last executing test programs: 4m24.819876152s ago: executing program 1 (id=1182): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xc3a51000) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000440)={0x40, 0x18, 0x1, "8e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xc3a51000) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r2, &(0x7f0000000580)=ANY=[], 0xfe33) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) 4m23.615747246s ago: executing program 1 (id=1188): r0 = socket(0x840000000002, 0x3, 0xff) shutdown(r0, 0x1) (async) sendmmsg$inet(r0, &(0x7f0000000280)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000240)="00000000e5c06417e58f2aaa43f325e4ae709296", 0x14}], 0x1}}], 0x1, 0x20004086) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r2 = socket$kcm(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000002240)={@val={0x8, 0x800}, @val={0x4, 0x0, 0x2, 0x0, 0x14, 0x5}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x28, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @rand_addr=0x64010102}, {{0x4e20, 0x4e28, 0x41424344, 0x41424344, 0x1, 0x0, 0x8, 0x10, 0x1, 0x0, 0x8, {[@timestamp={0x8, 0xa, 0xe, 0xbb}]}}}}}, 0x42) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x12, r3, 0x910d0000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) 4m23.189139345s ago: executing program 1 (id=1190): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010122, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x7aba, 0x4) 4m22.154102421s ago: executing program 1 (id=1201): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x204) mknodat$null(r0, &(0x7f00000000c0)='./cgroup\x00', 0x10, 0x103) statx(r0, &(0x7f0000000100)='./cgroup\x00', 0x5100, 0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000602, r1, &(0x7f00000001c0)={0x8, 0x3, 0x0, 0x7}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x20000, 0xe2) 4m21.894847753s ago: executing program 1 (id=1202): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xf7, 0x51, 0xae, 0x40, 0x451, 0x3410, 0xef1e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xaa, 0xf, 0x60, 0x0, [], [{{0x9, 0x5, 0x4, 0x2}}, {{0x9, 0x5, 0x82, 0x2}}]}}]}}]}}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 4m21.411780259s ago: executing program 1 (id=1203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r2, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) recvfrom(r2, 0x0, 0x0, 0x40, 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000040)) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/freeze_filesystems', 0x0, 0x0) read$nci(r5, &(0x7f0000000680)=""/88, 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) socket(0x23, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='bridge_slave_1\x00') mount(&(0x7f0000000180)=@nullb, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)='tmpfs\x00', 0x16a810, 0x0) 4m21.065505114s ago: executing program 32 (id=1203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r2, &(0x7f0000000b80)="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", 0x587, 0x0, &(0x7f0000000180)={0xa, 0x5e64, 0x100000, @mcast2, 0x4}, 0x1c) recvfrom(r2, 0x0, 0x0, 0x40, 0x0, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x2, 0x0, &(0x7f0000000040)) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000700)='/sys/power/freeze_filesystems', 0x0, 0x0) read$nci(r5, &(0x7f0000000680)=""/88, 0x58) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_nofollow}]}) socket(0x23, 0x5, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0xac) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f00000000c0)='bridge_slave_1\x00') mount(&(0x7f0000000180)=@nullb, &(0x7f0000000140)='./bus\x00', &(0x7f0000000280)='tmpfs\x00', 0x16a810, 0x0) 2m45.551799826s ago: executing program 0 (id=1808): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) socket(0x22, 0xa, 0x5) (async, rerun: 64) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) (rerun: 64) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc05c5340, &(0x7f0000000180)={0xb586}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) 2m45.252469931s ago: executing program 0 (id=1810): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r1, 0x2285, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x40}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"01fbf5ab5e256df932bde953"}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x2}, @connect={{0x80}, {0x0, 0x5}}}], 0xc4) write$sndseq(r2, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @result}, {0x0, 0x8, 0x0, 0x0, @tick, {}, {}, @result={0x1, 0x7ff}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x9, 0x0, 0x0, 0x0, @tick, {}, {}, @time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0xc4) write$sndseq(r2, &(0x7f0000000a40)=[{0x0, 0x0, 0x0, 0x0, @time}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x2, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0x8c) writev(r1, &(0x7f0000000640)=[{&(0x7f00000000c0)="42f556f22691c26921bd8def6c0f6d745356878bba220eb3e29907bfcc70e5912fac408926dccc850bc7", 0x2a}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0xfffffffff1506c41, 0x400) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000040)=0xfffffffffffffffb) 2m44.203851888s ago: executing program 0 (id=1817): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) pwritev2(r0, &(0x7f0000001380)=[{&(0x7f0000000140)='\n', 0x1}], 0x1, 0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e1e, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x6}, 0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './cgroup\x00'}) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) 2m44.123831398s ago: executing program 0 (id=1819): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x4f451000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x2, 0x2010, 0x1000, 0x3ff, 0x6, 0x6, 0x0, 0x0, 0x80, 0x8000}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000100)={0x1, 0x0, 0x4, {0xc, @pix_mp={0x7, 0x0, 0x31364d59, 0x5, 0x3, [{0x17, 0x70a1}, {0x2}, {0x2, 0xd}, {0x1, 0x5}, {0x0, 0x2}, {0x7, 0x400}, {0x8, 0x5}, {0xffff8000, 0x5}], 0xfc, 0x2, 0x8, 0x2, 0x6}}, 0x26312aa8}) syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x1) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x4) sendfile(r3, r3, &(0x7f0000000000)=0x1, 0x4) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) 2m43.014201555s ago: executing program 0 (id=1825): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c000000000b010100000000000000000200000808000340000000010500010000000000080002"], 0x4c}, 0x1, 0x0, 0x0, 0x60004000}, 0x40010) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000080)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000002010100000a240100000202010207240504"], 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) (async) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000200), 0x40, 0x0) lseek(r1, 0xfff, 0x3) (async) write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x1, {0x2, 0x2, 0x8}}, 0x14) 2m41.652103408s ago: executing program 0 (id=1830): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f000093e000/0x2000)=nil, 0x2000, 0x3) 2m26.443084825s ago: executing program 33 (id=1830): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) mremap(&(0x7f0000d59000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000a91000/0x1000)=nil) (async, rerun: 32) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mprotect(&(0x7f000093e000/0x2000)=nil, 0x2000, 0x3) 47.079654164s ago: executing program 4 (id=2383): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="8de7926bddfb4aa02a3700ab2edef73cd804ac27aea278cf6e178733f74b42777441cb7cd06d8788018aaf21e10e2a2c17d19b030f57c09cebfeea1001d0b4e29a25ae84b57f67d9d8a72b5da0cc7a55aae11ba425e4d380d2d8d5d829e84c2f9d87b23dffacca0c893451ec2ba09d1c294fa5f8cd53c8510becd57a1d2fdfae238ca712b418c843b082bf654d25046fffcf7d6099e49e634c9fc5ec45b8c5e39bc0ff289807a7b19592d4dd6f3d", 0xae, 0x20000840, &(0x7f0000000140)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00', 0x9}, 0x1c) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 46.882030902s ago: executing program 4 (id=2385): mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='tracefs\x00', 0x1200051, 0x0) 46.664057929s ago: executing program 4 (id=2387): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f00000001c0)=0x1) 46.518598839s ago: executing program 4 (id=2389): r0 = syz_open_dev$video4linux(&(0x7f00000006c0), 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) sendto(r1, &(0x7f0000000080)="c1e4cc6753bc5dfbb4c5d1c7b911ca62bfdd3bb9f4a300060142faecdeee6870b61da7c382f6a56447bbb8535502bf6a0d70f6205c59d117c50323ecf87b024a4c5d16e8e574a8e5bb0ea49e0d28bc295263933bf9705acb1f715a9159e37dd7a4fdbcfda97a9c4cd6fdb7fa4f24db5210b4d49ee3c82a5a61addf3ea604", 0x7e, 0x4004084, &(0x7f0000000140)=@l2tp6={0xa, 0x0, 0xa3a, @loopback, 0x6, 0x4}, 0x80) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x1, 0x0, 0x0, 0x2000000}) fcntl$lock(r1, 0x6, &(0x7f0000000000)) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f0000000000)={0x7ff, 0x7}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 45.461190722s ago: executing program 4 (id=2392): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) r3 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sendfile(r1, r3, 0x0, 0x1) pivot_root(&(0x7f0000002240)='./file0/file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r4, 0x7dfff000) 44.407996576s ago: executing program 4 (id=2394): add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0xc62a, 0x6, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) (async) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x2, 0x4) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) 34.011784788s ago: executing program 2 (id=2444): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffc, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x78, 0x0, 0x4, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x4, 0x2000, 0x400000, r2, 0x0, 0x0, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) ioctl$KDDISABIO(r3, 0x4b37) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) ioprio_set$pid(0x2, 0x0, 0x0) 32.935759748s ago: executing program 2 (id=2450): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r2, 0x4b44, 0xffffffffffffffff) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x20000, 0x0, 0x0, 0x0, 0x0, "7e92ddc5a89047bf00"}) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="e854c758", @ANYRES16=r3, @ANYBLOB="0100290000000800140015000000050013000100"/30], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @loopback}}, 0x0, 0x3}, 0x90) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdf251e00000008000300", @ANYRES32=r10, @ANYBLOB="04002f80725958387d655612c87ee093db5e9f8f96565bb32711fe0a4bb7f11e25e7d1505b13"], 0x20}, 0x1, 0x0, 0x0, 0x20008041}, 0x0) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="100028bd7000fcdbdf250e0000000c00060003000000000000000c000600020000000200000008000e000100000008000300", @ANYRES32=r10, @ANYBLOB="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"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x4015) syz_open_dev$sg(&(0x7f0000001180), 0xf474, 0x4800) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f00000005c0), 0xc, &(0x7f0000000680)={&(0x7f00000008c0)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r6, @ANYRESDEC=r6, @ANYRES16=r1, @ANYBLOB="14002d80080003000400000005000400410000000c00060001000000010000000c00060003000000000000000c0006000200000002000000"], 0x74}, 0x1, 0x0, 0x0, 0x20004880}, 0x0) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r7, @ANYRES16=r11, @ANYBLOB="0193a2e89a00000000001fffffff04000180080002"], 0x20}}, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r14, 0x8188aea6, &(0x7f0000000e80)) r15 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r15, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e002900", 0x24}, {&(0x7f0000000080)="37eebf67e624ab8c623291", 0xb}], 0x2}, 0x0) r16 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2ea01769df94be0c, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="94010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x40855}, 0x4040844) sendfile(r1, r16, 0x0, 0x7ffff000) 32.259655246s ago: executing program 2 (id=2455): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6000002, 0x28011, r0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000001000000010000000000080008000100000303ff", 0x24) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x60081, 0x1cb) stat(&(0x7f00000009c0)='./file0/file0\x00', &(0x7f0000000a00)) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f00000000c0)={0x18, 0x0, 0x5, 0x0, &(0x7f0000000040)=[{0x7f, 0x1ff}, {0x9, 0x3}, {0x7, 0x8a}, {0x9, 0x101}, {0x4, 0x9}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0/file0\x00'}) r6 = syz_usb_connect(0x3, 0x91c, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x91, 0x23, 0x5c, 0x10, 0x3f0, 0x3016, 0x848c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90a, 0x3, 0xcb, 0xe, 0x0, 0xb, [{{0x9, 0x4, 0x3f, 0x6, 0xe, 0xd4, 0xbd, 0x89, 0x54, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0xc, 0x5}, {0x6, 0x24, 0x1a, 0x3}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x3}, @acm={0x4, 0x24, 0x2, 0x3}]}], [{{0x9, 0x5, 0x0, 0x10, 0x40, 0x5, 0x8, 0x1b, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x1, 0x8}, @generic={0x9, 0x22, "878e2d41c5c073"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0x9, 0x40, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9e, 0x10}]}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x6e, 0x32, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x3}]}}, {{0x9, 0x5, 0x7, 0x10, 0x208, 0x2, 0x3, 0x1, [@generic={0xa7, 0x0, "ecd4b317b7296fefaf25fa712aa2652be48f030d55ec2add6d5a0a271e733ba68b3f98d09077847901743d18dbbd1f71792ab18e033b2371affb89fd90e3312794bd79332ed6ef34ed410141682a58d26d76a7dcca920bd7bf78b54fb09881f0aba0390abe04f5b6b2f16883c5a49ee433490fe3ef109dee2b84d8cfd31ead3ecf70029d53edd508315bb9da06018c95c116b3b353088a47b76d77adb54022f1655fd553bb"}, @generic={0xe1, 0x0, "3966da052e013b3d88e98413422922c547541ae099b0ea96424f15b40a2db56892b80c5a3069d65f26578a9dc4693717c550f71fbdfe6498d4b92e458c435bdaa3caec890bdaa31539044e59c8355c41810e4d34fe306dfe25088a5743af02f58b0f39d6804b60811c96b3c4bb7f54f478c24be8636582dadbb3b3a48db659edec23860187ed17c68201d2207db57aa3980139b4adaa71e7e2c5d0bc4cf8fbe7176a862a4a9bb6f35d1d90c1af1447bde4ca75d34d36164d37921dca7b49313c7d21d91bfca5f92c3d4b7e9dbd1429e0a638edad8a3cd5426e2dfa86d0f387"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x400, 0x9, 0x4, 0x7, [@generic={0x2d, 0x7, "3baa08d6d67e6ce3855224eb73da9990fbbf876a241b8c8b042b3725114119dba80dda75aa0a8c57bdd1b5"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x8, 0x4, 0x7, 0x2, [@generic={0x8, 0xc, "f1fc4a8cba88"}]}}, {{0x9, 0x5, 0x5, 0xf, 0x20, 0x80, 0x8c, 0x1b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x82}]}}, {{0x9, 0x5, 0x2, 0x16, 0x8, 0x1, 0xc, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x1}, @generic={0x75, 0x30, "26b4ed6446aa516c35cc7d85ff2bea16fd9e5b836d1a8a51c86c843eae5111af897a0ad4a30255a95f0c5a96f848d7f6e64a41e19582619a37438c6e397e38742e09964d142c2a7a30b00ff4e560c71a787ddd13fef7625fee2c6fc9dc49b657dabfe69aab81879bbfb3d34eda810183c0f6aa"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x8, 0x2, 0x3, 0xf, [@generic={0x7, 0x9, "fb4b4f91dd"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x3ff}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0xcc, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x10, 0x6}, @generic={0xbb, 0x22, "48ffc4ca877b336f93063bb815d756c74ab192c3407ce0f2e46dbf03c0cc8fd54dad19d6ea43f6190608989cd02917679d6431b494f0865635b1b491b8a0fedb3a660f2a680923255fe5a0c74167c1cdd0f39048d8b8d264d49ce0777f2c13201fae602433a7262bc2b1044b057b0fb2fa6db71f57add4c9a8fbc8bd21ae1bd28de1eb729682b965babad39856e37e211a3f06fb84a4e0bcab8b97cd295779762f0d509a65b8cb4fb6b3b6ec139c35d4016a30d9ec46432f0b"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0xd8, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x7, 0x24a}]}}, {{0x9, 0x5, 0x0, 0x0, 0x200, 0x81, 0x9, 0x7, [@generic={0x86, 0x10, "66effb1ed516a8489afabd0570cee464f212d15d8782475c822075497e4e35e614ab1ce140f41ec81e71a0743acccc25bf5c08a710d4be3f1f093eb6a0286d5501823c3f2d7f4b0f74c711ef39c3dd3c1fc46a6524bc06a548e9a2c914510b11d9ab3435fc0bbf5200a2e198008452779e6892b0cc7be8c7ea3d1e8398ebc747564c2b3b"}]}}, {{0x9, 0x5, 0x9, 0x8, 0x200, 0x3, 0x9, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x20, 0x4a37}]}}, {{0x9, 0x5, 0x2, 0x8, 0x10, 0x4, 0x7f, 0x1, [@generic={0x13, 0x9, "34e7bfe05132771355e7ccac1eaf0eae9a"}, @generic={0x18, 0x7, "9d7dd58a9f353cc76df404bedf6e0a373d60fb80a8a3"}]}}]}}, {{0x9, 0x4, 0x8e, 0x6, 0x1, 0x39, 0x40, 0x4f, 0x5, [@cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "971cfdf39d84"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x7f, 0xffe, 0x6}, [@mbim_extended={0x8, 0x24, 0x1c, 0x6210, 0x3, 0x7}]}], [{{0x9, 0x5, 0x80, 0x10, 0x68, 0x1, 0xe, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xd3a}]}}]}}, {{0x9, 0x4, 0xe7, 0xc, 0x9, 0x23, 0x87, 0x2d, 0x6, [@generic={0x16, 0x4, "98ce67f910b3f1830b4f7f10f2c21dbcd0d1d393"}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "46cad04184"}, {0x5, 0x24, 0x0, 0x800}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1000, 0x3, 0xe}, [@mbim={0xc, 0x24, 0x1b, 0x80, 0x3, 0x6, 0x0, 0xb9d, 0xdc}, @country_functional={0x12, 0x24, 0x7, 0x4, 0x8, [0x9, 0x0, 0x9, 0x1, 0x6, 0x9]}, @country_functional={0x8, 0x24, 0x7, 0x9, 0x9, [0xc335]}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x9, 0x9}, @network_terminal={0x7, 0x24, 0xa, 0xa7, 0xfa, 0x6, 0x2}]}], [{{0x9, 0x5, 0xd, 0xc, 0x20, 0x0, 0x99, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xd, 0x9}]}}, {{0x9, 0x5, 0x2, 0x3, 0x40, 0x7f, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0x7f}]}}, {{0x9, 0x5, 0x0, 0x2, 0x200, 0x0, 0x8, 0x0, [@generic={0xb2, 0x23, "f4165c082bd5febb557ea5e41cf88ad37eeed51244360a2af7ac7e0501bf86a323ca1b2d503c7ee5ccaf4813d952c18e0f9d148bc3a0784efd0a8c927c32f504ddb4b891051491356db8c16cba4e31e1124815910d9123626abb995e314253510029935cde917f7e576e370baca5da66278293d1f8c7e9711e158b40a4d67d01006fcfdf7ee8349815e831f2ad6f690ddcc713b5d63547eb99e821819352776a70e8711aedddbeec7f6712bbe59ee42b"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x3032}]}}, {{0x9, 0x5, 0x45, 0x10, 0x10, 0x7, 0x81, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x8, 0x3}]}}, {{0x9, 0x5, 0xf, 0x0, 0x142d0e18e09bd912, 0x9, 0x5, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x9}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x1, 0x6, 0x4f, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x81}]}}, {{0x9, 0x5, 0xc, 0x3, 0x200, 0x5, 0x6, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x8, 0x7f, 0x3, [@generic={0xdf, 0x23, "1fb6ff11b01c10b8f5979b5796591622c6ee5e6c18bebcf561745cba55ee0fc4458001cb3a14e266dae54123a8b100bb19df0e4f3ce7450e1921e20eedf3c35e54622f5bbecd894c1c57f979fa7cceb972df905bc1eb1dec90f9b6c8b45cf3a40cd1cb82dfdfc159acad3eab0c15d00e8b6866377acd99ef4f624c4ca95a41534edf0923ceac52007101a0010b8bf80ad2a3b00755a128b1bac4eee0c763a797fda9afb9d6cc0dc3cc903ee7dd66b2e616154b5fedf66acc5423815ecc2948624a94b029322e32004d2089d518e7cd6a23a7b33d11ffa63bf78f69937d"}, @generic={0xe5, 0x23, "d0f68b20a844f9e394dc8f684c7f6d560a35ea3e0d616bfeffcab4fca0a58401aee86cb6d1f51e72905c389467a298fad19ea30a6d010b3f077403ff84daded32b7aa19446a076c53aa0e9546df45f10ef8ffe9face966c698da985e41a4273c9e7d3c71f02858f5955a514a8fc7820a551ea2bb26a5367879c5e66fded495e2e87f4b25ac528e885ef81022909aa9a7d9b1bc6b620287409474836d77a93b411ece7e700f209d8d652d1758e6ec5d46b44a47d05a0f7fcf7971fd11266aacd0d5b34469d3bbd9ce62c059a829c3018d1113f6b5e923f12b9722ebe7b540df44acf892"}]}}, {{0x9, 0x5, 0x1, 0x8, 0x20, 0x2, 0x7, 0x41, [@generic={0x95, 0xc, "0ec3d3464f28d9d108b04ac53bf8e89520060a798cc92fe945a72d6467c024d3225b36cd2fb81a134a47add81479a2c75bcf21e08a68bd08e00586d9ba9dc180cae7b1a6d3b6dc73c9b2a6488066a8a1815cdb03f7a2af735456571f5f0a3c1950fcad46a4cc5a211dfae5e524b49ca4ff57f4790749a1779f1b0e1439567e3b908f9b8bd5cd4bec549fdee1c08266a87d9822"}]}}]}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x2, 0x2, 0x2, 0xff, 0x2c}, 0x75, &(0x7f0000000280)={0x5, 0xf, 0x75, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x6, 0x9, 0x5, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x2, 0xf, 0x5, 0x5, 0x2}, @ssp_cap={0x24, 0x10, 0xa, 0x9, 0x6, 0x3172f53, 0x1e, 0x9, [0xf, 0x80df3f, 0x3fc0, 0xff000f, 0xffffcf, 0xc0c0]}, @generic={0x3a, 0x10, 0xb, "2761f92ce21d8177ab85836cc44d88de398b134c4313d8add007a30285a0c49fd8c8aa13a2eba20e12410a4c004973bc8d45004c83c185"}]}, 0x5, [{0x6c, &(0x7f0000000300)=@string={0x6c, 0x3, "14163ae7f08faf25ce2dd2295dc41d537b930bd622a67bd5c47b7f1225fe8a2ed97c5b0b57151f87c508f19fd8f5168468ae31e774bbefa2c13baffa7b734d0a7b2acddb88644f62b6d51004fbb3016fc0b10c28ff786a0b5d1ebdd3d7cfb76cc8d842a82e3e68b6e4a0"}}, {0x7d, &(0x7f0000000380)=@string={0x7d, 0x3, "987964e92617cb35dd0999318e2a78d813068f016cc831f4d43f02662bbc1431f3cc518e8579c0da5a809141d6770d7e6155adaaeea9565293989650e8df63025d9aa37dde7b165ae02ede563c1af19eb2c3a1cf1679b742bc2ca5f5aa6651ec2475d2be17c1d9cf037a88bd20791a5af8d8c31b6de7e975a56348"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x5c, &(0x7f0000000480)=@string={0x5c, 0x3, "85e853746ca96b9765aa58b3b9a9670f5dad130b8190db1f4d5a700d9e8c04f3f7fb6a57372cbdf06b634dba99dbdcbb1fad83a850b4151309e38eebe4adb60763fb5e7522b0d9898b6a261aa041556915d0b148c5ec40f51e8c"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44b}}]}) syz_usb_control_io$cdc_ncm(r6, &(0x7f0000000680)={0x14, &(0x7f00000005c0)={0x0, 0x30, 0x78, {0x78, 0x9, "b11c94a8710703cc1221c48a654a6420372a289e43902b939e28d7fcfc637c02d2869e7ea8bb828697cbb27e8a9001b6143ec548e9f55e381bbcf6e191e2c5a4daf2a0a056527e626650369a4105202c76927542900454d14bc0454f9f17ec78d71964158e56179cc457976db94be24c7f9de8814f11"}}, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x0, 0xd, 0xa0, "f12a60766205b29aa75fb0bf7ff99a41c8cb86f9c764073d012683a106fb2046533a4f02e62628dfe975c9c4946eba5c0a1c2cb65b45661f5c63831a493f6816e9d0265d286499583996f494c8eec1d9eb32ee6a4d7aa63bc30889c59c7b979dac3167a08bc926a216b19549adc698e03ed463b4fb32255e9bab4aa1b2f6e700ff96fbd176ca02935797696ced8716f110acf264e1a670774d49b0644b81ca6b"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000800)={0x20, 0x80, 0x1c, {0x6, 0x4, 0x4, 0x9, 0xfff8, 0x6, 0x4, 0x51, 0x0, 0x4, 0xfffc, 0x96}}, &(0x7f0000000840)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000880)={0x20, 0x83, 0x2}, &(0x7f00000008c0)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000000900)={0x20, 0x89, 0x2, 0x1}}) ioctl$HDIO_GETGEO(r5, 0x301, &(0x7f0000000180)) 29.304896241s ago: executing program 34 (id=2394): add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8900, 0x0) fadvise64(r0, 0xc62a, 0x6, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) (async) sendmmsg$inet6(r2, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='$'], 0x28}}], 0x1, 0x0) (async) recvfrom$inet6(r2, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x2, 0x4) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r0, 0x93771000) 27.950327291s ago: executing program 2 (id=2468): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x9) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x180148e, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x125f498, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000600)={0x2020}, 0x2020) write(r0, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000000008000f0001000000181fa198b0", 0x24) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 26.764550153s ago: executing program 2 (id=2471): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x3a) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r3, &(0x7f0000000240)={0x0, 0x2e}) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x81901) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="60050000", @ANYRES16=r7, @ANYBLOB="010026bd7400000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="0600cd00000000003b05330000a81000080211000001080211"], 0x560}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r8], 0x3c}}, 0x10) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7001ffdbdf251d00000008000300", @ANYRES32=r6, @ANYBLOB="08000300893ce493d46d45da8305236e69d4400300000000000000a298790c040d878153e171847b2e3b1e43d173bd8a3716e175ca3f3d308370fa27ed7f4f5ce9a6300ff174f5734e7b9a2b8e6f41e4", @ANYRES32=r10, @ANYBLOB="2c00238005000f0004000000080009008000000006001800ff7f00000800140094ffffff08000b000e0000000c0023800600190001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x24044081) socket$nl_generic(0x10, 0x3, 0x10) r11 = timerfd_create(0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TFD_IOC_SET_TICKS(r11, 0x40085400, &(0x7f00000002c0)=0xc6c) socket$igmp(0x2, 0x3, 0x2) r12 = socket$unix(0x1, 0x1, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r12, @ANYRES64=r2], 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 26.278388343s ago: executing program 2 (id=2474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1403, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 25.650303555s ago: executing program 35 (id=2474): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r1, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x1403, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x10000000}, 0x1) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 6.531063079s ago: executing program 3 (id=2530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x30, r1, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x3, 0x1, 0x0, 0x2000000}}}}, 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x1004) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r2, 0x92, 0x5, 0x3) unshare(0x28000600) r3 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r3, 0x0) fcntl$addseals(r3, 0x409, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r2, 0xa4717000) 5.823942929s ago: executing program 3 (id=2531): creat(&(0x7f0000001380)='./file0\x00', 0x12c) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 5.719681059s ago: executing program 3 (id=2532): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000240)=""/182, 0xb6}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0) 4.867007704s ago: executing program 3 (id=2533): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) close(0x3) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ext2\x00', 0x200000, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) pwritev(r2, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) dup3(r2, r0, 0x0) 4.525103548s ago: executing program 5 (id=2534): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffcc2}}]}}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x5}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) fstat(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r3, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x2, 0x844) r4 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x802) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$apparmor_current(r5, &(0x7f0000000340)=ANY=[@ANYBLOB='permprofile &&'], 0xff) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x24be, 0x8, 0x1, 0x0, 0x80}) setreuid(0x0, r2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000005600000066ba2100b066ee"], 0x56}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x280449c, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000440)=ANY=[]) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setresuid(0xee01, r10, r10) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) socket$inet_tcp(0x2, 0x1, 0x0) 2.596820156s ago: executing program 3 (id=2535): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0xe}, 0x1) (async) syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x20, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x6e80}, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @nested={0x4, 0x1}]}, 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) (async) sendmmsg$sock(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@txtime={{0x14, 0x1, 0x3d, 0x8}}], 0x14}}], 0x2, 0x20000000) (async) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x71) ioctl$KVM_CAP_VM_MOVE_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f00000001c0)={0xce, 0x0, r3}) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 2.580114264s ago: executing program 5 (id=2536): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000000100)=ANY=[@ANYBLOB="020403081d00000026bd7000fddbdf25050005006c0000000a004e210000000ffc0100000000000000000000000000010200000000000000050006009d6000000a004e210000000100000000000000000000ffffac1414aa090000000000000002000100000004d207042d03000000400f00180005026e00"], 0xe8}}, 0x8040) (async) r1 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000280)={0x7, @vbi={0x8, 0x7, 0x48000, 0x42303159, [0x3ff, 0x2], [0x5, 0xb4], 0x108}}) (async) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e060c"], 0x9) (async) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) (async) sendmsg$key(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000005180)={0x2, 0xa, 0x80, 0x2, 0x440, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_key={0x201, 0x8, 0x8000, 0x0, "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"}, @sadb_key={0x7, 0x9, 0x148, 0x0, "d9b8a62a4f03d02936f3d751c8014e7904f04e2d44f4c1a4103d23260340be4b7ab5bb2d0b44744dd0"}, @sadb_ident={0x2, 0xa, 0x1, 0x0, 0xfffffffffffff581}, @sadb_sa={0x2, 0x1, 0x4d5, 0x3, 0x0, 0xf, 0x3, 0x80000001}, @sadb_x_nat_t_type={0x1, 0x14, 0x40}, @sadb_sa={0x2, 0x1, 0x4d3, 0x9, 0x80, 0x94, 0x2, 0x1}, @sadb_ident={0x2, 0xb, 0x5, 0x0, 0x1ff}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e20, 0xfffffffe, @local, 0x7}, @in6={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0x1}}, @sadb_key={0x1e, 0x9, 0x718, 0x0, "b24d9607ec399f163b6c11335dee3f96797cc05a5b0a464eb9a269914ecd5468fabed884080425ad7e6f92ed21a61c40a9a6817f793f70131d27a879387f0a9f7f677753bec8c659c4e8eed30b1427d692b93fb9b7f687e2bed52157c440baff892dc54e748d0ec1eecb37487741057a45cc3873220d907ede070b7083b078be9343d3c0370d834035aea71f4b7d90382af7262cea8917a049a72ccfb0010d3683ebf71ff537eda82c8b3e0487a82c9c647b956f3038e776c3b3807f8545ce1f09cd0c22cb8ae04977f970724a1cacbd2bf8e332b5aa8e2200391f38a2f1a1fd1bef65"}, @sadb_sa={0x2, 0x1, 0x4d4, 0xfe, 0xa2, 0xf2, 0x1, 0x40000000}, @sadb_x_sec_ctx={0x201, 0x18, 0xf8, 0xff, 0x1000, "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"}, @sadb_lifetime={0x4, 0x2, 0x9, 0x6d63, 0x86d, 0xfffffffffffffff9}]}, 0x2200}}, 0x8000) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c80)={0x2, 0x1, 0x4, 0x2, 0x27, 0x0, 0x70bd28, 0x25dfdbfb, [@sadb_sa={0x2, 0x1, 0x4d3, 0x6, 0xa, 0xa7, 0x3, 0xa0000001}, @sadb_ident={0x2, 0x1, 0x9941, 0x0, 0xfffffffffffffff7}, @sadb_sa={0x2, 0x1, 0x4d6, 0x0, 0xff, 0x6d, 0x4, 0x20000001}, @sadb_address={0x5, 0x6, 0x3c, 0xe0, 0x0, @in6={0xa, 0x4e23, 0x0, @local, 0xfffffffa}}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in6={0xa, 0x4e21, 0x2, @empty, 0x8}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x6}, @sadb_x_nat_t_port={0x1, 0x16, 0x6e8}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d4}, @sadb_x_sa2={0x2, 0x13, 0x81, 0x0, 0x0, 0x70bd25, 0x34ff}, @sadb_x_sa2={0x2, 0x13, 0xf4, 0x0, 0x0, 0x70bd27, 0x3503}, @sadb_ident={0x2, 0xa, 0x8, 0x0, 0x1}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_lifetime={0x4, 0x4, 0x1, 0xb, 0x8, 0x5}, @sadb_lifetime={0x4, 0x4, 0x5, 0x9, 0x1ff, 0x3ff}]}, 0x138}}, 0x80) (async) r3 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000340)={r3}) (async) connect$phonet_pipe(r2, &(0x7f0000000040), 0x10) (async) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea000905", @ANYBLOB="a6d627c0bc16"], 0x0) (async) r4 = socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x303}, '\x00', "e3d6828f416ed98503000000999a00", "36416980", "a4df3881414e2558"}, 0x28) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) (async) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, &(0x7f0000000480)=0x18) (async) writev(r2, &(0x7f0000000a40)=[{&(0x7f0000000200)="0e", 0x1}, {&(0x7f0000000340)="f657379cac077c8ea4ed9c62388f1f2dff68fa732881bf097dcdb7d0d2092c26288701123a770db462d3b216a752bfed6dd2ebaf1646eda832f3c68c743174f57a89d332c299c9350e6a7e137923a9dd01efa8e287db44847d32943b76518b344383d6ac4b1f695db6e47b73e5fbaf90e12e320325ccb3726dc6bc59801bd6ff3ac2037183237c998be47be332391a64ccc918fc2ec0db67a03b89d4914e855f927b9c39a36101216e8014d2c4", 0xad}, {&(0x7f0000000400)="72ce3f99487ba1815d66f34bab9125238bf9c7172b18910824470cecf2518214bbb608c214d095505ec4fc16a37be44f59c0c97892e672f94ceadfc531cbf6ca6060c40c7870a17cc346cfa4e484aa0450e73ee56fc02030756db58bce5d8d2603807c99a1c7aeef870a8db4ee8360707f0962a79666ebcacb25a1fc933aac5e13f5", 0x82}, {&(0x7f00000004c0)="d5ac638968dedeacab3614c7fbe334f991f3d58492981c9f63415735007c526b1e477504382efa170fc28d89e5e52fb9d3b5a1f76d6ccbc9df64931e31a2e5efa3", 0x41}, {&(0x7f0000000540)="18cedcf96bf75b425f1f129310cb00a8369fe8521b0371ce6532a779f2539e43c1dc724017ed3507dfc9df16e544522027a6c421f5bf90eafa50017892eb8666cc50d20d214c353f71d70fbd41ef0fef6d1e134735334c6d4275604df8ced62708cdb54cbcd18d43c49e4aff0fc327e22f20cd0513a32afce152cfd26f895a9c063f3b0451477dc9c70b79f8ca8a8083b843cc47c87cec663514cf20ef66954b0733c2fb3e042354643c8d02a775041b01f4e63466faedbfde4c0b28cfe13617b042", 0xc2}, {&(0x7f00000001c0)="eee6515acff3b3c2caa9a1f0bedd6424270eacc46e5e9384d506595cfa1e71be1038ae6d9d295ae8aceb63a09b6789373dc2", 0x32}, {&(0x7f0000000640)="0eb078dc336eaf3e3ed4f6058d1a1f43dc5dfd584c6a752f752fb858652d2e0e355980b9fdf36ec3131ac7107efaa198f44042276208c2d55696e9f4ef24b0c251ba5b69c184b4621d16ac290313c0a69c20e1efa26ae23f36", 0x59}, {&(0x7f00000006c0)="2e647174fddb70b45dd5abc79e2f1d346e0f71b4f983c9925abba3ec00ee66219d575bc0cd0ada7663636b04b11c8a7335a5991bf631d490f8dbb1d8049562d3ba4c086153f4994ce7e67604ee5d6dec08e62d4d3fe7b2f88add58f326147d52c0d95c26515e98f7d4c91817976218b654ad8956dff29bc92d21f6767314ecfd4f4716674864543f8df07094a2620e2877f6eaa9dd1eb3b54a730ee7c97bffe414b82b063ff009d834f5f1558aebeaa8bccb", 0xb2}, {&(0x7f00000007c0)}, {&(0x7f0000000800)="a85810abd178815518838fb384b20960e1b44953db2165cc1f61116308c74d563d908b8b63765b1e467f77f4031288b82b9a37bcec6659777ed40adf7b2470fc612ff0", 0x43}, {&(0x7f0000000880)="7b3f4734b5a695400b78b1bb38be38a1c518f58d8383080ea6715c93759419b9328e02d341182eebd768d51c98162c17dc9c287d213bd7b24e2d968a0a3025a7dc1a5d2ff59a93881d5bf7c42c83e526e297132b23171e95e4a83b54048a4b2391b9594a5b8e9b38b6881f93aa0d3fe2e50b958477a6266021bfda03e9e51dab0543b235ff58294e7cf5653461327ac55b6ac616538f5f12eed5c246333cdc6bdefa8fad0abac9cd84490151a7d1e30780223979f5b809e6650df335ead789f0e5d7689b176454bf56d25a599b59a1046768a673528367477cb302d27227b8ff487479e3d06ff68d9c54af998ba9fd218793cdb31ca04eebbf731bcc", 0xfc}, {&(0x7f0000000980)="24a31b6d032d188ff400a36b106d2f542202095967789103929857e326eaaeeef1f92b46239cb9dd88c7a464ca5688aee0cab189a46b36597112397097f1eead160ccbc1d840", 0x46}, {&(0x7f0000000a00)="1c10b14aec2847d2d0df2d1dd692bb7577bfc5d9036251a2d810fc84a021f28f49417ee71ca3b9685700c8caff551264ca10", 0x32}], 0xd) mount(&(0x7f0000000080)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x3a91480, 0x0) 2.19575949s ago: executing program 3 (id=2537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x121080, 0x0) mmap(&(0x7f0000a58000/0xd000)=nil, 0xd000, 0x2, 0x10010, r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x5, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x50, 0x1a, 0x29, 0x20, 0x17cc, 0x1000, 0xc561, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x94, 0x2, 0x0, 0x91, 0x85, 0x8d}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r7, @ANYBLOB="3c00028038000100240001"], 0x58}, 0x1, 0x0, 0x0, 0x24004000}, 0x24040840) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1f, 0x0, &(0x7f0000000340)) sendfile(r2, r0, &(0x7f0000001000)=0x81, 0x800007ffff000) 2.099703325s ago: executing program 5 (id=2538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x404c004}, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04224705"], 0x4a) ioprio_set$uid(0x3, 0x0, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000dc0)={0x674, 0x24, 0x1, 0x70bd22, 0x25dfdbfe, "", [@nested={0x664, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x311, 0x65, 0x0, 0x1, [@nested={0x145, 0x121, 0x0, 0x1, [@generic="d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2", @generic="d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d3888", @typed={0x8, 0xfa, 0x0, 0x0, @fd=r4}, @nested={0xb9, 0x1d, 0x0, 0x1, [@generic="395659cbee1ee6766c7549af751fbf2eb8788253b47d23023a32d9788c32998ee026024e276914d0aae70d786e120337fe9cbc0c9e9e9008c238dd702409482c45a977476e6638789f", @nested={0x6c, 0x1e, 0x0, 0x1, [@nested={0x59, 0xd4, 0x0, 0x1, [@generic="a4803e3fd1af764643b73de45d768de8db52619a63255c11ccef20dfffd887a99225e2f5ecae032cafb7216b237a1429eed88bc6f84aeb562009f34ab2a8894cd1d7697087420e5ab42922b7a9a487ed10c5c0e82b"]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0x100}]}]}]}, @generic="180187793ce4954a2d0c6394198efd86259a455b383d61a34aed593c5da530877c3102231ea96aa5cefb6c2d99b6fadffd0e3bd891225e8c0d45e6019a16c008707e0724a0a436faaabd146ae5a60224ca6e64f9e38c4349e259ac91811a57a27022ff05f1", @nested={0x15d, 0xf, 0x0, 0x1, [@typed={0xc, 0x63, 0x0, 0x0, @u64}, @generic="796c3d3cc1f3db290ab3ff8af9998d01a9067f3cebdf5f818852b98b44e11fd441db5f6ccaf5833e192b4dca10fdf86450cae212660821bc12a1c14800e1893737f187022031f06b8d0f53b1090720f9f986853c93b418a7611f89d950d13b469a32796fe9d499cf7fd95151ff157e7e60ea88c4d6be9376ea4b50d5bd551481c915564cb2c452ed2344a4a800df8f95d198d2da935b789495ea7bb9ce6531ae7e6abf36751dba41809d5b16363323", @generic="9d22bafd4ac33962ab17d0d990f22e0ce4779bac24155d82f05498da6c9fa05cee888ef71b4755c9931b0200f564a52cdcc89114643ffd15fb495cd1bbb51ebd9f651e6ad3b3473949c0e79dcb948e0d4396e8c8a09ba50decb89def4523931fc20ba6e7ab5647f65f5ba45c278eec780cb651cd9c4ca1dc794060194b5f6e02947c12ad911895f1c0c5eee9b25581c2b4f2", @typed={0x8, 0x94, 0x0, 0x0, @fd=r4}, @nested={0x4, 0x30}]}]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82", @nested={0x261, 0x76, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x7}, @generic="45e49df035ca3e1511b2d03e89c9c254104f6e", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x5}, @nested={0x145, 0x112, 0x0, 0x1, [@nested={0x4, 0x34}, @generic="b31ffe7e4506cf69b06dc4ee0ce8e163163cd8c455905a9d8d9d35920d83f5e93dccb964e4b260e6f7fecce17049c9c5663e610ec96c66da76caa78bc01754c596843edd01a3fce53ef7c8d29c19ddb06df95543f90782d68d938a92fe0095293fd20332897cb9d95d697dd99d72c7096efeba9abd2e829ded26ff4bc4f623b6b01e0fde5e8caac5c6498cef39a915515e9ab88b4283a7bec4b2972252127180", @nested={0x4, 0x5b}, @generic="153f198f490d2f643131897fc3247ef83dbe06b187634b90d04fed309a63347353ddf39654e3591842597603c3d852df5848a26966cc758217dc1a9b777951f0aad2a771135cb78117b5a1490e1d1ea07a4e968cfe8bfc78923e23a0d6e236740b0b729def1fa6a0ac2a3e48ccd71b8201bdb5f9978fd82e1c9b4999", @generic="e7", @generic="560990458a09d951e1860906e64a4db7caef16c6ff043a7fbf78bcd4"]}, @nested={0x7d, 0x121, 0x0, 0x1, [@nested={0x4, 0x3b}, @generic="dd6bd77b5da6bb5285b3181026928cf10027116fd52ead1cc792fc621598f6f78bfa10e7fcfe5edec56cae74fc523cc23def9ad973065ca46abebd942423fed0dbfb631f048fc6d32cfcc22adc0348a9b0c20091ae85f67103c99e99237a574d05bccbc888161dad0fb79e2f1a", @nested={0x4, 0x7e}, @nested={0x4, 0x45}]}, @generic="f0456535747b15e70e3b1e0827c3e8c3ca7710239259c6f0a0ad5c136073ab87021643c3ca285bd98186244d8cf0e3c2d947cea9a643f98d95ba39d918b5039f22dbc61b90167e1cdc4cc7c39c2a7c3a0a4d469d07e5", @typed={0x11, 0x3c, 0x0, 0x0, @str='NLBL_CIPSOv4\x00'}]}]}]}, 0x674}], 0x1}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5}, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0x0, 0x5}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000080)="5c00000014006b05c84ebe349d4b6d6e238675f802020000440002005817d30461bc24eeb556a705251e6182149a36c23d3b48dfd8cdbf93670600000001000000f408000000e786a6d0bdd70000b6c0504bb9189d9193e9bd1c1b78", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) io_submit(r5, 0x0, &(0x7f0000000300)) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r7, 0x541b, &(0x7f0000002500)) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r8 = openat$kvm(0x0, &(0x7f0000000080), 0x80, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000180)) socket$alg(0x26, 0x5, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) fremovexattr(r9, &(0x7f0000000000)=@random={'system.', '\x19-]@\x00'}) sendto$inet6(r3, &(0x7f00000000c0)="865466bdd726ebb1585cc8ba468bc4ef141647bc307da877ed52af5478b1df2bda1b3a3ed31012a6a6d3839d9e366944b4b70b54", 0x34, 0x0, &(0x7f0000000140)={0xa, 0x4e21, 0x2, @remote, 0x9}, 0x1c) 1.298830242s ago: executing program 5 (id=2539): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000600)=""/179, 0xb3}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000340)=""/212, 0xd4}, {&(0x7f0000000000)=""/48, 0x30}, {&(0x7f0000000240)=""/182, 0xb6}], 0x6}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x4a}, {{0x0, 0x0, 0x0}, 0x48}, {{0x0, 0x0, 0x0}}], 0x9, 0x0, 0x0) 307.825968ms ago: executing program 5 (id=2540): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) syz_clone3(&(0x7f0000000340)={0x200000000, 0x0, 0x0, 0x0, {0x3a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 0s ago: executing program 5 (id=2541): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000001c0), r1) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x18, r2, 0x1, 0xfffdffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8040}, 0x20000000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003240)={'team0\x00', &(0x7f0000003140)=@ethtool_drvinfo={0x3, "fa9cd0d96c074be21052dc8a9e0c4d4c37f5c0271645d7e5a535deb3fbd67ec7", "515d7031cf62448eb1fe6c3124396aff19b1f046f9d8e0bff9f2553410dc4a55", "b9fc3b6f5dbfa8a99fba576249ba5167497168ec15fd173f441fc99afb13cdcd", "8e0dcd93712f205f96c5f37abccf7b6bdb0f22576f47e85b3292bd36dc31110d", "92792ebbf1035c779584ca00005e87a9b526cc2c4ce17681bd5ac64fb5ad8d77", "bab2521a547857bba3f9e2f6", 0x1, 0xfff, 0x9, 0x4, 0x3}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 7124][ T984] usb 4-1: config 0 has no interface number 0 [ 442.316797][ T984] usb 4-1: config 0 interface 170 has no altsetting 0 [ 442.323046][T13128] /dev/rnullb0: Can't open blockdev [ 442.327860][ T984] usb 4-1: New USB device found, idVendor=c383, idProduct=abd3, bcdDevice=60.bf [ 442.354581][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.395433][ T984] usb 4-1: config 0 descriptor?? [ 442.417380][ T984] usb 4-1: bad CDC descriptors [ 442.516242][T13132] input: syz0 as /devices/virtual/input/input42 [ 442.660104][T13125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.695899][T13125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.954933][ T5916] usb 4-1: USB disconnect, device number 110 [ 443.051213][ T984] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 443.211173][ T984] usb 6-1: Using ep0 maxpacket: 32 [ 443.219983][ T984] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.237071][ T984] usb 6-1: config 0 has no interfaces? [ 443.255459][ T984] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 443.271547][ T984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.290364][ T984] usb 6-1: Product: syz [ 443.300816][ T984] usb 6-1: Manufacturer: syz [ 443.312946][ T984] usb 6-1: SerialNumber: syz [ 443.332775][ T984] usb 6-1: config 0 descriptor?? [ 443.629964][T13140] /dev/rnullb0: Can't open blockdev [ 443.790148][T13142] /dev/rnullb0: Can't open blockdev [ 443.980629][T13149] /dev/rnullb0: Can't open blockdev [ 444.110058][T13151] /dev/rnullb0: Can't open blockdev [ 444.823060][T13163] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'. [ 444.853652][T13163] /dev/rnullb0: Can't open blockdev [ 444.921200][T13166] netlink: 796 bytes leftover after parsing attributes in process `syz.2.2110'. [ 444.997899][T13167] /dev/rnullb0: Can't open blockdev [ 445.034911][T13170] /dev/rnullb0: Can't open blockdev [ 445.104668][ T30] audit: type=1326 audit(1753539811.169:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13171 comm="syz.2.2113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f8b38e9a9 code=0x0 [ 445.249032][T13176] tipc: Enabling not permitted [ 445.260566][T13176] tipc: Enabling of bearer rejected, failed to enable media [ 445.521847][ T5916] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 445.741490][ T5916] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.770255][ T43] usb 6-1: USB disconnect, device number 11 [ 445.887420][ T5916] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 445.941094][ T5916] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 445.977975][ T5916] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 445.991071][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.999114][ T5916] usb 3-1: Product: syz [ 446.033922][ T5916] usb 3-1: Manufacturer: syz [ 446.038581][ T5916] usb 3-1: SerialNumber: syz [ 446.075102][ T5916] cdc_mbim 3-1:1.0: skipping garbage [ 446.080548][ T5916] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 446.111143][ T5916] cdc_mbim 3-1:1.0: bind() failure [ 446.326153][T13178] netlink: 796 bytes leftover after parsing attributes in process `syz.2.2113'. [ 446.471289][ T5916] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 446.501601][ T43] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 446.639194][ T5916] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 446.648032][ T5916] usb 4-1: config 0 has no interface number 0 [ 446.671429][ T5916] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 446.688428][ T5916] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 446.693277][ T43] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 446.721341][ T43] usb 5-1: config 150 has no interface number 0 [ 446.728350][ T5916] usb 4-1: config 0 interface 48 has no altsetting 0 [ 446.734407][ T43] usb 5-1: config 150 interface 204 has no altsetting 0 [ 446.751084][ T43] usb 5-1: config 150 interface 1 has no altsetting 0 [ 446.758137][ T5916] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 446.768922][ T43] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 446.778832][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.785135][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.794356][ T43] usb 5-1: Product: syz [ 446.803906][ T43] usb 5-1: Manufacturer: syz [ 446.808583][ T5916] usb 4-1: config 0 descriptor?? [ 446.815239][ T43] usb 5-1: SerialNumber: syz [ 447.047007][ T43] xr_serial 5-1:150.204: xr_serial converter detected [ 447.107492][ T5916] usb 4-1: string descriptor 0 read error: -71 [ 447.117328][ T5916] cp210x 4-1:0.48: cp210x converter detected [ 447.141211][ T5916] cp210x 4-1:0.48: failed to get vendor val 0x370b size 1: -71 [ 447.148838][ T5916] cp210x 4-1:0.48: querying part number failed [ 447.189266][ T5916] usb 4-1: cp210x converter now attached to ttyUSB1 [ 447.239613][ T5916] usb 4-1: USB disconnect, device number 111 [ 447.261941][ T5916] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 447.270589][ T5916] cp210x 4-1:0.48: device disconnected [ 447.306881][T13198] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 447.370623][T13197] /dev/rnullb0: Can't open blockdev [ 447.859003][ T43] usb 5-1: xr_serial converter now attached to ttyUSB0 [ 447.941081][ T5895] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 447.971721][ T984] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 448.102840][ T5895] usb 6-1: Using ep0 maxpacket: 16 [ 448.110558][ T5895] usb 6-1: config 0 has an invalid interface number: 58 but max is 0 [ 448.122872][ T5895] usb 6-1: config 0 has no interface number 0 [ 448.139969][ T5895] usb 6-1: config 0 interface 58 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 448.157039][ T5895] usb 6-1: config 0 interface 58 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 448.179116][ T5895] usb 6-1: config 0 interface 58 has no altsetting 0 [ 448.198126][ T5895] usb 6-1: New USB device found, idVendor=054c, idProduct=002b, bcdDevice= 1.03 [ 448.212323][ T5895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 448.230910][ T5895] usb 6-1: Product: syz [ 448.239975][ T5895] usb 6-1: Manufacturer: syz [ 448.250718][ T5895] usb 6-1: SerialNumber: syz [ 448.282773][ T5895] usb 6-1: config 0 descriptor?? [ 448.299720][T13201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 448.314276][T13201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 448.344451][ T5895] ums-isd200 6-1:0.58: USB Mass Storage device detected [ 448.559282][T13201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2122'. [ 448.790278][ T5895] ums-isd200 6-1:0.58: probe with driver ums-isd200 failed with error -22 [ 448.877457][T13201] /dev/rnullb0: Can't open blockdev [ 448.891694][ T5895] usb 6-1: USB disconnect, device number 12 [ 449.032924][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 449.051199][ T984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.277239][ T5951] usb 5-1: USB disconnect, device number 43 [ 449.293502][ T984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 449.307791][ T5951] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 449.323304][ T5951] xr_serial 5-1:150.204: device disconnected [ 449.333714][ T984] usb 4-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 449.344447][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.377431][ T984] usb 4-1: config 0 descriptor?? [ 449.536994][ T5895] usb 3-1: USB disconnect, device number 114 [ 449.805803][ T984] viewsonic 0003:2133:0018.0012: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.3-1/input0 [ 449.943801][T13216] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2126'. [ 449.970101][T13216] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2126'. [ 449.982296][ T5895] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 450.003074][ T984] usb 4-1: USB disconnect, device number 112 [ 450.027048][T13216] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2126'. [ 450.163637][ T5895] usb 3-1: config 8 has an invalid interface number: 170 but max is 3 [ 450.173137][ T5895] usb 3-1: config 8 has an invalid interface number: 54 but max is 3 [ 450.196656][ T5895] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 450.221099][ T5895] usb 3-1: config 8 has an invalid interface number: 70 but max is 3 [ 450.243408][ T5895] usb 3-1: config 8 has an invalid interface number: 248 but max is 3 [ 450.261159][ T5895] usb 3-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 450.280384][ T5895] usb 3-1: config 8 has an invalid interface descriptor of length 5, skipping [ 450.300804][ T5895] usb 3-1: config 8 has an invalid descriptor of length 237, skipping remainder of the config [ 450.321115][ T5895] usb 3-1: config 8 has no interface number 0 [ 450.334102][ T5895] usb 3-1: config 8 has no interface number 1 [ 450.347249][ T5895] usb 3-1: config 8 has no interface number 2 [ 450.360411][ T5895] usb 3-1: config 8 has no interface number 3 [ 450.373785][ T5895] usb 3-1: config 8 interface 170 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 450.429825][ T5895] usb 3-1: config 8 interface 170 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 450.464518][ T5895] usb 3-1: config 8 interface 170 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 450.506413][ T5895] usb 3-1: config 8 interface 54 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 450.537857][ T5895] usb 3-1: config 8 interface 54 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 450.571702][ T5895] usb 3-1: config 8 interface 54 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 450.613474][ T5895] usb 3-1: config 8 interface 54 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 450.643454][ T5895] usb 3-1: config 8 interface 70 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 450.681231][ T5895] usb 3-1: config 8 interface 70 altsetting 7 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 450.711217][ T5895] usb 3-1: config 8 interface 70 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 450.741343][ T5895] usb 3-1: config 8 interface 70 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 450.823292][ T5895] usb 3-1: config 8 interface 70 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 450.844101][ T5895] usb 3-1: config 8 interface 70 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 450.896510][ T5895] usb 3-1: config 8 interface 248 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 15 [ 450.946178][ T5895] usb 3-1: config 8 interface 170 has no altsetting 0 [ 450.970044][ T5895] usb 3-1: config 8 interface 70 has no altsetting 0 [ 450.999784][ T5895] usb 3-1: config 8 interface 248 has no altsetting 0 [ 451.023144][ T5895] usb 3-1: New USB device found, idVendor=0403, idProduct=d9a9, bcdDevice=15.eb [ 451.033223][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.061780][ T5895] usb 3-1: Product: syz [ 451.074858][ T5895] usb 3-1: Manufacturer: syz [ 451.080484][T13231] /dev/rnullb0: Can't open blockdev [ 451.091068][ T5895] usb 3-1: SerialNumber: syz [ 451.153431][T13232] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2131'. [ 451.184927][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2131'. [ 451.196049][T13236] /dev/rnullb0: Can't open blockdev [ 451.233671][T13232] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 451.369093][ T5895] ftdi_sio 3-1:8.170: FTDI USB Serial Device converter detected [ 451.400514][ T5895] ftdi_sio ttyUSB0: unknown device type: 0x15eb [ 451.438232][ T5895] ftdi_sio 3-1:8.54: FTDI USB Serial Device converter detected [ 451.444630][T13238] /dev/rnullb0: Can't open blockdev [ 451.483920][ T5895] ftdi_sio ttyUSB1: unknown device type: 0x15eb [ 451.523855][ T5895] ftdi_sio 3-1:8.70: FTDI USB Serial Device converter detected [ 451.566205][ T5895] ftdi_sio ttyUSB2: unknown device type: 0x15eb [ 451.607967][ T5895] ftdi_sio 3-1:8.248: FTDI USB Serial Device converter detected [ 451.643232][ T5895] ftdi_sio ttyUSB3: unknown device type: 0x15eb [ 451.678927][ T5895] usb 3-1: USB disconnect, device number 115 [ 451.719087][ T5895] ftdi_sio 3-1:8.170: device disconnected [ 451.772167][ T5895] ftdi_sio 3-1:8.54: device disconnected [ 451.807564][ T5895] ftdi_sio 3-1:8.70: device disconnected [ 451.815036][T13221] infiniband syz0: set down [ 451.819857][T13221] infiniband syz0: added bond_slave_1 [ 451.834592][ T5895] ftdi_sio 3-1:8.248: device disconnected [ 451.835100][T13221] syz0: rxe_create_cq: returned err = -12 [ 451.857861][T13221] infiniband syz0: Couldn't create ib_mad CQ [ 451.865618][T13221] infiniband syz0: Couldn't open port 1 [ 452.000544][T13221] RDS/IB: syz0: added [ 452.018711][T13221] smc: adding ib device syz0 with port count 1 [ 452.028043][T13221] smc: ib device syz0 port 1 has pnetid [ 452.067460][T13243] /dev/rnullb0: Can't open blockdev [ 452.568003][T13253] /dev/rnullb0: Can't open blockdev [ 452.581191][T13249] /dev/rnullb0: Can't open blockdev [ 452.795511][T13259] loop6: detected capacity change from 0 to 2560 [ 452.796354][T13258] /dev/rnullb0: Can't open blockdev [ 452.823157][ T5850] Buffer I/O error on dev loop6, logical block 0, async page read [ 452.867669][ T5850] Buffer I/O error on dev loop6, logical block 0, async page read [ 452.915055][ T5850] Buffer I/O error on dev loop6, logical block 0, async page read [ 452.942947][ T5850] Buffer I/O error on dev loop6, logical block 0, async page read [ 452.984865][ T5850] Buffer I/O error on dev loop6, logical block 0, async page read [ 453.788892][T13273] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2145'. [ 454.201811][T13285] /dev/rnullb0: Can't open blockdev [ 454.681187][ T984] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 454.842191][ T984] usb 3-1: Using ep0 maxpacket: 8 [ 454.853584][ T984] usb 3-1: unable to get BOS descriptor or descriptor too short [ 454.882747][ T984] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 454.907858][ T984] usb 3-1: config 129 has no interface number 0 [ 454.928165][ T984] usb 3-1: config 129 interface 71 has no altsetting 0 [ 454.952843][ T984] usb 3-1: New USB device found, idVendor=2013, idProduct=0262, bcdDevice=5b.8b [ 454.982751][ T984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.990812][ T984] usb 3-1: Product: syz [ 455.015638][ T984] usb 3-1: Manufacturer: syz [ 455.031312][ T984] usb 3-1: SerialNumber: syz [ 455.513635][ T984] usb 3-1: USB disconnect, device number 116 [ 456.933756][T13322] /dev/rnullb0: Can't open blockdev [ 457.351207][ T5951] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 457.548471][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 457.612496][ T5951] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 457.620777][ T5951] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 457.657474][ T5951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 457.687852][ T5951] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 457.737666][ T5951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 457.766356][ T5951] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 457.803105][ T5951] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 457.846968][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.902213][ T5951] usbtmc 6-1:16.0: probe with driver usbtmc failed with error -22 [ 457.952031][T13339] /dev/rnullb0: Can't open blockdev [ 458.634448][T13355] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2170'. [ 458.657393][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2170'. [ 458.702087][T13352] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2170'. [ 458.716704][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'. [ 458.751818][T13352] /dev/rnullb0: Can't open blockdev [ 459.452296][T13364] netlink: 9652 bytes leftover after parsing attributes in process `syz.2.2173'. [ 459.801104][ T43] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 459.846063][T13371] /dev/rnullb0: Can't open blockdev [ 459.973018][ T43] usb 3-1: config index 0 descriptor too short (expected 69, got 36) [ 459.984556][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.017089][ T43] usb 3-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 460.041258][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.060059][ T43] usb 3-1: Product: syz [ 460.069916][ T43] usb 3-1: Manufacturer: syz [ 460.093334][ T43] usb 3-1: SerialNumber: syz [ 460.118098][ T43] usb 3-1: config 0 descriptor?? [ 460.135566][ T981] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 460.206393][ T24] usb 6-1: USB disconnect, device number 13 [ 460.235168][ T43] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 460.288080][T13379] tmpfs: Cannot change global quota limit on remount [ 460.296629][T13379] /dev/rnullb0: Can't open blockdev [ 460.309157][T13379] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 460.383966][ T981] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 460.395840][ T981] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 460.431293][ T981] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 460.450775][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.496290][ T981] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 460.535622][ T981] usb 4-1: invalid MIDI out EP 0 [ 460.644716][ T43] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71 [ 460.659017][ T43] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 460.732402][ T43] usb 3-1: USB disconnect, device number 117 [ 460.741884][T13385] /dev/rnullb0: Can't open blockdev [ 460.804940][ T981] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 462.207321][T13399] netlink: 'syz.2.2184': attribute type 4 has an invalid length. [ 462.251396][T13399] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.2184'. [ 462.273919][T13399] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 462.541956][T13405] /dev/rnullb0: Can't open blockdev [ 462.873430][ T981] usb 4-1: USB disconnect, device number 113 [ 463.011283][ T43] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 463.201390][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 463.241042][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 463.280942][ T43] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 463.290536][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 463.319341][ T43] usb 5-1: SerialNumber: syz [ 463.615853][T13424] /dev/rnullb0: Can't open blockdev [ 463.648376][ T43] usb 5-1: 0:2 : does not exist [ 463.659372][ T43] usb 5-1: unit 5: unexpected type 0x0d [ 463.727206][ T43] usb 5-1: USB disconnect, device number 44 [ 463.856194][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.216015][T12554] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.233322][T12554] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.243586][T12554] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.261207][T12554] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.291301][T12554] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.450553][T13441] comedi comedi0: Cannot bond this driver to itself! [ 466.166031][T13433] chnl_net:caif_netlink_parms(): no params data found [ 466.343066][ T5851] Bluetooth: hci5: command tx timeout [ 466.680313][T13490] /dev/rnullb0: Can't open blockdev [ 466.708348][T13490] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20004 [ 466.835854][T13433] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.874601][T13433] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.917501][T13433] bridge_slave_0: entered allmulticast mode [ 466.942601][T13433] bridge_slave_0: entered promiscuous mode [ 466.968047][T13433] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.995135][T13433] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.017391][T13433] bridge_slave_1: entered allmulticast mode [ 467.034038][T13433] bridge_slave_1: entered promiscuous mode [ 467.221937][T13433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.281418][T13433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.469861][T13433] team0: Port device team_slave_0 added [ 467.494172][T13433] team0: Port device team_slave_1 added [ 467.509670][T13512] /dev/rnullb0: Can't open blockdev [ 467.803420][T13433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.829637][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.927288][T13433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.967811][T13433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.982779][T13433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.009170][ C1] vkms_vblank_simulate: vblank timer overrun [ 468.071319][ T5916] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 468.091337][T13433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.224223][ T5916] usb 6-1: device descriptor read/64, error -71 [ 468.304887][T13433] hsr_slave_0: entered promiscuous mode [ 468.338868][T13433] hsr_slave_1: entered promiscuous mode [ 468.352759][T13433] debugfs: 'hsr0' already exists in 'hsr' [ 468.369154][T13433] Cannot create hsr debugfs directory [ 468.421215][ T5851] Bluetooth: hci5: command tx timeout [ 468.463810][ T5916] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 468.611127][ T5916] usb 6-1: device descriptor read/64, error -71 [ 468.725206][ T5916] usb usb6-port1: attempt power cycle [ 468.801210][ T984] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 468.905834][T13433] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.974705][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 468.991476][ T984] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.008208][ T984] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 469.045907][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 469.093551][ T5916] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 469.115654][ T984] usb 5-1: config 0 descriptor?? [ 469.133450][ T984] hub 5-1:0.0: bad descriptor, ignoring hub [ 469.139616][ T984] hub 5-1:0.0: probe with driver hub failed with error -5 [ 469.162130][ T5916] usb 6-1: device descriptor read/8, error -71 [ 469.188067][T13433] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.389334][T13433] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.401789][ T5916] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 469.446643][ T5916] usb 6-1: device descriptor read/8, error -71 [ 469.526475][T13433] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.561687][ T5916] usb usb6-port1: unable to enumerate USB device [ 469.608083][ T10] usb 5-1: reset high-speed USB device number 45 using dummy_hcd [ 469.638686][T13534] afs: Unknown parameter 'dyn ' [ 469.905132][T13433] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 469.953894][T13433] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 469.991904][T13433] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 470.020198][T13433] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 470.036319][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.058068][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.215138][ T984] usb 5-1: USB disconnect, device number 45 [ 470.333245][T13433] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.364576][T13433] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.378897][T10612] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.386244][T10612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.418746][T10612] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.426037][T10612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.491843][ T5851] Bluetooth: hci5: command tx timeout [ 470.591150][ T10] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 470.753149][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 470.770865][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.801113][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.819112][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 470.861163][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.908409][ T10] usb 3-1: config 0 descriptor?? [ 470.940731][ T10] hub 3-1:0.0: USB hub found [ 471.071997][T13433] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.230475][ T10] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 471.290320][T13433] veth0_vlan: entered promiscuous mode [ 471.327227][T13433] veth1_vlan: entered promiscuous mode [ 471.546572][T13433] veth0_macvtap: entered promiscuous mode [ 471.578816][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 471.599045][T13433] veth1_macvtap: entered promiscuous mode [ 471.605781][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 471.674811][ T10] usb 3-1: USB disconnect, device number 118 [ 471.709633][T13433] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.767426][T13433] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.827392][T10605] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.861880][T10605] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.876232][T10605] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.911244][ T24] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 471.923794][T10605] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.092373][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 472.104473][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.126611][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.148074][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 472.163319][T10605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.190680][T10605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.194020][ T24] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 472.242550][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.282196][ T24] usb 5-1: config 0 descriptor?? [ 472.285231][T10607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.312805][T10607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.515912][T13576] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 472.532622][T13576] VFS: Can't find a romfs filesystem on dev rnullb0. [ 472.532622][T13576] [ 472.571177][ T5851] Bluetooth: hci5: command tx timeout [ 472.601131][ T43] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 472.719188][ T24] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 472.738639][T13579] Can't find a SQUASHFS superblock on rnullb0 [ 472.741026][ T24] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 472.761248][ T24] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 472.768445][ T24] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 472.775756][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 472.792428][ T24] shield 0003:0955:7214.0013: unknown main item tag 0x0 [ 472.809255][ T43] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 472.818941][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.830231][ T43] usb 3-1: Product: syz [ 472.834813][ T43] usb 3-1: Manufacturer: syz [ 472.839807][ T43] usb 3-1: SerialNumber: syz [ 472.857004][ T24] input: HID 0955:7214 Haptics as /devices/virtual/input/input43 [ 472.874933][ T43] r8152-cfgselector 3-1: Unknown version 0x0000 [ 472.881640][ T43] r8152-cfgselector 3-1: config 0 descriptor?? [ 472.916160][T13570] netlink: 'syz.4.2238': attribute type 2 has an invalid length. [ 472.945163][T13570] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2238'. [ 472.973618][ T984] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 473.067481][ T24] shield 0003:0955:7214.0013: Registered Thunderstrike controller [ 473.084539][ T24] shield 0003:0955:7214.0013: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 473.167289][ T984] usb 4-1: config 0 has an invalid interface number: 120 but max is 0 [ 473.197153][ T984] usb 4-1: config 0 has no interface number 0 [ 473.206853][ T984] usb 4-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.232710][ T984] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 473.249374][ T984] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 473.261397][ T10] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 473.270215][ T984] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 473.279877][ T984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.295440][ T984] usb 4-1: config 0 descriptor?? [ 473.332683][ T984] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input44 [ 473.397365][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.416680][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.436485][ T10] usb 6-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 473.461909][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.482562][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.498381][ T24] r8152-cfgselector 3-1: USB disconnect, device number 119 [ 473.507638][ C1] usbtouchscreen 4-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 473.528272][ T10] usb 6-1: config 0 descriptor?? [ 473.623592][ T984] usb 5-1: USB disconnect, device number 46 [ 473.624512][ T5896] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 473.679267][ T43] usb 4-1: USB disconnect, device number 114 [ 473.692382][ T5896] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 473.767741][ T5896] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 473.849050][ T5896] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 473.883550][ T10] usbhid 6-1:0.0: can't add hid device: -71 [ 473.889649][ T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 473.964649][ T10] usb 6-1: USB disconnect, device number 18 [ 474.401813][ T984] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 474.584872][ T984] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 474.601781][ T984] usb 5-1: config 0 has no interface number 0 [ 474.611838][ T984] usb 5-1: config 0 interface 107 altsetting 140 bulk endpoint 0x4 has invalid maxpacket 64 [ 474.646118][ T984] usb 5-1: config 0 interface 107 has no altsetting 0 [ 474.675984][ T984] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice=a5.5f [ 474.701215][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.719519][ T984] usb 5-1: Product: syz [ 474.729635][ T984] usb 5-1: Manufacturer: syz [ 474.751576][ T10] usb 3-1: new low-speed USB device number 120 using dummy_hcd [ 474.763220][ T984] usb 5-1: SerialNumber: syz [ 474.782574][ T984] usb 5-1: config 0 descriptor?? [ 474.788537][T13600] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.096510][T13618] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2252'. [ 475.175124][T13610] could not allocate digest TFM handle hmac(sha1-avx2) [ 475.991522][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 476.014256][ T10] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 476.055316][ T10] usb 3-1: can't read configurations, error -71 [ 476.116415][T13626] syz.5.2255: attempt to access beyond end of device [ 476.116415][T13626] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 476.130420][T13626] EXT4-fs (loop5): unable to read superblock [ 476.429208][T13630] /dev/rnullb0: Can't open blockdev [ 476.855840][T13632] /dev/rnullb0: Can't open blockdev [ 477.133627][ T984] ti_usb_3410_5052 5-1:0.107: TI USB 5052 2 port adapter converter detected [ 477.167310][ T984] ti_usb_3410_5052 5-1:0.107: missing endpoints [ 477.231661][ T984] usb 5-1: USB disconnect, device number 47 [ 477.320226][T13643] /dev/rnullb0: Can't open blockdev [ 477.362101][T13645] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 477.410464][T13645] UDF-fs: Scanning with blocksize 4096 failed [ 477.701247][ T5935] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 477.718377][T13658] /dev/rnullb0: Can't open blockdev [ 477.800352][ T43] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 477.865473][ T5935] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 477.879972][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.915051][ T5935] usb 6-1: Product: syz [ 477.924037][ T5935] usb 6-1: Manufacturer: syz [ 477.928781][ T5935] usb 6-1: SerialNumber: syz [ 477.961346][ T984] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 477.971881][ T5935] usb 6-1: config 0 descriptor?? [ 477.991370][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 477.994043][ T5935] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 478.013009][ T43] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 478.024773][ T43] usb 3-1: config 0 has no interface number 0 [ 478.046776][ T43] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 478.057963][ T30] audit: type=1326 audit(1753539844.119:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13665 comm="syz.3.2270" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcee758e9a9 code=0x0 [ 478.080336][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.088695][ T43] usb 3-1: Product: syz [ 478.093397][ T43] usb 3-1: Manufacturer: syz [ 478.098035][ T43] usb 3-1: SerialNumber: syz [ 478.111845][ T43] usb 3-1: config 0 descriptor?? [ 478.126533][ T43] smsc95xx v2.0.0 [ 478.151083][ T984] usb 5-1: Using ep0 maxpacket: 32 [ 478.158738][ T984] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 478.182893][ T984] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 478.202272][ T984] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.220185][ T984] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 478.244475][ T984] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 478.248762][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.261126][ T984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.275470][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 478.280377][ T984] usb 5-1: Product: syz [ 478.287739][ T984] usb 5-1: Manufacturer: syz [ 478.297830][ T984] usb 5-1: SerialNumber: syz [ 478.368327][ T5935] gspca_sunplus: reg_r err -71 [ 478.377876][ T984] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/input/input45 [ 478.409206][ T5935] usb 6-1: USB disconnect, device number 19 [ 478.527722][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 478.551864][ T984] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 478.560401][ T984] (id 0x00) [ 478.577514][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 478.751430][ T984] rc_core: IR keymap rc-imon-pad not found [ 478.767874][ T984] Registered IR keymap rc-empty [ 478.778101][ T984] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 478.819461][ T984] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 478.882952][ T984] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 478.960830][ T984] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input46 [ 479.048724][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.057251][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.065491][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.073657][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.077624][T13678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2272'. [ 479.082164][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.101073][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.109671][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.118198][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.126393][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.134772][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.142933][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.162169][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.171975][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.180195][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.190035][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.198202][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.207114][ T984] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:48> initialized [ 479.211602][T13687] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2272'. [ 479.216038][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.234076][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.242281][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.252389][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.260605][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.268914][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.277104][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.285341][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.293765][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.302072][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.310300][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.318528][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.326676][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.334853][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.342102][T13678] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2272'. [ 479.343311][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.361353][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.371299][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.379834][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.388285][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.396795][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.405230][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.413800][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.422141][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.430397][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.438716][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.446965][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.455135][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.465097][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.465377][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.465609][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.473930][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.474146][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.474352][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.474564][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.474770][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.475004][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.475390][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.475599][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.475799][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.476007][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.476213][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.476445][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.476665][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.476892][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.477119][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.477333][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.477545][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.477762][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.477983][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.478208][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.478441][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.478698][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.478925][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.479142][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.479357][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.479580][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.479794][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.480005][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.480221][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.480437][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.480657][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.480869][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.481096][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.481307][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.481519][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.481726][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.481956][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.482169][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.482394][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.482610][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.482829][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.483043][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.483251][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.483458][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.483669][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.483878][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.484094][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.484300][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.484505][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.484706][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.484952][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.485168][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.485389][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.485604][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.485814][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.486023][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.486239][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.486452][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.486664][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.486875][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.487083][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.487292][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.487506][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.487709][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.487914][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.488124][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.488358][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.488572][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.488786][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.488994][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.489199][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.489409][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.489619][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.489836][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.490056][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.490273][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.490490][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.490702][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.490919][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.491145][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.491353][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.491575][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.491819][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.492037][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.492254][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.492469][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.492689][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.492996][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.493198][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.493414][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.493624][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.493705][ T984] usb 5-1: USB disconnect, device number 48 [ 479.493839][ C0] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71): ignored [ 479.499335][ T43] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 480.344070][ T43] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 480.373746][ T43] usb 3-1: USB disconnect, device number 122 [ 480.566431][T13698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 480.621635][T13698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 480.740141][T13698] /dev/rnullb0: Can't open blockdev [ 480.881255][ T43] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 480.956242][ T24] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 481.134462][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 481.163062][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 481.179186][T13718] /dev/rnullb0: Can't open blockdev [ 481.183072][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.219571][ T24] usb 4-1: config 0 descriptor?? [ 481.238435][T13720] /dev/rnullb0: Can't open blockdev [ 481.300400][ T24] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 481.889836][ T24] gspca_sonixj: reg_r err -71 [ 481.897091][ T24] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 481.914025][ T24] usb 4-1: USB disconnect, device number 115 [ 482.441135][ T24] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 482.611492][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 482.630603][ T24] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 482.653735][ T24] usb 4-1: config 0 has no interface number 0 [ 482.676633][ T24] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 482.696221][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.719854][ T24] usb 4-1: Product: syz [ 482.740182][ T24] usb 4-1: Manufacturer: syz [ 482.754446][ T24] usb 4-1: SerialNumber: syz [ 482.771146][ T5935] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 482.780278][ T24] usb 4-1: config 0 descriptor?? [ 482.805342][ T24] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 482.985493][ T5935] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 483.021237][ T5935] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 483.030635][ T5935] usb 5-1: config 220 interface 0 has no altsetting 0 [ 483.101760][ T5935] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 483.121088][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.129238][ T5935] usb 5-1: Product: syz [ 483.161081][ T5935] usb 5-1: Manufacturer: syz [ 483.165832][ T5935] usb 5-1: SerialNumber: syz [ 483.392656][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 483.442298][ T24] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 483.584402][T13747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.624218][ T5935] usb 5-1: Found UVC 0.00 device syz (8086:0b07) [ 483.630629][ T5935] usb 5-1: No valid video chain found. [ 483.641901][T13747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.707934][ T5935] usb 5-1: USB disconnect, device number 49 [ 483.735634][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 483.779289][ T10] usb 4-1: USB disconnect, device number 116 [ 483.799938][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 483.854043][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 483.878628][T13759] /dev/rnullb0: Can't open blockdev [ 483.886420][ T10] quatech2 4-1:0.51: device disconnected [ 484.446689][T13772] qnx4: no qnx4 filesystem (no root dir). [ 484.613468][T13778] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 484.613863][T13776] /dev/nullb0: Can't open blockdev [ 484.637580][T13778] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 484.781161][ T24] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 484.971507][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 484.997507][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 485.017606][ T24] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 485.038573][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.064501][ T24] usb 5-1: Product: syz [ 485.086057][ T24] usb 5-1: Manufacturer: syz [ 485.096479][T13788] /dev/rnullb0: Can't open blockdev [ 485.104074][ T24] usb 5-1: SerialNumber: syz [ 485.146566][ T24] usb 5-1: config 0 descriptor?? [ 485.606956][ T24] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 485.814776][T13774] netlink: 696 bytes leftover after parsing attributes in process `syz.4.2297'. [ 485.924650][ T24] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 485.944405][ T24] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 485.988830][ T24] usb 5-1: USB disconnect, device number 50 [ 486.030387][T13808] /dev/rnullb0: Can't open blockdev [ 486.080434][T13808] /dev/rnullb0: Can't open blockdev [ 486.121430][ T5935] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 486.436177][ T5935] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 486.456174][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.482097][ T5935] usb 6-1: config 0 descriptor?? [ 486.525725][ T5935] cp210x 6-1:0.0: cp210x converter detected [ 486.772312][ T5935] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 486.795842][ T5935] cp210x 6-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 486.816877][ T5935] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 486.851188][ T10] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 486.877856][ T5935] usb 6-1: cp210x converter now attached to ttyUSB0 [ 486.928763][T13820] nfs: Unknown parameter 'squashfs' [ 486.932915][ T5935] usb 6-1: USB disconnect, device number 20 [ 486.971764][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 487.003751][ T5935] cp210x 6-1:0.0: device disconnected [ 487.015545][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.031842][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.075491][ T10] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.089653][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.107574][ T10] usb 3-1: SerialNumber: syz [ 487.324010][T13815] /dev/rnullb0: Can't open blockdev [ 487.358088][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.361573][ T5935] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 487.406458][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.551060][ T5935] usb 6-1: Using ep0 maxpacket: 8 [ 487.557778][ T10] usb 3-1: 0:2 : does not exist [ 487.573416][ T5935] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 487.591606][ T10] usb 3-1: unit 255 not found! [ 487.611424][ T5935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 487.662148][ T5935] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 487.689636][ T10] usb 3-1: USB disconnect, device number 124 [ 487.692455][T13838] /dev/rnullb0: Can't open blockdev [ 487.701016][ T5935] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 487.758323][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 487.776738][ T5935] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 487.806679][ T5935] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.026227][T13842] /dev/rnullb0: Can't open blockdev [ 488.046793][ T5935] usb 6-1: GET_CAPABILITIES returned 0 [ 488.048838][T13843] /dev/rnullb0: Can't open blockdev [ 488.054660][T13845] /dev/rnullb0: Can't open blockdev [ 488.081154][ T5935] usbtmc 6-1:16.0: can't read capabilities [ 488.249378][ T5935] usb 6-1: USB disconnect, device number 21 [ 488.334471][T13849] omfs: Invalid superblock (0) [ 488.360341][T13850] omfs: Invalid superblock (0) [ 488.578951][T13854] /dev/rnullb0: Can't open blockdev [ 488.896404][T13861] /dev/rnullb0: Can't open blockdev [ 488.946670][T13866] ./file0: Can't lookup blockdev [ 488.972823][T13869] ./file0: Can't lookup blockdev [ 489.125466][T13871] vivid-000: disconnect [ 489.185520][T13870] vivid-000: reconnect [ 489.601158][ T5951] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 489.791170][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 489.817124][ T5951] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 489.855404][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.902206][ T5951] usb 6-1: Product: syz [ 489.906433][ T5951] usb 6-1: Manufacturer: syz [ 489.941515][ T5951] usb 6-1: SerialNumber: syz [ 489.949341][ T5951] usb 6-1: config 0 descriptor?? [ 490.171528][T12554] Bluetooth: hci5: command 0x0405 tx timeout [ 490.179406][ T5951] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 490.504539][T13895] /dev/rnullb0: Can't open blockdev [ 490.583501][T13875] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2329'. [ 490.627764][T13875] /dev/rnullb0: Can't open blockdev [ 490.693683][T13896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.751719][T13896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.905097][ T5951] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 490.967432][ T5951] usb 6-1: USB disconnect, device number 22 [ 491.071870][T13903] FAT-fs (rnullb0): bogus number of reserved sectors [ 491.102457][T13903] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 491.103249][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 491.122233][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 491.132697][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 491.155824][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 491.166243][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 491.678080][T13910] /dev/rnullb0: Can't open blockdev [ 491.691571][ T5951] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 491.693938][T13910] /dev/rnullb0: Can't open blockdev [ 491.851503][ T5951] usb 6-1: Using ep0 maxpacket: 16 [ 491.873049][ T5951] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 491.911099][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 491.922273][T13913] /dev/rnullb0: Can't open blockdev [ 491.975330][ T5951] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 492.011405][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.040528][ T5951] usb 6-1: Product: syz [ 492.061122][ T5951] usb 6-1: Manufacturer: syz [ 492.065889][ T5951] usb 6-1: SerialNumber: syz [ 492.089239][ T5951] usb 6-1: config 0 descriptor?? [ 492.116714][T13915] /dev/rnullb0: Can't open blockdev [ 492.118560][ T5951] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 492.133699][T10614] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.172418][ T5951] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 492.339507][T13917] /dev/rnullb0: Can't open blockdev [ 492.450330][T10614] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.739850][ T5951] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 492.747119][ T5951] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 492.791759][T10614] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.922213][T13922] random: crng reseeded on system resumption [ 493.010770][T10614] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.211280][T12554] Bluetooth: hci1: command tx timeout [ 493.231248][ T43] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 493.381412][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 493.421363][ T43] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 493.447075][ T43] usb 4-1: config 0 has no interface number 0 [ 493.499671][ T43] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 493.524624][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.563132][ T43] usb 4-1: Product: syz [ 493.574350][ T43] usb 4-1: Manufacturer: syz [ 493.608308][ T43] usb 4-1: SerialNumber: syz [ 493.617742][T10614] bridge_slave_1: left allmulticast mode [ 493.634601][T10614] bridge_slave_1: left promiscuous mode [ 493.640519][ T43] usb 4-1: config 0 descriptor?? [ 493.644087][T10614] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.687924][ T43] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 493.707354][T10614] bridge_slave_0: left allmulticast mode [ 493.729478][ T43] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 493.738890][T10614] bridge_slave_0: left promiscuous mode [ 493.753735][T10614] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.798826][ T5951] em28xx 6-1:0.0: AC97 vendor ID = 0x00fc00fe [ 493.884938][ T43] radio-raremono 4-1:0.35: this is not Thanko's Raremono. [ 493.892823][ T43] usbhid 4-1:0.35: couldn't find an input interrupt endpoint [ 493.998123][T13908] hfs: can't find a HFS filesystem on dev rnullb0 [ 494.007151][ T5951] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 494.038841][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 494.060678][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 494.081803][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 494.105951][T13929] binder: 13928:13929 ioctl 6406 0 returned -22 [ 494.121331][ T10] usb 4-1: USB disconnect, device number 117 [ 494.150914][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 494.168376][ T5951] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 494.239727][ T5951] usb 6-1: USB disconnect, device number 23 [ 494.629949][T13933] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 494.664576][T13933] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 494.912662][T10614] dvmrp0 (unregistering): left allmulticast mode [ 495.015716][T13941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2354'. [ 495.201157][ T5951] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 495.296620][T12554] Bluetooth: hci1: command tx timeout [ 495.359139][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 495.367115][ T5951] usb 5-1: config 0 has no interfaces? [ 495.375659][ T5951] usb 5-1: New USB device found, idVendor=147a, idProduct=e03a, bcdDevice=3c.2a [ 495.386228][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.416755][ T5951] usb 5-1: Product: syz [ 495.421220][ T5951] usb 5-1: Manufacturer: syz [ 495.429017][ T5951] usb 5-1: SerialNumber: syz [ 495.463935][ T5951] usb 5-1: config 0 descriptor?? [ 495.680872][ T5951] usb 5-1: USB disconnect, device number 51 [ 496.136545][T10614] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.191759][T10614] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.216744][T10614] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 496.348224][T10614] bond0 (unregistering): Released all slaves [ 497.371354][T12554] Bluetooth: hci1: command tx timeout [ 497.521484][T13902] chnl_net:caif_netlink_parms(): no params data found [ 497.904549][T13995] /dev/rnullb0: Can't open blockdev [ 497.956105][T13995] /dev/rnullb0: Can't open blockdev [ 498.504052][T14005] hfs: can't find a HFS filesystem on dev rnullb0 [ 498.818356][T14011] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 498.861398][T14010] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 498.928604][T13902] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.951124][T13902] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.016805][T13902] bridge_slave_0: entered allmulticast mode [ 499.057058][T13902] bridge_slave_0: entered promiscuous mode [ 499.114209][T13902] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.144401][T13902] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.171341][T13902] bridge_slave_1: entered allmulticast mode [ 499.234334][T13902] bridge_slave_1: entered promiscuous mode [ 499.271215][ T43] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 499.454089][T12554] Bluetooth: hci1: command tx timeout [ 499.535465][ T43] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 499.571890][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 210, changing to 11 [ 499.608690][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16952, setting to 1024 [ 499.625521][T14021] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2370'. [ 499.678146][ T43] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 499.715925][T13902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.720639][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.779178][ T43] usb 6-1: config 0 descriptor?? [ 499.794450][T14021] sp0: Synchronizing with TNC [ 499.804131][T13902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.298681][ T43] sony 0003:054C:024B.0014: unexpected long global item [ 500.314782][T14020] [U] [ 500.332355][ T43] sony 0003:054C:024B.0014: parse failed [ 500.359990][ T43] sony 0003:054C:024B.0014: probe with driver sony failed with error -22 [ 500.603697][T13902] team0: Port device team_slave_0 added [ 500.631143][T14010] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 500.648059][T13902] team0: Port device team_slave_1 added [ 500.684226][T14011] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 500.719210][T14011] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 500.857509][T14011] kvm: requested 39390 ns i8254 timer period limited to 200000 ns [ 500.899061][T14011] kvm: requested 88000 ns i8254 timer period limited to 200000 ns [ 500.929823][T14011] kvm: requested 84647 ns i8254 timer period limited to 200000 ns [ 500.972011][T14011] kvm: requested 29333 ns i8254 timer period limited to 200000 ns [ 500.998624][T14011] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 501.028768][T14011] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 501.037240][T10614] hsr_slave_0: left promiscuous mode [ 501.091058][T10614] hsr_slave_1: left promiscuous mode [ 501.098087][T10614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.151094][T10614] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.218392][T10614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.257684][T10614] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 501.724516][T10614] veth1_macvtap: left promiscuous mode [ 501.730734][T10614] veth0_macvtap: left promiscuous mode [ 501.747217][T10614] veth1_vlan: left allmulticast mode [ 501.761117][T10614] veth1_vlan: left promiscuous mode [ 501.772359][T10614] veth0_vlan: left promiscuous mode [ 501.867003][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.321675][T10614] pim6reg (unregistering): left allmulticast mode [ 502.516300][ T43] usb 6-1: USB disconnect, device number 24 [ 502.976908][T14046] /dev/rnullb0: Can't open blockdev [ 503.089701][T10614] team0 (unregistering): Port device macvlan0 removed [ 504.541954][T10614] team0 (unregistering): Port device team_slave_1 removed [ 504.699875][T10614] team0 (unregistering): Port device team_slave_0 removed [ 504.997424][T14061] usb usb8: usbfs: process 14061 (syz.3.2380) did not claim interface 0 before use [ 505.017460][T14061] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 506.008392][T13902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 506.019619][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.045929][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.053260][T13902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 506.086524][T13902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 506.109682][T13902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 506.143180][T13902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 506.594937][T13902] hsr_slave_0: entered promiscuous mode [ 506.632647][T13902] hsr_slave_1: entered promiscuous mode [ 506.640757][T13902] debugfs: 'hsr0' already exists in 'hsr' [ 506.682251][T13902] Cannot create hsr debugfs directory [ 506.881196][ T5935] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 507.083951][ T5935] usb 6-1: not running at top speed; connect to a high speed hub [ 507.097226][ T5935] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 507.141398][ T5935] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 507.150849][T14087] binder: Bad value for 'stats' [ 507.213095][ T5935] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 507.236993][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.251310][ T5935] usb 6-1: Product: 윦ᄒꉡ寸껃鑍렭徲埉ꨀ쳲䫚삦꺾鄛웠ꈧᇓṾ촤鐪噆袶಑榴䢎痚ꕧ᷇ힳഔ覉༼漷垍⧰媍Ἢ戌ࠃ뾒ꦔꡔ띖ﶉ≛뒰锲ㆡ븫圞◨ꟻᗞG리浶ﵦㇱ槂駄㍓㬳ְ両䔵⩗Ẫ洞裳꫌찰ἃࡷ䘏휒羍鹆墊휦㛢튖㕣ફ㪺ꓧ튏쯷䵈망ꟼ勇븯㭵ҵ⽡켇 [ 507.327590][ T5935] usb 6-1: Manufacturer: ᢰ೯惈ꏓ⽇쏇ń⣲ᷙ뺳뇂㧅ᤀ祧䵡
㜜쨹뺭劒옠볤妐凵蟴題搅嫕䯟ꔕ뻫ᵙ⩳ﲧʬ鲭䪍鯳ꩫ⁇唦淏錛ᅫ㚮ᇔ됕嘈厵鍄㇕㟪䰃残◌塺適䤵뭟ᏽ槂饇㪯ബॖ΁袭༴ᩬ짼ﻼ⋍悵惕엂锞㱸ㄮᇊ熼攫釉ꂾ输਩桘죅冶㌻fiꁇ쑊큕ગ쇎紅Ἆ碑䊂ἶ浲痨ꯨ늧ꞩ窐ꆑ⚂靷⫂ᖭ海鲳 [ 507.404897][ T5935] usb 6-1: SerialNumber: Б [ 507.442013][T14075] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 507.449861][T14075] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 507.470758][T10614] IPVS: stop unused estimator thread 0... [ 507.869437][T14072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.888083][T14072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.957655][ T5935] usb 6-1: USB disconnect, device number 25 [ 508.491759][ T5935] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 508.676510][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 508.700832][ T5935] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1023 [ 508.756886][ T5935] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 508.797785][ T5935] usb 6-1: language id specifier not provided by device, defaulting to English [ 508.825551][T13902] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 508.835686][ T5935] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 508.859228][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.891708][ T5935] usb 6-1: Product: 䖰䪙氽Ҁ毣貗뫲俻囙㬇쓰죩∐ó⽌튐㳸棭䥏똎桿퐣캧ኤ坏醢쯰雭ሹ썵 [ 508.924227][ T5935] usb 6-1: Manufacturer: э [ 508.930698][ T5935] usb 6-1: SerialNumber: Н [ 508.963154][T14072] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 508.980631][T14072] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 508.982994][T13902] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.020187][T13902] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.078661][T13902] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.245323][ T5935] usb 6-1: USB disconnect, device number 26 [ 509.495684][T13902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.546518][T13902] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.580064][T10605] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.587345][T10605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 509.648768][T10605] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.656036][T10605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.086057][ T43] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 510.233005][ T43] usb 4-1: device descriptor read/64, error -71 [ 510.388462][T13902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.502504][ T43] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 510.573769][T13902] veth0_vlan: entered promiscuous mode [ 510.607988][T13902] veth1_vlan: entered promiscuous mode [ 510.661210][ T43] usb 4-1: device descriptor read/64, error -71 [ 510.725339][T13902] veth0_macvtap: entered promiscuous mode [ 510.763206][T14161] /dev/rnullb0: Can't open blockdev [ 510.785215][T13902] veth1_macvtap: entered promiscuous mode [ 510.791136][ T43] usb usb4-port1: attempt power cycle [ 510.855689][T13902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 510.879456][T13902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 510.937183][ T3497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.949776][ T3497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.973959][ T3497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.018850][ T3497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.152403][ T43] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 511.203698][ T43] usb 4-1: device descriptor read/8, error -71 [ 511.289095][T10616] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.313830][T10616] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.451670][ T43] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 511.492104][ T43] usb 4-1: device descriptor read/8, error -71 [ 511.530730][T10607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.550388][T10607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.604630][ T43] usb usb4-port1: unable to enumerate USB device [ 511.824526][T14177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.862763][T14179] /dev/rnullb0: Can't open blockdev [ 512.931665][ T984] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 513.111458][ T984] usb 3-1: Using ep0 maxpacket: 8 [ 513.118420][T14219] /dev/rnullb0: Can't open blockdev [ 513.133336][ T984] usb 3-1: config 0 has no interfaces? [ 513.139225][ T984] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 513.182911][ T984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.230767][ T984] usb 3-1: config 0 descriptor?? [ 513.583149][T14232] mkiss: ax0: crc mode is auto. [ 513.597020][T14236] /dev/rnullb0: Can't open blockdev [ 513.612857][T14236] sit0: entered promiscuous mode [ 513.639517][T14236] netlink: 'syz.5.2415': attribute type 1 has an invalid length. [ 513.660645][T14236] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2415'. [ 513.703538][T14205] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.737105][T14205] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.083923][ T5951] usb 3-1: USB disconnect, device number 125 [ 514.171434][ T981] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 514.331781][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 514.339348][ T981] usb 6-1: config 8 has an invalid interface number: 218 but max is 3 [ 514.358581][ T981] usb 6-1: config 8 has an invalid interface number: 109 but max is 3 [ 514.379311][ T981] usb 6-1: config 8 has an invalid interface number: 168 but max is 3 [ 514.398970][ T981] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 514.432423][ T981] usb 6-1: config 8 has 3 interfaces, different from the descriptor's value: 4 [ 514.459600][ T981] usb 6-1: config 8 has no interface number 0 [ 514.471305][ T981] usb 6-1: config 8 has no interface number 1 [ 514.488322][ T981] usb 6-1: config 8 has no interface number 2 [ 514.501453][ T981] usb 6-1: config 8 interface 218 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 514.532266][ T981] usb 6-1: config 8 interface 218 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 514.571510][ T981] usb 6-1: config 8 interface 218 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 514.586457][ T981] usb 6-1: config 8 interface 168 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 514.620484][ T981] usb 6-1: config 8 interface 109 has no altsetting 0 [ 514.628205][ T981] usb 6-1: config 8 interface 168 has no altsetting 0 [ 514.647558][ T981] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=3a.5c [ 514.681140][ T981] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.699602][ T981] usb 6-1: Product: చ [ 514.709744][ T981] usb 6-1: SerialNumber: syz [ 514.740227][ T981] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 514.771568][T14273] batadv_slave_0: entered promiscuous mode [ 514.772548][ T981] usb 6-1: no configuration chosen from 1 choice [ 514.786035][T14272] batadv_slave_0: left promiscuous mode [ 516.265491][T14300] NILFS (rnullb0): couldn't find nilfs on the device [ 516.379097][T14309] 9pnet_fd: Insufficient options for proto=fd [ 516.939305][ T5951] usb 6-1: USB disconnect, device number 27 [ 517.513519][T14332] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 517.533399][T14332] UDF-fs: Scanning with blocksize 4096 failed [ 517.951612][T14343] netlink: 'syz.5.2438': attribute type 8 has an invalid length. [ 518.144748][T14348] hfs: can't find a HFS filesystem on dev rnullb0 [ 518.231094][ T24] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 518.381104][ T43] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 518.398479][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.420770][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 518.453065][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 518.472652][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.513088][ T24] usb 6-1: config 0 descriptor?? [ 518.546385][ T43] usb 3-1: config index 0 descriptor too short (expected 65069, got 45) [ 518.563422][ T43] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 518.598858][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.619801][ T43] usb 3-1: config 0 has no interfaces? [ 518.640209][ T43] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 518.680913][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.738125][ T43] usb 3-1: config 0 descriptor?? [ 518.994290][ T43] usb 3-1: USB disconnect, device number 126 [ 519.141428][T14343] NILFS (loop5): device size too small [ 519.155219][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 519.171440][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 519.211741][ T24] usb 6-1: USB disconnect, device number 28 [ 520.915028][T14379] netlink: 'syz.2.2450': attribute type 41 has an invalid length. [ 521.711056][ T5951] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 521.741152][ T43] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 521.868940][ T5951] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 521.894713][ T5951] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 521.911184][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 521.919403][ T5951] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 521.927098][ T43] usb 3-1: config 203 has an invalid interface number: 63 but max is 2 [ 521.941476][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.951397][ T43] usb 3-1: config 203 has an invalid interface number: 142 but max is 2 [ 521.980601][ T5951] usb 4-1: Product: syz [ 521.991099][ T43] usb 3-1: config 203 has an invalid interface number: 231 but max is 2 [ 521.991424][ T5951] usb 4-1: Manufacturer: syz [ 521.999497][ T43] usb 3-1: config 203 has an invalid interface number: 152 but max is 2 [ 522.048059][ T5951] usb 4-1: SerialNumber: syz [ 522.077985][ T43] usb 3-1: config 203 has 4 interfaces, different from the descriptor's value: 3 [ 522.121029][ T43] usb 3-1: config 203 has no interface number 0 [ 522.137601][ T43] usb 3-1: config 203 has no interface number 1 [ 522.154934][ T43] usb 3-1: config 203 has no interface number 2 [ 522.175250][ T43] usb 3-1: config 203 has no interface number 3 [ 522.211142][ T43] usb 3-1: config 203 interface 63 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 522.272342][ T43] usb 3-1: config 203 interface 63 altsetting 6 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 522.301099][ T43] usb 3-1: config 203 interface 63 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 522.361298][ T43] usb 3-1: config 203 interface 63 altsetting 6 endpoint 0x7 has invalid maxpacket 520, setting to 64 [ 522.409176][ T43] usb 3-1: config 203 interface 63 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 522.433862][ T5951] cdc_ncm 4-1:1.0: bind() failure [ 522.450029][ T43] usb 3-1: config 203 interface 63 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 522.498136][ T5951] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 522.513927][ T43] usb 3-1: config 203 interface 63 altsetting 6 endpoint 0x5 has an invalid bInterval 128, changing to 11 [ 522.533264][ T5951] cdc_ncm 4-1:1.1: bind() failure [ 522.581095][ T43] usb 3-1: config 203 interface 63 altsetting 6 bulk endpoint 0x2 has invalid maxpacket 8 [ 522.599694][ T5951] usb 4-1: USB disconnect, device number 122 [ 522.617229][ T43] usb 3-1: config 203 interface 63 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 522.671110][ T43] usb 3-1: config 203 interface 63 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 522.689509][T10612] bridge_slave_1: left allmulticast mode [ 522.703262][ T43] usb 3-1: config 203 interface 63 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 522.723902][T10612] bridge_slave_1: left promiscuous mode [ 522.730064][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.779634][ T43] usb 3-1: config 203 interface 63 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 522.859423][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.871160][ T43] usb 3-1: config 203 interface 63 altsetting 6 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 522.926313][ T43] usb 3-1: config 203 interface 63 altsetting 6 has a duplicate endpoint with address 0x2, skipping [ 522.956650][ T43] usb 3-1: config 203 interface 142 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 522.991109][ T43] usb 3-1: config 203 interface 231 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 523.031039][ T43] usb 3-1: too many endpoints for config 203 interface 152 altsetting 206: 103, using maximum allowed: 30 [ 523.071202][ T43] usb 3-1: config 203 interface 152 altsetting 206 has a duplicate endpoint with address 0x2, skipping [ 523.101179][ T43] usb 3-1: config 203 interface 152 altsetting 206 has an invalid descriptor for endpoint zero, skipping [ 523.140228][ T43] usb 3-1: config 203 interface 152 altsetting 206 has an endpoint descriptor with address 0x45, changing to 0x5 [ 523.300906][ T43] usb 3-1: config 203 interface 152 altsetting 206 has a duplicate endpoint with address 0x5, skipping [ 523.353174][ T43] usb 3-1: config 203 interface 152 altsetting 206 endpoint 0xF has invalid maxpacket 55570, setting to 64 [ 523.450906][ T43] usb 3-1: config 203 interface 152 altsetting 206 has a duplicate endpoint with address 0x5, skipping [ 523.505129][ T43] usb 3-1: config 203 interface 152 altsetting 206 has a duplicate endpoint with address 0xE, skipping [ 523.551031][ T43] usb 3-1: config 203 interface 152 altsetting 206 has 9 endpoint descriptors, different from the interface descriptor's value: 103 [ 523.601284][ T43] usb 3-1: config 203 interface 63 has no altsetting 0 [ 523.608224][ T43] usb 3-1: config 203 interface 142 has no altsetting 0 [ 523.651158][ T43] usb 3-1: config 203 interface 231 has no altsetting 0 [ 523.658169][ T43] usb 3-1: config 203 interface 152 has no altsetting 0 [ 523.707408][ T43] usb 3-1: Dual-Role OTG device on HNP port [ 523.731491][ T43] usb 3-1: New USB device found, idVendor=03f0, idProduct=3016, bcdDevice=84.8c [ 523.765671][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.793349][ T43] usb 3-1: Product:  [ 523.811080][ T43] usb 3-1: Manufacturer: 禘ᜦ㗋ঢ়㆙⪎ؓƏ졬㿔昂밫ㄔ쳳蹑禅聚䆑矖縍啡ꪭꧮ剖颓傖ɣ驝綣篞娖⻠回ᨼ黱쎲쾡礖䊷Ⲽ暪甤뻒섗쿙稃불礠娚ᯃ痩接 [ 523.872265][ T43] usb 3-1: SerialNumber: 瑓ꥬ靫ꩥ던ꦹཧ굝ଓ邁Ί婍൰貞ﯷ坪ⰷ捫멍믜괟ꢃ두ጕ귤޶ﭣ畞뀢觙檋ᨦ䆠楕퀕䢱谞 [ 523.963132][T14391] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 525.161699][T14420] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2466'. [ 525.801294][ T43] usb 3-1: USB disconnect, device number 127 [ 525.844511][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2467'. [ 525.923863][T14421] /dev/rnullb0: Can't open blockdev [ 525.965213][T14436] XFS (rnullb0): Invalid superblock magic number [ 526.122432][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 526.139632][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 526.165446][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.198632][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 526.233213][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 526.366294][T10612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.402481][T10612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.447576][T10612] bond0 (unregistering): Released all slaves [ 527.382167][T14457] qnx4: no qnx4 filesystem (no root dir). [ 528.311901][T14466] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2479'. [ 528.351084][T12554] Bluetooth: hci3: command tx timeout [ 528.948666][T12554] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 528.963431][T12554] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 528.972226][T12554] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 528.990823][T12554] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 529.025554][T12554] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 529.168524][T14483] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2483'. [ 529.504972][T10612] hsr_slave_0: left promiscuous mode [ 529.524810][T10612] hsr_slave_1: left promiscuous mode [ 529.541997][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.549787][T10612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.578624][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.597930][T10612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.647519][T10612] veth1_macvtap: left promiscuous mode [ 529.674094][T10612] veth0_macvtap: left promiscuous mode [ 529.679825][T10612] veth1_vlan: left allmulticast mode [ 529.691321][ T981] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 529.695482][T10612] veth1_vlan: left promiscuous mode [ 529.714799][T10612] veth0_vlan: left promiscuous mode [ 529.871262][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 529.884737][ T981] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.911180][ T981] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.962312][ T981] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.020246][ T981] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 530.063902][ T981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 530.080898][ T981] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 530.090358][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.140349][ T981] usb 4-1: config 0 descriptor?? [ 530.383863][T14492] hfs: can't find a HFS filesystem on dev rnullb0 [ 530.411315][T12554] Bluetooth: hci3: command tx timeout [ 530.524728][T10612] team0 (unregistering): Port device macvlan0 removed [ 530.638390][T14487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 530.671885][T14487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.735073][T14495] omfs: Invalid superblock (0) [ 530.938472][T14487] gfs2: not a GFS2 filesystem [ 531.083786][ T981] usbhid 4-1:0.0: can't add hid device: -71 [ 531.089992][ T981] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 531.144385][ T981] usb 4-1: USB disconnect, device number 123 [ 531.214868][T12554] Bluetooth: hci1: command tx timeout [ 531.692611][T10612] team0 (unregistering): Port device team_slave_1 removed [ 531.883158][T10612] team0 (unregistering): Port device team_slave_0 removed [ 532.334834][T14501] FAULT_INJECTION: forcing a failure. [ 532.334834][T14501] name failslab, interval 1, probability 0, space 0, times 1 [ 532.387314][T14501] CPU: 1 UID: 0 PID: 14501 Comm: syz.3.2490 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 532.387344][T14501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 532.387356][T14501] Call Trace: [ 532.387366][T14501] [ 532.387375][T14501] dump_stack_lvl+0x189/0x250 [ 532.387415][T14501] ? __pfx____ratelimit+0x10/0x10 [ 532.387443][T14501] ? __pfx_dump_stack_lvl+0x10/0x10 [ 532.387467][T14501] ? __pfx__printk+0x10/0x10 [ 532.387499][T14501] ? __pfx___might_resched+0x10/0x10 [ 532.387529][T14501] ? fs_reclaim_acquire+0x7d/0x100 [ 532.387559][T14501] should_fail_ex+0x414/0x560 [ 532.387588][T14501] should_failslab+0xa8/0x100 [ 532.387612][T14501] __kmalloc_cache_noprof+0x70/0x3d0 [ 532.387632][T14501] ? snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 532.387662][T14501] snd_pcm_oss_change_params_locked+0x1b3/0x3e40 [ 532.387690][T14501] ? __pfx___mutex_trylock_common+0x10/0x10 [ 532.387720][T14501] ? rcu_is_watching+0x15/0xb0 [ 532.387744][T14501] ? trace_contention_end+0x39/0x120 [ 532.387768][T14501] ? __mutex_lock+0x335/0x1360 [ 532.387797][T14501] ? do_vfs_ioctl+0xbe8/0x1430 [ 532.387822][T14501] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 532.387843][T14501] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 532.387871][T14501] ? __pfx___mutex_lock+0x10/0x10 [ 532.387922][T14501] snd_pcm_oss_make_ready+0x11b/0x340 [ 532.387952][T14501] snd_pcm_oss_set_trigger+0x6a/0x740 [ 532.387976][T14501] ? __might_fault+0xb0/0x130 [ 532.388001][T14501] snd_pcm_oss_ioctl+0xbb3/0xdd0 [ 532.388024][T14501] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 532.388046][T14501] __se_sys_ioctl+0xf9/0x170 [ 532.388071][T14501] do_syscall_64+0xfa/0x3b0 [ 532.388096][T14501] ? lockdep_hardirqs_on+0x9c/0x150 [ 532.388121][T14501] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.388139][T14501] ? clear_bhb_loop+0x60/0xb0 [ 532.388161][T14501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.388179][T14501] RIP: 0033:0x7fcee758e9a9 [ 532.388196][T14501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.388212][T14501] RSP: 002b:00007fcee53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.388233][T14501] RAX: ffffffffffffffda RBX: 00007fcee77b5fa0 RCX: 00007fcee758e9a9 [ 532.388246][T14501] RDX: 00002000000001c0 RSI: 0000000040045010 RDI: 0000000000000003 [ 532.388259][T14501] RBP: 00007fcee53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 532.388270][T14501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.388281][T14501] R13: 0000000000000000 R14: 00007fcee77b5fa0 R15: 00007ffff0104438 [ 532.388313][T14501] [ 532.653408][ C1] vkms_vblank_simulate: vblank timer overrun [ 532.670357][T12554] Bluetooth: hci3: command tx timeout [ 533.308414][T12554] Bluetooth: hci1: command tx timeout [ 533.910788][T14443] chnl_net:caif_netlink_parms(): no params data found [ 534.458404][T14522] XFS (rnullb0): Invalid superblock magic number [ 534.488393][T14443] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.523213][T14443] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.547030][T14443] bridge_slave_0: entered allmulticast mode [ 534.601947][T14443] bridge_slave_0: entered promiscuous mode [ 534.613107][T14443] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.631272][T14443] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.661252][T14443] bridge_slave_1: entered allmulticast mode [ 534.669384][T14443] bridge_slave_1: entered promiscuous mode [ 534.737923][T12554] Bluetooth: hci3: command tx timeout [ 534.739921][ T3497] smc: removing ib device syz! [ 534.929711][T14443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.056434][T14443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 535.265369][T14536] FAULT_INJECTION: forcing a failure. [ 535.265369][T14536] name failslab, interval 1, probability 0, space 0, times 0 [ 535.281480][T14536] CPU: 1 UID: 0 PID: 14536 Comm: syz.5.2497 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 535.281508][T14536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 535.281519][T14536] Call Trace: [ 535.281526][T14536] [ 535.281534][T14536] dump_stack_lvl+0x189/0x250 [ 535.281564][T14536] ? __pfx____ratelimit+0x10/0x10 [ 535.281588][T14536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.281611][T14536] ? __pfx__printk+0x10/0x10 [ 535.281640][T14536] ? __pfx___might_resched+0x10/0x10 [ 535.281660][T14536] ? fs_reclaim_acquire+0x7d/0x100 [ 535.281686][T14536] should_fail_ex+0x414/0x560 [ 535.281718][T14536] should_failslab+0xa8/0x100 [ 535.281740][T14536] __kmalloc_cache_noprof+0x70/0x3d0 [ 535.281758][T14536] ? snd_pcm_oss_change_params_locked+0x1fe/0x3e40 [ 535.281798][T14536] snd_pcm_oss_change_params_locked+0x1fe/0x3e40 [ 535.281823][T14536] ? __pfx___mutex_trylock_common+0x10/0x10 [ 535.281851][T14536] ? rcu_is_watching+0x15/0xb0 [ 535.281873][T14536] ? trace_contention_end+0x39/0x120 [ 535.281896][T14536] ? __mutex_lock+0x335/0x1360 [ 535.281929][T14536] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 535.281950][T14536] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 535.281975][T14536] ? __pfx___mutex_lock+0x10/0x10 [ 535.282021][T14536] snd_pcm_oss_make_ready+0x11b/0x340 [ 535.282048][T14536] snd_pcm_oss_set_trigger+0x6a/0x740 [ 535.282071][T14536] ? __might_fault+0xb0/0x130 [ 535.282094][T14536] snd_pcm_oss_ioctl+0xbb3/0xdd0 [ 535.282116][T14536] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 535.282136][T14536] __se_sys_ioctl+0xf9/0x170 [ 535.282158][T14536] do_syscall_64+0xfa/0x3b0 [ 535.282181][T14536] ? lockdep_hardirqs_on+0x9c/0x150 [ 535.282203][T14536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.282219][T14536] ? clear_bhb_loop+0x60/0xb0 [ 535.282240][T14536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.282256][T14536] RIP: 0033:0x7ff38378e9a9 [ 535.282272][T14536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.282286][T14536] RSP: 002b:00007ff384663038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 535.282305][T14536] RAX: ffffffffffffffda RBX: 00007ff3839b5fa0 RCX: 00007ff38378e9a9 [ 535.282317][T14536] RDX: 00002000000001c0 RSI: 0000000040045010 RDI: 0000000000000003 [ 535.282328][T14536] RBP: 00007ff384663090 R08: 0000000000000000 R09: 0000000000000000 [ 535.282339][T14536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.282349][T14536] R13: 0000000000000000 R14: 00007ff3839b5fa0 R15: 00007ffe65769298 [ 535.282378][T14536] [ 535.549854][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.658438][T12554] Bluetooth: hci1: command tx timeout [ 536.016272][T14443] team0: Port device team_slave_0 added [ 536.060373][T14443] team0: Port device team_slave_1 added [ 536.388331][T14443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.416758][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.481453][T14443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.666752][T14443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.694421][T14443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.737106][T14443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 536.914538][T14563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2502'. [ 537.250267][T14576] FAULT_INJECTION: forcing a failure. [ 537.250267][T14576] name failslab, interval 1, probability 0, space 0, times 0 [ 537.251799][T14573] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 537.283793][T14576] CPU: 0 UID: 0 PID: 14576 Comm: syz.3.2504 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 537.283832][T14576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 537.283844][T14576] Call Trace: [ 537.283853][T14576] [ 537.283863][T14576] dump_stack_lvl+0x189/0x250 [ 537.283895][T14576] ? __pfx____ratelimit+0x10/0x10 [ 537.283923][T14576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.283951][T14576] ? __pfx__printk+0x10/0x10 [ 537.283985][T14576] ? __pfx___might_resched+0x10/0x10 [ 537.284008][T14576] ? fs_reclaim_acquire+0x7d/0x100 [ 537.284038][T14576] should_fail_ex+0x414/0x560 [ 537.284069][T14576] should_failslab+0xa8/0x100 [ 537.284095][T14576] __kmalloc_noprof+0xcb/0x4f0 [ 537.284116][T14576] ? snd_pcm_hw_refine+0x967/0x1640 [ 537.284151][T14576] snd_pcm_hw_refine+0x967/0x1640 [ 537.284200][T14576] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 537.284263][T14576] ? snd_pcm_oss_change_params_locked+0x1fe/0x3e40 [ 537.284296][T14576] ? __asan_memset+0x22/0x50 [ 537.284323][T14576] ? snd_pcm_oss_change_params_locked+0x7a0/0x3e40 [ 537.284348][T14576] ? snd_pcm_oss_change_params_locked+0x800/0x3e40 [ 537.284374][T14576] snd_pcm_oss_change_params_locked+0xa84/0x3e40 [ 537.284416][T14576] ? __mutex_lock+0x335/0x1360 [ 537.284450][T14576] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 537.284472][T14576] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 537.284529][T14576] snd_pcm_oss_make_ready+0x11b/0x340 [ 537.284559][T14576] snd_pcm_oss_set_trigger+0x6a/0x740 [ 537.284583][T14576] ? __might_fault+0xb0/0x130 [ 537.284609][T14576] snd_pcm_oss_ioctl+0xbb3/0xdd0 [ 537.284631][T14576] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 537.284652][T14576] __se_sys_ioctl+0xf9/0x170 [ 537.284675][T14576] do_syscall_64+0xfa/0x3b0 [ 537.284701][T14576] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.284727][T14576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.284747][T14576] ? clear_bhb_loop+0x60/0xb0 [ 537.284758][T14573] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 537.284771][T14576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.284789][T14576] RIP: 0033:0x7fcee758e9a9 [ 537.284805][T14576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.284827][T14576] RSP: 002b:00007fcee53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 537.284847][T14576] RAX: ffffffffffffffda RBX: 00007fcee77b5fa0 RCX: 00007fcee758e9a9 [ 537.284860][T14576] RDX: 00002000000001c0 RSI: 0000000040045010 RDI: 0000000000000003 [ 537.284872][T14576] RBP: 00007fcee53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.284883][T14576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 537.284893][T14576] R13: 0000000000000000 R14: 00007fcee77b5fa0 R15: 00007ffff0104438 [ 537.284923][T14576] [ 537.694694][T12554] Bluetooth: hci1: command tx timeout [ 537.742377][T14581] gfs2: not a GFS2 filesystem [ 537.945000][T14443] hsr_slave_0: entered promiscuous mode [ 537.972408][T14443] hsr_slave_1: entered promiscuous mode [ 537.973169][T14443] debugfs: 'hsr0' already exists in 'hsr' [ 537.973193][T14443] Cannot create hsr debugfs directory [ 538.127857][T14588] tmpfs: Bad value for 'mpol' [ 538.162259][T14590] hfs: can't find a HFS filesystem on dev rnullb0 [ 538.277126][T14592] gfs2: not a GFS2 filesystem [ 538.412484][T14479] chnl_net:caif_netlink_parms(): no params data found [ 539.231686][ T5935] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 539.411010][ T5935] usb 6-1: Using ep0 maxpacket: 32 [ 539.425219][ T5935] usb 6-1: config 0 has an invalid interface number: 253 but max is 0 [ 539.471036][ T5935] usb 6-1: config 0 has no interface number 0 [ 539.477214][ T5935] usb 6-1: config 0 interface 253 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 539.492563][ T5935] usb 6-1: config 0 interface 253 has no altsetting 0 [ 539.513803][ T5935] usb 6-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=ea.ae [ 539.546531][ T5935] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.572547][ T5935] usb 6-1: Product: syz [ 539.576767][ T5935] usb 6-1: Manufacturer: syz [ 539.595256][ T5935] usb 6-1: SerialNumber: syz [ 539.618177][ T5935] usb 6-1: config 0 descriptor?? [ 539.640876][ T5935] gspca_main: sq905-2.14.0 probing 2770:9120 [ 539.750781][T14479] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.780563][T14479] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.811320][T14479] bridge_slave_0: entered allmulticast mode [ 539.831150][ T5896] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 539.894782][T14479] bridge_slave_0: entered promiscuous mode [ 539.964290][T14479] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.002112][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 540.011269][T14479] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.015283][ T5896] usb 4-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 540.038205][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.042668][T14479] bridge_slave_1: entered allmulticast mode [ 540.071090][ T5896] usb 4-1: Product: syz [ 540.088368][ T5896] usb 4-1: Manufacturer: syz [ 540.103822][ T5896] usb 4-1: SerialNumber: syz [ 540.128777][T14479] bridge_slave_1: entered promiscuous mode [ 540.171550][ T5935] gspca_sq905: sq905_command: usb_control_msg failed (-110) [ 540.190588][ T5935] sq905 6-1:0.253: probe with driver sq905 failed with error -110 [ 540.269869][T14621] FAULT_INJECTION: forcing a failure. [ 540.269869][T14621] name failslab, interval 1, probability 0, space 0, times 0 [ 540.293040][ T5935] usb 6-1: USB disconnect, device number 29 [ 540.312484][T14621] CPU: 0 UID: 0 PID: 14621 Comm: syz.5.2516 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 540.312515][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 540.312527][T14621] Call Trace: [ 540.312535][T14621] [ 540.312544][T14621] dump_stack_lvl+0x189/0x250 [ 540.312577][T14621] ? __pfx____ratelimit+0x10/0x10 [ 540.312604][T14621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 540.312632][T14621] ? __pfx__printk+0x10/0x10 [ 540.312667][T14621] ? __pfx___might_resched+0x10/0x10 [ 540.312691][T14621] ? fs_reclaim_acquire+0x7d/0x100 [ 540.312721][T14621] should_fail_ex+0x414/0x560 [ 540.312752][T14621] should_failslab+0xa8/0x100 [ 540.312787][T14621] __kmalloc_noprof+0xcb/0x4f0 [ 540.312808][T14621] ? snd_pcm_hw_refine+0x967/0x1640 [ 540.312843][T14621] snd_pcm_hw_refine+0x967/0x1640 [ 540.312890][T14621] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 540.312960][T14621] ? __kasan_kmalloc+0x93/0xb0 [ 540.312994][T14621] snd_pcm_oss_change_params_locked+0xd22/0x3e40 [ 540.313038][T14621] ? __mutex_lock+0x335/0x1360 [ 540.313078][T14621] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 540.313102][T14621] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 540.313160][T14621] snd_pcm_oss_make_ready+0x11b/0x340 [ 540.313192][T14621] snd_pcm_oss_set_trigger+0x6a/0x740 [ 540.313219][T14621] ? __might_fault+0xb0/0x130 [ 540.313246][T14621] snd_pcm_oss_ioctl+0xbb3/0xdd0 [ 540.313271][T14621] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 540.313293][T14621] __se_sys_ioctl+0xf9/0x170 [ 540.313320][T14621] do_syscall_64+0xfa/0x3b0 [ 540.313347][T14621] ? lockdep_hardirqs_on+0x9c/0x150 [ 540.313374][T14621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.313394][T14621] ? clear_bhb_loop+0x60/0xb0 [ 540.313418][T14621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.313436][T14621] RIP: 0033:0x7ff38378e9a9 [ 540.313454][T14621] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.313470][T14621] RSP: 002b:00007ff384663038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.313493][T14621] RAX: ffffffffffffffda RBX: 00007ff3839b5fa0 RCX: 00007ff38378e9a9 [ 540.313507][T14621] RDX: 00002000000001c0 RSI: 0000000040045010 RDI: 0000000000000003 [ 540.313521][T14621] RBP: 00007ff384663090 R08: 0000000000000000 R09: 0000000000000000 [ 540.313532][T14621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.313544][T14621] R13: 0000000000000000 R14: 00007ff3839b5fa0 R15: 00007ffe65769298 [ 540.313576][T14621] [ 540.683642][ T5896] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 540.772903][T14479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.801739][ T5896] snd-usb-audio 4-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 540.802579][T14479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.879238][ T5896] usb 4-1: USB disconnect, device number 124 [ 540.965477][ T5850] udevd[5850]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.023880][T14479] team0: Port device team_slave_0 added [ 541.060497][T14479] team0: Port device team_slave_1 added [ 541.355762][T14479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.373218][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.445783][T14479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.467116][T14479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.478159][T14479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.504089][ C1] vkms_vblank_simulate: vblank timer overrun [ 541.524526][T14479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.551109][ T5951] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 541.610550][T14633] Invalid source name [ 541.617206][T14633] UBIFS error (pid: 14633): cannot open "/dev/sg0", error -22 [ 541.628148][T10612] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.668900][T14443] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 541.723732][ T5951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 541.736665][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.756630][ T5951] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.768363][ T5951] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 541.788625][ T5951] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 541.798565][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.811424][T14443] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 541.819396][ T5951] usb 4-1: config 0 descriptor?? [ 541.873924][T10612] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.941730][T14443] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 541.989219][T10612] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.018843][T14479] hsr_slave_0: entered promiscuous mode [ 542.038062][T14479] hsr_slave_1: entered promiscuous mode [ 542.054819][T14479] debugfs: 'hsr0' already exists in 'hsr' [ 542.060736][T14479] Cannot create hsr debugfs directory [ 542.073848][T14443] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 542.119049][T10612] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.253990][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.264146][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.289131][ T5951] keytouch 0003:0926:3333.0015: fixing up Keytouch IEC report descriptor [ 542.351986][ T5951] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0015/input/input47 [ 542.491619][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.504312][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.567135][ T5951] keytouch 0003:0926:3333.0015: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 542.741813][ T5951] usb 4-1: USB disconnect, device number 125 [ 542.810817][T14641] fido_id[14641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 543.126938][T10612] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.300491][T10612] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.503505][T14650] 9pnet_fd: Insufficient options for proto=fd [ 543.644971][T10612] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.715715][T14443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.900828][T10612] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.945164][T14479] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 544.027279][T14479] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 544.058245][T14479] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 544.092788][T14666] FAULT_INJECTION: forcing a failure. [ 544.092788][T14666] name failslab, interval 1, probability 0, space 0, times 0 [ 544.106456][T14443] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.118076][T14479] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 544.127036][T14666] CPU: 0 UID: 0 PID: 14666 Comm: syz.3.2523 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 544.127070][T14666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.127082][T14666] Call Trace: [ 544.127091][T14666] [ 544.127099][T14666] dump_stack_lvl+0x189/0x250 [ 544.127132][T14666] ? __pfx____ratelimit+0x10/0x10 [ 544.127161][T14666] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.127188][T14666] ? __pfx__printk+0x10/0x10 [ 544.127218][T14666] ? __pfx___might_resched+0x10/0x10 [ 544.127242][T14666] ? fs_reclaim_acquire+0x7d/0x100 [ 544.127273][T14666] should_fail_ex+0x414/0x560 [ 544.127304][T14666] should_failslab+0xa8/0x100 [ 544.127330][T14666] __kmalloc_cache_noprof+0x70/0x3d0 [ 544.127352][T14666] ? snd_pcm_hw_param_near+0x7f/0x500 [ 544.127381][T14666] snd_pcm_hw_param_near+0x7f/0x500 [ 544.127404][T14666] ? snd_pcm_oss_change_params_locked+0xff9/0x3e40 [ 544.127428][T14666] ? kfree+0x18e/0x440 [ 544.127445][T14666] ? snd_pcm_hw_param_value+0x2b9/0x510 [ 544.127474][T14666] snd_pcm_oss_change_params_locked+0x1048/0x3e40 [ 544.127520][T14666] ? __mutex_lock+0x335/0x1360 [ 544.127560][T14666] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 544.127585][T14666] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 544.127652][T14666] snd_pcm_oss_make_ready+0x11b/0x340 [ 544.127683][T14666] snd_pcm_oss_set_trigger+0x6a/0x740 [ 544.127710][T14666] ? __might_fault+0xb0/0x130 [ 544.127737][T14666] snd_pcm_oss_ioctl+0xbb3/0xdd0 [ 544.127762][T14666] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 544.127785][T14666] __se_sys_ioctl+0xf9/0x170 [ 544.127828][T14666] do_syscall_64+0xfa/0x3b0 [ 544.127855][T14666] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.127882][T14666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.127901][T14666] ? clear_bhb_loop+0x60/0xb0 [ 544.127925][T14666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.127944][T14666] RIP: 0033:0x7fcee758e9a9 [ 544.127963][T14666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.127980][T14666] RSP: 002b:00007fcee53f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.128002][T14666] RAX: ffffffffffffffda RBX: 00007fcee77b5fa0 RCX: 00007fcee758e9a9 [ 544.128017][T14666] RDX: 00002000000001c0 RSI: 0000000040045010 RDI: 0000000000000003 [ 544.128029][T14666] RBP: 00007fcee53f6090 R08: 0000000000000000 R09: 0000000000000000 [ 544.128042][T14666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.128054][T14666] R13: 0000000000000000 R14: 00007fcee77b5fa0 R15: 00007ffff0104438 [ 544.128087][T14666] [ 544.705886][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.713410][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.891521][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 544.902876][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.910268][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.306734][T10612] bridge_slave_1: left allmulticast mode [ 545.329079][T14684] binder: 14683:14684 ioctl 4018620d 0 returned -22 [ 545.330985][T10612] bridge_slave_1: left promiscuous mode [ 545.346432][T14684] netlink: 'syz.5.2526': attribute type 10 has an invalid length. [ 545.360576][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.388134][T10612] bridge_slave_0: left allmulticast mode [ 545.408593][T10612] bridge_slave_0: left promiscuous mode [ 545.440139][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.494147][T10612] bridge_slave_1: left allmulticast mode [ 545.499876][T10612] bridge_slave_1: left promiscuous mode [ 545.548711][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.587186][T10612] bridge_slave_0: left allmulticast mode [ 545.595028][T10612] bridge_slave_0: left promiscuous mode [ 545.600870][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.641445][ T5896] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 546.455058][ T5896] usb 6-1: Using ep0 maxpacket: 32 [ 546.473344][ T5896] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 546.482932][ T5896] usb 6-1: config 0 interface 0 has no altsetting 1 [ 546.514744][ T5896] usb 6-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 546.527582][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 546.542878][ T5896] usb 6-1: SerialNumber: syz [ 546.550631][ T5896] usb 6-1: config 0 descriptor?? [ 546.559328][ T5896] usb-storage 6-1:0.0: USB Mass Storage device detected [ 546.600150][ T5896] usb-storage 6-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 547.698028][T10612] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.724418][T10612] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.750541][T10612] bond0 (unregistering): Released all slaves [ 548.395885][T14684] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 548.906790][T14722] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 548.958504][ T5916] usb 6-1: USB disconnect, device number 30 [ 548.966522][T14703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 549.039330][T14479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.454718][ T24] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 549.526739][T14479] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.678933][ T24] usb 6-1: config index 0 descriptor too short (expected 64706, got 72) [ 549.716727][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 549.743757][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.774131][ T24] usb 6-1: Product: syz [ 549.778442][ T24] usb 6-1: Manufacturer: syz [ 549.810551][ T24] usb 6-1: SerialNumber: syz [ 549.890899][ T24] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 549.922964][ T981] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 550.019658][T10610] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.027031][T10610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.386504][ T43] usb 6-1: USB disconnect, device number 31 [ 550.545032][T10607] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.552305][T10607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.703854][T14443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.070997][ T981] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 551.078124][ T981] ath9k_htc: Failed to initialize the device [ 551.139803][ T43] usb 6-1: ath9k_htc: USB layer deinitialized [ 551.678306][T14766] netlink: 'syz.5.2538': attribute type 1 has an invalid length. [ 551.737480][T14766] netlink: 'syz.5.2538': attribute type 101 has an invalid length. [ 551.751169][ T5896] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 551.752881][T14766] netlink: 832 bytes leftover after parsing attributes in process `syz.5.2538'. [ 551.951530][ T5896] usb 4-1: Using ep0 maxpacket: 32 [ 551.978963][ T5896] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 552.025625][ T5896] usb 4-1: config 0 has no interface number 0 [ 552.048188][ T5896] usb 4-1: config 0 interface 148 has no altsetting 0 [ 552.069017][ T5896] usb 4-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=c5.61 [ 552.089248][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.097482][T10612] hsr_slave_0: left promiscuous mode [ 552.109549][ T5896] usb 4-1: Product: syz [ 552.114165][T10612] hsr_slave_1: left promiscuous mode [ 552.120113][ T5896] usb 4-1: Manufacturer: syz [ 552.120496][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.127552][ T5896] usb 4-1: SerialNumber: syz [ 552.148904][ T5896] usb 4-1: config 0 descriptor?? [ 552.155514][T10612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.172267][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.180168][T10612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.207857][T10612] hsr_slave_0: left promiscuous mode [ 552.216729][T10612] hsr_slave_1: left promiscuous mode [ 552.227570][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.237701][T10612] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 552.275179][T10612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 552.291130][T10612] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 552.375708][T14761] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2537'. [ 552.406923][T10612] veth1_macvtap: left promiscuous mode [ 552.415514][T10612] veth0_macvtap: left promiscuous mode [ 552.421641][T10612] veth1_vlan: left promiscuous mode [ 552.427420][T10612] veth0_vlan: left promiscuous mode [ 552.437739][T10612] veth1_macvtap: left promiscuous mode [ 552.447064][T10612] veth0_macvtap: left promiscuous mode [ 552.465242][T10612] veth1_vlan: left promiscuous mode [ 552.479999][T10612] veth0_vlan: left promiscuous mode [ 553.212018][ T5896] snd-usb-audio 4-1:0.148: probe with driver snd-usb-audio failed with error -110 [ 553.535767][T14774] /dev/rnullb0: Can't open blockdev [ 553.691942][ T31] INFO: task syz.0.1830:12206 blocked for more than 143 seconds. [ 553.702808][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 553.711560][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 553.720270][ T31] task:syz.0.1830 state:D stack:25096 pid:12206 tgid:12206 ppid:5847 task_flags:0x400040 flags:0x00004004 [ 553.736841][T14780] /dev/rnullb0: Can't open blockdev SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 553.762172][ T31] Call Trace: [ 553.765515][ T31] [ 553.768479][ T31] __schedule+0x1737/0x4d30 [ 553.791014][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.795973][ T31] ? schedule+0x165/0x360 [ 553.808718][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.841014][ T31] ? __pfx___schedule+0x10/0x10 [ 553.848412][ T31] ? schedule+0x91/0x360 [ 553.863214][ T31] schedule+0x165/0x360 [ 553.875848][ T31] schedule_preempt_disabled+0x13/0x30 [ 553.903581][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 553.920577][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 553.933358][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 553.946243][ T31] ? __lock_acquire+0xab9/0xd20 [ 553.956761][ T31] ? userfaultfd_release_all+0x15a/0x5e0 [ 553.988850][ T31] down_write+0x1ab/0x1f0 [ 553.993777][ T31] ? __pfx_down_write+0x10/0x10 [ 553.998667][ T31] ? locks_remove_file+0x344/0xea0 [ 554.021485][ T31] userfaultfd_release_all+0x15a/0x5e0 [ 554.027171][ T31] ? ima_file_free+0x150/0x460 [ 554.038709][ T31] ? __pfx_userfaultfd_release_all+0x10/0x10 [ 554.044907][ T31] userfaultfd_release+0xe7/0x1b0 [ 554.049984][ T31] ? __pfx_userfaultfd_release+0x10/0x10 [ 554.062353][ T31] ? evm_file_release+0x108/0x1e0 [ 554.067437][ T31] ? __pfx_userfaultfd_release+0x10/0x10 [ 554.082637][ T31] __fput+0x449/0xa70 [ 554.086699][ T31] task_work_run+0x1d4/0x260 [ 554.097525][ T31] ? __pfx_task_work_run+0x10/0x10 [ 554.103848][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 554.110558][ T31] exit_to_user_mode_loop+0xec/0x110 [ 554.121008][ T31] do_syscall_64+0x2bd/0x3b0 [ 554.125667][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.131911][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.138208][ T31] ? clear_bhb_loop+0x60/0xb0 [ 554.143739][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.149681][ T31] RIP: 0033:0x7f650b78e9a9 [ 554.154832][ T31] RSP: 002b:00007ffec9cda648 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 554.163880][ T31] RAX: 0000000000000000 RBX: 00007f650b9b7ba0 RCX: 00007f650b78e9a9 [ 554.172351][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 554.180464][ T31] RBP: 00007f650b9b7ba0 R08: 0000000000000000 R09: 0000000bc9cda93f [ 554.199475][ T31] R10: 00007f650b9b7ac0 R11: 0000000000000246 R12: 000000000005fe2a [ 554.208883][ T31] R13: 00007ffec9cda740 R14: ffffffffffffffff R15: 00007ffec9cda760 [ 554.223966][ T31] [ 554.241273][ T31] INFO: task syz.0.1830:12207 blocked for more than 143 seconds. [ 554.249259][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 554.281155][ T31] Blocked by coredump. [ 554.285799][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.300653][ T31] task:syz.0.1830 state:D stack:24472 pid:12207 tgid:12206 ppid:5847 task_flags:0x40044c flags:0x00004004 [ 554.313765][ T31] Call Trace: [ 554.317080][ T31] [ 554.320045][ T31] __schedule+0x1737/0x4d30 [ 554.324756][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.329653][ T31] ? schedule+0x165/0x360 [ 554.335592][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.340577][ T31] ? __pfx___schedule+0x10/0x10 [ 554.345998][ T31] ? schedule+0x91/0x360 [ 554.350298][ T31] schedule+0x165/0x360 [ 554.355226][ T31] schedule_preempt_disabled+0x13/0x30 [ 554.361663][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 554.367251][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 554.373524][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 554.379632][ T31] ? exit_mm+0xcc/0x2c0 [ 554.384312][ T31] ? __pfx_mm_release+0x10/0x10 [ 554.389202][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.394908][ T31] down_read+0x98/0x2e0 [ 554.399107][ T31] exit_mm+0xcc/0x2c0 [ 554.403856][ T31] ? __pfx_exit_mm+0x10/0x10 [ 554.408650][ T31] ? rcu_is_watching+0x15/0xb0 [ 554.419289][ T31] do_exit+0x648/0x2300 [ 554.423851][ T31] ? do_raw_spin_lock+0x121/0x290 [ 554.428927][ T31] ? __pfx_do_exit+0x10/0x10 [ 554.436453][ T31] do_group_exit+0x21c/0x2d0 [ 554.442451][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.447787][ T31] get_signal+0x1286/0x1340 [ 554.452923][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 554.458525][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 554.465535][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 554.471451][ T31] exit_to_user_mode_loop+0x75/0x110 [ 554.476770][ T31] do_syscall_64+0x2bd/0x3b0 [ 554.481832][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.487073][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.494380][ T31] ? clear_bhb_loop+0x60/0xb0 [ 554.499095][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.505500][ T31] RIP: 0033:0x7f650b78e9a9 [ 554.509949][ T31] RSP: 002b:00007f650c59e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 554.519897][ T31] RAX: fffffffffffffe00 RBX: 00007f650b9b5fa8 RCX: 00007f650b78e9a9 [ 554.530743][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f650b9b5fa8 [ 554.544600][ T31] RBP: 00007f650b9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 554.554788][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f650b9b5fac [ 554.564034][ T31] R13: 0000000000000000 R14: 00007ffec9cda400 R15: 00007ffec9cda4e8 [ 554.577453][ T31] [ 554.597722][ T31] INFO: task syz.0.1830:12208 blocked for more than 144 seconds. [ 554.605774][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 554.613589][ T31] Blocked by coredump. [ 554.619139][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 554.632328][ T31] task:syz.0.1830 state:D stack:25512 pid:12208 tgid:12206 ppid:5847 task_flags:0x40044c flags:0x00004004 [ 554.644526][ T31] Call Trace: [ 554.647825][ T31] [ 554.650793][ T31] __schedule+0x1737/0x4d30 [ 554.658673][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.669027][ T31] ? schedule+0x165/0x360 [ 554.676840][ T31] ? __lock_acquire+0xab9/0xd20 [ 554.685358][ T31] ? __pfx___schedule+0x10/0x10 [ 554.690380][ T31] ? schedule+0x91/0x360 [ 554.698064][ T31] schedule+0x165/0x360 [ 554.705716][ T31] schedule_preempt_disabled+0x13/0x30 [ 554.714552][ T31] rwsem_down_read_slowpath+0x5fd/0x8f0 [ 554.721725][ T31] ? rwsem_down_read_slowpath+0x4b8/0x8f0 [ 554.727516][ T31] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 554.734812][ T31] ? exit_mm+0xcc/0x2c0 [ 554.739025][ T31] ? __pfx_mm_release+0x10/0x10 [ 554.744269][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.749650][ T31] down_read+0x98/0x2e0 [ 554.757054][ T31] exit_mm+0xcc/0x2c0 [ 554.766436][ T31] ? __pfx_exit_mm+0x10/0x10 [ 554.776654][ T31] ? rcu_is_watching+0x15/0xb0 [ 554.784884][ T31] do_exit+0x648/0x2300 [ 554.789131][ T31] ? do_raw_spin_lock+0x121/0x290 [ 554.797713][ T31] ? __pfx_do_exit+0x10/0x10 [ 554.805637][ T31] do_group_exit+0x21c/0x2d0 [ 554.810281][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.819928][ T31] get_signal+0x1286/0x1340 [ 554.828981][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 554.837751][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 554.847229][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 554.856045][ T31] exit_to_user_mode_loop+0x75/0x110 [ 554.865697][ T31] do_syscall_64+0x2bd/0x3b0 [ 554.870522][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 554.885824][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.897094][ T31] ? clear_bhb_loop+0x60/0xb0 [ 554.906112][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.914645][ T31] RIP: 0033:0x7f650b78e9a9 [ 554.919107][ T31] RSP: 002b:00007f650c57d038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 554.928838][ T31] RAX: fffffffffffffffc RBX: 00007f650b9b6080 RCX: 00007f650b78e9a9 [ 554.937072][ T31] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 000020000093e000 [ 554.945328][ T31] RBP: 00007f650b810d69 R08: 0000000000000000 R09: 0000000000000000 [ 554.953517][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.961588][ T31] R13: 0000000000000000 R14: 00007f650b9b6080 R15: 00007ffec9cda4e8 [ 554.969713][ T31] [ 554.988548][ T31] [ 554.988548][ T31] Showing all locks held in the system: [ 555.017525][ T31] 1 lock held by khungtaskd/31: [ 555.022606][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 555.034731][ T31] 3 locks held by kworker/u8:8/3497: [ 555.040054][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 555.052896][ T31] #1: ffffc9000bc6fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 555.064589][ T31] #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 555.074102][ T31] 2 locks held by dhcpcd/5511: [ 555.079078][ T31] #0: ffffffff8f91cc48 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5ee/0x790 [ 555.089237][ T31] #1: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 555.099457][ T31] 2 locks held by getty/5614: [ 555.105471][ T31] #0: ffff88803453b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 555.116285][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 555.126900][ T31] 3 locks held by kworker/u8:11/10610: [ 555.133819][ T31] #0: ffff88814c39f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 555.145858][ T31] #1: ffffc90004a9fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 555.159196][ T31] #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 555.169308][ T31] 5 locks held by kworker/u8:12/10612: [ 555.175118][ T31] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 555.186632][ T31] #1: ffffc90004b0fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 555.197628][ T31] #2: ffffffff8f92b870 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 555.207496][ T31] #3: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 555.219546][ T31] #4: ffffffff8e543338 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 555.232495][ T31] 1 lock held by syz.0.1830/12206: [ 555.237740][ T31] #0: ffff88807f0557e0 (&mm->mmap_lock){++++}-{4:4}, at: userfaultfd_release_all+0x15a/0x5e0 [ 555.250770][ T31] 1 lock held by syz.0.1830/12207: [ 555.256374][ T31] #0: ffff88807f0557e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 555.265578][ T31] 1 lock held by syz.0.1830/12208: [ 555.270711][ T31] #0: ffff88807f0557e0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0xcc/0x2c0 [ 555.280119][ T31] 1 lock held by syz.0.1830/12209: [ 555.285560][ T31] 1 lock held by syz-executor/14443: [ 555.290867][ T31] #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 555.302690][ T31] 1 lock held by syz-executor/14479: [ 555.308182][ T31] #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 555.317978][ T31] 3 locks held by syz.3.2537/14761: [ 555.329910][ T31] #0: ffffffff8f99d770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.348177][ T31] #1: ffffffff8f99d588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.358874][ T31] #2: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: team_nl_options_set_doit+0x99/0xde0 [ 555.376910][ T31] 2 locks held by syz.5.2541/14778: [ 555.382286][ T31] #0: ffffffff8f99d770 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 555.390535][ T31] #1: ffffffff8f99d588 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 555.406484][ T31] 1 lock held by syz.5.2541/14779: [ 555.412798][ T31] #0: ffffffff8f938688 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 555.452218][ T31] [ 555.454704][ T31] ============================================= [ 555.454704][ T31] [ 555.464028][ T31] NMI backtrace for cpu 1 [ 555.464047][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 555.464070][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.464082][ T31] Call Trace: [ 555.464091][ T31] [ 555.464099][ T31] dump_stack_lvl+0x189/0x250 [ 555.464136][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.464163][ T31] ? __pfx__printk+0x10/0x10 [ 555.464204][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 555.464233][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 555.464259][ T31] ? __pfx__printk+0x10/0x10 [ 555.464301][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 555.464327][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 555.464355][ T31] watchdog+0xf93/0xfe0 [ 555.464381][ T31] ? watchdog+0x1de/0xfe0 [ 555.464408][ T31] kthread+0x70e/0x8a0 [ 555.464439][ T31] ? __pfx_watchdog+0x10/0x10 [ 555.464459][ T31] ? __pfx_kthread+0x10/0x10 [ 555.464489][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.464514][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.464538][ T31] ? __pfx_kthread+0x10/0x10 [ 555.464567][ T31] ret_from_fork+0x3f9/0x770 [ 555.464595][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 555.464625][ T31] ? __switch_to_asm+0x39/0x70 [ 555.464642][ T31] ? __switch_to_asm+0x33/0x70 [ 555.464658][ T31] ? __pfx_kthread+0x10/0x10 [ 555.464687][ T31] ret_from_fork_asm+0x1a/0x30 [ 555.464722][ T31] [ 555.464730][ T31] Sending NMI from CPU 1 to CPUs 0: [ 555.614601][ C0] NMI backtrace for cpu 0 [ 555.614631][ C0] CPU: 0 UID: 0 PID: 10605 Comm: kworker/u8:9 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 555.614652][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.614662][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 555.614692][ C0] RIP: 0010:lock_acquire+0x0/0x360 [ 555.614713][ C0] Code: 05 75 9d 49 11 a9 00 ff ff 00 0f 95 c0 e9 18 a7 e4 09 cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 60 4d 89 ce 45 [ 555.614726][ C0] RSP: 0018:ffffc90004a77548 EFLAGS: 00000246 [ 555.614740][ C0] RAX: 0000000000000002 RBX: ffffffff89ebf04c RCX: 0000000000000002 [ 555.614752][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e53d8a0 [ 555.614763][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 555.614774][ C0] R10: 0000000000000005 R11: 0000000000000000 R12: ffffc90004a77813 [ 555.614784][ C0] R13: 0000000000000000 R14: ffff888072587300 R15: 000000000000ffff [ 555.614795][ C0] FS: 0000000000000000(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 555.614808][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.614820][ C0] CR2: 0000563038b47000 CR3: 000000003270e000 CR4: 00000000003526f0 [ 555.614836][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 555.614846][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 555.614857][ C0] Call Trace: [ 555.614863][ C0] [ 555.614870][ C0] rt_is_expired+0x38/0x2d0 [ 555.614887][ C0] ? rt_is_expired+0x1c/0x2d0 [ 555.614904][ C0] ip_route_output_key_hash_rcu+0x13dc/0x23d0 [ 555.614926][ C0] ? ip_route_output_key_hash+0xde/0x2e0 [ 555.614944][ C0] ip_route_output_key_hash+0x1b9/0x2e0 [ 555.614963][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 555.614984][ C0] ? inet_confirm_addr+0x5a/0x300 [ 555.615002][ C0] ip_route_output_flow+0x2a/0x150 [ 555.615020][ C0] send4+0x445/0xe20 [ 555.615033][ C0] ? __lock_acquire+0xab9/0xd20 [ 555.615051][ C0] ? send4+0x201/0xe20 [ 555.615067][ C0] ? __pfx_send4+0x10/0x10 [ 555.615079][ C0] ? wg_socket_send_skb_to_peer+0x54/0x1d0 [ 555.615097][ C0] ? wg_socket_send_buffer_to_peer+0x13b/0x1c0 [ 555.615116][ C0] wg_socket_send_skb_to_peer+0xd1/0x1d0 [ 555.615133][ C0] wg_packet_handshake_send_worker+0x1db/0x320 [ 555.615157][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 555.615189][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.615208][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 555.615225][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 555.615244][ C0] process_scheduled_works+0xade/0x17b0 [ 555.615273][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 555.615299][ C0] worker_thread+0x8a0/0xda0 [ 555.615337][ C0] kthread+0x70e/0x8a0 [ 555.615358][ C0] ? __pfx_worker_thread+0x10/0x10 [ 555.615376][ C0] ? __pfx_kthread+0x10/0x10 [ 555.615397][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.615416][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.615435][ C0] ? __pfx_kthread+0x10/0x10 [ 555.615455][ C0] ret_from_fork+0x3f9/0x770 [ 555.615474][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 555.615494][ C0] ? __switch_to_asm+0x39/0x70 [ 555.615509][ C0] ? __switch_to_asm+0x33/0x70 [ 555.615522][ C0] ? __pfx_kthread+0x10/0x10 [ 555.615542][ C0] ret_from_fork_asm+0x1a/0x30 [ 555.615563][ C0] [ 555.615740][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 555.957732][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 555.969043][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 555.979119][ T31] Call Trace: [ 555.982436][ T31] [ 555.985387][ T31] dump_stack_lvl+0x99/0x250 [ 555.989998][ T31] ? __asan_memcpy+0x40/0x70 [ 555.994702][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 555.999941][ T31] ? __pfx__printk+0x10/0x10 [ 556.004597][ T31] vpanic+0x281/0x750 [ 556.008631][ T31] ? __pfx_vpanic+0x10/0x10 [ 556.013153][ T31] ? preempt_schedule+0xae/0xc0 [ 556.018019][ T31] ? preempt_schedule_common+0x83/0xd0 [ 556.023757][ T31] panic+0xb9/0xc0 [ 556.027598][ T31] ? __pfx_panic+0x10/0x10 [ 556.032024][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 556.037408][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 556.044042][ T31] watchdog+0xfd2/0xfe0 [ 556.048321][ T31] ? watchdog+0x1de/0xfe0 [ 556.052680][ T31] kthread+0x70e/0x8a0 [ 556.056770][ T31] ? __pfx_watchdog+0x10/0x10 [ 556.061730][ T31] ? __pfx_kthread+0x10/0x10 [ 556.066439][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 556.071659][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 556.076988][ T31] ? __pfx_kthread+0x10/0x10 [ 556.081601][ T31] ret_from_fork+0x3f9/0x770 [ 556.086204][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 556.091415][ T31] ? __switch_to_asm+0x39/0x70 [ 556.096446][ T31] ? __switch_to_asm+0x33/0x70 [ 556.101211][ T31] ? __pfx_kthread+0x10/0x10 [ 556.105811][ T31] ret_from_fork_asm+0x1a/0x30 [ 556.110774][ T31] [ 556.113940][ T31] Kernel Offset: disabled [ 556.118260][ T31] Rebooting in 86400 seconds..