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x8040ae9f, &(0x7f00000000c0)=@arm64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 409.9271ms ago: executing program 3 (id=1626): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x805, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) setsockopt(r1, 0x84, 0x81, &(0x7f0000000000)="f89fcfb587a4792b", 0x8) ioctl$SIOCSIFHWADDR(r0, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000007c0)={0x209d, 0x9, 0x2008, 0x7ffffff9}, 0x10) write(r3, &(0x7f00000000c0)="1800000016005f0214fffffffffffff8070000000e000000", 0x18) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x200000, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x8}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r7, 0x400, 0xc, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1970024, &(0x7f0000000100)=ANY=[@ANYBLOB='mode=0']) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, r5, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3, 0x57}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_STA_WME={0x34, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xd}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x7f}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xfe}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x81}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x3}]}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}]}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x16}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x4e4}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}]}, 0x98}, 0x1, 0x0, 0x0, 0x85}, 0x1) 249.938167ms ago: executing program 5 (id=1627): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = syz_open_dev$sg(&(0x7f0000000080), 0xff, 0x100000) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\v\x00\x00\x00\x00\x00\x00C']) sendfile(r1, r0, &(0x7f0000000000)=0x7ffffffa, 0x10) 235.895792ms ago: executing program 2 (id=1628): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000000)={r3, 0x1, 0x6, @broadcast}, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @random="83f047e9529c"}, 0x10) (async) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @random="83f047e9529c"}, 0x10) r4 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) dup2(r4, r2) (async) dup2(r4, r2) sendfile(r1, r1, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x30, r0, 0x2000) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 220.014201ms ago: executing program 5 (id=1629): ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000440)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000400)=0x9}) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x40) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000300)={0x6, 0x2, 0x17, 0x6, "31be6d1de7378999cfb197a76fb6c82ab593459da153b022cad9c9e87a8ca068"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x800, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x15002, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r1, @ANYBLOB="2c67726f75705e69643dfaf885944d9525d198eab86515891c1a8b52f179468c48cef2757859d08d22ce20f3c83adebd9f1c6743cac29bd5b34a4522bc022a2069e25b15cd612869a12c07ac1fb1b82f5c2c442ddd3ff40b9532f4fe9b6cd85ff0e067184b613476e8497d8d8954e0d37a90ab100443e741746952e0eb1d54f649", @ANYRESDEC=r3, @ANYBLOB=',allow_other,smackfshat=(+{$@,obj_type=hfsplus\x00,uid>', @ANYRESDEC=r4, @ANYBLOB=',dont_appraise,subj_type=/dev/rnullb0\x00,\x00']) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) socket$kcm(0x10, 0x400000002, 0x0) setxattr$incfs_metadata(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000540)={0x30, 0x5, 0x0, {0x0, 0x1, 0x4, 0x68b}}, 0x30) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000440)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000400)=0x9}) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) (async) statx(r0, &(0x7f00000000c0)='./file0\x00', 0x100, 0x40, &(0x7f00000001c0)) (async) syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x40) (async) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000300)={0x6, 0x2, 0x17, 0x6, "31be6d1de7378999cfb197a76fb6c82ab593459da153b022cad9c9e87a8ca068"}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee00}}, './file0\x00'}) (async) statx(r0, &(0x7f00000002c0)='./file0\x00', 0x6000, 0x800, &(0x7f0000000300)) (async) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x15002, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000000000,user_id=', @ANYRESDEC=r1, @ANYBLOB="2c67726f75705e69643dfaf885944d9525d198eab86515891c1a8b52f179468c48cef2757859d08d22ce20f3c83adebd9f1c6743cac29bd5b34a4522bc022a2069e25b15cd612869a12c07ac1fb1b82f5c2c442ddd3ff40b9532f4fe9b6cd85ff0e067184b613476e8497d8d8954e0d37a90ab100443e741746952e0eb1d54f649", @ANYRESDEC=r3, @ANYBLOB=',allow_other,smackfshat=(+{$@,obj_type=hfsplus\x00,uid>', @ANYRESDEC=r4, @ANYBLOB=',dont_appraise,subj_type=/dev/rnullb0\x00,\x00']) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) close(r6) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) setxattr$incfs_metadata(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x2) (async) sendmsg$inet(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="1800000068007f089e", 0x59}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000540)={0x30, 0x5, 0x0, {0x0, 0x1, 0x4, 0x68b}}, 0x30) (async) 92.590738ms ago: executing program 5 (id=1630): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f000031c000/0x3000)=nil, 0x3000, 0xd, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7d) r2 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x1) mq_unlink(&(0x7f0000000000)='eth0\x00') fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000440), 0x2) r5 = memfd_create(&(0x7f00000009c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdbU\xb1\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\x90i\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14O\xf8\xb5C\x1f\xb6b8b\x06A2@D\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\x05\x00\x00\x00\x00\x00\x00\x00\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x88\xd1\x1eQB\x18\xc1-\xc4\x8fK\xf8\xfa\xb6\xf8\v;\xaa\x8fW\xcc\n\x17\x7f\x98\xb7\xcdqV\xd4\xf0)\xfa\x0fG\xc8\xbf\xfd\xe8>K\f\xcd+\xb0\x99Q\xba/\xa8\xb9`k\b\xd1\xcc\xfc\xeaA\"\v=\x83fC\x90%\xa1d\x91\xf8:\x16<\xad\xc2\x18\xdf\x01\xe2\x96\xfcj\xe9\xa4\x065m\x03\x05Np\xda\"\xf1\xb6\xbcP\x8fP\x8d\x89%\xf2\x12T\xd0\xc3\x15W\x9c\x87\x1b\x8c\xc9\xd9\xc6\xad\x96-d\xa2wFB\xcaB\xa5\x15\xf8,\x04\x1c*\xd98\x8bG\x90\x81`\x03\xe0\xde\x9c\x9a\x0f\x1b\x8f\xd2%*&$Wc\xb3\xa6\xc4TK1}2\xb3\xab\xf4\xb7\xb7\x85\apa\xaf\x1c\x10i\xb9\x9f\x06\xff4%\"7f \x0e\xf5Bk\r\xac\"\x13tNx\xc0$\x85\x9f', 0x3) ftruncate(r5, 0xffff) close(0x3) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000001c0)={r5, 0x1, 0x0, 0x8000}) lseek(r3, 0x101, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x0) 0s ago: executing program 3 (id=1631): r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$get_persistent(0x16, 0x0, r0) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@filename='./file0\x00', &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='cramfs\x00', 0x84c4, 0x0) kernel console output (not intermixed with test programs): ce number 3 using dummy_hcd [ 240.144246][ T5917] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.163862][ T5917] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 240.176461][ T8597] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 240.187091][ T5917] usb 5-1: config 1 interface 0 has no altsetting 0 [ 240.209768][ T5917] usb 5-1: string descriptor 0 read error: -22 [ 240.219039][ T8597] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 240.222770][ T5917] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 240.262930][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.276842][ T8589] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 240.297042][ T5917] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input27 [ 240.549631][ T8605] /dev/rnullb0: Can't open blockdev [ 240.704242][ T8612] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 240.740251][ T8612] /dev/rnullb0: Can't open blockdev [ 241.419056][ T8637] /dev/rnullb0: Can't open blockdev [ 241.879782][ T8642] /dev/rnullb0: Can't open blockdev [ 242.708457][ T8650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.746558][ T5218] bcm5974 5-1:1.0: could not read from device [ 242.796408][ T8650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.799539][ T5218] bcm5974 5-1:1.0: could not read from device [ 242.819209][ T5917] usb 5-1: USB disconnect, device number 3 [ 243.001555][ T5874] Bluetooth: hci1: unexpected cc 0x203e length: 2 > 1 [ 243.008651][ T5874] Bluetooth: hci1: unexpected event for opcode 0x203e [ 243.015595][ T5874] Bluetooth: hci1: unexpected event for opcode 0x0c1a [ 243.762182][ T8682] /dev/rnullb0: Can't open blockdev [ 243.968302][ T8686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 244.195101][ T8703] wlan1 speed is unknown, defaulting to 1000 [ 244.252187][ T8708] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 244.315098][ T8714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.327244][ T8714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.036617][ T8733] omfs: Invalid superblock (0) [ 245.070651][ T5954] usb 3-1: new full-speed USB device number 35 using dummy_hcd [ 245.109117][ T8737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.139444][ T8737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.249026][ T5954] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 245.270738][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.291068][ T5954] usb 3-1: Product: syz [ 245.292088][ T8722] comedi comedi3: comedi_config --init_data is deprecated [ 245.305539][ T5954] usb 3-1: Manufacturer: syz [ 245.310212][ T5954] usb 3-1: SerialNumber: syz [ 245.330064][ T5954] usb 3-1: config 0 descriptor?? [ 245.470622][ T9] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 245.539240][ T5954] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 245.635335][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 245.655268][ T9] usb 5-1: config 12 has an invalid interface number: 98 but max is 3 [ 245.665698][ T9] usb 5-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 245.680617][ T9] usb 5-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 245.686586][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.690292][ T9] usb 5-1: config 12 contains an unexpected descriptor of type 0x1, skipping [ 245.709538][ T9] usb 5-1: config 12 has an invalid interface number: 194 but max is 3 [ 245.718444][ T9] usb 5-1: config 12 has an invalid interface number: 52 but max is 3 [ 245.727172][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.728924][ T9] usb 5-1: config 12 has no interface number 0 [ 245.754513][ T9] usb 5-1: config 12 has no interface number 2 [ 245.765058][ T9] usb 5-1: config 12 has no interface number 3 [ 245.772950][ T9] usb 5-1: config 12 interface 98 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 245.786615][ T9] usb 5-1: config 12 interface 98 altsetting 1 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 245.798391][ T9] usb 5-1: config 12 interface 98 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 245.811840][ T9] usb 5-1: config 12 interface 98 altsetting 1 has an endpoint descriptor with address 0x16, changing to 0x6 [ 245.824792][ T9] usb 5-1: config 12 interface 98 altsetting 1 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 245.838641][ T9] usb 5-1: config 12 interface 98 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 245.854036][ T9] usb 5-1: config 12 interface 98 altsetting 1 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 245.865632][ T9] usb 5-1: config 12 interface 98 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 245.883238][ T9] usb 5-1: config 12 interface 98 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 245.896772][ T9] usb 5-1: config 12 interface 98 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 245.909267][ T9] usb 5-1: config 12 interface 98 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 245.922655][ T9] usb 5-1: config 12 interface 98 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 245.934485][ T9] usb 5-1: config 12 interface 194 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 245.949530][ T9] usb 5-1: config 12 interface 194 altsetting 0 has a duplicate endpoint with address 0xD, skipping [ 245.963846][ T9] usb 5-1: config 12 interface 98 has no altsetting 0 [ 245.971428][ T9] usb 5-1: config 12 interface 1 has no altsetting 0 [ 245.978364][ T9] usb 5-1: config 12 interface 52 has no altsetting 0 [ 246.000516][ T5904] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 246.023055][ T9] usb 5-1: New USB device found, idVendor=10cf, idProduct=5500, bcdDevice=d9.c9 [ 246.036527][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.045457][ T9] usb 5-1: Product: 辊퀥箖㴓襯벀㏛䨿╓㨘秓♻눾摳⏺굏〄甌樳擼騕밖穩剱ഇ鲿◂卪䭦鳺륀뀭﷌ₗ袝烌牿秃毭ᬟᒎ詟䑇澛㖔겙䑰軲莬뭷ꤽ톷쀞㻑曁쯻羉ᦂ总炂뿝紝撚絨䘦௢佯鯇鯓場⊗覫쪃밌䑌暮됦Α悏⍼쩃㔂Ƶ捫Ꮂᦣ滯罠 [ 246.077367][ T9] usb 5-1: Manufacturer: ж [ 246.083773][ T9] usb 5-1: SerialNumber: syz [ 246.091340][ T9] usb 5-1: Interface #194 referenced by multiple IADs [ 246.098209][ T9] usb 5-1: Interface #194 referenced by multiple IADs [ 246.109130][ T8745] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 246.125217][ T8745] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 246.176083][ T5904] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 246.202317][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.210897][ T5904] usb 4-1: Product: syz [ 246.219251][ T5904] usb 4-1: Manufacturer: syz [ 246.229566][ T5904] usb 4-1: SerialNumber: syz [ 246.240925][ T5954] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 246.262434][ T5954] usb 3-1: USB disconnect, device number 35 [ 246.269532][ T5904] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 246.307941][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 246.360793][ T9] vmk80xx 5-1:12.98: driver 'vmk80xx' failed to auto-configure device. [ 246.370081][ T8769] program syz.2.814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.394287][ T9] vmk80xx 5-1:12.194: driver 'vmk80xx' failed to auto-configure device. [ 246.404865][ T8771] /dev/rnullb0: Can't open blockdev [ 246.421319][ T9] vmk80xx 5-1:12.1: driver 'vmk80xx' failed to auto-configure device. [ 246.449359][ T9] vmk80xx 5-1:12.52: driver 'vmk80xx' failed to auto-configure device. [ 246.478100][ T9] usb 5-1: USB disconnect, device number 4 [ 246.727683][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.736823][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.778977][ T8766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.789573][ T8766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.801946][ T9] usb 4-1: USB disconnect, device number 34 [ 246.850593][ T5954] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 247.017690][ T5954] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.17 [ 247.028324][ T5954] usb 3-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 247.036950][ T5954] usb 3-1: Product: syz [ 247.044781][ T5954] usb 3-1: Manufacturer: syz [ 247.049521][ T5954] usb 3-1: SerialNumber: syz [ 247.056730][ T5954] usb 3-1: config 0 descriptor?? [ 247.064766][ T5954] ch341 3-1:0.0: ch341-uart converter detected [ 247.357443][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 247.381740][ T24] ath9k_htc: Failed to initialize the device [ 247.399231][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 247.832929][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 247.832950][ T30] audit: type=1326 audit(1756698174.886:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7178ebe9 code=0x7ffc0000 [ 247.915882][ T30] audit: type=1326 audit(1756698174.916:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f5e7178ebe9 code=0x7ffc0000 [ 247.959969][ T30] audit: type=1326 audit(1756698174.916:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7178ebe9 code=0x7ffc0000 [ 247.970278][ T8799] /dev/rnullb0: Can't open blockdev [ 248.044869][ T8802] /dev/rnullb0: Can't open blockdev [ 248.058396][ T30] audit: type=1326 audit(1756698174.916:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8795 comm="syz.3.821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e7178ebe9 code=0x7ffc0000 [ 248.239167][ T8809] /dev/rnullb0: Can't open blockdev [ 248.269432][ T8811] rdma_rxe: rxe_newlink: failed to add wlan1 [ 248.271940][ T5954] ch341-uart ttyUSB0: break control not supported, using simulated break [ 248.279398][ T8811] /dev/rnullb0: Can't open blockdev [ 248.291448][ T5954] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 248.316880][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.327706][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.720282][ T8818] /dev/rnullb0: Can't open blockdev [ 248.840561][ T5954] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 249.001592][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 249.013918][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 249.039614][ T5954] usb 5-1: config 4 interface 0 has no altsetting 0 [ 249.067761][ T5954] usb 5-1: string descriptor 0 read error: -22 [ 249.071222][ T8829] tipc: Started in network mode [ 249.074421][ T5954] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 249.079975][ T8829] tipc: Node identity ae430841970f, cluster identity 4711 [ 249.099016][ T8829] tipc: Enabled bearer , priority 0 [ 249.101809][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.140007][ T5954] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 249.155848][ T8829] syzkaller0: entered promiscuous mode [ 249.162138][ T8829] syzkaller0: entered allmulticast mode [ 249.164873][ T5954] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 249.169527][ T8829] tipc: Resetting bearer [ 249.229302][ T8828] tipc: Resetting bearer [ 249.294708][ T8828] tipc: Disabling bearer [ 249.350351][ T8815] i2c i2c-1: unsupported multi-msg i2c transaction [ 249.351570][ T5954] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 249.370853][ T5954] usb 5-1: media controller created [ 249.379402][ T8815] /dev/rnullb0: Can't open blockdev [ 249.397181][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 249.558922][ T5954] zl10353_read_register: readreg error (reg=127, ret==0) [ 249.591025][ T5954] usb 5-1: USB disconnect, device number 5 [ 249.636191][ T24] usb 3-1: USB disconnect, device number 36 [ 249.647184][ T24] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 249.664059][ T24] ch341 3-1:0.0: device disconnected [ 249.708690][ T8837] /dev/rnullb0: Can't open blockdev [ 249.720733][ T5917] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 249.799621][ T8844] MTD: Couldn't look up './file0': -15 [ 249.879405][ T8850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.889453][ T8850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.901219][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 249.906375][ T30] audit: type=1800 audit(1756698176.956:25): pid=8850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.841" name="bus" dev="overlay" ino=1292 res=0 errno=0 [ 249.929105][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.940365][ T5917] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 249.949672][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.959927][ T5917] usb 4-1: config 0 descriptor?? [ 249.972459][ T5917] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 250.044507][ T8852] netlink: 15678 bytes leftover after parsing attributes in process `syz.4.842'. [ 250.170729][ T5917] gspca_vc032x: reg_r err -32 [ 250.178050][ T5917] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 250.203846][ T24] usb 4-1: USB disconnect, device number 35 [ 250.342779][ T30] audit: type=1326 audit(1756698177.396:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8855 comm="syz.4.843" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f897cb8ebe9 code=0x0 [ 250.705437][ T8883] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 250.880518][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 250.996714][ T8889] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.006936][ T8889] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.032188][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.044270][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.054891][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 251.069333][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.091843][ T9] usb 5-1: config 0 descriptor?? [ 251.250475][ T30] audit: type=1800 audit(1756698178.296:27): pid=8892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.856" name="bus" dev="overlay" ino=1107 res=0 errno=0 [ 251.508983][ T9] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 251.531860][ T9] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 251.549081][ T9] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0009/input/input28 [ 252.442617][ T9] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 252.526688][ T8908] /dev/rnullb0: Can't open blockdev [ 252.580811][ T8908] afs: Unknown parameter 'dont_measure' [ 252.588014][ T8910] afs: Unknown parameter 'dont_measure' [ 252.588086][ T8908] /dev/rnullb0: Can't open blockdev [ 252.722246][ T8912] syzkaller1: entered promiscuous mode [ 252.730070][ T8912] syzkaller1: entered allmulticast mode [ 252.811372][ T5954] usb 5-1: reset high-speed USB device number 6 using dummy_hcd [ 253.163560][ T8919] /dev/rnullb0: Can't open blockdev [ 253.346049][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 253.357038][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.869'. [ 253.472886][ T8937] trusted_key: syz.1.871 sent an empty control message without MSG_MORE. [ 253.780655][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 253.920829][ T9] usb 4-1: device descriptor read/64, error -71 [ 254.098640][ T8962] syzkaller1: entered promiscuous mode [ 254.106423][ T8962] syzkaller1: entered allmulticast mode [ 254.174144][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 254.239565][ T8970] /dev/rnullb0: Can't open blockdev [ 254.323027][ T9] usb 4-1: device descriptor read/64, error -71 [ 254.450904][ T9] usb usb4-port1: attempt power cycle [ 254.481544][ T24] usb 5-1: USB disconnect, device number 6 [ 254.734670][ T8992] /dev/rnullb0: Can't open blockdev [ 254.801234][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 254.841515][ T9] usb 4-1: device descriptor read/8, error -71 [ 254.971464][ T9001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.994858][ T9001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.058299][ T9011] /dev/rnullb0: Can't open blockdev [ 255.100503][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 255.165136][ T9] usb 4-1: device descriptor read/8, error -71 [ 255.232081][ T9017] /dev/rnullb0: Can't open blockdev [ 255.244862][ T9019] /dev/rnullb0: Can't open blockdev [ 255.246388][ T9017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 255.293536][ T9] usb usb4-port1: unable to enumerate USB device [ 256.720256][ T9064] tmpfs: Unknown parameter 'func' [ 257.057390][ T9079] /dev/rnullb0: Can't open blockdev [ 257.066826][ T9081] netlink: 40 bytes leftover after parsing attributes in process `syz.4.904'. [ 257.092165][ T9081] /dev/rnullb0: Can't open blockdev [ 257.118794][ T9084] /dev/rnullb0: Can't open blockdev [ 257.325802][ T9094] /dev/rnullb0: Can't open blockdev [ 258.015779][ T5874] Bluetooth: hci0: unexpected event for opcode 0x0c5a [ 258.102579][ T9101] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 258.111218][ T9101] overlayfs: missing 'lowerdir' [ 258.311294][ T9118] netlink: 132 bytes leftover after parsing attributes in process `syz.1.914'. [ 258.360650][ T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 258.399082][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.1.915'. [ 258.443049][ T9090] kexec: Could not allocate control_code_buffer [ 258.520449][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 258.527040][ T24] usb 5-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 258.540694][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 258.548534][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 258.558167][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.570841][ T24] usb 5-1: config 0 descriptor?? [ 259.189618][ T43] usb 5-1: USB disconnect, device number 7 [ 260.742342][ T9145] binder: 9144:9145 ioctl c0306201 200000000100 returned -14 [ 260.766536][ T9145] binder: 9144:9145 ioctl 40189429 200000000040 returned -22 [ 260.787881][ T9145] omfs: Invalid superblock (0) [ 261.103183][ T43] libceph: connect (1)[c::]:6789 error -101 [ 261.125964][ T43] libceph: mon0 (1)[c::]:6789 connect error [ 261.148923][ T9157] ceph: No mds server is up or the cluster is laggy [ 261.239058][ T9165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.243743][ T9167] /dev/rnullb0: Can't open blockdev [ 261.260070][ T9165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.356919][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.363758][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.382256][ T24] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 261.542561][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 261.570501][ T24] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 261.582993][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 261.604966][ T24] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 261.615402][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.624041][ T24] usb 5-1: Product: syz [ 261.628313][ T24] usb 5-1: Manufacturer: syz [ 261.633906][ T24] usb 5-1: SerialNumber: syz [ 261.640990][ T24] usb 5-1: config 0 descriptor?? [ 261.651141][ T9161] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 261.658989][ T9161] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 261.671655][ T24] usb 5-1: ucan: probing device on interface #0 [ 261.880713][ T24] usb 5-1: ucan: device protocol version 0 is not supported [ 261.888250][ T24] usb 5-1: ucan: probe failed; try to update the device firmware [ 261.894003][ T9177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.914182][ T9177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.238250][ T9179] netlink: 'syz.3.935': attribute type 21 has an invalid length. [ 262.283373][ T9179] netlink: 176 bytes leftover after parsing attributes in process `syz.3.935'. [ 262.465416][ T9184] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 262.484627][ T9184] /dev/rnullb0: Can't open blockdev [ 264.221356][ T9177] /dev/rnullb0: Can't open blockdev [ 264.270762][ T43] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 264.325213][ T9191] comedi comedi3: dac02: I/O port conflict (0x4f27,8) [ 264.352041][ T9191] /dev/rnullb0: Can't open blockdev [ 264.444094][ T43] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 264.462377][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.483918][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.517779][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.553731][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.574957][ T43] usbtmc 4-1:16.0: bulk endpoints not found [ 264.586461][ T9195] overlayfs: failed to resolve './file1': -2 [ 264.929418][ T9201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.944'. [ 264.947346][ T9204] /dev/rnullb0: Can't open blockdev [ 265.124587][ T9210] /dev/rnullb0: Can't open blockdev [ 265.445558][ T9216] /dev/rnullb0: Can't open blockdev [ 265.983969][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.950'. [ 266.091942][ T5917] usb 5-1: USB disconnect, device number 8 [ 266.294611][ T9221] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 266.312829][ T9221] /dev/rnullb0: Can't open blockdev [ 267.063784][ T9229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'. [ 267.105798][ T10] usb 4-1: USB disconnect, device number 40 [ 267.114352][ T9229] netlink: 160 bytes leftover after parsing attributes in process `syz.2.955'. [ 267.191390][ T9229] netlink: 32 bytes leftover after parsing attributes in process `syz.2.955'. [ 267.241992][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.2.955'. [ 267.286786][ T9230] netlink: 160 bytes leftover after parsing attributes in process `syz.2.955'. [ 267.334271][ T9230] netlink: 32 bytes leftover after parsing attributes in process `syz.2.955'. [ 267.528175][ T9240] /dev/rnullb0: Can't open blockdev [ 267.637036][ T9242] /dev/rnullb0: Can't open blockdev [ 267.646987][ T9244] /dev/rnullb0: Can't open blockdev [ 267.680341][ T9242] /dev/rnullb0: Can't open blockdev [ 267.693101][ T9244] /dev/rnullb0: Can't open blockdev [ 267.713523][ T9244] /dev/rnullb0: Can't open blockdev [ 267.729120][ T9244] /dev/rnullb0: Can't open blockdev [ 267.738637][ T9244] /dev/rnullb0: Can't open blockdev [ 267.773160][ T9244] /dev/rnullb0: Can't open blockdev [ 267.793389][ T9244] /dev/rnullb0: Can't open blockdev [ 267.821514][ T9244] /dev/rnullb0: Can't open blockdev [ 267.831194][ T9244] /dev/rnullb0: Can't open blockdev [ 267.836929][ T9244] /dev/rnullb0: Can't open blockdev [ 267.865001][ T9244] /dev/rnullb0: Can't open blockdev [ 267.874768][ T9244] /dev/rnullb0: Can't open blockdev [ 267.890758][ T9244] /dev/rnullb0: Can't open blockdev [ 267.906921][ T9244] /dev/rnullb0: Can't open blockdev [ 267.921529][ T9244] /dev/rnullb0: Can't open blockdev [ 267.934188][ T9244] /dev/rnullb0: Can't open blockdev [ 267.963220][ T9244] /dev/rnullb0: Can't open blockdev [ 267.979642][ T9244] /dev/rnullb0: Can't open blockdev [ 267.995988][ T9244] /dev/rnullb0: Can't open blockdev [ 268.015610][ T9244] /dev/rnullb0: Can't open blockdev [ 268.035692][ T9244] /dev/rnullb0: Can't open blockdev [ 268.052793][ T9244] /dev/rnullb0: Can't open blockdev [ 268.070128][ T9244] /dev/rnullb0: Can't open blockdev [ 268.088882][ T9244] /dev/rnullb0: Can't open blockdev [ 268.106324][ T9244] /dev/rnullb0: Can't open blockdev [ 268.124886][ T9244] /dev/rnullb0: Can't open blockdev [ 268.138406][ T9244] /dev/rnullb0: Can't open blockdev [ 268.159903][ T9244] /dev/rnullb0: Can't open blockdev [ 268.180111][ T9244] /dev/rnullb0: Can't open blockdev [ 268.198254][ T9244] /dev/rnullb0: Can't open blockdev [ 268.216233][ T9244] /dev/rnullb0: Can't open blockdev [ 268.235098][ T9244] /dev/rnullb0: Can't open blockdev [ 268.253276][ T9244] /dev/rnullb0: Can't open blockdev [ 269.051731][ T9264] netlink: 'syz.3.965': attribute type 10 has an invalid length. [ 269.144511][ T9264] batman_adv: batadv0: Adding interface: team0 [ 269.210963][ T9264] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.236473][ T9264] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 269.336865][ T30] audit: type=1326 audit(1756698196.386:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9270 comm="syz.1.967" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8dcad8ebe9 code=0x0 [ 269.397961][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.409432][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.659001][ T9277] kvm: user requested TSC rate below hardware speed [ 269.678020][ T9277] kvm: vcpu 0: requested 22 ns lapic timer period limited to 200000 ns [ 269.714605][ T9277] /dev/rnullb0: Can't open blockdev [ 270.004215][ T9291] /dev/rnullb0: Can't open blockdev [ 270.430464][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 270.591882][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 270.620461][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 270.630931][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.640822][ T24] usb 3-1: config 0 descriptor?? [ 271.092461][ T24] wacom 0003:056A:0016.000B: item fetching failed at offset 5/7 [ 271.111439][ T24] wacom 0003:056A:0016.000B: parse failed [ 271.117292][ T24] wacom 0003:056A:0016.000B: probe with driver wacom failed with error -22 [ 271.121494][ T9308] C: renamed from team_slave_0 (while UP) [ 271.137587][ T9308] netlink: 'syz.4.979': attribute type 2 has an invalid length. [ 271.167712][ T9308] netlink: 128 bytes leftover after parsing attributes in process `syz.4.979'. [ 271.221133][ T9308] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 271.236420][ T5954] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 271.402635][ T5954] usb 4-1: Using ep0 maxpacket: 16 [ 271.413177][ T9309] kAFS: unparsable volume name [ 271.442859][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.475974][ T5954] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.517093][ T5954] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 271.563156][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.605988][ T5954] usb 4-1: config 0 descriptor?? [ 272.031189][ T5954] usbhid 4-1:0.0: can't add hid device: -71 [ 272.037839][ T5954] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 272.065707][ T5954] usb 4-1: USB disconnect, device number 41 [ 272.906998][ T5954] usb 3-1: USB disconnect, device number 37 [ 273.666521][ T9356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.717863][ T9356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.757759][ T30] audit: type=1800 audit(1756698200.806:29): pid=9358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.993" name="bus" dev="overlay" ino=1268 res=0 errno=0 [ 273.789877][ T9356] ptrace attach of "./syz-executor exec"[5864] was attempted by ""[9356] [ 273.851512][ T9356] /dev/rnullb0: Can't open blockdev [ 273.910460][ T43] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 274.040615][ T43] usb 4-1: device descriptor read/64, error -71 [ 274.281097][ T43] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 274.420521][ T43] usb 4-1: device descriptor read/64, error -71 [ 274.540715][ T43] usb usb4-port1: attempt power cycle [ 274.890582][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 274.960761][ T43] usb 4-1: device descriptor read/8, error -71 [ 275.132739][ T9398] overlayfs: failed to resolve './file0': -2 [ 275.220440][ T43] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 275.271609][ T43] usb 4-1: device descriptor read/8, error -71 [ 275.297099][ T9402] /dev/rnullb0: Can't open blockdev [ 275.390836][ T43] usb usb4-port1: unable to enumerate USB device [ 276.109483][ T9415] /dev/rnullb0: Can't open blockdev [ 276.143403][ T9417] /dev/rnullb0: Can't open blockdev [ 276.258335][ T9419] binder: 9418:9419 ioctl c0306201 200000000080 returned -14 [ 276.774148][ T9425] /dev/rnullb0: Can't open blockdev [ 276.946770][ T9430] overlayfs: failed to resolve './file0': -2 [ 277.281586][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1016'. [ 277.759864][ T9455] /dev/rnullb0: Can't open blockdev [ 278.433425][ T9463] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1023'. [ 278.720427][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 278.882268][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 278.905019][ T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 278.918480][ T24] usb 4-1: config 0 has no interface number 0 [ 278.935980][ T24] usb 4-1: config 0 interface 184 has no altsetting 0 [ 278.960004][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 278.979569][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.995161][ T24] usb 4-1: Product: syz [ 278.999403][ T24] usb 4-1: Manufacturer: syz [ 279.028862][ T24] usb 4-1: SerialNumber: syz [ 279.045060][ T24] usb 4-1: config 0 descriptor?? [ 279.055413][ T9471] /dev/rnullb0: Can't open blockdev [ 279.062502][ T24] smsc75xx v1.0.0 [ 279.161861][ T9476] could not allocate digest TFM handle ./file0 [ 279.290041][ T9483] /dev/rnullb0: Can't open blockdev [ 279.305011][ T9486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.314081][ T9486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.375252][ T9488] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1030'. [ 279.385941][ T9488] /dev/rnullb0: Can't open blockdev [ 279.659222][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 279.682748][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 280.108245][ T9507] overlay: ./file0 is not a directory [ 280.321306][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 280.341491][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 280.369436][ T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 280.408867][ T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -32 [ 280.969817][ T5874] Bluetooth: hci5: SCO packet for unknown connection handle 3085 [ 281.169305][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.202077][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.380442][ T43] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 281.429144][ T5917] usb 4-1: USB disconnect, device number 46 [ 281.523923][ T9529] /dev/rnullb0: Can't open blockdev [ 281.543911][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 281.575959][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.588974][ T43] usb 5-1: Product: syz [ 281.596132][ T43] usb 5-1: Manufacturer: syz [ 281.601348][ T43] usb 5-1: SerialNumber: syz [ 281.679290][ T9534] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 281.688862][ T9534] /dev/rnullb0: Can't open blockdev [ 281.699506][ T9534] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 281.706865][ T9534] /dev/rnullb0: Can't open blockdev [ 281.714913][ T9534] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 281.722415][ T9534] /dev/rnullb0: Can't open blockdev [ 281.728419][ T9534] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 281.741718][ T9534] /dev/rnullb0: Can't open blockdev [ 281.747501][ T9534] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 281.754196][ T9533] 9p: Bad value for 'rfdno' [ 281.758743][ T9534] /dev/rnullb0: Can't open blockdev [ 281.766171][ T9534] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 281.849187][ T9538] /dev/rnullb0: Can't open blockdev [ 281.987832][ T9543] /dev/rnullb0: Can't open blockdev [ 282.140982][ T9549] /dev/rnullb0: Can't open blockdev [ 282.155637][ T9550] syzkaller1: entered promiscuous mode [ 282.155785][ T9549] /dev/rnullb0: Can't open blockdev [ 282.163340][ T9550] syzkaller1: entered allmulticast mode [ 282.167885][ T9552] /dev/rnullb0: Can't open blockdev [ 282.428515][ T9561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.451075][ T9561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.500544][ T5954] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 282.674175][ T5954] usb 4-1: unable to get BOS descriptor or descriptor too short [ 282.685348][ T5954] usb 4-1: config 20 has an invalid interface number: 189 but max is 0 [ 282.700842][ T5954] usb 4-1: config 20 has no interface number 0 [ 282.711546][ T5954] usb 4-1: config 20 interface 189 has no altsetting 0 [ 282.727401][ T5954] usb 4-1: New USB device found, idVendor=0fe9, idProduct=db78, bcdDevice=ad.a7 [ 282.738184][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.759873][ T5954] usb 4-1: Product: syz [ 282.765779][ T5954] usb 4-1: Manufacturer: syz [ 282.771845][ T5954] usb 4-1: SerialNumber: syz [ 283.019978][ T5954] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 4' in warm state. [ 283.038180][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 283.052170][ T5954] usb 4-1: setting power ON [ 283.056731][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 283.073237][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 283.089185][ T5954] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 283.113020][ T5954] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T Dual Digital 4) [ 283.129287][ T5954] usb 4-1: media controller created [ 283.154598][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.186011][ T5954] cxusb: set interface failed [ 283.191078][ T5954] dvb-usb: bulk message failed: -22 (1/0) [ 283.196901][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 283.202795][ T5954] usb 4-1: bluebird_gpio_write failed. [ 283.208948][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 283.216343][ T5954] usb 4-1: bluebird_gpio_write failed. [ 283.240460][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 283.246316][ T5954] usb 4-1: bluebird_gpio_write failed. [ 283.256308][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 283.263445][ T5954] usb 4-1: bluebird_gpio_write failed. [ 283.290533][ T5954] dvb-usb: bulk message failed: -22 (3/0) [ 283.296377][ T5954] usb 4-1: bluebird_gpio_write failed. [ 283.304203][ T5954] dvb-usb: bulk message failed: -22 (5/0) [ 283.329526][ T5954] zl10353_read_register: readreg error (reg=127, ret==-121) [ 283.338914][ T5954] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T Dual Digital 4' [ 283.401837][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000118. ret = -EPROTO [ 283.420611][ T5954] rc_core: IR keymap rc-dvico-mce not found [ 283.428068][ T5954] Registered IR keymap rc-empty [ 283.434503][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 283.482010][ T5954] rc rc0: DViCO FusionHDTV DVB-T Dual Digital 4 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 283.493689][ T43] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 283.510835][ T5954] input: DViCO FusionHDTV DVB-T Dual Digital 4 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input30 [ 283.540611][ T5954] dvb-usb: schedule remote query interval to 100 msecs. [ 283.549161][ T43] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 283.561574][ T5954] usb 4-1: setting power OFF [ 283.575470][ T5954] dvb-usb: bulk message failed: -22 (2/0) [ 283.595956][ T43] usb 5-1: USB disconnect, device number 9 [ 283.612360][ T5954] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 successfully initialized and connected. [ 283.644744][ T5954] usb 4-1: USB disconnect, device number 47 [ 283.765204][ T5954] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 4 successfully deinitialized and disconnected. [ 283.987337][ T9587] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 283.993942][ T9587] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 284.034532][ T9587] vhci_hcd vhci_hcd.0: Device attached [ 284.063676][ T9588] vhci_hcd: connection closed [ 284.063972][ T49] vhci_hcd: stop threads [ 284.086496][ T49] vhci_hcd: release socket [ 284.092946][ T49] vhci_hcd: disconnect device [ 284.289566][ T9603] /dev/rnullb0: Can't open blockdev [ 284.301412][ T9603] program syz.1.1066 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.599776][ T9610] netlink: 'syz.2.1069': attribute type 29 has an invalid length. [ 284.681101][ T43] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 284.850414][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 284.941491][ T9620] /dev/rnullb0: Can't open blockdev [ 284.990484][ T43] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 285.141639][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 285.147690][ T43] usb usb5-port1: attempt power cycle [ 285.490434][ T43] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 285.520959][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 285.672443][ T43] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 285.695632][ T9630] Set syz1 is full, maxelem 65536 reached [ 285.702093][ T43] usb 5-1: Invalid ep0 maxpacket: 16 [ 285.707655][ T43] usb usb5-port1: unable to enumerate USB device [ 286.494649][ T9672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1089'. [ 286.810556][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 286.970627][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 286.980050][ T10] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 286.991397][ T10] usb 3-1: config 0 has no interface number 0 [ 286.998534][ T10] usb 3-1: config 0 interface 184 has no altsetting 0 [ 287.014368][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 287.025740][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.035845][ T10] usb 3-1: Product: syz [ 287.040313][ T10] usb 3-1: Manufacturer: syz [ 287.047464][ T10] usb 3-1: SerialNumber: syz [ 287.063419][ T10] usb 3-1: config 0 descriptor?? [ 287.085217][ T10] smsc75xx v1.0.0 [ 287.456053][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.482240][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.495435][ T9683] /dev/rnullb0: Can't open blockdev [ 288.438614][ T9705] /dev/rnullb0: Can't open blockdev [ 288.517098][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 288.550523][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 288.649077][ T9710] Invalid source name [ 288.655331][ T9710] UBIFS error (pid: 9710): cannot open "./file0", error -22 [ 289.394188][ T9742] comedi comedi0: Cannot bond this driver to itself! [ 289.417140][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.429923][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.443453][ T9742] /dev/rnullb0: Can't open blockdev [ 289.545116][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 289.634925][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 289.657344][ T10] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 289.679184][ T10] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 290.257488][ T10] usb 3-1: USB disconnect, device number 38 [ 290.377483][ T9752] /dev/rnullb0: Can't open blockdev [ 290.400499][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 290.568125][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.586512][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.598932][ T24] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 290.608993][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.617243][ T9758] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 290.623842][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.634385][ T24] usb 4-1: config 0 descriptor?? [ 290.644041][ T9758] vhci_hcd vhci_hcd.0: Device attached [ 290.707811][ T9761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.712128][ T9759] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 290.721189][ T9761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.732213][ T10] usb 3-1: new low-speed USB device number 39 using dummy_hcd [ 290.733453][ T1151] vhci_hcd: stop threads [ 290.744900][ T1151] vhci_hcd: release socket [ 290.749537][ T1151] vhci_hcd: disconnect device [ 290.856174][ T9769] overlayfs: missing 'lowerdir' [ 290.877653][ T9771] /dev/rnullb0: Can't open blockdev [ 290.889476][ T9771] /dev/rnullb0: Can't open blockdev [ 290.914129][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.933607][ T10] usb 3-1: config 1 has an invalid interface number: 131 but max is 0 [ 290.959748][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.972889][ T10] usb 3-1: config 1 has no interface number 0 [ 290.979212][ T10] usb 3-1: config 1 interface 131 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.988023][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.994212][ T10] usb 3-1: config 1 interface 131 has no altsetting 0 [ 291.004493][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.045352][ T9740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.054423][ T9740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.068394][ T10] usb 3-1: string descriptor 0 read error: -22 [ 291.087435][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 291.110320][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.134285][ T10] usb 3-1: bad CDC descriptors [ 291.359962][ T43] usb 3-1: USB disconnect, device number 39 [ 291.689687][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000C/input/input31 [ 291.690482][ T9783] /dev/rnullb0: Can't open blockdev [ 291.769840][ T9785] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1123'. [ 291.797365][ T24] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000C/input/input32 [ 291.855866][ T24] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000C/input/input33 [ 291.909075][ T9787] /dev/rnullb0: Can't open blockdev [ 291.932741][ T24] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.000C/input/input34 [ 292.013341][ T24] uclogic 0003:256C:006D.000C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 292.082575][ T24] usb 4-1: USB disconnect, device number 48 [ 292.152116][ T9790] fido_id[9790]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 292.486474][ T9800] overlayfs: missing 'lowerdir' [ 292.514648][ T5953] IPVS: starting estimator thread 0... [ 292.522277][ T9797] /dev/rnullb0: Can't open blockdev [ 292.630449][ T9803] IPVS: using max 39 ests per chain, 93600 per kthread [ 293.660183][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.677797][ T9819] overlayfs: statfs failed on './file0' [ 293.702586][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.752691][ T9830] netlink: 'syz.2.1138': attribute type 1 has an invalid length. [ 293.793173][ T9830] /dev/rnullb0: Can't open blockdev [ 293.807420][ T9833] overlayfs: missing 'lowerdir' [ 293.936326][ T9838] /dev/rnullb0: Can't open blockdev [ 294.131998][ T9850] rdma_rxe: rxe_newlink: failed to add wlan1 [ 294.150093][ T9850] /dev/rnullb0: Can't open blockdev [ 294.253853][ T9861] /dev/rnullb0: Can't open blockdev [ 294.621794][ T9880] /dev/rnullb0: Can't open blockdev [ 294.782197][ T9891] netlink: 'syz.2.1154': attribute type 2 has an invalid length. [ 294.784562][ T9894] /dev/rnullb0: Can't open blockdev [ 295.072399][ T9909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.091665][ T9909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.225121][ T5904] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 295.234553][ T9921] syz0: rxe_newlink: already configured on wlan1 [ 295.242465][ T9922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1160'. [ 295.246127][ T9921] /dev/rnullb0: Can't open blockdev [ 295.251803][ T9919] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1160'. [ 295.380856][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 295.392129][ T5904] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 295.401099][ T5904] usb 5-1: config 0 has no interface number 0 [ 295.416297][ T5904] usb 5-1: config 0 interface 184 has no altsetting 0 [ 295.435155][ T5904] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 295.460408][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.468648][ T5904] usb 5-1: Product: syz [ 295.474855][ T5904] usb 5-1: Manufacturer: syz [ 295.479516][ T5904] usb 5-1: SerialNumber: syz [ 295.491067][ T5904] usb 5-1: config 0 descriptor?? [ 295.502449][ T5904] smsc75xx v1.0.0 [ 295.621204][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 295.719682][ T9934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.734537][ T9934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.760720][ T10] usb 3-1: device descriptor read/64, error -71 [ 296.010695][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 296.152325][ T10] usb 3-1: device descriptor read/64, error -71 [ 296.263120][ T10] usb usb3-port1: attempt power cycle [ 296.297194][ T9937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.308352][ T9937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.352642][ T9937] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1167'. [ 296.620588][ T10] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 296.661211][ T10] usb 3-1: device descriptor read/8, error -71 [ 296.781485][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 296.794516][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 296.805242][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 296.818045][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 296.828047][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 296.839539][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 296.849737][ T5904] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 296.863660][ T5904] usb 5-1: USB disconnect, device number 14 [ 296.920712][ T10] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 296.951172][ T10] usb 3-1: device descriptor read/8, error -71 [ 297.060909][ T10] usb usb3-port1: unable to enumerate USB device [ 297.100329][ T5874] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 297.103254][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1171'. [ 297.198796][ T5874] Bluetooth: hci0: unexpected subevent 0x0e length: 30 > 15 [ 297.207242][ T5874] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 297.226313][ T9951] /dev/rnullb0: Can't open blockdev [ 297.488825][ T9967] overlayfs: missing 'workdir' [ 297.566890][ T9969] rdma_rxe: rxe_newlink: failed to add wlan1 [ 297.579583][ T9969] /dev/rnullb0: Can't open blockdev [ 297.637358][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1180'. [ 298.230252][ T9979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.239096][ T9979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.388414][ T9984] /dev/rnullb0: Can't open blockdev [ 298.440768][ T9987] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 298.447609][ T9987] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 298.471617][ T9987] vhci_hcd vhci_hcd.0: Device attached [ 298.479688][ T9988] usbip_core: unknown command [ 298.490644][ T9988] vhci_hcd: unknown pdu 0 [ 298.495135][ T9988] usbip_core: unknown command [ 298.503631][ T12] vhci_hcd: stop threads [ 298.507966][ T12] vhci_hcd: release socket [ 298.520634][ T12] vhci_hcd: disconnect device [ 298.566999][ T9997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 298.661004][ T9999] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1186'. [ 299.021745][ T30] audit: type=1326 audit(1756698226.056:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10002 comm="syz.2.1188" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f958f18ebe9 code=0x0 [ 299.044292][ C1] vkms_vblank_simulate: vblank timer overrun [ 299.118857][T10006] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1189'. [ 299.164908][T10005] delete_channel: no stack [ 299.862318][T10036] cgroup: Unknown subsys name 'cpuset' [ 299.927337][T10040] binder: 10038:10040 unknown command 0 [ 299.934925][T10040] binder: 10038:10040 ioctl c0306201 200000000080 returned -22 [ 299.947034][T10040] binder: 10038:10040 ioctl c0189372 2000000001c0 returned -22 [ 300.100509][T10053] binder: 10052:10053 ioctl 81204101 200000000400 returned -22 [ 300.109532][T10053] /dev/rnullb0: Can't open blockdev [ 300.150521][ T10] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 300.310468][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 300.327967][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.333089][T10057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 300.356254][ T10] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.367237][T10057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 300.410425][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.417278][ T10] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 300.467787][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.487343][ T10] usb 4-1: config 0 descriptor?? [ 300.939640][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 300.971522][T10069] /dev/rnullb0: Can't open blockdev [ 300.971570][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 301.003475][ T10] usb 4-1: USB disconnect, device number 49 [ 301.105297][T10077] rdma_rxe: rxe_newlink: failed to add wlan1 [ 301.130809][T10074] /dev/rnullb0: Can't open blockdev [ 301.177260][ T5874] Bluetooth: hci1: unexpected event for opcode 0x200c [ 301.187335][T10085] netlink: 'syz.2.1213': attribute type 5 has an invalid length. [ 301.195551][T10085] netlink: 'syz.2.1213': attribute type 9 has an invalid length. [ 301.202286][T10086] /dev/rnullb0: Can't open blockdev [ 301.210412][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 301.600557][ T5953] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 301.710440][ T5954] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 301.760504][ T5953] usb 5-1: Using ep0 maxpacket: 32 [ 301.769125][ T5953] usb 5-1: config 4 has an invalid interface number: 61 but max is 0 [ 301.778105][ T5953] usb 5-1: config 4 has no interface number 0 [ 301.786550][ T5953] usb 5-1: config 4 interface 61 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 301.798389][ T5953] usb 5-1: config 4 interface 61 has no altsetting 0 [ 301.806981][ T5953] usb 5-1: Dual-Role OTG device on HNP port [ 301.813742][ T5953] usb 5-1: New USB device found, idVendor=050d, idProduct=1102, bcdDevice=48.8e [ 301.836155][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.860454][ T5954] usb 4-1: Using ep0 maxpacket: 32 [ 301.873274][ T5954] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 301.892148][ T5954] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.932772][ T5954] usb 4-1: config 0 descriptor?? [ 301.967171][ T5954] gspca_main: sq930x-2.14.0 probing 041e:403c [ 302.023768][T10096] /dev/rnullb0: Can't open blockdev [ 302.087529][T10102] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 302.105573][T10102] overlayfs: overlapping lowerdir path [ 302.140672][T10090] /dev/rnullb0: Can't open blockdev [ 302.155448][ T5953] usb 5-1: string descriptor 0 read error: -71 [ 302.195575][ T5953] usb 5-1: USB disconnect, device number 15 [ 302.365197][ T5954] gspca_sq930x: reg_r 001f failed -71 [ 302.379343][ T5954] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 302.424103][ T5954] usb 4-1: USB disconnect, device number 50 [ 302.788328][T10123] /dev/rnullb0: Can't open blockdev [ 302.825840][T10125] /dev/rnullb0: Can't open blockdev [ 303.100463][ T5954] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 303.104170][T10134] netlink: 'syz.3.1230': attribute type 10 has an invalid length. [ 303.148052][T10136] overlayfs: missing 'lowerdir' [ 303.270446][ T5954] usb 5-1: Using ep0 maxpacket: 8 [ 303.294899][ T5954] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 303.308162][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 303.334221][ T5954] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.370186][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 303.383066][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 303.423863][ T5954] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 303.432447][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 303.445597][T10141] kernel profiling enabled (shift: 7) [ 303.451615][ T5954] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.468568][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 303.491245][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 303.504739][T10144] netlink: 'syz.1.1233': attribute type 12 has an invalid length. [ 303.515169][T10144] netlink: 9472 bytes leftover after parsing attributes in process `syz.1.1233'. [ 303.526120][ T5954] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 303.550500][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 303.580234][ T5954] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 303.598812][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 303.614474][ T5954] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 303.629302][T10148] /dev/rnullb0: Can't open blockdev [ 303.632620][ T5954] usb 5-1: string descriptor 0 read error: -22 [ 303.642755][ T5954] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 303.652916][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.676658][ T5954] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 303.871198][T10153] /dev/rnullb0: Can't open blockdev [ 303.979575][T10155] overlayfs: workdir and upperdir must be separate subtrees [ 304.006030][T10155] netlink: 796 bytes leftover after parsing attributes in process `syz.1.1238'. [ 304.263182][T10159] overlayfs: missing 'lowerdir' [ 304.521230][T10173] /dev/rnullb0: Can't open blockdev [ 304.600465][ T10] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 304.707616][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1247'. [ 304.760473][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 304.779920][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.782161][T10177] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1247'. [ 304.791056][ T10] usb 3-1: config 0 has no interface number 0 [ 304.809792][ T10] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 304.859050][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.868567][ T10] usb 3-1: Product: syz [ 304.881429][ T10] usb 3-1: Manufacturer: syz [ 304.886239][ T10] usb 3-1: SerialNumber: syz [ 304.902100][ T10] usb 3-1: config 0 descriptor?? [ 304.913993][ T10] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 304.927086][ T10] usb 3-1: selecting invalid altsetting 1 [ 304.942140][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 304.963751][ T10] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 305.006058][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 305.011738][T10183] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 305.022127][ T10] usb 3-1: media controller created [ 305.038667][T10183] /dev/rnullb0: Can't open blockdev [ 305.051043][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 305.094707][ T5904] usb 2-1: USB disconnect, device number 24 [ 305.130658][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (Zarlink ZL10353 DVB-T)... [ 305.145354][ T10] dvbdev: dvb_create_media_entity: media entity 'Zarlink ZL10353 DVB-T' registered. [ 305.244895][ T10] DVB: Unable to find symbol mxl5005s_attach() [ 305.267874][ T10] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 305.288791][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.350666][ T10] usb 3-1: USB disconnect, device number 44 [ 305.430603][ T5953] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 305.452009][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.580535][ T5953] usb 4-1: device descriptor read/64, error -71 [ 305.671699][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.740135][ T5184] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.749187][ T5184] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.759249][ T5184] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.767699][ T5184] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.776140][ T5184] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.776997][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.830726][T10195] wlan1 speed is unknown, defaulting to 1000 [ 305.845436][ T5953] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 305.930977][ T36] bridge_slave_1: left allmulticast mode [ 305.937394][ T36] bridge_slave_1: left promiscuous mode [ 305.957931][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.972153][ T36] bridge_slave_0: left allmulticast mode [ 305.977880][ T36] bridge_slave_0: left promiscuous mode [ 305.996993][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.006686][ T5953] usb 4-1: device descriptor read/64, error -71 [ 306.133266][ T5953] usb usb4-port1: attempt power cycle [ 306.287186][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.342644][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.391696][ T36] bond0 (unregistering): Released all slaves [ 306.501497][ T5953] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 306.542554][ T5953] usb 4-1: device descriptor read/8, error -71 [ 306.646966][T10195] chnl_net:caif_netlink_parms(): no params data found [ 306.816580][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.824151][ T5953] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 306.824659][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.839457][T10195] bridge_slave_0: entered allmulticast mode [ 306.846663][T10195] bridge_slave_0: entered promiscuous mode [ 306.853147][ T5953] usb 4-1: device descriptor read/8, error -71 [ 306.857992][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.869441][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.877943][T10195] bridge_slave_1: entered allmulticast mode [ 306.884935][T10195] bridge_slave_1: entered promiscuous mode [ 306.969089][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.970707][ T5953] usb usb4-port1: unable to enumerate USB device [ 306.999581][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.043212][ T36] hsr_slave_0: left promiscuous mode [ 307.051960][ T36] hsr_slave_1: left promiscuous mode [ 307.057850][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 307.065784][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.076674][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.086256][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.099661][ T36] veth1_macvtap: left promiscuous mode [ 307.106121][ T36] veth0_macvtap: left promiscuous mode [ 307.113608][ T36] veth1_vlan: left promiscuous mode [ 307.119205][ T36] veth0_vlan: left promiscuous mode [ 307.333427][ T36] team0 (unregistering): Port device team_slave_1 removed [ 307.363554][ T5953] usb 5-1: USB disconnect, device number 16 [ 307.397432][ T36] team0 (unregistering): Port device team_slave_0 removed [ 307.525321][T10248] rdma_rxe: rxe_newlink: failed to add veth1 [ 307.537017][T10248] /dev/rnullb0: Can't open blockdev [ 307.605695][T10195] team0: Port device team_slave_0 added [ 307.627106][T10195] team0: Port device team_slave_1 added [ 307.658496][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.666111][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.694060][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.694678][ T10] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 307.706891][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.723641][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.750643][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.785333][T10195] hsr_slave_0: entered promiscuous mode [ 307.792112][T10195] hsr_slave_1: entered promiscuous mode [ 307.798968][T10195] debugfs: 'hsr0' already exists in 'hsr' [ 307.805503][T10195] Cannot create hsr debugfs directory [ 307.830751][ T5874] Bluetooth: hci0: command tx timeout [ 307.882114][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.906152][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.920494][ T5953] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 307.931262][ T10] usb 3-1: New USB device found, idVendor=17ef, idProduct=6049, bcdDevice= 0.00 [ 307.943773][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.958539][ T10] usb 3-1: config 0 descriptor?? [ 308.073642][T10195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 308.098653][T10195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 308.114819][ T5953] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 308.129085][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.138956][ T5953] usb 5-1: Product: syz [ 308.142444][T10195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.164446][ T5953] usb 5-1: Manufacturer: syz [ 308.173449][ T5953] usb 5-1: SerialNumber: syz [ 308.188433][T10195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.192537][ T5953] usb 5-1: config 0 descriptor?? [ 308.309351][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.356439][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.378156][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.385834][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.407865][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.415325][ T7015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.507574][T10195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.825642][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.236415][T10257] /dev/rnullb0: Can't open blockdev [ 309.237383][T10312] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 309.249347][T10312] IPv6: NLM_F_CREATE should be set when creating new route [ 309.257127][T10312] IPv6: NLM_F_CREATE should be set when creating new route [ 309.264718][T10312] IPv6: NLM_F_CREATE should be set when creating new route [ 309.298667][T10195] veth0_vlan: entered promiscuous mode [ 309.323759][T10195] veth1_vlan: entered promiscuous mode [ 309.360284][T10195] veth0_macvtap: entered promiscuous mode [ 309.379254][T10195] veth1_macvtap: entered promiscuous mode [ 309.400067][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.417429][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.435319][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.458129][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.474753][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.485194][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.533183][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.554203][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.579833][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.588505][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.910927][ T5874] Bluetooth: hci0: command tx timeout [ 309.990771][ T43] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 310.144583][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.156941][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.167128][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 310.179417][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 310.190054][ T43] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 310.204148][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.214800][ T43] usb 6-1: config 0 descriptor?? [ 310.405799][ T10] usb 3-1: string descriptor 0 read error: -71 [ 310.434217][ T10] usb 3-1: USB disconnect, device number 45 [ 310.526843][T10328] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ0 [ 310.603087][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1268'. [ 310.636509][ T43] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 310.657343][ T5953] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 310.685734][ T43] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 310.694022][ T5953] asix 5-1:0.0: probe with driver asix failed with error -71 [ 310.711281][ T43] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 310.725293][ T5953] usb 5-1: USB disconnect, device number 17 [ 310.734217][ T43] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 310.758084][ T43] hid-u2fzero 0003:10C4:8ACF.000D: unknown main item tag 0x0 [ 310.781597][ T43] hid-u2fzero 0003:10C4:8ACF.000D: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.5-1/input0 [ 310.818217][ T43] hid-u2fzero 0003:10C4:8ACF.000D: U2F Zero LED initialised [ 310.858648][ T43] hid-u2fzero 0003:10C4:8ACF.000D: U2F Zero RNG initialised [ 310.892234][T10339] can0: slcan on ttynull. [ 310.992015][T10338] can0 (unregistered): slcan off ttynull. [ 311.098130][ T5953] usb 6-1: USB disconnect, device number 2 [ 311.193989][T10344] QAT: Invalid ioctl 21531 [ 311.596598][T10360] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 311.600825][T10357] /dev/rnullb0: Can't open blockdev [ 311.920264][T10371] syzkaller1: entered promiscuous mode [ 311.943958][T10371] syzkaller1: entered allmulticast mode [ 311.987951][T10371] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1276'. [ 311.999497][ T5874] Bluetooth: hci0: command tx timeout [ 312.200748][ T9] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 312.362106][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.410415][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.441674][ T9] usb 3-1: New USB device found, idVendor=d77d, idProduct=2c4e, bcdDevice= 0.00 [ 312.458545][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.481970][ T9] usb 3-1: config 0 descriptor?? [ 312.502566][ T9] usbhid 3-1:0.0: can't add hid device: -22 [ 312.530561][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 312.569571][ T5954] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 312.622111][ T5954] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 312.662430][T10391] /dev/rnullb0: Can't open blockdev [ 312.805351][T10392] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input37 [ 313.532535][T10407] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1282'. [ 315.154663][ T10] usb 3-1: USB disconnect, device number 46 [ 315.489590][T10431] /dev/rnullb0: Can't open blockdev [ 315.687768][T10439] /dev/rnullb0: Can't open blockdev [ 315.771427][T10448] bond0: (slave nr0): Error: Device can not be enslaved while up [ 315.859866][T10454] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 315.866563][T10454] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 315.879826][T10454] vhci_hcd vhci_hcd.0: Device attached [ 316.031084][ T5954] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 316.081132][ T43] vhci_hcd: vhci_device speed not set [ 316.100662][T10455] vhci_hcd: connection closed [ 316.100911][ T77] vhci_hcd: stop threads [ 316.110089][ T77] vhci_hcd: release socket [ 316.116783][ T77] vhci_hcd: disconnect device [ 316.140493][ T43] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 316.148078][ T43] usb 37-1: enqueue for inactive port 0 [ 316.170584][ T5954] usb 5-1: device descriptor read/64, error -71 [ 316.220490][ T43] vhci_hcd: vhci_device speed not set [ 316.410573][ T5954] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 316.550499][ T5954] usb 5-1: device descriptor read/64, error -71 [ 316.662305][ T5954] usb usb5-port1: attempt power cycle [ 317.000415][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 317.020601][ T5954] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 317.062675][ T5954] usb 5-1: device descriptor read/8, error -71 [ 317.164884][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 317.176066][T10467] /dev/rnullb0: Can't open blockdev [ 317.186019][ T9] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 317.198896][ T9] usb 6-1: config 0 has no interface number 0 [ 317.206979][ T9] usb 6-1: config 0 interface 55 has no altsetting 0 [ 317.219724][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=3009, bcdDevice=12.11 [ 317.232003][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.240259][ T9] usb 6-1: Product: syz [ 317.246253][ T9] usb 6-1: Manufacturer: syz [ 317.252399][ T9] usb 6-1: SerialNumber: syz [ 317.275591][T10469] /dev/rnullb0: Can't open blockdev [ 317.283840][ T9] usb 6-1: config 0 descriptor?? [ 317.313475][ T5954] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 317.343946][ T5954] usb 5-1: device descriptor read/8, error -71 [ 317.355630][T10471] /dev/sg0: Can't lookup blockdev [ 317.439323][T10473] /dev/rnullb0: Can't open blockdev [ 317.471253][ T5954] usb usb5-port1: unable to enumerate USB device [ 317.677106][ T9] dvb-usb: found a 'Technotrend TT-connect S-2400 (8kB EEPROM)' in warm state. [ 317.702511][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 317.708349][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 317.731050][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 317.736873][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 317.749789][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 317.788325][ T9] dvbdev: DVB: registering new adapter (Technotrend TT-connect S-2400 (8kB EEPROM)) [ 317.820417][ T9] usb 6-1: media controller created [ 317.849686][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 317.881684][ T9] ttusb2: set interface to alts=3 failed [ 317.950040][ T9] DVB: Unable to find symbol tda10086_attach() [ 317.960574][ T9] dvb-usb: no frontend was attached by 'Technotrend TT-connect S-2400 (8kB EEPROM)' [ 317.989137][ T9] dvb-usb: bulk message failed: -22 (4/0) [ 317.997456][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 318.018041][ T9] dvb-usb: bulk message failed: -22 (5/0) [ 318.023925][ T9] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 318.041118][ T9] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPROM) successfully initialized and connected. [ 318.067124][ T9] usb 6-1: USB disconnect, device number 3 [ 318.116655][ T9] dvb-usb: Technotrend TT-connect S-2400 (8kB EEPR successfully deinitialized and disconnected. [ 319.750559][ T5184] Bluetooth: hci3: command 0x0406 tx timeout [ 319.910642][ T5874] Bluetooth: hci0: command tx timeout [ 322.793493][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.800012][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.242273][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.248935][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.259256][T10558] /dev/rnullb0: Can't open blockdev [ 385.433636][T10575] NILFS (nullb0): couldn't find nilfs on the device [ 385.469629][ T5917] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 385.552020][T10582] XFS (nullb0): Invalid superblock magic number [ 385.636180][ T5917] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.668103][T10589] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1311'. [ 385.682708][ T5917] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0127, bcdDevice=7b.4a [ 385.694742][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.732740][ T5917] usb 4-1: Product: syz [ 385.737090][ T5917] usb 4-1: Manufacturer: syz [ 385.746438][ T5917] usb 4-1: SerialNumber: syz [ 385.769339][ T5917] usb 4-1: config 0 descriptor?? [ 385.784788][ T5917] kvaser_usb 4-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 386.011080][T10555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.020150][T10555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.052654][T10605] netlink: 'syz.4.1317': attribute type 142 has an invalid length. [ 386.062656][T10555] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 386.072395][ T5917] usb 4-1: USB disconnect, device number 55 [ 391.430511][ T5184] Bluetooth: hci5: command 0x0406 tx timeout [ 445.673547][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.680004][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 457.340979][T10617] /dev/rnullb0: Can't open blockdev [ 457.363148][T10617] /dev/rnullb0: Can't open blockdev [ 457.415963][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 457.452085][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1324'. [ 457.491465][T10634] /dev/rnullb0: Can't open blockdev [ 457.519010][T10639] /dev/rnullb0: Can't open blockdev [ 457.610387][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 457.774787][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 457.785593][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 457.801739][ T10] usb 4-1: Product: syz [ 457.806205][ T10] usb 4-1: SerialNumber: syz [ 457.826896][ T10] usb 4-1: config 0 descriptor?? [ 457.940414][ T5917] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 457.997200][T10654] fuse: Bad value for 'fd' [ 458.052424][ T10] hso 4-1:0.0: Failed to find BULK IN ep [ 458.102697][ T5917] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.120382][ T5917] usb 3-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 458.150081][ T10] usb 4-1: USB disconnect, device number 56 [ 458.161011][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.184864][ T5917] usb 3-1: config 0 descriptor?? [ 458.660208][T10681] /dev/rnullb0: Can't open blockdev [ 458.697173][ T5917] hid_mf 0003:0079:1846.000F: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.2-1/input0 [ 458.740360][ T5917] hid_mf 0003:0079:1846.000F: Invalid report, this should never happen! [ 458.750369][ T5917] hid_mf 0003:0079:1846.000F: Force feedback init failed. [ 458.900590][ T43] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 458.934781][ T5874] Bluetooth: hci1: unexpected event for opcode 0x2031 [ 459.093166][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 459.108345][T10696] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1342'. [ 459.120425][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 459.133850][ T43] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 459.137332][T10697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1342'. [ 459.154060][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.170881][ T43] usb 6-1: Product: syz [ 459.180326][ T43] usb 6-1: Manufacturer: syz [ 459.213188][ T43] usb 6-1: SerialNumber: syz [ 459.240721][ T43] usb 6-1: config 0 descriptor?? [ 459.253996][ T43] usb 6-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 459.515165][ T5874] Bluetooth: hci0: command tx timeout [ 459.841192][T10718] /dev/rnullb0: Can't open blockdev [ 460.145523][T10722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.220962][T10722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.400976][T10721] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1350'. [ 460.770425][ T5917] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 460.920765][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 460.935228][ T5917] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 460.947381][ T5917] usb 5-1: config 0 has no interface number 0 [ 460.958980][ T5917] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 460.973492][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.994754][ T5917] usb 5-1: Product: syz [ 461.012212][ T5917] usb 5-1: Manufacturer: syz [ 461.033047][ T5917] usb 5-1: SerialNumber: syz [ 461.058303][ T5917] usb 5-1: config 0 descriptor?? [ 461.076522][ T5917] smsc95xx v2.0.0 [ 461.349952][T10739] wlan1 speed is unknown, defaulting to 1000 [ 461.525020][ T5917] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 461.556432][ T5917] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 461.651959][ T43] usb 6-1: USB disconnect, device number 4 [ 461.690469][ T951] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 461.742440][T10630] udevd[10630]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.860364][ T951] usb 4-1: device descriptor read/64, error -71 [ 461.896196][ T10] usb 3-1: USB disconnect, device number 47 [ 462.100541][ T951] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 462.196551][T10713] /dev/rnullb0: Can't open blockdev [ 462.230645][ T951] usb 4-1: device descriptor read/64, error -71 [ 462.350740][ T951] usb usb4-port1: attempt power cycle [ 462.692219][ T951] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 462.789226][ T951] usb 4-1: device descriptor read/8, error -71 [ 463.121243][ T951] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 463.141458][ T951] usb 4-1: device descriptor read/8, error -71 [ 463.254552][ T951] usb usb4-port1: unable to enumerate USB device [ 463.264216][ T5917] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 463.286698][ T5917] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 463.309306][ T5917] usb 5-1: USB disconnect, device number 22 [ 463.386435][T10764] NILFS (nullb0): couldn't find nilfs on the device [ 463.414669][T10764] NILFS (nullb0): couldn't find nilfs on the device [ 463.424400][T10764] NILFS (nullb0): couldn't find nilfs on the device [ 463.437510][T10764] NILFS (nullb0): couldn't find nilfs on the device [ 463.514134][T10772] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 463.525672][T10772] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 463.756144][T10784] /dev/rnullb0: Can't open blockdev [ 463.810610][ T5917] usb 5-1: new low-speed USB device number 23 using dummy_hcd [ 463.975719][ T5917] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 464.001902][ T5917] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 464.002194][T10802] netlink: 750 bytes leftover after parsing attributes in process `syz.2.1370'. [ 464.020322][ T5917] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 464.042503][ T5917] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 464.052431][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.094018][ T5917] usb 5-1: Manufacturer: ј [ 464.098693][ T5917] usb 5-1: SerialNumber: Ⰹ [ 464.114158][T10771] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 464.186111][T10809] /dev/rnullb0: Can't open blockdev [ 464.194122][T10809] fuse: Bad value for 'rootmode' [ 464.207488][T10809] CUSE: info not properly terminated [ 464.220072][T10809] fuse: Bad value for 'fd' [ 464.511959][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1374'. [ 464.513136][T10819] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 464.529943][T10771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.547865][T10818] netlink: 'syz.5.1375': attribute type 21 has an invalid length. [ 464.548211][T10821] /dev/rnullb0: Can't open blockdev [ 464.600702][T10818] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1375'. [ 464.610246][T10771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.634774][ T5917] cdc_ncm 5-1:1.0: bind() failure [ 464.656677][ T5917] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 464.676265][ T5917] cdc_ncm 5-1:1.1: bind() failure [ 464.687675][ T5917] usb 5-1: USB disconnect, device number 23 [ 464.710730][ T951] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 464.872564][ T951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.890418][ T951] usb 4-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 464.906756][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.927138][ T951] usb 4-1: config 0 descriptor?? [ 465.246635][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.278612][T10845] /dev/rnullb0: Can't open blockdev [ 465.308953][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.326999][T10845] /dev/rnullb0: Can't open blockdev [ 465.338843][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.360166][T10845] /dev/rnullb0: Can't open blockdev [ 465.371349][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.395861][T10845] /dev/rnullb0: Can't open blockdev [ 465.415375][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.453237][T10845] /dev/rnullb0: Can't open blockdev [ 465.472555][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.496394][T10845] /dev/rnullb0: Can't open blockdev [ 465.512986][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.536589][T10845] /dev/rnullb0: Can't open blockdev [ 465.557547][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.569477][T10845] /dev/rnullb0: Can't open blockdev [ 465.586285][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.599595][T10845] /dev/rnullb0: Can't open blockdev [ 465.616264][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.645538][T10845] /dev/rnullb0: Can't open blockdev [ 465.663745][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.688568][T10845] /dev/rnullb0: Can't open blockdev [ 465.694973][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.733284][T10845] /dev/rnullb0: Can't open blockdev [ 465.759265][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.779275][T10845] /dev/rnullb0: Can't open blockdev [ 465.797917][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.846698][T10845] /dev/rnullb0: Can't open blockdev [ 465.924372][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.949923][T10849] syzkaller1: entered promiscuous mode [ 465.985513][T10845] /dev/rnullb0: Can't open blockdev [ 465.991849][T10845] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 465.992036][T10849] syzkaller1: entered allmulticast mode [ 466.001485][ T951] waltop 0003:172F:0500.0010: item fetching failed at offset 3/5 [ 466.019149][ T951] waltop 0003:172F:0500.0010: probe with driver waltop failed with error -22 [ 466.074352][T10845] /dev/rnullb0: Can't open blockdev [ 466.083070][T10852] /dev/rnullb0: Can't open blockdev [ 466.341144][ T5954] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 466.511954][ T5954] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 466.526614][ T5954] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.549772][ T5954] usb 6-1: config 0 descriptor?? [ 466.612853][ T5953] usb 4-1: USB disconnect, device number 61 [ 466.660395][ T43] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 466.759910][ T5954] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 466.782129][ T5954] asix 6-1:0.0: probe with driver asix failed with error -32 [ 466.803671][ T5954] usb 6-1: USB disconnect, device number 5 [ 466.813178][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 466.829737][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 466.842916][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 466.863695][ T43] usb 5-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00 [ 466.875244][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.885201][ T43] usb 5-1: config 0 descriptor?? [ 467.036907][T10880] /dev/rnullb0: Can't open blockdev [ 467.150354][ T5954] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 467.295119][T10865] /dev/rnullb0: Can't open blockdev [ 467.301050][ T5954] usb 6-1: Using ep0 maxpacket: 16 [ 467.325279][ T5954] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 467.349938][ T5954] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 467.364478][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.374272][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 467.380655][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 467.388594][ T5954] usb 6-1: Product: syz [ 467.395128][ T5954] usb 6-1: Manufacturer: syz [ 467.401614][ T43] usb 5-1: USB disconnect, device number 24 [ 467.407668][ T5954] usb 6-1: SerialNumber: syz [ 467.415476][ T5954] usb 6-1: config 0 descriptor?? [ 467.430233][ T5954] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 467.441120][ T5954] usb 6-1: Detected FT232R [ 467.503048][ T24] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 467.662245][ T24] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 467.683149][ T24] usb 4-1: config 0 has no interface number 0 [ 467.697528][ T24] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 467.717918][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.738414][ T24] usb 4-1: Product: syz [ 467.755049][ T24] usb 4-1: Manufacturer: syz [ 467.766512][ T24] usb 4-1: SerialNumber: syz [ 467.782758][ T24] usb 4-1: config 0 descriptor?? [ 467.919614][ T5954] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 467.941097][ T5954] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 467.961895][ T5954] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71 [ 467.975635][ T5954] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 468.002458][ T5954] usb 6-1: USB disconnect, device number 6 [ 468.031016][ T5954] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 468.055394][ T5954] ftdi_sio 6-1:0.0: device disconnected [ 468.230411][ T10] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 468.383608][ T10] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 468.393603][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.407150][ T10] usb 5-1: config 0 descriptor?? [ 468.442369][ T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 468.624514][ T24] usb 4-1: non-Atmel transceiver xxxx7777 [ 468.834461][T10890] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 468.845967][T10897] netlink: 'syz.3.1396': attribute type 1 has an invalid length. [ 468.863162][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 468.869891][ T24] usb 4-1: Firmware version (0.0) predates our first public release. [ 468.898866][ T24] usb 4-1: Please update to version 0.2 or newer [ 468.906630][ T10] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 468.910379][ T24] usb 4-1: atusb_probe: initialization failed, error = -19 [ 468.951075][ T10] asix 5-1:0.0: probe with driver asix failed with error -71 [ 468.967278][ T10] usb 5-1: USB disconnect, device number 25 [ 468.968307][ T24] usb 4-1: USB disconnect, device number 62 [ 469.119282][T10929] Set syz1 is full, maxelem 65536 reached [ 469.272156][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 469.280938][ T951] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 469.348343][T10933] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 470.124728][ T10] usb 5-1: device descriptor read/64, error -71 [ 470.220157][ T951] usb 6-1: Using ep0 maxpacket: 32 [ 470.228208][ T951] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 470.243832][ T951] usb 6-1: config 0 has no interface number 0 [ 470.250074][ T951] usb 6-1: config 0 interface 184 has no altsetting 0 [ 470.256162][T10948] /dev/rnullb0: Can't open blockdev [ 470.261298][ T951] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 470.271727][ T951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.280442][ T951] usb 6-1: Product: syz [ 470.284698][ T951] usb 6-1: Manufacturer: syz [ 470.289419][ T951] usb 6-1: SerialNumber: syz [ 470.297045][ T951] usb 6-1: config 0 descriptor?? [ 470.305328][ T951] smsc75xx v1.0.0 [ 470.342096][T10950] block nbd2: Attempted send on invalid socket [ 470.348629][T10950] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 470.420505][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 470.422667][T10952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.444041][T10952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.570494][ T10] usb 5-1: device descriptor read/64, error -71 [ 470.680903][ T10] usb usb5-port1: attempt power cycle [ 470.734317][T10956] overlayfs: conflicting options: userxattr,metacopy=on [ 470.745838][T10956] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 470.754120][T10956] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 1th superblock [ 470.763294][T10956] F2FS-fs (nbd3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 470.771755][T10956] F2FS-fs (nbd3): Can't find valid F2FS filesystem in 2th superblock [ 470.962778][T10963] /dev/rnullb0: Can't open blockdev [ 470.972001][T10963] /dev/rnullb0: Can't open blockdev [ 471.004127][T10967] /dev/rnullb0: Can't open blockdev [ 471.041141][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 471.072649][ T10] usb 5-1: device descriptor read/8, error -71 [ 471.310485][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 471.344660][ T10] usb 5-1: device descriptor read/8, error -71 [ 471.461209][ T10] usb usb5-port1: unable to enumerate USB device [ 471.534725][T10980] /dev/rnullb0: Can't open blockdev [ 471.543162][T10981] /dev/rnullb0: Can't open blockdev [ 471.568023][T10925] /dev/rnullb0: Can't open blockdev [ 471.578744][ T951] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 471.592647][ T951] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 471.613839][ T951] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 471.632461][ T951] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 471.660416][ T951] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 471.680604][ T951] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 471.700982][ T951] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 471.733188][ T951] usb 6-1: USB disconnect, device number 7 [ 471.838427][T10992] /dev/rnullb0: Can't open blockdev [ 471.910418][T10996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.919256][T10996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.472361][T11011] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 472.480129][T11011] /dev/rnullb0: Can't open blockdev [ 472.620358][ T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 472.635368][T11013] syzkaller1: entered promiscuous mode [ 472.642030][T11013] syzkaller1: entered allmulticast mode [ 472.714564][ T10] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 472.786440][ T43] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.798534][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.808645][ T43] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 472.826780][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 472.834985][ T43] usb 6-1: SerialNumber: syz [ 472.883932][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 472.899290][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 472.942401][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 472.968238][ T10] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 472.979552][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.990725][ T10] usb 4-1: Product: syz [ 472.995382][ T10] usb 4-1: Manufacturer: syz [ 473.000100][ T10] usb 4-1: SerialNumber: syz [ 473.011475][ T10] usb 4-1: config 0 descriptor?? [ 473.175043][T11021] /dev/rnullb0: Can't open blockdev [ 473.226250][ T10] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 473.427079][T10994] /dev/rnullb0: Can't open blockdev [ 473.484263][ T24] usb 4-1: USB disconnect, device number 63 [ 473.588258][ T43] usb 6-1: 0:2 : does not exist [ 473.595706][ T43] usb 6-1: unit 5: unexpected type 0x09 [ 473.621818][ T43] usb 6-1: USB disconnect, device number 8 [ 473.640158][T11036] /dev/rnullb0: Can't open blockdev [ 473.677662][T10741] udevd[10741]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.701350][ T9] usb 3-1: device descriptor read/64, error -110 [ 473.950951][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 474.010536][ T10] usb 4-1: new full-speed USB device number 64 using dummy_hcd [ 474.025565][T11056] wlan1 speed is unknown, defaulting to 1000 [ 474.096939][ T9] usb 3-1: device descriptor read/64, error -32 [ 474.151086][ T10] usb 4-1: device descriptor read/64, error -71 [ 474.211222][ T9] usb usb3-port1: attempt power cycle [ 474.404473][T11073] netlink: 'syz.5.1455': attribute type 1 has an invalid length. [ 474.415492][ T10] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 474.426035][T11073] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1455'. [ 474.438664][T11073] /dev/rnullb0: Can't open blockdev [ 474.570620][ T10] usb 4-1: device descriptor read/64, error -71 [ 474.578293][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 474.610959][ T9] usb 3-1: device descriptor read/8, error -32 [ 474.694048][ T10] usb usb4-port1: attempt power cycle [ 474.732047][ T9] raw-gadget.3 gadget.2: failed to queue reset event [ 474.795220][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.811750][ T9] raw-gadget.3 gadget.2: failed to queue resume event [ 474.831063][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.882190][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 474.919684][T11098] /dev/rnullb0: Can't open blockdev [ 474.930633][ C0] raw-gadget.3 gadget.2: ignoring, device is not running [ 474.937986][ T9] usb 3-1: device descriptor read/8, error -32 [ 475.050629][ T9] raw-gadget.3 gadget.2: failed to queue suspend event [ 475.060462][ T10] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 475.069733][ T9] usb usb3-port1: unable to enumerate USB device [ 475.101888][ T10] usb 4-1: device descriptor read/8, error -71 [ 475.350527][ T10] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 475.382260][ T10] usb 4-1: device descriptor read/8, error -71 [ 475.501046][ T10] usb usb4-port1: unable to enumerate USB device [ 475.540930][ T951] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 475.680401][ T951] usb 5-1: device descriptor read/64, error -71 [ 475.863808][T11118] /dev/rnullb0: Can't open blockdev [ 475.920501][ T951] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 476.060547][ T951] usb 5-1: device descriptor read/64, error -71 [ 476.180694][ T951] usb usb5-port1: attempt power cycle [ 476.380097][T11138] dlm: non-version read from control device 8224 [ 476.530508][ T951] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 476.553145][ T951] usb 5-1: device descriptor read/8, error -71 [ 476.565901][T11145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.577132][T11145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.772307][T11147] /dev/rnullb0: Can't open blockdev [ 476.802284][ T951] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 476.832143][ T951] usb 5-1: device descriptor read/8, error -71 [ 476.941103][ T951] usb usb5-port1: unable to enumerate USB device [ 477.343254][T11156] /dev/rnullb0: Can't open blockdev [ 477.647668][T11167] use of bytesused == 0 is deprecated and will be removed in the future, [ 477.659001][T11167] use the actual size instead. [ 477.760395][ T951] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 477.802575][T11179] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1489'. [ 477.819891][T11179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 477.839680][T11179] /dev/rnullb0: Can't open blockdev [ 477.933980][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 477.944564][ T951] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 477.956797][ T951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 477.970571][ T951] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 477.980773][ T951] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 477.991356][ T951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.011090][ T951] usb 6-1: config 0 descriptor?? [ 478.147389][T11190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.158124][T11190] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.168580][T11190] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1494'. [ 478.221937][ T951] hdpvr 6-1:0.0: firmware version 0x51 dated  [ 478.228249][ T951] hdpvr 6-1:0.0: untested firmware, the driver might not work. [ 478.685146][ T951] hdpvr 6-1:0.0: Could not setup controls [ 478.697783][ T951] hdpvr 6-1:0.0: registering videodev failed [ 478.728617][ T951] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -71 [ 478.755689][ T951] usb 6-1: USB disconnect, device number 9 [ 479.445210][T11206] /dev/rnullb0: Can't open blockdev [ 479.903070][T11212] netlink: 'syz.4.1502': attribute type 6 has an invalid length. [ 479.972639][T11219] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.1504'. [ 479.993215][ T9] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 480.076227][T11221] netlink: 'syz.5.1505': attribute type 6 has an invalid length. [ 480.110009][T11221] binder: BINDER_SET_CONTEXT_MGR already set [ 480.116276][T11221] binder: 11220:11221 ioctl 4018620d 200000000040 returned -16 [ 480.124806][T11221] binder: 11220:11221 unknown command 0 [ 480.130479][T11221] binder: 11220:11221 ioctl c0306201 2000000001c0 returned -22 [ 480.193145][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 480.215487][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.227262][ T9] usb 4-1: Product: syz [ 480.236703][ T9] usb 4-1: Manufacturer: syz [ 480.238395][T11223] mkiss: ax0: crc mode is auto. [ 480.246898][ T9] usb 4-1: SerialNumber: syz [ 480.264705][T11223] /dev/rnullb0: Can't open blockdev [ 480.268286][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 480.293016][ T951] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 481.060457][ T9] usb 4-1: USB disconnect, device number 68 [ 481.356246][ T951] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 481.383333][ T951] ath9k_htc: Failed to initialize the device [ 481.399020][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 482.382153][T11279] fuse: Unknown parameter 'rootmodespN^fb' [ 482.492426][T11281] /dev/rnullb0: Can't open blockdev [ 482.835248][T11290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.864444][T11290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.910514][T11290] lo: entered promiscuous mode [ 482.927830][T11290] sctp: [Deprecated]: syz.2.1525 (pid 11290) Use of int in max_burst socket option deprecated. [ 482.927830][T11290] Use struct sctp_assoc_value instead [ 482.981413][T11289] lo: left promiscuous mode [ 483.307263][T11300] /dev/rnullb0: Can't open blockdev [ 483.593641][ T5954] IPVS: starting estimator thread 0... [ 483.630372][ T43] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 483.680458][T11309] IPVS: using max 39 ests per chain, 93600 per kthread [ 483.744781][T11314] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 483.803968][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 483.817638][ T43] usb 4-1: config 0 descriptor has 1 excess byte, ignoring [ 483.826698][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 483.860335][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 483.880420][ T43] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 483.914251][ T43] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 483.931795][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.940248][ T43] usb 4-1: Product: syz [ 483.955539][ T43] usb 4-1: Manufacturer: syz [ 483.960213][ T43] usb 4-1: SerialNumber: syz [ 483.982519][ T43] usb 4-1: config 0 descriptor?? [ 483.990650][T11304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.011263][T11304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 484.041879][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 484.048353][ T43] mcba_usb 4-1:0.0: Microchip CAN BUS Analyzer connected [ 484.055792][ C1] mcba_usb 4-1:0.0 can0: Tx URB aborted (-71) [ 484.066699][T11318] /dev/rnullb0: Can't open blockdev [ 484.238004][ T5954] usb 4-1: USB disconnect, device number 69 [ 484.246601][ T5954] mcba_usb 4-1:0.0 can0: device disconnected [ 484.703689][T11347] netlink: 200 bytes leftover after parsing attributes in process `syz.2.1539'. [ 484.722042][T11345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.734951][T11345] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 485.540418][ T43] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 485.670354][ T43] usb 4-1: device descriptor read/64, error -71 [ 485.694538][T11388] syzkaller1: entered promiscuous mode [ 485.700124][T11388] syzkaller1: entered allmulticast mode [ 485.907373][ T30] audit: type=1400 audit(1756698412.956:31): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11397 comm="syz.5.1553" [ 485.931125][ T43] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 486.070528][ T43] usb 4-1: device descriptor read/64, error -71 [ 486.100359][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 486.180812][ T43] usb usb4-port1: attempt power cycle [ 486.205122][T11407] openvswitch: netlink: Flow actions attr not present in new flow. [ 486.264023][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 486.290371][ T24] usb 5-1: can't read configurations, error -61 [ 486.432047][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 486.530400][ T43] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 486.570887][ T43] usb 4-1: device descriptor read/8, error -71 [ 486.597542][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 486.605517][ T24] usb 5-1: can't read configurations, error -61 [ 486.613225][ T24] usb usb5-port1: attempt power cycle [ 486.810375][ T43] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 486.833206][ T43] usb 4-1: device descriptor read/8, error -71 [ 486.849218][T11431] overlay: Unknown parameter 'subj_user' [ 486.940669][ T43] usb usb4-port1: unable to enumerate USB device [ 486.951675][ T24] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 486.972484][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 486.980420][ T24] usb 5-1: can't read configurations, error -61 [ 487.051248][T11438] ./cgroup: Can't lookup blockdev [ 487.110532][ T24] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 487.141535][ T24] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 487.150962][ T24] usb 5-1: can't read configurations, error -61 [ 487.160743][ T24] usb usb5-port1: unable to enumerate USB device [ 487.287095][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.296459][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.309051][T11440] /dev/rnullb0: Can't open blockdev [ 487.653231][T11442] random: crng reseeded on system resumption [ 487.847995][T11448] overlayfs: failed to resolve './file0': -2 [ 487.931696][T11450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.942446][T11450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.409957][T11458] block nbd3: Attempted send on invalid socket [ 488.439425][T11458] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.449912][T11458] block nbd3: Attempted send on invalid socket [ 488.459151][T11458] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.477698][T11458] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 488.487953][T11458] block nbd3: Attempted send on invalid socket [ 488.494666][T11458] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.505485][T11458] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 488.534322][T11458] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 488.542748][T11458] UDF-fs: Scanning with blocksize 512 failed [ 488.550100][T11458] block nbd3: Attempted send on invalid socket [ 488.562948][T11458] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.576410][T11458] block nbd3: Attempted send on invalid socket [ 488.584176][T11458] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.594925][T11458] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 488.605466][T11458] block nbd3: Attempted send on invalid socket [ 488.612912][T11458] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.623913][T11458] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 488.636678][T11458] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 488.645559][T11458] UDF-fs: Scanning with blocksize 1024 failed [ 488.654586][T11458] block nbd3: Attempted send on invalid socket [ 488.661817][T11458] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.674002][T11458] block nbd3: Attempted send on invalid socket [ 488.681968][T11458] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.692717][T11458] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 488.703645][T11458] block nbd3: Attempted send on invalid socket [ 488.710203][T11458] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.720847][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 488.730112][T11458] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 488.741333][T11458] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 488.749058][T11458] UDF-fs: Scanning with blocksize 2048 failed [ 488.756291][T11458] block nbd3: Attempted send on invalid socket [ 488.762590][T11458] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 488.772266][T11458] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 488.783545][T11458] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 488.793413][T11458] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 488.812114][T11458] UDF-fs: Scanning with blocksize 4096 failed [ 488.818507][T11458] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 488.884922][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.907973][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1577'. [ 488.917113][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 488.927686][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.938996][ T9] usb 4-1: config 0 descriptor?? [ 488.947276][T11483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.947352][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 488.965701][T11483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.977009][T11483] random: crng reseeded on system resumption [ 489.336702][ T43] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 489.357757][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 489.468243][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 489.492436][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 489.506256][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 489.518007][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 489.527277][ T43] usb 5-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 489.541767][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 489.541952][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.560651][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 489.573168][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 489.573675][ T43] usb 5-1: config 0 descriptor?? [ 489.637724][T11486] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 489.955721][T11500] ./file0: Can't lookup blockdev [ 489.979703][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 490.002405][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 490.019510][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 490.026845][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 490.045722][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 490.056094][ T43] uclogic 0003:28BD:0055.0011: interface is invalid, ignoring [ 490.063225][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 490.090198][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 490.106359][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 490.122605][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 490.149562][ T9] pwc: Registered as video103. [ 490.260780][T11486] /dev/rnullb0: Can't open blockdev [ 490.270065][ T43] usb 5-1: USB disconnect, device number 38 [ 490.270671][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input39 [ 490.314646][ T9] usb 4-1: USB disconnect, device number 74 [ 490.499220][T11514] IPVS: length: 33 != 24 [ 490.511229][T11514] /dev/rnullb0: Can't open blockdev [ 490.570110][T11518] /dev/rnullb0: Can't open blockdev [ 490.655966][T11523] binder: BINDER_SET_CONTEXT_MGR already set [ 490.680572][T11523] binder: 11522:11523 ioctl 4018620d 200000004a80 returned -16 [ 490.778698][T11526] netlink: 'syz.3.1591': attribute type 1 has an invalid length. [ 490.946678][T11532] /dev/rnullb0: Can't open blockdev [ 491.048243][T11535] /dev/rnullb0: Can't open blockdev [ 491.069366][T11537] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 491.215499][T11542] netlink: 'syz.5.1595': attribute type 4 has an invalid length. [ 491.417929][T11544] syzkaller1: entered promiscuous mode [ 491.426459][T11544] syzkaller1: entered allmulticast mode [ 491.744527][ T30] audit: type=1326 audit(1756698418.796:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11575 comm="syz.4.1609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f897cb8ebe9 code=0x0 [ 491.766307][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.811348][T11582] /dev/rnullb0: Can't open blockdev [ 491.822810][T11582] /dev/rnullb0: Can't open blockdev [ 492.011659][T11592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.034143][T11592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.130356][ T24] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 492.280808][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 492.288442][ T24] usb 4-1: config 6 has an invalid interface number: 148 but max is 0 [ 492.298891][ T24] usb 4-1: config 6 has an invalid interface number: 4 but max is 0 [ 492.309916][ T24] usb 4-1: config 6 has 2 interfaces, different from the descriptor's value: 1 [ 492.321326][ T24] usb 4-1: config 6 has no interface number 0 [ 492.327802][ T24] usb 4-1: config 6 has no interface number 1 [ 492.334469][ T24] usb 4-1: config 6 interface 148 altsetting 1 endpoint 0x6 has invalid maxpacket 576, setting to 64 [ 492.346448][ T24] usb 4-1: config 6 interface 148 altsetting 1 bulk endpoint 0x7 has invalid maxpacket 32 [ 492.356796][ T24] usb 4-1: config 6 interface 148 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 492.368282][ T24] usb 4-1: config 6 interface 148 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 492.381894][ T24] usb 4-1: too many endpoints for config 6 interface 4 altsetting 110: 50, using maximum allowed: 30 [ 492.393892][ T24] usb 4-1: config 6 interface 4 altsetting 110 has a duplicate endpoint with address 0x7, skipping [ 492.406375][ T24] usb 4-1: config 6 interface 4 altsetting 110 has 2 endpoint descriptors, different from the interface descriptor's value: 50 [ 492.421237][ T24] usb 4-1: config 6 interface 148 has no altsetting 0 [ 492.429705][ T24] usb 4-1: config 6 interface 4 has no altsetting 0 [ 492.438873][ T24] usb 4-1: New USB device found, idVendor=0fb8, idProduct=3002, bcdDevice=7a.43 [ 492.450600][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.459059][ T24] usb 4-1: Product: syz [ 492.463891][ T24] usb 4-1: Manufacturer: 鴪뾎㨠흆꘣⾗쀶滎抶뙙灨ឤ䷛ᐌ㥔⭭煯翂鐆؃뿮ꏼ蘢鉚컡ꤛ잴ﺳ硅≁⩃鐚㯽ₔ嗄嘙܋Սા駏↖댕㐂嵠權휵舢朿ꔟ꽍ក륷꩖왗똾䩄Ⱑ槇ᢗ¦뽯⿸ᇾ⦈䰊⪆酁쾖윋쾄㌋竲䞴슥䠿䶘ڏἝᑷᑤ萕ā⏌뵶㋇ꗰ蟒附螚 [ 492.499216][ T24] usb 4-1: SerialNumber: syz [ 492.508669][T11589] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 492.725719][T11600] /dev/rnullb0: Can't open blockdev [ 492.752685][ T24] usb 4-1: USB disconnect, device number 75 [ 492.944331][ T5874] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 492.945846][T11614] /dev/rnullb0: Can't open blockdev [ 493.107602][ T30] audit: type=1326 audit(1756698420.156:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11594 comm="syz.2.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f958f18ebe9 code=0x7fc00000 [ 493.130375][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.177755][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.180188][T11621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.196961][T11621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.211835][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.258582][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.313295][T11625] /dev/rnullb0: Can't open blockdev [ 493.323628][T11625] /dev/rnullb0: Can't open blockdev [ 493.331338][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.339719][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.363370][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.382400][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.421501][T11619] nbd_handle_cmd: 9 callbacks suppressed [ 493.421524][T11619] block nbd4: Attempted send on invalid socket [ 493.441040][T11619] blk_print_req_error: 9 callbacks suppressed [ 493.441059][T11619] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.490556][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.521235][T11619] block nbd4: Attempted send on invalid socket [ 493.527982][T11619] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.572550][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.611914][T11619] block nbd4: Attempted send on invalid socket [ 493.631832][T11619] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.644237][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.644405][T11647] batadv_slave_0: entered promiscuous mode [ 493.658622][T11647] batadv_slave_0: left promiscuous mode [ 493.661188][T11619] block nbd4: Attempted send on invalid socket [ 493.667770][T11648] /dev/rnullb0: Can't open blockdev [ 493.677101][ T5874] Bluetooth: hci2: command 0x0406 tx timeout [ 493.694057][T11652] /dev/rnullb0: Can't open blockdev [ 493.704019][T11619] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.723912][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.772592][T11619] block nbd4: Attempted send on invalid socket [ 493.787808][T11619] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.837939][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.850540][T11656] ------------[ cut here ]------------ [ 493.856751][T11656] WARNING: fs/exec.c:119 at path_noexec+0x1af/0x200, CPU#1: syz.5.1630/11656 [ 493.866185][T11656] Modules linked in: [ 493.870478][T11656] CPU: 1 UID: 0 PID: 11656 Comm: syz.5.1630 Not tainted syzkaller #0 PREEMPT(full) [ 493.875546][T11619] block nbd4: Attempted send on invalid socket [ 493.880024][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 493.880042][T11656] RIP: 0010:path_noexec+0x1af/0x200 [ 493.897105][T11619] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.897697][T11656] Code: 02 31 ff 48 89 de e8 00 c0 88 ff d1 eb eb 07 e8 17 bb 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 f1 50 09 cc e8 02 bb 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 493.924945][T11619] FAT-fs (nbd4): unable to read boot sector [ 493.932173][ C1] vkms_vblank_simulate: vblank timer overrun [ 493.932551][T11656] RSP: 0018:ffffc90004abfbd8 EFLAGS: 00010287 [ 493.932579][T11656] RAX: ffffffff823813ce RBX: ffff88802508ccc0 RCX: 0000000000080000 [ 493.932595][T11656] RDX: ffffc9000c139000 RSI: 0000000000000083 RDI: 0000000000000084 [ 493.932611][T11656] RBP: 0000000000080000 R08: ffff88805532bc00 R09: 0000000000000003 [ 493.966595][T11619] block nbd4: Attempted send on invalid socket [ 493.968918][T11656] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 493.978679][T11619] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 493.982840][T11656] R13: 1ffff92000957f90 R14: 0000000000000000 R15: dffffc0000000000 [ 494.008246][T11656] FS: 00007fc09cfcf6c0(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 494.017324][T11656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.024046][T11656] CR2: 000000110c3a52d0 CR3: 0000000052f6e000 CR4: 00000000003526f0 [ 494.032127][T11656] Call Trace: [ 494.035436][T11656] [ 494.038566][T11656] do_mmap+0xa43/0x10d0 [ 494.042829][T11656] ? __pfx_futex_wait+0x10/0x10 [ 494.047933][T11656] ? __pfx_do_mmap+0x10/0x10 [ 494.052617][T11656] ? down_write_killable+0x178/0x230 [ 494.057931][T11656] ? __pfx_down_write_killable+0x10/0x10 [ 494.064192][T11656] ? common_file_perm+0x1b5/0x230 [ 494.069276][T11656] vm_mmap_pgoff+0x2a6/0x4d0 [ 494.074489][T11656] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 494.079741][T11656] ? lock_release+0x4b/0x3e0 [ 494.082891][T11619] FAT-fs (nbd4): unable to read boot sector [ 494.084431][T11656] ? __se_sys_futex+0x36f/0x400 [ 494.095674][T11656] ? __fget_files+0x2a/0x420 [ 494.100571][T11656] ? __fget_files+0x2a/0x420 [ 494.105631][T11656] ksys_mmap_pgoff+0x51f/0x760 [ 494.110503][T11656] do_syscall_64+0xfa/0xfa0 [ 494.115064][T11656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.121223][T11656] ? clear_bhb_loop+0x60/0xb0 [ 494.126104][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.132132][T11656] RIP: 0033:0x7fc09c18ebe9 [ 494.136679][T11656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.156586][T11656] RSP: 002b:00007fc09cfcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 494.165600][T11656] RAX: ffffffffffffffda RBX: 00007fc09c3c5fa0 RCX: 00007fc09c18ebe9 [ 494.174228][T11656] RDX: 0000000003000001 RSI: 0000000000b36000 RDI: 0000200000000000 [ 494.182377][T11656] RBP: 00007fc09c211e19 R08: 0000000000000003 R09: 0000000000000000 [ 494.190802][T11656] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000000 [ 494.199187][T11656] R13: 00007fc09c3c6038 R14: 00007fc09c3c5fa0 R15: 00007ffea9e35498 [ 494.207346][T11656] [ 494.210450][T11656] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 494.217927][T11656] CPU: 1 UID: 0 PID: 11656 Comm: syz.5.1630 Not tainted syzkaller #0 PREEMPT(full) [ 494.227328][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 494.237499][T11656] Call Trace: [ 494.240809][T11656] [ 494.243760][T11656] dump_stack_lvl+0x99/0x250 [ 494.248473][T11656] ? __asan_memcpy+0x40/0x70 [ 494.253284][T11656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.258539][T11656] ? __pfx__printk+0x10/0x10 [ 494.263173][T11656] vpanic+0x281/0x750 [ 494.267191][T11656] ? __pfx__printk+0x10/0x10 [ 494.271824][T11656] ? __pfx_vpanic+0x10/0x10 [ 494.276364][T11656] ? is_bpf_text_address+0x292/0x2b0 [ 494.281761][T11656] ? is_bpf_text_address+0x26/0x2b0 [ 494.287078][T11656] panic+0xb9/0xc0 [ 494.290828][T11656] ? __pfx_panic+0x10/0x10 [ 494.295296][T11656] __warn+0x334/0x4c0 [ 494.299406][T11656] ? path_noexec+0x1af/0x200 [ 494.304031][T11656] ? path_noexec+0x1af/0x200 [ 494.308659][T11656] report_bug+0x2be/0x4f0 [ 494.313292][T11656] ? path_noexec+0x1af/0x200 [ 494.317918][T11656] ? path_noexec+0x1af/0x200 [ 494.323500][T11656] ? path_noexec+0x1b1/0x200 [ 494.328165][T11656] handle_bug+0x84/0x160 [ 494.332429][T11656] exc_invalid_op+0x1a/0x50 [ 494.337042][T11656] asm_exc_invalid_op+0x1a/0x20 [ 494.341889][T11656] RIP: 0010:path_noexec+0x1af/0x200 [ 494.347098][T11656] Code: 02 31 ff 48 89 de e8 00 c0 88 ff d1 eb eb 07 e8 17 bb 88 ff b3 01 89 d8 5b 41 5e 41 5f 5d e9 d8 f1 50 09 cc e8 02 bb 88 ff 90 <0f> 0b 90 e9 48 ff ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c a6 [ 494.367413][T11656] RSP: 0018:ffffc90004abfbd8 EFLAGS: 00010287 [ 494.373610][T11656] RAX: ffffffff823813ce RBX: ffff88802508ccc0 RCX: 0000000000080000 [ 494.382233][T11656] RDX: ffffc9000c139000 RSI: 0000000000000083 RDI: 0000000000000084 [ 494.390227][T11656] RBP: 0000000000080000 R08: ffff88805532bc00 R09: 0000000000000003 [ 494.398226][T11656] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000002 [ 494.406217][T11656] R13: 1ffff92000957f90 R14: 0000000000000000 R15: dffffc0000000000 [ 494.414372][T11656] ? path_noexec+0x1ae/0x200 [ 494.419081][T11656] ? path_noexec+0x1ae/0x200 [ 494.423681][T11656] do_mmap+0xa43/0x10d0 [ 494.427924][T11656] ? __pfx_futex_wait+0x10/0x10 [ 494.433040][T11656] ? __pfx_do_mmap+0x10/0x10 [ 494.437735][T11656] ? down_write_killable+0x178/0x230 [ 494.443042][T11656] ? __pfx_down_write_killable+0x10/0x10 [ 494.448690][T11656] ? common_file_perm+0x1b5/0x230 [ 494.453778][T11656] vm_mmap_pgoff+0x2a6/0x4d0 [ 494.458415][T11656] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 494.463643][T11656] ? lock_release+0x4b/0x3e0 [ 494.468254][T11656] ? __se_sys_futex+0x36f/0x400 [ 494.473200][T11656] ? __fget_files+0x2a/0x420 [ 494.477810][T11656] ? __fget_files+0x2a/0x420 [ 494.482592][T11656] ksys_mmap_pgoff+0x51f/0x760 [ 494.487492][T11656] do_syscall_64+0xfa/0xfa0 [ 494.492027][T11656] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.498116][T11656] ? clear_bhb_loop+0x60/0xb0 [ 494.502997][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.508994][T11656] RIP: 0033:0x7fc09c18ebe9 [ 494.513424][T11656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.533294][T11656] RSP: 002b:00007fc09cfcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 494.541892][T11656] RAX: ffffffffffffffda RBX: 00007fc09c3c5fa0 RCX: 00007fc09c18ebe9 [ 494.550042][T11656] RDX: 0000000003000001 RSI: 0000000000b36000 RDI: 0000200000000000 [ 494.558112][T11656] RBP: 00007fc09c211e19 R08: 0000000000000003 R09: 0000000000000000 [ 494.566173][T11656] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000000 [ 494.574336][T11656] R13: 00007fc09c3c6038 R14: 00007fc09c3c5fa0 R15: 00007ffea9e35498 [ 494.582434][T11656] [ 494.585730][T11656] Kernel Offset: disabled [ 494.590139][T11656] Rebooting in 86400 seconds..