last executing test programs: 2m44.222146269s ago: executing program 2 (id=1539): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000001440)={{0x5, 0x0, 0x80, {0xffffffffffffffff, 0x1, 0x1}}, "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", "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"}) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 2m44.094068337s ago: executing program 2 (id=1542): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r0, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) (async) io_submit(0x0, 0x1, &(0x7f0000001900)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x2, 0x1ff, 0xffffffffffffffff, &(0x7f00000004c0)="ff8257e2dd4e6e695b3bc01628d94dfea10aef76518b28fb28672947bc3f708da3e25f2f028f80f2d63a4b116db6fb23199a3bda6b0eefed4a9853dcde6d5166bc729cd30a3b3eb75a9954242c0d946a3616f6b8966dcd349444b70a588ab1b253e0e43a45955c9893dad02432c7108f6acb3a07a85e55546391d66f5c0c009cc8cabe988f516f13ded34d771dd7c3981c2e5e5682f3b881d8c499a25210796063aa1b9d8f8da8433f27341e45aae54029693d4856cd97532d0338544a00fbb477b2f580c99c65e8cd500aaaaf450930625ad1996d79721f8e639bf6204a621253071d6ceb5b26f62375e827d23ce9dc8e3725f3ce7d2fec9dbdde5efa947568ad3a9f949f75a93c28cc073229e2fa27c21d5c71fa5c2b2d0972d2b526d791215f211ca2b420e291505f65f19b571fcae1843b3eba21d8b73452f6cb34c32670c0399df37d94c2cadb73bb5c11042f4260db6c693a666baa987d275f162029c845a688ed72c90415f3c1ce244fa63ea7037380acd302508cb0c8b6590759f2a75425b2d483b8f07598ca9973305006e21aa4a57293f2d943b7b543d401a736f4216f0476f74edb8a44417321ee471eca9d5089ceda7add1e365fcb69df27861ef589345234bd19be2e8ceb04fb6ab7b231f376ad344029c8b806f5e3da26b6abcc1c9257d8caea40aa63f44a8eab3a1b29180adf4155da05794ebdfa473bb5701821b42da5d11b8bc83c98c73450e45e051301338e56e431ccc4e324eeffb3359c631a8fcfa802cab18ed1dff097fc3d99538176018802da9a4eb144adc1a2135d03de1a9a83eb3ce09636f1c30382fc9005a25de37c6e093e18394441d9f32fc5b8bd49b7a9cfc7e558944f38631fcbd3341dda789ac52c7c1d088b63c034e18a62a3833b54f427c7fbd9230f027d0b4290ff1ee372a63a0eeca778e182b6c254b777afaed2a933dc0bda70e196116c0b18279ae4c58370cefb4bcbaba0f971ab818acf63361271f80783fd31efb7f1e92f91dcb089127d4f04fc4810fb077f7df08b05ffa453089c057d12ba9dbfd2d92a72154b904bc2044406475a080b9dc545b69a6de999192cad6c03a42c7bded956690afa3c24498e0090e2c82f045b11fb93cacff43fb181d76f9269f82f158f6dfc870941c7902d4d84f22952a94f44b7c06cd1287e265083768480979d314a82f6ad97c97088f9bff43185396c2f37309941d28cb996d5454b62273b00b54d212ab8a6e2d6d83ab80ebb26ca857eecefd6d1fa5b2c158ce10fa3e2838b1566c5a05ea5140c287abdc70ee736733d44df847cb3a53d81aec948b87c10c5179dc021b216197d42b1046bf1910a5f561394059a64e8da76319d209b72ea48fde52c2e5ed1b4c3c339af608b5723970c169c041495a0ffab47e9772d9816dd212323621ff7d9e70bbedfd97fb9f192e141dea06a64271b8f037765f48e78d3a9ee4f1390144a08cf79f7174b2b2a4a71680da99dc814fb53d67a048b4d7fe2364e87a9c80bf8bdf8b776ba49b91fa3fb3222c5d452f38172f32197139d636dd3684e9701c1ac2df8740d7dbdbf3507b652feb09c7eb35538c5928628816a98724339632898b6bd865bb86a3a61da709d1967b1f960a8ac88670b97fe5223081fd16d65d85afd35c7643e25bc648596e81845e03be19051ecbfb1ae8b1169330443e63d67f922ae7c9ae70e8a916f408bcf5b0ad85be5e1639b4653a455b0d5328a306e7d35291556943928835ba6cbd26088b06ab3c5dc8abf13d2708ed42fda9d16bbe7873bdb0d97ee6158b04ed932d99bd310f1a10cc417984fbb16ca5d9ef96979852fe797ea8b4f43119588ea7f2b791e77c727bb01d6fcf5493be31c34a0f9ea5927da914b57d2c2158754ff6026da8ca96c5e0059fd358975e778f17d26a43711659db685b6fa68f21ba90133181ee904ea5bc659a6e11121e93b14e00cbb09abd9a3fce43855754e5886c6a96dd703321dd8683e5dcb4ad33291f0000b15efbb3a2838dad5ebfdc051fc724cd792da3700d923854adac2a55302b6e06b0ff2770552194aacb4e234c57e996a34dd2810f3b3b984c1e54a35c592258dacf913b0bb32be1b1ba9017a6edb2ec122610168d8613fa237a3dd0b06e6bc329801e6557ebfee56488621b9a6011273ba21936e8cc4bd8ad7e0a7de69756676f3fa4ee92a6fe3bec8828ae0c575217132ff03dd6e0a5ec887abeab6fbdd85cfab59d7f02c8beaf5b036884c6dd3ef33d0a50d7ffa2786d934cfff5a2c6576238389f98382546abe39d7b542667a59335bc60f9c38802db9fd1beff66bef52ef822caffd4ff22a3f50be2c3c4c34ac7ceeb559d1bfd4f6d25f3de1c3ce3abd1530169f0e2bdbd01fb5171403f3d68d2223d0ea41afbc9a2cfb6dfe9b24becfdb9b6e939ce42dd19893c79881db5ab809df1bac712b5a8adedd32dc649e5df0dca39806c0c6b039153c2c1fac10362f3ff55ef2745968ba2627b2a8549d76fa002f88395c660e28a3e05c6042909dcfd577783cc8e5cfacad07f7123322da055559f7888c913b405872e56a394eaa0035d2fdd3aacf0cd27e051c26df919ba8aca1a07c39078360f202b02f465dc7afe5585cc48ab50815a90882a717219cad8d4a8b8c94bbd6341dc89527afa9059850bf569aeb248f1981578892cb0dc418529dd44c3f83d06ab908412d847f556e7e68a1a476240bf3013c4507681f69684d75d90f81ac511f4ea422536918cd9be4efbcc00b6d2c35ce543e8dfc7ce554b3c75be24fdf6542502764601a4425f1e8f984727df7aa877879a4e982bdef3bc4c5e8c68515273fc334528135ea65065db3a7cb23982fef96e08700523e01373a54e4192d9c924290112573f95010c3d29209bf3a358a93737ea302b444477d3ae569f0411aff1a5861e92bd7b1bb443a3281077c404bbf023dbc1b30cb7438ad2fe5ae8edc8d27ed28069695bac05dca0ea309559a46269796e0bc362c19f947e63fb1434aa45e5e302a3b4e19330f67aeddfa195978600bfe6f749125", 0x86d, 0x8, 0x0, 0x1}]) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x3}, 0x10) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="fc01000013000100000000000000000000000000000000000000000000000001fc0200000000000000000000000000014e24000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m44.059454678s ago: executing program 2 (id=1544): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r2, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r2, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r3, 0x0, &(0x7f0000000180)="f1", 0x1, 0xfffffffffffffffd}) setsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000040)=0x1, 0x4) accept4$unix(r0, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') openat$cgroup_int(r4, &(0x7f0000000080)='io.max\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r5, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4010) 2m43.945985784s ago: executing program 2 (id=1546): syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x40, 0xc9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x50}}}, 0xe) r0 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) copy_file_range(r0, &(0x7f0000000000)=0x2, r0, &(0x7f0000000040)=0x4, 0x3, 0x0) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, 0x0, 0x1) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x200, 0xffffffffffffffff, 0x1}) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x2) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0xfffffffd) r4 = socket$inet(0xa, 0x801, 0x84) listen(r4, 0x8) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = socket$inet6(0xa, 0x1, 0x8010000000000084) r7 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000001c40), 0x2, 0x0) write$apparmor_current(r7, 0x0, 0x0) listen(r6, 0x7) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r8, 0x100) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, 0xffffffffffffffff, 0x57789000) socket$xdp(0x2c, 0x3, 0x0) 2m43.389937905s ago: executing program 2 (id=1553): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000002200", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2m43.383706858s ago: executing program 2 (id=1554): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f1ba1f848390000005e140602000000002f001c000f000000028000001294", 0x2e}], 0x1}, 0x0) fadvise64(r0, 0x94, 0x6e, 0x4) mknod(&(0x7f0000000600)='./file0\x00', 0x1000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x40800408, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x10, 0x319d}}, 0x50) inotify_init1(0x800) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x200010000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m31.431539s ago: executing program 32 (id=1554): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73772cc9f1ba1f848390000005e140602000000002f001c000f000000028000001294", 0x2e}], 0x1}, 0x0) fadvise64(r0, 0x94, 0x6e, 0x4) mknod(&(0x7f0000000600)='./file0\x00', 0x1000, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x90, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x40800408, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x10, 0x319d}}, 0x50) inotify_init1(0x800) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x200010000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$FIBMAP(r4, 0x1, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3.685825584s ago: executing program 1 (id=2106): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0xe80430, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0]) keyctl$chown(0x4, r1, 0xee01, r2) keyctl$setperm(0x5, r1, 0x30925) keyctl$KEYCTL_MOVE(0x3, r1, 0x0, 0x0, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x180, 0x0) write$sequencer(r3, &(0x7f0000000380)=[@l={0x92, 0xd, 0xe0, 0x6, 0x8, 0x1}], 0x8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r4, &(0x7f0000000200)=""/251, 0xfb) lseek(r4, 0x4, 0x0) ioctl$NBD_CLEAR_SOCK(r4, 0xab04) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x40, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @loopback, @empty}}}}) r6 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SG_SET_DEBUG(r6, 0x227e, &(0x7f0000000000)=0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r5, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x1) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0xba0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)={0x20, 0x22, 0x8, {0x8, 0xe, "a38895fdf403"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f00000000c0)=0x14, 0x80000) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x105000, 0x22) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)={0x400080, 0x60, 0x8}, 0x18) linkat(r9, &(0x7f00000001c0)='./cgroup\x00', r10, &(0x7f0000000300)='./cgroup\x00', 0x400) sendfile(0xffffffffffffffff, r8, &(0x7f0000000100)=0x5, 0x8) 3.309472823s ago: executing program 4 (id=2107): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r3}, 0x10) socket$inet6(0xa, 0x3, 0x5) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x3) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="2ef36644f7e62e3e672e450f078f29d095abaa960000b890a4f084ef66bafc0c6d8f297812cf66ba410066ef48b800100000000000000f23d00f21f835100000080f23f866baf80cb88ef01480ef66bafc0c66b80c0066efc7442402d8650000c7442406000000000f011c2466ba4200ec2e64f30f5a8e6c000000", 0x7b}], 0x1, 0x42, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x85200000c}], 0x1) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000240)={[0x3, 0xec, 0x401, 0x7, 0xeb33, 0x4, 0x8000000000000001, 0x80000001, 0x1, 0x200, 0x4, 0x7ff, 0x10000009, 0x10000000003a, 0x9, 0x9], 0x0, 0x2a80}) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000000200)=0x200, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000780)={'batadv_slave_0\x00', 0x0}) r11 = socket$packet(0x11, 0x2, 0x300) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) sendto$packet(r12, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000900)={0x220, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}]}, 0x220}}, 0x4000000) r14 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000007c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r14, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)={0x30, r2, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x24048004}, 0x24000090) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r2, 0x100, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x400, 0x5d}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x841}, 0x40000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, 0x0, &(0x7f0000000100)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 2.914102662s ago: executing program 4 (id=2109): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_RANGEINFO(r1, 0x80106408, &(0x7f00000001c0)={0x1, &(0x7f0000000180)}) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x60) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000004, 0x22052, r0, 0x2000) (async) signalfd4(r0, &(0x7f0000001000)={[0x6]}, 0x8, 0x80000) 2.880204789s ago: executing program 3 (id=2111): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x3a) flock(r2, 0x5) r3 = fanotify_init(0x1, 0x800) fanotify_mark(r3, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0) r4 = gettid() r5 = openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) tee(r5, 0xffffffffffffffff, 0xb5, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, &(0x7f0000000180)=0xfffffffd, 0x4) flock(r6, 0x2) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x20040) sendfile(r0, r8, 0x0, 0x7fffefff) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) 2.424591825s ago: executing program 4 (id=2112): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x303400, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x5, 0x48, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0x35, 0xfe, 0x65, 0x10, 0x1aca, 0xb28e, 0x9232, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x36, 0x1, 0xd, 0x1, 0x90, 0x2, [{{0x9, 0x4, 0x32, 0xa7, 0x2, 0x1, 0x3, 0x9e, 0x8, [], [{{0x9, 0x5, 0x8, 0x6, 0x10, 0x6, 0x4, 0x8, [@generic={0x4, 0x23, "87ac"}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x4f8}]}}, {{0x9, 0x5, 0x7, 0x2, 0x200, 0x4, 0x2, 0x66, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x3}]}}]}}]}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='loginuid\x00') read$eventfd(r2, 0x0, 0x0) openat(r2, &(0x7f0000000280)='./file0\x00', 0x200, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000400), 0x400010000000086, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r3, 0xc02c564a, &(0x7f0000000480)={0x8, 0x32315258, 0x2, @stepwise={0x9, 0x7, 0x5, 0xb905, 0x718f4500}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000001c0)={0xe, 0x1, 0x0, "8eb8a828e93b07f1dd06d87a41bfeae7800400b159fbba176fb1de26098d68d9"}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt(r4, 0x0, 0x1c, &(0x7f0000000440)="bf6af43ceed9ccddcfa4e88da6c3b021eb82d49afc6a45a46729b5472390213a3e74994470", 0x25) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="3591b6e99cba6e5d3bcde43a46e730ecf4ed47b0a3c429e1e519988ecdb645a53e", 0x21}, {&(0x7f00000000c0)="d56ae9b8802a5a659a5c7c4bb5362ba80ad778ca95bdd78a1e8810d70b7242b9993cdf7bc5d33f73ebdb3d6a37d68180445b9f91a8579237ea1138d374b433a5e3b9913b5e8ad1a25eee58882b315d828fb463fc4bff79e1044ea4444abafbe1a20dd580aa4e250b65f353a7a58b17626d25ea866e4da7bb49607c26529aaedf6553df402461168fc73b46896d8ed4e26fb468b3457ece95d29840d65db3914748e99689f0cd54807a9a1a13b5f4d1f7d24ae6ae7174269e1b7a049958cccf02f6d7765e8357c1e8a2f2fa5ebf8672c0534dfa4b90f6fb62358901ce8b711d8b1c57f05b6223423cbf81d13cf5", 0xed}], 0x2, &(0x7f0000000340)=[@hoplimit={{0x14}}, @dstopts={{0x58, 0x29, 0x37, {0x87, 0x7, '\x00', [@enc_lim={0x4, 0x1, 0xff}, @calipso={0x7, 0x28, {0x1, 0x8, 0x7, 0x1, [0x8, 0x8, 0x7, 0x7]}}, @jumbo={0xc2, 0x4, 0x400}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x1}]}}}, @hopopts={{0x38, 0x29, 0x36, {0x16, 0x3, '\x00', [@ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0xb9}, @hao={0xc9, 0x10, @local}]}}}, @hopopts_2292={{0x40, 0x29, 0x36, {0x84, 0x4, '\x00', [@enc_lim, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @enc_lim, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0x2c98}, @jumbo]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1}}], 0x100}}], 0x1, 0x800) ioctl$UI_SET_SNDBIT(r1, 0x4004556a, 0x6) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236cd1f8d50f2568ac466a6d40024f87588cbe7808c481b157f18acb07cee62b1d238ba704435ee1c055697eb1ee0e2cfa36d2efbf1ac9fa85fe4", 0xfdae}], 0x1) 2.360692018s ago: executing program 0 (id=2114): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x2400c729, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 2.29791325s ago: executing program 0 (id=2115): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x200004, 0x0) r0 = syz_socket_connect_nvme_tcp() recvmsg$inet_nvme(r0, &(0x7f00000022c0)={&(0x7f00000000c0)=@qipcrtr, 0x80, &(0x7f0000002240)=[{&(0x7f0000002300)=""/70, 0x46}, {&(0x7f0000000180)=""/104, 0x68}, {&(0x7f0000002380)=""/4105, 0x1009}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/34, 0x22}], 0x5}, 0x10000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) fstat(r1, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r2) setfsuid(r2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000240)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x39800c41, 0x0, 0x0, 0x401, 0x3, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r3, &(0x7f0000008400)="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", 0x2000, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x90, 0x0, 0xfffffffffffffffb, {0x6, 0x1000, 0x9, 0x1, 0x2, 0xe2, {0x2, 0x63, 0x4, 0x0, 0x100000001, 0x9, 0x1, 0x3, 0x2, 0x6000, 0x5, r5, r6, 0xfffffffe, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x101, {0x6, 0x1000, 0x7, 0x8, 0x8005, 0x3, {0x6, 0x200, 0xfd, 0x10001, 0x8, 0xfd, 0x800, 0x8, 0xfffffffe, 0x2000, 0x2, r5, r6, 0xfffe, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000280), 0xa0801, &(0x7f00000002c0)={{}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x300}}, {}], [{@subj_user={'subj_user', 0x3d, '/dev/rnullb0\x00'}}, {@smackfshat={'smackfshat', 0x3d, 'erofs\x00'}}]}}) r7 = signalfd4(r0, &(0x7f0000000140)={[0xffffffff]}, 0x8, 0x80000) r8 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="2ba52ebd7000fddbdf251b00000006002100"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) keyctl$update(0x2, r8, 0x0, 0x0) ioctl$BLKROGET(r7, 0x125e, &(0x7f0000000200)) 2.186171483s ago: executing program 0 (id=2116): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1}) (async) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000000)={0x1}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) 2.176898429s ago: executing program 0 (id=2117): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') rename(&(0x7f0000000100)='./file0/../file0/file0\x00', 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x220003, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 2.104680244s ago: executing program 1 (id=2118): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) write$tun(r2, &(0x7f0000000040)={@val={0x0, 0x8848}, @val={0x2, 0x4, 0xd, 0x9, 0x7, 0xe}, @mpls={[{0xe46, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x3}, {0x7fff, 0x0, 0x1}], @ipv4=@udp={{0x24, 0x4, 0x3, 0x39, 0x185, 0x64, 0x0, 0x3, 0x11, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xf8, [@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @dev={0xac, 0x14, 0x14, 0x39}, @multicast1, @rand_addr=0x64010101, @empty, @remote]}, @cipso={0x86, 0x34, 0x3, [{0x7, 0xe, "cc3bdbc7610000e2079d1668"}, {0x25e62b1aabb5a999, 0x7, "57a9f8b67d"}, {0x1, 0xd, "6ead75e0cab7bb5db90ced"}, {0x7, 0x4, "78fe"}, {0x2, 0x8, "b8197189e99e"}]}, @generic={0x94, 0xe, "3a264b5bcaa9d6fe2a7aa526"}, @timestamp_addr={0x44, 0xc, 0x6d, 0x1, 0x0, [{@local, 0xfffffff9}]}, @ra={0x94, 0x4, 0x1}]}}, {0x4e23, 0x4e21, 0xf5, 0x0, @wg=@data={0x4, 0x2, 0x7f, "d4cdb9f4509a2fe0505ea8b65d85d0726bf1283e790633274653a73cc3852b325af089328a482ec2d904b00385f9110a321c9f70735f029a38c5a7c4e32089aae36990aea38a0f73e9ddffb06dc83db68ba3ccb949529b87afa1bd8591850279513c9de0110940d320b51088612de86a1fab72f7c22a666c6f1b08c04c00fbf695833208ad4464452f77a7baa5175287a49c6a063626b115e607b7f39b05920377fe2d567c72a7ecb13fbcd0c57ab7f758c375a421792b8c0787b210b35d65a5f0da80e34b937ff30da5b2d198875bf0170598d2adf553de93b8270766"}}}}}, 0x1a7) sendfile(r1, r0, 0x0, 0x7fffefff) fadvise64(r0, 0x9, 0x9, 0x2) sendfile(r0, r0, 0x0, 0x7ffff000) 1.757973691s ago: executing program 3 (id=2119): creat(&(0x7f0000000200)='./file0\x00', 0x2c) mount$afs(&(0x7f00000000c0)=@cell={0x23, '', 'syz1', '.backup'}, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8\xda\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xf7\xe2\x13\xcb\xc9;m\x90\x19\xe30\x87\x05\xf7\x88\xa0\xb6\xd5U<\xeb]\xe5w\xff(\xc7W\xaa#\xa0X\x8cQ\xf9\xe1\xdbw\xce#V>-\x882\xbc#\xd3\xb9\x06\xa1\xa0t\x8d\x8e\x8d\xf5xW\xc3k\x95\x92Kx\xae{\xed8v1ayL\xe6\x0f3\xb1g\xd5\xdfN\x12\xaa\x129\f\xef\xcf\xbe-\xd1\xa6P\xe4\xc6\x8f\x98\xc5i\x11\xef\xcd\x01B\a-_\x12\xf1\xef\x19eX\x82\x81\x13\x9b\x9aUJ\xc9', 0xd) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0xc, &(0x7f0000000040)=0x9, 0x4) fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="06"], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x2c39000) 1.51672085s ago: executing program 3 (id=2120): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2000, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r3, 0xc0245720, &(0x7f00000000c0)) sendfile(r2, r2, 0x0, 0x7ffff000) 1.211262055s ago: executing program 0 (id=2121): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) madvise(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x12) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x8000000, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000440), 0x4) pwritev(r2, &(0x7f0000000640)=[{&(0x7f0000000480)="fe95", 0xffda}], 0x1, 0x8, 0x2) 1.150072727s ago: executing program 1 (id=2122): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20422}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x238, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0xe8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x481f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x41}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb5ba}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5a0f}, @TIPC_NLA_CON_NODE={0x8}]}]}, @TIPC_NLA_NET={0x6c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7083}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x71}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffff7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2c}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5924}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xcc58}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x9, @private2, 0x10000}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @remote, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_NET={0x48, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2d85}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xaf0}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffb2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x100}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}]}, 0x238}}, 0x8044004) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 1.081335884s ago: executing program 1 (id=2123): r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f00000000c0)={0x0, 0x0, 0x102, 0x4, {0x3, 0x9, 0x97b0, 0xda2}}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), r2) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf2504"], 0x38}, 0x1, 0x0, 0x0, 0x4044041}, 0x8000) sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller0\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:selinux_config_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x2a, 0x7, 'system_u:object_r:devicekit_exec_t:s0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:vmware_device_t:s0\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xe}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000804}, 0x2000c8c0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010023010000d9e2000002000000"], 0x14}}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 953.579317ms ago: executing program 4 (id=2124): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) fadvise64(r0, 0x1, 0x9, 0x5) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x8a) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0xa, 0x4f424752, 0x2, 0x0, 0x1a18e3f7, 0x8, 0x81, 0x0, 0x0, 0x1, 0x61d03986f8975690}}) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='schedstat\x00') ftruncate(r3, 0x7fffffffffffffff) sendmmsg$inet(r3, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)="904d5334f400193d01875e7de6e1a38ac2872ea43083104633b03cbcc61b34e29d5d2811443ba62e04c4bfd3d3d9c0dfaea1f27d9068e0de5d7ed9f86c7dacd993f018f0bc889006754e060d51c0567f6c8d211b5320dd51f8d52795d14fcd982e43446966ccb3918f9884c8e55741954bdc348c97e2df9bd9c7d819618e60d253c3c393f655fe", 0x87}, {&(0x7f0000000200)="aa41aa220f8930a26c438aeedaa355b191ca643c55f4d8419295d9ce596b79291bf06023e6d5b48d901bf3493f6301dc63ceaf9c2ee3909fa08a31c47b9cb08eaea3f088db9e2905f650339019d04615da0b8e375780b8c5dba9cdb84ae4423ef0db3d4b8057ef8ab39e876e27bcb9a6375ae73e95347af629b9b7c4b88672bd347892a0eb1cb3fb71fcd973c98b3bc65ae9768f", 0x94}, {&(0x7f00000002c0)="048b74c8251434fabe288d754811c915526c9038ac65bd7abb2da925c340d830baa4fc10aa8f45376b3fd0789ecef910e198b024a3ca0346e8cd2cbba44c787d3e8067841c4057ea4248b52a6cb82c67fa6bd137d6624794d3b826bc66e4801ffe05abd38a41af25310d6cec21e6125ebbdd825173945b17e1494bddb5f135e97130e3ad5a8775403e2359a844c0112867ef742f884e5bc22fba44151aa5a5bd313c4133ca12471f5a4a26b384f197bbf173b9da4b33bb667346150cd5024ba6dc8e0c7ac80c2b1d8f598aba37d03262db6b86d998501a67fa89fa76630d2bdf5f92c177771bc8", 0xe7}, {&(0x7f00000003c0)="a628b064ce80b6e1885359d6fb8c488eabe568251c87daac2db8011065cef940e96e525cefd0f7d0326025c0c95783e658499d1e7a2a607967531aefdbe542c21dcabcbce3d8a7ef2e2cdbfd0aab2678038e4a265e4764158db13de0cc8ba565b30e5f2e0ffface3b0ea9562730827ff0ed15e4f5689900baf0cde04660b54a68bff7c469222117b9513b4689f2dff2a79ea98fb7a0376ab990ae1", 0x9b}], 0x4}}, {{&(0x7f0000000180)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000480)="8bac804a", 0x4}], 0x1, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}], 0x2, 0x24008880) creat(&(0x7f0000000040)='./file0/file0\x00', 0x1ea) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) 898.097848ms ago: executing program 1 (id=2125): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 878.100072ms ago: executing program 4 (id=2126): fadvise64(0xffffffffffffffff, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x22052, 0xffffffffffffffff, 0x93771000) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)) 761.51427ms ago: executing program 4 (id=2127): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) io_setup(0x8, &(0x7f0000000000)=0x0) io_destroy(r1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r2, r0, 0x0, 0x8000000000000000) sendfile(r0, r0, 0x0, 0x7ffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) io_setup(0x8, &(0x7f0000000000)) (async) io_destroy(r1) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) (async) sendfile(r2, r0, 0x0, 0x8000000000000000) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 529.92093ms ago: executing program 3 (id=2128): r0 = userfaultfd(0x80001) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) (async, rerun: 32) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r0, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f00005ae000/0x4000)=nil, 0x4000}, 0x3, 0x2}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000d40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d80)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfff9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x2000c884) (async) creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 450.415543ms ago: executing program 0 (id=2129): r0 = socket(0x1000000000000010, 0x80802, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r2, 0x2, 0xfffffff6, 0x0, 0xff00, 0x3, 0x40, 0x0, {r2, @in={{0x2, 0x4e22, @remote}}, 0x9, 0x49, 0xc, 0x2, 0x8001}}, &(0x7f00000003c0)=0xb0) write(r0, &(0x7f0000000000)="140000004e0001000000f4f9002304000a03f511", 0x14) (async) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) write$nci(r3, 0x0, 0x0) (async) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') preadv(r5, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x8, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x4010, r4, 0x4a58c000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x206f01a, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x8f) (async) madvise(&(0x7f000068d000/0x4000)=nil, 0x4000, 0xc) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904", @ANYRES16], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socket$igmp(0x2, 0x3, 0x2) 363.388251ms ago: executing program 3 (id=2130): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x101342, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x7ffff000) 164.696149ms ago: executing program 3 (id=2131): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000280), 0x20040, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000160a01020000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000008000740000000015c000000160a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380040001"], 0xec}}, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x421, 0x1, 0xcc7, 0x7fffffff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x0, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0xdffffffa]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) creat(&(0x7f0000001380)='./file0\x00', 0x29) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/shm\x00', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0) write$tcp_congestion(r3, &(0x7f0000000000)='dctcp\x00', 0x6) read$FUSE(r3, &(0x7f00000013c0)={0x2020}, 0x2020) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r5 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x201, 0x41, 0xb5, 0xed, 0x8, 0xc72, 0x12, 0xb0f3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xd, 0xf0, 0xdc, [{{0x9, 0x4, 0xac, 0x8, 0x0, 0xbd, 0x2, 0x7d, 0x8e}}]}}]}}, &(0x7f0000000fc0)={0x0, 0x0, 0xfffffffffffffea5, 0x0, 0x17b1}) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="58011303", @ANYBLOB="08002bbd7000fedbdf2513000000200007800c000400490000000000000008000200cf00000008000200090000002c000380080001000300000008000300090000000800020004000000080003001378000008000300030000004c0004803c0007800800010004000000080001000d000000080001000e00000008000300030000000800040002000000080004000c0000000800020002"], 0x158}}, 0x4004080) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="280000001e00210000000000000000000700030005000000000000000a00a9e20000000000000000"], 0x28}}, 0x0) write(r3, &(0x7f00000004c0)='\"', 0x1) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r5, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f00000000c0)={&(0x7f0000320000/0x3000)=nil, 0x3000}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r8, 0xfffffffffffffff9, 0x2) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x13, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x24000004) 0s ago: executing program 1 (id=2132): mount(&(0x7f0000000100)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x8c90, 0x0) mount(&(0x7f0000000100)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x8c90, 0x0) (async) kernel console output (not intermixed with test programs): 64][T11043] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.168179][T11043] bridge_slave_0: entered allmulticast mode [ 368.174956][T11043] bridge_slave_0: entered promiscuous mode [ 368.182000][T11043] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.189549][T11043] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.197258][T11043] bridge_slave_1: entered allmulticast mode [ 368.203903][T11043] bridge_slave_1: entered promiscuous mode [ 368.223879][T11043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.235454][T11043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.267242][T11043] team0: Port device team_slave_0 added [ 368.273301][T11055] syzkaller1: entered promiscuous mode [ 368.278816][T11055] syzkaller1: entered allmulticast mode [ 368.288778][T11043] team0: Port device team_slave_1 added [ 368.295072][ T981] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 368.319388][T11043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.326506][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.353413][T11043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.365913][T11043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.373108][T11043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.400790][T11043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.427487][T11043] hsr_slave_0: entered promiscuous mode [ 368.433905][T11043] hsr_slave_1: entered promiscuous mode [ 368.439832][T11043] debugfs: 'hsr0' already exists in 'hsr' [ 368.445785][T11043] Cannot create hsr debugfs directory [ 368.450212][ T981] usb 1-1: Using ep0 maxpacket: 32 [ 368.457690][ T981] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 368.467133][ T981] usb 1-1: config 0 has no interface number 0 [ 368.473310][ T981] usb 1-1: config 0 interface 230 has no altsetting 0 [ 368.482341][ T981] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 368.491411][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.501337][ T981] usb 1-1: Product: syz [ 368.505561][ T981] usb 1-1: Manufacturer: syz [ 368.510766][ T981] usb 1-1: SerialNumber: syz [ 368.519606][ T981] usb 1-1: config 0 descriptor?? [ 368.528624][ T981] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 368.544283][ T981] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 368.564362][T11062] loop6: detected capacity change from 0 to 7 [ 368.575320][T11034] loop6: [POWERTEC] p1 [ 368.580796][T11034] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 368.596089][T11062] loop6: [POWERTEC] p1 [ 368.602868][T11062] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 368.637011][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 368.654356][T11043] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 368.670035][T11043] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 368.680545][T11043] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 368.684479][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 368.702506][T11043] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 368.750572][T11043] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.757694][T11043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.765097][T11043] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.772215][T11043] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.825741][T11043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.846404][ T77] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.857073][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.874809][T11043] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.886686][ T3582] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.892752][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 368.893802][ T3582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.919157][ T3582] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.926308][ T3582] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.070264][ T48] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 369.126867][T11043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 369.234150][ T48] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 369.243887][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.261830][ T48] usb 4-1: Product: syz [ 369.266696][ T48] usb 4-1: Manufacturer: syz [ 369.276801][ T48] usb 4-1: SerialNumber: syz [ 369.303086][ T48] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 369.320083][ T5978] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 369.415543][T11043] veth0_vlan: entered promiscuous mode [ 369.422767][ T3582] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 369.428129][T11043] veth1_vlan: entered promiscuous mode [ 369.474394][T11043] veth0_macvtap: entered promiscuous mode [ 369.486422][T11043] veth1_macvtap: entered promiscuous mode [ 369.508476][T11043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.525052][T11043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.536172][ C1] usb 4-1: ath: unknown panic pattern! [ 369.553571][ T5930] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.564055][ T5930] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.577968][ T5930] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.597040][ T5930] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.634389][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.648224][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.669823][ T8772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.680509][ T8772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.753109][ T48] usb 4-1: USB disconnect, device number 82 [ 369.980065][ T9] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 370.060033][ T51] Bluetooth: hci4: command tx timeout [ 370.130008][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 370.137391][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.147473][ T9] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 370.157277][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 370.165913][ T9] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 370.175095][ T9] usb 2-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 370.183327][ T9] usb 2-1: Product: syz [ 370.187523][ T9] usb 2-1: Manufacturer: syz [ 370.192189][ T9] usb 2-1: SerialNumber: syz [ 370.197996][ T9] usb 2-1: config 0 descriptor?? [ 370.289230][ T30] audit: type=1400 audit(1756285941.391:100): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11098 comm="syz.3.1609" [ 370.379967][ T5978] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 370.387065][ T5978] ath9k_htc: Failed to initialize the device [ 370.393818][ T48] usb 4-1: ath9k_htc: USB layer deinitialized [ 370.606012][ T9] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 370.642832][T11107] loop6: detected capacity change from 0 to 7 [ 370.651140][T11107] loop6: [POWERTEC] p1 [ 370.655450][T11107] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 370.704865][T11094] udevd[11094]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 371.009342][ T9] gs_usb 2-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 371.050916][ T981] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 371.076987][ T981] usb 1-1: USB disconnect, device number 65 [ 371.089986][ T5978] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 371.191826][ T9] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -22 [ 371.253666][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.266080][T11118] /dev/rnullb0: Can't open blockdev [ 371.283020][ T5978] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.297524][ T5978] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 371.313173][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.328410][ T5978] usb 4-1: config 0 descriptor?? [ 371.405028][ T24] usb 2-1: USB disconnect, device number 76 [ 371.601799][T11120] /dev/rnullb0: Can't open blockdev [ 371.681039][T11125] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 371.689610][T11124] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 371.748708][T11114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.767950][T11114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.783164][T11114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.795005][T11114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.807835][T11114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.825415][T11114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.952888][T11137] loop6: detected capacity change from 0 to 7 [ 371.980336][ T30] audit: type=1400 audit(1756285943.081:101): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11138 comm="syz.1.1622" [ 372.011369][T11137] loop6: [POWERTEC] p1 [ 372.016380][T11137] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 372.064639][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 372.129261][ T5978] usbhid 4-1:0.0: can't add hid device: -71 [ 372.139578][ T5978] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 372.149112][ T51] Bluetooth: hci4: command tx timeout [ 372.156980][ T5978] usb 4-1: USB disconnect, device number 83 [ 372.349959][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 372.429952][ T5902] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 372.499973][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 372.512768][ T24] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 372.522974][ T24] usb 5-1: config 0 has no interface number 0 [ 372.529078][ T24] usb 5-1: config 0 interface 230 has no altsetting 0 [ 372.538012][ T24] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 372.547799][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.556011][ T24] usb 5-1: Product: syz [ 372.560637][ T24] usb 5-1: Manufacturer: syz [ 372.565262][ T24] usb 5-1: SerialNumber: syz [ 372.572261][ T24] usb 5-1: config 0 descriptor?? [ 372.582478][ T24] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 372.582532][ T5902] usb 1-1: config 2 has an invalid interface number: 201 but max is 0 [ 372.611650][ T24] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 372.619016][ T5902] usb 1-1: config 2 has no interface number 0 [ 372.626584][ T5902] usb 1-1: config 2 interface 201 has no altsetting 0 [ 372.641818][ T5902] usb 1-1: New USB device found, idVendor=05ac, idProduct=c712, bcdDevice=9d.92 [ 372.650987][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.658970][ T5902] usb 1-1: Product: syz [ 372.663330][ T5902] usb 1-1: Manufacturer: syz [ 372.667981][ T5902] usb 1-1: SerialNumber: syz [ 372.859573][T11157] JFS: discard option not supported on device [ 372.911328][ T5902] usb 1-1: USB disconnect, device number 66 [ 372.922919][T11157] Mount JFS Failure: -22 [ 372.929679][T11157] jfs_mount failed w/return code = -22 [ 373.035307][T11158] /dev/rnullb0: Can't open blockdev [ 373.209411][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 373.249209][T11169] /dev/rnullb0: Can't open blockdev [ 373.266568][T11169] bpf: Bad value for 'gid' [ 373.416917][T11175] netlink: 'syz.1.1632': attribute type 5 has an invalid length. [ 373.425663][T11175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1632'. [ 373.500809][T11180] loop6: detected capacity change from 0 to 7 [ 373.514594][T11180] loop6: [POWERTEC] p1 [ 373.519780][T11180] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 373.571233][ T30] audit: type=1400 audit(1756285944.671:102): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11183 comm="syz.1.1635" [ 373.613985][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 374.219946][ T51] Bluetooth: hci4: command tx timeout [ 374.595550][T11202] /dev/rnullb0: Can't open blockdev [ 374.723490][T11205] /dev/rnullb0: Can't open blockdev [ 375.042693][T11210] loop6: detected capacity change from 0 to 7 [ 375.075280][T11037] loop6: [POWERTEC] p1 [ 375.084414][T11037] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 375.094828][ T24] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 375.130461][T11210] loop6: [POWERTEC] p1 [ 375.137042][ T24] usb 5-1: USB disconnect, device number 2 [ 375.142218][T11210] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 375.242020][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 375.279696][ T30] audit: type=1400 audit(1756285946.381:103): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11221 comm="syz.1.1647" [ 375.313583][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 375.578649][T11230] netlink: 'syz.0.1648': attribute type 83 has an invalid length. [ 375.680170][T11232] comedi comedi3: pcl816: I/O port conflict (0x1,16) [ 376.099906][ T981] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 376.249913][ T981] usb 5-1: device descriptor read/64, error -71 [ 376.300246][ T51] Bluetooth: hci4: command tx timeout [ 376.620045][T11253] usb usb8: usbfs: process 11253 (syz.1.1651) did not claim interface 0 before use [ 376.860252][ T981] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 377.020217][ T981] usb 5-1: device descriptor read/64, error -71 [ 377.131941][T11258] usb usb8: usbfs: process 11258 (syz.1.1652) did not claim interface 0 before use [ 377.133364][ T981] usb usb5-port1: attempt power cycle [ 377.165005][T11270] tmpfs: Bad value for 'nr_blocks' [ 377.212388][T11270] futex_wake_op: syz.0.1655 tries to shift op by -1; fix this program [ 377.355770][T11276] loop6: detected capacity change from 0 to 7 [ 377.399966][T11276] loop6: [POWERTEC] p1 [ 377.404987][T11276] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 377.424941][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 377.506978][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 377.530086][ T981] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 377.573565][ T981] usb 5-1: device descriptor read/8, error -71 [ 377.607091][ T30] audit: type=1400 audit(1756285948.711:104): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11283 comm="syz.0.1658" [ 377.920156][ T981] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 377.967946][ T981] usb 5-1: device descriptor read/8, error -71 [ 378.090956][ T981] usb usb5-port1: unable to enumerate USB device [ 378.421047][ T981] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 378.542693][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.549026][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.589948][ T981] usb 1-1: Using ep0 maxpacket: 32 [ 378.601037][ T981] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 378.616405][ T981] usb 1-1: config 0 has no interface number 0 [ 378.639670][ T981] usb 1-1: config 0 interface 230 has no altsetting 0 [ 378.661507][ T981] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 378.682508][ T981] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.709896][ T981] usb 1-1: Product: syz [ 378.714151][ T981] usb 1-1: Manufacturer: syz [ 378.718752][ T981] usb 1-1: SerialNumber: syz [ 378.741723][ T981] usb 1-1: config 0 descriptor?? [ 378.749072][ T981] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 378.773883][ T981] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 378.965891][T11305] /dev/rnullb0: Can't open blockdev [ 379.066110][T11309] loop6: detected capacity change from 0 to 7 [ 379.073279][T11309] loop6: [POWERTEC] p1 [ 379.077806][T11309] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 379.130280][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 379.158540][ T30] audit: type=1400 audit(1756285950.261:105): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11313 comm="syz.1.1667" [ 379.462501][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1670'. [ 379.577005][T11332] block nbd3: Attempted send on invalid socket [ 379.585961][T11332] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.597075][T11332] block nbd3: Attempted send on invalid socket [ 379.603821][T11332] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.614501][T11332] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 379.624644][T11332] block nbd3: Attempted send on invalid socket [ 379.634194][T11332] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.643853][T11332] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 379.654745][T11332] block nbd3: Attempted send on invalid socket [ 379.668414][T11332] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.688428][T11332] block nbd3: Attempted send on invalid socket [ 379.711797][T11332] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.721781][T11332] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 379.733942][T11332] block nbd3: Attempted send on invalid socket [ 379.742335][T11332] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.767993][T11332] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 379.782451][T11332] block nbd3: Attempted send on invalid socket [ 379.791390][T11332] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.801159][T11332] block nbd3: Attempted send on invalid socket [ 379.807432][T11332] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.817601][T11332] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 379.828066][ T30] audit: type=1326 audit(1756285950.941:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11340 comm="syz.4.1675" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcd59d8ebe9 code=0x0 [ 379.828159][T11332] block nbd3: Attempted send on invalid socket [ 379.856668][T11332] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.867079][T11332] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 379.877014][T11332] block nbd3: Attempted send on invalid socket [ 379.885240][T11332] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 379.894993][T11332] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 379.904929][T11332] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 379.914695][T11332] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 379.954393][T11344] loop6: detected capacity change from 0 to 7 [ 379.965106][T11344] loop6: [POWERTEC] p1 [ 379.969701][T11344] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 380.000742][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 380.030764][ T24] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 380.109741][T11351] /dev/rnullb0: Can't open blockdev [ 380.169925][ T24] usb 2-1: device descriptor read/64, error -71 [ 380.359943][ T5921] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 380.419955][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 380.511291][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.521563][ T5921] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 380.530820][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.540383][ T5921] usb 4-1: config 0 descriptor?? [ 380.547270][ T5921] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 380.550719][ T24] usb 2-1: device descriptor read/64, error -71 [ 380.554136][ T5921] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 380.670152][ T24] usb usb2-port1: attempt power cycle [ 380.868071][ T7749] usb 4-1: USB disconnect, device number 84 [ 380.970169][T11360] /dev/rnullb0: Can't open blockdev [ 380.993306][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 380.997565][ T30] audit: type=1400 audit(1756285952.101:107): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11361 comm="syz.4.1681" [ 381.037663][ T24] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 381.061398][ T24] usb 2-1: device descriptor read/8, error -71 [ 381.256719][ T981] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 381.289018][ T981] usb 1-1: USB disconnect, device number 67 [ 381.300047][ T24] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 381.330398][ T24] usb 2-1: device descriptor read/8, error -71 [ 381.389487][T11370] loop6: detected capacity change from 0 to 7 [ 381.400678][T11063] loop6: [POWERTEC] p1 [ 381.405042][T11063] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 381.428668][T11370] loop6: [POWERTEC] p1 [ 381.433434][T11370] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 381.441238][ T24] usb usb2-port1: unable to enumerate USB device [ 381.482608][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 381.539044][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 381.549489][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1686'. [ 381.567845][T11373] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1686'. [ 381.603416][T11372] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1686'. [ 382.030191][ T5921] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 382.170055][ T5921] usb 5-1: device descriptor read/64, error -71 [ 382.230008][ T981] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 382.380836][ T981] usb 4-1: Using ep0 maxpacket: 32 [ 382.387626][ T981] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 382.396029][ T981] usb 4-1: config 0 has no interface number 0 [ 382.402573][ T981] usb 4-1: config 0 interface 230 has no altsetting 0 [ 382.410172][ T5921] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 382.416610][ T981] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 382.428805][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.437122][ T981] usb 4-1: Product: syz [ 382.441486][ T981] usb 4-1: Manufacturer: syz [ 382.446093][ T981] usb 4-1: SerialNumber: syz [ 382.452488][ T981] usb 4-1: config 0 descriptor?? [ 382.459092][ T981] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 382.474597][ T981] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 382.550079][ T5921] usb 5-1: device descriptor read/64, error -71 [ 382.621902][ T30] audit: type=1400 audit(1756285953.731:108): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11396 comm="syz.0.1695" [ 382.653455][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.663141][ T5921] usb usb5-port1: attempt power cycle [ 382.807209][T11399] loop6: detected capacity change from 0 to 7 [ 382.815104][T11399] loop6: [POWERTEC] p1 [ 382.819375][T11399] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 382.862358][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 382.928072][T11402] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 383.031484][ T5921] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 383.060339][ T5921] usb 5-1: device descriptor read/8, error -71 [ 383.148802][T11405] netlink: 201916 bytes leftover after parsing attributes in process `syz.0.1698'. [ 383.158217][T11405] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 383.300001][ T5921] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 383.323919][ T5921] usb 5-1: device descriptor read/8, error -71 [ 383.393431][T11417] /dev/rnullb0: Can't open blockdev [ 383.441511][ T5921] usb usb5-port1: unable to enumerate USB device [ 383.947266][ T30] audit: type=1400 audit(1756285955.051:109): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11430 comm="syz.1.1706" [ 384.290850][T11433] loop6: detected capacity change from 0 to 7 [ 384.297526][T11433] loop6: [POWERTEC] p1 [ 384.303676][T11433] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 384.345265][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 384.616081][T11447] /dev/rnullb0: Can't open blockdev [ 384.923077][ T981] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 384.942908][ T981] usb 4-1: USB disconnect, device number 85 [ 385.040191][ T48] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 385.202827][ T48] usb 5-1: unable to get BOS descriptor or descriptor too short [ 385.215854][ T48] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 385.227494][ T48] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 385.243387][ T48] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 385.255416][ T48] usb 5-1: language id specifier not provided by device, defaulting to English [ 385.274305][ T48] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 385.285477][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.466521][ T30] audit: type=1400 audit(1756285956.571:110): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11466 comm="syz.3.1717" [ 385.543714][T11469] loop6: detected capacity change from 0 to 7 [ 385.552341][T11469] loop6: [POWERTEC] p1 [ 385.557995][T11469] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 385.617845][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 385.716444][T11473] /dev/rnullb0: Can't open blockdev [ 385.733717][T11458] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1714'. [ 385.757617][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.767843][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.785079][T11458] /dev/rnullb0: Can't open blockdev [ 385.796267][ T48] usb 5-1: 0:2 : does not exist [ 385.815419][ T48] usb 5-1: USB disconnect, device number 11 [ 385.876522][T11477] FAULT_INJECTION: forcing a failure. [ 385.876522][T11477] name failslab, interval 1, probability 0, space 0, times 0 [ 385.889520][T11477] CPU: 0 UID: 0 PID: 11477 Comm: syz.0.1722 Not tainted syzkaller #0 PREEMPT(full) [ 385.889547][T11477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 385.889569][T11477] Call Trace: [ 385.889577][T11477] [ 385.889584][T11477] dump_stack_lvl+0x189/0x250 [ 385.889613][T11477] ? __pfx____ratelimit+0x10/0x10 [ 385.889632][T11477] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.889653][T11477] ? __pfx__printk+0x10/0x10 [ 385.889672][T11477] ? tomoyo_check_inet_address+0x667/0x8c0 [ 385.889694][T11477] ? rcu_is_watching+0x15/0xb0 [ 385.889723][T11477] should_fail_ex+0x414/0x560 [ 385.889745][T11477] should_failslab+0xa8/0x100 [ 385.889762][T11477] __kmalloc_cache_noprof+0x70/0x3a0 [ 385.889785][T11477] ? reuseport_alloc+0x121/0x4d0 [ 385.889805][T11477] ? sctp_hash_endpoint+0x2b/0x610 [ 385.889823][T11477] reuseport_alloc+0x121/0x4d0 [ 385.889847][T11477] ? sctp_hash_endpoint+0x2b/0x610 [ 385.889861][T11477] sctp_hash_endpoint+0x4d8/0x610 [ 385.889875][T11477] ? sctp_hash_endpoint+0x2b/0x610 [ 385.889891][T11477] sctp_inet_listen+0x684/0x900 [ 385.889912][T11477] ? __pfx_sctp_inet_listen+0x10/0x10 [ 385.889932][T11477] ? __pfx_aa_sk_perm+0x10/0x10 [ 385.889950][T11477] ? __fget_files+0x2a/0x420 [ 385.889968][T11477] ? __fget_files+0x3a0/0x420 [ 385.889984][T11477] ? __fget_files+0x2a/0x420 [ 385.890004][T11477] __x64_sys_listen+0x1c4/0x240 [ 385.890024][T11477] do_syscall_64+0xfa/0xfa0 [ 385.890044][T11477] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.890061][T11477] ? clear_bhb_loop+0x60/0xb0 [ 385.890079][T11477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.890096][T11477] RIP: 0033:0x7f536418ebe9 [ 385.890112][T11477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.890128][T11477] RSP: 002b:00007f5365024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 385.890147][T11477] RAX: ffffffffffffffda RBX: 00007f53643b5fa0 RCX: 00007f536418ebe9 [ 385.890161][T11477] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 385.890171][T11477] RBP: 00007f5365024090 R08: 0000000000000000 R09: 0000000000000000 [ 385.890182][T11477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.890192][T11477] R13: 00007f53643b6038 R14: 00007f53643b5fa0 R15: 00007fffe8ab77a8 [ 385.890211][T11477] [ 386.121642][ C0] vkms_vblank_simulate: vblank timer overrun [ 386.584091][T11488] kvm: kvm [11487]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x3030303030303030 [ 386.596103][T11488] /dev/rnullb0: Can't open blockdev [ 386.620039][ T981] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 386.629979][ T48] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 386.686779][T11490] loop6: detected capacity change from 0 to 7 [ 386.695831][T11490] loop6: [POWERTEC] p1 [ 386.703183][T11490] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 386.781400][ T981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 386.793148][ T48] usb 1-1: Using ep0 maxpacket: 32 [ 386.798672][ T981] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 386.815547][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 386.817228][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.834623][ T48] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 386.843005][ T48] usb 1-1: config 0 has no interface number 0 [ 386.849118][ T48] usb 1-1: config 0 interface 230 has no altsetting 0 [ 386.858087][ T981] usb 4-1: config 0 descriptor?? [ 386.880973][T11484] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 386.893270][ T48] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 386.904855][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.914738][ T48] usb 1-1: Product: syz [ 386.919349][ T48] usb 1-1: Manufacturer: syz [ 386.925194][ T48] usb 1-1: SerialNumber: syz [ 386.944791][ T48] usb 1-1: config 0 descriptor?? [ 386.959531][ T48] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 386.992089][ T48] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 387.004989][T11503] FAULT_INJECTION: forcing a failure. [ 387.004989][T11503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 387.021077][T11503] CPU: 0 UID: 0 PID: 11503 Comm: syz.4.1732 Not tainted syzkaller #0 PREEMPT(full) [ 387.021103][T11503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 387.021114][T11503] Call Trace: [ 387.021122][T11503] [ 387.021129][T11503] dump_stack_lvl+0x189/0x250 [ 387.021157][T11503] ? __pfx____ratelimit+0x10/0x10 [ 387.021177][T11503] ? __pfx_dump_stack_lvl+0x10/0x10 [ 387.021199][T11503] ? __pfx__printk+0x10/0x10 [ 387.021223][T11503] ? rcu_is_watching+0x15/0xb0 [ 387.021243][T11503] should_fail_ex+0x414/0x560 [ 387.021266][T11503] _copy_to_user+0x31/0xb0 [ 387.021286][T11503] simple_read_from_buffer+0xe1/0x170 [ 387.021307][T11503] proc_fail_nth_read+0x1b3/0x220 [ 387.021330][T11503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.021352][T11503] ? rw_verify_area+0x2a6/0x4d0 [ 387.021368][T11503] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 387.021389][T11503] vfs_read+0x200/0xa30 [ 387.021405][T11503] ? fdget_pos+0x247/0x320 [ 387.021432][T11503] ? __pfx___mutex_lock+0x10/0x10 [ 387.021454][T11503] ? __pfx_vfs_read+0x10/0x10 [ 387.021474][T11503] ? __fget_files+0x3a0/0x420 [ 387.021491][T11503] ? __fget_files+0x2a/0x420 [ 387.021513][T11503] ksys_read+0x145/0x250 [ 387.021529][T11503] ? __fget_files+0x2a/0x420 [ 387.021548][T11503] ? __pfx_ksys_read+0x10/0x10 [ 387.021565][T11503] ? rcu_is_watching+0x15/0xb0 [ 387.021584][T11503] do_syscall_64+0xfa/0xfa0 [ 387.021604][T11503] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.021622][T11503] ? clear_bhb_loop+0x60/0xb0 [ 387.021640][T11503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.021656][T11503] RIP: 0033:0x7fcd59d8d5fc [ 387.021672][T11503] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 387.021687][T11503] RSP: 002b:00007fcd5abf2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 387.021707][T11503] RAX: ffffffffffffffda RBX: 00007fcd59fb5fa0 RCX: 00007fcd59d8d5fc [ 387.021721][T11503] RDX: 000000000000000f RSI: 00007fcd5abf20a0 RDI: 0000000000000005 [ 387.021732][T11503] RBP: 00007fcd5abf2090 R08: 0000000000000000 R09: 0000000000000000 [ 387.021744][T11503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.021754][T11503] R13: 00007fcd59fb6038 R14: 00007fcd59fb5fa0 R15: 00007fff7fc244b8 [ 387.021774][T11503] [ 387.257791][ C0] vkms_vblank_simulate: vblank timer overrun [ 387.315453][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 387.332286][ T30] audit: type=1400 audit(1756285958.441:111): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11504 comm="syz.4.1733" [ 387.486911][ T981] uclogic 0003:5543:0005.0015: unknown main item tag 0x0 [ 387.497758][ T981] uclogic 0003:5543:0005.0015: item fetching failed at offset 3/5 [ 387.508314][ T981] uclogic 0003:5543:0005.0015: parse failed [ 387.526995][ T981] uclogic 0003:5543:0005.0015: probe with driver uclogic failed with error -22 [ 387.958930][T11463] syz.1.1716 invoked oom-killer: gfp_mask=0x408d40(GFP_NOFS|__GFP_ZERO|__GFP_NOFAIL|__GFP_ACCOUNT), order=0, oom_score_adj=1000 [ 388.005544][T11463] CPU: 0 UID: 0 PID: 11463 Comm: syz.1.1716 Not tainted syzkaller #0 PREEMPT(full) [ 388.005570][T11463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 388.005581][T11463] Call Trace: [ 388.005588][T11463] [ 388.005595][T11463] dump_stack_lvl+0x189/0x250 [ 388.005624][T11463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 388.005645][T11463] ? __pfx__printk+0x10/0x10 [ 388.005669][T11463] ? rcu_is_watching+0x15/0xb0 [ 388.005686][T11463] dump_header+0xd3/0x480 [ 388.005703][T11463] oom_kill_process+0x387/0x920 [ 388.005725][T11463] out_of_memory+0xf09/0x12a0 [ 388.005744][T11463] ? mem_cgroup_iter+0x3b/0x460 [ 388.005764][T11463] ? __pfx_out_of_memory+0x10/0x10 [ 388.005785][T11463] mem_cgroup_out_of_memory+0x145/0x240 [ 388.005804][T11463] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 388.005830][T11463] ? _raw_spin_unlock+0x28/0x50 [ 388.005848][T11463] ? memcg1_oom_prepare+0x37f/0x450 [ 388.005871][T11463] try_charge_memcg+0xdff/0x1290 [ 388.005892][T11463] ? stack_depot_save_flags+0x40/0x860 [ 388.005917][T11463] ? rcu_is_watching+0x15/0xb0 [ 388.005936][T11463] ? __pfx_try_charge_memcg+0x10/0x10 [ 388.005957][T11463] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 388.005975][T11463] ? lock_release+0x4b/0x3e0 [ 388.005990][T11463] ? percpu_ref_tryget+0x15/0x180 [ 388.006007][T11463] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 388.006027][T11463] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 388.006049][T11463] obj_cgroup_charge_pages+0x1e/0xa0 [ 388.006069][T11463] obj_cgroup_charge_account+0xcf/0x660 [ 388.006090][T11463] ? obj_cgroup_charge_account+0x13b/0x660 [ 388.006111][T11463] __memcg_slab_post_alloc_hook+0x3dc/0x7d0 [ 388.006139][T11463] kmem_cache_alloc_noprof+0x2ab/0x390 [ 388.006161][T11463] ? alloc_buffer_head+0x2a/0x270 [ 388.006183][T11463] alloc_buffer_head+0x2a/0x270 [ 388.006202][T11463] ? folio_alloc_buffers+0x30f/0x640 [ 388.006223][T11463] folio_alloc_buffers+0x32d/0x640 [ 388.006246][T11463] create_empty_buffers+0x3a/0x530 [ 388.006269][T11463] __block_write_begin_int+0x3b1/0x1900 [ 388.006303][T11463] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 388.006321][T11463] ? ext4_convert_inline_data+0x1b3/0x5e0 [ 388.006344][T11463] ? __pfx___block_write_begin_int+0x10/0x10 [ 388.006366][T11463] ? __pfx_ext4_convert_inline_data+0x10/0x10 [ 388.006392][T11463] block_page_mkwrite+0x34f/0x4d0 [ 388.006414][T11463] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 388.006433][T11463] ext4_page_mkwrite+0xc87/0x1190 [ 388.006459][T11463] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 388.006481][T11463] ? rcu_is_watching+0x15/0xb0 [ 388.006500][T11463] do_page_mkwrite+0x14d/0x310 [ 388.006519][T11463] __handle_mm_fault+0x1916/0x5400 [ 388.006543][T11463] ? __pfx___handle_mm_fault+0x10/0x10 [ 388.006562][T11463] ? rcu_is_watching+0x15/0xb0 [ 388.006586][T11463] ? find_vma+0xe7/0x160 [ 388.006606][T11463] ? __pfx_find_vma+0x10/0x10 [ 388.006626][T11463] handle_mm_fault+0x40a/0x8e0 [ 388.006649][T11463] do_user_addr_fault+0x764/0x1390 [ 388.006671][T11463] exc_page_fault+0x82/0x100 [ 388.006691][T11463] asm_exc_page_fault+0x26/0x30 [ 388.006707][T11463] RIP: 0033:0x7f228aa6106c [ 388.006723][T11463] Code: 47 e8 00 01 48 8d 50 ff 48 89 15 07 47 e8 00 88 48 ff 8b 2d ee 46 e8 00 e8 21 5a ff ff 48 8b 05 fa 46 e8 00 41 bc 04 00 00 00 <89> 28 48 83 c0 08 66 44 89 60 fc 83 05 ea 46 e8 00 01 66 83 3d e6 [ 388.006738][T11463] RSP: 002b:00007ffe45614c10 EFLAGS: 00010206 [ 388.006754][T11463] RAX: 0000001b32924224 RBX: 00007f228b8e5720 RCX: 0000000000000001 [ 388.006766][T11463] RDX: 0000001b32924224 RSI: 0000000000000008 RDI: 00007f228b8e5720 [ 388.006778][T11463] RBP: 0000000000000055 R08: 0000000000000000 R09: 0000000000000026 [ 388.006788][T11463] R10: 3fffffffffffffff R11: 0000000000000293 R12: 0000000000000004 [ 388.006800][T11463] R13: 0000000000000026 R14: 0000000000000000 R15: 0000000000000000 [ 388.006818][T11463] [ 388.006880][T11463] memory: usage 307200kB, limit 307200kB, failcnt 27638 [ 388.435292][T11463] memory+swap: usage 307796kB, limit 9007199254740988kB, failcnt 0 [ 388.444952][T11463] kmem: usage 2388kB, limit 9007199254740988kB, failcnt 0 [ 388.453595][T11463] Memory cgroup stats for /syz1: [ 388.453713][T11463] cache 311521280 [ 388.467070][T11463] rss 577536 [ 388.472182][T11463] rss_huge 0 [ 388.475493][T11463] shmem 311513088 [ 388.479304][T11463] mapped_file 0 [ 388.483567][T11463] dirty 0 [ 388.486623][T11463] writeback 0 [ 388.491708][T11463] workingset_refault_anon 202 [ 388.496485][T11463] workingset_refault_file 3217 [ 388.504620][T11463] swap 610304 [ 388.508046][T11463] swapcached 20480 [ 388.515747][T11463] pgpgin 348241 [ 388.519339][T11463] pgpgout 272193 [ 388.523799][T11463] pgfault 152059 [ 388.527543][T11463] pgmajfault 3160 [ 388.533180][T11463] inactive_anon 8192 [ 388.537389][T11463] active_anon 12288 [ 388.543090][T11463] inactive_file 0 [ 388.546899][T11463] active_file 8192 [ 388.552090][T11463] unevictable 312090624 [ 388.556511][T11463] hierarchical_memory_limit 314572800 [ 388.562997][T11463] hierarchical_memsw_limit 9223372036854771712 [ 388.571330][T11463] total_cache 311521280 [ 388.575644][T11463] total_rss 577536 [ 388.579456][T11463] total_rss_huge 0 [ 388.584948][T11463] total_shmem 311513088 [ 388.589462][T11463] total_mapped_file 0 [ 388.593714][T11463] total_dirty 0 [ 388.597385][T11463] total_writeback 0 [ 388.603379][T11463] total_workingset_refault_anon 202 [ 388.608767][T11463] total_workingset_refault_file 3217 [ 388.616756][T11463] total_swap 610304 [ 388.624910][T11463] total_swapcached 20480 [ 388.629299][T11463] total_pgpgin 348241 [ 388.633862][T11463] total_pgpgout 272193 [ 388.638276][T11463] total_pgfault 152059 [ 388.644678][T11463] total_pgmajfault 3160 [ 388.649055][T11463] total_inactive_anon 8192 [ 388.654650][T11463] total_active_anon 12288 [ 388.659162][T11463] total_inactive_file 0 [ 388.665049][T11463] total_active_file 8192 [ 388.671954][T11463] total_unevictable 312090624 [ 388.677134][T11463] anon_cost 0 [ 388.683132][T11463] file_cost 0 [ 388.687878][T11463] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.1716,pid=11463,uid=0 [ 388.707226][T11463] Memory cgroup out of memory: Killed process 11463 (syz.1.1716) total-vm:98252kB, anon-rss:1468kB, file-rss:21668kB, shmem-rss:0kB, UID:0 pgtables:120kB oom_score_adj:1000 [ 389.404124][ T7749] usb 4-1: USB disconnect, device number 86 [ 389.472771][T11525] loop6: detected capacity change from 0 to 7 [ 389.486993][T11525] loop6: [POWERTEC] p1 [ 389.502110][T11525] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 389.509577][ T48] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 389.545190][ T48] usb 1-1: USB disconnect, device number 68 [ 389.628256][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 389.785465][ T30] audit: type=1400 audit(1756285960.891:112): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11536 comm="syz.3.1744" [ 389.872500][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.121531][ T51] Bluetooth: hci4: unexpected event 0x04 length: 4 < 10 [ 390.739943][ T48] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 390.890365][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 390.907409][ T48] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 390.917570][ T48] usb 4-1: config 0 has no interface number 0 [ 390.934948][ T48] usb 4-1: config 0 interface 230 has no altsetting 0 [ 390.955006][ T48] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 390.969938][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.988211][ T48] usb 4-1: Product: syz [ 390.996391][ T48] usb 4-1: Manufacturer: syz [ 391.004850][ T48] usb 4-1: SerialNumber: syz [ 391.017867][T11554] /dev/rnullb0: Can't open blockdev [ 391.024200][ T48] usb 4-1: config 0 descriptor?? [ 391.033591][ T48] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 391.052763][ T48] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 391.099210][T11560] loop6: detected capacity change from 0 to 7 [ 391.108639][T11560] loop6: [POWERTEC] p1 [ 391.115796][T11560] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 391.183826][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 391.435719][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061fd9000: rx timeout, send abort [ 391.935643][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026d91000: rx timeout, send abort [ 391.945636][ C0] vcan0: j1939_tp_rxtimer: 0xffff888061fd9000: abort rx timeout. Force session deactivation [ 392.026078][T11572] netlink: 'syz.4.1754': attribute type 3 has an invalid length. [ 392.044374][T11572] netlink: 'syz.4.1754': attribute type 1 has an invalid length. [ 392.057285][T11572] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1754'. [ 392.100099][T11572] NCSI netlink: No device for ifindex 33022 [ 392.193238][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 392.207390][ T30] audit: type=1400 audit(1756285963.311:113): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11573 comm="syz.4.1755" [ 392.238982][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.444653][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026d91000: abort rx timeout. Force session deactivation [ 393.353189][T11585] /dev/rnullb0: Can't open blockdev [ 393.467187][T11587] loop6: detected capacity change from 0 to 7 [ 393.488445][T11587] loop6: [POWERTEC] p1 [ 393.495829][ T48] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 393.508496][T11587] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 393.518227][ T48] usb 4-1: USB disconnect, device number 87 [ 393.608680][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 393.763961][T11598] syz.1.1763 (11598): drop_caches: 0 [ 393.778923][T11598] binder: 11594:11598 ioctl c018620c 200000000580 returned -22 [ 393.802265][T11598] binder: 11594:11598 ioctl c018937a 2000000002c0 returned -22 [ 394.051852][T11600] /dev/rnullb0: Can't open blockdev [ 394.175256][T11602] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1765'. [ 394.203345][T11602] /dev/rnullb0: Can't open blockdev [ 394.338118][ T30] audit: type=1400 audit(1756285965.441:114): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11603 comm="syz.3.1766" [ 394.992868][T11613] /dev/rnullb0: Can't open blockdev [ 395.524416][T11619] /dev/rnullb0: Can't open blockdev [ 396.082172][T11621] loop6: detected capacity change from 0 to 7 [ 396.110098][T11621] loop6: [POWERTEC] p1 [ 396.115131][T11621] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 396.205280][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 396.462857][ T5921] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 396.650067][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 396.679707][ T5921] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 396.700339][ T5921] usb 4-1: config 0 has no interface number 0 [ 396.707521][ T5921] usb 4-1: config 0 interface 230 has no altsetting 0 [ 396.729431][ T5921] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 396.741117][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.768888][ T5921] usb 4-1: Product: syz [ 396.774951][ T5921] usb 4-1: Manufacturer: syz [ 396.791297][ T5921] usb 4-1: SerialNumber: syz [ 396.810386][ T5921] usb 4-1: config 0 descriptor?? [ 396.822359][ T5921] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 396.847362][ T5921] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 397.158859][T11641] delete_channel: no stack [ 397.174773][T11641] 9p: Bad value for 'rfdno' [ 397.240251][ T30] audit: type=1400 audit(1756285968.351:115): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C9102 pid=11642 comm="syz.0.1779" [ 398.329776][T11650] loop6: detected capacity change from 0 to 7 [ 398.339272][T11650] Dev loop6: unable to read RDB block 7 [ 398.345226][T11650] loop6: AHDI p1 [ 398.351750][T11650] loop6: partition table partially beyond EOD, truncated [ 398.362865][T11650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1781'. [ 398.645998][T11661] hub 6-0:1.0: USB hub found [ 398.651269][T11661] hub 6-0:1.0: 1 port detected [ 398.840128][ T48] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 398.996567][ T48] usb 1-1: config 0 has an invalid interface number: 49 but max is 0 [ 399.006554][ T48] usb 1-1: config 0 has no interface number 0 [ 399.016891][ T48] usb 1-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0x29, changing to 0x9 [ 399.035340][ T48] usb 1-1: config 0 interface 49 altsetting 0 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 399.059819][ T48] usb 1-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 399.092599][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.109023][ T48] usb 1-1: Product: syz [ 399.118657][ T48] usb 1-1: Manufacturer: syz [ 399.125261][ T48] usb 1-1: SerialNumber: syz [ 399.141174][ T48] usb 1-1: config 0 descriptor?? [ 399.148644][T11659] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 399.253055][ T5921] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 399.281053][ T5921] usb 4-1: USB disconnect, device number 88 [ 399.366200][ T48] qcserial 1-1:0.49: Qualcomm USB modem converter detected [ 399.370508][T11673] sctp: [Deprecated]: syz.1.1790 (pid 11673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.370508][T11673] Use struct sctp_sack_info instead [ 399.399325][ T48] usb 1-1: Qualcomm USB modem converter now attached to ttyUSB0 [ 399.460660][ T48] usb 1-1: USB disconnect, device number 69 [ 399.494459][ T48] qcserial ttyUSB0: Qualcomm USB modem converter now disconnected from ttyUSB0 [ 399.522765][T11677] loop6: detected capacity change from 0 to 7 [ 399.523852][ T48] qcserial 1-1:0.49: device disconnected [ 399.537664][T11677] loop6: [POWERTEC] p1 [ 399.543016][T11677] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 399.640839][T11063] udevd[11063]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 399.654143][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 399.981510][ T5921] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 400.171599][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.200403][ T5921] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 642 [ 400.242343][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 400.288689][ T5921] usb 4-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 400.300802][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.329782][ T5921] usb 4-1: Product: syz [ 400.345865][ T5921] usb 4-1: Manufacturer: syz [ 400.362130][ T5921] usb 4-1: SerialNumber: syz [ 400.385623][ T5921] usb 4-1: config 0 descriptor?? [ 400.406530][T11682] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 400.435775][ T5921] ti_usb_3410_5052 4-1:0.0: TI USB 3410 1 port adapter converter detected [ 400.470486][T11687] /dev/rnullb0: Can't open blockdev [ 400.499133][ T5921] usb 4-1: Direct firmware load for ti_usb-v0451-p3410.fw failed with error -2 [ 400.552820][ T5921] usb 4-1: Falling back to sysfs fallback for: ti_usb-v0451-p3410.fw [ 400.651008][T11682] /dev/rnullb0: Can't open blockdev [ 400.666938][T11682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.715200][T11682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.870268][ T5902] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 400.915221][ T30] audit: type=1400 audit(1756285972.021:116): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C81876B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11692 comm="syz.0.1798" [ 401.040081][ T5902] usb 2-1: Using ep0 maxpacket: 32 [ 401.048967][ T5902] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 401.059641][ T5902] usb 2-1: config 0 has no interface number 0 [ 401.073864][ T5902] usb 2-1: config 0 interface 230 has no altsetting 0 [ 401.085182][ T5902] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 401.094879][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.103863][ T5902] usb 2-1: Product: syz [ 401.109092][ T5902] usb 2-1: Manufacturer: syz [ 401.114682][ T5902] usb 2-1: SerialNumber: syz [ 401.131523][ T5902] usb 2-1: config 0 descriptor?? [ 401.147673][ T5902] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 401.162540][ T5902] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 401.399755][T11702] loop6: detected capacity change from 0 to 7 [ 401.408504][T11702] loop6: [POWERTEC] p1 [ 401.415086][T11702] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 401.520629][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 401.730138][ T5978] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 401.893754][ T5978] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 401.910554][ T5978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.936664][ T5978] usb 1-1: config 0 descriptor?? [ 401.952499][ T5978] cp210x 1-1:0.0: cp210x converter detected [ 402.355306][ T5978] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 402.381973][ T5978] usb 1-1: cp210x converter now attached to ttyUSB0 [ 402.435435][ T9] IPVS: starting estimator thread 0... [ 402.530291][T11712] IPVS: using max 51 ests per chain, 122400 per kthread [ 402.924790][T11723] /dev/rnullb0: Can't open blockdev [ 403.660868][T11727] /dev/rnullb0: Can't open blockdev [ 403.682530][ T5902] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 403.711964][ T5902] usb 2-1: USB disconnect, device number 81 [ 403.742235][T11729] /dev/rnullb0: Can't open blockdev [ 403.806712][T11733] /dev/rnullb0: Can't open blockdev [ 403.889690][T11735] /dev/rnullb0: Can't open blockdev [ 403.965862][ T30] audit: type=1400 audit(1756285975.071:117): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE9 pid=11736 comm="syz.1.1811" [ 404.490069][ T5978] usb 1-1: USB disconnect, device number 70 [ 404.507606][ T5978] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.533351][T11741] loop6: detected capacity change from 0 to 7 [ 404.576715][ T5978] cp210x 1-1:0.0: device disconnected [ 404.582470][T11741] loop6: [POWERTEC] p1 [ 404.586778][T11741] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 404.865678][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 405.030019][ T5978] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 405.202463][ T5978] usb 1-1: Using ep0 maxpacket: 32 [ 405.218372][ T5978] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 405.256950][ T5978] usb 1-1: config 0 has no interface number 0 [ 405.286717][ T5978] usb 1-1: config 0 interface 230 has no altsetting 0 [ 405.311921][ T5978] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 405.323233][ T5978] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.342278][ T5978] usb 1-1: Product: syz [ 405.367922][ T5978] usb 1-1: Manufacturer: syz [ 405.379937][ T5978] usb 1-1: SerialNumber: syz [ 405.396581][ T5978] usb 1-1: config 0 descriptor?? [ 405.407987][ T5978] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 405.437642][ T5978] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 405.570549][T11762] /dev/rnullb0: Can't open blockdev [ 405.850796][ T30] audit: type=1400 audit(1756285976.961:118): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=11773 comm="syz.1.1823" [ 406.412054][T11777] loop6: detected capacity change from 0 to 7 [ 406.422922][T11037] loop6: [POWERTEC] p1 [ 406.427944][T11037] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 406.441240][T11777] loop6: [POWERTEC] p1 [ 406.447567][T11777] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 406.534341][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 406.588830][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 406.839578][T11792] Dead loop on virtual device ip6_vti0, fix it urgently! [ 407.167272][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 407.187942][ T30] audit: type=1400 audit(1756285978.291:119): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11802 comm="syz.4.1833" [ 407.752804][ T5978] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 407.757472][T11810] loop6: detected capacity change from 0 to 7 [ 407.771710][T11810] loop6: [POWERTEC] p1 [ 407.773070][ T5978] usb 1-1: USB disconnect, device number 71 [ 407.776587][T11810] loop6: p1 size 1680801792 extends beyond EOD, [ 407.785134][T11811] /dev/rnullb0: Can't open blockdev [ 407.799120][T11810] truncated [ 407.844791][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 407.916792][T11818] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1837'. [ 408.020201][T11826] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 408.114988][T11829] /dev/rnullb0: Can't open blockdev [ 408.125131][T11829] CIFS mount error: No usable UNC path provided in device string! [ 408.125131][T11829] [ 408.135735][T11829] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 408.229996][ T5978] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 408.383361][ T5978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 408.391156][ T5978] usb 1-1: can't read configurations, error -61 [ 408.410591][T11724] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 408.530384][ T5978] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 408.570796][T11724] usb 5-1: Using ep0 maxpacket: 32 [ 408.579198][T11724] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 408.580573][T11834] /dev/rnullb0: Can't open blockdev [ 408.592117][T11724] usb 5-1: config 0 has no interface number 0 [ 408.605077][T11724] usb 5-1: config 0 interface 230 has no altsetting 0 [ 408.615811][T11724] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 408.630737][T11724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.641619][T11724] usb 5-1: Product: syz [ 408.645861][T11724] usb 5-1: Manufacturer: syz [ 408.655464][T11724] usb 5-1: SerialNumber: syz [ 408.662043][ T7749] IPVS: starting estimator thread 0... [ 408.664338][T11724] usb 5-1: config 0 descriptor?? [ 408.675085][ T30] audit: type=1400 audit(1756285979.781:120): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11835 comm="syz.3.1845" [ 408.713767][T11724] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 408.736233][T11724] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 408.755652][ T5978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 408.766369][ T5978] usb 1-1: can't read configurations, error -61 [ 408.773949][ T5978] usb usb1-port1: attempt power cycle [ 408.780852][T11837] IPVS: using max 53 ests per chain, 127200 per kthread [ 409.120048][ T5978] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 409.152839][ T5978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 409.161119][ T5978] usb 1-1: can't read configurations, error -61 [ 409.208399][T11841] loop6: detected capacity change from 0 to 7 [ 409.218129][T11037] loop6: [POWERTEC] p1 [ 409.226001][T11037] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 409.237498][T11841] loop6: [POWERTEC] p1 [ 409.243541][T11841] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 409.291346][ T5978] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 409.312629][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 409.334972][ T5978] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 409.349353][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 409.356488][ T5978] usb 1-1: can't read configurations, error -61 [ 409.374230][ T5978] usb usb1-port1: unable to enumerate USB device [ 410.279941][ T51] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 411.867078][T11724] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 411.920337][T11724] usb 5-1: USB disconnect, device number 12 [ 411.966882][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 412.037469][T11865] loop6: detected capacity change from 0 to 7 [ 412.046853][T11867] /dev/rnullb0: Can't open blockdev [ 412.090567][T11865] loop6: [POWERTEC] p1 [ 412.097338][T11865] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 412.218722][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 412.268052][T11872] /dev/rnullb0: Can't open blockdev [ 412.347756][T11874] netlink: 'syz.1.1859': attribute type 21 has an invalid length. [ 412.370304][T11874] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1859'. [ 412.420168][T11874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1859'. [ 412.442161][T11876] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1860'. [ 412.475012][T11876] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1860'. [ 412.775367][T11893] netlink: 'syz.3.1865': attribute type 1 has an invalid length. [ 412.810377][ T7749] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 412.910914][T11724] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 412.970108][ T7749] usb 1-1: Using ep0 maxpacket: 8 [ 412.982356][ T7749] usb 1-1: config 6 has an invalid interface number: 64 but max is 0 [ 412.993689][ T7749] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 413.011120][ T7749] usb 1-1: config 6 has no interface number 0 [ 413.021895][ T7749] usb 1-1: too many endpoints for config 6 interface 64 altsetting 21: 207, using maximum allowed: 30 [ 413.039627][ T7749] usb 1-1: config 6 interface 64 altsetting 21 has 0 endpoint descriptors, different from the interface descriptor's value: 207 [ 413.062502][ T7749] usb 1-1: config 6 interface 64 has no altsetting 0 [ 413.075741][ T7749] usb 1-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 413.087599][ T7749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.100558][ T7749] usb 1-1: Product: syz [ 413.101344][T11724] usb 5-1: Using ep0 maxpacket: 32 [ 413.106547][ T7749] usb 1-1: Manufacturer: syz [ 413.117497][ T7749] usb 1-1: SerialNumber: syz [ 413.118172][T11724] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 413.133519][ T5895] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 413.149262][T11724] usb 5-1: config 0 has no interface number 0 [ 413.157624][T11724] usb 5-1: config 0 interface 230 has no altsetting 0 [ 413.173023][T11724] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 413.184856][T11724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.195953][T11724] usb 5-1: Product: syz [ 413.201894][T11724] usb 5-1: Manufacturer: syz [ 413.208643][T11724] usb 5-1: SerialNumber: syz [ 413.218091][T11724] usb 5-1: config 0 descriptor?? [ 413.232060][T11724] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 413.246646][T11724] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 413.310760][ T5895] usb 2-1: Using ep0 maxpacket: 16 [ 413.322046][ T5895] usb 2-1: config 8 has an invalid interface number: 206 but max is 0 [ 413.334095][ T5895] usb 2-1: config 8 has no interface number 0 [ 413.342295][ T5895] usb 2-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 413.364434][ T5895] usb 2-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024 [ 413.387869][ T5895] usb 2-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 413.392292][T11881] /dev/rnullb0: Can't open blockdev [ 413.406703][ T5895] usb 2-1: config 8 interface 206 has no altsetting 0 [ 413.440026][ T9] usb 1-1: USB disconnect, device number 76 [ 413.478474][ T5895] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 413.494015][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.509764][ T5895] usb 2-1: Product: syz [ 413.516164][ T5895] usb 2-1: Manufacturer: syz [ 413.523678][ T5895] usb 2-1: SerialNumber: syz [ 413.666097][T11902] loop6: detected capacity change from 0 to 7 [ 413.684555][T11902] loop6: [POWERTEC] p1 [ 413.694017][T11902] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 413.762367][T11897] /dev/rnullb0: Can't open blockdev [ 413.802515][T11904] /dev/rnullb0: Can't open blockdev [ 413.806636][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.835832][T11669] udevd[11669]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 413.853368][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.899461][ T5895] garmin_gps 2-1:8.206: Garmin GPS usb/tty converter detected [ 413.925615][ T5895] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 413.954743][ T5895] usb 2-1: USB disconnect, device number 82 [ 413.973050][ T5895] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 414.036985][ T5895] garmin_gps 2-1:8.206: device disconnected [ 414.162400][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 2819 [ 414.175810][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 414.320492][ T7749] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 414.481568][ T7749] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 414.510679][ T7749] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 414.522180][ T7749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.533716][ T7749] usb 1-1: Product: syz [ 414.539144][ T7749] usb 1-1: Manufacturer: syz [ 414.548585][ T7749] usb 1-1: SerialNumber: syz [ 414.560520][ T7749] usb 1-1: config 0 descriptor?? [ 414.573717][ T7749] usb 1-1: Waiting for MOTU Microbook II to boot up... [ 414.585442][ T7749] usb 1-1: failed setting the sample rate for Motu MicroBook II: -22 [ 414.596924][ T7749] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 414.725228][T11918] syzkaller1: entered promiscuous mode [ 414.734185][T11918] syzkaller1: entered allmulticast mode [ 414.748359][T11918] raw_sendmsg: syz.1.1872 forgot to set AF_INET. Fix it! [ 414.782817][T11913] tmpfs: Bad value for 'mpol' [ 415.610116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 415.642675][T11925] CIFS: iocharset name too long [ 415.683429][T11724] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 415.709712][T11724] usb 5-1: USB disconnect, device number 13 [ 415.747279][T11931] loop6: detected capacity change from 0 to 7 [ 415.756443][T11931] loop6: [POWERTEC] p1 [ 415.761330][T11931] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 415.770108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 415.808407][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 415.856606][T11937] /dev/rnullb0: Can't open blockdev [ 415.928492][T11939] /dev/rnullb0: Can't open blockdev [ 415.960099][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 416.006265][T11941] /dev/rnullb0: Can't open blockdev [ 416.014189][T11941] /dev/rnullb0: Can't open blockdev [ 416.110283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 416.273868][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 416.278834][ T30] audit: type=1400 audit(1756285987.381:121): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE430B8DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11953 comm="syz.4.1883" [ 416.390023][ T5895] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 416.550040][ T5895] usb 2-1: Using ep0 maxpacket: 32 [ 416.557506][ T5895] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 416.565869][ T5895] usb 2-1: config 0 has no interface number 0 [ 416.572299][ T5895] usb 2-1: config 0 interface 230 has no altsetting 0 [ 416.582059][ T5895] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 416.591244][ T5895] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.599272][ T5895] usb 2-1: Product: syz [ 416.603542][ T5895] usb 2-1: Manufacturer: syz [ 416.608162][ T5895] usb 2-1: SerialNumber: syz [ 416.614086][ T5895] usb 2-1: config 0 descriptor?? [ 416.620814][ T5895] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 416.630854][ T5895] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 416.849289][T11958] netlink: 'syz.4.1884': attribute type 4 has an invalid length. [ 416.860808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 416.919072][T11963] loop6: detected capacity change from 0 to 7 [ 416.927424][T11963] loop6: [POWERTEC] p1 [ 416.933657][T11963] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 416.987982][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 417.072810][ T48] usb 1-1: USB disconnect, device number 77 [ 417.126994][T11968] /dev/rnullb0: Can't open blockdev [ 417.309962][T11724] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 417.338316][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 417.547013][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 417.562061][ T30] audit: type=1400 audit(1756285988.671:122): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=11979 comm="syz.4.1892" [ 417.665103][T11982] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1893'. [ 417.789607][T11987] loop6: detected capacity change from 0 to 7 [ 417.800900][T11987] loop6: [POWERTEC] p1 [ 417.805884][T11987] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 417.851747][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 418.850148][T11724] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 418.870626][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 419.012878][T11724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 419.023669][T11724] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 419.034907][T11724] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 419.046073][T11724] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping [ 419.060703][T11724] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 419.074979][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.086892][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.100600][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.111621][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 419.125607][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.00 [ 419.137837][T11724] usb 1-1: language id specifier not provided by device, defaulting to English [ 419.147865][ T5895] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 419.157562][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.167335][T11724] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 419.179632][ T5895] usb 2-1: USB disconnect, device number 83 [ 419.187199][T11724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.196212][ T9] usb 5-1: config 0 descriptor?? [ 419.206445][T11724] usb 1-1: Product: 倿 [ 419.211019][T11724] usb 1-1: Manufacturer: ⠊ [ 419.219730][T11724] usb 1-1: SerialNumber: syz [ 419.421437][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 419.442347][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 419.458889][ T9] usb 5-1: USB disconnect, device number 15 [ 419.708334][T12019] loop6: detected capacity change from 0 to 7 [ 419.716983][T12019] loop6: [POWERTEC] p1 [ 419.722259][T12019] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 419.783019][T11037] udevd[11037]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 420.019539][ T30] audit: type=1400 audit(1756285991.121:123): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12025 comm="syz.1.1906" [ 420.110152][ T5895] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 420.269982][ T5895] usb 5-1: Using ep0 maxpacket: 8 [ 420.279035][ T5895] usb 5-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 420.290568][ T5895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.298858][ T5895] usb 5-1: Product: syz [ 420.303491][ T5895] usb 5-1: Manufacturer: syz [ 420.309551][ T5895] usb 5-1: SerialNumber: syz [ 420.316472][ T5895] usb 5-1: config 0 descriptor?? [ 420.327624][ T5895] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 420.687072][T12028] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 420.701927][T12028] overlayfs: failed lookup in lower (/, name='cpuacct.usage_sys', err=-66): unsupported object type [ 421.069484][T12045] loop6: detected capacity change from 0 to 7 [ 421.078674][T12045] loop6: [POWERTEC] p1 [ 421.083624][T12045] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 421.147245][T11669] udevd[11669]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 421.270547][ T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 421.306678][ T30] audit: type=1400 audit(1756285992.411:124): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12048 comm="syz.3.1915" [ 421.340936][ C1] vkms_vblank_simulate: vblank timer overrun [ 421.426979][T12053] /dev/rnullb0: Can't open blockdev [ 421.446912][T12053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 421.463494][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 421.474650][ T9] usb 2-1: config 0 has an invalid interface number: 230 but max is 0 [ 421.493216][T12053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 421.502931][ T9] usb 2-1: config 0 has no interface number 0 [ 421.510939][ T9] usb 2-1: config 0 interface 230 has no altsetting 0 [ 421.523977][ T9] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 421.534812][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.548637][ T9] usb 2-1: Product: syz [ 421.555463][ T9] usb 2-1: Manufacturer: syz [ 421.562066][ T9] usb 2-1: SerialNumber: syz [ 421.575404][ T9] usb 2-1: config 0 descriptor?? [ 421.588141][ T5895] usb 5-1: USB disconnect, device number 16 [ 421.599693][ T9] ums-usbat 2-1:0.230: USB Mass Storage device detected [ 421.617845][ T9] ums-usbat 2-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 421.654022][T11724] usb 1-1: 0:2 : does not exist [ 421.703774][T11724] usb 1-1: USB disconnect, device number 78 [ 421.727437][T11611] udevd[11611]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 421.923458][T12059] /dev/rnullb0: Can't open blockdev [ 422.030264][T11724] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 422.198538][T11724] usb 1-1: config 0 has an invalid interface number: 84 but max is 0 [ 422.212284][T12065] blk_print_req_error: 2 callbacks suppressed [ 422.212322][T12065] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.234306][T11724] usb 1-1: config 0 has an invalid interface number: 66 but max is 0 [ 422.240883][T12065] I/O error, dev loop4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 422.245342][T11724] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 422.256588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 422.281660][T11724] usb 1-1: config 0 has no interface number 0 [ 422.290124][T11724] usb 1-1: config 0 has no interface number 1 [ 422.318945][T11724] usb 1-1: config 0 interface 84 altsetting 0 endpoint 0x4 has invalid maxpacket 1560, setting to 64 [ 422.332198][T11724] usb 1-1: config 0 interface 84 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 422.348665][T11724] usb 1-1: too many endpoints for config 0 interface 66 altsetting 153: 216, using maximum allowed: 30 [ 422.379603][T11724] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x5 has invalid maxpacket 32 [ 422.401703][T11724] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0x12, changing to 0x2 [ 422.418183][T11724] usb 1-1: config 0 interface 66 altsetting 153 has an endpoint descriptor with address 0xE6, changing to 0x86 [ 422.436667][T11724] usb 1-1: config 0 interface 66 altsetting 153 endpoint 0x86 has invalid maxpacket 34869, setting to 1024 [ 422.461108][T11724] usb 1-1: config 0 interface 66 altsetting 153 bulk endpoint 0x86 has invalid maxpacket 1024 [ 422.474602][T11724] usb 1-1: config 0 interface 66 altsetting 153 has 3 endpoint descriptors, different from the interface descriptor's value: 216 [ 422.491777][T11724] usb 1-1: config 0 interface 66 has no altsetting 0 [ 422.519347][T11724] usb 1-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3 [ 422.531427][T11724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.543173][T11724] usb 1-1: Product: syz [ 422.549244][T11724] usb 1-1: Manufacturer: syz [ 422.575909][T11724] usb 1-1: SerialNumber: syz [ 422.598023][T11724] usb 1-1: config 0 descriptor?? [ 422.629317][T11724] ljca 1-1:0.84: bulk endpoints not found [ 422.797886][T12071] /dev/rnullb0: Can't open blockdev [ 422.829132][T12057] /dev/rnullb0: Can't open blockdev [ 422.933155][T12075] syzkaller1: entered promiscuous mode [ 422.933192][T12075] syzkaller1: entered allmulticast mode [ 423.234089][T12080] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1924'. [ 423.280218][T11724] ljca 1-1:0.66: probe with driver ljca failed with error -71 [ 423.327666][T11724] usb 1-1: USB disconnect, device number 79 [ 423.465863][ T30] audit: type=1400 audit(1756285994.571:125): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12086 comm="syz.4.1926" [ 423.508061][ C1] vkms_vblank_simulate: vblank timer overrun [ 423.993553][T11724] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 424.019561][T11724] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 424.082361][ T9] ums-usbat 2-1:0.230: probe with driver ums-usbat failed with error -5 [ 424.130871][ T9] usb 2-1: USB disconnect, device number 84 [ 424.389226][T12102] loop6: detected capacity change from 0 to 7 [ 424.418283][T12102] loop6: [POWERTEC] p1 [ 424.426354][T12102] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 424.452604][T12098] kvm: kvm [12093]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 424.530642][T12098] kvm: kvm [12093]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 424.534563][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 424.576823][T12107] /dev/rnullb0: Can't open blockdev [ 424.625523][T12098] kvm: kvm [12093]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 424.685186][T12098] kvm: kvm [12093]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 424.721856][T12098] kvm: kvm [12093]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 424.761575][T12098] kvm_intel: kvm [12093]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 424.920404][ T48] usb 2-1: new low-speed USB device number 85 using dummy_hcd [ 425.087267][ T48] usb 2-1: config 3 has an invalid interface number: 11 but max is 3 [ 425.098476][ T48] usb 2-1: config 3 has an invalid interface number: 51 but max is 3 [ 425.128993][ T48] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 425.155031][ T48] usb 2-1: config 3 has an invalid interface number: 34 but max is 3 [ 425.179766][ T48] usb 2-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 425.201308][ T48] usb 2-1: config 3 has an invalid interface number: 7 but max is 3 [ 425.237014][ T48] usb 2-1: config 3 has no interface number 0 [ 425.249727][ T48] usb 2-1: config 3 has no interface number 1 [ 425.267773][ T48] usb 2-1: config 3 has no interface number 2 [ 425.286569][ T48] usb 2-1: config 3 has no interface number 3 [ 425.306319][ T48] usb 2-1: config 3 interface 51 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 425.340416][ T48] usb 2-1: config 3 interface 51 altsetting 4 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 425.402753][ T48] usb 2-1: config 3 interface 51 altsetting 4 endpoint 0x7 is Bulk; changing to Interrupt [ 425.426415][ T48] usb 2-1: config 3 interface 51 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 425.459780][ T48] usb 2-1: config 3 interface 51 altsetting 4 endpoint 0xA has invalid maxpacket 32, setting to 0 [ 425.485085][ T48] usb 2-1: config 3 interface 51 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 425.508614][T12135] netlink: 'syz.0.1936': attribute type 6 has an invalid length. [ 425.517339][ T48] usb 2-1: config 3 interface 51 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 425.539189][ T48] usb 2-1: config 3 interface 51 altsetting 4 endpoint 0x3 has invalid maxpacket 32, setting to 8 [ 425.555452][ T48] usb 2-1: config 3 interface 51 altsetting 4 endpoint 0xB has an invalid bInterval 114, changing to 4 [ 425.589983][ T48] usb 2-1: config 3 interface 51 altsetting 4 endpoint 0xB has invalid maxpacket 16, setting to 0 [ 425.600971][ T48] usb 2-1: config 3 interface 51 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 0 [ 425.614159][ T48] usb 2-1: config 3 interface 51 altsetting 4 endpoint 0xC has invalid maxpacket 1024, setting to 8 [ 425.626181][ T48] usb 2-1: config 3 interface 51 altsetting 4 has a duplicate endpoint with address 0xC, skipping [ 425.662779][ T48] usb 2-1: config 3 interface 51 altsetting 4 has a duplicate endpoint with address 0x5, skipping [ 425.675936][ T48] usb 2-1: config 3 interface 51 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 425.712321][ T48] usb 2-1: config 3 interface 34 altsetting 7 has a duplicate endpoint with address 0xD, skipping [ 425.740859][ T48] usb 2-1: config 3 interface 34 altsetting 7 has a duplicate endpoint with address 0x3, skipping [ 425.758731][ T48] usb 2-1: config 3 interface 11 has no altsetting 0 [ 425.767187][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 425.778701][ T48] usb 2-1: config 3 interface 51 has no altsetting 0 [ 425.786884][ T48] usb 2-1: config 3 interface 34 has no altsetting 0 [ 425.796755][ T48] usb 2-1: config 3 interface 7 has no altsetting 0 [ 426.089554][T12150] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1940'. [ 426.105653][T12150] ALSA: mixer_oss: invalid OSS volume '^' [ 426.275015][T12157] loop6: detected capacity change from 0 to 7 [ 426.290572][T11611] loop6: [POWERTEC] p1 [ 426.300833][T11611] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 426.326261][T12157] loop6: [POWERTEC] p1 [ 426.332502][T12157] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 426.386935][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 426.421355][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 426.481158][T12162] overlayfs: failed to resolve './file0': -2 [ 426.491382][T12161] overlayfs: failed to resolve './file0': -2 [ 426.521561][ T9] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 426.548347][ T9] hid-generic 0000:0000:0000.0017: hidraw1: HID v0.00 Device [syz1] on syz0 [ 426.876429][T12167] kvm: kvm [12163]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 426.903841][T12167] kvm: kvm [12163]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 426.928956][T12167] kvm: kvm [12163]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 426.964079][T12167] kvm: kvm [12163]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 426.991301][T12167] kvm: kvm [12163]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 427.023837][T12167] kvm_intel: kvm [12163]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 427.492146][ T51] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 427.498769][ T51] Bluetooth: Wrong link type (-22) [ 427.509453][ T51] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 427.516299][ T51] Bluetooth: Wrong link type (-22) [ 427.522281][ T51] Bluetooth: hci4: link tx timeout [ 427.528013][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 427.700051][ T48] usb 2-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice=ef.d5 [ 427.709396][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.720469][ T48] usb 2-1: Product: ࠔ [ 427.725996][ T48] usb 2-1: Manufacturer: 䌞瀃貸҅⤚꾄䘑趁災ᔟ轚ꖇ퐶뵽匍賻ﮮ䖌籉㼸ᢃ䍓씹洿꼣갻랄挢쳘츯ᔞ筿왱᾽㺧韔ᙧ媱䧽㤎஠氜₍漾뼧ガ剹㡈펭谥您쏤㥐䗀縘漃ꩺ釷轭魦䆳䰪ꉒ稽꿤䈫币ᔓ軘⛄ꜰÇ譒匎翶쀀س遛ἴ឴䊓ቡ紐ꐿ섚铩할㬞뻭蘱裘䟊鿛 [ 427.787342][T12184] /dev/rnullb0: Can't open blockdev [ 427.883633][ T48] usb 2-1: can't set config #3, error -71 [ 427.911341][ T48] usb 2-1: USB disconnect, device number 85 [ 428.287507][ T30] audit: type=1400 audit(1756285999.391:126): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12194 comm="syz.0.1951" [ 428.383396][T12199] loop6: detected capacity change from 0 to 7 [ 428.393178][T12199] loop6: [POWERTEC] p1 [ 428.397817][T12199] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 428.456748][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 428.902621][ T48] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 428.916641][ T48] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 429.153990][T12209] kvm_intel: kvm [12206]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 429.277045][ T5978] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 429.328032][ T5978] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz1] on syz0 [ 429.416166][T12224] sctp: [Deprecated]: syz.1.1958 (pid 12224) Use of int in max_burst socket option deprecated. [ 429.416166][T12224] Use struct sctp_assoc_value instead [ 429.580055][ T5868] Bluetooth: hci4: command 0x0406 tx timeout [ 429.606568][T12230] /dev/rnullb0: Can't open blockdev [ 429.632283][T12216] /dev/rnullb0: Can't open blockdev [ 430.019565][T12251] loop6: detected capacity change from 0 to 7 [ 430.042228][T12251] loop6: [POWERTEC] p1 [ 430.047088][T12251] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 430.109762][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 430.169209][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 430.187948][ T30] audit: type=1400 audit(1756286001.291:127): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12256 comm="syz.4.1964" [ 430.216705][T12259] /dev/rnullb0: Can't open blockdev [ 430.370047][ T1211] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 430.413354][T12263] /dev/rnullb0: Can't open blockdev [ 430.511154][ T1211] usb 1-1: device descriptor read/64, error -71 [ 430.710073][T12280] /dev/rnullb0: Can't open blockdev [ 430.751856][ T1211] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 430.779313][T12284] loop6: detected capacity change from 0 to 7 [ 430.798298][T12284] loop6: [POWERTEC] p1 [ 430.803274][T12284] loop6: p1 size 1680801792 extends beyond EOD, truncated [ 430.849366][T12286] /dev/rnullb0: Can't open blockdev [ 430.864705][T11611] udevd[11611]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 430.909978][ T1211] usb 1-1: device descriptor read/64, error -71 [ 431.023075][ T1211] usb usb1-port1: attempt power cycle [ 431.379918][ T1211] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 431.400804][ T1211] usb 1-1: device descriptor read/8, error -71 [ 431.640369][ T1211] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 431.680689][ T1211] usb 1-1: device descriptor read/8, error -71 [ 431.790221][ T1211] usb usb1-port1: unable to enumerate USB device [ 431.911040][ T5978] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 432.000210][T11724] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 432.070083][ T5978] usb 2-1: Using ep0 maxpacket: 16 [ 432.079168][ T5978] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 432.089437][ T5978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.098209][ T5978] usb 2-1: Product: syz [ 432.102795][ T5978] usb 2-1: Manufacturer: syz [ 432.109365][ T5978] usb 2-1: SerialNumber: syz [ 432.117577][ T5978] usb 2-1: config 0 descriptor?? [ 432.124258][ T5978] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 432.151748][T11724] usb 5-1: config 0 has no interfaces? [ 432.161650][T11724] usb 5-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02 [ 432.173419][T11724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 432.182566][T11724] usb 5-1: SerialNumber: syz [ 432.191555][T11724] usb 5-1: config 0 descriptor?? [ 432.402360][T12298] /dev/rnullb0: Can't open blockdev [ 432.411131][ T48] usb 5-1: USB disconnect, device number 17 [ 432.564481][ T5978] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 432.576385][ T5978] usb 2-1: USB disconnect, device number 86 [ 432.947155][T12301] /dev/rnullb0: Can't open blockdev [ 433.047385][ T51] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 433.356508][T12321] fuse: Bad value for 'group_id' [ 433.361769][T12321] fuse: Bad value for 'group_id' [ 433.368394][T12321] /dev/rnullb0: Can't open blockdev [ 433.497414][T12323] /dev/rnullb0: Can't open blockdev [ 433.919984][ T48] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 434.069972][ T48] usb 5-1: device descriptor read/64, error -71 [ 434.274652][T11724] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 434.304826][T11724] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 434.317016][ T48] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 434.368937][T12346] /dev/rnullb0: Can't open blockdev [ 434.490750][ T48] usb 5-1: device descriptor read/64, error -71 [ 434.586568][T12350] kvm_pr_unimpl_wrmsr: 5 callbacks suppressed [ 434.586605][T12350] kvm: kvm [12342]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 434.603546][ T48] usb usb5-port1: attempt power cycle [ 434.611254][T12350] kvm: kvm [12342]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 434.625007][T12350] kvm: kvm [12342]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 434.640267][T12350] kvm: kvm [12342]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 434.652967][T12350] kvm: kvm [12342]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 434.666458][T12350] kvm_intel: kvm [12342]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 434.758561][T12355] hid-generic 0000:0000:0000.001A: pid 12355 passed too large report [ 434.950088][ T48] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 435.102318][ T48] usb 5-1: device descriptor read/8, error -71 [ 435.350088][ T48] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 435.380580][ T48] usb 5-1: device descriptor read/8, error -71 [ 435.490335][ T48] usb usb5-port1: unable to enumerate USB device [ 435.630110][T11724] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 435.810325][T11724] usb 2-1: Using ep0 maxpacket: 16 [ 435.817879][T11724] usb 2-1: config 1 has an invalid interface number: 223 but max is 0 [ 435.830929][T11724] usb 2-1: config 1 has no interface number 0 [ 435.837385][T11724] usb 2-1: config 1 interface 223 has no altsetting 0 [ 435.849466][T11724] usb 2-1: New USB device found, idVendor=04b4, idProduct=931c, bcdDevice=2b.4a [ 435.860878][T11724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.871225][T11724] usb 2-1: Product: syz [ 435.877272][T11724] usb 2-1: Manufacturer: syz [ 435.883169][T11724] usb 2-1: SerialNumber: syz [ 436.107395][ T51] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 436.118507][ T30] audit: type=1400 audit(1756286007.221:128): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12358 comm="syz.1.1997" [ 436.167977][T11724] usb 2-1: can't set first interface for hiFace device. [ 436.176098][T11724] snd-usb-hiface 2-1:1.223: probe with driver snd-usb-hiface failed with error -5 [ 436.201735][T11724] usb 2-1: USB disconnect, device number 87 [ 436.806746][T12365] netlink: 176 bytes leftover after parsing attributes in process `syz.4.2000'. [ 436.822154][T12365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2000'. [ 436.880450][T12367] /dev/rnullb0: Can't open blockdev [ 436.956112][T12369] /dev/rnullb0: Can't open blockdev [ 437.041175][ T9] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 437.071697][T11724] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 437.090467][T11724] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 437.181445][T12376] /dev/rnullb0: Can't open blockdev [ 437.263300][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.301096][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 437.316428][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.351115][ T9] usb 2-1: config 0 descriptor?? [ 437.417366][ T30] audit: type=1400 audit(1756286008.521:129): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3A0CCA7C2B08C9DFF78977F306B457CA93031D371D06D2E59E863E2FE54118A4EE43068DF6BA88E1B6DC3A2F2C91AE1C817D6B6014270B8BC51F73363852F4F12EE955F464599F0C485D pid=12380 comm="syz.0.2007" [ 437.587218][T12386] hid-generic 0000:0000:0000.001B: pid 12386 passed too large report [ 437.765242][ T9] hid (null): report_id 0 is invalid [ 437.779518][ T9] logitech-djreceiver 0003:046D:C71F.001C: report_id 0 is invalid [ 437.792403][ T9] logitech-djreceiver 0003:046D:C71F.001C: item 0 0 1 8 parsing failed [ 437.802799][ T9] logitech-djreceiver 0003:046D:C71F.001C: logi_dj_probe: parse failed [ 437.812518][ T9] logitech-djreceiver 0003:046D:C71F.001C: probe with driver logitech-djreceiver failed with error -22 [ 438.051762][T12389] /dev/rnullb0: Can't open blockdev [ 438.081895][T12391] /dev/rnullb0: Can't open blockdev [ 438.647371][ T9] usb 2-1: USB disconnect, device number 88 [ 438.748548][T12404] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2014'. [ 439.129914][ T9] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 439.280372][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 439.294299][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 439.310009][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.319925][ T7749] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 439.326200][ T9] usb 2-1: config 0 descriptor?? [ 439.865895][ T5978] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 439.892971][ T5978] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 439.965919][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 439.981856][ T7749] usb 1-1: Using ep0 maxpacket: 32 [ 439.988196][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.995992][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.000919][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 440.007126][ T7749] usb 1-1: config 0 has an invalid interface number: 230 but max is 0 [ 440.039493][ T9] usb 2-1: USB disconnect, device number 89 [ 440.046889][ T7749] usb 1-1: config 0 has no interface number 0 [ 440.054539][ T7749] usb 1-1: config 0 interface 230 has no altsetting 0 [ 440.064789][ T7749] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 440.076108][ T7749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.085199][ T7749] usb 1-1: Product: syz [ 440.089399][ T7749] usb 1-1: Manufacturer: syz [ 440.097432][ T7749] usb 1-1: SerialNumber: syz [ 440.105416][ T7749] usb 1-1: config 0 descriptor?? [ 440.115034][ T7749] ums-usbat 1-1:0.230: USB Mass Storage device detected [ 440.129253][ T7749] ums-usbat 1-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 440.224675][T12421] kvm: kvm [12416]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 440.235583][T12421] kvm: kvm [12416]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 440.248540][T12421] kvm: kvm [12416]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 440.267075][T12421] kvm: kvm [12416]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 440.281868][T12421] kvm: kvm [12416]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 440.294841][T12421] kvm_intel: kvm [12416]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 440.370034][ T9] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 440.390926][T12428] hid-generic 0000:0000:0000.001D: pid 12428 passed too large report [ 440.549965][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 440.560859][T12430] netlink: 'syz.3.2020': attribute type 1 has an invalid length. [ 440.599573][ T9] usb 2-1: config 6 has an invalid interface number: 250 but max is 0 [ 440.608543][ T9] usb 2-1: config 6 has no interface number 0 [ 440.616985][ T9] usb 2-1: config 6 interface 250 has no altsetting 0 [ 440.628123][ T9] usb 2-1: New USB device found, idVendor=17cc, idProduct=1010, bcdDevice=a9.d1 [ 440.644401][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.669350][ T9] usb 2-1: Product: syz [ 440.675586][ T9] usb 2-1: Manufacturer: syz [ 440.682101][ T9] usb 2-1: SerialNumber: syz [ 440.730983][T12432] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 440.738817][T12432] /dev/rnullb0: Can't open blockdev [ 440.803501][T12434] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2022'. [ 440.951117][T12440] netlink: 'syz.1.2019': attribute type 39 has an invalid length. [ 442.211925][ T981] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 442.281458][T12450] /dev/rnullb0: Can't open blockdev [ 442.380334][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 442.403910][ T981] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 36, changing to 9 [ 442.444711][ T7749] ums-usbat 1-1:0.230: probe with driver ums-usbat failed with error -5 [ 442.469610][ T981] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 442.492244][ T7749] usb 1-1: USB disconnect, device number 84 [ 442.513394][ T981] usb 5-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.40 [ 442.532732][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.568005][ T981] usb 5-1: Product: 件饎輑ᘽ뎌㻟䅏ㅢ䔺睇~鰃ꏾ␻裙쪦⫔䞤ԥ㲀력㕐熍暍錞ꮲ쨘䖱䉎厬쯴䔘辢땗歎榎䛳ꨙᛔ뎀각掳꒚焤㐹耯뵰 [ 442.624089][ T981] usb 5-1: Manufacturer: 騍쮡揮鸏೵ᦊ陔阖蠘哷ͷ㼆᩼饴䄷ꕖ⩏⠒嫻ꁪ蔿飷墩ꋾ䩑桮ᚙ綅๯☺熊䞩숙梅晇洞㨡兂졮ᠿ麔﷩榲 [ 442.676524][ T981] usb 5-1: SerialNumber: 變ᰢ⏷ⓔ₄㴧矧䵡ᢌ쮘᢮䑼闏꘎赀詀′坜薽됲┖㎧椧ꈬ綵雖笜⟑噄促㎷朞脎흍ఐ㕂餆埇酯쭍诚繽媘뱞섌贩徢뜺꬈徺䣈㽵㾰ꝉ뚹饔䀱挥뾕䉌떝櫏훪鄐琄㘧ᖍꤸঐ맭㷊羔虷䈀⯪쥏Ⱶ嵵︗ꊪ૕杷럛鉡⛛㫙꯭酀⋐煞 [ 443.121283][ T9] snd-usb-audio 2-1:6.250: probe with driver snd-usb-audio failed with error -71 [ 443.182583][ T9] usb 2-1: USB disconnect, device number 90 [ 443.231884][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.284587][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.316751][T12456] /dev/rnullb0: Can't open blockdev [ 443.341923][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.364635][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.393303][T12448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.430632][T12448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.536561][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 443.582241][ T9] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 443.669088][ T981] usbhid 5-1:1.0: can't add hid device: -71 [ 443.676047][ T981] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 443.698258][ T981] usb 5-1: USB disconnect, device number 22 [ 443.853556][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 1029 [ 443.957930][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.989608][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.011351][T12474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.037970][T12474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.480112][ T981] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 444.640080][ T981] usb 5-1: Using ep0 maxpacket: 32 [ 444.667604][ T981] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 444.691310][ T981] usb 5-1: config 0 has no interface number 0 [ 444.710343][ T981] usb 5-1: config 0 interface 230 has no altsetting 0 [ 444.736128][ T981] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 444.762856][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.786191][ T981] usb 5-1: Product: syz [ 444.799098][ T981] usb 5-1: Manufacturer: syz [ 444.811652][ T981] usb 5-1: SerialNumber: syz [ 444.818020][ T981] usb 5-1: config 0 descriptor?? [ 444.826266][ T981] ums-usbat 5-1:0.230: USB Mass Storage device detected [ 444.857661][ T981] ums-usbat 5-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 444.963831][T12487] /dev/rnullb0: Can't open blockdev [ 445.111217][T12497] /dev/rnullb0: Can't open blockdev [ 445.441570][ T9] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 445.611458][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 445.628173][ T9] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 445.646484][ T9] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 445.668638][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 445.689318][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 445.713863][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 445.738506][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 445.777314][ T9] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 445.801820][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.902934][ T9] usb 2-1: config 0 descriptor?? [ 446.132754][ T9] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 91 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 446.149301][ T9] usb 2-1: USB disconnect, device number 91 [ 446.157606][ T9] usblp0: removed [ 446.230075][T11724] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 446.399994][T11724] usb 1-1: Using ep0 maxpacket: 8 [ 446.408411][T11724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 446.417679][T11724] usb 1-1: config 8 has an invalid interface number: 255 but max is 0 [ 446.427843][T11724] usb 1-1: config 8 has no interface number 0 [ 446.434272][T11724] usb 1-1: config 8 interface 255 has no altsetting 0 [ 446.447063][T11724] usb 1-1: string descriptor 0 read error: -22 [ 446.453676][T11724] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 446.463225][T11724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.489955][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 446.620165][ T9] usb 2-1: device descriptor read/64, error -71 [ 446.678609][T11724] catc 1-1:8.255: Can't set altsetting 1. [ 446.684797][T11724] catc 1-1:8.255: probe with driver catc failed with error -5 [ 446.697530][T11724] usb 1-1: USB disconnect, device number 85 [ 446.870985][ T9] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 447.020023][ T9] usb 2-1: device descriptor read/64, error -71 [ 447.138118][ T9] usb usb2-port1: attempt power cycle [ 447.170201][ T24] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 447.191772][ T24] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 447.351212][ T981] ums-usbat 5-1:0.230: probe with driver ums-usbat failed with error -5 [ 447.362179][ T5895] hid-generic C98F:0003:0000.0020: unknown main item tag 0x0 [ 447.362233][ T5895] hid-generic C98F:0003:0000.0020: unknown main item tag 0x0 [ 447.372242][T12521] /dev/rnullb0: Can't open blockdev [ 447.388536][ T5895] hid-generic C98F:0003:0000.0020: hidraw1: HID v0.00 Device [syz0] on syz1 [ 447.425794][ T981] usb 5-1: USB disconnect, device number 23 [ 447.491007][ T9] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 447.546252][ T9] usb 2-1: device descriptor read/8, error -71 [ 447.573792][T12524] fido_id[12524]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 447.699656][T12531] /dev/rnullb0: Can't open blockdev [ 447.820276][ T9] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 447.850765][ T9] usb 2-1: device descriptor read/8, error -71 [ 447.900061][ T51] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 447.909124][ T51] Bluetooth: Wrong link type (-22) [ 447.980592][ T9] usb usb2-port1: unable to enumerate USB device [ 449.198767][ T24] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 449.199617][T12562] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2060'. [ 449.231683][ T24] hid-generic 0000:0000:0000.0021: hidraw1: HID v0.00 Device [syz1] on syz0 [ 449.295221][T12567] /dev/rnullb0: Can't open blockdev [ 449.715503][T12579] /dev/rnullb0: Can't open blockdev [ 449.723272][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 449.768515][T12578] syzkaller0: entered promiscuous mode [ 449.802668][T12578] syzkaller0: entered allmulticast mode [ 449.870872][ T9] usb 1-1: device descriptor read/64, error -71 [ 450.150230][ T9] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 450.304974][T12585] /dev/rnullb0: Can't open blockdev [ 450.320416][ T9] usb 1-1: device descriptor read/64, error -71 [ 450.465941][ T9] usb usb1-port1: attempt power cycle [ 450.536053][T12590] /dev/rnullb0: Can't open blockdev [ 450.635919][T12593] orangefs_mount: mount request failed with -4 [ 450.830396][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 450.860556][ T9] usb 1-1: device descriptor read/8, error -71 [ 451.110445][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 451.163593][ T9] usb 1-1: device descriptor read/8, error -71 [ 451.193666][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.203303][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.214201][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.223731][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.234247][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.242537][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.251780][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.262063][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.272851][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.283975][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.292910][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.304149][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.315649][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.327448][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.338552][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.347762][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.356889][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.366697][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.376635][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.386376][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.396115][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.405800][ T9] usb usb1-port1: unable to enumerate USB device [ 451.410909][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.424758][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.436838][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.447612][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.456511][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.465903][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.475403][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.486117][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.494407][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.502729][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.511379][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.520252][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.528907][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.537457][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.546579][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.555052][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.563392][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.572865][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.582011][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.591817][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.600997][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.608955][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.617307][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.625988][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.634411][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.645116][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.654225][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.663856][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.672682][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.682190][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.691244][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.699301][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.707925][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.716126][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724351][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724397][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724420][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724445][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724470][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724499][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724527][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724560][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724589][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.724610][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 451.980294][ T9] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 452.151468][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 452.160295][ T9] usb 5-1: device descriptor read/all, error -61 [ 452.302789][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 452.370022][T11724] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 452.463993][ T9] usb 5-1: device descriptor read/64, error -71 [ 452.502252][T12622] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 452.521634][T12622] overlayfs: missing 'lowerdir' [ 452.539955][T11724] usb 2-1: Using ep0 maxpacket: 16 [ 452.550994][T11724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 452.580263][T11724] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 452.590675][ T9] usb usb5-port1: attempt power cycle [ 452.602522][T11724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 452.627664][T11724] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 452.645785][T12629] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 452.663979][T11724] usb 2-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 452.679013][T11724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.689230][T11724] usb 2-1: Product: syz [ 452.693688][T11724] usb 2-1: Manufacturer: syz [ 452.698419][T11724] usb 2-1: SerialNumber: syz [ 452.706871][T12629] /dev/rnullb0: Can't open blockdev [ 452.713613][T11724] usb 2-1: config 0 descriptor?? [ 452.730495][T12616] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 452.758184][T11724] port100 2-1:0.0: NFC: Could not get supported command types [ 452.950346][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 452.985068][ T9] usb 5-1: device descriptor read/8, error -71 [ 452.995607][T11724] usb 2-1: USB disconnect, device number 96 [ 453.229987][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 453.270542][ T9] usb 5-1: device descriptor read/8, error -71 [ 453.390949][ T9] usb usb5-port1: unable to enumerate USB device [ 453.614491][T12643] Can't find a SQUASHFS superblock on nullb0 [ 454.119899][ T24] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 454.271401][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 454.295546][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 454.307938][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.316507][ T24] usb 2-1: Product: syz [ 454.320901][ T24] usb 2-1: Manufacturer: syz [ 454.325516][ T24] usb 2-1: SerialNumber: syz [ 454.339755][ T24] r8152-cfgselector 2-1: Unknown version 0x0000 [ 454.346684][ T24] r8152-cfgselector 2-1: config 0 descriptor?? [ 454.353748][T12674] /dev/rnullb0: Can't open blockdev [ 454.424681][T12676] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2097'. [ 454.437645][T12676] /dev/rnullb0: Can't open blockdev [ 454.537878][ T1211] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 454.583578][ T1211] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 454.639244][T12685] tipc: Started in network mode [ 454.651682][T12685] tipc: Node identity 325d231dd11, cluster identity 4711 [ 454.680204][T12685] tipc: Enabled bearer , priority 0 [ 454.763644][T12662] /dev/rnullb0: Can't open blockdev [ 454.769738][ T24] r8152-cfgselector 2-1: USB disconnect, device number 97 [ 454.834122][T12677] tipc: Disabling bearer [ 455.207814][T12692] /dev/rnullb0: Can't open blockdev [ 455.659891][ T24] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 455.814586][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.836961][ T24] usb 2-1: New USB device found, idVendor=054c, idProduct=0ba0, bcdDevice= 0.00 [ 455.847116][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.868445][ T24] usb 2-1: config 0 descriptor?? [ 456.218894][ T1211] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 456.255732][ T1211] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 456.284213][ T24] playstation 0003:054C:0BA0.0024: item fetching failed at offset 6/7 [ 456.314998][ T24] playstation 0003:054C:0BA0.0024: Parse failed [ 456.334822][ T24] playstation 0003:054C:0BA0.0024: probe with driver playstation failed with error -22 [ 456.493652][ T981] usb 2-1: USB disconnect, device number 98 [ 456.709008][ T51] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 456.798628][T12742] /dev/rnullb0: Can't open blockdev [ 456.855169][T12744] /dev/rnullb0: Can't open blockdev [ 456.913163][T12746] /dev/rnullb0: Can't open blockdev [ 456.979913][ T981] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 457.149905][ T981] usb 5-1: Using ep0 maxpacket: 16 [ 457.164890][ T981] usb 5-1: unable to get BOS descriptor or descriptor too short [ 457.186132][ T981] usb 5-1: config 13 has an invalid interface number: 50 but max is 0 [ 457.234073][ T981] usb 5-1: config 13 has no interface number 0 [ 457.241869][ T981] usb 5-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 457.302424][ T981] usb 5-1: config 13 interface 50 has no altsetting 0 [ 457.311288][ T981] usb 5-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 457.321327][ T981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.329390][ T981] usb 5-1: Product: syz [ 457.333730][ T981] usb 5-1: Manufacturer: syz [ 457.338392][ T981] usb 5-1: SerialNumber: syz [ 457.351717][T12740] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 457.366388][T12753] kAFS: No cell specified [ 457.583277][ T981] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 457.608217][ T981] usb 5-1: MIDIStreaming interface descriptor not found [ 457.694633][ T981] usb 5-1: USB disconnect, device number 28 [ 457.745444][T11094] udevd[11094]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 457.951396][T12760] /dev/rnullb0: Can't open blockdev [ 457.968216][ T1211] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 457.994605][ T1211] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.080176][T12762] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2123'. [ 458.103137][T12762] /dev/rnullb0: Can't open blockdev [ 458.970140][ T48] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 459.136473][ T48] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.161491][ T48] usb 1-1: config 1 has an invalid interface number: 255 but max is 1 [ 459.182764][ T31] INFO: task syz.2.1554:10902 blocked for more than 143 seconds. [ 459.185564][ T48] usb 1-1: config 1 has no interface number 1 [ 459.193687][T12788] /dev/sg0: Can't lookup blockdev [ 459.203024][T12788] /dev/sg0: Can't lookup blockdev [ 459.209219][ T31] Not tainted syzkaller #0 [ 459.211886][ T48] usb 1-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 459.230953][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 459.239177][ T48] usb 1-1: config 1 interface 0 has no altsetting 0 [ 459.246706][ T31] task:syz.2.1554 state:D stack:25224 pid:10902 tgid:10902 ppid:5856 task_flags:0x400040 flags:0x00004006 [ 459.263958][ T48] usb 1-1: config 1 interface 255 has no altsetting 0 [ 459.267692][ T31] Call Trace: [ 459.278235][ T31] [ 459.282152][ T31] __schedule+0x1798/0x4cc0 [ 459.287019][ T31] ? do_raw_spin_lock+0x121/0x290 [ 459.293769][ T31] ? rcu_is_watching+0x15/0xb0 [ 459.298774][ T48] usb 1-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 459.304148][ T31] ? __pfx___schedule+0x10/0x10 [ 459.308256][ T48] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.314740][ T31] ? rcu_is_watching+0x15/0xb0 [ 459.321280][ T48] usb 1-1: Product: syz [ 459.327302][ T31] ? schedule+0x91/0x360 [ 459.332035][ T48] usb 1-1: Manufacturer: syz [ 459.334493][ T31] ? rcu_is_watching+0x15/0xb0 [ 459.339064][ T48] usb 1-1: SerialNumber: syz [ 459.343977][ T31] ? lock_release+0x4b/0x3e0 [ 459.354739][ T31] schedule+0x165/0x360 [ 459.358925][ T31] __fuse_simple_request+0xf15/0x18d0 [ 459.364365][ T31] ? __pfx___fuse_simple_request+0x10/0x10 [ 459.370424][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 459.376650][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 459.382995][ T31] fuse_flush+0x5d4/0x800 [ 459.387359][ T31] ? __pfx_locks_remove_posix+0x10/0x10 [ 459.393019][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 459.397891][ T31] ? __fput_deferred+0x215/0x390 [ 459.402888][ T31] ? __pfx_fuse_flush+0x10/0x10 [ 459.407751][ T31] filp_flush+0xbd/0x190 [ 459.412087][ T31] filp_close+0x1d/0x40 [ 459.416263][ T31] __se_sys_close_range+0x359/0x650 [ 459.421711][ T31] ? __pfx___se_sys_close_range+0x10/0x10 [ 459.428361][ T31] ? rcu_is_watching+0x15/0xb0 [ 459.433729][ T31] do_syscall_64+0xfa/0xfa0 [ 459.438245][ T31] ? rcu_is_watching+0x15/0xb0 [ 459.443069][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.449141][ T31] ? clear_bhb_loop+0x60/0xb0 [ 459.453871][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.459780][ T31] RIP: 0033:0x7f5cd938ebe9 [ 459.464274][ T31] RSP: 002b:00007ffcefb7f058 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 459.472729][ T31] RAX: ffffffffffffffda RBX: 0000000000048337 RCX: 00007f5cd938ebe9 [ 459.480774][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 459.488761][ T31] RBP: 00007f5cd95b7da0 R08: 0000000000000001 R09: 0000000eefb7f34f [ 459.496960][ T31] R10: 0000001b31e20000 R11: 0000000000000246 R12: 00007f5cd95b5fac [ 459.505060][ T31] R13: 00007f5cd95b5fa0 R14: ffffffffffffffff R15: 00007ffcefb7f170 [ 459.513090][ T31] [ 459.516170][ T31] INFO: lockdep is turned off. [ 459.521183][ T31] NMI backtrace for cpu 0 [ 459.521201][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 459.521221][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.521231][ T31] Call Trace: [ 459.521239][ T31] [ 459.521245][ T31] dump_stack_lvl+0x189/0x250 [ 459.521274][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.521296][ T31] ? __pfx__printk+0x10/0x10 [ 459.521322][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 459.521340][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 459.521358][ T31] ? __pfx__printk+0x10/0x10 [ 459.521381][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 459.521400][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 459.521419][ T31] watchdog+0xf60/0xfa0 [ 459.521437][ T31] ? watchdog+0x1e2/0xfa0 [ 459.521453][ T31] kthread+0x711/0x8a0 [ 459.521475][ T31] ? __pfx_watchdog+0x10/0x10 [ 459.521496][ T31] ? __pfx_kthread+0x10/0x10 [ 459.521516][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.521543][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.521563][ T31] ? __pfx_kthread+0x10/0x10 [ 459.521583][ T31] ret_from_fork+0x47c/0x820 [ 459.521601][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 459.521622][ T31] ? __switch_to_asm+0x39/0x70 [ 459.521638][ T31] ? __switch_to_asm+0x33/0x70 [ 459.521654][ T31] ? __pfx_kthread+0x10/0x10 [ 459.521674][ T31] ret_from_fork_asm+0x1a/0x30 [ 459.521698][ T31] [ 459.521705][ T31] Sending NMI from CPU 0 to CPUs 1: [ 459.561493][ T48] smsusb:smsusb_probe: board id=8, interface number 0 [ 459.562688][ C1] NMI backtrace for cpu 1 [ 459.562704][ C1] CPU: 1 UID: 0 PID: 48 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 459.562722][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.562734][ C1] Workqueue: usb_hub_wq hub_event [ 459.562759][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 459.562778][ C1] Code: e8 5e 47 66 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f f1 c9 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 459.562792][ C1] RSP: 0018:ffffc90000b86578 EFLAGS: 00000006 [ 459.562805][ C1] RAX: 1ffffffff3448c05 RBX: 00000000000003f9 RCX: 0000000000000000 [ 459.562817][ C1] RDX: 00000000000003f9 RSI: 00000000000f7b23 RDI: 00000000000f7b24 [ 459.562827][ C1] RBP: ffffc90000b86750 R08: 0000000000000003 R09: 0000000000000004 [ 459.562838][ C1] R10: dffffc0000000000 R11: ffffffff855a8720 R12: dffffc0000000000 [ 459.562850][ C1] R13: dffffc0000000000 R14: ffffffff9a246080 R15: 0000000000000000 [ 459.562862][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 459.562875][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 459.562885][ C1] CR2: 0000001b32824228 CR3: 00000000776f0000 CR4: 00000000003526f0 [ 459.562899][ C1] Call Trace: [ 459.562905][ C1] [ 459.562913][ C1] serial8250_console_write+0x581/0x1ba0 [ 459.562932][ C1] ? format_decode+0xd9/0xe30 [ 459.562949][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 459.562966][ C1] ? console_flush_all+0x13a/0xc40 [ 459.562984][ C1] ? rcu_is_watching+0x15/0xb0 [ 459.563000][ C1] ? lock_acquire+0x5f/0x360 [ 459.563016][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 459.563035][ C1] ? console_flush_all+0x13a/0xc40 [ 459.563051][ C1] ? console_flush_all+0x13a/0xc40 [ 459.563069][ C1] console_flush_all+0x725/0xc40 [ 459.563088][ C1] ? console_flush_all+0x13a/0xc40 [ 459.563107][ C1] ? __pfx_console_flush_all+0x10/0x10 [ 459.563129][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 459.563149][ C1] console_unlock+0xc4/0x270 [ 459.563166][ C1] ? __pfx_console_unlock+0x10/0x10 [ 459.563182][ C1] ? vprintk_emit+0x440/0x7a0 [ 459.563197][ C1] ? vprintk_emit+0x587/0x7a0 [ 459.563213][ C1] ? vprintk_emit+0x444/0x7a0 [ 459.563228][ C1] ? vprintk_emit+0x444/0x7a0 [ 459.563244][ C1] vprintk_emit+0x5b7/0x7a0 [ 459.563259][ C1] ? vprintk_emit+0x444/0x7a0 [ 459.563275][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 459.563290][ C1] ? __device_attach_driver+0x2ce/0x530 [ 459.563308][ C1] ? bus_for_each_drv+0x24e/0x2e0 [ 459.563322][ C1] ? __device_attach+0x2b8/0x400 [ 459.563337][ C1] ? bus_probe_device+0x185/0x260 [ 459.563351][ C1] ? device_add+0x7b6/0xb50 [ 459.563368][ C1] ? idr_get_free+0x8dc/0xa70 [ 459.563388][ C1] _printk+0xcf/0x120 [ 459.563409][ C1] ? __pfx__printk+0x10/0x10 [ 459.563431][ C1] smsusb_probe+0x178/0x2060 [ 459.563450][ C1] ? do_raw_spin_lock+0x121/0x290 [ 459.563468][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 459.563485][ C1] ? do_raw_spin_lock+0x121/0x290 [ 459.563503][ C1] ? __pfx_smsusb_probe+0x10/0x10 [ 459.563520][ C1] ? rcu_is_watching+0x15/0xb0 [ 459.563543][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 459.563562][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 459.563582][ C1] ? __pm_runtime_set_status+0x785/0xa50 [ 459.563603][ C1] usb_probe_interface+0x665/0xc30 [ 459.563622][ C1] ? __pfx_usb_probe_interface+0x10/0x10 [ 459.563636][ C1] really_probe+0x26d/0x9e0 [ 459.563656][ C1] __driver_probe_device+0x18c/0x2f0 [ 459.563674][ C1] driver_probe_device+0x4f/0x430 [ 459.563693][ C1] __device_attach_driver+0x2ce/0x530 [ 459.563711][ C1] bus_for_each_drv+0x24e/0x2e0 [ 459.563726][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 459.563743][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 459.563761][ C1] __device_attach+0x2b8/0x400 [ 459.563779][ C1] ? __pfx___device_attach+0x10/0x10 [ 459.563797][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 459.563816][ C1] bus_probe_device+0x185/0x260 [ 459.563832][ C1] device_add+0x7b6/0xb50 [ 459.563849][ C1] usb_set_configuration+0x1a87/0x20e0 [ 459.563872][ C1] usb_generic_driver_probe+0x8d/0x150 [ 459.563893][ C1] usb_probe_device+0x1c4/0x390 [ 459.563909][ C1] ? __pfx_usb_probe_device+0x10/0x10 [ 459.563923][ C1] really_probe+0x26d/0x9e0 [ 459.563943][ C1] __driver_probe_device+0x18c/0x2f0 [ 459.563960][ C1] driver_probe_device+0x4f/0x430 [ 459.563980][ C1] __device_attach_driver+0x2ce/0x530 [ 459.563999][ C1] bus_for_each_drv+0x24e/0x2e0 [ 459.564013][ C1] ? __pfx___device_attach_driver+0x10/0x10 [ 459.564031][ C1] ? __pfx_bus_for_each_drv+0x10/0x10 [ 459.564049][ C1] __device_attach+0x2b8/0x400 [ 459.564067][ C1] ? __pfx___device_attach+0x10/0x10 [ 459.564086][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 459.564104][ C1] bus_probe_device+0x185/0x260 [ 459.564120][ C1] device_add+0x7b6/0xb50 [ 459.564137][ C1] usb_new_device+0xa39/0x16f0 [ 459.564159][ C1] ? __pfx_usb_new_device+0x10/0x10 [ 459.564177][ C1] ? rcu_is_watching+0x15/0xb0 [ 459.564194][ C1] hub_event+0x2958/0x4a20 [ 459.564229][ C1] ? __pfx_hub_event+0x10/0x10 [ 459.564247][ C1] ? rcu_is_watching+0x15/0xb0 [ 459.564262][ C1] ? lock_acquire+0x5f/0x360 [ 459.564277][ C1] ? rcu_is_watching+0x15/0xb0 [ 459.564290][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 459.564306][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 459.564322][ C1] process_scheduled_works+0xae1/0x17b0 [ 459.564348][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 459.564370][ C1] worker_thread+0x8a0/0xda0 [ 459.564394][ C1] kthread+0x711/0x8a0 [ 459.564413][ C1] ? __pfx_worker_thread+0x10/0x10 [ 459.564429][ C1] ? __pfx_kthread+0x10/0x10 [ 459.564446][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.564463][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.564480][ C1] ? __pfx_kthread+0x10/0x10 [ 459.564498][ C1] ret_from_fork+0x47c/0x820 [ 459.564515][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 459.564538][ C1] ? __switch_to_asm+0x39/0x70 [ 459.564554][ C1] ? __switch_to_asm+0x33/0x70 [ 459.564568][ C1] ? __pfx_kthread+0x10/0x10 [ 459.564585][ C1] ret_from_fork_asm+0x1a/0x30 [ 459.564606][ C1] [ 459.564703][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 459.564719][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 459.564738][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.564749][ T31] Call Trace: [ 459.564757][ T31] [ 459.564765][ T31] dump_stack_lvl+0x99/0x250 [ 459.564789][ T31] ? __asan_memcpy+0x40/0x70 [ 459.564810][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.564832][ T31] ? __pfx__printk+0x10/0x10 [ 459.564858][ T31] vpanic+0x281/0x750 [ 459.564878][ T31] ? __pfx_vpanic+0x10/0x10 [ 459.564896][ T31] ? rcu_is_watching+0x15/0xb0 [ 459.564913][ T31] ? preempt_schedule+0xae/0xc0 [ 459.564934][ T31] ? preempt_schedule_common+0x83/0xd0 [ 459.564956][ T31] panic+0xb9/0xc0 [ 459.564974][ T31] ? __pfx_panic+0x10/0x10 [ 459.564993][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 459.565015][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 459.565034][ T31] watchdog+0xf9f/0xfa0 [ 459.565051][ T31] ? watchdog+0x1e2/0xfa0 [ 459.565068][ T31] kthread+0x711/0x8a0 [ 459.565089][ T31] ? __pfx_watchdog+0x10/0x10 [ 459.565111][ T31] ? __pfx_kthread+0x10/0x10 [ 459.565132][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 459.565151][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.565171][ T31] ? __pfx_kthread+0x10/0x10 [ 459.565191][ T31] ret_from_fork+0x47c/0x820 [ 459.565210][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 459.565230][ T31] ? __switch_to_asm+0x39/0x70 [ 459.565246][ T31] ? __switch_to_asm+0x33/0x70 [ 459.565262][ T31] ? __pfx_kthread+0x10/0x10 [ 459.565288][ T31] ret_from_fork_asm+0x1a/0x30 [ 459.565311][ T31] [ 459.569501][ T31] Kernel Offset: disabled