last executing test programs: 1m32.980111375s ago: executing program 0 (id=295): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000340)={0xc}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='befs\x00', 0x200000, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000240)={0x2, 0x102, 0x0, {0x8, 0x9, 0x8}}) syz_clone(0x0, &(0x7f0000000140)="b78e6384e865181ecf942b99d7f67998c623833e02cd575875eecaf242cb910b16360df4905804108820eb5404013d4a2926d0960ed8d5da10eb5fd074aeafa4242aee5765e77d7221315eca9413054e9764db43aaf73ca5b635ea4f014637d7b9d74cba72565e69891cabe37ea15bb56bd743a9b5b343de84c6d9f78911a1352c56e7330b3b79715e521ef17acc3164001ac1bcd5e9c5f01d48a9b303e0d245d06eae877b77d7d0d97d8e300856c536aeff5d24392376eb8937aa0ff92327e02d38f68d63fc3cfc09cd16e042b1ed177232363e18fe3697890d6990d15b3c9e4562868db548783f41a67070d8b99b", 0xef, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000380)="e76abfa84e82b4c905131be8169e686a234e6548826ea4993aab07d8e16995a34aa1e76bd6183aadf510b1da8e67ff130b7fd8f7ad3760bfa12d4ff364c4ab9df83ce3855ba2a6ae782df9990bd8190b01dfa71fa1f391a8361e1ac2133521de6ac6fce79c548c4896d13e285f024af8eee66104db5aeb94fc55acea8aad5d3d790af5b6af215d1bc9e748353e65e106c443febbe432844ec5fbdd1f1c0d89496b2b689da59a496047b8375cb584e0c74521f5e541247704a1b994a7ddf6ec6ed8ee71b4751e24b701cf") 1m32.715898055s ago: executing program 0 (id=297): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r1, 0x28, 0x6, &(0x7f0000000000)={0x77359400}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000140)="42843bf26b84be7228ed245dec6ec30f6156dfeb3f245696d270e27392aa9e06181009db4af9027fddc289318f6d8ca657df9d97437cf866f27c688fbbd0b13b270677e772e521bf66e378cdff23f60e82c04498db542212bc7683eba85c4e6ce6b463fa98fda27288bf158887987ddbe42a41ca9bb2246f296d565d559848dd35c972dd0e8f883c0e534c7b95325dfc1d5ec4475301df4c16f160312f294f8516e94167913eb26a9d3b87a6dbb0101f0c7a265cfcb33cdd6758420173809586212f3ab23705baffceb94832548316acf47e6d7c8de35771142a06077eeb6522706f1077898cfd5ab2b3de4a5424b89a7ab7f0afeebc58425d9ef76c5fee78db6ec0bd7cfa686b8c5262bd2520ceeaa2c169cbe8d2c84f3a91d9f912cfcdf8de2139066b16a25b2142528ad631bdb3a66813de132dacac9d8419b311490efcc5b3482838e10d6876e3aab77e5c2bd4b432351c3cfb44691299642498f5506e0901eec8c9b1ac93be40a79824364ef02c94a3d455509e4a5b871cf38e7cb50d1a3b2c51c278ad564e4b99e6992013fd9abafdc386a9213775a6ac1392044a7663b48ac91a3bc7e58b0fad8f25e42a680fb65977be352bda1ef6d661dfdd03f14212ddacf59493c26222dce9a9dc7a1e68f1a9d4a4478f9959106c1a10c8542b379176a42e4b5bae381957cc807f7fbf5b6d4df5a6c004615dbed8e55e6d3a4aa151391dbd0f9298c9e67c142d25c441444e6d467685a4a856532d28ecf6f651a07949d92ba7868815d137bf6912675f2edff646ee35034f37877d53e7d1b92c2c1d0548ef06bcb2873c56b331f2162b5f55db5a9f637c22db673e4961f6d28f17396d2887c0b9b79200bec21007b95fcf60e0d908ed0743662e231b2bcfd454093c9d7f1e4f531d281d114d83fc085b65fad8c3953e701449cab429a269d14f25a031e4366ccbe19d591f7912b5fb58f923f923a56e5edaa2019298388133974ec419530fbbd89e63de0c5fe9785adfd56d54a747a7b802ebd0783a3f42255753326387e334cfcca7ac5ce8b0422650489555bdf72f2ba7c4297989fba9ce05d545aeb587e5726eff99467fc00f7e59561b78961a704b700021287d87aeba4a637389207e7c3fa3770f9b5f7d6f0da3461ee7c6670efef79d40d73e3e557789d09ef06ecf7a335e01eb65c8a80c8953a7e30eb437ac5efe0f2534c3131f6af19a1f12575508ce08743e24636a30e07451810556fa4f0ff4486bf9d191de00988109674cf0aa482885b9b9f94ce8827bbd1d1bb0adcbfbf0a242d1229691f8ce0fad2211a5a3a7e6f7f4813285cd3e86815abd6edf7ad6dd7b027db86f63240559e7ecc2d452021c1b499ab6ce86725f2bf2986fa4ad0633267fd29adc9e86751b01bf1620f5fe064e85b7115a523fc01251f6ea30056b457254c0efedfab98905d35f6ff9bf15b6b672b99e6e2512debb2fbc6ceab3bf9165d6fb265cc401c06c34c86d2bad32ae92dc0ad25a02cc233c0d482d670d1599b4e42aab28d19b4434bcc21612c3bc3610f40c58bdbd15d3f61e94962ed3dc911cdad0c436e3562ba5e101cbc4c94428e58c3961e8d761af3f076689dcfab1245ba1661159618180ee9a5a31fd81d825c57f2a63e3f93d2e77774f5581f3f980b0030da1cb0615ae99c2650ab7697d822df9f50314adbc5823ea08c27421c5834e353de328585d55c0ef82452e993268dd39c48ebf29c2f4653ac0f4afdc95684a3e65c585a3da7c9cc971b7bef7cb2f5137cc5597e4faeb70f4c55454900947d102ae597b2ca1646143362c56fbe6099e92cdd3a5e853b2adfff704de579ab7b8490af120a1bd60a2d582cc28c351226f7136e49fb7a4d62dc0dc1014e4b01e7e0a164a1480592056a0942b6137dabd4611cddaee4e22e4d98a7aba463d6b81608a7e07018cc3eb18a5d31b7ca042dc2a635990d4b43dad471d781c3c103945490e0ac10fa322c423c828e4051c9e2934f701e3806604c79fd561c23ffc7876659dbe68b95a820ecc67e51fd0b552fa6b16ccb5ad5559bd92a7779cb715688da862bc08237f9e567835425ecb432a39c17399a81409ccaed6c5467d943e8d7bd4d70b566cbfc144fdcc86b19ef8041b220338b2ae081f9899b77a1f82b9e86e71225a63e790b3099992056af7fc77013b53353426b9b323bf1eb116a72cd9610c1c4a3d36caedac9999c1cb56e074b5015200d9779301e8533a44267a2ef677a1420c1283252cbfd8ecd6fc0513ebffa4351b719c54406b714c8ac531cd7d4c110700bad5a8d727b838fa737a5bf422f31929ed2d146b7f1ad512bece3b32a8b22589b655d575a9e10f8ba4c96fbecb2154e065c3dbc75fd16bf68ff21ab6520e5fa329b51cab388461ec7385fc33896a72f57c26ce2e792c60fe14f3ac466ed43bda02980380fe9f93723b65fb3e4d19e2c3a4e0842ede5edebe1f587d6886da2884f309968aba4930f643fe6d6453fafe3bee50aaee38bc4d2208a49878b51f2fa403b8c3b6b85affc23188003c166766266e10a4e8d6f4a1557a8cbc7fc53779375e8c830e73134263e0afd994b79bd1aa0a66f9be53e75a8e71a7ec49bff36618867d520f9eb1c4f2021e465d48ae6e98a4f77e109cb39e412b8d0f5abc01528f979d3db9a1afa779e0c117d71bdfdfdaa6a3285a8427af3dd8cb1413ac6bfd0a4a8eea750d549da13a811f5ea21ae80a286df9aca36abe209f887a8e3dd6389ef5e51dfc1dff669758c7ccd8fd64db399177d70084c3fe1c32b1f07d9313e979f708eab9461f007c7ab4368871d22ecbafb7d5b0c81c17b0af4c9f40875b24a4d247024951a786c3c33bf6a69c7ddb0c05590d5e2990aaf3364077e3caf0b967f549d3b9bba0a26cf2bdf692e3cbebe4525812814960d19b7947f08de478236f49eeaffb610c360020beb7f64039d0224b685832e43859c0f81f3d55698ea62717c9273dbc206d0c2d69ac076bc22b18c68e9ceaa9552be374bb06b4ce6a08d17f34aa88aa2fb90838270410960f3787b550506079bf61bd200d9a78e3382a1d117090d5f41ee87b94b93fc914ff6cd782dd90d2c84898c41b687897ffe426fb8e4e99b9859041bb25b273793273f2a93a4a25896d6a8a2bc8264419e90464960f394effb8bdbe71968da51370ad3dd6a70b7469d41b31be4ab6e7de3b975be421852c7f92d7a7bc791e0b6b62db3c8967ae0f621abd9d16b5def249b4fb2005c1210446e28b7c1d783273014e3ce6358ec3784ce61c9eb65f9f0465671ea6ee7c55d91120ddd20c0175853ea7c63bc74fce1c8d5a40cb55589d263dd069bdc32be2f2137b152f9dbf6583905067ca9577c2b860f9094275b0c5e161269a672fd18a455545a9185c6c75f71d1b359177e2241c807c4c843495f5a7ca470f469514395ec474bb23426dfaa25213b4e334830a2ee3bc4fad59228002febd7b17f255d5ed2e848d3a9ae262c6c0456d7ccbf20c5f356d23d16d48350d2f7b850289477803c73915e36bece0fd5ff8c9df0b393794d32668fa973daba1517f6eb88765918081bd71bd6b406a1489f823a284511a32d0ea50f84744f4ac48419a7a326e85aa2c618054f5dd81b6efad9035b27c9822890ae1a8afcf69af061538b5dd3e787dbe6ce698196b9527753895ea55a65206a12d388d8159a1b60c9acb6a0e0f52176d34e1038f914f44c3baac75c21d39401ca4250865dd37494d8109cfbfdf4a7c73009b753533a758c52c127eb988e40b8eb5164591a35d02dc953ea4da65911f7e8db34ca5f24debe803183291fd6d6c43fccd7c1b61aa4f0be1badcfafeab48ea032a5bdbc3cf876ec1e994dd81f2c09783b071af56e916952b4e3ffcff9c950965272c0a954d45a33fb20cb8d998d97c879ad204788758e19822e6f07cc90d89f20ee38e507c74b550eb463a64f56448c95535d9d4b801146d1f1e30d2ead4b7602c0b1efab86ddebc3344b57c940e1897ebac1d1b219aa0f4122645ecca97db46c8523f3d747c20b4520e5de9b2e151da9da4e3cf5274620d94790bdbd3d29879d5f407a0640c18e8d654d2bd1eb4322ad1f7b86d8498f9bfdbb136e4228023a82043819850389889673e5e835797628f9f51d4d4380dc0e3d201fb0f61f52c6b88234607299baaa3d106f3a9821e79be5809a443198abc51c1db5d73f080e7592c6b3b81e43b9f73ab4f54bdb60b41f446a00ca1a531ae0829186568c74705409b0cdd244e0631cabdc622201c1d1155ea5bc1ff3c178db3854720f2385c4d38aadc40fe1bd96c967b5669fbaaadc9d99f68060e537a313068de9b105223e9d603f0183b9b794782eaea113d312041da3299545307e8e963bebd8b2d7f5c482d7a5799fd19819369d41d607d819ebd43415f8feadec6fc8e6cd973ee69339ec39808e44de3db6d86af18ca260da3bce9711c39fb4cac4db36208c258684b15b37fc7d5392473468af48d2ece06ab8b0451d013ea48574dd03f447cd60016034827b8bc6afcad4555cd28a74e15032364f90a7ce8bd3535750edf1646c0ef525ac1e79bf488dc4569c684f997b40d240d62924872ca31bda9426b2f9f39290cdd697cd3b4f96a5dc087e3a0497355fd1b852db03a272a9b706f982cb33f9aaac5a2904e0eea241ba5e517448d5e7c581bb4c63deb4e26bb27727655154395b1f3347b2cd696c13c1ac4455f8dd0e9a79947b346025130a596c1e6eaadd23b8669063c2fa199ab279b7077962306fce3e2007ecf2056fa19b54fc499298a0a91cc27d0b00c5f9317e7d4a73e6853b2fdf4f972dd9d4ff7498ca5e0ebb5fac404e8f48f16f1692b6881f81885576780e2015f9de3f6d4c56858b13a7af966e1f25357900d8767680b9fde9c2e2eb852f0a1ec0a870fde5fbbd9ced9037a20ae7cf85800abe0f4d61e0ccae19d35faf21a245279551f8c829b201bfc681b18d7b54551e42a99ab62bb24e7a0ee86379bb8ab2f3e500bc1b94d30c283f2023f9fc1863fcc34d9d6d1ce6c776341aed2b95802cf46d36899a776dd81438b350e46d68586f0472226ee996677c7340b218589f893411cd10744c965332aad27d5d62943a624d7940883fb625de30706cae49170c4c83b6bb9265eade29169cf7f54348ebf407deafac390950cb9c044d754e331352ddf038790c47fc670b7908c3c8801e411ad781697793477b61d1dd63c9f368248e21ed9528f273e834504b3afae5d58f89afc78672e3c7611b7fb97242434b3e77beb4d63f77779528b9762571689a9d1586bea4be56af29900111ddd97ee1591fbf78d428981158d39058110a69aeb27b37993d20c90ae49cb6fc7a3dc061564cf72f0f833fa696477ef9d3ae4e064eca84db9070f1b5969d108056204ba91bbb4f10f0b47dc4c8da9019e24141ae96a3a5c44df103c617ada404233533917ce631254e497dcd2a6666d352d62f37467f5153b65055148d474217cd2f1ae70565ffebfa4f36bfa899746a074aa330013d72690d5cc43c4271fc84bd86fe955fd2bcb11b5ea030b62cf03da894718ac610375c4c3ab89c526fd887a33d5cfb42a13ffa8bc2d3b1a6264f0595ca5a572b1ea7cc901ee009fd5a74c019792afdc2819f1f7921d7e01103b410528f04b0463f3da7f644bcc1eb7bbde4a5f4b0ffb866ea86334d88b4ade4efbd621c68b7e2c836523f6c381999ae4a18664110537cf1e873efb2bbdca28423250baf7339722eb36dbfc97119797932f428ddbd0ebecfb86ac74e1ddf55de3f2b6825b5dba", 0x1000, 0xfffffffffffffff8) keyctl$read(0xb, 0x0, &(0x7f0000001140)=""/185, 0xb9) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000b50000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @private=0xa010102}, {0x1, @remote}, 0x6, {0x2, 0x4e24, @rand_addr=0x64010100}, 'wlan0\x00'}) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 1m32.059996182s ago: executing program 0 (id=301): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e14060200fe80000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x0, 0x0, 0x1ff}) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) socket(0x26, 0x3, 0x6) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000000)={0xd869, r1, 0x1}) 1m31.96532666s ago: executing program 0 (id=302): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file1\x00') fchdir(r0) r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9efef1b10a16030a28bd7000e7dbdd25"], 0x10}, 0x1, 0x0, 0x0, 0x40080}, 0x800) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 1m31.856426717s ago: executing program 0 (id=303): creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 1m31.286151497s ago: executing program 0 (id=306): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) (rerun: 32) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) (async) r3 = shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x4000) (async, rerun: 32) r4 = shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) (rerun: 32) shmat(r4, &(0x7f0000fed000/0x4000)=nil, 0x7000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) shmdt(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) munlockall() (async) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) 1m30.934357201s ago: executing program 32 (id=306): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32) r2 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) (rerun: 32) munmap(&(0x7f00008b2000/0x1000)=nil, 0x1000) (async) r3 = shmat(r2, &(0x7f0000ffa000/0x3000)=nil, 0x4000) (async, rerun: 32) r4 = shmget$private(0x0, 0x11000, 0x0, &(0x7f0000fec000/0x11000)=nil) (rerun: 32) shmat(r4, &(0x7f0000fed000/0x4000)=nil, 0x7000) (async) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) shmdt(r3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) munlockall() (async) sendto$inet(r1, &(0x7f0000000080), 0x0, 0x24020804, &(0x7f0000000140)={0x2, 0x4e24, @multicast2}, 0x10) 3.497646468s ago: executing program 2 (id=884): socket(0x28, 0x2, 0x6) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) (async) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x20fe}}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x143342, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x20100, 0x0) ioctl$COMEDI_CHANINFO(r3, 0x80306403, &(0x7f00000000c0)={0x101, &(0x7f0000001180), &(0x7f00000001c0), &(0x7f0000013900)}) r4 = signalfd(r3, &(0x7f0000000100)={[0x3ff]}, 0x8) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) (async) ioctl$KVM_GET_MSRS(r4, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [{}, {}]}) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x8, 0x1, 0x2, 0x2}}, 0x26) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x8, 0x1, 0x2, 0x2}}, 0x26) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1, 0x0, 0x0) (async) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/67, 0x43}], 0x1, 0x0, 0x0) syz_usb_connect(0x0, 0x3d, &(0x7f00000016c0)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030905"], 0x0) (async) r6 = syz_usb_connect(0x0, 0x3d, &(0x7f00000016c0)=ANY=[@ANYBLOB="1201000092e59e208c106901b9750102030109022b0001000010000904db00020dfa00030905"], 0x0) syz_usb_control_io$cdc_ecm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r8, &(0x7f0000000400)={&(0x7f00000008c0)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r9 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r9, &(0x7f0000000100)={0x28, 0x4, 0x0, {0x1, 0x10001}}, 0x28) setsockopt$inet_mreqn(r7, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000040)={'lo\x00'}) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, &(0x7f0000000000)=0xfffffffb) (async) ioctl$BINDER_SET_MAX_THREADS(r11, 0x40046205, &(0x7f0000000000)=0xfffffffb) 3.255630299s ago: executing program 2 (id=885): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x25, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x4, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0x8}, {0xf, 0x1, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0xa1, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20}, {0x3d, 0x4, 0x51, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0xd, '\x00', 0x26}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x34, 0x39, 0x50, '\x00', 0xcf}, {0x6c, 0x3d, 0x20, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x6, 0x5}, {0x1, 0x6, 0xf}, {0x4, 0x6, 0x1, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x4, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x7}]}}) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{0x0, 0x6591079c, 0x0, 0x7e61, 0x7, 0x7fffffffffffffff, 0x0, 0xfffffff9, 0xa, 0x4, 0x5, 0x3, 0x4, 0x6, 0xd14}, 0x8, [0x0]}) socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='dummy0\x00', 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$video(0x0, 0xa7, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000b50933406242886d3635010203010902120001000000000904000000e4d62400c60e2553d91a410ac85c232d66d437c90de96df6ec0271aaca6be3d22fdbdbbdad174d92665c86202614770c802331cf002bc14c17acc7f5a69771ff38"], 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e07480204"], 0xa) ioctl$BTRFS_IOC_TREE_SEARCH(r1, 0xd0009411, &(0x7f00000005c0)={{r6, 0x0, 0x9, 0x1000, 0xfe, 0x5fc1, 0xc350, 0x7f, 0x61, 0x9, 0x6, 0xd248, 0x1, 0xada, 0xcc3}}) syz_open_dev$hidraw(&(0x7f0000000240), 0x6, 0xa0080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x3f, 0x0, 0x0) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) socket$inet6(0xa, 0xa, 0x7fffffff) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r4, 0x7dfff000) 2.880830939s ago: executing program 3 (id=887): r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x3f, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x44c00, &(0x7f0000000800)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES16=0x0, @ANYRES64=r0, @ANYRES8=0x0, @ANYBLOB="24f41c2b5684e525b14258aa8b0c00d249d7b8c2be54ba2ab1d1ab2991fe9b4f79de082d56ca47c997e1e2bb78c37e0342186868fc09b4b9b6727bbc51bd69fd6e26933edb01f00f7e908e0473edd6932b0e141318e01158271f469ee180cafc33dfce47a6c8acfd1d221c43b16631899ee3ee8bd17d6e1504a456a54d1a6cee7b795ab21ad5d7ca3ab93752da5239c5fab728f3e5c1580a6c5db7ba461b0e95b10c84cfafd79b87ff68917a80c7fc928f09be2d1ba0f8a3cdc1e61e57ce3854", @ANYRESHEX=r0, @ANYRES64=r0, @ANYRES16=r0]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0x24, r3, 0x301, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}]}, 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r1) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fcca4df40e317c6ab9f21eca03852de3a11ad12e80f9b9598a4af8499eaf393aa5aa3ab17309bc2e8c94ea92f85e1ec9cab7dd2ee917c71ac0813316ce8985ba5e2bc55dc5fe4c399bbd0e5d0cc7471ebc6ceac8b8bd214025eaffb1a34e4d4c24ca1439a6b7f160463d6c6e9d9718ba79a8e984a7cf126cc4fc46f6577091706ad2cd17b6cdfd469a40a1c38b3f4c9f63f3dab4440c82da9d520d1cf53ae1b48fd902b09187ebeb7366f830c5f388d1908c6f9a4fde86ea30837a6dc070b6f30c738ccdc512b0f12a70703a30d858f49ca74e086013c9aa5d6e96b02f", @ANYRES16=r4, @ANYBLOB="cd3e00000000020000000100000014000600fe8000000000000000000000000000aace00010043ecf8a077157cd8bc73e1b93314cdcbb6b9bb84e5bcdb7f9af2eacc913a7640e8332d1daa67516c7f094b740c631f175dd5d0f0a8ebd2679204020b006f64e62cd3404917f3be657330adc6bf2f2ab6286f91741293554bf4406edcdc8a3779814659bebb63d2c301a5e2568cb3696d7ed256da47bd6246c86e86ac9cfbdae22622b43a13e9096385b4cb17bf6d8436e77f709e436462ad3ba28f73bf36e8e358673326e220d60a9d3d7e3de5dc9007e74d9c3c932faf89062b965db52beeff385e442adbb8d87480d4000014000500fc01000000000000000000000000000014000600fe880000000000000000000000000001"], 0x120}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x224e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r8, 0xc054561d, &(0x7f0000000180)={0x0, "8ebd01b3292084cff57a96a55557e37c122c5fa914737fd4dd21cf71c4870784"}) r9 = creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) getdents(r9, &(0x7f0000000040)=""/13, 0xd) 2.547937816s ago: executing program 2 (id=888): ioctl$sock_SIOCDELDLCI(0xffffffffffffffff, 0x8981, &(0x7f0000000100)={'virt_wifi0\x00', 0x5}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800000a01"]) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x2000009, 0x4d032, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='personality\x00') r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001480)={'bridge0\x00', 0x1000}) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x4000, &(0x7f0000000040)=0x4, 0x3, 0x3) socket$inet_sctp(0x2, 0x5, 0x84) socket$igmp6(0xa, 0x3, 0x2) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) r8 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='net/ptype\x00') r9 = socket$packet(0x11, 0x3, 0x300) bind$packet(r9, &(0x7f0000000000)={0x11, 0x5, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) preadv(r1, &(0x7f0000000140), 0x0, 0x6, 0x81) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x0, 0x5, 0x80a0000, 0x1000, &(0x7f00007ad000/0x1000)=nil}) bind$bt_hci(r4, &(0x7f00000000c0)={0x1f, 0x2, 0x3}, 0x6) 2.382372262s ago: executing program 2 (id=890): shmget(0x1, 0x1000, 0x200, &(0x7f0000fff000/0x1000)=nil) r0 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000080)={0x1fe, 0x0, &(0x7f0000a41000/0x2000)=nil}) write$snddsp(r0, &(0x7f0000000200)="a3", 0x1) mmap$snddsp(&(0x7f00009c3000/0x4000)=nil, 0x4000, 0xa, 0x30, r0, 0x10000) (async) shmget(0x1, 0x1000, 0xa0, &(0x7f0000ff9000/0x1000)=nil) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_VERSION(r2, 0xc0406441, &(0x7f0000000140)={0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000080)={[{@inode32}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r3, 0x2000) 2.146783243s ago: executing program 2 (id=892): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r0, 0x8004500f, &(0x7f0000000100)) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x97a9, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r4, &(0x7f0000001700)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x2, 0x2, 0xfc0, 0x64, 0x0, 0xb, 0x88, 0x0, @private=0xa0100fe, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp_prespec={0x44, 0x4, 0x51}]}}, "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"}}, 0xfce) setsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f0000000240), 0x4) syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x0, 0x2, 0xbfdffffc}, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback={0x40000}}, 0x1c) write(r6, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x13, 0x1, 0x0, "ad2896b02ca8b044d00dc81345c4b935bab32cecd875596364ab192cb8b873aa"}) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0x102) ioctl$USBDEVFS_CONNECTINFO(r8, 0x40085511, &(0x7f00000001c0)) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 2.005558776s ago: executing program 2 (id=893): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x7a) ioctl$TIOCL_SETSEL(r1, 0x4b70, 0xffffffffffffffff) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000080)={0x2c, &(0x7f0000000040)={0x0, 0x17, 0x28, "82ffff0000415cf30e5e0e568d42896d335edfabac49316a5f39d163c915995227510c1ad58e8e10"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x152) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000440)={0x40, 0x0, 0x4a, "21cce1e5afc68197a15a9bc2523f0a32bf9aed281b79948989412883ea3bc33c9a66bf9a37ad6738b26812932075fa913aea85f0c419d88542edfdbcc5804de08f1f41a21badbc0eada9"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9d}, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x83, 0x2, "e712"}, 0x0, 0x0}) r4 = socket$nl_crypto(0x10, 0x3, 0x15) signalfd(r1, &(0x7f0000000100)={[0xfffffffffffffffd]}, 0x8) sendmsg$inet(r4, 0x0, 0x8804) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x100000, 0x0) 1.496131543s ago: executing program 1 (id=900): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f00000000c0)={0x0, 0xc9, 0x7f, 0x20203143, 0x3, [0x2, r6, r6], [0x101], [0x0, 0x1]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x74, &(0x7f0000000200)={r7, 0xfffe, 0x20, 0xd8ba, 0x9}, &(0x7f00000001c0)=0x18) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc7afe96a467284d0, 0x0) sendfile(r8, r8, 0x0, 0x7ffff000) 1.426002368s ago: executing program 4 (id=901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') rt_sigaction(0x1e, &(0x7f00000001c0)={&(0x7f0000000140)="0f18d5c401f8ae95adec000066660f3a40cc0bc4c2753664df00c4c1c9149a9078fffff3410f5ac98f69b092ae995ca410400f38f037c481fc514c7902c402f91dba4db00000", 0x98000001, 0x0, {[0x118d]}}, 0x0, 0x8, &(0x7f0000000300)) read$FUSE(r1, &(0x7f0000003240)={0x2020}, 0x2020) sendto$inet6(r0, &(0x7f0000000200)="cf", 0x1, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0xfa82, @loopback, 0xffffffff}, 0x1c) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) read$FUSE(r3, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x810408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x9, {0xff00000000000002, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x1, 0x8000, 0x0, r6, r7, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r9 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000080)) write$FUSE_LSEEK(r8, &(0x7f0000000400)={0x18, 0x0, r5, {0x91b}}, 0x18) dup2(r8, r3) write$tcp_congestion(r8, &(0x7f00000000c0)='highspeed\x00', 0xa) ioctl$vim2m_VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000240)={0x1, @sliced={0x2, [0x5, 0x80, 0x6, 0x3, 0x9, 0x7, 0x4, 0x6, 0x0, 0xd64, 0x1ff, 0x396c, 0x9f6, 0x3, 0x7, 0x1, 0x4, 0x6, 0x87, 0x67fa, 0x9, 0x6, 0x200, 0x40, 0x7, 0x5, 0x1ff, 0x4, 0x3, 0x200, 0xe2, 0x3ff, 0x4, 0x10, 0xffff, 0xf4de, 0x2, 0x8000, 0x7, 0x200, 0x3, 0x6, 0x1, 0x40, 0x1, 0xad12, 0x4d5, 0x6], 0x9}}) mmap(&(0x7f0000533000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x2a1f4000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x80000001}, 0x8) 1.378656509s ago: executing program 3 (id=902): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 64) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000540)={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20206, r2}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 1.315995034s ago: executing program 1 (id=903): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4e42, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) (async) bind$inet6(r1, 0x0, 0x0) r2 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f00004ca000/0x4000)=nil, 0x3000}) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 1.248527387s ago: executing program 4 (id=904): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01090000000000000f478e"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1000000000009, 0x0, 0x7], 0xeeee8000, 0x2113c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}, {{0xa, 0x0, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x2, 0x0}}}}}, 0x108) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f00000000c0)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r8, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0004000800030000c5695ebf6d9a3c8c609300000000000000000000a18588d9053bb2f94fec1b37e8d52989022df10b3cead23b603f288313a025cb44e6fb9d4387fca055319c1bf2add5de18a167520c785bb767ba5d71775cfb25d8047082f95ec8480b18fce389", @ANYRES32=r5, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=r8, @ANYBLOB="0c0006000300000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000) 1.247799331s ago: executing program 1 (id=905): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'veth1_vlan\x00', 0x968}) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x3, 0x230440) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0x9) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xc) r2 = semget$private(0x0, 0x5, 0x0) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000100)=[0x4]) semop(r2, &(0x7f0000000280)=[{}], 0x1) semop(r2, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(r2, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffa000/0x3000)=nil) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) 1.135572286s ago: executing program 3 (id=906): r0 = gettid() timer_create(0x8, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r1, 0x545c, 0x3000000) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='binfmt_misc\x00', 0x2008, 0x0) 995.869948ms ago: executing program 1 (id=907): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000011c0)=""/209, 0xd1}, {&(0x7f00000012c0)=""/126, 0x7e}], 0x6}, 0x40000100) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e000000900000000000000000200010000000000000604fdec19ecd9030005000000000002"], 0x50}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x12c) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$sock_linger(r2, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x4}, 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r3) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048810}, 0x4000014) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000002c0)=""/110, 0x6e}, {&(0x7f00000047c0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000001780)=""/14, 0xe}, {&(0x7f00000011c0)=""/209, 0xd1}, {&(0x7f00000012c0)=""/126, 0x7e}], 0x6}, 0x40000100) (async) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000340)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8040) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e000000900000000000000000200010000000000000604fdec19ecd9030005000000000002"], 0x50}}, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) setsockopt$sock_linger(r2, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x4}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$gtp(&(0x7f0000002700), r3) (async) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4048810}, 0x4000014) (async) mount(&(0x7f0000001400)=@md0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) (async) 979.62625ms ago: executing program 4 (id=908): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x2, {}, {0x77359400}, {0x0, 0x0, 0x0, 0x1}, 0x1, @can={{}, 0x2, 0x1, 0x0, 0x0, "6ac6acd41ff800"}}, 0x48}}, 0x20000400) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1, 0x0, 0xfffffff8, {0x77359400}, {0x0, 0xea60}, {0x4, 0x1, 0x1}, 0x1, @can={{0x2, 0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "e1d1f55a4351ea72"}}, 0x48}, 0x1, 0x0, 0x0, 0x20018840}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000200)=ANY=[@ANYBLOB="0100"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x0) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 862.243981ms ago: executing program 4 (id=909): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x4}, 0x1c) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fedbdf0f3000000008000300", @ANYRES32=r3, @ANYBLOB="060036"], 0x24}, 0x1, 0x0, 0x0, 0x40040c0}, 0x4000000) setsockopt$inet6_int(r1, 0x29, 0x3e, &(0x7f0000000200)=0x1ff, 0x4) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmmsg$unix(r4, &(0x7f0000011800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000bd40)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0x0, 0xee01}}}], 0x20, 0x20040010}}], 0x1, 0x20004810) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000140)=ANY=[], 0x20) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9504, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 804.230721ms ago: executing program 1 (id=910): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='nilfs2\x00', 0x1200051, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 754.925992ms ago: executing program 1 (id=911): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x80800) (async) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x80, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x80}}, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0xb0e, 0xffffffff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x2a, 0x0, 0x3, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7f, {0x9, 0x21, 0x0, 0x9, 0x1, {0x22, 0x20d}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xc0, 0x23, 0x2}}}}}]}}]}}, &(0x7f00000006c0)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='hfsplus\x00', 0x200000, 0x0) 697.373459ms ago: executing program 4 (id=912): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x80002, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x30, 0x0, 0xa3}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001880)=0x5, 0x4) shutdown(r1, 0x2) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0x26d, 0x0, 0xfffffffffffffe00}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) madvise(&(0x7f00001a1000/0x4000)=nil, 0x4000, 0x8) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x2710, 0x7, 0x100000, 0x2000, &(0x7f00003c2000/0x2000)=nil}) 295.820312ms ago: executing program 4 (id=913): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x139541, 0x0) r1 = dup(r0) ioctl$KVM_SET_CPUID2(r1, 0xc008ae09, &(0x7f0000000380)=ANY=[@ANYRES16=r1]) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000340), 0x230ba1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x4401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000180)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x8001, 0x4, 0x0, 0x1c, 0x5, 0x2, 0xd, 0x8, 0xf9, 0x2, 0x80, 0x9, 0x1}, {0x6, 0x80, 0x8, 0xc4, 0x8, 0x7, 0x8, 0x9, 0x7, 0xff, 0x0, 0x81}, {0xe2a5, 0xd, 0x1, 0x9, 0x2, 0x6, 0x9, 0x8, 0x7b, 0x6, 0x56, 0x7, 0x100}], 0x4}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x734, 0x40, 0x0, 0x0, 0x2004cb, 0x6, 0xfffffffffffffffe, 0x3, 0x10008, 0x4, 0x0, 0x0, 0x3, 0x7fffffff], 0xeeee0000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.current\x00', 0x275a, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000480)=@ethtool_rxnfc={0x29, 0x11, 0x2, {0xe, @esp_ip6_spec={@remote, @local, 0x4, 0x1}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x8, 0x3, [0x7, 0x9]}, @esp_ip4_spec={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4545, 0xff}, {0x0, @random="f92795c8a69d", 0x1, 0x9, [0x3, 0xffff]}, 0x3, 0x2}}}) r6 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) openat$incfs(r1, &(0x7f0000000040)='.pending_reads\x00', 0x6a6001, 0xeb) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x1, 0x0) r8 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x41, 0x0) ioctl$DRM_IOCTL_GET_CAP(r8, 0xc010640c, &(0x7f0000000100)={0x13}) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12fa0ca75cddcb279e240001000010000904430002317d550009050202000000b8ac000009058202000200"/54], 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x4}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r9, 0x0, 0x0) fchdir(r7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 196.18168ms ago: executing program 3 (id=914): mkdir(&(0x7f0000000400)='./file0\x00', 0x101) r0 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r1, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x800c0, &(0x7f0000000140)={[{@redirect_dir_nofollow}, {@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@volatile}, {@uuid_off}, {@redirect_dir_off}, {@userxattr}], [{@euid_gt={'euid>', 0xee00}}, {@smackfshat={'smackfshat', 0x3d, 'ntfs\x00'}}, {@fowner_lt={'fowner<', r1}}, {@permit_directio}]}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) mount(&(0x7f0000000040)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ntfs\x00', 0x200000, 0x0) 108.779868ms ago: executing program 3 (id=915): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x450000, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, r1, r2, r3, r4, r5, r6, r7, r8, 0x0], &(0x7f0000000280)=[0x0, 0x5, 0x9, 0x6], 0xa, 0x1}) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ftruncate(r9, 0x184) bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e21, @loopback}, 0x10) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000400)={r11, 0x2}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r10, 0xc018937c, &(0x7f0000000440)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000000580)={&(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, r13}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000005c0)={r11, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r12, 0xc02064b9, &(0x7f0000000680)={&(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, r15, 0xbbbbbbbb}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r10, 0xc01064b5, &(0x7f0000000700)={&(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$DRM_IOCTL_GET_CTX(r12, 0xc0086423, &(0x7f0000000740)={r11, 0x1}) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r16, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)={0x98, 0x0, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x42}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffff8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4016090}, 0x54) ioctl$SNDCTL_SEQ_NRSYNTHS(r12, 0x8004510a, &(0x7f0000000900)) ioctl$DRM_IOCTL_MODE_DIRTYFB(r0, 0xc01864b1, &(0x7f0000000980)={r14, 0x0, 0x4, 0x2, &(0x7f0000000940)=[{0xf0, 0x8001, 0xfca, 0x9619}, {0x2, 0xf, 0x3, 0x8}]}) socket$xdp(0x2c, 0x3, 0x0) sendmsg$AUDIT_LIST_RULES(r10, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x10, 0x3f5, 0x400, 0x70bd27, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x0) write$cgroup_devices(r10, &(0x7f0000000ac0)={'a', ' *:* ', 'wm\x00'}, 0x9) 0s ago: executing program 3 (id=916): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r1) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0x79, 0x0, 0xbf0}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0xc4fc27d37f13a39, 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x800000000000001, 0x84) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) (async) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f0000000340)=0x4, 0x12) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'vlan0\x00', 0x800004}, 0x18) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'vlan0\x00', 0x800004}, 0x18) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) (async) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) kernel console output (not intermixed with test programs): ice= 0.00 [ 138.769584][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.780997][ T5906] usb 4-1: config 0 descriptor?? [ 139.136271][ T5906] usbhid 4-1:0.0: can't add hid device: -71 [ 139.154793][ T5906] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 139.167584][ T5906] usb 4-1: USB disconnect, device number 21 [ 139.221013][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 139.367063][ T6870] gfs2: not a GFS2 filesystem [ 139.377392][ T5920] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 139.394020][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.394747][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 139.410980][ T5920] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 139.411004][ T5920] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 139.411084][ T5920] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 139.420021][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.440486][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.449778][ T24] usb 2-1: Product: syz [ 139.450086][ T5920] usb 3-1: USB disconnect, device number 24 [ 139.459858][ T24] usb 2-1: Manufacturer: syz [ 139.464864][ T24] usb 2-1: SerialNumber: syz [ 139.480585][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.490813][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.517229][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 139.534335][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.541726][ T6920] binder: 6915:6920 ioctl c0502100 200000002600 returned -22 [ 139.553669][ T6920] binder: 6915:6920 ioctl b704 200000002dc0 returned -22 [ 139.570068][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 139.580249][ T6920] binder: 6915:6920 ioctl b704 200000003280 returned -22 [ 139.588198][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.611104][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.618889][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.629057][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.637344][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.645664][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.653560][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.661865][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.669599][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.678923][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.690117][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.698436][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.708785][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.716695][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.725446][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.734510][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.742221][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.749804][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.757469][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233fbe0 returned -22 [ 139.765298][ T6917] binder: 6915:6917 ioctl 4020ae46 7f01b233f8e0 returned -22 [ 139.788539][ T1590] usb 2-1: USB disconnect, device number 26 [ 139.874895][ T6923] netlink: 'syz.0.263': attribute type 10 has an invalid length. [ 139.890846][ T6923] team0: Device hsr_slave_0 failed to register rx_handler [ 140.352739][ T6942] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'. [ 140.363486][ T6942] hpfs: Bad magic ... probably not HPFS [ 140.370833][ T6940] block nbd0: NBD_DISCONNECT [ 140.485853][ T6939] block nbd0: Disconnected due to user request. [ 140.496381][ T6939] block nbd0: shutting down sockets [ 140.660546][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 140.700885][ T43] ath9k_htc: Failed to initialize the device [ 140.740156][ T1590] usb 2-1: ath9k_htc: USB layer deinitialized [ 141.009086][ T6951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.230421][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 141.400748][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 141.410232][ T43] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 141.423122][ T43] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 141.437142][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 141.452069][ T43] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 141.462288][ T43] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 141.476575][ T43] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 141.486308][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.660428][ T1590] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 141.679374][ T6979] syz.1.283: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 141.695458][ T6979] CPU: 0 UID: 0 PID: 6979 Comm: syz.1.283 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 141.695484][ T6979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 141.695500][ T6979] Call Trace: [ 141.695508][ T6979] [ 141.695516][ T6979] dump_stack_lvl+0x189/0x250 [ 141.695559][ T6979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.695587][ T6979] ? __pfx__printk+0x10/0x10 [ 141.695621][ T6979] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 141.695647][ T6979] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 141.695675][ T6979] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 141.695705][ T6979] warn_alloc+0x214/0x310 [ 141.695724][ T6979] ? stack_depot_save_flags+0x429/0x900 [ 141.695757][ T6979] ? __pfx_warn_alloc+0x10/0x10 [ 141.695779][ T6979] ? kasan_save_track+0x4f/0x80 [ 141.695805][ T6979] ? xskq_create+0x56/0x170 [ 141.695823][ T6979] ? xsk_init_queue+0xb0/0x110 [ 141.695840][ T6979] ? xsk_setsockopt+0x43f/0x710 [ 141.695855][ T6979] ? do_sock_setsockopt+0x257/0x3e0 [ 141.695878][ T6979] ? __x64_sys_setsockopt+0x18b/0x220 [ 141.695901][ T6979] ? do_syscall_64+0xfa/0x3b0 [ 141.695922][ T6979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.695949][ T6979] __vmalloc_node_range_noprof+0x125/0x12f0 [ 141.696010][ T6979] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 141.696047][ T6979] ? __kasan_kmalloc+0x93/0xb0 [ 141.696080][ T6979] vmalloc_user_noprof+0xad/0xf0 [ 141.696098][ T6979] ? xskq_create+0xbf/0x170 [ 141.696118][ T6979] xskq_create+0xbf/0x170 [ 141.696141][ T6979] xsk_init_queue+0xb0/0x110 [ 141.696163][ T6979] xsk_setsockopt+0x43f/0x710 [ 141.696190][ T6979] ? __pfx_xsk_setsockopt+0x10/0x10 [ 141.696224][ T6979] ? __lock_acquire+0xab9/0xd20 [ 141.696249][ T6979] ? aa_sock_opt_perm+0xff/0x1b0 [ 141.696280][ T6979] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 141.696300][ T6979] ? __pfx_xsk_setsockopt+0x10/0x10 [ 141.696328][ T6979] do_sock_setsockopt+0x257/0x3e0 [ 141.696355][ T6979] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 141.696385][ T6979] ? __fget_files+0x2a/0x420 [ 141.696413][ T6979] __x64_sys_setsockopt+0x18b/0x220 [ 141.696445][ T6979] do_syscall_64+0xfa/0x3b0 [ 141.696464][ T6979] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.696484][ T6979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.696502][ T6979] ? clear_bhb_loop+0x60/0xb0 [ 141.696525][ T6979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.696544][ T6979] RIP: 0033:0x7fe5b698e929 [ 141.696566][ T6979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.696582][ T6979] RSP: 002b:00007fe5b7811038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 141.696602][ T6979] RAX: ffffffffffffffda RBX: 00007fe5b6bb5fa0 RCX: 00007fe5b698e929 [ 141.696616][ T6979] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 141.696627][ T6979] RBP: 00007fe5b6a10b39 R08: 0000000000000004 R09: 0000000000000000 [ 141.696639][ T6979] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.696650][ T6979] R13: 0000000000000000 R14: 00007fe5b6bb5fa0 R15: 00007ffe41ecf378 [ 141.696681][ T6979] [ 141.696754][ T6979] Mem-Info: [ 141.720610][ T43] usb 1-1: usb_control_msg returned -32 [ 141.810415][ T1590] usb 3-1: device descriptor read/64, error -71 [ 141.815381][ T6979] active_anon:5828 inactive_anon:0 isolated_anon:0 [ 141.815381][ T6979] active_file:21147 inactive_file:39998 isolated_file:0 [ 141.815381][ T6979] unevictable:776 dirty:63 writeback:0 [ 141.815381][ T6979] slab_reclaimable:10704 slab_unreclaimable:93517 [ 141.815381][ T6979] mapped:24809 shmem:1362 pagetables:1186 [ 141.815381][ T6979] sec_pagetables:0 bounce:0 [ 141.815381][ T6979] kernel_misc_reclaimable:0 [ 141.815381][ T6979] free:1317665 free_pcp:14729 free_cma:0 [ 141.861185][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 141.862570][ T6979] Node 0 active_anon:23412kB inactive_anon:0kB active_file:84588kB inactive_file:159792kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:99236kB dirty:248kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11524kB pagetables:4588kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.086569][ T6985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.111878][ T43] usbtmc 1-1:16.0: can't read capabilities [ 142.119214][ T6979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 142.125814][ T6985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.155036][ T1590] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 142.182256][ T6979] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.228603][ T6979] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 142.246918][ T43] usb 1-1: USB disconnect, device number 24 [ 142.249995][ T6979] Node 0 DMA32 free:1362244kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23320kB inactive_anon:0kB active_file:84588kB inactive_file:158708kB unevictable:1600kB writepending:288kB present:3129332kB managed:2556324kB mlocked:64kB bounce:0kB free_pcp:44044kB local_pcp:25972kB free_cma:0kB [ 142.329509][ T6979] lowmem_reserve[]: 0 0 1 1 1 [ 142.335649][ T1590] usb 3-1: device descriptor read/64, error -71 [ 142.336621][ T6979] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1084kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.347871][ T5855] Bluetooth: hci3: command 0x0405 tx timeout [ 142.372980][ T6979] lowmem_reserve[]: 0 0 0 0 0 [ 142.421622][ T6979] Node 1 Normal free:3892720kB boost:0kB min:55672kB low:69588kB high:83504kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:15436kB local_pcp:6728kB free_cma:0kB [ 142.474596][ T6979] lowmem_reserve[]: 0 0 0 0 0 [ 142.479796][ T6979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 142.501677][ T1590] usb usb3-port1: attempt power cycle [ 142.504346][ T6979] Node 0 DMA32: 477*4kB (UM) 1006*8kB (UME) 573*16kB (UM) 256*32kB (UM) 304*64kB (UME) 3*128kB (U) 5*256kB (UME) 18*512kB (UME) 14*1024kB (UME) 4*2048kB (UM) 313*4096kB (M) = 1362228kB [ 142.541830][ T6979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 142.553756][ T6979] Node 1 Normal: 158*4kB (UME) 43*8kB (UME) 30*16kB (UME) 82*32kB (UME) 30*64kB (UME) 7*128kB (UME) 3*256kB (ME) 4*512kB (UME) 2*1024kB (UM) 1*2048kB (E) 947*4096kB (M) = 3892720kB [ 142.606465][ T6979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.640599][ T6979] Node 0 hugepages_total=6 hugepages_free=5 hugepages_surp=4 hugepages_size=2048kB [ 142.694073][ T6979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 142.715203][ T6979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 142.741064][ T6979] 62520 total pagecache pages [ 142.750380][ T6979] 0 pages in swap cache [ 142.756203][ T6979] Free swap = 124996kB [ 142.760606][ T6979] Total swap = 124996kB [ 142.765130][ T6979] 2097051 pages RAM [ 142.769059][ T6979] 0 pages HighMem/MovableOnly [ 142.774688][ T6979] 426056 pages reserved [ 142.810499][ T6979] 0 pages cma reserved [ 142.860506][ T1590] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 142.899831][ T1590] usb 3-1: device descriptor read/8, error -71 [ 143.105295][ T7017] /dev/rnullb0: Can't open blockdev [ 143.155371][ T1590] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 143.451041][ T1590] usb 3-1: device descriptor read/8, error -71 [ 143.575709][ T1590] usb usb3-port1: unable to enumerate USB device [ 143.810423][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 143.960375][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 143.969709][ T5906] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.996591][ T5906] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.008488][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.014078][ T7032] netlink: 'syz.0.301': attribute type 10 has an invalid length. [ 144.020721][ T5906] usb 2-1: Product: syz [ 144.028081][ T7032] qnx4: no qnx4 filesystem (no root dir). [ 144.028491][ T5906] usb 2-1: Manufacturer: syz [ 144.052229][ T5906] usb 2-1: SerialNumber: syz [ 144.125876][ T7034] FAT-fs (rnullb0): bogus number of reserved sectors [ 144.132662][ T7034] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 144.150744][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 144.300514][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 144.307511][ T43] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 144.315901][ T43] usb 4-1: config 0 has no interface number 0 [ 144.322724][ T43] usb 4-1: config 0 interface 133 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 144.335865][ T43] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 144.345204][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.354867][ T43] usb 4-1: Product: syz [ 144.359130][ T43] usb 4-1: Manufacturer: syz [ 144.363916][ T43] usb 4-1: SerialNumber: syz [ 144.375286][ T43] usb 4-1: config 0 descriptor?? [ 144.536528][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.624548][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.655705][ T7038] gfs2: gfs2 mount does not exist [ 144.704674][ T43] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 144.726700][ T43] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 144.747737][ T43] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 144.761538][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.773957][ T43] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 144.789601][ T43] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 144.820504][ T43] usb 4-1: USB disconnect, device number 22 [ 144.861441][ T43] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 144.895111][ T43] keyspan 4-1:0.133: device disconnected [ 144.907283][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.075698][ T5906] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 145.090603][ T5906] cdc_ncm 2-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 145.110793][ T5906] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 145.158646][ T12] bridge_slave_1: left allmulticast mode [ 145.167246][ T12] bridge_slave_1: left promiscuous mode [ 145.177413][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.195708][ T12] bridge_slave_0: left allmulticast mode [ 145.202853][ T12] bridge_slave_0: left promiscuous mode [ 145.208835][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.291174][ T7024] tmpfs: Unknown parameter 'grpquota_blockhardlimit' [ 145.467571][ T7024] can: request_module (can-proto-0) failed. [ 145.786846][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.800768][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.809472][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.819453][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.831483][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.982742][ T5906] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 146.588499][ T7066] hpfs: Bad magic ... probably not HPFS [ 146.841535][ T7070] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 147.144594][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.219604][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.241274][ T12] bond0 (unregistering): Released all slaves [ 147.390988][ T5906] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 147.492235][ T5906] usb 2-1: USB disconnect, device number 27 [ 147.499549][ T5906] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 147.860578][ T5858] Bluetooth: hci1: command tx timeout [ 148.106922][ T7090] netlink: 60 bytes leftover after parsing attributes in process `syz.2.318'. [ 148.126566][ T7088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.318'. [ 148.280398][ T5920] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 148.430380][ T5920] usb 3-1: device descriptor read/64, error -71 [ 148.458260][ T12] hsr_slave_0: left promiscuous mode [ 148.482750][ T12] hsr_slave_1: left promiscuous mode [ 148.497241][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.506459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.539640][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.558466][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.625303][ T12] veth1_macvtap: left promiscuous mode [ 148.651655][ T12] veth0_macvtap: left promiscuous mode [ 148.681510][ T12] veth1_vlan: left promiscuous mode [ 148.688374][ T12] veth0_vlan: left promiscuous mode [ 148.713429][ T5920] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 148.899270][ T5920] usb 3-1: device descriptor read/64, error -71 [ 149.040738][ T5920] usb usb3-port1: attempt power cycle [ 149.169455][ T7109] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.400549][ T5920] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 149.439228][ T5920] usb 3-1: device descriptor read/8, error -71 [ 149.688844][ T12] team0 (unregistering): Port device team_slave_1 removed [ 149.696408][ T5920] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 149.731148][ T5920] usb 3-1: device descriptor read/8, error -71 [ 149.760719][ T12] team0 (unregistering): Port device team_slave_0 removed [ 149.845733][ T5920] usb usb3-port1: unable to enumerate USB device [ 149.942105][ T5858] Bluetooth: hci1: command tx timeout [ 150.252046][ T7123] hpfs: Bad magic ... probably not HPFS [ 150.518524][ T7055] chnl_net:caif_netlink_parms(): no params data found [ 150.855395][ T7139] /dev/sg0: Can't lookup blockdev [ 150.962950][ T7055] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.998661][ T7055] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.030247][ T7055] bridge_slave_0: entered allmulticast mode [ 151.063873][ T7055] bridge_slave_0: entered promiscuous mode [ 151.073749][ T7055] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.080852][ T7149] netlink: 'syz.2.328': attribute type 62 has an invalid length. [ 151.083507][ T7148] netlink: 'syz.2.328': attribute type 62 has an invalid length. [ 151.100498][ T7055] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.107762][ T7055] bridge_slave_1: entered allmulticast mode [ 151.132262][ T7055] bridge_slave_1: entered promiscuous mode [ 151.303378][ T7055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.329419][ T7154] ISOFS: unsupported/invalid hardware sector size 4096 [ 151.341435][ T7055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.505824][ T7055] team0: Port device team_slave_0 added [ 151.547754][ T7055] team0: Port device team_slave_1 added [ 151.677329][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.684412][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.745977][ T7055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.767368][ T7167] FAT-fs (rnullb0): bogus number of reserved sectors [ 151.772597][ T7055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.792635][ T7055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.796423][ T7167] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 151.850517][ T7055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.022717][ T5858] Bluetooth: hci1: command tx timeout [ 152.029962][ T7176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.055113][ T7176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.110198][ T7177] netlink: 60 bytes leftover after parsing attributes in process `syz.1.335'. [ 152.127807][ T7175] netlink: 60 bytes leftover after parsing attributes in process `syz.1.335'. [ 152.145368][ T7055] hsr_slave_0: entered promiscuous mode [ 152.152224][ T7055] hsr_slave_1: entered promiscuous mode [ 152.162264][ T7055] debugfs: 'hsr0' already exists in 'hsr' [ 152.168556][ T7055] Cannot create hsr debugfs directory [ 152.262954][ T5906] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 152.400647][ T5920] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 152.420649][ T5906] usb 3-1: device descriptor read/64, error -71 [ 152.461234][ T7055] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.481367][ T7055] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.508111][ T7055] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.525249][ T7055] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.532218][ T43] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 152.563385][ T5920] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 152.578363][ T5920] usb 2-1: config 5 has no interface number 0 [ 152.587713][ T5920] usb 2-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 152.609339][ T5920] usb 2-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 4096, setting to 64 [ 152.621641][ T5920] usb 2-1: config 5 interface 123 has no altsetting 0 [ 152.634171][ T5920] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 152.646848][ T5920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.670119][ T5920] usb 2-1: Product: syz [ 152.670491][ T43] usb 4-1: device descriptor read/64, error -71 [ 152.681470][ T5920] usb 2-1: Manufacturer: syz [ 152.691158][ T5906] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 152.701758][ T5920] usb 2-1: SerialNumber: syz [ 152.706149][ T7055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.742518][ T7055] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.756690][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.763849][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.781404][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.788588][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.850626][ T5906] usb 3-1: device descriptor read/64, error -71 [ 152.921398][ T43] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 152.959484][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.968474][ T5906] usb usb3-port1: attempt power cycle [ 152.992010][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.071114][ T43] usb 4-1: device descriptor read/64, error -71 [ 153.190738][ T43] usb usb4-port1: attempt power cycle [ 153.198430][ T7055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.342459][ T5920] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 153.351554][ T5906] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 153.387494][ T5920] usb 2-1: USB disconnect, device number 28 [ 153.400006][ T5906] usb 3-1: device descriptor read/8, error -71 [ 153.540480][ T43] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 153.571543][ T43] usb 4-1: device descriptor read/8, error -71 [ 153.670583][ T5906] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 153.704853][ T5906] usb 3-1: device descriptor read/8, error -71 [ 153.713169][ T7055] veth0_vlan: entered promiscuous mode [ 153.737978][ T7055] veth1_vlan: entered promiscuous mode [ 153.789984][ T7055] veth0_macvtap: entered promiscuous mode [ 153.809894][ T7055] veth1_macvtap: entered promiscuous mode [ 153.810615][ T43] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 153.833366][ T5906] usb usb3-port1: unable to enumerate USB device [ 153.841880][ T7055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.853457][ T43] usb 4-1: device descriptor read/8, error -71 [ 153.865560][ T7055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.888645][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.903286][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.925277][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.944465][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.971627][ T43] usb usb4-port1: unable to enumerate USB device [ 154.011249][ T7231] Attempt to restore checkpoint with obsolete wellknown handles [ 154.025954][ T7231] /dev/rnullb0: Can't open blockdev [ 154.100707][ T5858] Bluetooth: hci1: command tx timeout [ 154.137179][ T7234] /dev/rnullb0: Can't open blockdev [ 154.144062][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.144108][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.175670][ T7234] mmap: syz.1.339 (7234) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 154.254997][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.285346][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.957345][ T1590] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 155.020062][ T5920] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 155.147037][ T1590] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 155.163130][ T5920] usb 2-1: device descriptor read/64, error -71 [ 155.163235][ T7276] netlink: 'syz.2.345': attribute type 17 has an invalid length. [ 155.169503][ T1590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 155.191701][ T1590] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 155.198072][ T7276] netlink: 'syz.2.345': attribute type 16 has an invalid length. [ 155.203536][ T1590] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.213125][ T7276] netlink: 152 bytes leftover after parsing attributes in process `syz.2.345'. [ 155.235924][ T1590] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.257086][ T1590] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.317850][ T1590] usb 5-1: config 0 descriptor?? [ 155.425592][ T5920] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 155.580934][ T5920] usb 2-1: device descriptor read/64, error -71 [ 155.701071][ T5920] usb usb2-port1: attempt power cycle [ 155.710800][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 155.873469][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 155.884461][ T24] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 155.893917][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.907622][ T24] usb 3-1: config 0 has no interface number 0 [ 155.914986][ T24] usb 3-1: config 0 interface 52 has no altsetting 0 [ 155.923457][ T24] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 155.933632][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.962728][ T24] usb 3-1: config 0 descriptor?? [ 156.040440][ T5920] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 156.071399][ T5920] usb 2-1: device descriptor read/8, error -71 [ 156.320822][ T5920] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 156.373507][ T5920] usb 2-1: device descriptor read/8, error -71 [ 156.428178][ T24] usb 3-1: USB disconnect, device number 37 [ 156.488003][ T5920] usb usb2-port1: unable to enumerate USB device [ 156.523880][ T7315] sp0: Synchronizing with TNC [ 156.563225][ T7315] binder: 7314:7315 ioctl c0306201 200000000480 returned -14 [ 156.616556][ T7319] exFAT-fs (rnullb0): invalid boot record signature [ 156.623475][ T7319] exFAT-fs (rnullb0): failed to read boot sector [ 156.629932][ T7319] exFAT-fs (rnullb0): failed to recognize exfat type [ 156.742714][ T7322] netlink: 'syz.3.351': attribute type 4 has an invalid length. [ 156.770130][ T7322] netlink: 'syz.3.351': attribute type 4 has an invalid length. [ 156.813810][ T7322] CUSE: unknown device info "MzP{UҗEsZ$cw#/f}ٔb,Q[{Ʈ$ [ 156.813810][ T7322] 4&I:#5o63ю.l%wC [ 156.813810][ T7322] ?" [ 156.834090][ T7322] CUSE: unknown device info "v2.7˂*5SEAy `?e`l6ݡQ0V84܎{c"K^vaO֐M 8f1\.dž6(3ifω11,kbz"NXj} ~wu/K9.rפ" [ 156.858865][ T7325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.871011][ T7325] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.886298][ T7322] CUSE: DEVNAME unspecified [ 157.603127][ T7343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.632478][ T7343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.439744][ T7369] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 158.469133][ T7369] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.359'. [ 158.545058][ T7375] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 158.601763][ T7365] netlink: 16 bytes leftover after parsing attributes in process `syz.3.358'. [ 158.625725][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 158.821962][ T5920] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 158.858207][ T7384] loop6: detected capacity change from 0 to 2559 [ 158.868402][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.877051][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.886697][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.895431][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.905332][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.911500][ T5937] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 158.931748][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.955859][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.968785][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.978422][ T7384] ldm_validate_partition_table(): Disk read failed. [ 158.986883][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 158.991353][ T5920] usb 2-1: device descriptor read/64, error -71 [ 158.995605][ T7384] Buffer I/O error on dev loop6, logical block 0, async page read [ 159.009756][ T7384] Dev loop6: unable to read RDB block 0 [ 159.016427][ T7384] loop6: unable to read partition table [ 159.023248][ T7384] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 159.083596][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.097197][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 159.109831][ T5937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 159.123024][ T5937] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.138678][ T5937] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.150943][ T5937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.162590][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 159.165081][ T5937] usb 4-1: config 0 descriptor?? [ 159.250428][ T5920] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 159.352261][ T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 159.362465][ T24] usb 3-1: config 0 has no interface number 0 [ 159.371912][ T24] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 159.384298][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.393922][ T24] usb 3-1: Product: syz [ 159.398197][ T24] usb 3-1: Manufacturer: syz [ 159.402880][ T5920] usb 2-1: device descriptor read/64, error -71 [ 159.415307][ T24] usb 3-1: SerialNumber: syz [ 159.423699][ T24] usb 3-1: config 0 descriptor?? [ 159.522421][ T5920] usb usb2-port1: attempt power cycle [ 159.638657][ T24] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 159.668134][ T24] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 159.692049][ T24] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 159.703894][ T24] usb 3-1: media controller created [ 159.734865][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.787699][ T7399] NILFS (rnullb0): couldn't find nilfs on the device [ 159.872390][ T7384] syzkaller1: entered promiscuous mode [ 159.891540][ T7384] syzkaller1: entered allmulticast mode [ 159.897345][ T5937] usbhid 4-1:0.0: can't add hid device: -71 [ 159.906191][ T5937] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 159.917008][ T5920] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 159.945395][ T7403] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.962008][ T5920] usb 2-1: device descriptor read/8, error -71 [ 159.968615][ T7403] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.970666][ T5937] usb 4-1: USB disconnect, device number 27 [ 160.230837][ T5920] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 160.251240][ T5920] usb 2-1: device descriptor read/8, error -71 [ 160.292775][ T7409] input: syz0 as /devices/virtual/input/input12 [ 160.341421][ T30] audit: type=1326 audit(1751830924.165:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7408 comm="syz.4.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f990d78e929 code=0x0 [ 160.362937][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.371202][ T5920] usb usb2-port1: unable to enumerate USB device [ 160.433143][ T24] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 160.559468][ T24] usb 3-1: USB disconnect, device number 38 [ 160.665331][ T1590] usbhid 5-1:0.0: can't add hid device: -32 [ 160.674778][ T1590] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 160.920549][ T5920] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 161.082445][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 161.131261][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.149564][ T5920] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.159769][ T5920] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.181968][ T5920] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 161.193512][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 161.205435][ T5920] usb 4-1: Product: syz [ 161.209619][ T5920] usb 4-1: Manufacturer: syz [ 161.216750][ T5920] usb 4-1: SerialNumber: syz [ 161.235817][ T5920] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input13 [ 161.240553][ T7421] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 161.470083][ T7424] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 161.757578][ T7431] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 161.799320][ T7431] netlink: 40 bytes leftover after parsing attributes in process `syz.1.375'. [ 162.044326][ T5906] usb 4-1: USB disconnect, device number 28 [ 162.103546][ T5906] appletouch 4-1:1.0: input: appletouch disconnected [ 162.637301][ T7447] random: crng reseeded on system resumption [ 163.006952][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 163.141095][ T7466] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 163.379286][ T7476] /dev/rnullb0: Can't open blockdev [ 163.605345][ T7487] /dev/rnullb0: Can't open blockdev [ 163.630484][ T5862] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 163.800403][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 163.808655][ T5862] usb 2-1: config 3 has an invalid interface number: 130 but max is 0 [ 163.813342][ T7495] program syz.4.392 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.817627][ T5862] usb 2-1: config 3 has no interface number 0 [ 163.849584][ T5862] usb 2-1: config 3 interface 130 has no altsetting 0 [ 163.867793][ T5862] usb 2-1: New USB device found, idVendor=12d1, idProduct=c025, bcdDevice=cb.65 [ 163.900522][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.927606][ T5862] usb 2-1: Product: syz [ 163.934390][ T5862] usb 2-1: Manufacturer: syz [ 163.939014][ T5862] usb 2-1: SerialNumber: syz [ 164.198101][ T5862] option 2-1:3.130: GSM modem (1-port) converter detected [ 164.222784][ T5862] usb 2-1: USB disconnect, device number 37 [ 164.241054][ T5862] option 2-1:3.130: device disconnected [ 164.377278][ T7509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.395'. [ 164.833320][ T7528] syz.4.398: attempt to access beyond end of device [ 164.833320][ T7528] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 164.887190][ T7526] syz.4.398: attempt to access beyond end of device [ 164.887190][ T7526] loop4: rw=0, sector=2, nr_sectors = 1 limit=0 [ 164.913095][ T7533] /dev/rnullb0: Can't open blockdev [ 164.929285][ T7528] netlink: 4 bytes leftover after parsing attributes in process `syz.4.398'. [ 165.077104][ T7538] /dev/rnullb0: Can't open blockdev [ 165.118735][ T7540] tipc: Started in network mode [ 165.140994][ T7540] tipc: Node identity 3270c2eb7f0d, cluster identity 4711 [ 165.148387][ T7540] tipc: Enabled bearer , priority 0 [ 165.320236][ T7547] vivid-000: disconnect [ 165.326142][ T7547] delete_channel: no stack [ 165.331192][ T7547] delete_channel: no stack [ 165.421893][ T5862] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 165.454870][ T7549] syzkaller1: entered allmulticast mode [ 165.474306][ T7549] /dev/rnullb0: Can't open blockdev [ 165.592269][ T5862] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.624036][ T5862] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 165.662704][ T5862] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 165.674457][ T5862] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 165.682960][ T5862] usb 4-1: SerialNumber: syz [ 165.691960][ T7546] vivid-000: reconnect [ 165.750490][ T7555] /dev/rnullb0: Can't open blockdev [ 165.935302][ T5862] usb 4-1: 0:2 : does not exist [ 166.023864][ T7539] tipc: Disabling bearer [ 166.042150][ T5862] usb 4-1: USB disconnect, device number 29 [ 166.168281][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.187695][ T7574] /dev/rnullb0: Can't open blockdev [ 166.283755][ T43] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz1 [ 166.521055][ T5862] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 166.685208][ T5862] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.726517][ T5862] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.741314][ T5862] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 166.767329][ T5862] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 166.790505][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.819090][ T7574] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 167.040676][ T1590] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 167.221338][ T1590] usb 4-1: Using ep0 maxpacket: 32 [ 167.242007][ T1590] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 167.252937][ T7588] /dev/rnullb0: Can't open blockdev [ 167.258386][ T1590] usb 4-1: config 0 has no interface number 0 [ 167.275032][ T1590] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.290607][ T7590] /dev/rnullb0: Can't open blockdev [ 167.296072][ T1590] usb 4-1: config 0 interface 2 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.328802][ T1590] usb 4-1: config 0 interface 2 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.347950][ T1590] usb 4-1: config 0 interface 2 has no altsetting 0 [ 167.355302][ T1590] usb 4-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 167.366938][ T1590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.392947][ T1590] usb 4-1: config 0 descriptor?? [ 167.446003][ T7574] input: syz1 as /devices/virtual/input/input14 [ 167.459276][ T7574] netlink: 20 bytes leftover after parsing attributes in process `syz.1.411'. [ 167.650919][ T5862] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 167.678643][ T5862] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input15 [ 167.784508][ T5862] usb 2-1: USB disconnect, device number 38 [ 167.790515][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 167.822599][ T1590] hid_parser_main: 6 callbacks suppressed [ 167.822620][ T1590] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 167.871849][ T1590] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 167.898818][ T1590] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 167.914763][ T1590] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 167.925670][ T1590] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 167.935538][ T1590] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 167.943366][ T1590] uclogic 0003:5543:0781.000E: unknown main item tag 0x0 [ 167.957973][ T7607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.422'. [ 167.960720][ T1590] uclogic 0003:5543:0781.000E: hidraw0: USB HID v0.07 Device [HID 5543:0781] on usb-dummy_hcd.3-1/input2 [ 167.974318][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.986944][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.990407][ T5920] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 168.059964][ T7611] vcan0: entered allmulticast mode [ 168.074871][ T7611] /dev/rnullb0: Can't open blockdev [ 168.115814][ T1590] usb 4-1: USB disconnect, device number 30 [ 168.182754][ T5920] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.196822][ T5920] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.212941][ T5920] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 168.222561][ T5920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.231201][ T5920] usb 3-1: Product: syz [ 168.236095][ T5920] usb 3-1: Manufacturer: syz [ 168.245116][ T5920] usb 3-1: SerialNumber: syz [ 168.245739][ T7613] input: syz1 as /devices/virtual/input/input16 [ 168.260021][ T5920] usb 3-1: config 0 descriptor?? [ 168.268152][ T7613] netlink: 763 bytes leftover after parsing attributes in process `syz.1.423'. [ 168.285488][ T5920] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 168.489545][ T5920] usb 3-1: USB disconnect, device number 39 [ 168.620578][ T5906] usb 2-1: new low-speed USB device number 39 using dummy_hcd [ 168.813687][ T5906] usb 2-1: Invalid ep0 maxpacket: 32 [ 168.966330][ T5906] usb 2-1: new low-speed USB device number 40 using dummy_hcd [ 169.145576][ T5906] usb 2-1: Invalid ep0 maxpacket: 32 [ 169.165128][ T5906] usb usb2-port1: attempt power cycle [ 169.178727][ T7643] /dev/rnullb0: Can't open blockdev [ 169.494017][ T7653] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 169.530855][ T30] audit: type=1326 audit(1751830933.345:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7652 comm="syz.4.431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f990d78e929 code=0x0 [ 169.570656][ T5906] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 169.615951][ T5906] usb 2-1: Invalid ep0 maxpacket: 32 [ 169.653532][ T7666] Malformed UNC in devname [ 169.653532][ T7666] [ 169.663188][ T7663] Malformed UNC in devname [ 169.663188][ T7663] [ 169.669988][ T7663] CIFS: VFS: Malformed UNC in devname [ 169.694206][ T7666] CIFS: VFS: Malformed UNC in devname [ 169.774923][ T5906] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 169.838063][ T5906] usb 2-1: Invalid ep0 maxpacket: 32 [ 169.843915][ T5906] usb usb2-port1: unable to enumerate USB device [ 169.857044][ T7673] /dev/rnullb0: Can't open blockdev [ 170.011760][ T7680] netlink: 14 bytes leftover after parsing attributes in process `syz.4.437'. [ 170.188987][ T7680] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 170.195544][ T7680] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.225552][ T7680] vhci_hcd vhci_hcd.0: Device attached [ 170.254409][ T7688] usbip_core: unknown command [ 170.268862][ T7688] vhci_hcd: unknown pdu 0 [ 170.284406][ T7688] usbip_core: unknown command [ 170.290881][ T36] vhci_hcd: stop threads [ 170.295141][ T36] vhci_hcd: release socket [ 170.309746][ T36] vhci_hcd: disconnect device [ 170.742923][ T24] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 170.920167][ T24] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 170.943814][ T24] usb 3-1: config 0 has no interface number 0 [ 170.949950][ T24] usb 3-1: config 0 interface 41 has no altsetting 0 [ 170.964553][ T24] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 170.975610][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.992632][ T24] usb 3-1: Product: syz [ 170.996929][ T24] usb 3-1: Manufacturer: syz [ 171.002250][ T24] usb 3-1: SerialNumber: syz [ 171.023758][ T24] usb 3-1: config 0 descriptor?? [ 171.034138][ T24] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -22 [ 171.103130][ T7715] /dev/rnullb0: Can't open blockdev [ 171.326947][ T5862] usb 3-1: USB disconnect, device number 40 [ 171.424207][ T7710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.433276][ T7710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.578905][ T7732] Invalid source name [ 171.910549][ T1590] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 172.060851][ T1590] usb 3-1: device descriptor read/64, error -71 [ 172.290650][ T7757] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 172.333551][ T1590] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 172.481181][ T7766] /dev/rnullb0: Can't open blockdev [ 172.510380][ T1590] usb 3-1: device descriptor read/64, error -71 [ 172.601153][ T7768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.452'. [ 172.611557][ T7772] /dev/rnullb0: Can't open blockdev [ 172.627178][ T1590] usb usb3-port1: attempt power cycle [ 172.993403][ T1590] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 173.041250][ T1590] usb 3-1: device descriptor read/8, error -71 [ 173.290841][ T5906] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 173.306572][ T1590] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 173.341933][ T1590] usb 3-1: device descriptor read/8, error -71 [ 173.452372][ T1590] usb usb3-port1: unable to enumerate USB device [ 173.485189][ T5906] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 173.502997][ T5906] usb 2-1: config 0 has no interface number 0 [ 173.510784][ T5906] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.523707][ T5906] usb 2-1: config 0 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.534003][ T5906] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 173.543689][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.558500][ T5906] usb 2-1: config 0 descriptor?? [ 173.900544][ T30] audit: type=1326 audit(1751830937.705:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7820 comm="syz.3.461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fc1d098e929 code=0x0 [ 174.013521][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.050893][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.216044][ T7838] /dev/rnullb0: Can't open blockdev [ 174.224506][ T7838] /dev/rnullb0: Can't open blockdev [ 174.501084][ T7848] netlink: 'syz.3.465': attribute type 10 has an invalid length. [ 174.508876][ T7848] netlink: 40 bytes leftover after parsing attributes in process `syz.3.465'. [ 174.523934][ T7848] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 175.449590][ T5858] Bluetooth: hci3: unexpected subevent 0x0e length: 18 > 15 [ 175.457115][ T5858] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 175.764747][ T7883] /dev/rnullb0: Can't open blockdev [ 175.926020][ T7889] /dev/rnullb0: Can't open blockdev [ 176.163577][ T1590] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 176.213958][ T5906] usbhid 2-1:0.128: can't add hid device: -71 [ 176.220207][ T5906] usbhid 2-1:0.128: probe with driver usbhid failed with error -71 [ 176.270067][ T5906] usb 2-1: USB disconnect, device number 43 [ 176.333916][ T1590] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.351849][ T1590] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 176.395119][ T1590] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 176.406930][ T1590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.418919][ T1590] usb 4-1: Product: syz [ 176.425463][ T1590] usb 4-1: Manufacturer: syz [ 176.430845][ T1590] usb 4-1: SerialNumber: syz [ 176.468591][ T1590] usb 4-1: config 0 descriptor?? [ 176.750696][ T5906] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 176.890407][ T5906] usb 2-1: device descriptor read/64, error -71 [ 177.080607][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 177.119880][ T7907] /dev/rnullb0: Can't open blockdev [ 177.130450][ T5906] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 177.179124][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.189355][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.242721][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.253304][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.265204][ T24] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 177.272292][ T5906] usb 2-1: device descriptor read/64, error -71 [ 177.274957][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 177.288709][ T24] usb 3-1: SerialNumber: syz [ 177.400584][ T5906] usb usb2-port1: attempt power cycle [ 177.505461][ T24] usb 3-1: 0:2 : does not exist [ 177.530760][ T24] usb 3-1: USB disconnect, device number 45 [ 177.556242][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.750442][ T5906] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 177.771137][ T5906] usb 2-1: device descriptor read/8, error -71 [ 178.040779][ T5906] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 178.071242][ T5906] usb 2-1: device descriptor read/8, error -71 [ 178.165274][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.483'. [ 178.178592][ T7921] netlink: 60 bytes leftover after parsing attributes in process `syz.4.483'. [ 178.202087][ T5906] usb usb2-port1: unable to enumerate USB device [ 178.259331][ T7923] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.484'. [ 178.327443][ T7927] netlink: 60 bytes leftover after parsing attributes in process `syz.4.483'. [ 178.356863][ T7921] /dev/rnullb0: Can't open blockdev [ 178.443264][ T7934] sctp: [Deprecated]: syz.2.486 (pid 7934) Use of int in max_burst socket option deprecated. [ 178.443264][ T7934] Use struct sctp_assoc_value instead [ 178.927109][ T5906] usb 4-1: USB disconnect, device number 31 [ 179.341919][ T7957] comedi comedi3: dt2801: I/O port conflict (0x1,2) [ 179.760387][ T5906] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 179.789490][ T7971] /dev/rnullb0: Can't open blockdev [ 179.872667][ T7974] /dev/rnullb0: Can't open blockdev [ 179.932972][ T5906] usb 3-1: not running at top speed; connect to a high speed hub [ 179.957988][ T5906] usb 3-1: config 5 has an invalid interface number: 148 but max is 0 [ 179.968808][ T5906] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 179.985852][ T5906] usb 3-1: config 5 has no interface number 0 [ 179.993402][ T5906] usb 3-1: config 5 interface 148 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 180.005801][ T5906] usb 3-1: config 5 interface 148 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.023910][ T5906] usb 3-1: config 5 interface 148 has no altsetting 0 [ 180.048346][ T7979] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 180.056973][ T5906] usb 3-1: New USB device found, idVendor=05ac, idProduct=d181, bcdDevice=b4.a2 [ 180.069801][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.079411][ T5906] usb 3-1: Product: syz [ 180.086911][ T5906] usb 3-1: Manufacturer: syz [ 180.092748][ T5906] usb 3-1: SerialNumber: syz [ 180.228681][ T7987] /dev/rnullb0: Can't open blockdev [ 180.360834][ T7966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.369714][ T7966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.407030][ T7992] /dev/rnullb0: Can't open blockdev [ 180.414509][ T7993] netlink: 666 bytes leftover after parsing attributes in process `syz.1.506'. [ 180.431671][ T7993] /dev/rnullb0: Can't open blockdev [ 180.460638][ T7966] netlink: 1 bytes leftover after parsing attributes in process `syz.2.495'. [ 180.594108][ T8000] /dev/rnullb0: Can't open blockdev [ 180.912100][ T8015] /dev/rnullb0: Can't open blockdev [ 180.918089][ T8014] /dev/rnullb0: Can't open blockdev [ 181.080435][ T1210] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 181.242721][ T1210] usb 4-1: not running at top speed; connect to a high speed hub [ 181.280631][ T1210] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x82 has invalid maxpacket 64990, setting to 64 [ 181.293355][ T5862] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 181.302659][ T1210] usb 4-1: config 1 interface 0 has no altsetting 0 [ 181.331661][ T1210] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.340877][ T1210] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.349268][ T1210] usb 4-1: Product: ⢍꺿꣇릁湘輷駔헭ס⻕᤽䇩뽯䐃⻼祌⁈ﭴ謑뙲䈲⫱愓髀᏷밟ܙ㗎篢ᩊ钥㰉➏蚃箒䡆㉭暰ōꚂ睱㦹숰偧濸驺洮ቋ䧹芩폰ჭ䧸퀍⎳경셋헷궥罩먀퀘狾壵㖜ၯ霓ﱻ⛂㆘튑挨㓫諊↵䙉燎把멍譏齹䥩ࠨ [ 181.377630][ T1210] usb 4-1: Manufacturer: ␃⯎㍆些⪥떺㵓嬅ₒ횐虲ﴷ襰㷩箇硊⁡숨衱ὥ倹᫶撑㓗➨飶믧뢸蠚쐞씄瓔鼥쿛┭犴垷캰ࠣ☧콓Ṟ狹ﺿ뼱䕑ۮﺔ瞇뺼萋믱᫿趓뻨灹ギ욡忮䜦㻴駙쉣炼閺笆쭉ꒂ嬳掬含僳䀎旇녺遯綻䫷蒖镑㾚̛̉퐻䥃ᶲ듙ᦜꄿ릮䴗쬪犸쬞∥ꄒ [ 181.411057][ T1210] usb 4-1: SerialNumber: Ч [ 181.419475][ T8012] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 181.495311][ T5862] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 181.504520][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.520952][ T5862] usb 2-1: Product: syz [ 181.525161][ T5862] usb 2-1: Manufacturer: syz [ 181.529780][ T5862] usb 2-1: SerialNumber: syz [ 181.582165][ T5862] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 181.602312][ T43] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 181.871722][ T8023] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 181.879962][ T8023] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.641590][ T5906] ipheth 3-1:5.148: Unable to find endpoints [ 182.663272][ T43] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 182.688983][ T43] ath9k_htc: Failed to initialize the device [ 182.691909][ T5906] usb 3-1: USB disconnect, device number 46 [ 182.759757][ T43] usb 2-1: ath9k_htc: USB layer deinitialized [ 182.800627][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.811085][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.877226][ T1210] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 64 proto 1 vid 0x0525 pid 0xA4A8 [ 182.918288][ T1210] usb 4-1: USB disconnect, device number 32 [ 182.951265][ T1210] usblp0: removed [ 182.963812][ T8038] /dev/rnullb0: Can't open blockdev [ 183.075805][ T5906] usb 2-1: USB disconnect, device number 48 [ 183.782485][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.791340][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.475717][ T8063] /dev/rnullb0: Can't open blockdev [ 184.520746][ T8063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.533258][ T8063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.570491][ T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 184.684691][ T1590] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 184.741191][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 184.754944][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.764619][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 184.777269][ T43] usb 4-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice= 0.40 [ 184.789619][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.798488][ T43] usb 4-1: Product: syz [ 184.802848][ T43] usb 4-1: Manufacturer: syz [ 184.807588][ T43] usb 4-1: SerialNumber: syz [ 184.815496][ T8067] /dev/rnullb0: Can't open blockdev [ 184.833017][ T1590] usb 2-1: device descriptor read/64, error -71 [ 185.031647][ T8056] fuseblk: Unknown parameter 'fsuuid' [ 185.070514][ T1590] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 185.116442][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.4.532'. [ 185.221370][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 185.229065][ T1590] usb 2-1: device descriptor read/64, error -71 [ 185.302402][ T8075] /dev/rnullb0: Can't open blockdev [ 185.346899][ T43] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input17 [ 185.361978][ T1590] usb usb2-port1: attempt power cycle [ 185.363398][ T5203] bcm5974 4-1:1.0: could not read from device [ 185.381614][ T10] usb 3-1: device descriptor read/64, error -71 [ 185.398814][ T43] usb 4-1: USB disconnect, device number 33 [ 185.399001][ T5203] bcm5974 4-1:1.0: could not read from device [ 185.620535][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 185.711918][ T1590] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 185.862943][ T10] usb 3-1: device descriptor read/64, error -71 [ 185.869444][ T1590] usb 2-1: device descriptor read/8, error -71 [ 185.970923][ T10] usb usb3-port1: attempt power cycle [ 186.110476][ T1590] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 186.142641][ T1590] usb 2-1: device descriptor read/8, error -71 [ 186.311031][ T1590] usb usb2-port1: unable to enumerate USB device [ 186.370481][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 186.402037][ T10] usb 3-1: device descriptor read/8, error -71 [ 186.456283][ T8089] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 186.466059][ T8089] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 186.488773][ T8089] kvm: user requested TSC rate below hardware speed [ 186.660545][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 186.691039][ T10] usb 3-1: device descriptor read/8, error -71 [ 186.800764][ T10] usb usb3-port1: unable to enumerate USB device [ 186.870401][ T5862] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 187.022411][ T5862] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 187.031022][ T5862] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 187.041500][ T5862] usb 4-1: config 220 has no interface number 2 [ 187.047833][ T5862] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 187.061199][ T5862] usb 4-1: config 220 interface 0 has no altsetting 0 [ 187.067991][ T5862] usb 4-1: config 220 interface 76 has no altsetting 0 [ 187.074902][ T5862] usb 4-1: config 220 interface 1 has no altsetting 0 [ 187.085256][ T5862] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 187.094485][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.102674][ T5862] usb 4-1: Product: syz [ 187.106843][ T5862] usb 4-1: Manufacturer: syz [ 187.111504][ T5862] usb 4-1: SerialNumber: syz [ 187.605709][ T5862] usb 4-1: selecting invalid altsetting 0 [ 187.618484][ T5862] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 187.625989][ T5862] usb 4-1: No valid video chain found. [ 187.648233][ T5862] usb 4-1: selecting invalid altsetting 0 [ 187.671881][ T5862] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 187.697770][ T5862] usb 4-1: USB disconnect, device number 34 [ 188.366901][ T8132] /dev/rnullb0: Can't open blockdev [ 188.650592][ T5862] usb 2-1: new full-speed USB device number 53 using dummy_hcd [ 188.800485][ T5862] usb 2-1: device descriptor read/64, error -71 [ 188.850394][ T1590] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 189.002728][ T8145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.026087][ T8145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.034468][ T1590] usb 3-1: config 0 has no interfaces? [ 189.046813][ T1590] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 189.056021][ T1590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.070619][ T5862] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 189.075619][ T1590] usb 3-1: config 0 descriptor?? [ 189.220917][ T5862] usb 2-1: device descriptor read/64, error -71 [ 189.295171][ T1590] usb 3-1: USB disconnect, device number 51 [ 189.330673][ T5862] usb usb2-port1: attempt power cycle [ 189.690453][ T5862] usb 2-1: new full-speed USB device number 55 using dummy_hcd [ 189.711297][ T5862] usb 2-1: device descriptor read/8, error -71 [ 189.950724][ T5862] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 189.981044][ T5862] usb 2-1: device descriptor read/8, error -71 [ 190.100869][ T5862] usb usb2-port1: unable to enumerate USB device [ 190.148446][ T8167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.167588][ T8167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.193231][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.4.561'. [ 190.518959][ T8173] /dev/rnullb0: Can't open blockdev [ 190.531434][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.542900][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.760917][ T24] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 190.788155][ T8178] /dev/rnullb0: Can't open blockdev [ 190.951661][ T24] usb 4-1: config 0 has an invalid interface number: 199 but max is 1 [ 190.960045][ T24] usb 4-1: config 0 has no interface number 1 [ 190.999054][ T24] usb 4-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 191.009719][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 191.028781][ T24] usb 4-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00 [ 191.038395][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 191.050781][ T30] audit: type=1326 audit(1751830954.875:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.2.568" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb913d8e929 code=0x0 [ 191.073245][ T24] usb 4-1: SerialNumber: syz [ 191.099586][ T24] usb 4-1: config 0 descriptor?? [ 191.114897][ T24] usb 4-1: Found UVC 0.00 device (0002:0000) [ 191.123069][ T24] usb 4-1: No valid video chain found. [ 191.413886][ T8194] Option '' to dns_resolver key: bad/missing value [ 191.422233][ T8194] /dev/rnullb0: Can't open blockdev [ 191.478909][ T24] usb 4-1: USB disconnect, device number 35 [ 191.706262][ T8206] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 191.992648][ T30] audit: type=1326 audit(1751830955.805:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8211 comm="syz.4.575" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f990d78e929 code=0x0 [ 192.496255][ T8235] /dev/rnullb0: Can't open blockdev [ 192.862756][ T5862] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 192.970116][ T8254] /dev/rnullb0: Can't open blockdev [ 193.048053][ T5862] usb 2-1: config 255 has an invalid interface number: 207 but max is 0 [ 193.059584][ T5862] usb 2-1: config 255 has no interface number 0 [ 193.076719][ T5862] usb 2-1: config 255 interface 207 altsetting 12 endpoint 0xF has invalid maxpacket 1024, setting to 1023 [ 193.088886][ T5862] usb 2-1: config 255 interface 207 altsetting 12 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 193.100731][ T5862] usb 2-1: config 255 interface 207 has no altsetting 0 [ 193.111265][ T5862] usb 2-1: New USB device found, idVendor=05e0, idProduct=2002, bcdDevice= 8.67 [ 193.129949][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.132696][ T8258] /dev/rnullb0: Can't open blockdev [ 193.149579][ T5862] usb 2-1: Product: ࠖ [ 193.152467][ T1590] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 193.153881][ T5862] usb 2-1: Manufacturer: 盺橼ݍ㏿圀Ⱇ荆偱硌缞몍넼 [ 193.169963][ T5862] usb 2-1: SerialNumber: 촊别큹ꪊ陕풘霣໠ൃ᩶₼珮薖쬓ꆜ銨﹭鞂减宲｛⇡Ｙ慨亳쳭浬䒏묥织Ṯ᠍᤿ﻦ甝෹䶞谇拑⢫宋흏뫺䞶ᬃ䭙㷅✾荀找葀のꊯﰮꖘဩ䅣䣑暋܎ꇧ菤趸寻餾鑌忔Ⴙ龍濧ﾥ场ήབ靊绞圬銑䵎椔쿄릡ꋯ봷쫰⤣䴌줖볯⺥瘸ᆝ嗢鳉ퟐ폛苔ᗏ〤䂲괅牊瀁ﰖ뿷ﱧ龁 [ 193.308660][ T8260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.322846][ T1590] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.324163][ T8260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.340410][ T1590] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 193.384320][ T1590] usb 3-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 193.397649][ T1590] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.406955][ T1590] usb 3-1: Product: syz [ 193.412734][ T1590] usb 3-1: Manufacturer: syz [ 193.417472][ T1590] usb 3-1: SerialNumber: syz [ 193.426413][ T1590] usb 3-1: config 0 descriptor?? [ 193.553826][ T5862] usb 2-1: USB disconnect, device number 57 [ 193.678190][ T30] audit: type=1800 audit(1751830957.495:14): pid=8245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.584" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 193.765975][ T1590] usb 3-1: USB disconnect, device number 52 [ 193.873100][ T8278] ieee802154 phy0 wpan0: encryption failed: -90 [ 193.882015][ T8278] /dev/rnullb0: Can't open blockdev [ 194.020748][ T5862] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 194.125481][ T8285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.139862][ T8285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.190412][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 194.197818][ T5862] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 194.207342][ T5862] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.217258][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.229776][ T5862] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.239948][ T5862] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.256952][ T5862] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 194.267364][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.346886][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.354203][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.484404][ T5862] usb 2-1: usb_control_msg returned -32 [ 194.490031][ T5862] usbtmc 2-1:16.0: can't read capabilities [ 194.996683][ T8301] Device name not specified. [ 194.996683][ T8301] [ 195.210778][ T5862] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 195.382502][ T5862] usb 4-1: Using ep0 maxpacket: 32 [ 195.394251][ T5862] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 195.406943][ T5862] usb 4-1: config 0 has no interface number 0 [ 195.415052][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 195.434837][ T5862] usb 4-1: config 0 interface 12 has no altsetting 0 [ 195.456099][ T5862] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 195.475747][ T5862] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.483370][ T8308] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 195.503277][ T5862] usb 4-1: Product: syz [ 195.507465][ T5862] usb 4-1: Manufacturer: syz [ 195.518482][ T5862] usb 4-1: SerialNumber: syz [ 195.548486][ T5862] usb 4-1: config 0 descriptor?? [ 195.580603][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 195.593281][ T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 195.609536][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 195.627313][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 195.643555][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 195.654631][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.667854][ T24] usb 3-1: config 0 descriptor?? [ 195.674012][ T8305] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 195.747615][ T24] hub 3-1:0.0: USB hub found [ 195.816503][ T8316] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3380 [ 195.854977][ T5937] usb 2-1: USB disconnect, device number 58 [ 195.863407][ T5862] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 195.871656][ T5862] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 195.885246][ T24] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 195.900397][ T5862] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 195.910826][ T5862] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 195.964298][ T5862] usb 4-1: USB disconnect, device number 36 [ 196.145982][ T8305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.148062][ T8323] syz.4.608: attempt to access beyond end of device [ 196.148062][ T8323] nbd4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 196.161122][ T8305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.170464][ T8323] hfsplus: unable to find HFS+ superblock [ 196.433102][ T8325] tipc: Enabling of bearer rejected, failed to enable media [ 196.585448][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 196.593177][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 196.656427][ T24] usb 3-1: USB disconnect, device number 53 [ 197.067844][ T30] audit: type=1326 audit(1751830960.885:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8338 comm="syz.3.613" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1d098e929 code=0x0 [ 197.089346][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.117525][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 197.193204][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.260876][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.323672][ T24] usb 3-1: config 0 has no interfaces? [ 197.329190][ T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 197.358778][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.368895][ T30] audit: type=1326 audit(1751830961.195:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8346 comm="syz.1.616" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5b698e929 code=0x0 [ 197.396588][ T24] usb 3-1: config 0 descriptor?? [ 197.605981][ T8332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.616208][ T8332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.625660][ T24] usb 3-1: USB disconnect, device number 54 [ 197.895280][ T8351] /dev/rnullb0: Can't open blockdev [ 198.074527][ T8354] netlink: 60 bytes leftover after parsing attributes in process `syz.3.618'. [ 198.090386][ T5937] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 198.090857][ T8353] netlink: 60 bytes leftover after parsing attributes in process `syz.3.618'. [ 198.113900][ T8354] /dev/rnullb0: Can't open blockdev [ 198.261649][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 198.273977][ T5937] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.300471][ T5937] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 198.322463][ T5937] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 198.332077][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.348527][ T5937] usb 3-1: Product: syz [ 198.360489][ T5937] usb 3-1: Manufacturer: syz [ 198.365106][ T5937] usb 3-1: SerialNumber: syz [ 198.525589][ T8371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.569149][ T8371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.811936][ T5937] usb 3-1: 0:2 : does not exist [ 199.074075][ T8393] /dev/rnullb0: Can't open blockdev [ 199.153973][ T8399] /dev/rnullb0: Can't open blockdev [ 199.235470][ T8332] /dev/rnullb0: Can't open blockdev [ 199.256107][ T5937] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 199.334105][ T5937] usb 3-1: USB disconnect, device number 55 [ 199.375101][ T5866] udevd[5866]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.193407][ T8419] /dev/rnullb0: Can't open blockdev [ 200.306076][ T8421] batadv_slave_0: entered promiscuous mode [ 200.381398][ T8427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.641'. [ 200.552911][ T8420] batadv_slave_0: left promiscuous mode [ 200.688636][ T8439] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 200.710594][ T8439] /dev/rnullb0: Can't open blockdev [ 200.803171][ T8442] /dev/rnullb0: Can't open blockdev [ 200.935737][ T8444] /dev/rnullb0: Can't open blockdev [ 201.182247][ T8451] /dev/rnullb0: Can't open blockdev [ 201.552213][ T8455] /dev/rnullb0: Can't open blockdev [ 202.001822][ T8461] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 202.011511][ T8461] /dev/rnullb0: Can't open blockdev [ 202.173159][ T8466] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 202.180710][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.3.655'. [ 202.350276][ T8474] /dev/rnullb0: Can't open blockdev [ 202.460172][ T8477] netlink: 'syz.1.658': attribute type 10 has an invalid length. [ 202.483175][ T8477] netlink: 40 bytes leftover after parsing attributes in process `syz.1.658'. [ 202.487786][ T8479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.519635][ T8477] netlink: 36 bytes leftover after parsing attributes in process `syz.1.658'. [ 202.525256][ T8479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.030540][ T5862] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 203.160207][ T8495] /dev/rnullb0: Can't open blockdev [ 203.215773][ T8497] /dev/rnullb0: Can't open blockdev [ 203.230436][ T5855] Bluetooth: hci3: command 0x0405 tx timeout [ 203.236527][ T5862] usb 3-1: Using ep0 maxpacket: 32 [ 203.268327][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 203.290265][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.370475][ T5862] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 203.379543][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.423206][ T5862] usb 3-1: Product: syz [ 203.427401][ T5862] usb 3-1: Manufacturer: syz [ 203.450441][ T5862] usb 3-1: SerialNumber: syz [ 203.473156][ T5862] usb 3-1: config 0 descriptor?? [ 203.556823][ T5862] keyspan 3-1:0.0: Keyspan 1 port adapter converter detected [ 203.595659][ T5862] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 203.625218][ T5862] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 203.677651][ T8507] netlink: 763 bytes leftover after parsing attributes in process `syz.3.666'. [ 203.682962][ T5862] keyspan 3-1:0.0: unsupported endpoint type 0 [ 203.732684][ T5862] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 203.840442][ T5862] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 203.848108][ T5862] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 203.890924][ T5862] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 203.922416][ T5862] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 204.103667][ T5937] usb 3-1: USB disconnect, device number 56 [ 204.142593][ T5937] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 204.172042][ T5937] keyspan 3-1:0.0: device disconnected [ 205.430691][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 205.449681][ T8539] netlink: 42496 bytes leftover after parsing attributes in process `syz.3.677'. [ 205.594655][ T24] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 205.603992][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.623435][ T24] usb 2-1: Product: syz [ 205.639032][ T24] usb 2-1: Manufacturer: syz [ 205.647034][ T24] usb 2-1: SerialNumber: syz [ 205.659038][ T24] usb 2-1: config 0 descriptor?? [ 205.668879][ T24] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 205.777392][ T8544] kvm: emulating exchange as write [ 205.783231][ T8544] /dev/rnullb0: Can't open blockdev [ 205.979500][ T8550] fuseblk: Bad value for 'group_id' [ 205.988940][ T8550] fuseblk: Bad value for 'group_id' [ 206.144754][ T8557] /dev/rnullb0: Can't open blockdev [ 206.236757][ T8561] fuseblk: Unknown parameter 'fRsuNkEx*d' [ 206.384748][ T8566] /dev/rnullb0: Can't open blockdev [ 206.605455][ T8576] /dev/rnullb0: Can't open blockdev [ 206.660616][ T5860] Bluetooth: hci0: command 0x0406 tx timeout [ 206.661087][ T51] Bluetooth: hci3: command 0x0405 tx timeout [ 206.666749][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 206.798305][ T24] gspca_sunplus: reg_r err -71 [ 206.807193][ T24] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 206.830707][ T24] usb 2-1: USB disconnect, device number 59 [ 206.850393][ T1590] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 207.012443][ T1590] usb 3-1: Using ep0 maxpacket: 16 [ 207.034578][ T1590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.053382][ T1590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.084482][ T1590] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 207.102881][ T1590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.131239][ T1590] usb 3-1: config 0 descriptor?? [ 207.173464][ T8587] netlink: 'syz.1.693': attribute type 10 has an invalid length. [ 207.212998][ T8587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.693'. [ 207.329171][ T8590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.340725][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 207.346253][ T8590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.369578][ T8586] netlink: 36 bytes leftover after parsing attributes in process `syz.1.693'. [ 207.400177][ T8590] /dev/rnullb0: Can't open blockdev [ 207.492900][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 207.515657][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 207.533790][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 207.545652][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.551961][ T1590] usbhid 3-1:0.0: can't add hid device: -71 [ 207.561708][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.575505][ T1590] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 207.597452][ T1590] usb 3-1: USB disconnect, device number 57 [ 207.640523][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.651826][ T24] usb 4-1: config 0 descriptor?? [ 208.044388][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.053565][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.078310][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.102266][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.109688][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.118729][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.137609][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.158653][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.168955][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.183007][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.225002][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.253316][ T5862] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 208.262054][ T24] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 208.267750][ T8606] /dev/rnullb0: Can't open blockdev [ 208.283915][ T24] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 208.406634][ T5937] usb 4-1: USB disconnect, device number 37 [ 208.426896][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 208.440568][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83 [ 208.470371][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 208.482254][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 208.495561][ T5862] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 208.505494][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.513839][ T5862] usb 2-1: Product: syz [ 208.518239][ T5862] usb 2-1: Manufacturer: syz [ 208.523318][ T5862] usb 2-1: SerialNumber: syz [ 208.536218][ T5862] usb 2-1: config 0 descriptor?? [ 208.544514][ T5862] radioshark2 2-1:0.0: Invalid radioSHARK2 device [ 208.551606][ T5862] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22 [ 208.748381][ T8597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.772393][ T8597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.774485][ T8614] /dev/rnullb0: Can't open blockdev [ 208.831081][ T1590] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 208.863744][ T5862] usb 2-1: USB disconnect, device number 60 [ 208.952500][ T8619] syz.4.704: attempt to access beyond end of device [ 208.952500][ T8619] nbd4: rw=0, sector=1, nr_sectors = 1 limit=0 [ 208.968266][ T8619] qnx4: unable to read the superblock [ 209.025413][ T1590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.046880][ T1590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.058141][ T1590] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 209.072553][ T1590] usb 3-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 209.082218][ T1590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.120864][ T1590] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 209.121588][ T8625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.705'. [ 209.133870][ T1590] usb 3-1: no configuration chosen from 1 choice [ 209.249717][ T30] audit: type=1107 audit(1751830973.065:17): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='d' [ 209.540494][ T1590] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 209.615403][ T8643] /dev/rnullb0: Can't open blockdev [ 209.690483][ T1590] usb 4-1: Using ep0 maxpacket: 16 [ 209.710693][ T1590] usb 4-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 209.722925][ T1590] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.746662][ T1590] usb 4-1: Product: syz [ 209.756819][ T1590] usb 4-1: Manufacturer: syz [ 209.766912][ T1590] usb 4-1: SerialNumber: syz [ 209.779958][ T1590] usb 4-1: config 0 descriptor?? [ 209.799043][ T1590] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 209.817454][ T8649] binder: 8648:8649 ioctl c00c620f 2000000000c0 returned -22 [ 209.978032][ T8653] netlink: 16 bytes leftover after parsing attributes in process `syz.1.715'. [ 210.100562][ T5858] Bluetooth: hci1: command tx timeout [ 210.237263][ T1590] gspca_sn9c2028: read1 error -71 [ 210.248645][ T1590] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 210.263192][ T1590] usb 4-1: USB disconnect, device number 38 [ 210.781587][ T8664] /dev/rnullb0: Can't open blockdev [ 210.973179][ T8671] /dev/rnullb0: Can't open blockdev [ 210.982537][ T8667] netlink: 16 bytes leftover after parsing attributes in process `syz.4.717'. [ 211.247679][ T8679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.275657][ T8679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.480444][ T24] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 211.595885][ T1210] usb 3-1: USB disconnect, device number 58 [ 211.640428][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.649153][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.666400][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 211.675884][ T24] usb 2-1: config 1 has no interface number 1 [ 211.695061][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 211.709648][ T24] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.726813][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.737404][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.746321][ T24] usb 2-1: Product: syz [ 211.750568][ T24] usb 2-1: Manufacturer: syz [ 211.755482][ T24] usb 2-1: SerialNumber: syz [ 211.824287][ T8668] block nbd3: shutting down sockets [ 212.008154][ T8682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.028394][ T8682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.052772][ T24] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 212.060233][ T24] usb 2-1: MIDIStreaming interface descriptor not found [ 212.176082][ T24] usb 2-1: USB disconnect, device number 61 [ 212.506704][ T8712] /dev/rnullb0: Can't open blockdev [ 212.672198][ T8720] /dev/rnullb0: Can't open blockdev [ 212.744582][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 212.912676][ T8732] netlink: 40 bytes leftover after parsing attributes in process `syz.1.732'. [ 212.926724][ T8733] /dev/rnullb0: Can't open blockdev [ 212.993579][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 213.080591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 213.120613][ T5862] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 213.162986][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.176307][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 213.188091][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 213.198478][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.213112][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.222506][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.233556][ T24] usb 4-1: config 0 descriptor?? [ 213.293856][ T5862] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 213.303835][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.313032][ T5862] usb 3-1: Product: syz [ 213.317224][ T5862] usb 3-1: Manufacturer: syz [ 213.321892][ T5862] usb 3-1: SerialNumber: syz [ 213.335257][ T5862] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 213.355731][ T1210] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 213.370487][ T43] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 213.520364][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 213.528520][ T43] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 213.536907][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.547394][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.557294][ T43] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.567396][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.580511][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 213.589677][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.596442][ T1590] usb 3-1: USB disconnect, device number 59 [ 213.659319][ T24] hid_parser_main: 5 callbacks suppressed [ 213.659461][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.675194][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.683095][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.699062][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.707430][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.714910][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.722404][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.729829][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.740293][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.748479][ T24] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 213.767547][ T24] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 213.830117][ T43] usb 2-1: usb_control_msg returned -32 [ 213.836313][ T43] usbtmc 2-1:16.0: can't read capabilities [ 214.098130][ T8751] : renamed from bridge_slave_1 (while UP) [ 214.180933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 214.336830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 214.353673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 214.430492][ T1210] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 214.447970][ T1210] ath9k_htc: Failed to initialize the device [ 214.460233][ T1590] usb 3-1: ath9k_htc: USB layer deinitialized [ 214.488188][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 214.565152][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 214.576224][ T8763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 214.643863][ T8767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.654372][ T8767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.770536][ T1590] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 214.923787][ T1590] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 214.932471][ T1590] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.945639][ T1590] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 214.955274][ T1590] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 214.966383][ T1590] usb 3-1: Manufacturer: syz [ 214.974033][ T1590] usb 3-1: config 0 descriptor?? [ 215.033255][ T1590] rc_core: IR keymap rc-hauppauge not found [ 215.040647][ T1590] Registered IR keymap rc-empty [ 215.046680][ T1590] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 215.062281][ T1590] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 215.131073][ T5937] usb 4-1: reset high-speed USB device number 39 using dummy_hcd [ 215.200919][ T1590] usb 3-1: USB disconnect, device number 60 [ 215.435755][ T8778] process 'syz.4.745' launched '/dev/fd/7' with NULL argv: empty string added [ 215.621778][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 215.630843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 215.639872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 215.648490][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 215.838375][ T8786] netlink: 'syz.3.747': attribute type 11 has an invalid length. [ 215.887938][ T8787] sp0: Synchronizing with TNC [ 216.181633][ T10] usb 2-1: USB disconnect, device number 62 [ 216.391970][ T8801] /dev/rnullb0: Can't open blockdev [ 216.645137][ T30] audit: type=1326 audit(1751830980.465:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8807 comm="syz.1.754" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5b698e929 code=0x0 [ 216.693715][ T8812] /dev/rnullb0: Can't open blockdev [ 216.758792][ T8815] /dev/rnullb0: Can't open blockdev [ 216.760772][ T5937] usb 4-1: device descriptor read/64, error -71 [ 216.795184][ T8817] /dev/rnullb0: Can't open blockdev [ 217.030449][ T5937] usb 4-1: reset high-speed USB device number 39 using dummy_hcd [ 217.064621][ T8831] syz.4.760: attempt to access beyond end of device [ 217.064621][ T8831] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 217.078441][ T8831] gfs2: error -5 reading superblock [ 217.106292][ T30] audit: type=1326 audit(1751830980.925:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.2.757" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb913d8e929 code=0x0 [ 217.169347][ T8817] RDS: rds_bind could not find a transport for ::ffff:172.30.1.3, load rds_tcp or rds_rdma? [ 217.203751][ T5937] usb 4-1: device firmware changed [ 217.217661][ T5906] usb 4-1: USB disconnect, device number 39 [ 217.390555][ T5906] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 217.552436][ T5906] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.562759][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.587972][ T5906] usb 4-1: config 0 descriptor?? [ 217.615566][ T5906] cp210x 4-1:0.0: cp210x converter detected [ 217.831342][ T5906] usb 4-1: cp210x converter now attached to ttyUSB0 [ 218.023552][ T8844] overlay: Unknown parameter 'smackfstransmute' [ 218.062980][ T8846] overlay: Unknown parameter 'smackfstransmute' [ 218.098618][ T1590] usb 4-1: USB disconnect, device number 40 [ 218.126524][ T1590] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.146548][ T1590] cp210x 4-1:0.0: device disconnected [ 218.273406][ T8852] /dev/rnullb0: Can't open blockdev [ 218.667218][ T8860] tipc: Enabling of bearer rejected, failed to enable media [ 218.964098][ T8865] /dev/rnullb0: Can't open blockdev [ 219.165819][ T8873] netlink: 60 bytes leftover after parsing attributes in process `syz.4.769'. [ 219.194429][ T8873] unsupported nlmsg_type 40 [ 219.268604][ T8875] syz.3.773: attempt to access beyond end of device [ 219.268604][ T8875] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 219.296437][ T8875] syz.3.773: attempt to access beyond end of device [ 219.296437][ T8875] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 219.315735][ T8877] /dev/rnullb0: Can't open blockdev [ 219.786092][ T64] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 219.817557][ T8892] /dev/rnullb0: Can't open blockdev [ 220.071920][ T8900] CUSE: info not properly terminated [ 220.258220][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.311358][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.378173][ T8909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.432333][ T8909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.580771][ T8917] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 221.020596][ T43] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 221.190531][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 221.197644][ T43] usb 3-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 1023 [ 221.221383][ T43] usb 3-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 221.242006][ T43] usb 3-1: config 1 interface 0 has no altsetting 0 [ 221.261735][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.280381][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 221.288837][ T43] usb 3-1: SerialNumber: syz [ 221.325687][ T8926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.365481][ T8945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.390974][ T8945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.444578][ T8945] /dev/rnullb0: Can't open blockdev [ 221.547235][ T8926] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.708252][ T8953] /dev/rnullb0: Can't open blockdev [ 221.846640][ T8955] /dev/rnullb0: Can't open blockdev [ 221.976625][ T43] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 222.137882][ T8964] /dev/rnullb0: Can't open blockdev [ 222.184266][ T1210] usb 3-1: USB disconnect, device number 61 [ 222.370961][ T43] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 222.550568][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 222.565277][ T43] usb 2-1: config 1 interface 0 altsetting 9 endpoint 0x82 has invalid wMaxPacketSize 0 [ 222.580876][ T43] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 0 [ 222.610364][ T43] usb 2-1: config 1 interface 0 altsetting 9 bulk endpoint 0x3 has invalid maxpacket 991 [ 222.620838][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 222.631111][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 222.640171][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.680395][ T43] usb 2-1: Product: ␉ [ 222.684601][ T43] usb 2-1: Manufacturer: 컆싓铠䴵䃕윛츂ꥊo苽ᗮ뜥鎒稾䧌긠ᙋ [ 222.709458][ T43] usb 2-1: SerialNumber: 䐊 [ 222.723950][ T8963] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.867532][ T9001] /dev/rnullb0: Can't open blockdev [ 222.930421][ T1590] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 222.970147][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.981200][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.989052][ T9005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.003393][ T9005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.016169][ T9005] netlink: 'syz.4.802': attribute type 5 has an invalid length. [ 223.024623][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 223.039390][ T9005] netlink: 40 bytes leftover after parsing attributes in process `syz.4.802'. [ 223.052015][ T9005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.802'. [ 223.062564][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.081736][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.102909][ T1590] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 223.115187][ T9008] kAFS: unparsable volume name [ 223.128972][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.145219][ T1590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 223.157865][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.174409][ T1590] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 223.186800][ T8963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.195781][ T8963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.214317][ T1590] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 223.234615][ T43] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 223.235516][ T1590] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 223.257752][ T1590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.274013][ T1590] usb 4-1: config 0 descriptor?? [ 223.291536][ T43] usb 2-1: USB disconnect, device number 63 [ 223.732796][ T1590] hid_parser_main: 5 callbacks suppressed [ 223.732820][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.770539][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.777988][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.819665][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.820452][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.856365][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.861107][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.896622][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.897091][ T9016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.912092][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.915498][ T9016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.964801][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.985693][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 223.995490][ T1590] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 224.046475][ T1590] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 224.094461][ T1590] usb 4-1: USB disconnect, device number 41 [ 224.126117][ T9028] /dev/rnullb0: Can't open blockdev [ 224.179281][ T9025] fido_id[9025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 224.247603][ T9031] netlink: 201916 bytes leftover after parsing attributes in process `syz.1.809'. [ 224.437615][ T9038] /dev/rnullb0: Can't open blockdev [ 224.649325][ T9042] pimreg: entered allmulticast mode [ 224.705054][ T9046] /dev/rnullb0: Can't open blockdev [ 224.735064][ T9049] /dev/rnullb0: Can't open blockdev [ 224.744046][ T9048] /dev/rnullb0: Can't open blockdev [ 225.023817][ T9064] IPVS: set_ctl: invalid protocol: 0 172.30.0.2:20001 [ 225.048029][ T9065] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 225.286203][ T9077] /dev/rnullb0: Can't open blockdev [ 225.696611][ T9098] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 225.720804][ T9098] qnx6: wrong signature (magic) in superblock #1. [ 225.755838][ T9098] qnx6: unable to read the first superblock [ 225.780669][ T9097] netlink: 596 bytes leftover after parsing attributes in process `syz.2.828'. [ 225.803873][ T9096] netlink: 'syz.2.828': attribute type 29 has an invalid length. [ 225.963920][ T9104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.015516][ T9102] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 226.039754][ T9104] binfmt_misc: register: failed to install interpreter file ./cgroup [ 226.422077][ T9122] /dev/sg0: Can't lookup blockdev [ 226.770147][ T9142] /dev/rnullb0: Can't open blockdev [ 226.870285][ T9138] /dev/rnullb0: Can't open blockdev [ 227.185619][ T9151] /dev/rnullb0: Can't open blockdev [ 227.293341][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.302671][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.509444][ T9160] /dev/rnullb0: Can't open blockdev [ 227.782858][ T43] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 227.854896][ T9169] /dev/rnullb0: Can't open blockdev [ 227.942747][ T43] usb 4-1: config 0 has an invalid descriptor of length 116, skipping remainder of the config [ 227.954223][ T43] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 227.972762][ T43] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 227.983146][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.991510][ T43] usb 4-1: Product: syz [ 227.995781][ T43] usb 4-1: Manufacturer: syz [ 228.000881][ T43] usb 4-1: SerialNumber: syz [ 228.009513][ T43] usb 4-1: config 0 descriptor?? [ 228.054354][ T9171] binder: 9170:9171 ioctl c0306201 2000000001c0 returned -14 [ 228.063718][ T9171] binder: 9170:9171 ioctl c0306201 200000000c00 returned -14 [ 228.096998][ T9171] binder: 9170:9171 ioctl ae01 0 returned -22 [ 228.105301][ T9171] binder: 9170:9171 ioctl c0306201 200000000180 returned -14 [ 228.306202][ T9181] /dev/rnullb0: Can't open blockdev [ 228.320847][ T9182] fuse: Unknown parameter 'd' [ 228.572830][ T9165] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 228.579548][ T9165] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 228.605445][ T9165] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 228.620649][ T9165] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 228.631987][ T9165] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 228.643028][ T9165] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 228.653916][ T9165] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 228.679467][ T9165] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 228.688864][ T9185] netlink: 124 bytes leftover after parsing attributes in process `syz.4.854'. [ 228.965086][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.978688][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.083094][ T9199] /dev/rnullb0: Can't open blockdev [ 229.307654][ T9206] /dev/rnullb0: Can't open blockdev [ 229.403255][ T9207] /dev/rnullb0: Can't open blockdev [ 229.639801][ T9222] /dev/rnullb0: Can't open blockdev [ 229.650292][ T9222] /dev/rnullb0: Can't open blockdev [ 229.865727][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 229.890018][ T9231] /dev/rnullb0: Can't open blockdev [ 230.133875][ T9236] /dev/rnullb0: Can't open blockdev [ 230.408817][ T9243] /dev/rnullb0: Can't open blockdev [ 230.569074][ T1590] usb 4-1: USB disconnect, device number 42 [ 230.661282][ T5858] Bluetooth: hci1: command 0x0c1a tx timeout [ 230.661803][ T5855] Bluetooth: hci2: command 0x0406 tx timeout [ 230.675607][ T5856] Bluetooth: hci3: command 0x0405 tx timeout [ 230.780701][ T5862] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 230.800591][ T43] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 230.950199][ T9260] /dev/rnullb0: Can't open blockdev [ 230.957880][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 230.971354][ T9260] /dev/rnullb0: Can't open blockdev [ 230.972670][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 230.988365][ T9260] /dev/rnullb0: Can't open blockdev [ 230.992985][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.005109][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.005891][ T9260] /dev/rnullb0: Can't open blockdev [ 231.015956][ T5862] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 231.026138][ T9260] /dev/rnullb0: Can't open blockdev [ 231.031564][ T43] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 231.037135][ T9260] /dev/rnullb0: Can't open blockdev [ 231.048558][ T5862] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 231.056334][ T9260] /dev/rnullb0: Can't open blockdev [ 231.066624][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.069945][ T9260] /dev/rnullb0: Can't open blockdev [ 231.078933][ T5862] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.091476][ T9260] /dev/rnullb0: Can't open blockdev [ 231.093230][ T43] usb 2-1: config 0 descriptor?? [ 231.097849][ T9260] /dev/rnullb0: Can't open blockdev [ 231.102421][ T5862] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.124728][ T5862] usb 3-1: config 0 descriptor?? [ 231.128605][ T9260] /dev/rnullb0: Can't open blockdev [ 231.136531][ T9260] /dev/rnullb0: Can't open blockdev [ 231.146411][ T9260] /dev/rnullb0: Can't open blockdev [ 231.156061][ T9260] /dev/rnullb0: Can't open blockdev [ 231.167007][ T9260] /dev/rnullb0: Can't open blockdev [ 231.172981][ T9260] /dev/rnullb0: Can't open blockdev [ 231.178800][ T9260] /dev/rnullb0: Can't open blockdev [ 231.185862][ T9260] /dev/rnullb0: Can't open blockdev [ 231.191956][ T9260] /dev/rnullb0: Can't open blockdev [ 231.197935][ T9260] /dev/rnullb0: Can't open blockdev [ 231.205701][ T9260] /dev/rnullb0: Can't open blockdev [ 231.211981][ T9260] /dev/rnullb0: Can't open blockdev [ 231.219566][ T9260] /dev/rnullb0: Can't open blockdev [ 231.227398][ T9260] /dev/rnullb0: Can't open blockdev [ 231.234163][ T9260] /dev/rnullb0: Can't open blockdev [ 231.240013][ T9260] /dev/rnullb0: Can't open blockdev [ 231.246566][ T9260] /dev/rnullb0: Can't open blockdev [ 231.253193][ T9260] /dev/rnullb0: Can't open blockdev [ 231.259085][ T9260] /dev/rnullb0: Can't open blockdev [ 231.265144][ T9260] /dev/rnullb0: Can't open blockdev [ 231.274654][ T9260] /dev/rnullb0: Can't open blockdev [ 231.280748][ T9260] /dev/rnullb0: Can't open blockdev [ 231.287283][ T9260] /dev/rnullb0: Can't open blockdev [ 231.471100][ T9264] kvm: MWAIT instruction emulated as NOP! [ 231.528542][ T43] hid_parser_main: 5 callbacks suppressed [ 231.528585][ T43] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 231.552422][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 231.560097][ T43] cm6533_jd 0003:0D8C:0022.0012: unknown main item tag 0x0 [ 231.567823][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 231.579814][ T43] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0012/input/input19 [ 231.594426][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 231.621369][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 231.648610][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 231.664074][ T43] cm6533_jd 0003:0D8C:0022.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 231.687685][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 231.701868][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 231.714579][ T5862] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 231.770857][ T5862] plantronics 0003:047F:FFFF.0013: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 231.793711][ T43] usb 2-1: USB disconnect, device number 64 [ 231.880534][ T1590] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 231.899009][ T5862] usb 3-1: USB disconnect, device number 62 [ 231.910273][ T9268] fido_id[9268]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 231.942729][ T5856] Bluetooth: hci0: command 0x0406 tx timeout [ 232.000210][ T9270] fido_id[9270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 232.090521][ T1590] usb 4-1: Using ep0 maxpacket: 32 [ 232.099886][ T1590] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 232.111645][ T1590] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.129080][ T1590] usb 4-1: config 0 descriptor?? [ 232.137746][ T1590] gspca_main: sunplus-2.14.0 probing 041e:400b [ 232.143341][ T9275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 232.541948][ T9267] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.558575][ T9267] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.567261][ T9284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.573216][ T9267] /dev/rnullb0: Can't open blockdev [ 232.586995][ T9284] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.595310][ T1590] gspca_sunplus: reg_w_riv err -71 [ 232.601291][ T1590] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 232.613843][ T1590] usb 4-1: USB disconnect, device number 43 [ 232.661407][ T43] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 232.743470][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 232.749525][ T5856] Bluetooth: hci2: command 0x0406 tx timeout [ 232.768011][ T9290] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 232.779904][ T9290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.789781][ T9290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.797678][ T5862] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 232.820747][ T5856] Bluetooth: hci0: unexpected cc 0x0402 length: 4 > 1 [ 232.827657][ T5856] Bluetooth: hci0: unexpected event for opcode 0x0402 [ 232.835563][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 232.844175][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.854601][ T43] usb 2-1: config 3 has an invalid interface number: 220 but max is 0 [ 232.863676][ T43] usb 2-1: config 3 has no interface number 0 [ 232.869837][ T43] usb 2-1: config 3 interface 220 has no altsetting 0 [ 232.880112][ T43] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=f6.e8 [ 232.889577][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.897787][ T43] usb 2-1: Product: syz [ 232.902419][ T43] usb 2-1: Manufacturer: syz [ 232.907043][ T43] usb 2-1: SerialNumber: syz [ 233.009506][ T30] audit: type=1800 audit(1751830996.825:20): pid=9292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.886" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 233.112700][ T9267] Process accounting resumed [ 233.121160][ T9279] /dev/rnullb0: Can't open blockdev [ 233.430491][ T5906] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 233.479970][ T9296] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.488383][ T9296] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.622818][ T5906] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 233.655604][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.692712][ T5906] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 233.702122][ T9299] netlink: 'syz.4.889': attribute type 4 has an invalid length. [ 233.709835][ T9299] netlink: 17 bytes leftover after parsing attributes in process `syz.4.889'. [ 233.709891][ T5906] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 233.745474][ T43] comedi comedi5: Wrong number of endpoints [ 233.771737][ T43] dt9812 2-1:3.220: driver 'dt9812' failed to auto-configure device. [ 233.786621][ T5906] usb 4-1: Manufacturer: syz [ 233.791848][ T9303] sock: sock_timestamping_bind_phc: sock not bind to device [ 233.801540][ T9303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.807837][ T5906] usb 4-1: config 0 descriptor?? [ 233.825389][ T43] usb 2-1: USB disconnect, device number 65 [ 233.845006][ T9303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.887308][ T9305] overlay: Unknown parameter 'subj_type' [ 233.955179][ T5906] rc_core: IR keymap rc-hauppauge not found [ 233.975131][ T5906] Registered IR keymap rc-empty [ 233.985039][ T5906] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 233.999451][ T5906] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input20 [ 234.051313][ T9294] ./file0: Can't lookup blockdev [ 234.077214][ T24] usb 4-1: USB disconnect, device number 44 [ 234.347443][ T43] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 234.421354][ T9322] netlink: 'syz.1.898': attribute type 21 has an invalid length. [ 234.429436][ T9322] netlink: 'syz.1.898': attribute type 13 has an invalid length. [ 234.437585][ T9322] netlink: 160 bytes leftover after parsing attributes in process `syz.1.898'. [ 234.449237][ T9322] /dev/rnullb0: Can't open blockdev [ 234.510716][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 234.522948][ T43] usb 3-1: config 0 interface 0 has no altsetting 0 [ 234.537096][ T43] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 234.547844][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.557958][ T43] usb 3-1: Product: syz [ 234.563416][ T43] usb 3-1: Manufacturer: syz [ 234.568521][ T43] usb 3-1: SerialNumber: syz [ 234.579639][ T43] usb 3-1: config 0 descriptor?? [ 234.834972][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 234.935743][ T9340] /dev/rnullb0: Can't open blockdev [ 234.953845][ T9338] /dev/rnullb0: Can't open blockdev [ 234.994165][ T43] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 235.078054][ T9351] netlink: 60 bytes leftover after parsing attributes in process `syz.1.907'. [ 235.090584][ T9350] syz.4.908: attempt to access beyond end of device [ 235.090584][ T9350] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 235.105481][ T9350] SQUASHFS error: Failed to read block 0x0: -5 [ 235.110891][ T9348] netlink: 60 bytes leftover after parsing attributes in process `syz.1.907'. [ 235.114098][ T9350] unable to read squashfs_super_block [ 235.223922][ T9355] /dev/rnullb0: Can't open blockdev [ 235.256080][ T9357] /dev/rnullb0: Can't open blockdev [ 235.405132][ T43] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 235.540511][ T24] usb 2-1: new full-speed USB device number 66 using dummy_hcd [ 235.577471][ T9362] /dev/rnullb0: Can't open blockdev [ 235.637594][ T43] usb 3-1: USB disconnect, device number 64 [ 235.716311][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 235.737846][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 235.755703][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.777198][ T24] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 235.794195][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.802157][ T9368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.804892][ T24] usb 2-1: Product: syz [ 235.827788][ T24] usb 2-1: Manufacturer: syz [ 235.836308][ T9368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.845744][ T24] usb 2-1: SerialNumber: syz [ 235.867878][ T9359] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 236.006844][ T9375] [ 236.009776][ T9375] ============================= [ 236.014913][ T9375] WARNING: suspicious RCU usage [ 236.019994][ T9375] 6.16.0-rc4-next-20250704-syzkaller #0 Not tainted [ 236.026812][ T9375] ----------------------------- [ 236.031958][ T9375] fs/proc/proc_sysctl.c:934 suspicious rcu_dereference_check() usage! [ 236.040234][ T9375] [ 236.040234][ T9375] other info that might help us debug this: [ 236.040234][ T9375] [ 236.050541][ T9375] [ 236.050541][ T9375] rcu_scheduler_active = 2, debug_locks = 1 [ 236.058628][ T9375] 3 locks held by syz.3.916/9375: [ 236.063693][ T9375] #0: ffff88805d946428 (sb_writers#3){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 236.072964][ T9375] #1: ffff88805d57fc00 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: path_openat+0x8cb/0x3830 [ 236.083437][ T9375] #2: ffff8880533dd850 (&lockref->lock){+.+.}-{3:3}, at: d_alloc_parallel+0xbe4/0x15e0 [ 236.093279][ T9375] [ 236.093279][ T9375] stack backtrace: [ 236.099173][ T9375] CPU: 1 UID: 0 PID: 9375 Comm: syz.3.916 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 236.099188][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 236.099196][ T9375] Call Trace: [ 236.099200][ T9375] [ 236.099205][ T9375] dump_stack_lvl+0x189/0x250 [ 236.099226][ T9375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.099240][ T9375] ? __pfx__printk+0x10/0x10 [ 236.099262][ T9375] lockdep_rcu_suspicious+0x140/0x1d0 [ 236.099282][ T9375] proc_sys_compare+0x27d/0x2c0 [ 236.099297][ T9375] ? __pfx_proc_sys_compare+0x10/0x10 [ 236.099313][ T9375] d_alloc_parallel+0x1060/0x15e0 [ 236.099333][ T9375] ? d_alloc_parallel+0x2f0/0x15e0 [ 236.099351][ T9375] ? __pfx_d_alloc_parallel+0x10/0x10 [ 236.099364][ T9375] ? __pfx_default_wake_function+0x10/0x10 [ 236.099384][ T9375] path_openat+0xa3b/0x3830 [ 236.099397][ T9375] ? arch_stack_walk+0xfc/0x150 [ 236.099429][ T9375] ? __pfx_path_openat+0x10/0x10 [ 236.099442][ T9375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.099464][ T9375] do_filp_open+0x1fa/0x410 [ 236.099477][ T9375] ? __lock_acquire+0xab9/0xd20 [ 236.099489][ T9375] ? __pfx_do_filp_open+0x10/0x10 [ 236.099519][ T9375] ? _raw_spin_unlock+0x28/0x50 [ 236.099534][ T9375] ? alloc_fd+0x64c/0x6c0 [ 236.099551][ T9375] do_sys_openat2+0x121/0x1c0 [ 236.099564][ T9375] ? __se_sys_futex+0x36f/0x400 [ 236.099580][ T9375] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.099594][ T9375] ? __pfx___se_sys_futex+0x10/0x10 [ 236.099607][ T9375] ? fd_install+0x30d/0x540 [ 236.099621][ T9375] __x64_sys_openat+0x138/0x170 [ 236.099637][ T9375] do_syscall_64+0xfa/0x3b0 [ 236.099648][ T9375] ? lockdep_hardirqs_on+0x9c/0x150 [ 236.099658][ T9375] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.099668][ T9375] ? clear_bhb_loop+0x60/0xb0 [ 236.099680][ T9375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.099690][ T9375] RIP: 0033:0x7fc1d098e929 [ 236.099707][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.099715][ T9375] RSP: 002b:00007fc1d1812038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 236.099726][ T9375] RAX: ffffffffffffffda RBX: 00007fc1d0bb5fa0 RCX: 00007fc1d098e929 [ 236.099734][ T9375] RDX: 0000000000000002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 236.099741][ T9375] RBP: 00007fc1d0a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 236.099748][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.099753][ T9375] R13: 0000000000000000 R14: 00007fc1d0bb5fa0 R15: 00007ffcffeda3b8 [ 236.099769][ T9375] [ 236.353242][ C1] vkms_vblank_simulate: vblank timer overrun [ 236.369812][ T9359] /dev/rnullb0: Can't open blockdev [ 236.372449][ T9378] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 8388612, id = 0 [ 236.392926][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 236.398976][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 236.425151][ T24] usb 2-1: USB disconnect, device number 66