last executing test programs: 3m14.228028872s ago: executing program 1 (id=799): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 3m14.123870716s ago: executing program 1 (id=800): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x11, 0x0, 0x39, 0x1, 0x1, 0x1}) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r4, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f000000c400)={0x2020}, 0x2020) 3m13.168500368s ago: executing program 1 (id=808): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') pread64(r2, &(0x7f0000000040)=""/211, 0xd3, 0x7a) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 3m12.492298346s ago: executing program 1 (id=811): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, 0x0) mmap(&(0x7f0000697000/0x1000)=nil, 0x1000, 0x1000000, 0x4000010, r1, 0xabab2000) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236cd1f8d50f2568ac466a6d40024f87588cbe7808c481b157f18acb07cee62b1d238ba704435ee1c055697eb1ee0e2cfa36d2efbf1ac9fa85fe4", 0xfdae}], 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x40086602, 0x0) ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000000c0)) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0, 0x0) ioctl$SOUND_OLD_MIXER_INFO(r3, 0x80304d65, &(0x7f0000000080)) 3m12.279847391s ago: executing program 1 (id=812): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x1) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4a, 0x0, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8900, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x121000, 0x8) mkdirat(r6, &(0x7f0000000200)='./file0\x00', 0x5f) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r7, 0x6, 0xe, &(0x7f0000001480)="5579d8ba", 0x4) fadvise64(r4, 0x92, 0x5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r4, 0x93771000) ppoll(&(0x7f0000000000)=[{r4, 0x4000}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0x5]}, 0x8) syz_emit_vhci(&(0x7f0000000100)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x33}, "753ec3f643bb0e4f36b8de7fa579d837016049e2bacb9d293de96b6381c29afada82c877d377e3eb7b5dba22cce5083c3f9574"}, 0x37) 3m10.904082908s ago: executing program 1 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 32) sendfile(r0, r0, 0x0, 0x9) 2m55.674637562s ago: executing program 32 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 32) sendfile(r0, r0, 0x0, 0x9) 5.857685116s ago: executing program 0 (id=1793): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r1 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) fadvise64(r1, 0x3, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) r3 = socket$phonet(0x23, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='sit0\x00', 0x10) r4 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) (async) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000480)={0x40, 0x12}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x8}, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r4, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x60, 0x3e, 0x62, {0x62, 0xa, "a0184e21e3d016f0dad01a34247c2e13bf44a2918afdd1d1541a63ce770b405f3cedf6b293df10129c11f6615aaa76e923b82d92ddb4f0cac757623a805bd9d6dbf666cd477add512a53c0f987ca8df9c1900a77d0037dc9368b71e9b88a0b82"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0x13, 0x4b, "8aa6553ffa4f0ebda0fe82d21194727d935233b355cc5c033e42b1e94f1b3c9c9c42a8ca32a1c6a1d646b548ca9942970b9a9451d385df7c0ce4c4edfbcf1ffd80970842f0b062005003b0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x0, 0xd4, {0xd2, "ea286d9557d5c7b5cdb2ccba039797b360a34a2ec6ca2dfb84f3382ba753614cc98f2d266a70866a1b61ca8cac255f67b6e82249b5cd2575c3ca0a733e924586116b34976fabe3182a06ed0ea3962898170d215c2de80853cacf6e6b4725dbfda49aac4f183b2e96b07e7664ead4df56f88146b3096738a1ff73be3f4b01bcfe42fd52ced8e90827cc978d957de4c72afa5a448f954134f61e1c301dee04796f5992f10105528182ced55ee986561548edb63e0058288ead38f1f6f35fb1e0c84adfef49474d9ad2feb8e852275afcc184b6"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xf7}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x8}}) (async) syz_usb_control_io$printer(r4, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x60, 0x3e, 0x62, {0x62, 0xa, "a0184e21e3d016f0dad01a34247c2e13bf44a2918afdd1d1541a63ce770b405f3cedf6b293df10129c11f6615aaa76e923b82d92ddb4f0cac757623a805bd9d6dbf666cd477add512a53c0f987ca8df9c1900a77d0037dc9368b71e9b88a0b82"}}, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x480a}}}, &(0x7f0000000400)={0x34, &(0x7f0000000140)={0x0, 0x13, 0x4b, "8aa6553ffa4f0ebda0fe82d21194727d935233b355cc5c033e42b1e94f1b3c9c9c42a8ca32a1c6a1d646b548ca9942970b9a9451d385df7c0ce4c4edfbcf1ffd80970842f0b062005003b0"}, &(0x7f00000001c0)={0x0, 0xa, 0x1, 0x87}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000280)={0x20, 0x0, 0xd4, {0xd2, "ea286d9557d5c7b5cdb2ccba039797b360a34a2ec6ca2dfb84f3382ba753614cc98f2d266a70866a1b61ca8cac255f67b6e82249b5cd2575c3ca0a733e924586116b34976fabe3182a06ed0ea3962898170d215c2de80853cacf6e6b4725dbfda49aac4f183b2e96b07e7664ead4df56f88146b3096738a1ff73be3f4b01bcfe42fd52ced8e90827cc978d957de4c72afa5a448f954134f61e1c301dee04796f5992f10105528182ced55ee986561548edb63e0058288ead38f1f6f35fb1e0c84adfef49474d9ad2feb8e852275afcc184b6"}}, &(0x7f0000000380)={0x20, 0x1, 0x1, 0xf7}, &(0x7f00000003c0)={0x20, 0x0, 0x1, 0x8}}) sendto$phonet(r3, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x23, 0x26, 0x8, 0x6}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 4.176005499s ago: executing program 2 (id=1802): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000040)={0xd, 0xa22}) 4.16981199s ago: executing program 2 (id=1803): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$snddsp(r0, &(0x7f0000000600)=""/72, 0x3e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 4.119995286s ago: executing program 2 (id=1804): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000044000701fcffffff00000000017c000038000480312d"], 0x4c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CAP_SYNC_REGS(r0, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000140)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x98400000) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) munmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) write$FUSE_INIT(r6, &(0x7f0000000340)={0x50, 0xfffffffffffffffe, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}}, 0x50) vmsplice(r5, &(0x7f0000000140)=[{&(0x7f00000003c0)="c6714e543bc200fa8d657078aa2d00", 0xf}], 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r7, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000000)={0x8, 0xdc, 0x6611, 0x7}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x0, 0x0) 4.027882669s ago: executing program 2 (id=1805): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x11, 0x0, 0x39, 0x1, 0x1, 0x1}) socket(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0xaf4, 0x1000000000000000) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) 3.665751803s ago: executing program 4 (id=1807): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x0, 0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000044c0)=0x0) sendmmsg$sock(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="30ffbe1c0179730eed7b715e43c39fb31a", 0x11}], 0x1, &(0x7f00000000c0)=[@timestamping={{0x14, 0x1, 0x25, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}], 0x30}}, {{&(0x7f0000000100)=@ethernet={0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="460fd2bd7d53ad8d1f72ea8748daeb3d8aa52109cd12fbad335534745ffcf087f3b754e9b7e0bc3abd35ab0667a54c2a01e54723f6dcd0318e27e169200e9a388036c50dcd27e9cddc6c25ba2630338c09fc6ec768781ed5007aea4a49ca3c673addcc7abddb906dad63c3c84d923f081bac887714c266a6c93c052156b2d651ef23a4eec7d0ea5902deb24e88ebfa973e364bc30c5d968f3f2e9717", 0x9c}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="9ce117f595c8a5af56e18de1d9b38f5dc048f86e29", 0x15}, {&(0x7f0000001280)="79113114e6bc1d8902eec3d4868b2aeceb86a94a1b8984e831b2604cc6fdb1e8d51fd1447c9855a9d279cde96dd1bed051442b9043352211191c47e01ef84d312271ad1db310dcb3c643f4bfc6b3c30312a104f775f6cdcec1510a20cee7d396a0845ea8064bbc958b13da4f7ce5de8c82f9dc4e216e59bc384ecda35cc57cf84f4357f9aff7f16f86ca07aae5922714cf486772b4c7f32fdceeee09cdf369ebf9a313e99821d0cba255536c911ec5ba54af55f58a5639711711b06b962eced4bc2aa8b95815c180d62928d16ee9fd8d41f5aeedb0238075c957abce4c3931da9e", 0xe1}, {&(0x7f0000001380)="d8dbbc43feafdb06e6d4fb9ccbf1763aceeac36434a57d01d257907b844ea266efea319c36c449a0e668520512d4248f7581229703b349566977fcedeb7c9071bb661b0c81b31d25cf25c8b6e5f01036d92db95b0bceb84556df4381db4822d3c5cecdbf4fbc9735763ca423ed03d7451bc32039609612a2ea75d72eda6b405cca6bdb6ac2ddb472448439faf00b234589e1792eb0740530b9268ac37073d23d0a3c8b01370eb405a367dd92f045ffac596b63e849c5df", 0xb7}], 0x5, &(0x7f00000014c0)=[@mark={{0x14, 0x1, 0x24, 0xed26}}, @txtime={{0x18, 0x1, 0x3d, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}, {{&(0x7f0000001540)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000001b80)=[{&(0x7f00000015c0)="d0ab4304b70ce7beb808ee5968ed7fac8d4f4221a9555934b33d5c29b83d633cdf192a2bb8bd38d77ec02c19aa4a45cee7956d696872d5f9e8fdb121d97b45b8c8dd7befa75a7f2602bdb8338b0dd77e196063a6bfb6463fd240a848c9faf56828fe5ab8a486b5c18340a5f75660618f908c2df8c0ae0558b171ada02a8b9742563c23c44e0dfc8e9a63682afc86552c8e07482ac02ddb1d1d341f18bd02384d2328246b992e1561c3b483b65be64f530c1c23297b70f66d0e19c14fa0dddf8b4ca77e5d720177f6db079c0316732d4ea41e", 0xd2}, {&(0x7f00000016c0)="fef199ff039d62b2bc351e292c3e84a546266dc0fccfcd670faf7bf68c10530c03e8ef04c2f0e5764399594865c29293784da4e0275d8bea300b060a1e78e7617c89e00efb5fe8085fdeef335856ed063b7d6e04fba4cede7f319318ce0733f9ab2724d021d316b2cc1a11703de8d9fb86378f4e9752a7ac30b4b6d0da8de685d52953e32d65728ba0ce575542883515a8b3d480c7ee95f9ec7b6b327fa92804deb78f60d61c5ccf321ca58e3f6734de94a9a223a3e7e76e154ffc76fcba2596a59d7712e805cf19e7b7f1625351e8112980", 0xd2}, {&(0x7f00000017c0)="59ae8d3e24d050d6717ad4102a024c3f45f571c2015bd4bf3948f9a039ad52fe2af829cd973a961b60c3b45145f8d1242a6fc8e541ec9d61b5b4650ea2148703dbe37e76dd6f7ec03ee06f1a1d55472b3c2c97d2ea193dd4408397903ce3df10e6366f58bdc80abc6bf34bb902111553f99b9626bb0d3d18d27e8ac85a1bd053fa0b4173c2c739f837e95070e9d739d9edbdb08ab46c994b0b2348520f65b50d91ccf376896df9b3547b4813e465118b601458f602846214de44f36d94e15bd186ce5f0b4c5ca69864318a6edd6711dcf1a6d35d285a845cab61e53db535508cefc7a61500043afba9d0a6b48d919fd4c4c0", 0xf2}, {&(0x7f00000018c0)="17d9f1eb628016cba034cb1c90dcf166d151c6f9119e57695221d93b22a883a74dceaa8e150089d2ae43f1369c55d25291e702b8faf6fff8ea1eff9e5584c10fed77badfafd0b0e0e05c3a4e26f51d11cff3e58c76e2402cc049a61b98e5b7c40097a22bd70f847be009cae29812e625f73661fdbbf48dfd4bfda15f86134fe3096f881adef4c2b0dd18b156100ec375602bbc07a57c7c62591f6eb6adc87792ecf4777cdc2f77dda9d409a654cd6006abf8aa9e172631411427a6f307108dcfd1d3bc45e8f496b8c48c6f174a45", 0xce}, {&(0x7f00000019c0)="a3dafb3fc17c4ea2dcbbba8e2d", 0xd}, {&(0x7f0000001a00)="b5fd856a6d08dde162b6abcf2604f141288c90a40d0c61865624a3a193c126714223d5a456de44dc29f27b71f1166a9ef267d87037a969afcd9a3da831ab49bb14dafb0eba522bea1a106e340e23efd9cd77d393f3b81932845f4e06ce7277e0d14f36968e9fa11c8e05e60d6ad3bd86ea31e075546e27f3c96209680ead0f74", 0x80}, {&(0x7f0000001a80)="9da062215cb2a254a9d70a8715d7081d00e83986c8204fbf535b1442f9b770a9f75c2d3a5049279a8853ab8a7a24d04cce2f3abb810242211ff550af12c1e1706db31f91e95cfa523423a6e611ac3358ebf74ccc24d510353e26b87a447f392e35a8631521240ddc635fcd55d98d3eaf90a2f6a7cd17860aad7101713926765986081b981ff5d7c6fb02f0053478ece6d6db56df17bb4f745c5adb708b8c33b0d8f71c711794e7f096181c2e2024969e1eb83b4355678907d467f49bccb2d0abcbdecc8ac58154689cb47e07f0", 0xcd}], 0x7, &(0x7f0000001c00)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x48}}, {{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000001c80)="26f51bcf77b2dc7b1fdd4b1c3141f053c649c038eb9778d594608b200f5cbee5f2e659747f613a1c566cf509b54235edc4fd2d7e5855bf661e1e89bae7caba57eb1525ada62afb706aa0f754185850e87c1e4963980134037f1d7f101a18bc5069173d0620a3f74e5853ade0dfda8f789338ebe7", 0x74}, {&(0x7f0000001d00)="d80a6770732dd6efb7a948254bb0b0a57df422c3a6ae12c38493efb242d6c562a71ca45352d4c07f6e971971e6619df52d1bd6026b75b78eab848f7395dcfaabf5c9154eb800b42062a441bc608668352a4bd70a383199bd87ef0124e7ed01dd6a7e93b470ffd0c57fd44d3963013ea7ae106d482d6e67813be395daaefebdedd9e3798e5a791cf372dbdd468378a600c61ee6c5322f448e6216b9b64241b9d5b11f76bb8ff85a346cc4b75f2bd7ddfe5046cb0af5cfdcf6fc8e2391a230933c362b11bf21f3cf52a422d3211c5825cd93f912d6a3ed6c29085eb9879d8e777a3206f8409870a65e36f5e6f107ea83331579d48ba603e47ac6b978c54c7b43e9c5ebf8b5cf3c917ce3216a4273fc7e87d1d8f3a1f63b4e25ae0b045c684568204f74504ffef7f8395d0de79a3cbcfb96ae764cdf0fd4d603a18d8c6a21f9237f669acff59454d2b2e0e0a73559a6892d04e1c1621addd6c556a1cafa37a405a16460f43a1f5a55a799eb4ece7ac17b408cfb20895c3e1757d02d454eab9c27b501341989e04c643e4736e686e0e376a9d4afbed06e71346c68ce35b8b60f05dab09f15033749c32b7ff92ed6e562654f74cfd7b1ffe560e43b412babfbf789aeaa1c249895bb50315f9842a19992840b48bda8a9795ebada09e6b50b9f908f9ea64bcabcc40dace150fd7989ff506af39a0f521471da61f9247fb61fdd9e6258c77505f49a02c2c96dac13ec44aeb6604032e1026a12727f41e14ee99ac8bce4a6f062ad89c1f6a510c430b1039341d88aef6ba5685747e0b57b564a333ef1fe16ccf55cfa2790276db8ca938ac5f072d8b948afd46ee34a4518cb8fdcd75a61386c513490f1cc8e6e9fc616abe749839686239be8311dd93b899e91a54024235c314f735e1dbd85efe99e2cb0489255d0d73784fe97da10c3d7a97b63da8e6c73eafe76d122929610aa8b963f1f45302587aa4e34d1074b1a801e16c3e740d0ce078448b1d0aadfb8887a8fad3a9f37bf17645107fc3c8b14f573f1a056805deec24b032295522cb5e72c3984459155bc8c11fcec089b0ff70ab4bccab8251c1210cae10dcc0ecebedcdfe1f6bb9cb39e9380fac477f9bf58903db61cd7eaec8b51f202f6396517a215026a42c0964fdeb9c6069af5eafe04ca4bce407a0d73df832f04160eb57ed69c6d5e34b6710678ea579c60dea256e0e57d160fceaeb65dd16f18ec66ebc76bb05b3e8c5b5f2c392b0d4870df177b9972fc2f5b130898f7e7d62292e06b7ae62224db4ea0d7d399a8105e4734205f127c54bf25d4c8f9f0a0cdcbd9d049bbf06a0d0321ec07934d354d1854a7e7e937daa4c23a45c1a9911ac2c9a88a78a036694e98d83f28cccbef91e086c8277a0cfed7252cd4efa06cd9a0449e6b3b84c2fa7b53d41700550dac92b9755702bbfbeb9fe248891f42f4d2904946b0341a0826e09a1f300899ebeac2c9c66db14a10ea88dbd9806a46cfc32b15b614a858579a32d648a0e333a934fa6b61b0146ffd5820a1fbd15f3d9ba8758b1347d63bfc7d534b1eaa6da7823197a0df7708dafd8cbc4bfc970f387c7ddef29f23a70f02f3d1c2c5c52eeee93fd3da2b5fe62da8b999f507483f051c9cd897096685283fca24ffc29ceb9388638c3e79d9c121f63d6d58193f9eed9f8f050a86d85b8d17dc10df841646a0b3384fa139bd1a8fd4bcfae9db7c4d3fff9f69dd0a20365688fef14faa84c85830b5b5abfbc564b42ad5fbf3d9fc6284fe1a63effd444e1764ab2b876ebe29c077a35d9fdc797cfe5b6c75de2e6383743f0b2364dc08ee12658681de028dba45ca9e20c41b4dfb4f9a273ca4825f00d6a16f32749a714c6ad28a79351578b8295e34153212f2a0bd4ecb8bd22dc9fdd1f5f5381d01b4ddca562991a4e78c261bc9ada56193af56ce45b03a1e0344c680b84d12a46ded46c6b7dd6eb206984aadcbfc78a26a98e2009f40a9ee99b0b1ba40db41c91490768942ab24dbb69e981dbee3a2738df46589f28b996479cf0fca16b768a24d2e5798be639ca20f8a4617d7f72b65e8282f3c7395f31fad33cda37122513b082584863f2ffb86443aa8876a0de7dabd219bd0c8842d4c63b31dc03f06d7478b67404bd74fb04993b0d0fc2d0f79aa231ea36093b86b505b37b81960456e377026346d69687097ca35f6d1a98c24770cc4f126ed0a49bb24c3374b5f8c68c84f93ee32b9e9c014e3aa2cccc63250b93dc2eb5968aab0a50a05182403ff79b39e4d7763b8c91f60e92d1e0b7e88afae74036fd9b5f60cda2e07ce1bee5af6ec12c8ca5ff4254b594e0bddb26b7a17d9121e3756b03fb8473270df1971f6122eb713f13a9ad217f28e7ce35bef3b47a37a280073e1634c1fac15db33c6336eb5ba632f620746d6b70fe77792fcae58471a560955257aae98391ec3c394b6eaca88903732304457b8e4dc22b6e345fd7c9aee522d40d82503ce8440c42443a5f041424adb9aed83f0e94e47a523cc4550214d88368944a8c989329e6f8c331a00837facbb3da397f067a1d86b52b0e6a8f48bb5082963524b131875f670136a2f98421a7a24de59f440ec1b67001537648eb3481908b4dd9911462f2be629224efe8bd94f0494311f6433c590c7619e552c1a4cd2d02da74dc36da15d17a2ec8cb66215d45f36d50f67e94c98b90e1e113a0d17648631cacdb94ee27f229eeeb14a5e880ae12975cebfea9a3d4e8629242158d13f0526a544bc8c4ed8512758485858f2569d720834acd331a5e16c950265113274124164d9fbd5682fdf0e53c535611cc033932cb53184cc8ebf0d5955636a91d772da32f16896966292250f110d107795d964b4dba167a2fea7c6b732e5a6cb3c663351fdc0f9195d5d8c6f937e78e5469a25e7b754d04a7567b7980328b3bc1f5131c2452334454a8ea4ebefcd7811f53825e99786bca0e00457ed27513412e3fe522bbda75dac5b6ed75cc3cbcfff1f68b8fe714ae1435d3a60d4466da1ec6c0870e48d571c4d26d535980e7c6188b53b40c57283ba3e4bea3c19f850a88803dea9f2f9d29e34ac2422d76ea52840d04e4646ad77e51aa9b273572b7336b8f1b492cf7fd3d80e9d3cc73ac77298bb890924878f72db97cc6000d5cd4bc731a84caa4c363b7aee1fffd758a7ca2f70269a5e9bb2e5d988d3aaf7e866e36db7cd00ecdb5e26119e3e85d23c106855a42caa89cdc16e4cf2859dd9c8893a0d8459f8268461f17d9a6932167c71961408d2833deb60e5388b150cb5d489e988ce0ac049be21d61893df2c5182219360e5ec64a8e9a72145ea288f8b2086de1fa651ce5d28b81bc680c423aa482e6a9b0fadd08243140bee03d027b3277e1054068864108287a3e851cf90546058c5195d2910a0604b2e2f87a0d6bcde8c9a326ab1198e8cd98bf8b1ae5e546bb23b6b22ade1389d32e5ee0635c15c866521ee4248842be058f4a71001d2d4c155b74d86bd85e6b233b39969d6fedb1d67e2bf6b8bb6b1724afc1338af6e4d8d8c2f619c91de22b9b4208812a82d1ee993b5e294f758642b5401c859aa7199a833c56b7799f775ba9b49c04eecc5aff65e683995aa5250ce894dbc2443adf62120e12c6322cb005a303522227bd5c819e182c8891b14e717e7364d676b24607a09ea0648019eedfef0a5a3a653ec85a6e68c253858c7979a523db7a87d4d9e9d2e9756b47fb68239ca1fbec5288bdadc2dd535d776e1227f030d254c605c9647a6f7f69ba0ae4bc8d758ee5eb8872957890b8238ae5ad3e5838074791644c2acab05ab27a2d7032512952bd9b6064c7cbce64d4f20000df54590914a740c1e1f5235210dab01829d2b3937044b61a71a2ef7a3b98e2d6973094f00bf3f0c97ea99c86a75a7cc7c23f5043b5f23eb8845dd34b8657b3ad01b8c53543437cb048c8fbbf6b2e23d9e12a33a1c710b1dc9c51c697d5c2c2bc6f48d73585e8bb3007769f624c29ecfd9df4064e589854483c36de812d4b0cd183795ab234221532e6fe311f3ef2479af9afcc1be2112620dc65d76a2d348ed794c240143e12c2529950f3c3051e3e29458089e2f3d45561628d73b1cafada63be42a47ba27f73f084c7242de085bb3cd83643b993b59153120302ec5015bea6c6d9eefebcd8a0a0a4aebeaf06f9d57447a06c96b9d08a265488acbabfcf50000bc41d916f0fc604e7be657f5fb20a34321013394627128349c30a63ba972bb830a41138b06949fc2ffe04855cdca2e8db5a238d7a196fcea2384cc331c8e355855afeeb6e9bd78563a8049576646b4d703007b5989f693526aae7dfe3f370e1ef6064a4b1e43dfdf1f7c69ef3ae113ddfaa827dd2e5d66d067592862b0794f4124dc549d94f7d2d10ff3cf84a3b3d287cd571ebdcc70403dc125c5a5ea4789a5049cc51a6993ab0b408bc9ee3bcbbea81495e54f2fa6db1c87fe49d1dba333b01ea6c4c373eb3c773609049f3e7bad006b194d6936fdbf58eacf3acbfa1c42cab4b9b2a3045fba903a0b3777c79f49e85c1241963fb90fb1f0d61023483634f297b8be71e8eaa73f93dfe07f2bb37839cadbff9e3f7cd73c7c511c2f6bdc4222472f2780f4bf086fdb932641dc57be845b632f71448ebef74b0a628004289d14113517b2eee558a895282ff3d5f3925b6aebdbc76cf009f41320ce98786653aa1c9492c5cd9615b2a49fcf8ba940baab49303e4e967feaf90e1720237e684b87e64aa9e71c3af4506a30c49d097cf573372917b3c1808018af44ab3400de84ee1420ac53f59775cccd7d1b788828e69c483fb83626875c7127aa09251a6791b33688ed44dbe3a652867e230b6faa7d12f0838b4d49b86effe51f1cd94f0c93e596163d8f8b8a2c2f3cfbc32af074ccddc77678d4b5676c81edb1ad0abfb519950d5d5623c264e2a5c12c0761062acb8dfa36e8fcb73e01cf16cefb8f2dd2ee5c64129627967e8424afbe2f248a1fa9c68783c862d90af028a00a59289dc6c42b224a4efcfc4f9808e235fad11d5b6c181bdba1b4bb904aa03261d42ce9d5f34e9c4301cbc4cc3e84db6a16cab81ba975ab5028f537f5cab1e34bdb79fd65c4c5ec5dbb45e33642e9d9566cededadf601291f214a7d182418d43663e02c3fd44b2325df017039d6bb99f99b117bb4b687ee907a354988e9df7b4b7b5aaf9647dda3938ad67a06677ced919944072e448c5b5d651ca241b30eacaee0d385bfeca2ef442120451b8a7df3b4a4c08c2293613db4d409ffcbc7ed5401a0ad727919d1798c91e2676172ad0db79fe9d57d5d2d2bf3ad86ca9e8169a30afee30539dbe933bffa5be7f4b638d91a6d3a0adad25a76b27bcc2455d76ef4ea8a2a41cdea5e7f3a26ccc2949a2a33d78120c8e7ae203e64e08db50b0088dff3594308524e04d0da4d899f62cfdd8012e100df620fbe2a9ce240489c09bbd5f79a82a6fb3df1a4d3d11db43f65a645098cb7d1bbe91f281bcf00d3a22d8df43cd770158bc2073741d1102fd5c0ba40042a38d4be9a3f36feec4bf17a2ee9db67921378cf5ed31c815647cc5e3b8e7f4ad6259b6942900de1e1215664ff75930db418ac53b52bd60444825697921e3f704cea4f7b3323cb06f8e2a0c63439c19ee8a49e1110a882e907caa17498956b707929d65815621032c2b769c4d29a5716ddba50673193b51938886971f107e8c7166d8d834ccb6dbf0d431455f39b57f6f4bd469ec06970b34107575085136ab7147a9f0eaab1d5f80edc332e1588dce1e241d5e17cbc7e9488a3f298", 0x1000}, {&(0x7f0000002d00)}, {&(0x7f0000002d40)="6ed3df483ab8d604c7a032e6ac7ba10ed2cdbf73d0c0c378bfccc0b879051c25a150c1c5746c36aa28a46705b09f322a7d95e60c6a7618cb4f6baa0fc3ee0ef5cc82a3dde3d8f58da07a76f31b1430140ec80c378338cab11830ff0954f231", 0x5f}, {&(0x7f0000002dc0)="440a2344768d3d97101ed95ac4d48a5f2e2feec926c557984ed9cc00fba2c6a255df", 0x22}, {&(0x7f0000002e00)="c29b7baf6655a251782a24c75648aa07691c7781cd335cb064585499ff38fc1f51538b5413e0e7cb29bf1d35b8f59a083cbdd040c02bf15ae4e895f38cf01b35dac91d7f9db6c89a9c2d7a253b10", 0x4e}, {&(0x7f0000002e80)="5f9ed3e650fbb680dfdafffd1e45bc41d21f3ed9150b6486f4b8df233e66da753da5dc223f7bcbb8bf330ea8b02b1a5242740254ccb3ca5a9949bd13073514bef97ed90b011ab5ace9a42735254c8de8ce973b", 0x53}, {&(0x7f0000002f00)="305df28b", 0x4}, {&(0x7f0000002f40)="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", 0xff}, {&(0x7f0000003040)="e43853aaa56cb67fcf6b9d3d843a0d766c27544bab7dbf7396db8ee934b9f9eef7668712aa71577ca0ea2763c12c8e35293622570472a70be7de369157f797dd39df0ed965db1d14162908318755139f8acf34", 0x53}], 0xa, &(0x7f0000003180)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x6d3}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @txtime={{0x18, 0x1, 0x3d, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0xffff0001}}], 0x90}}, {{&(0x7f0000003240)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f0000004440)=[{&(0x7f00000032c0)="4bf9f81b8082c1adf22e218c97c6c1319b0dc09d13f8f09713d5c981cfaa8e7c0dc1dff7380822c39061607bdd0fdeb7e69b49728ef89a610bf1369df7aa2af0bb7d057763e90b7e959115b8f45714c211895e3ddc147ad06a2494011eb2137cb7dff8c37ea043d132b3b67f4fd2032125bab368d8c6e7d36a2cb876b7d74aa72cdea5a92603772cc0b0d13d73884bc17beb1483b41203768b27487732c9e937995fd34b306b69dbdf5d3cb215e9a73a6bf6404c2ea80f2e581e2853f48b056b", 0xc0}, {&(0x7f0000003380)="80abd01ac37c690b7b07a2d84930228e0bde4d9fd0851fb554a1bbe09cf135d1315f6a5a9d9707643ae15819451dbdc7ab9a185105544f19ac0b07757ad04caf32343014b855a5c43f560a5e619d405b23e822bf17d6583fb71c0a46187c59d7ba05981f34adb746d9af58541b9d2ac95e8f943e122e103d86b3a272dc0c1b924255d95a", 0x84}, {&(0x7f0000003440)="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", 0x1000}], 0x3, &(0x7f0000004480)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x30}}, {{&(0x7f0000004500)=@nfc={0x27, r1, 0xffffffffffffffff, 0x5}, 0x80, &(0x7f0000004a80)=[{&(0x7f0000004580)="075173d5f5f5d9ce27cc947fe5e130aee70ed19c2977969b1979b6ec9dcca741f2edd7e9538a5b1fbd7d00860bd4a0b61525ababe198e29c19f085d6953eb92124e57be471478f7df478fe186606220229973c64d3f877e668d2a3bba04a904bf133571caa26d35738aa70c60979fcb679390accb33ebaac88ff054b21aa83", 0x7f}, {&(0x7f0000004600)="bc5a321e9ed23ffc4793d3f3765d360f96adc7a0d595e646180923c39c6d17229fa53f5698f5f77ae11179e3d0b02732f8456f46e1431f00e03c3599279b717aba7b463539cea0dac23d6a2472f2c21eb151d0c135a0aa9deba2883cc31cd7910507d99e926539a15a4d9036431149c41100e690cf0f807b5df0cdf0570f22f0fc620b023a00f91a6c43e414321525a621f0cd9b7e626ce4", 0x98}, {&(0x7f00000046c0)="9def2104aff8d188239bde0f1730167885b0bfcce7b7c24c4154256e4f2bdcbc5aaae9746b61ba92b7d3d7822f128efe5e98cb6f83085ef67ceed2cd2037e996081b21e87c7476e138c7e9d0d081830f73504a79d20e0de0d20e584a55fec33a95db1092eba569d355510f523b5b5079518e8e505e7f87b11446d252373737fae9f9d8b4be4e5ac5a52d9e8cb994478876ec17864164d3a1b6a83cc0d02a0301d42f93a92afafbf843cc0cf7c5da9ac5e24112a37cce44bd9c6785071c469bb242e0e70f6854448e7f85f68d6d633b78bad93a3795ba", 0xd6}, {&(0x7f00000047c0)="362e76fd1d1e4478f75ee70d4e24c97a26520201b8aaf58350831bfc7daaa5ab6422ef6d1cdaecbb47fb865be3f617b0e062fb53a4c93eafa2672c3960a4e77924c3f4da3d93f29370b029ecc21fe25f7c0656a1c22acedf393770d69a4c4751704456fbabd75daede9f1de259fe54d04b169f62a01dcbc6b70330ba18", 0x7d}, {&(0x7f0000004840)="d4e16287bd1e50b6b5423751bc61973cf1ccd54bdb0998da4cf0353d978601b5f16bffd712f08f3373b373cb42f1ce41913b4b51509d3e1deb236ff02321523c8c96713074349118c2dd4add5d0ef9740ee0e63197337dfe8ba8ccb4f7ae39b3ef540cfc11fc45485255aa60d700635b6fa6824fb0198e29", 0x78}, {&(0x7f00000048c0)="a6161ce564146b3da57687ff1527f15dd73bfa8b8e722ea8580e960115281f90df52be6aabbe4553e33ded431d1ec1fed578c3dfde7904fdb2ab86fe5fad0a1a37acb4b84d508b00e6f62d0601cb7af931413a4279de5e654e28cdc936a5b9753aeca9b0b26ffd82b491901a26ee5c286d38a54e8252695fc33f90ec8fc304463ed32699d233b7fbaf2e77babae8bbb2298ba1c18956e3f9939e35a40176822aef1408a2ec61601b0027976342c4c05c97f82a3dd58c749a1166114f28fee2367c2a396dbd135f5c823be6a65a3fd49fe46704591a265d66f3b483a7e1633cb059eb3ee108cc5935e5f4d1c9580e1e94711dca038bc2", 0xf6}, {&(0x7f00000049c0)="4d8a4dd4d7a2b32ae88815aa2ec2deb986ab02880154d44501dbc11203a124d1ecfffeeb2cae32c1aadcb133ca33ffd35b0f6b30a8d2498bdb4b0137b8b50b2e7d03d0852fc23dcc1a355f47648121444e5ec8de46bd726e7c3b333d44ddf864226ee8e03c020f", 0x67}, {&(0x7f0000004a40)="b779a8545b826d6d46c1948cc7c45eb623d70472fe3a5e87136baa0a58a517de51b2a541d77b9d2b4b348b495f2935ead67a342e0aa079", 0x37}], 0x8, &(0x7f0000004b00)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x81}}, @txtime={{0x18, 0x1, 0x3d, 0xcdd7}}], 0x48}}], 0x6, 0x24000081) (async) sendmsg$802154_dgram(r0, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000004d00)="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", 0xfc}, 0x1, 0x0, 0x0, 0x40040}, 0x40080c4) (async) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000004e80)=""/79) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000004f00)=0xa200, 0x4) (async) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000004f40), &(0x7f0000004f80)=0xc) (async) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000004fc0), 0x2, 0x0) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000005000)=r0) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000005040)) write(r2, &(0x7f0000005080)="1c146de7a50b3ca0c0331c2cffa7789723c58e050b9de228bf90cba1577c60668abdc98364654c73a3e8cd52706eea0db0", 0x31) (async) connect$vsock_stream(r0, &(0x7f00000050c0)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000005100)={0x0, 0x3}, 0xc) (async) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000005140), 0x44201, 0x0) ioctl$SNDCTL_DSP_GETIPTR(r4, 0x800c5011, &(0x7f0000005180)) getsockopt$IP_SET_OP_GET_BYINDEX(r0, 0x1, 0x53, &(0x7f00000051c0)={0x7, 0x7, 0x1}, &(0x7f0000005200)=0x28) (async) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f0000005240), &(0x7f0000005280)=0x30) (async) bind$vsock_stream(r0, &(0x7f00000052c0)={0x28, 0x0, 0x0, @host}, 0x10) (async) write$fb(r0, &(0x7f0000005300)="0e22678d742a2d1ecf2c421523ccb7504d3c9998dd7c629335cecec21fef4aa56d9cbf94d1e40fefd9d6bd4473d5cdd8684e42173a434990c83f9c56c15b7c785204d70279ef6bc892337a89570a84168ae68afa488480c0be5a85e613e57b607099e0c48a3196834dbf85dc64391e6e348421c267890e38a4f9f81c454e12fb01c0eab87d9b1c18b96658ee87abd7274a942c28771f3841c23c2be1877b78a0c86ae95d63758de049", 0xa9) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000053c0)={0x3, r0}) mmap$snddsp_status(&(0x7f0000ffa000/0x3000)=nil, 0x1000, 0x2000000, 0x110, r0, 0x82000000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005440), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000005500)={&(0x7f0000005400)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000054c0)={&(0x7f0000005480)={0x2c, r5, 0x20a, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000010}, 0x8040) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f0000005540)={0x383c, r3, 'id0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f00000055c0), r0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000005600), r6) (async) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x2010, r4, 0xbd1da000) (async) ioctl$VHOST_VDPA_SET_CONFIG(r0, 0x4008af74, &(0x7f0000005640)={0x82, 0xa4, "fb12a390e6886d7526fd24a9aa0d48eb282db0e290b3241d24a15628f7aa7626a487f4f039927e9fecd18c42a250f8dc7067a38334a15458dcc3c38bd7090281d31402fcbb31af16f2049033dc8b7398d29492a948e34a287bf08e0774f14754c15b37d0f9994be627aa38b89154b9ebf3ba778176cc9cb273000fbb0d16be0b7de33a8d32c964ba8cf1efffb388c9e3bec5a4f43a3602eb26d6bcaeeb7dda62ce9d76c4"}) (async) ioctl$TIOCGETD(0xffffffffffffffff, 0x5424, &(0x7f0000005740)) 3.551760808s ago: executing program 4 (id=1808): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="d800000018009b064e81f782db4cb904021d0800fe027c05e8fe55a10a0005", 0x1f}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x11, r2, 0x5708e000) 3.521292683s ago: executing program 4 (id=1809): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuseblk\x00', 0x1a01000, 0x0) 3.467301222s ago: executing program 4 (id=1810): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x11, 0x0, 0x39, 0x1, 0x1, 0x1}) socket(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf, 0x4, "c7a13997"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000840)={0x0, 0x30, 0x4, "ad972f8f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000740)={0x34, &(0x7f0000000240)={0x40, 0x15, 0x4, "6ce4d1f4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)) 3.190157053s ago: executing program 2 (id=1813): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x1, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone3(0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000004}, 0x24004800) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x2e, 0x5, 0x915}}) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c77, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x0, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000006, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x3, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) socket$rds(0x15, 0x5, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 2.769451047s ago: executing program 0 (id=1815): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r1) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000140)) prlimit64(0x0, 0xc, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0xb) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendfile(r4, r4, 0x0, 0x7ffff000) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r5, 0x104, 0x2, 0x0, &(0x7f0000000080)) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f00000009c0)=ANY=[@ANYBLOB="370426bd7000fcdbdf250400000005000a00340000000800010063357251e60f14cd371bcd01fa9bf6e134928278c0dd99372f5d67586c7e808964a7834082aa0b84239dba2fadb998906184383e4572f619f02f46699333b940850ac123c970bdafdc5e23ade664174a2615c3ba85e86f5f96c2aa6dc01f6078f136e9557eae110c931f8cf7753c6034a32acebeaac7cc780e743279ed665be320d350b93b070d37048f25e8", @ANYRES64=r5, @ANYRESOCT, @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x40020d4}, 0x4040000) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="47a92000", @ANYRES16=r2, @ANYBLOB="00082bbd7000fbdbdf251b0000009b0019008f25e144c3c46d836bffe26e8cd4f6995ceccc183df5bc4fac47aa12fc13e9fce620c74be8cf86bc861d25fc5650a1ec8525764f51f161e690c48b77633b9b9a1234cfdd7e7765843ae64541d8790fb1fab3041a43b022eef0d890cbb7f1524cbf060cf5ca4f320f9b558698ddf9d6ccbd4bc2e8da9534b0d5cc71c8cf0f44f1efc3a984d0f53b653bc0b0a34b6e7ed064091c9ec778f900080015000000000008000100", @ANYRES32=r7, @ANYBLOB="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"], 0x280}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004000) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001500010000000000000000000d000000080001007f"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r9 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000800), r0) sendmsg$NET_DM_CMD_STOP(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x14, r9, 0x12, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8c21df761fe6de5e) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_buf(r10, 0x0, 0x30, &(0x7f0000000680)=""/243, &(0x7f0000000780)=0xf3) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2.320755366s ago: executing program 2 (id=1816): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xfffffff2}}, './file0\x00'}) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000340), &(0x7f0000000480)=0x4) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) read$FUSE(r3, &(0x7f0000001180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000180)={0x50, 0x0, r5, {0x7, 0x2b, 0x3, 0x500001, 0x2, 0x1, 0x9, 0x8, 0x0, 0x0, 0x20, 0x3}}, 0x50) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb000000010902120001000000000904"], 0x0) sendfile(r6, r6, 0x0, 0x7ffff000) 2.129108331s ago: executing program 3 (id=1818): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) setresuid(0xee01, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x200000, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010008001c0001aa2a09dca2ff0c9adf0c72a74d1790060001000200003bb3e48e00ac1414aa0800060019000000d8c3db3199714504e6bf938c40e6479ba0a8dc7dcf1ac166837040c4cae013315faee37a2107d4f1cbb9ec4dda11e689ee9ebd7f8d2ac812dc2c6dced328b906067b28d7611cbb6aac4d240a6fd2e24517bd4df9c25625494382f3a0fa8e66e6b45d368c700013f0da01fc26aea1fecab76a46352b3ab958eb830970d38a33e5ca03ae7e8c5f6ec9e1c4bd1e6b"], 0x30}}, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) mlock2(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000006c0)={0x30, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) (async) setresuid(0xee01, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='f2fs\x00', 0x200000, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000010008001c0001aa2a09dca2ff0c9adf0c72a74d1790060001000200003bb3e48e00ac1414aa0800060019000000d8c3db3199714504e6bf938c40e6479ba0a8dc7dcf1ac166837040c4cae013315faee37a2107d4f1cbb9ec4dda11e689ee9ebd7f8d2ac812dc2c6dced328b906067b28d7611cbb6aac4d240a6fd2e24517bd4df9c25625494382f3a0fa8e66e6b45d368c700013f0da01fc26aea1fecab76a46352b3ab958eb830970d38a33e5ca03ae7e8c5f6ec9e1c4bd1e6b"], 0x30}}, 0x0) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r4, 0x2000) (async) mlock2(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) (async) 1.880480451s ago: executing program 3 (id=1819): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) (async) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) (async) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) (async) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) (async) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) (async) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) (async, rerun: 64) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) (async, rerun: 64) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x10010, r2, 0x42c67000) 1.691750952s ago: executing program 0 (id=1820): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_GUEST_MEMFD(0xffffffffffffffff, 0xc040aed4, &(0x7f0000000000)={0x80000001, 0x4}) mmap(&(0x7f0000429000/0x4000)=nil, 0x4000, 0x2, 0x10010, r1, 0xa4c2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f00003ba000/0x3000)=nil, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103a42, 0x18) write$cgroup_subtree(r2, &(0x7f0000000300)={[{0x2d, 'net_cls'}]}, 0x9) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x10201, 0x1, 0x3000, 0x2000, &(0x7f000025b000/0x2000)=nil}) 1.653536144s ago: executing program 3 (id=1821): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async, rerun: 64) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async, rerun: 64) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) (rerun: 64) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000000500010006000000050004"], 0x4c}}, 0x2) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="280000002100010002000000000000000a"], 0x28}], 0x1}, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) unlinkat(r4, &(0x7f00000003c0)='./file2\x00', 0x0) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x7}, 0x4) getsockopt$packet_int(r5, 0x107, 0x12, 0x0, &(0x7f0000000080)) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r7, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=""/71, 0x39}, {&(0x7f0000000140)=""/30, 0x6c}], 0x2}, 0x0) (async) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 1.490949271s ago: executing program 3 (id=1822): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x341540, 0x0) r2 = openat$rdma_cm(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000100)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000340)={0x15, 0x110, 0xfa08, {r3, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @loopback}, @in={0x2, 0x4000, @local}}}, 0x118) process_mrelease(r1, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.439927324s ago: executing program 0 (id=1823): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, '\x00', 0xb}, 0xd}, 0x1c) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e22, 0x80000001, @remote, 0x57}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e22, 0x80000001, @remote, 0x57}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$BLKRRPART(r0, 0x125f, 0x0) 1.03637883s ago: executing program 3 (id=1824): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) 971.670445ms ago: executing program 0 (id=1825): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x2082, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x1}, 0x0, 0x3f0, 0x0, 0x4d613, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x11, 0x0, 0x39, 0x1, 0x1, 0x1}) socket(0x10, 0x3, 0x0) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r5, 0x0, 0xaf4, 0x0) (fail_nth: 11) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'geneve0\x00'}) read$FUSE(r1, &(0x7f000000c400)={0x2020}, 0x2020) 385.193258ms ago: executing program 4 (id=1826): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x28, r3, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0xfffffffffffffe28}], 0x1}}, {{&(0x7f0000001180)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000100), 0x2}}], 0x2, 0x0) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000000)={0x4, 0x0, 0x6, 0x8001, r6}, 0x10) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 107.696588ms ago: executing program 4 (id=1827): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0x7) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0xc0) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x800, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x10) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r3, 0x1, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x841}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000021c0)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xc3a51000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r8 = memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) fcntl$addseals(r8, 0x409, 0x12) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc, 0xe8, 0x23, 0x8, 0x15c2, 0x43, 0x2c9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x57, 0xe5, 0x6f, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x20, 0x7, 0xff, 0x2}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x6, 0x0, 0x8}}]}}]}}]}}, 0x0) (async) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_mreq(r9, 0x29, 0x4d, 0x0, &(0x7f0000001840)=0x1c) (async) ioctl$SIOCAX25OPTRT(r6, 0x89e7, &(0x7f0000002200)={@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, 0x20}) (async) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mmap(&(0x7f0000586000/0x3000)=nil, 0x3000, 0x3000003, 0x11, r8, 0xdbb39000) (async) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r10, &(0x7f0000000140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r10, &(0x7f0000002180)={0x10, 0x0, r11}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x24, &(0x7f0000000080)=0x80, 0x4) 14.689788ms ago: executing program 0 (id=1828): mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./cgroup/file0\x00', &(0x7f0000000140)='cgroup2\x00', 0x1000024, 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20000, 0x0) (rerun: 32) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000880)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0xd, 0x6, {"3eb801e837a94678ad51a410cb6039ab"}, 0x6, 0x5, 0x60ab}, @in6={0xa, 0x4e20, 0x101, @loopback}}}, 0x118) (async) prctl$PR_SET_MM_MAP(0x23, 0xf, &(0x7f0000000480)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000fef000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000fee000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x13, 0x4, "9ee763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 32) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000600)={0x40, 0x2b, 0x4, "8bc9ec88"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000500)={0x1c, &(0x7f0000000200)={0x40, 0xe, 0x4, "7cad09d4"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) (async, rerun: 64) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000480)={0x20, 0x18, 0x4, "895bdaeb"}, 0x0, 0x0}) (async, rerun: 64) r2 = dup2(r0, r0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup/file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x3bc011, 0x0) (async, rerun: 64) fallocate(r2, 0xb, 0x6, 0x4) (rerun: 64) 0s ago: executing program 3 (id=1829): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141242, 0x0) r1 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x74, 0xd, 0xcf, 0x40, 0xbda, 0x140, 0xda29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0xff, 0xf0, 0x8, [{{0x9, 0x4, 0x9e, 0x8, 0x1, 0xce, 0xe0, 0xa7, 0x4c, [], [{{0x9, 0x5, 0x1, 0x3, 0x200, 0x7, 0x5, 0x6}}]}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x25, 0x0}) syz_usb_ep_read(r1, 0x1, 0x0, 0x0) syz_usb_control_io$printer(r1, &(0x7f0000000880)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}}, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000080)=0x7) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) getpeername$l2tp(r3, 0x0, 0x0) ioctl$I2C_PEC(r2, 0x708, 0x80000001) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x0, 0x0, 0x3, &(0x7f00000000c0)={0x0, "c14550a1d52a3fb7e4f3c38b863916a9891176fde67165a062869e8732a3e79b1d"}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r4, 0x5) flock(r4, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, &(0x7f00000000c0)={0x0, 'veth1\x00', 0x1}, 0x18) syz_usb_control_io$printer(r1, &(0x7f0000002900)={0x14, 0x0, &(0x7f00000028c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000e80)={0x0, 0x3938700}, 0x0) syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) socket$alg(0x26, 0x5, 0x0) kernel console output (not intermixed with test programs): 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 315.790352][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64 [ 315.801728][ T5872] usb 5-1: new low-speed USB device number 2 using dummy_hcd [ 315.827067][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 315.857769][ T5927] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.877528][ T5927] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.894875][ T5927] usb 3-1: Manufacturer: syz [ 315.899408][ T5927] usb 3-1: config 0 descriptor?? [ 315.966973][ T5872] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 315.975889][ T5872] usb 5-1: config 0 has no interface number 0 [ 315.986472][ T5872] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 315.999253][ T5872] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 316.010535][ T5872] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 316.019964][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.040110][ T5872] usb 5-1: config 0 descriptor?? [ 316.070117][ T9460] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 316.087068][ T5872] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 316.192240][ T9480] netlink: 184 bytes leftover after parsing attributes in process `syz.3.966'. [ 316.211067][ T5927] rc_core: IR keymap rc-hauppauge not found [ 316.223362][ T5927] Registered IR keymap rc-empty [ 316.235835][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.293407][ T981] usb 5-1: USB disconnect, device number 2 [ 316.299498][ C0] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 316.314746][ T9488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.323742][ T9488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.332959][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.348321][ T9488] NILFS (rnullb0): couldn't find nilfs on the device [ 316.365038][ T5927] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 316.387684][ T9489] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 316.398473][ T5927] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 316.412195][ T9489] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 316.429686][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.450861][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.500785][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.534134][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.561048][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.590551][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.598908][ T9495] 9pnet_fd: Insufficient options for proto=fd [ 316.620755][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.650657][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.681565][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.750723][ T5927] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 316.774377][ T5927] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 316.832033][ T5927] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 316.878999][ T5927] usb 3-1: USB disconnect, device number 43 [ 317.316062][ T9514] netlink: 32 bytes leftover after parsing attributes in process `syz.2.970'. [ 317.356470][ T9514] /dev/rnullb0: Can't open blockdev [ 317.896329][ T9535] /dev/rnullb0: Can't open blockdev [ 318.280444][ T5927] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 318.420520][ T5927] usb 4-1: device descriptor read/64, error -71 [ 318.670532][ T5927] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 318.822127][ T5927] usb 4-1: device descriptor read/64, error -71 [ 318.931317][ T5927] usb usb4-port1: attempt power cycle [ 319.090408][ T5984] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 319.220469][ T5984] usb 3-1: device descriptor read/64, error -71 [ 319.270854][ T5927] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 319.304336][ T5927] usb 4-1: device descriptor read/8, error -71 [ 319.432062][ T9561] /dev/rnullb0: Can't open blockdev [ 319.470531][ T5984] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 319.560653][ T5927] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 319.603988][ T5984] usb 3-1: device descriptor read/64, error -71 [ 319.606344][ T5927] usb 4-1: device descriptor read/8, error -71 [ 319.720687][ T5984] usb usb3-port1: attempt power cycle [ 319.731011][ T5927] usb usb4-port1: unable to enumerate USB device [ 320.060331][ T5984] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 320.072916][ T9571] /dev/rnullb0: Can't open blockdev [ 320.098448][ T5984] usb 3-1: device descriptor read/8, error -71 [ 320.350384][ T5984] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 320.371077][ T5984] usb 3-1: device descriptor read/8, error -71 [ 320.481915][ T5984] usb usb3-port1: unable to enumerate USB device [ 320.498323][ T9576] /dev/sg0: Can't lookup blockdev [ 321.358709][ T9603] syzkaller1: entered promiscuous mode [ 321.364469][ T9603] syzkaller1: entered allmulticast mode [ 321.472827][ T9612] netlink: 400 bytes leftover after parsing attributes in process `syz.0.994'. [ 321.611557][ T1230] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 321.760363][ T1230] usb 4-1: device descriptor read/64, error -71 [ 321.910867][ T9620] /dev/rnullb0: Can't open blockdev [ 322.000545][ T1230] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 322.014534][ T9625] /dev/rnullb0: Can't open blockdev [ 322.130390][ T1230] usb 4-1: device descriptor read/64, error -71 [ 322.241557][ T1230] usb usb4-port1: attempt power cycle [ 322.289912][ T9627] erofs (device rnullb0): cannot find valid erofs superblock [ 322.398882][ T9630] /dev/sg0: Can't lookup blockdev [ 322.541646][ T9634] /dev/rnullb0: Can't open blockdev [ 322.590890][ T1230] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 322.621990][ T1230] usb 4-1: device descriptor read/8, error -71 [ 322.624580][ T9632] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.651843][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.658477][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.678275][ T9636] /dev/rnullb0: Can't open blockdev [ 322.813561][ T9632] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.890597][ T1230] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 322.917501][ T9632] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.934615][ T1230] usb 4-1: device descriptor read/8, error -71 [ 323.007811][ T9632] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.050753][ T1230] usb usb4-port1: unable to enumerate USB device [ 323.153241][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.176966][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.205455][ T37] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.223865][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.459705][ T9646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1003'. [ 323.496811][ T9646] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1003'. [ 323.557064][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1004'. [ 323.570930][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1004'. [ 323.837067][ T9655] /dev/rnullb0: Can't open blockdev [ 323.843842][ T9656] /dev/rnullb0: Can't open blockdev [ 323.857444][ T9655] /dev/rnullb0: Can't open blockdev [ 324.409666][ T9672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 324.447951][ T9675] netlink: 'syz.3.1012': attribute type 21 has an invalid length. [ 324.464669][ T9675] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1012'. [ 325.392425][ T9694] binder: 9693:9694 ioctl 5501 0 returned -22 [ 325.465835][ T9700] /dev/rnullb0: Can't open blockdev [ 325.495729][ T9697] block device autoloading is deprecated and will be removed. [ 325.777093][ T9710] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 325.784644][ T9710] VFS: Can't find a romfs filesystem on dev rnullb0. [ 325.784644][ T9710] [ 325.920355][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 326.060482][ T24] usb 4-1: device descriptor read/64, error -71 [ 326.300491][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 326.440893][ T24] usb 4-1: device descriptor read/64, error -71 [ 326.562074][ T24] usb usb4-port1: attempt power cycle [ 326.900415][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 326.931077][ T24] usb 4-1: device descriptor read/8, error -71 [ 327.141934][ T981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 327.170365][ T24] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 327.210390][ T24] usb 4-1: device descriptor read/8, error -71 [ 327.285132][ T9730] XFS (rnullb0): Invalid superblock magic number [ 327.300688][ T981] usb 5-1: device descriptor read/64, error -71 [ 327.332245][ T24] usb usb4-port1: unable to enumerate USB device [ 327.540918][ T981] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 327.680703][ T981] usb 5-1: device descriptor read/64, error -71 [ 327.783795][ T5927] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 327.800620][ T981] usb usb5-port1: attempt power cycle [ 327.940342][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 327.947779][ T5927] usb 3-1: config 0 has an invalid interface number: 28 but max is 0 [ 327.967557][ T5927] usb 3-1: config 0 has no interface number 0 [ 327.977746][ T5927] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37 [ 327.991804][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.000298][ T5927] usb 3-1: Product: syz [ 328.004539][ T5927] usb 3-1: Manufacturer: syz [ 328.009187][ T5927] usb 3-1: SerialNumber: syz [ 328.036019][ T5927] usb 3-1: config 0 descriptor?? [ 328.058486][ T5927] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 328.066907][ T5927] command write [95] error -22 [ 328.160352][ T981] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 328.203619][ T981] usb 5-1: device descriptor read/8, error -71 [ 328.262619][ T9741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.279975][ T9741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.440359][ T981] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 328.474202][ T981] usb 5-1: device descriptor read/8, error -71 [ 328.604128][ T981] usb usb5-port1: unable to enumerate USB device [ 328.795745][ T9777] syzkaller1: entered promiscuous mode [ 328.804821][ T9777] syzkaller1: entered allmulticast mode [ 329.517798][ T9796] binder: BC_ACQUIRE_RESULT not supported [ 329.547341][ T9796] binder: 9792:9796 ioctl c0306201 200000000580 returned -22 [ 329.565077][ T9793] /dev/rnullb0: Can't open blockdev [ 330.348851][ T9819] /dev/rnullb0: Can't open blockdev [ 330.552814][ T5872] usb 3-1: USB disconnect, device number 48 [ 331.001133][ T9849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'. [ 331.640418][ T5927] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 331.817890][ T5927] usb 5-1: unable to get BOS descriptor or descriptor too short [ 331.837659][ T5927] usb 5-1: config 16 has an invalid interface number: 195 but max is 0 [ 331.857048][ T5927] usb 5-1: config 16 has no interface number 0 [ 331.866777][ T5927] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 331.893686][ T5927] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 331.920010][ T5927] usb 5-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11 [ 331.958302][ T5927] usb 5-1: config 16 interface 195 has no altsetting 0 [ 331.978200][ T5927] usb 5-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 331.997779][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.006757][ T5927] usb 5-1: Product: syz [ 332.020516][ T5927] usb 5-1: Manufacturer: syz [ 332.033279][ T5927] usb 5-1: SerialNumber: syz [ 332.050155][ T9857] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 332.078383][ T9857] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 332.323857][ T5927] usb 5-1: bad CDC descriptors [ 332.357252][ T5927] usb 5-1: USB disconnect, device number 7 [ 332.962077][ T9913] sit0: entered promiscuous mode [ 332.989696][ T9913] netlink: 'syz.4.1051': attribute type 1 has an invalid length. [ 333.002980][ T9913] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1051'. [ 333.243276][ T9923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.299392][ T9923] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 333.641546][ T981] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 333.691582][ T9932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 333.713418][ T9932] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 333.759038][ T9936] binder_alloc: 9935: binder_alloc_buf, no vma [ 333.800366][ T981] usb 5-1: device descriptor read/64, error -71 [ 333.988903][ T9942] /dev/rnullb0: Can't open blockdev [ 334.040423][ T981] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 334.145590][ T9944] input: syz0 as /devices/virtual/input/input26 [ 334.180428][ T981] usb 5-1: device descriptor read/64, error -71 [ 334.290776][ T981] usb usb5-port1: attempt power cycle [ 334.476234][ T9956] syzkaller1: entered promiscuous mode [ 334.483059][ T9956] syzkaller1: entered allmulticast mode [ 334.640640][ T981] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 334.671845][ T981] usb 5-1: device descriptor read/8, error -71 [ 334.951258][ T981] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 334.986372][ T981] usb 5-1: device descriptor read/8, error -71 [ 335.100755][ T981] usb usb5-port1: unable to enumerate USB device [ 335.170409][ T24] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 335.332801][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 335.342611][ T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 335.373381][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 335.390324][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.400014][ T24] usb 4-1: Product: syz [ 335.404440][ T24] usb 4-1: Manufacturer: syz [ 335.409728][ T24] usb 4-1: SerialNumber: syz [ 335.418753][ T24] usb 4-1: config 0 descriptor?? [ 335.436191][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 335.469398][ T9970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 336.958239][ T9995] Invalid ELF header magic: != ELF [ 337.322624][T10023] FAT-fs (rnullb0): bogus number of reserved sectors [ 337.329837][T10023] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 337.409928][T10025] kvm: kvm [10024]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x40000040) = 0x0 [ 337.445221][T10027] syz.2.1083: attempt to access beyond end of device [ 337.445221][T10027] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 337.483806][T10033] netlink: 'syz.2.1083': attribute type 1 has an invalid length. [ 337.499534][T10033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 337.516764][T10033] nbd: illegal input index 393224 [ 338.181903][T10053] ucma_write: process 106 (syz.4.1089) changed security contexts after opening file descriptor, this is not allowed. [ 338.210392][ T5872] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 338.380490][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 338.392674][ T5872] usb 3-1: config 0 interface 0 has no altsetting 0 [ 338.399414][ T5872] usb 3-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 338.431595][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.451561][ T5872] usb 3-1: config 0 descriptor?? [ 338.545078][T10073] nfs4: Unknown parameter '/dev/audio#' [ 338.875322][ T5927] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 338.885369][ T5872] aquacomputer_d5next 0003:0C70:F003.0009: unknown main item tag 0x0 [ 338.899193][ T5872] aquacomputer_d5next 0003:0C70:F003.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f003] on usb-dummy_hcd.2-1/input0 [ 339.055427][ T24] gspca_zc3xx: i2c_r status error 0e [ 339.070560][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 339.083387][ T5927] usb 5-1: config 7 has an invalid interface number: 35 but max is 3 [ 339.093410][ T5927] usb 5-1: config 7 contains an unexpected descriptor of type 0x2, skipping [ 339.105248][ T5927] usb 5-1: config 7 has an invalid interface number: 52 but max is 3 [ 339.116341][ T5927] usb 5-1: config 7 has an invalid interface number: 29 but max is 3 [ 339.124931][ T5927] usb 5-1: config 7 has an invalid interface number: 132 but max is 3 [ 339.133414][ T5927] usb 5-1: config 7 has an invalid interface number: 182 but max is 3 [ 339.142017][ T5927] usb 5-1: config 7 has 5 interfaces, different from the descriptor's value: 4 [ 339.151595][ T5927] usb 5-1: config 7 has no interface number 0 [ 339.157870][ T5927] usb 5-1: config 7 has no interface number 1 [ 339.164530][ T5927] usb 5-1: config 7 has no interface number 2 [ 339.171047][ T5927] usb 5-1: config 7 has no interface number 3 [ 339.177310][ T5927] usb 5-1: config 7 has no interface number 4 [ 339.184031][ T5927] usb 5-1: config 7 interface 35 altsetting 128 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 339.195276][ T5927] usb 5-1: config 7 interface 35 altsetting 128 endpoint 0x7 has an invalid bInterval 188, changing to 11 [ 339.207097][ T5927] usb 5-1: config 7 interface 52 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 339.219170][ T5927] usb 5-1: config 7 interface 52 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 339.227445][ T5984] usb 3-1: USB disconnect, device number 49 [ 339.238501][ T5927] usb 5-1: config 7 interface 52 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 339.251697][ T5927] usb 5-1: config 7 interface 52 altsetting 3 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 339.263576][ T5927] usb 5-1: config 7 interface 29 altsetting 3 bulk endpoint 0xE has invalid maxpacket 24 [ 339.277956][ T5927] usb 5-1: config 7 interface 29 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 15 [ 339.292616][ T5927] usb 5-1: config 7 interface 132 altsetting 180 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 339.298322][ T24] gspca_zc3xx: reg_r err -71 [ 339.304979][ T5927] usb 5-1: config 7 interface 132 altsetting 180 has a duplicate endpoint with address 0x3, skipping [ 339.317626][ T24] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 339.320786][ T5927] usb 5-1: config 7 interface 132 altsetting 180 endpoint 0xD has invalid maxpacket 520, setting to 64 [ 339.341968][ T5927] usb 5-1: config 7 interface 132 altsetting 180 bulk endpoint 0x82 has invalid maxpacket 16 [ 339.359744][ T5927] usb 5-1: config 7 interface 132 altsetting 180 has a duplicate endpoint with address 0xF, skipping [ 339.372704][ T24] usb 4-1: USB disconnect, device number 69 [ 339.374484][ T5927] usb 5-1: config 7 interface 132 altsetting 180 has a duplicate endpoint with address 0xF, skipping [ 339.390885][ T5927] usb 5-1: config 7 interface 132 altsetting 180 has a duplicate endpoint with address 0xE, skipping [ 339.405335][ T5927] usb 5-1: config 7 interface 132 altsetting 180 has a duplicate endpoint with address 0xD, skipping [ 339.416957][ T5927] usb 5-1: config 7 interface 132 altsetting 180 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 339.430825][ T5927] usb 5-1: config 7 interface 132 altsetting 180 has a duplicate endpoint with address 0xA, skipping [ 339.444273][ T5927] usb 5-1: config 7 interface 132 altsetting 180 has a duplicate endpoint with address 0xD, skipping [ 339.455361][ T5927] usb 5-1: config 7 interface 132 altsetting 180 has 14 endpoint descriptors, different from the interface descriptor's value: 22 [ 339.469408][ T5927] usb 5-1: config 7 interface 182 altsetting 38 has a duplicate endpoint with address 0x3, skipping [ 339.481973][ T5927] usb 5-1: config 7 interface 35 has no altsetting 0 [ 339.488787][ T5927] usb 5-1: config 7 interface 52 has no altsetting 0 [ 339.495668][ T5927] usb 5-1: config 7 interface 29 has no altsetting 0 [ 339.502819][ T5927] usb 5-1: config 7 interface 132 has no altsetting 0 [ 339.509753][ T5927] usb 5-1: config 7 interface 182 has no altsetting 0 [ 339.519421][ T5927] usb 5-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=de.c1 [ 339.528589][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.536772][ T5927] usb 5-1: Product: 龦圕㸮㓬౱ꯏ弃꥕눝佛ᖕ䈔쑙䥝吸퇝起遅놋榨봭偀枍쥋嫕樟걕꿜眧짋낈펚謸왮仐덕抋洺蝲㥎흒穏鲝賮᱇噲擉眯ꆸ굈쁪ꠍ菖Ὧ뷘掁ӈ汗ꔺ꧓시 [ 339.558226][ T5927] usb 5-1: Manufacturer: 뺑붭堾鿠ѱ툈빯ᄲᨠꋵ窻䕑貥蔐⦞砇闳틂マ骖领ᐃ师숾퉏臸բ겗Ẇ輙챰ꭈꇈ儹到ݓ⚇朗㊔耎๧Ϯﲵ史쉠籶ꈣꢳ臜⌰땋쑁੧麫䱱쌩ꁵ⛎厙ᢋ귮弟ᢅ植 [ 339.579975][ T5927] usb 5-1: SerialNumber: syz [ 339.795665][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.799977][T10079] tap0: tun_chr_ioctl cmd 1074025675 [ 339.810937][T10079] tap0: persist enabled [ 339.817225][T10079] /dev/rnullb0: Can't open blockdev [ 339.830658][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.953699][ T5927] usb 5-1: USB disconnect, device number 12 [ 340.033635][T10091] ./cgroup: Can't lookup blockdev [ 340.279040][T10101] /dev/rnullb0: Can't open blockdev [ 340.469968][T10110] /dev/rnullb0: Can't open blockdev [ 340.540103][T10112] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1105'. [ 340.553650][T10114] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1105'. [ 340.718190][T10117] XFS (rnullb0): Invalid superblock magic number [ 341.378324][T10134] ptrace attach of "./syz-executor exec"[5864] was attempted by "./syz-executor exec"[10134] [ 341.608306][T10140] netlink: 'syz.0.1114': attribute type 4 has an invalid length. [ 342.009393][T10158] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 342.321446][T10170] ./file0: Can't lookup blockdev [ 343.295217][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'. [ 343.331380][T10184] IPVS: Error joining to the multicast group [ 343.635417][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888022b6ac00: rx timeout, send abort [ 343.644387][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888022b6ac00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 344.217280][T10201] MTD: Couldn't look up '/dev/sg0': -15 [ 344.226384][T10201] MTD: Couldn't look up '/dev/sg0': -15 [ 345.394187][T10216] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 346.592633][T10235] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 347.485634][T10241] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1144'. [ 347.514934][T10244] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1145'. [ 347.525152][T10241] /dev/rnullb0: Can't open blockdev [ 347.739438][T10248] syzkaller1: entered promiscuous mode [ 347.756670][T10248] syzkaller1: entered allmulticast mode [ 348.218523][T10252] Context (ID=0x0) not attached to queue pair (handle=0xffffffff:0x10604) [ 348.269251][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805aaf3400: rx timeout, send abort [ 348.279627][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805aaf3400: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 348.790780][ T981] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 348.970812][ T981] usb 3-1: Using ep0 maxpacket: 16 [ 348.990298][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.021238][ T981] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.041918][ T981] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 349.057355][ T981] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 349.067268][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.084363][ T981] usb 3-1: config 0 descriptor?? [ 349.557630][T10276] omfs: Invalid superblock (0) [ 349.568393][ T926] libceph: connect (1)[c::]:6789 error -97 [ 349.576829][ T926] libceph: mon0 (1)[c::]:6789 connect error [ 349.577781][ T981] usbhid 3-1:0.0: can't add hid device: -71 [ 349.593891][T10256] ceph: No mds server is up or the cluster is laggy [ 349.596793][ T981] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 349.630726][ T981] usb 3-1: USB disconnect, device number 50 [ 350.318644][T10115] syz.4.1106 (10115) used greatest stack depth: 17320 bytes left [ 350.484985][T10310] /dev/rnullb0: Can't open blockdev [ 350.610562][T10317] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1166'. [ 350.895200][ T981] libceph: connect (1)[c::]:6789 error -101 [ 350.910785][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 351.140350][ T5984] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 351.182826][ T981] libceph: connect (1)[c::]:6789 error -101 [ 351.190443][ T981] libceph: mon0 (1)[c::]:6789 connect error [ 351.312745][ T5984] usb 4-1: config 4 has an invalid interface number: 23 but max is 1 [ 351.330266][ T5984] usb 4-1: config 4 has no interface number 1 [ 351.346820][ T5984] usb 4-1: config 4 interface 23 has no altsetting 0 [ 351.356946][ T5984] usb 4-1: config 4 interface 0 has no altsetting 0 [ 351.380710][ T5984] usb 4-1: New USB device found, idVendor=15c2, idProduct=0042, bcdDevice=e8.e0 [ 351.396034][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.413338][ T5984] usb 4-1: Product: syz [ 351.420358][ T5984] usb 4-1: Manufacturer: syz [ 351.425488][ T5984] usb 4-1: SerialNumber: syz [ 351.585873][T10338] /dev/rnullb0: Can't open blockdev [ 351.706533][T10326] ceph: No mds server is up or the cluster is laggy [ 351.714242][ T1230] libceph: connect (1)[c::]:6789 error -101 [ 351.720725][ T1230] libceph: mon0 (1)[c::]:6789 connect error [ 351.744716][T10341] /dev/rnullb0: Can't open blockdev [ 351.784710][T10341] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 351.849706][T10342] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.141078][T10356] /dev/rnullb0: Can't open blockdev [ 353.600880][ T24] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 353.644124][T10366] input: syz0 as /devices/virtual/input/input27 [ 354.108696][T10368] program syz.3.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 354.593361][ T5984] imon 4-1:4.23: inconsistent driver matching [ 354.599613][ T5984] imon 4-1:4.23: unable to register, err -22 [ 354.623155][ T5984] imon 4-1:4.23: probe with driver imon failed with error -22 [ 356.342300][ T24] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 356.379654][T10369] program syz.3.1182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 357.311221][ T5984] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 357.319261][ T5984] imon 4-1:4.0: unable to initialize intf0, err -19 [ 357.327123][ T24] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 357.337647][ T24] usb 5-1: can't read configurations, error -71 [ 357.350795][ T5984] imon:imon_probe: failed to initialize context! [ 357.359200][ T5984] imon 4-1:4.0: unable to register, err -19 [ 357.370567][ T5984] usb 4-1: USB disconnect, device number 70 [ 358.240487][ T24] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 358.450361][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 358.494265][ T24] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 358.502736][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.535252][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.563563][ T24] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 358.580303][ T24] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 358.614813][ T24] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.660585][ T24] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 358.692688][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.703129][ T24] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 358.916532][T10394] netlink: 'syz.2.1190': attribute type 21 has an invalid length. [ 358.952345][T10386] cgroup: Invalid name [ 359.889340][T10394] netlink: 388 bytes leftover after parsing attributes in process `syz.2.1190'. [ 360.218172][T10400] /dev/rnullb0: Can't open blockdev [ 360.514772][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.548663][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.743512][T10408] /dev/rnullb0: Can't open blockdev [ 360.795738][T10409] /dev/rnullb0: Can't open blockdev [ 361.110933][ T5872] usb 5-1: USB disconnect, device number 14 [ 361.179450][T10412] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 361.301602][T10425] /dev/rnullb0: Can't open blockdev [ 362.440773][ T24] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 362.603606][T10453] /dev/rnullb0: Can't open blockdev [ 362.616332][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 362.626588][ T24] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 362.652351][ T24] usb 4-1: config 1 has no interface number 0 [ 362.665834][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 362.691271][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 362.716603][ T24] usb 4-1: config 1 interface 105 has no altsetting 0 [ 362.726510][ T24] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 362.739869][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.755185][ T24] usb 4-1: Product: syz [ 362.759599][ T24] usb 4-1: Manufacturer: syz [ 362.764473][ T24] usb 4-1: SerialNumber: syz [ 362.775042][T10442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 362.786730][T10442] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 363.200334][ T5978] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 363.380768][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 363.388942][ T5978] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 363.400929][ T5978] usb 3-1: config 0 has no interface number 0 [ 363.407207][ T5978] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 363.433713][ T5978] usb 3-1: config 0 interface 85 has no altsetting 0 [ 363.443950][ T5978] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 363.462595][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.498262][ T5978] usb 3-1: Product: syz [ 363.498312][ T5978] usb 3-1: Manufacturer: syz [ 363.498330][ T5978] usb 3-1: SerialNumber: syz [ 363.508355][ T5978] usb 3-1: config 0 descriptor?? [ 363.654435][T10465] binder_alloc: 10460: binder_alloc_buf, no vma [ 363.665755][T10462] binder: BINDER_SET_CONTEXT_MGR already set [ 363.674906][T10462] binder: 10460:10462 ioctl 4018620d 200000000300 returned -16 [ 363.710377][ T5978] appletouch 3-1:0.85: Failed to read mode from device. [ 363.723501][ T5978] appletouch 3-1:0.85: probe with driver appletouch failed with error -5 [ 364.200669][ T5978] usb 3-1: USB disconnect, device number 51 [ 364.628254][T10481] /dev/rnullb0: Can't open blockdev [ 364.919419][T10487] loop6: detected capacity change from 0 to 2560 [ 364.928644][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.937716][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.946319][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.955007][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.963760][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.973533][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 364.994973][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.009572][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.019741][T10487] ldm_validate_partition_table(): Disk read failed. [ 365.030756][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.080836][T10487] Buffer I/O error on dev loop6, logical block 0, async page read [ 365.098268][T10487] Dev loop6: unable to read RDB block 0 [ 365.106950][T10487] loop6: unable to read partition table [ 365.138489][T10487] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 365.196688][ T24] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 365.209738][T10488] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 365.226232][ T24] usb 4-1: USB disconnect, device number 71 [ 365.548393][T10493] /dev/rnullb0: Can't open blockdev [ 365.555938][T10494] /dev/rnullb0: Can't open blockdev [ 365.765462][T10502] /dev/rnullb0: Can't open blockdev [ 365.844598][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805bb63000: rx timeout, send abort [ 365.853484][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805bb63000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 365.945481][T10507] /dev/rnullb0: Can't open blockdev [ 366.262683][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 366.425509][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 366.434949][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.446354][ T24] usb 3-1: config 0 descriptor?? [ 366.484377][T10515] netlink: 'syz.3.1229': attribute type 3 has an invalid length. [ 366.667878][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 366.860342][ T1230] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 366.872472][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.887362][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.928859][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 366.938681][ T24] [drm] Initialized udl on minor 2 [ 367.012753][ T1230] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 367.024746][ T1230] usb 4-1: config 0 has no interface number 0 [ 367.031208][ T1230] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.045711][ T1230] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.056444][ T1230] usb 4-1: New USB device found, idVendor=28bd, idProduct=0905, bcdDevice= 0.00 [ 367.069062][ T1230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.089762][ T1230] usb 4-1: config 0 descriptor?? [ 367.307598][T10523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.326480][T10523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.554401][ T1230] uclogic 0003:28BD:0905.000A: Interface probing failed: -22 [ 367.582667][ T1230] uclogic 0003:28BD:0905.000A: interface is invalid, ignoring [ 368.318010][T10535] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1235'. [ 368.343461][T10535] /dev/rnullb0: Can't open blockdev [ 368.464587][T10537] /dev/rnullb0: Can't open blockdev [ 368.545926][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 368.561959][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 368.577233][ T24] usb 3-1: USB disconnect, device number 52 [ 368.578037][ T5978] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 368.578462][ T5978] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 368.958867][T10553] /dev/rnullb0: Can't open blockdev [ 369.010895][T10556] /dev/rnullb0: Can't open blockdev [ 369.706895][ T1230] usb 4-1: USB disconnect, device number 72 [ 370.210423][ T1230] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 370.380602][ T1230] usb 4-1: device descriptor read/64, error -71 [ 370.631104][ T1230] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 370.770476][ T1230] usb 4-1: device descriptor read/64, error -71 [ 370.790427][ T981] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 370.880657][ T1230] usb usb4-port1: attempt power cycle [ 370.930405][ T981] usb 5-1: device descriptor read/64, error -71 [ 371.180426][ T981] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 371.222677][ T1230] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 371.251197][ T1230] usb 4-1: device descriptor read/8, error -71 [ 371.310333][ T981] usb 5-1: device descriptor read/64, error -71 [ 371.413245][T10606] erofs (device rnullb0): cannot find valid erofs superblock [ 371.436015][ T981] usb usb5-port1: attempt power cycle [ 371.501674][ T1230] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 371.532169][ T1230] usb 4-1: device descriptor read/8, error -71 [ 371.660345][ T1230] usb usb4-port1: unable to enumerate USB device [ 371.810368][ T981] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 371.841102][ T981] usb 5-1: device descriptor read/8, error -71 [ 372.023433][T10611] FAT-fs (rnullb0): bogus number of reserved sectors [ 372.030153][T10611] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 372.101597][ T981] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 372.113822][T10613] befs: (nullb0): invalid magic header [ 372.140953][ T981] usb 5-1: device descriptor read/8, error -71 [ 372.262953][ T981] usb usb5-port1: unable to enumerate USB device [ 372.318225][T10620] syz.2.1262: attempt to access beyond end of device [ 372.318225][T10620] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 372.334073][T10620] XFS (nbd2): SB validate failed with error -5. [ 373.311841][T10644] /dev/sg0: Can't lookup blockdev [ 373.381526][ T24] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 373.543229][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 373.551614][ T24] usb 4-1: too many configurations: 33, using maximum allowed: 8 [ 373.569414][ T24] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 373.588224][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.605244][ T24] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 373.631721][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.660359][ T24] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 373.675402][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.697217][T10656] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.713472][ T24] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 373.736333][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.757198][ T24] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 373.769998][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.781829][ T24] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 373.798252][T10656] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.811463][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.823893][ T24] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 373.839736][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.853777][ T24] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 373.867242][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.885314][ T24] usb 4-1: New USB device found, idVendor=0461, idProduct=4feb, bcdDevice=a8.b1 [ 373.899843][ T24] usb 4-1: New USB device strings: Mfr=254, Product=52, SerialNumber=57 [ 373.913335][T10656] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.932819][ T24] usb 4-1: Product: syz [ 373.937206][ T24] usb 4-1: Manufacturer: syz [ 373.947981][ T24] usb 4-1: SerialNumber: syz [ 373.957119][ T24] usb 4-1: config 0 descriptor?? [ 373.999218][T10656] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.121075][ T37] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.142032][ T37] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.166005][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.186932][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.975596][ T24] usb 4-1: USB disconnect, device number 77 [ 375.628079][T10679] /dev/rnullb0: Can't open blockdev [ 375.691710][T10681] /dev/rnullb0: Can't open blockdev [ 375.890842][ T5978] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 376.052068][ T5978] usb 3-1: Using ep0 maxpacket: 32 [ 376.070938][ T5978] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 376.090585][ T5978] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.118831][ T5978] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 376.140663][ T5978] usb 3-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 376.160069][ T5978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.187605][ T5978] usb 3-1: config 0 descriptor?? [ 376.628124][ T5978] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 376.638657][ T5978] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 376.646555][ T5978] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 376.655121][ T5978] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 376.663070][ T5978] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 376.680705][ T5978] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 376.688059][ T5978] uclogic 0003:5543:0003.000B: unknown main item tag 0x0 [ 376.715887][ T5978] uclogic 0003:5543:0003.000B: hidraw0: USB HID vff.fd Device [HID 5543:0003] on usb-dummy_hcd.2-1/input0 [ 376.817699][ T981] usb 3-1: USB disconnect, device number 53 [ 377.045821][T10701] fido_id[10701]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 377.363386][T10709] netlink: 'syz.3.1289': attribute type 10 has an invalid length. [ 377.376109][T10709] team0: Device tunl0 is of different type [ 377.452779][T10709] /dev/rnullb0: Can't open blockdev [ 377.962599][ T5927] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 378.165046][ T5927] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.190341][ T5927] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.207576][ T5927] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 378.218230][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 378.228747][ T5927] usb 5-1: SerialNumber: syz [ 378.321046][ T5984] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 378.478521][ T5927] usb 5-1: 0:2 : does not exist [ 378.509394][ T5984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.516889][ T5927] usb 5-1: USB disconnect, device number 19 [ 378.532253][ T5984] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 378.555690][ T5984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.569593][ T5984] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 378.580104][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.599744][ T5984] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.613885][ T5984] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 378.625140][ T5984] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 378.637695][ T5984] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 378.646060][ T5984] usb 3-1: SerialNumber: syz [ 378.842074][ T44] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 379.020470][ T44] usb 4-1: Using ep0 maxpacket: 32 [ 379.031343][ T44] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 379.060594][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 379.070841][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 379.093138][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 379.102595][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.115831][ T44] usb 4-1: Product: ⛠韒橉뛟ꊨ댜䜘랱캱餮ិ♘⻇휴뎐㟄䮿貂澇儮ቕୀ阗볨伅꜇윰⊕敳칗ᔢ [ 379.129180][ T44] usb 4-1: Manufacturer: О [ 379.134132][ T44] usb 4-1: SerialNumber: 撞潛锟崥ꃓ嘵흞䍈䰕葂십Մ甿윾ⱘ튎ႚ䪌Ⅎ쏼⋴܋ట驓/꼧⡊ԩ뉹쀛㡷䴹薆ᢍ౳橿⎊ [ 379.197323][T10731] /dev/rnullb0: Can't open blockdev [ 380.211431][T10733] /dev/rnullb0: Can't open blockdev [ 381.136856][ T1230] usb 3-1: USB disconnect, device number 54 [ 381.506393][T10745] /dev/rnullb0: Can't open blockdev [ 381.574857][ T44] usb 4-1: 0:2 : does not exist [ 381.652229][ T44] usb 4-1: USB disconnect, device number 78 [ 381.744519][ T8041] udevd[8041]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.120347][ T44] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 382.275234][ T44] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 382.286187][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.295539][ T44] usb 4-1: Product: syz [ 382.299746][ T44] usb 4-1: Manufacturer: syz [ 382.305172][ T44] usb 4-1: SerialNumber: syz [ 382.313222][ T44] usb 4-1: config 0 descriptor?? [ 382.326004][ T44] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 382.334777][ T44] usb 4-1: Detected FT4232HP [ 382.490326][ T5872] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 382.543196][ T44] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 382.560070][ T44] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 382.587984][ T44] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 382.602929][T10782] /dev/rnullb0: Can't open blockdev [ 382.615215][ T44] usb 4-1: USB disconnect, device number 79 [ 382.650299][ T5872] usb 5-1: device descriptor read/64, error -71 [ 382.651569][ T44] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 382.679105][ T44] ftdi_sio 4-1:0.0: device disconnected [ 382.752418][T10786] kAFS: unable to lookup cell '.,cL' [ 382.759107][T10786] /dev/rnullb0: Can't open blockdev [ 382.893435][ T5872] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 383.030541][ T5872] usb 5-1: device descriptor read/64, error -71 [ 383.131363][ T1230] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 383.152989][ T5872] usb usb5-port1: attempt power cycle [ 383.173343][ T13] tipc: Subscription rejected, illegal request [ 383.290461][ T1230] usb 3-1: Using ep0 maxpacket: 16 [ 383.298082][ T1230] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 383.308218][ T1230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.319117][ T1230] usb 3-1: config 0 descriptor?? [ 383.329902][ T1230] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 383.510322][ T5872] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 383.540986][ T5872] usb 5-1: device descriptor read/8, error -71 [ 383.790490][ T5872] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 383.814077][ T5872] usb 5-1: device descriptor read/8, error -71 [ 383.930776][ T5872] usb usb5-port1: unable to enumerate USB device [ 383.938201][ T1230] gspca_sonixj: reg_r err -32 [ 383.943262][ T1230] sonixj 3-1:0.0: probe with driver sonixj failed with error -32 [ 384.075779][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.082443][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.420319][ T44] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 384.572352][ T44] usb 4-1: too many endpoints for config 0 interface 0 altsetting 112: 151, using maximum allowed: 30 [ 384.584835][ T44] usb 4-1: config 0 interface 0 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 151 [ 384.598420][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 384.607431][ T44] usb 4-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 384.616610][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.624698][ T44] usb 4-1: Product: syz [ 384.628881][ T44] usb 4-1: Manufacturer: syz [ 384.633668][ T44] usb 4-1: SerialNumber: syz [ 384.642369][ T44] usb 4-1: config 0 descriptor?? [ 384.669109][ T5984] usb 3-1: USB disconnect, device number 55 [ 384.762326][T10809] /dev/rnullb0: Can't open blockdev [ 385.371933][T10815] /dev/rnullb0: Can't open blockdev [ 385.382010][T10819] /dev/rnullb0: Can't open blockdev [ 385.562704][T10821] /dev/rnullb0: Can't open blockdev [ 385.643395][ T44] usb 4-1: interface 1 not found [ 385.668521][ T44] usb 4-1: USB disconnect, device number 80 [ 386.060826][T10832] /dev/rnullb0: Can't open blockdev [ 386.109634][T10834] overlayfs: failed to resolve './file0': -2 [ 386.120880][ T5872] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 386.290262][ T5872] usb 5-1: Using ep0 maxpacket: 8 [ 386.309480][ T5872] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 386.328873][ T5872] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.337075][ T5872] usb 5-1: Product: syz [ 386.344926][ T5872] usb 5-1: Manufacturer: syz [ 386.349698][ T5872] usb 5-1: SerialNumber: syz [ 386.363298][ T5872] usb 5-1: config 0 descriptor?? [ 386.372661][ T5872] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 387.301773][ T24] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 387.387426][ T5872] gspca_sonixj: reg_w1 err -71 [ 387.462673][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 387.472113][ T24] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 387.490636][ T5872] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 387.503699][ T24] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 387.506521][ T5872] usb 5-1: USB disconnect, device number 24 [ 387.530321][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.549708][ T24] usb 4-1: Product: syz [ 387.559058][ T24] usb 4-1: Manufacturer: syz [ 387.564272][ T24] usb 4-1: SerialNumber: syz [ 387.653451][T10844] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 387.892756][T10852] /dev/rnullb0: Can't open blockdev [ 388.006257][T10856] /dev/rnullb0: Can't open blockdev [ 388.174850][T10865] syzkaller1: entered promiscuous mode [ 388.180844][T10865] syzkaller1: entered allmulticast mode [ 388.595863][ T24] usb 4-1: USB disconnect, device number 81 [ 388.675370][T10869] /dev/rnullb0: Can't open blockdev [ 389.002719][ T24] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 389.052258][T10884] netlink: 'syz.0.1343': attribute type 1 has an invalid length. [ 389.170700][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 389.188675][ T24] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 389.207389][ T24] usb 4-1: config 150 has no interface number 0 [ 389.230349][ T24] usb 4-1: config 150 interface 204 has no altsetting 0 [ 389.237383][ T24] usb 4-1: config 150 interface 1 has no altsetting 0 [ 389.263436][ T24] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 389.274171][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.286255][ T24] usb 4-1: Product: syz [ 389.293295][ T24] usb 4-1: Manufacturer: syz [ 389.298503][ T24] usb 4-1: SerialNumber: syz [ 389.527059][ T24] xr_serial 4-1:150.204: xr_serial converter detected [ 389.783943][T10905] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1349'. [ 389.837432][ T24] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 389.859863][ T24] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 389.910664][ T24] usb 4-1: USB disconnect, device number 82 [ 389.940441][ T24] xr_serial 4-1:150.204: device disconnected [ 390.993702][T10934] syzkaller0: entered promiscuous mode [ 391.001699][T10934] syzkaller0: entered allmulticast mode [ 392.146633][ T30] audit: type=1326 audit(1754361850.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10944 comm="syz.4.1362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94cb8eb69 code=0x7fc00000 [ 392.241122][T10952] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 392.294981][T10956] /dev/rnullb0: Can't open blockdev [ 392.405247][T10964] /dev/rnullb0: Can't open blockdev [ 392.480394][ T24] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 392.650399][ T5872] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 392.660007][ T24] usb 5-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 392.671836][ T24] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 392.683251][ T24] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 392.694876][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 392.704236][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.724773][T10954] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 392.812078][ T5872] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.822449][ T5872] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 392.833790][ T5872] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 392.843400][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.855934][ T5872] usb 4-1: config 0 descriptor?? [ 393.267077][ T5872] Bluetooth: Can't get version to change to load ram patch err [ 393.277402][ T5872] Bluetooth: Loading patch file failed [ 393.283448][ T5872] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 393.297270][ T5872] usb 4-1: USB disconnect, device number 83 [ 393.342088][ T24] aiptek 5-1:17.0: Aiptek using 400 ms programming speed [ 393.356015][ T24] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:17.0/input/input30 [ 393.669301][ T5872] usb 5-1: USB disconnect, device number 25 [ 393.669380][ C1] aiptek 5-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 393.733648][T10975] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1371'. [ 394.008661][T10988] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 394.023157][T10988] veth1_vlan: entered allmulticast mode [ 394.035822][T10988] team0: Device veth1_vlan failed to register rx_handler [ 394.085328][T10991] /dev/rnullb0: Can't open blockdev [ 394.355088][ T5978] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 394.500337][ T5978] usb 3-1: device descriptor read/64, error -71 [ 394.752734][ T5978] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 394.890278][ T5978] usb 3-1: device descriptor read/64, error -71 [ 395.024030][ T5978] usb usb3-port1: attempt power cycle [ 395.380505][ T5978] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 395.413318][ T5978] usb 3-1: device descriptor read/8, error -71 [ 395.650343][ T5978] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 395.670965][ T5978] usb 3-1: device descriptor read/8, error -71 [ 395.782574][ T5978] usb usb3-port1: unable to enumerate USB device [ 396.030496][ T5872] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 396.180331][ T5872] usb 4-1: Using ep0 maxpacket: 32 [ 396.189597][ T5872] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 396.198931][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.207068][ T5872] usb 4-1: Product: syz [ 396.211337][ T5872] usb 4-1: Manufacturer: syz [ 396.215985][ T5872] usb 4-1: SerialNumber: syz [ 396.223229][ T5872] usb 4-1: config 0 descriptor?? [ 396.233893][ T5872] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 397.434760][ T5984] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 397.590464][ T5984] usb 3-1: Using ep0 maxpacket: 32 [ 397.598732][ T5984] usb 3-1: config 1 has an invalid interface number: 223 but max is 0 [ 397.607502][ T5984] usb 3-1: config 1 has no interface number 0 [ 397.614928][ T5984] usb 3-1: config 1 interface 223 has no altsetting 0 [ 397.624355][ T5984] usb 3-1: New USB device found, idVendor=13d3, idProduct=3339, bcdDevice=41.c0 [ 397.633770][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.642282][ T5984] usb 3-1: Product: syz [ 397.646483][ T5984] usb 3-1: Manufacturer: syz [ 397.651711][ T5984] usb 3-1: SerialNumber: syz [ 397.882727][ T5984] usb 3-1: USB disconnect, device number 60 [ 398.055055][T11017] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1385'. [ 398.666142][T11004] vxfs: WRONG superblock magic 8124f000 at 1 [ 398.680476][T11004] vxfs: WRONG superblock magic 00000000 at 8 [ 398.686523][T11004] vxfs: can't find superblock. [ 398.887683][ T5872] gspca_stk1135: reg_w 0x300 err -71 [ 398.901971][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 398.908811][ T5872] gspca_stk1135: Sensor write failed [ 398.918361][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 398.932880][ T5872] gspca_stk1135: Sensor write failed [ 398.938550][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 398.945435][ T5872] gspca_stk1135: Sensor read failed [ 398.951281][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 398.958214][ T5872] gspca_stk1135: Sensor read failed [ 398.963819][ T5872] gspca_stk1135: Detected sensor type unknown (0x0) [ 398.971386][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 398.977933][ T5872] gspca_stk1135: Sensor read failed [ 398.983840][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 398.993694][ T5872] gspca_stk1135: Sensor read failed [ 398.999098][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 399.006120][ T5872] gspca_stk1135: Sensor write failed [ 399.015429][ T5872] gspca_stk1135: serial bus timeout: status=0x00 [ 399.022484][ T5872] gspca_stk1135: Sensor write failed [ 399.028043][ T5872] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 399.049776][ T5872] usb 4-1: USB disconnect, device number 84 [ 399.646846][T11057] : renamed from hsr_slave_0 (while UP) [ 399.738557][T11062] syz_tun: entered allmulticast mode [ 401.200467][ T5927] usb 3-1: new full-speed USB device number 61 using dummy_hcd [ 401.363905][ T5927] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.374263][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 401.386012][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 401.397083][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 401.406917][ T5927] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 401.424342][ T5927] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 401.433517][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 401.444173][ T5927] usb 3-1: Product: syz [ 401.448507][ T5927] usb 3-1: Manufacturer: syz [ 401.453290][ T5927] usb 3-1: SerialNumber: syz [ 401.464989][ T5927] usb 3-1: config 0 descriptor?? [ 401.675051][ T5927] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 401.682447][ T5927] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 401.697357][ T5927] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 401.705155][ T5927] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 401.717623][ T5927] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 401.815502][T11102] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1412'. [ 401.875911][ T5927] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 402.286987][ T5927] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 402.299367][ T5927] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 402.312387][T11099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.327417][T11099] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.411800][ T5927] usb 3-1: USB disconnect, device number 61 [ 402.537128][T11110] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 402.581188][T11111] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 403.782750][T11141] PKCS8: Unsupported PKCS#8 version [ 403.982127][T11149] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 404.940418][ T24] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 405.100340][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 405.107954][ T24] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 405.118589][ T24] usb 4-1: config 0 has no interface number 0 [ 405.125051][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 405.136124][ T24] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 405.148268][ T24] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 405.159548][ T24] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 405.172979][ T24] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 405.182128][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.194788][ T24] usb 4-1: config 0 descriptor?? [ 405.210507][ T24] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 405.250747][ T5872] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 405.410420][ T5872] usb 3-1: Using ep0 maxpacket: 8 [ 405.424159][ T5872] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 405.438149][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.449543][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.459776][ T5872] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 405.473050][ T5872] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 405.475342][ T24] usb 4-1: USB disconnect, device number 85 [ 405.482864][ C0] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 405.482966][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.501628][ T5872] usb 3-1: config 0 descriptor?? [ 405.675920][T11161] /dev/rnullb0: Can't open blockdev [ 405.903796][ T5872] usbhid 3-1:0.0: can't add hid device: -71 [ 405.912994][ T5872] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 405.924319][ T5872] usb 3-1: USB disconnect, device number 62 [ 406.920340][ T5978] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 407.040992][T11188] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 407.090316][ T5978] usb 3-1: Using ep0 maxpacket: 16 [ 407.103652][T11174] /dev/rnullb0: Can't open blockdev [ 407.258505][ T5978] usb 3-1: unable to get BOS descriptor or descriptor too short [ 407.279602][ T5978] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 407.308721][ T5978] usb 3-1: can't read configurations, error -71 [ 407.330927][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1437'. [ 407.713809][ T24] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 409.693004][T11240] orangefs_mount: mount request failed with -4 [ 409.881599][T11253] /dev/rnullb0: Can't open blockdev [ 410.254927][T11264] overlayfs: missing 'lowerdir' [ 410.710346][ T5872] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 410.862130][ T5872] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 410.871810][ T5872] usb 3-1: config 0 has no interface number 0 [ 410.878008][ T5872] usb 3-1: config 0 interface 122 has no altsetting 0 [ 410.887403][ T5872] usb 3-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 410.899770][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.908392][ T5872] usb 3-1: Product: syz [ 410.915951][ T5872] usb 3-1: Manufacturer: syz [ 410.920920][ T5872] usb 3-1: SerialNumber: syz [ 410.928749][ T5872] usb 3-1: config 0 descriptor?? [ 411.318051][T11283] /dev/rnullb0: Can't open blockdev [ 411.404195][ T5978] usb 3-1: USB disconnect, device number 65 [ 411.419575][ T5978] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 411.505287][T11294] /dev/rnullb0: Can't open blockdev [ 411.552363][T11296] /dev/rnullb0: Can't open blockdev [ 411.603686][T11299] xfrm0: mtu less than device minimum [ 411.613596][T11299] syz.3.1465: attempt to access beyond end of device [ 411.613596][T11299] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 411.628184][T11299] EXT4-fs (nbd3): unable to read superblock [ 411.639324][T11301] xfrm0: mtu less than device minimum [ 411.840153][T11313] autofs: Unknown parameter '/dev/rnullb0' [ 412.108115][T11329] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1473'. [ 412.358760][T11338] /dev/rnullb0: Can't open blockdev [ 412.520354][ T5872] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 412.637687][T11350] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 412.646931][T11350] syzkaller1: Linktype set failed because interface is up [ 412.660387][ T5872] usb 4-1: device descriptor read/64, error -71 [ 412.664762][ T5978] syzkaller1: tun_net_xmit 90 [ 412.779629][ T30] audit: type=1326 audit(1754361870.890:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5df778eb69 code=0x0 [ 412.801436][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.843011][T11354] /dev/rnullb0: Can't open blockdev [ 412.892744][ T30] audit: type=1326 audit(1754361871.010:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11351 comm="syz.2.1479" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5df778eb69 code=0x0 [ 412.914465][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.950852][ T5872] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 413.086028][T11366] /dev/rnullb0: Can't open blockdev [ 413.091735][ T5872] usb 4-1: device descriptor read/64, error -71 [ 413.204738][ T5872] usb usb4-port1: attempt power cycle [ 413.273042][T11371] /dev/rnullb0: Can't open blockdev [ 413.560284][ T5872] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 413.582263][ T5872] usb 4-1: device descriptor read/8, error -71 [ 413.830616][ T5872] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 413.872012][ T5872] usb 4-1: device descriptor read/8, error -71 [ 413.981035][ T5872] usb usb4-port1: unable to enumerate USB device [ 414.117601][T11378] /dev/rnullb0: Can't open blockdev [ 415.082789][T11402] PKCS8: Unsupported PKCS#8 version [ 415.786223][T11412] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 415.833386][T11412] /dev/rnullb0: Can't open blockdev [ 416.020059][T11421] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1500'. [ 416.036748][T11422] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1500'. [ 416.390432][ T1230] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 416.562081][ T1230] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1023 [ 416.572825][ T1230] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 16 [ 416.583399][ T1230] usb 4-1: config 1 interface 0 altsetting 6 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 416.596517][ T1230] usb 4-1: config 1 interface 0 has no altsetting 0 [ 416.607496][ T1230] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.616680][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.625091][ T1230] usb 4-1: Product: 檄宍ᒪ灋꩒震嶑钘⬇Ꮗ㧅㶎퀗⋴쏂ᒆﳘẰ砜ꖽ౰͂ߵ뼌怪䍞ᖆĪ틯㆘憠稳ᤎ쬮來塀聭哗姥ﳀ䌍ᦤ䦯颴ᯙ풣㚐뼥鵼ꐋ駵葈茨轉ᕳྠ⎂㜭驮츠໱苻腜輇図㫰곓퇳䤊혔脱ꫵ뜼錆Ӣ묂굹㗖ᆵ赳㰮第ꊕ [ 416.654010][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.665823][ T1230] usb 4-1: Manufacturer:   [ 416.673585][ T1230] usb 4-1: SerialNumber: syz [ 416.691093][T11428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 416.698504][T11428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 416.788317][T11449] overlay: Unknown parameter 'uid' [ 417.135918][ T1230] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 417.154756][ T1230] usb 4-1: USB disconnect, device number 90 [ 417.191889][ T24] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 417.350576][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 417.357786][ T24] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 417.367167][ T24] usb 3-1: config 0 has no interface number 0 [ 417.373785][ T24] usb 3-1: config 0 interface 12 has no altsetting 0 [ 417.383000][ T24] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 417.392367][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.400673][ T24] usb 3-1: Product: syz [ 417.404880][ T24] usb 3-1: Manufacturer: syz [ 417.409492][ T24] usb 3-1: SerialNumber: syz [ 417.417598][ T24] usb 3-1: config 0 descriptor?? [ 417.789237][ T24] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 417.797686][ T24] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 417.807770][ T24] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 417.816206][ T24] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 417.830076][ T24] usb 3-1: USB disconnect, device number 66 [ 417.970380][ T1230] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 418.130352][ T1230] usb 4-1: Using ep0 maxpacket: 16 [ 418.137663][ T1230] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.146008][ T1230] usb 4-1: config 0 has no interface number 0 [ 418.154802][ T1230] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 418.164073][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.172129][ T1230] usb 4-1: Product: syz [ 418.176424][ T1230] usb 4-1: Manufacturer: syz [ 418.181182][ T1230] usb 4-1: SerialNumber: syz [ 418.190408][ T1230] usb 4-1: config 0 descriptor?? [ 418.198443][ T1230] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 418.615852][T11471] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1518'. [ 418.627032][T11471] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1518'. [ 418.800071][ T1230] gspca_spca1528: reg_w err -71 [ 418.830404][ T1230] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 418.845289][ T1230] usb 4-1: USB disconnect, device number 91 [ 419.000479][ T5927] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 419.163871][ T5927] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 419.173176][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.184613][ T5927] usb 3-1: config 0 descriptor?? [ 419.195442][ T5927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 419.414292][ T5927] gp8psk: usb in 128 operation failed. [ 419.600651][ T1230] usb 4-1: new low-speed USB device number 92 using dummy_hcd [ 419.760305][ T1230] usb 4-1: Invalid ep0 maxpacket: 64 [ 419.900424][ T1230] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 420.073144][ T1230] usb 4-1: Invalid ep0 maxpacket: 64 [ 420.084927][ T1230] usb usb4-port1: attempt power cycle [ 420.450472][ T1230] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 420.474961][ T1230] usb 4-1: Invalid ep0 maxpacket: 64 [ 420.491192][T11503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 420.630519][ T1230] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 420.661220][ T1230] usb 4-1: Invalid ep0 maxpacket: 64 [ 420.667150][ T1230] usb usb4-port1: unable to enumerate USB device [ 421.440825][ T5927] gp8psk: usb in 137 operation failed. [ 421.446696][ T5927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 421.457406][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 421.510292][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 421.781959][ T1230] usb 3-1: USB disconnect, device number 67 [ 422.790432][ T5927] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 422.950508][ T5927] usb 4-1: Using ep0 maxpacket: 8 [ 422.965429][ T5927] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 422.981858][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.001489][ T5927] usb 4-1: config 0 descriptor?? [ 423.214542][ T5927] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 423.417641][ T5927] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 423.450608][ T5927] asix 4-1:0.0: probe with driver asix failed with error -61 [ 423.479842][T11527] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 423.481196][ T5927] usb 4-1: USB disconnect, device number 96 [ 423.545047][T11536] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1537'. [ 423.563551][T11527] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1535'. [ 423.564185][T11536] gretap0: entered promiscuous mode [ 423.584902][T11535] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1537'. [ 423.599096][T11535] 0{X: renamed from gretap0 [ 423.620034][T11535] 0{X: left promiscuous mode [ 423.635999][T11535] 0{X: entered allmulticast mode [ 423.657467][T11535] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 423.891100][T11540] /dev/rnullb0: Can't open blockdev [ 424.990724][T11558] /dev/rnullb0: Can't open blockdev [ 425.214577][T11566] netlink: 'syz.3.1547': attribute type 1 has an invalid length. [ 425.225157][T11566] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1547'. [ 425.449076][T11571] /dev/rnullb0: Can't open blockdev [ 425.530463][ T5978] usb 4-1: new low-speed USB device number 97 using dummy_hcd [ 425.695331][ T5978] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 425.703812][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 425.715269][ T5978] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.727460][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 425.739163][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 425.752078][ T5978] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 425.759535][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 425.773227][ T5978] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.785437][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 425.802431][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 425.818439][ T5978] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 425.826642][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 425.838022][ T5978] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 425.850199][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 425.862156][ T5978] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 425.877810][ T5978] usb 4-1: string descriptor 0 read error: -22 [ 425.884803][ T5978] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 425.894239][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.920900][ T5978] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 426.303453][T11585] /dev/rnullb0: Can't open blockdev [ 428.375547][T11589] /dev/rnullb0: Can't open blockdev [ 428.551085][ T5978] usb 4-1: USB disconnect, device number 97 [ 429.030641][ T5978] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 429.160445][ T5978] usb 4-1: device descriptor read/64, error -71 [ 429.234840][T11601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.249452][T11601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.400307][ T5978] usb 4-1: new full-speed USB device number 99 using dummy_hcd [ 429.533263][ T5978] usb 4-1: device descriptor read/64, error -71 [ 429.640744][ T5978] usb usb4-port1: attempt power cycle [ 429.939907][T11618] /dev/rnullb0: Can't open blockdev [ 429.990441][ T5978] usb 4-1: new full-speed USB device number 100 using dummy_hcd [ 430.011184][ T5978] usb 4-1: device descriptor read/8, error -71 [ 430.250368][ T5978] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 430.282629][ T5978] usb 4-1: device descriptor read/8, error -71 [ 430.391098][ T5978] usb usb4-port1: unable to enumerate USB device [ 430.992454][T11627] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 432.067768][T11646] /dev/rnullb0: Can't open blockdev [ 432.143588][T11650] /dev/rnullb0: Can't open blockdev [ 432.218910][T11655] /dev/rnullb0: Can't open blockdev [ 432.326876][T11659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1578'. [ 432.348394][T11661] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 432.363226][T11661] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 432.520453][ T5978] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 432.673186][ T5978] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 432.685592][ T5978] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.707783][ T5978] usb 4-1: config 0 descriptor?? [ 432.730839][ T5978] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 432.943263][ T5978] gp8psk: usb in 128 operation failed. [ 433.195325][T11668] /dev/rnullb0: Can't open blockdev [ 434.962419][ T5978] gp8psk: usb in 137 operation failed. [ 434.967948][ T5978] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 434.983549][ T5978] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 435.304337][ T5978] usb 4-1: USB disconnect, device number 102 [ 435.467674][T11695] cgroup: Unknown subsys name 'cpuset' [ 436.182355][ T981] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 436.323914][T11712] /dev/rnullb0: Can't open blockdev [ 436.365917][ T981] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.392701][ T981] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.417395][ T981] usb 4-1: config 0 interface 0 has no altsetting 0 [ 436.428443][ T981] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 436.429132][T11714] /dev/rnullb0: Can't open blockdev [ 436.438518][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.463222][ T981] usb 4-1: config 0 descriptor?? [ 437.439892][ T981] usb 4-1: string descriptor 0 read error: -22 [ 437.653511][T11735] /dev/rnullb0: Can't open blockdev [ 437.659658][T11734] /dev/rnullb0: Can't open blockdev [ 437.788111][T11708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.801803][T11708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.826989][ T981] uclogic 0003:256C:006D.000C: failed retrieving string descriptor #100: -71 [ 437.850350][ T981] uclogic 0003:256C:006D.000C: failed retrieving pen parameters: -71 [ 437.858500][ T981] uclogic 0003:256C:006D.000C: failed probing pen v1 parameters: -71 [ 437.867391][ T981] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 437.879328][ T981] uclogic 0003:256C:006D.000C: probe with driver uclogic failed with error -71 [ 437.896396][ T981] usb 4-1: USB disconnect, device number 103 [ 439.066637][T11762] /dev/rnullb0: Can't open blockdev [ 439.116099][T11764] /dev/rnullb0: Can't open blockdev [ 439.205037][T11768] /dev/rnullb0: Can't open blockdev [ 439.626398][T11766] syz.2.1613: attempt to access beyond end of device [ 439.626398][T11766] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 439.700739][T11766] syz.2.1613: attempt to access beyond end of device [ 439.700739][T11766] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 439.795562][T11766] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 439.879175][T11766] syz.2.1613: attempt to access beyond end of device [ 439.879175][T11766] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 440.030126][T11766] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 440.110428][T11766] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 440.157998][T11766] UDF-fs: Scanning with blocksize 512 failed [ 440.206864][T11766] syz.2.1613: attempt to access beyond end of device [ 440.206864][T11766] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 440.293161][T11766] syz.2.1613: attempt to access beyond end of device [ 440.293161][T11766] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 440.375278][T11766] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 440.436194][T11766] syz.2.1613: attempt to access beyond end of device [ 440.436194][T11766] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 440.526702][T11766] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 440.603312][T11766] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 440.640303][T11766] UDF-fs: Scanning with blocksize 1024 failed [ 440.663359][T11766] syz.2.1613: attempt to access beyond end of device [ 440.663359][T11766] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 440.696895][T11766] syz.2.1613: attempt to access beyond end of device [ 440.696895][T11766] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 440.740446][T11766] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 440.771962][T11766] syz.2.1613: attempt to access beyond end of device [ 440.771962][T11766] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 440.828829][T11766] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 440.879254][T11766] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 440.914353][T11766] UDF-fs: Scanning with blocksize 2048 failed [ 440.938034][T11766] syz.2.1613: attempt to access beyond end of device [ 440.938034][T11766] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 440.970647][T11766] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 440.982604][T11766] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 440.992901][T11766] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 441.003306][T11766] UDF-fs: Scanning with blocksize 4096 failed [ 441.009416][T11766] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 441.290334][ T981] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 441.501576][ T981] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.516485][ T981] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 441.562415][ T981] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 441.572109][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 441.592577][ T981] usb 4-1: SerialNumber: syz [ 441.616070][ T981] usb 4-1: bad CDC descriptors [ 441.643866][ T981] usb-storage 4-1:1.0: USB Mass Storage device detected [ 441.692079][ T981] usb-storage 4-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 441.787640][T11798] ALSA: seq fatal error: cannot create timer (-22) [ 442.139977][T11804] /dev/rnullb0: Can't open blockdev [ 442.533808][T11813] binder: 11806:11813 ioctl c0306201 200000000380 returned -14 [ 442.561160][T11813] binder: 11806:11813 ioctl c0189379 200000000040 returned -22 [ 442.915765][T11831] netlink: 'syz.4.1634': attribute type 10 has an invalid length. [ 442.923950][T11830] netlink: 'syz.4.1634': attribute type 10 has an invalid length. [ 443.559784][T11843] /dev/rnullb0: Can't open blockdev [ 443.958766][ T981] usb 4-1: USB disconnect, device number 104 [ 444.305804][T11861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.356659][T11861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.068261][ T30] audit: type=1800 audit(1754361903.181:8): pid=11884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1650" name="bus" dev="tmpfs" ino=2090 res=0 errno=0 [ 445.514985][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.896382][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057f06000: rx timeout, send abort [ 445.905244][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888057f06000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 446.132229][T11896] /dev/rnullb0: Can't open blockdev [ 446.138140][T11897] /dev/rnullb0: Can't open blockdev [ 446.356019][T11910] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.355303][T11916] netlink: 'syz.2.1659': attribute type 12 has an invalid length. [ 447.363698][T11916] netlink: 9472 bytes leftover after parsing attributes in process `syz.2.1659'. [ 447.420509][T11917] /dev/rnullb0: Can't open blockdev [ 447.504520][T11919] netlink: 14560 bytes leftover after parsing attributes in process `syz.2.1660'. [ 447.515182][T11919] /dev/rnullb0: Can't open blockdev [ 447.794084][T11931] /dev/rnullb0: Can't open blockdev [ 447.870895][ T5978] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 448.042363][ T5978] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 45874, setting to 1024 [ 448.064190][ T5978] usb 3-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 1024 [ 448.100242][ T5978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 448.122791][ T5978] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 448.150236][ T5978] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 448.168801][ T5978] usb 3-1: Product: syz [ 448.180566][ T5978] usb 3-1: Manufacturer: syz [ 448.185234][ T5978] usb 3-1: SerialNumber: syz [ 448.221507][ T5978] usb 3-1: config 0 descriptor?? [ 448.242994][T11925] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 448.256453][ T5978] usb 3-1: selecting invalid altsetting 0 [ 448.638281][ T1230] usb 3-1: USB disconnect, device number 68 [ 448.874334][T11942] overlayfs: failed to clone lowerpath [ 448.884700][T11944] /dev/rnullb0: Can't open blockdev [ 449.582959][ T1230] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 449.744568][ T1230] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 449.764224][ T1230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.783085][ T1230] usb 4-1: Product: syz [ 449.792945][ T1230] usb 4-1: Manufacturer: syz [ 449.813254][ T1230] usb 4-1: SerialNumber: syz [ 449.842467][ T1230] usb 4-1: config 0 descriptor?? [ 449.926392][ T5880] Bluetooth: hci1: urb ffff88805d9c7800 submission failed (2) [ 450.108038][ T24] usb 4-1: USB disconnect, device number 105 [ 450.837682][T11971] /dev/rnullb0: Can't open blockdev [ 451.170405][T11945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.874811][T11987] FAULT_INJECTION: forcing a failure. [ 451.874811][T11987] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 451.889429][T11987] CPU: 0 UID: 0 PID: 11987 Comm: syz.4.1682 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 451.889459][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.889477][T11987] Call Trace: [ 451.889485][T11987] [ 451.889494][T11987] dump_stack_lvl+0x189/0x250 [ 451.889534][T11987] ? __pfx____ratelimit+0x10/0x10 [ 451.889564][T11987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.889594][T11987] ? __pfx__printk+0x10/0x10 [ 451.889624][T11987] ? __might_fault+0xb0/0x130 [ 451.889657][T11987] should_fail_ex+0x414/0x560 [ 451.889688][T11987] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 451.889718][T11987] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 451.889747][T11987] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 451.889788][T11987] ? __lock_acquire+0xab9/0xd20 [ 451.889817][T11987] ? fpu__alloc_mathframe+0xad/0x130 [ 451.889843][T11987] get_sigframe+0x58d/0x7d0 [ 451.889873][T11987] ? __pfx_get_sigframe+0x10/0x10 [ 451.889902][T11987] ? posixtimer_deliver_signal+0x305/0x410 [ 451.889939][T11987] x64_setup_rt_frame+0x15b/0xd40 [ 451.889969][T11987] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.890000][T11987] ? _raw_spin_unlock_irq+0x2e/0x50 [ 451.890025][T11987] ? get_signal+0x1151/0x1340 [ 451.890058][T11987] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 451.890092][T11987] arch_do_signal_or_restart+0x3d7/0x750 [ 451.890123][T11987] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 451.890166][T11987] ? exit_to_user_mode_loop+0x40/0x110 [ 451.890192][T11987] exit_to_user_mode_loop+0x75/0x110 [ 451.890213][T11987] do_syscall_64+0x2bd/0x3b0 [ 451.890241][T11987] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.890267][T11987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.890287][T11987] ? clear_bhb_loop+0x60/0xb0 [ 451.890311][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.890341][T11987] RIP: 0033:0x7fc94cb8eb67 [ 451.890365][T11987] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 451.890382][T11987] RSP: 002b:00007fc94a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 451.890407][T11987] RAX: 0000000000000113 RBX: 00007fc94cdb5fa0 RCX: 00007fc94cb8eb69 [ 451.890421][T11987] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 451.890433][T11987] RBP: 00007fc94a9f6090 R08: 0000000000000af4 R09: 0000000000000000 [ 451.890445][T11987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.890456][T11987] R13: 0000000000000000 R14: 00007fc94cdb5fa0 R15: 00007fff910ca1b8 [ 451.890487][T11987] [ 452.169631][T11995] /dev/rnullb0: Can't open blockdev [ 452.229875][T12000] /dev/rnullb0: Can't open blockdev [ 452.382955][T12009] /dev/rnullb0: Can't open blockdev [ 452.392182][T12010] /dev/rnullb0: Can't open blockdev [ 452.395501][T12007] input: syz1 as /devices/virtual/input/input32 [ 453.434954][T12031] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 453.697744][ T30] audit: type=1326 audit(1754361911.811:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12041 comm="syz.4.1701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc94cb8eb69 code=0x0 [ 453.727444][T12045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 453.739298][T12045] /dev/rnullb0: Can't open blockdev [ 453.833716][T12048] FAULT_INJECTION: forcing a failure. [ 453.833716][T12048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.849512][T12048] CPU: 0 UID: 0 PID: 12048 Comm: syz.0.1703 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 453.849541][T12048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 453.849553][T12048] Call Trace: [ 453.849561][T12048] [ 453.849570][T12048] dump_stack_lvl+0x189/0x250 [ 453.849605][T12048] ? __pfx____ratelimit+0x10/0x10 [ 453.849635][T12048] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.849664][T12048] ? __pfx__printk+0x10/0x10 [ 453.849696][T12048] ? get_sigframe+0x596/0x7d0 [ 453.849725][T12048] should_fail_ex+0x414/0x560 [ 453.849756][T12048] _copy_to_user+0x31/0xb0 [ 453.849782][T12048] copy_siginfo_to_user+0x22/0xc0 [ 453.849809][T12048] x64_setup_rt_frame+0x776/0xd40 [ 453.849856][T12048] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 453.849898][T12048] arch_do_signal_or_restart+0x3d7/0x750 [ 453.849927][T12048] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 453.849966][T12048] ? exit_to_user_mode_loop+0x40/0x110 [ 453.849992][T12048] exit_to_user_mode_loop+0x75/0x110 [ 453.850014][T12048] do_syscall_64+0x2bd/0x3b0 [ 453.850046][T12048] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.850065][T12048] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 453.850086][T12048] ? clear_bhb_loop+0x60/0xb0 [ 453.850110][T12048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.850130][T12048] RIP: 0033:0x7f555ab8eb67 [ 453.850153][T12048] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 453.850168][T12048] RSP: 002b:00007f555a9f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 453.850190][T12048] RAX: 0000000000000113 RBX: 00007f555adb5fa0 RCX: 00007f555ab8eb69 [ 453.850203][T12048] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 453.850215][T12048] RBP: 00007f555a9f7090 R08: 0000000000000af4 R09: 0000000000000000 [ 453.850227][T12048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.850238][T12048] R13: 0000000000000000 R14: 00007f555adb5fa0 R15: 00007ffe0ec62e68 [ 453.850268][T12048] [ 454.054363][ T24] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 454.190510][ T24] usb 3-1: device descriptor read/64, error -71 [ 454.430420][ T24] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 454.571750][ T24] usb 3-1: device descriptor read/64, error -71 [ 454.680620][ T24] usb usb3-port1: attempt power cycle [ 455.030654][ T24] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 455.060977][ T24] usb 3-1: device descriptor read/8, error -71 [ 455.300387][ T24] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 455.321294][ T24] usb 3-1: device descriptor read/8, error -71 [ 455.470673][ T24] usb usb3-port1: unable to enumerate USB device [ 455.479840][T12076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1712'. [ 456.062185][T12088] FAULT_INJECTION: forcing a failure. [ 456.062185][T12088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.085493][T12088] CPU: 1 UID: 0 PID: 12088 Comm: syz.3.1714 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 456.085542][T12088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.085556][T12088] Call Trace: [ 456.085564][T12088] [ 456.085574][T12088] dump_stack_lvl+0x189/0x250 [ 456.085609][T12088] ? __pfx____ratelimit+0x10/0x10 [ 456.085639][T12088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.085669][T12088] ? __pfx__printk+0x10/0x10 [ 456.085699][T12088] ? __might_fault+0xb0/0x130 [ 456.085731][T12088] should_fail_ex+0x414/0x560 [ 456.085763][T12088] _copy_from_user+0x2d/0xb0 [ 456.085787][T12088] restore_altstack+0x9d/0x4b0 [ 456.085821][T12088] ? freezing_slow_path+0x10d/0x150 [ 456.085851][T12088] ? __pfx_restore_altstack+0x10/0x10 [ 456.085888][T12088] ? _raw_spin_unlock_irq+0x23/0x50 [ 456.085914][T12088] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.085954][T12088] __ia32_sys_rt_sigreturn+0x1ac/0x7b0 [ 456.085984][T12088] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.086013][T12088] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 456.086035][T12088] ? _raw_spin_unlock_irq+0x2e/0x50 [ 456.086065][T12088] ? signal_setup_done+0x230/0x310 [ 456.086095][T12088] ? __lock_acquire+0xab9/0xd20 [ 456.086138][T12088] ? __task_pid_nr_ns+0x28/0x470 [ 456.086175][T12088] ? do_syscall_64+0xbe/0x3b0 [ 456.086210][T12088] do_syscall_64+0xfa/0x3b0 [ 456.086239][T12088] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.086267][T12088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.086287][T12088] ? clear_bhb_loop+0x60/0xb0 [ 456.086311][T12088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.086331][T12088] RIP: 0033:0x7f639412ad69 [ 456.086350][T12088] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 456.086367][T12088] RSP: 002b:00007f6395031a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 456.086390][T12088] RAX: ffffffffffffffda RBX: 00007f63943b5fa0 RCX: 00007f639412ad69 [ 456.086406][T12088] RDX: 00007f6395031a80 RSI: 00007f6395031bb0 RDI: 0000000000000021 [ 456.086419][T12088] RBP: 00007f6395032090 R08: 0000000000000af4 R09: 0000000000000000 [ 456.086432][T12088] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 456.086445][T12088] R13: 0000000000000000 R14: 00007f63943b5fa0 R15: 00007ffefc0a4328 [ 456.086476][T12088] [ 456.323173][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.618627][T12111] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 457.625861][T12111] /dev/rnullb0: Can't open blockdev [ 459.470033][T12127] /dev/rnullb0: Can't open blockdev [ 459.595858][T12129] FAULT_INJECTION: forcing a failure. [ 459.595858][T12129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.609369][T12129] CPU: 1 UID: 0 PID: 12129 Comm: syz.4.1728 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 459.609399][T12129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 459.609413][T12129] Call Trace: [ 459.609421][T12129] [ 459.609429][T12129] dump_stack_lvl+0x189/0x250 [ 459.609465][T12129] ? __pfx____ratelimit+0x10/0x10 [ 459.609495][T12129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.609524][T12129] ? __pfx__printk+0x10/0x10 [ 459.609553][T12129] ? __might_fault+0xb0/0x130 [ 459.609586][T12129] should_fail_ex+0x414/0x560 [ 459.609630][T12129] _copy_from_user+0x2d/0xb0 [ 459.609654][T12129] __ia32_sys_rt_sigreturn+0x228/0x7b0 [ 459.609686][T12129] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 459.609709][T12129] ? _raw_spin_unlock_irq+0x2e/0x50 [ 459.609765][T12129] ? __task_pid_nr_ns+0x28/0x470 [ 459.609802][T12129] ? do_syscall_64+0xbe/0x3b0 [ 459.609835][T12129] do_syscall_64+0xfa/0x3b0 [ 459.609863][T12129] ? lockdep_hardirqs_on+0x9c/0x150 [ 459.609891][T12129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.609911][T12129] ? clear_bhb_loop+0x60/0xb0 [ 459.609936][T12129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.609956][T12129] RIP: 0033:0x7fc94cb2ad69 [ 459.609974][T12129] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 459.609992][T12129] RSP: 002b:00007fc94a9f5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 459.610013][T12129] RAX: ffffffffffffffda RBX: 00007fc94cdb5fa0 RCX: 00007fc94cb2ad69 [ 459.610028][T12129] RDX: 00007fc94a9f5a80 RSI: 00007fc94a9f5bb0 RDI: 0000000000000021 [ 459.610042][T12129] RBP: 00007fc94a9f6090 R08: 0000000000000af4 R09: 0000000000000000 [ 459.610055][T12129] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 459.610067][T12129] R13: 0000000000000000 R14: 00007fc94cdb5fa0 R15: 00007fff910ca1b8 [ 459.610098][T12129] [ 459.644959][T12131] /dev/rnullb0: Can't open blockdev [ 459.648752][ C1] vkms_vblank_simulate: vblank timer overrun [ 459.813763][ C1] vkms_vblank_simulate: vblank timer overrun [ 460.227515][T12138] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1731'. [ 460.518174][T12145] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 460.543594][T12145] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 460.550461][T12145] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 460.572438][T12145] vhci_hcd vhci_hcd.0: Device attached [ 460.702905][ T5927] IPVS: starting estimator thread 0... [ 460.800517][T12157] IPVS: using max 37 ests per chain, 88800 per kthread [ 460.812058][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 460.821700][ T44] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 460.950627][ T926] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 460.980275][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 460.987683][ T44] usb 3-1: config 0 has no interfaces? [ 460.993342][ T44] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 461.002596][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.013770][ T44] usb 3-1: config 0 descriptor?? [ 461.108553][ T926] usb 4-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 461.118226][ T926] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.127244][ T926] usb 4-1: Product: syz [ 461.131759][ T926] usb 4-1: Manufacturer: syz [ 461.136499][ T926] usb 4-1: SerialNumber: syz [ 461.144041][ T926] usb 4-1: config 0 descriptor?? [ 461.221559][T12149] vhci_hcd: cannot find a urb of seqnum 795438957 max seqnum 1 [ 461.238508][ T13] vhci_hcd: stop threads [ 461.243967][ T13] vhci_hcd: release socket [ 461.254793][ T13] vhci_hcd: disconnect device [ 461.264108][ T44] usb 3-1: USB disconnect, device number 73 [ 461.755828][ T926] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 461.767405][ T926] asix 4-1:0.0: probe with driver asix failed with error -71 [ 461.778683][ T926] usb 4-1: USB disconnect, device number 106 [ 461.836924][T12160] /dev/rnullb0: Can't open blockdev [ 461.851583][T12160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1739'. [ 461.862246][T12160] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1739'. [ 461.873339][T12160] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1739'. [ 461.924481][T12162] netlink: 'syz.2.1740': attribute type 46 has an invalid length. [ 461.932607][T12162] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1740'. [ 461.959948][T12162] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1740'. [ 462.333664][ T5927] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 462.507378][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 462.527508][ T5927] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 462.546316][ T5927] usb 3-1: config 0 has no interface number 0 [ 462.560419][ T5927] usb 3-1: config 0 interface 184 has no altsetting 0 [ 462.581370][ T5927] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 462.600382][ T5927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.618856][ T5927] usb 3-1: Product: syz [ 462.623589][ T5927] usb 3-1: Manufacturer: syz [ 462.628236][ T5927] usb 3-1: SerialNumber: syz [ 462.661401][ T5927] usb 3-1: config 0 descriptor?? [ 462.676690][ T5927] smsc75xx v1.0.0 [ 463.225330][T12186] /dev/rnullb0: Can't open blockdev [ 463.275121][ T5927] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 463.286854][ T5927] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 463.342046][T12188] FAULT_INJECTION: forcing a failure. [ 463.342046][T12188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.355749][T12188] CPU: 1 UID: 0 PID: 12188 Comm: syz.3.1744 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 463.355779][T12188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 463.355792][T12188] Call Trace: [ 463.355801][T12188] [ 463.355809][T12188] dump_stack_lvl+0x189/0x250 [ 463.355845][T12188] ? __pfx____ratelimit+0x10/0x10 [ 463.355874][T12188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 463.355904][T12188] ? __pfx__printk+0x10/0x10 [ 463.355934][T12188] ? __might_fault+0xb0/0x130 [ 463.355966][T12188] should_fail_ex+0x414/0x560 [ 463.355996][T12188] fpu__restore_sig+0x1bb/0x1100 [ 463.356023][T12188] ? __lock_acquire+0xab9/0xd20 [ 463.356050][T12188] ? __pfx_fpu__restore_sig+0x10/0x10 [ 463.356162][T12188] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 463.356194][T12188] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 463.356217][T12188] ? _raw_spin_unlock_irq+0x2e/0x50 [ 463.356275][T12188] ? __task_pid_nr_ns+0x28/0x470 [ 463.356311][T12188] ? do_syscall_64+0xbe/0x3b0 [ 463.356345][T12188] do_syscall_64+0xfa/0x3b0 [ 463.356373][T12188] ? lockdep_hardirqs_on+0x9c/0x150 [ 463.356401][T12188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.356422][T12188] ? clear_bhb_loop+0x60/0xb0 [ 463.356447][T12188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.356467][T12188] RIP: 0033:0x7f639418eb67 [ 463.356485][T12188] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 463.356502][T12188] RSP: 002b:00007f6395032038 EFLAGS: 00000246 [ 463.356521][T12188] RAX: 0000000000000113 RBX: 00007f63943b5fa0 RCX: 00007f639418eb69 [ 463.356535][T12188] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 463.356547][T12188] RBP: 00007f6395032090 R08: 0000000000000af4 R09: 0000000000000000 [ 463.356560][T12188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.356573][T12188] R13: 0000000000000000 R14: 00007f63943b5fa0 R15: 00007ffefc0a4328 [ 463.356605][T12188] [ 463.559635][ C1] vkms_vblank_simulate: vblank timer overrun [ 464.158951][T12199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1748'. [ 464.341339][T12203] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1750'. [ 465.267269][T12206] /dev/rnullb0: Can't open blockdev [ 465.626876][T12215] tmpfs: Bad value for 'mpol' [ 465.632853][ T5927] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 465.668171][ T5927] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 465.685579][ T5927] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 465.696817][ T5927] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 465.716579][ T5927] usb 3-1: USB disconnect, device number 74 [ 465.903196][ T24] vhci_hcd: vhci_device speed not set [ 466.060304][ T5927] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 466.073400][T12223] FAULT_INJECTION: forcing a failure. [ 466.073400][T12223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.087073][T12223] CPU: 0 UID: 0 PID: 12223 Comm: syz.3.1756 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 466.087095][T12223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 466.087104][T12223] Call Trace: [ 466.087110][T12223] [ 466.087116][T12223] dump_stack_lvl+0x189/0x250 [ 466.087142][T12223] ? __pfx____ratelimit+0x10/0x10 [ 466.087163][T12223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.087184][T12223] ? __pfx__printk+0x10/0x10 [ 466.087206][T12223] ? __might_fault+0xb0/0x130 [ 466.087228][T12223] should_fail_ex+0x414/0x560 [ 466.087250][T12223] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 466.087271][T12223] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 466.087292][T12223] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 466.087321][T12223] ? __lock_acquire+0xab9/0xd20 [ 466.087341][T12223] ? fpu__alloc_mathframe+0xad/0x130 [ 466.087359][T12223] get_sigframe+0x58d/0x7d0 [ 466.087380][T12223] ? __pfx_get_sigframe+0x10/0x10 [ 466.087400][T12223] ? posixtimer_deliver_signal+0x305/0x410 [ 466.087426][T12223] x64_setup_rt_frame+0x15b/0xd40 [ 466.087447][T12223] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.087468][T12223] ? _raw_spin_unlock_irq+0x2e/0x50 [ 466.087487][T12223] ? get_signal+0x1151/0x1340 [ 466.087509][T12223] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 466.087534][T12223] arch_do_signal_or_restart+0x3d7/0x750 [ 466.087555][T12223] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 466.087583][T12223] ? exit_to_user_mode_loop+0x40/0x110 [ 466.087601][T12223] exit_to_user_mode_loop+0x75/0x110 [ 466.087617][T12223] do_syscall_64+0x2bd/0x3b0 [ 466.087637][T12223] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.087657][T12223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.087670][T12223] ? clear_bhb_loop+0x60/0xb0 [ 466.087688][T12223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.087702][T12223] RIP: 0033:0x7f639418eb67 [ 466.087715][T12223] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 466.087727][T12223] RSP: 002b:00007f6395032038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 466.087743][T12223] RAX: 0000000000000113 RBX: 00007f63943b5fa0 RCX: 00007f639418eb69 [ 466.087754][T12223] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 466.087762][T12223] RBP: 00007f6395032090 R08: 0000000000000af4 R09: 0000000000000000 [ 466.087771][T12223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.087786][T12223] R13: 0000000000000000 R14: 00007f63943b5fa0 R15: 00007ffefc0a4328 [ 466.087808][T12223] [ 466.432646][ T5927] usb 3-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 466.444509][ T5927] usb 3-1: config 36 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 466.456989][ T5927] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 466.466318][ T5927] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 466.474960][ T5927] usb 3-1: Manufacturer: syz [ 466.479587][ T5927] usb 3-1: SerialNumber: syz [ 466.702708][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1754'. [ 466.712361][ T5927] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 466.716956][ T5927] usb 3-1: USB disconnect, device number 75 [ 467.486424][T12250] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 54a2, magic 54 != 6b] [ 468.067349][T12266] /dev/rnullb0: Can't open blockdev [ 468.249077][T12269] /dev/rnullb0: Can't open blockdev [ 468.483769][T12278] /dev/rnullb0: Can't open blockdev [ 468.695307][ T30] audit: type=1400 audit(1754361926.811:10): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="(" pid=12287 comm="syz.4.1778" [ 468.821105][ T24] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 468.843432][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1779'. [ 469.900240][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 469.908190][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 470.256196][ T24] usb 4-1: config 254 has an invalid interface number: 7 but max is 0 [ 470.266302][ T24] usb 4-1: config 254 has no interface number 0 [ 470.361839][ T24] usb 4-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=e9.57 [ 470.390380][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.400253][ T24] usb 4-1: Product: syz [ 470.404557][ T24] usb 4-1: Manufacturer: syz [ 470.409203][ T24] usb 4-1: SerialNumber: syz [ 470.605238][T12313] overlayfs: unescaped trailing colons in lowerdir mount option. [ 470.665308][T12281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.694897][T12281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.715392][ T24] usb 4-1: Expected 3 endpoints, found: 0 [ 470.745409][ T24] usb 4-1: USB disconnect, device number 107 [ 472.325170][T12341] /dev/rnullb0: Can't open blockdev [ 472.331395][ T5872] IPVS: starting estimator thread 0... [ 472.429948][T12349] /dev/rnullb0: Can't open blockdev [ 472.430545][T12344] IPVS: using max 27 ests per chain, 64800 per kthread [ 472.432489][T12349] /dev/rnullb0: Can't open blockdev [ 472.433126][T12349] /dev/rnullb0: Can't open blockdev [ 472.439240][T12349] /dev/rnullb0: Can't open blockdev [ 472.476908][T12349] /dev/rnullb0: Can't open blockdev [ 472.487954][T12349] /dev/rnullb0: Can't open blockdev [ 472.494602][T12349] /dev/rnullb0: Can't open blockdev [ 472.507560][T12349] /dev/rnullb0: Can't open blockdev [ 472.516790][T12349] /dev/rnullb0: Can't open blockdev [ 472.526670][T12349] /dev/rnullb0: Can't open blockdev [ 472.533735][T12349] /dev/rnullb0: Can't open blockdev [ 472.544713][T12349] /dev/rnullb0: Can't open blockdev [ 472.553341][T12349] /dev/rnullb0: Can't open blockdev [ 472.559502][T12349] /dev/rnullb0: Can't open blockdev [ 472.569803][T12349] /dev/rnullb0: Can't open blockdev [ 472.577359][T12349] /dev/rnullb0: Can't open blockdev [ 472.587957][T12349] /dev/rnullb0: Can't open blockdev [ 472.604672][T12349] /dev/rnullb0: Can't open blockdev [ 472.618712][T12349] /dev/rnullb0: Can't open blockdev [ 472.635755][T12349] /dev/rnullb0: Can't open blockdev [ 472.658006][T12349] /dev/rnullb0: Can't open blockdev [ 472.675641][T12349] /dev/rnullb0: Can't open blockdev [ 472.691294][T12349] /dev/rnullb0: Can't open blockdev [ 472.699660][T12349] /dev/rnullb0: Can't open blockdev [ 472.708968][T12349] /dev/rnullb0: Can't open blockdev [ 472.715983][T12349] /dev/rnullb0: Can't open blockdev [ 472.730069][T12349] /dev/rnullb0: Can't open blockdev [ 472.737372][T12349] /dev/rnullb0: Can't open blockdev [ 472.747639][T12349] /dev/rnullb0: Can't open blockdev [ 472.754335][T12349] /dev/rnullb0: Can't open blockdev [ 472.766375][T12349] /dev/rnullb0: Can't open blockdev [ 472.773301][T12349] /dev/rnullb0: Can't open blockdev [ 472.779515][T12349] /dev/rnullb0: Can't open blockdev [ 472.922979][T12368] FAULT_INJECTION: forcing a failure. [ 472.922979][T12368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 472.936450][T12368] CPU: 1 UID: 0 PID: 12368 Comm: syz.4.1800 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 472.936479][T12368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.936492][T12368] Call Trace: [ 472.936501][T12368] [ 472.936509][T12368] dump_stack_lvl+0x189/0x250 [ 472.936541][T12368] ? __pfx____ratelimit+0x10/0x10 [ 472.936563][T12368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.936584][T12368] ? __pfx__printk+0x10/0x10 [ 472.936606][T12368] ? __might_fault+0xb0/0x130 [ 472.936629][T12368] should_fail_ex+0x414/0x560 [ 472.936652][T12368] _copy_from_user+0x2d/0xb0 [ 472.936669][T12368] __ia32_sys_rt_sigreturn+0x228/0x7b0 [ 472.936693][T12368] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 472.936709][T12368] ? _raw_spin_unlock_irq+0x2e/0x50 [ 472.936749][T12368] ? __task_pid_nr_ns+0x28/0x470 [ 472.936775][T12368] ? do_syscall_64+0xbe/0x3b0 [ 472.936799][T12368] do_syscall_64+0xfa/0x3b0 [ 472.936820][T12368] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.936840][T12368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.936854][T12368] ? clear_bhb_loop+0x60/0xb0 [ 472.936871][T12368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.936885][T12368] RIP: 0033:0x7fc94cb2ad69 [ 472.936898][T12368] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 472.936916][T12368] RSP: 002b:00007fc94a9f5a80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 472.936931][T12368] RAX: ffffffffffffffda RBX: 00007fc94cdb5fa0 RCX: 00007fc94cb2ad69 [ 472.936942][T12368] RDX: 00007fc94a9f5a80 RSI: 00007fc94a9f5bb0 RDI: 0000000000000021 [ 472.936952][T12368] RBP: 00007fc94a9f6090 R08: 0000000000000af4 R09: 0000000000000000 [ 472.936961][T12368] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 472.936969][T12368] R13: 0000000000000000 R14: 00007fc94cdb5fa0 R15: 00007fff910ca1b8 [ 472.936991][T12368] [ 473.128019][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.283243][T12370] /dev/rnullb0: Can't open blockdev [ 473.333540][T12372] /dev/rnullb0: Can't open blockdev [ 473.781719][T12380] /dev/rnullb0: Can't open blockdev [ 473.912259][T12387] netlink: 'syz.4.1808': attribute type 5 has an invalid length. [ 473.924358][T12387] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1808'. [ 474.139936][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b9cb000: rx timeout, send abort [ 474.148745][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b9cb000: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 474.163385][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807b9ca000: rx timeout, send abort [ 474.172167][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88807b9ca000: 0x2fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 474.398203][T12405] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1813'. [ 474.408554][T12404] FAULT_INJECTION: forcing a failure. [ 474.408554][T12404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.427178][T12405] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 474.449347][T12404] CPU: 1 UID: 0 PID: 12404 Comm: syz.3.1814 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 474.449376][T12404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 474.449388][T12404] Call Trace: [ 474.449396][T12404] [ 474.449404][T12404] dump_stack_lvl+0x189/0x250 [ 474.449435][T12404] ? __pfx____ratelimit+0x10/0x10 [ 474.449465][T12404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.449493][T12404] ? __pfx__printk+0x10/0x10 [ 474.449522][T12404] ? __might_fault+0xb0/0x130 [ 474.449554][T12404] should_fail_ex+0x414/0x560 [ 474.449586][T12404] fpu__restore_sig+0x1bb/0x1100 [ 474.449614][T12404] ? __lock_acquire+0xab9/0xd20 [ 474.449639][T12404] ? __pfx_fpu__restore_sig+0x10/0x10 [ 474.449693][T12404] __ia32_sys_rt_sigreturn+0x661/0x7b0 [ 474.449725][T12404] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 474.449748][T12404] ? _raw_spin_unlock_irq+0x2e/0x50 [ 474.449805][T12404] ? __task_pid_nr_ns+0x28/0x470 [ 474.449842][T12404] ? do_syscall_64+0xbe/0x3b0 [ 474.449876][T12404] do_syscall_64+0xfa/0x3b0 [ 474.449905][T12404] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.449933][T12404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.449953][T12404] ? clear_bhb_loop+0x60/0xb0 [ 474.449988][T12404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.450008][T12404] RIP: 0033:0x7f639418eb67 [ 474.450027][T12404] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 474.450044][T12404] RSP: 002b:00007f6395032038 EFLAGS: 00000246 [ 474.450062][T12404] RAX: 0000000000000113 RBX: 00007f63943b5fa0 RCX: 00007f639418eb69 [ 474.450077][T12404] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 474.450089][T12404] RBP: 00007f6395032090 R08: 0000000000000af4 R09: 0000000000000000 [ 474.450101][T12404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 474.450113][T12404] R13: 0000000000000000 R14: 00007f63943b5fa0 R15: 00007ffefc0a4328 [ 474.450149][T12404] [ 474.651214][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.397912][T12421] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 475.406429][T12421] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 475.419721][T12421] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 475.429492][T12421] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 475.610446][ T5927] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 476.637992][T12449] FAULT_INJECTION: forcing a failure. [ 476.637992][T12449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.653682][T12449] CPU: 0 UID: 0 PID: 12449 Comm: syz.0.1825 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 476.653712][T12449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 476.653725][T12449] Call Trace: [ 476.653734][T12449] [ 476.653742][T12449] dump_stack_lvl+0x189/0x250 [ 476.653791][T12449] ? __pfx____ratelimit+0x10/0x10 [ 476.653821][T12449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 476.653850][T12449] ? __pfx__printk+0x10/0x10 [ 476.653880][T12449] ? __might_fault+0xb0/0x130 [ 476.653918][T12449] should_fail_ex+0x414/0x560 [ 476.653950][T12449] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 476.653980][T12449] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 476.654010][T12449] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 476.654050][T12449] ? __lock_acquire+0xab9/0xd20 [ 476.654079][T12449] ? fpu__alloc_mathframe+0xad/0x130 [ 476.654105][T12449] get_sigframe+0x58d/0x7d0 [ 476.654135][T12449] ? __pfx_get_sigframe+0x10/0x10 [ 476.654163][T12449] ? posixtimer_deliver_signal+0x305/0x410 [ 476.654200][T12449] x64_setup_rt_frame+0x15b/0xd40 [ 476.654230][T12449] ? lockdep_hardirqs_on+0x9c/0x150 [ 476.654258][T12449] ? _raw_spin_unlock_irq+0x2e/0x50 [ 476.654282][T12449] ? get_signal+0x1151/0x1340 [ 476.654311][T12449] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 476.654344][T12449] arch_do_signal_or_restart+0x3d7/0x750 [ 476.654372][T12449] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 476.654411][T12449] ? exit_to_user_mode_loop+0x40/0x110 [ 476.654436][T12449] exit_to_user_mode_loop+0x75/0x110 [ 476.654458][T12449] do_syscall_64+0x2bd/0x3b0 [ 476.654488][T12449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.654507][T12449] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 476.654528][T12449] ? clear_bhb_loop+0x60/0xb0 [ 476.654552][T12449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.654572][T12449] RIP: 0033:0x7f555ab8eb67 [ 476.654590][T12449] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 476.654608][T12449] RSP: 002b:00007f555a9f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 476.654629][T12449] RAX: 0000000000000113 RBX: 00007f555adb5fa0 RCX: 00007f555ab8eb69 [ 476.654643][T12449] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 476.654655][T12449] RBP: 00007f555a9f7090 R08: 0000000000000af4 R09: 0000000000000000 [ 476.654667][T12449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 476.654679][T12449] R13: 0000000000000000 R14: 00007f555adb5fa0 R15: 00007ffe0ec62e68 [ 476.654711][T12449] [ 477.399625][T12454] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 477.482812][T12454] sp0: Synchronizing with TNC [ 477.504006][ C0] Oops: divide error: 0000 [#1] SMP KASAN PTI [ 477.510132][ C0] CPU: 0 UID: 0 PID: 12454 Comm: syz.4.1827 Not tainted 6.16.0-next-20250804-syzkaller #0 PREEMPT(full) [ 477.521457][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 477.531792][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 [ 477.538233][ C0] Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 1b 16 cd f8 48 bb 00 00 00 [ 477.558200][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010046 [ 477.564305][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 477.572329][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 477.580311][ C0] RBP: ffff88807ef8c400 R08: dffffc0000000000 R09: 0000000000000000 [ 477.588467][ C0] R10: dffffc0000000000 R11: ffffed100d4e8001 R12: ffff88807ef8c480 [ 477.596591][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88807ef8c42c [ 477.604686][ C0] FS: 00007fc94a9f66c0(0000) GS:ffff8881257de000(0000) knlGS:0000000000000000 [ 477.613728][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.620322][ C0] CR2: 00007f6394ee56c0 CR3: 0000000056ef0000 CR4: 00000000003526f0 [ 477.628303][ C0] Call Trace: [ 477.631695][ C0] [ 477.634746][ C0] comedi_buf_write_samples+0x373/0x5a0 [ 477.640429][ C0] parport_interrupt+0xf3/0x150 [ 477.645385][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 477.650857][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 477.656777][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 477.662261][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 477.667826][ C0] __handle_irq_event_percpu+0x28c/0x980 [ 477.673523][ C0] ? __pfx___handle_irq_event_percpu+0x10/0x10 [ 477.679698][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 477.684938][ C0] handle_irq_event+0x8b/0x1e0 [ 477.689728][ C0] ? handle_edge_irq+0x229/0xa10 [ 477.694756][ C0] handle_edge_irq+0x23b/0xa10 [ 477.699534][ C0] __common_interrupt+0x141/0x1f0 [ 477.704568][ C0] common_interrupt+0xb6/0xe0 [ 477.709253][ C0] [ 477.712278][ C0] [ 477.715226][ C0] asm_common_interrupt+0x26/0x40 [ 477.720344][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xa8/0x110 [ 477.727040][ C0] Code: 74 05 e8 eb 40 43 f6 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 4f f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e3 e0 0b f6 65 8b 05 5c b4 5f 07 85 c0 74 40 48 c7 04 24 0e 36 [ 477.746836][ C0] RSP: 0018:ffffc900040e7c00 EFLAGS: 00000206 [ 477.753171][ C0] RAX: c22faf9c815bf800 RBX: 0000000000000a02 RCX: c22faf9c815bf800 [ 477.761378][ C0] RDX: 0000000000000006 RSI: ffffffff8dc916eb RDI: 0000000000000001 [ 477.769383][ C0] RBP: ffffc900040e7c90 R08: ffffffff8fe4b237 R09: 1ffffffff1fc9646 [ 477.777448][ C0] R10: dffffc0000000000 R11: fffffbfff1fc9647 R12: dffffc0000000000 [ 477.785422][ C0] R13: dffffc0000000000 R14: ffffffff9a22d140 R15: 1ffff9200081cf80 [ 477.793598][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 477.799941][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 477.805851][ C0] uart_port_unlock_deref+0x111/0x2f0 [ 477.811249][ C0] uart_write+0xe8/0x130 [ 477.815519][ C0] sixpack_open+0x6cb/0x9c0 [ 477.820044][ C0] ? __pfx_sixpack_open+0x10/0x10 [ 477.825080][ C0] ? up_write+0x1c4/0x420 [ 477.829527][ C0] tty_ldisc_open+0xa1/0x100 [ 477.834235][ C0] tty_set_ldisc+0x373/0x560 [ 477.838852][ C0] tty_ioctl+0xc38/0xde0 [ 477.843111][ C0] ? __pfx_tty_ioctl+0x10/0x10 [ 477.847977][ C0] __se_sys_ioctl+0xf9/0x170 [ 477.852586][ C0] do_syscall_64+0xfa/0x3b0 [ 477.857377][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.862604][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.868869][ C0] ? clear_bhb_loop+0x60/0xb0 [ 477.873668][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.879683][ C0] RIP: 0033:0x7fc94cb8eb69 [ 477.884195][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.904245][ C0] RSP: 002b:00007fc94a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 477.912702][ C0] RAX: ffffffffffffffda RBX: 00007fc94cdb5fa0 RCX: 00007fc94cb8eb69 [ 477.920865][ C0] RDX: 0000200000000240 RSI: 0000000000005423 RDI: 0000000000000003 [ 477.928881][ C0] RBP: 00007fc94cc11df1 R08: 0000000000000000 R09: 0000000000000000 [ 477.937074][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.945065][ C0] R13: 0000000000000000 R14: 00007fc94cdb5fa0 R15: 00007fff910ca1b8 [ 477.953164][ C0] [ 477.956236][ C0] Modules linked in: [ 477.960149][ C0] ---[ end trace 0000000000000000 ]--- [ 477.965615][ C0] RIP: 0010:comedi_inc_scan_progress+0x1a4/0x430 [ 477.972093][ C0] Code: b6 0c 19 84 c9 0f 85 bd 01 00 00 03 45 2c 4c 8d a5 80 00 00 00 4c 89 e1 48 c1 e9 03 0f b6 0c 19 84 c9 0f 85 cc 01 00 00 31 d2 <41> f7 34 24 41 89 17 45 89 ec eb 0f e8 1b 16 cd f8 48 bb 00 00 00 [ 477.991889][ C0] RSP: 0018:ffffc90000007c80 EFLAGS: 00010046 [ 477.998060][ C0] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000000000 [ 478.006094][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.014072][ C0] RBP: ffff88807ef8c400 R08: dffffc0000000000 R09: 0000000000000000 [ 478.022312][ C0] R10: dffffc0000000000 R11: ffffed100d4e8001 R12: ffff88807ef8c480 [ 478.030316][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: ffff88807ef8c42c [ 478.038302][ C0] FS: 00007fc94a9f66c0(0000) GS:ffff8881257de000(0000) knlGS:0000000000000000 [ 478.047344][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 478.054055][ C0] CR2: 00007f6394ee56c0 CR3: 0000000056ef0000 CR4: 00000000003526f0 [ 478.062220][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 478.069911][ C0] Kernel Offset: disabled [ 478.074243][ C0] Rebooting in 86400 seconds..