last executing test programs: 3.576153978s ago: executing program 0 (id=237): ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4) sync_file_range(r0, 0x1, 0x4, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 3.570808213s ago: executing program 0 (id=238): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) prctl$PR_MCE_KILL(0x21, 0x1, 0x1000000) recvfrom(r1, 0x0, 0x0, 0x2001, 0x0, 0x0) ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000080)={0xe, @output={0x0, 0x1, {0x4, 0x9}, 0x0, 0x8001}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x80, 0x0) mq_timedsend(r2, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r2, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r4 = socket$inet6(0xa, 0x80002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003c80)={'ip6gre0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="d4000000020601080000000000000000000000000c0007800800084000000000050005c0f1e4b13d36d55080000a000000050001000700000005000408000000000800020773797a31000000000d0000046c6973743a73657400000000"], 0x54}}, 0x40005) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000180)=0xe3b) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) shutdown(r1, 0x1) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000), 0x4) 2.987724262s ago: executing program 3 (id=245): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x2a01, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000340)={0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2d9}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000d000000080026000816"], 0x40}}, 0x0) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000000c0)="76d151c86f0601b5702c045b79660b53ab6f2d6c", 0x14) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x9) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x5, 0x20c001) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000180)={0x23, 0x1, 0xb, 0x1, 0x0, 0x9, 0x0}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000280)={r10, 0x40, 0xa4, 0x7, 0x732, 0x9}, &(0x7f0000000400)=0x14) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000280)=0x4) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r13, 0x5000aea5, &(0x7f0000000080)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000) 2.85576743s ago: executing program 3 (id=247): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000000b14a7"], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(r2, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='/\x00', 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000200)={0x3, r4}) bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x80, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x100e}, @CTA_SEQ_ADJ_REPLY={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0xe6ba7615268e7f7}]}]}, 0x80}}, 0x0) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001740)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="2600330009000000ffffffffff2a08021100000050501050505057f9040009c0010009005c0200000800570002b1"], 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x400}, {r7, 0xa504}, {r3, 0x4aa}], 0x3, &(0x7f0000000140)={r8, r9+10000000}, &(0x7f0000000180), 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00006a2000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00004a6000/0x2000)=nil) 2.683331101s ago: executing program 0 (id=249): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x80000000) r1 = socket$rds(0x15, 0x5, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$char_usb(r2, &(0x7f00000008c0)='-', 0x1) write$rfkill(r2, &(0x7f0000000080)={0x6350, 0x6, 0x3, 0x1, 0x1}, 0x8) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000580)={&(0x7f0000002200)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_fadd={0x58, 0x114, 0x8, {{0xd, 0x629}, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x1a1, 0xf, 0x9, 0x101, 0x1, 0x4, 0xd}}], 0x58, 0x40000}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 2.475902213s ago: executing program 0 (id=251): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x8d, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x7, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x12, r1, 0x45809000) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r2, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = dup(r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) write$UHID_INPUT(r4, &(0x7f00000010c0)={0xc, {"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", 0xfffffffffffffd8f}}, 0x1006) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000139000/0xf000)=nil) 2.47337135s ago: executing program 3 (id=252): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 2.364752061s ago: executing program 1 (id=254): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES32=r0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) (async) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$HIDIOCGCOLLECTIONINDEX(r2, 0x40184810, &(0x7f0000000200)={0x3, 0xffffffff, 0x0, 0x8001, 0x6, 0x8a0}) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x210801, 0x1}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) listen(r3, 0x1) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) symlinkat(&(0x7f0000000100)='./cgroup\x00', 0xffffffffffffffff, &(0x7f0000000140)='./cgroup\x00') (async) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r5, 0xae03, 0x42) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) mount$9p_fd(0x0, 0x0, 0x0, 0x120004, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r3) sendmsg$NL80211_CMD_SET_POWER_SAVE(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r6, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004000}, 0x2000c004) ioctl$KVM_GET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee2, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x310, 0x34, 0x20, 0xd, 0x40, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x5, 0x0, 0x8, [{{0x9, 0x4, 0x5c, 0xa, 0x0, 0x3, 0x90, 0xfd, 0x2}}]}}]}}, &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0}) socket(0x11, 0x2, 0x401) 2.364278971s ago: executing program 3 (id=255): mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000280)='aio\x00', 0x24080a2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee01}}, './cgroup\x00'}) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000002c0)=0x0) setuid(r3) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040), 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) sendmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = accept4$unix(r5, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/246, 0xf6, 0xf6, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_FPU(r4, 0x41a0ae8d, &(0x7f00000000c0)={'\x00', 0xc, 0x9, 0x8, 0x0, 0x2, 0xf000, 0xeeee8000, '\x00', 0x3}) 1.731781495s ago: executing program 1 (id=259): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x3e9901, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r3 = dup(r2) open(&(0x7f00000001c0)='./file0\x00', 0x100, 0x4c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) ioctl$KVM_SET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) writev(r4, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, r3, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ptrace(0x4208, 0x0) read$FUSE(r5, &(0x7f0000001240)={0x2020}, 0x2020) tkill(0x0, 0x12) 1.684810042s ago: executing program 1 (id=261): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0x1, 0x1}) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0xfe2f) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0x1, 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_RESET(r2, 0x4141, 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) (async) 1.510775104s ago: executing program 0 (id=264): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 1.306073882s ago: executing program 0 (id=267): syz_usb_connect(0x2, 0x36, &(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0], 0x0) mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='devtmpfs\x00', 0xc400, 0x0) 1.305719972s ago: executing program 3 (id=268): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)={0x24, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1b, 0x0, 0x1, [@typed={0x4, 0x0, 0x0, 0x0, @binary}]}]}, 0x24}], 0x1}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_IOCTL(r4, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x5, 0x0, 0x5, 0x1}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x7, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x2, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc9, 0xf9, 0x7fff, 0x78, 0x6e7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x2], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000006, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0x8, 0x7, 0x953a, 0x5, 0x6, 0x4, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x3, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0x400, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) epoll_pwait(r4, &(0x7f0000000080)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x9, 0x4df52c72, &(0x7f0000000000)={[0x8]}, 0x8) 1.175692468s ago: executing program 3 (id=270): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000b5403340861a22753635010203010e02120001000000000904000000e4d62400"], 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, 0x0, &(0x7f0000000080)) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000180)={0x40, 0x3, 0x2, '#\t'}, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000008500)={0x9, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e24, @remote}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f0000000280)={0x9, {{0x2, 0x4e22, @multicast2}}}, 0x90) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r7 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) r8 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r9, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000100)={0x0, 0x11, r10, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r8, 0xc06864a2, &(0x7f0000000fc0)={0x0, 0x0, r10, r11, 0x9c, 0x6, 0x5f, 0xfcde, {0x7, 0x800, 0x81, 0x7, 0x2, 0xbc2, 0xd, 0x8, 0x7, 0x7, 0xd, 0x0, 0x7fff, 0x80000000, "a3f1d6cb5d9bbcf55d6e4889c09b0237d47a019646535f7a5b5fbc1d00"}}) syz_usb_control_io$cdc_ncm(r7, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="7c2f0aec9d222ea5ee20e6b25cf191669d6293d87d67cbc22a8dca55b40c545d1439d9ab278a279afd807e25e3c9aacca664836fec718e063c9b06cd66442b6407fec5c3e5cd9d0f1001c90a801c4fadce8e13a5e0209edf5c5693acccefa24d4f5a2ef062e701d054d19e9e6340a1651e05fd87b70942c679234426f9b19c0723563d0e38ec970aec02a6154ab61081aae03050d00192bd9d59977bb2f1297a7cd0571a0dfc5688a8e3d5f4a226b7e397b43c186967c74821bc70005059ab5606c70045a6a9915285c8215b9abd839f50530dde8ad500d70d8f7c1a0093293e6d632f8e8939f3199ab4ec92caed14c26975b57578c8ea666a2e4253ca9516f3c07bdc5ad27c2ff29e1569795f9dfbd1b92919432e423ff4f9a35b77419d6a8540fc9431ca78e05e278bef5a21b1423a3c9f7c1e2bd16a1ecdfde51cfa4aef38e6afb92770bcefb5fcb277ccede1ddc8647db538661b3d10effa1b6f705ef1b74e5bea20b4f98421b7b4be4c5c6be101f5503a4ecaffae335ef565920d678ed5b41031122b21f9d9b7f270b95f94624a7ddc657c83d3722a8d01f321fd7f685fc74d61a4e1914dda6df4be639c4910c56a84c24a41b9ef07eee4083dd9a30a53a58b50186c12180da4186fe5845b6b325fd112378a82d53bee449bc9d4c2d4331a1323c69c99c778560fc2142d138b23000c5403156cd8223f07a73811ab5b81e287bd6ad95c2fefce002ac77a1ac74d5e868870f29277da69987652b0055b3072efab2fe56fe0fe287f7d51aa772b2e3ae77954a938be2792442e1ab2e6fc078d821c70222142568b6db9609f1db23e8a4a460b9fbbeb48469e6bf0acffd85af86e69535a95c02c30d5ad776002c48e19e134688780bbafaf81097358b0c8f63bcefb61d8f29aacb3dc1a485bb7343539387f1e83b9283674bdc0d7fe8bf86948439f4b4a20e2832c560c743e4c2d37eddbf341c47f71a93101a08a533e96601f98752531428944d88c836c7d7a082859a3120721afd99130e83f689720638e889ddf4a23228dc23e955ae67fe5447e134b63f4c72e5664d2ed8a7406568e08f3582661006cf5800615fc4a5ec88ef3361ea027d2a1a550ac3e017a212570cd145fcc2e1984e4fca28bf4110f33a5ac847fcd3605e546ee8ea49a7de5d4b599926a76028e9d5259db7fd6f908c7a8657d42f895380c88ac85cdc183f6b61172b966a41888ceae895eaf18cb8da8d1918411b297959a8abacf8c4cee15ca87048aae13ffe068dee23a9edc2b259aeb0595b7ed2633431067a999f915934aef1be5f360f0db726f24e8eb89adb8db535de6fd7c06678831d17e47c67cd22f047b92d8fba83a49a1285def4dfdf634408cb05ae73f24df76e7393d1e90d40c50bd388bb53e281b889084a1a19efdfa6be16aed1a621d964c1ac332b65765e7440ccc75ef44851409c458905127bd161bf98cb6a3681af073e3650f52d5ee691c347e86360c3aebae4a691b2485d68c57d09e269656b1efbfd3413d54c8d3e467c0bfa84669d0cc5e9cfd50b9c79171f8b6a5e66e8c6f66c0916083b8e8a464498aed3badd2f267fb56adb0953b9ebd0370f941d796abffa81722d502c8d1e9d844802f4197067598b2394dddf76641f9c2ec0403bd379e8f712668b98e1121a27888b227104875999cd562fa9833458879652bfeffabc6bbb5c354dc36ad91354ccb5050d69b28b562a72bbf277f96bd1d5dc6408329f6f850a96762a6aebf2a7b5bacbbc032be8b29c453867a47094289f6b8aa38f85051fc4d4478a02af664b3250a396583001a7971cfa6f5a4931e32e7bfb7b4c3f7be3bc5f91ba46554773b9102dbd4aba4344c6fe87bd050f79175d7918d57bc137cde33a884bba63a1adf6e7e71ba783eb1fe689b23d3ad18627b0b229c0d982631308a88c4bf1e2079eb0fcc486ef864e7c6a75cce17b133577fa88d62807398b8a795ae2bb7610f8b17cfc56ff11b8ffc4aa316e612fc76955dc44e66467c4d632657d4cac3cc1bda8c2c6207915a89f76bf1fd61c156ba8720bb8048601cd1221f6996e6f04e44b842e00a4487cd59501a65db1f6ade7f22ba5d7ee8e67125e284eef41ad5f2069a48cc71c621eb08d832ef8592874199c5c03249d3ee03422535c2be6919c43724277d56a885ab67753ae8d7f1317b7e534bb1a111a0edb5d298c1374c7824a80fb00ae268f2fd641f1b2a12f712d9a5e027957941ffb4218c6d8a8e7950dca0b4c9018dcfb67244a30080d54781b5111c85cd89e08f51c55975301ff389baf2242ef0fb662122a2eb89c1dcaf82d6391906a1b235635e6c484cd5fa32bc80ce68d505df9a9c6b21e222c3b9330243b8e02a3e661c20e0da633d88f7debaf6643654050ab73613dbea6176109b5c35c4d280739aee77f81a1b58efa9e606259f45745b69523bc81828cfcfffd185ad51b4b183b7a1ef86757172ef67a4f153b7c3a3e99f15ef5b09d81cd1ccec8016ecc9864ccf2efdbf7a79ff9ba814a4a9e3124d735a591c649cdefa98bd569c5f4db18a537c55544c671d398ec50d9fc2b1ca1f9b0278acc9a21779c3815fcb0ee1c66c774b6591e8f6b5c9828db8a5d104213cd4513974be404a50c11009c15a1e2aaa81abc6c706c341f145f975717819c4429007ee648f6c3fca45d714981cd9240beea8b02a19e0ddb083dc8115d64d75ab087c87e00792b8b83551ca82b311444067923656b0e70015ca4775da3d5e984ea8af20955f92d9cbd9acca8cd258df4276a118505d440b74e93bd0b97caeb0e24dbb09e7dbdfe0c3b4bdc0983a7d1eee02bee9c5d381bfbd7dfbb6329539698477f3a8bc7f82c01588d679a167e91487f150e5923cbf3030f09c8fb89cf178f5e953618887b7e56afdfd6a6b5e3003cecdbcba76ed86bc48907fada5e0178f9194970323ae9c818215ae2feb1ee56b289d83e8e9d2ab27056ede5651d2a92a93dd3d6c519ac128a44f1414f93e96c55485a73f3cb7e4750d0f2a2acef87e46a7012a30712f7cfe2ac9372af0efcb6475e3a1a8db1961040002915038412b892eee569aae8f38fb07c27aef5bbab7750a244a7c3b0193004246afa1a72368db45cd3649a89b54e880ea12c92beb59e366d7893f725bb8080aebcd35857ff686d03eddc33af248cecc5198bda6f395b55294821f6853232cb5bde67a4166a35224cd9c5b54e6b5a38376b1fdfaeb7563a8ea93148997e2bf490c67916f059e3e1992a986f96d2720a6418cf8c57d6e72eb90d7ca59a3a20fd414e404900aa4a45f381ff7828e15558b4862055bf795c9134836878999200e71e9ba9f83a2e28955c7b37244f3abc8f9d15a5e6c3d9b2f76620b3b2bcb13c0c44c63b9bddd51e339aedfc3a4d995df0eca66c6891ca9099923577e7cd84cb58cf0d6d6eda2baeb00775c4e717e31dbc881615d5f1a0898017954e882a444017e947b1fc05fdcf4495c5dbe3b7b4ce4c1535070fbc64d135df094fe4f6cdd452e7a5f844145af9b746dc5eecede9a834de1ff65525ea3017478ee08dc1bcff852a9d2ad94f46840bdcf1b6226fb0cdb620787692e52aae3b9b703f30b3ce6ca6dcaeb8b3a5884c30c570b29741c70ad99f5d7f463c7e5e1b4bbaafae33e789c0ae1114674732d50c0a799bfa6388365c392d47c3e0d2992a61d21e4ca034ed3d386fe959a94601a4007f1f2060b59359747635b076db7697ba5ad45af0423dbb9966113fa5eb59118cac394c2e2b17ebec1b7ce18ede120b1f56956b12a95de708e780ba7a1ac3a9e31267a2c195acfcb3b20c2f5d20de288846045211da53649a6d8b23008449b763fe6a58243cde95093a9755e5725307af09c997520f159f4ec7d1e687a0cf5148721062ecc6b080f65a550730da9257f1515a10830e29b85de3138a77ee8d2f0cb129c971417d7bbcd982d684b697364084c5764bafb4e2211a82e8c962eefb1f000ac8f5f2567b580931676943cea9b95977d842c247a98672b5c73594eb51f927ee5ec2b0c45eda29fb83a092880e542c60113ca653923aa0c16e2e1604e5f437876cb7fa7d1498584f8800ff80804d41c7b89e9cba341fed8d260a6abd0fc242ba6b3d624c91c468e269069d0a121f0951c3765f18693a2c547d9bc924058d0ecece5c7802126d293d3033d6bbf83d4b8b0144d27cbb985dba465d75b62a93bf7a438cce59f", @ANYRES16=r7]) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000200)={0x2, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x2}]}, 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="a0"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) write$FUSE_ENTRY(r5, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@posixacl}]}}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="580000000301050000000000000000000a000000440002800c000280050001002e0000002c000180140003002001000000000100000000004d000000140004000000000000000000000000000000000006000340a3020000cd927ef1aaafda1799037ee409fc2825107e31e5095273508a5706ac03b1d3990df6fd7c3219ab7c9f4eee08da34f425f5b7692cff62b3f7c074675d48848d33cde71f00e71e1c3bfe28d52a9b3338beae13e5688d21653775a700fafb705d7ddd5119f9c8260691ee8ac92193cc2cae"], 0x58}, 0x1, 0x0, 0x0, 0x40040}, 0x4010) 786.208477ms ago: executing program 1 (id=274): r0 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fstatfs(r0, &(0x7f00000001c0)=""/234) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r2, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x38011, r4, 0x0) ptrace(0x8, 0x0) tkill(0x0, 0x12) ioctl$EVIOCGEFFECTS(r4, 0x80044584, &(0x7f00000002c0)=""/210) 599.112255ms ago: executing program 1 (id=275): mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x200000, 0x0) 479.826937ms ago: executing program 1 (id=276): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x45809000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) syz_usb_ep_write(r2, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0xbc4, 0x2}}, 0x30) r5 = dup(r3) fsmount(r5, 0x0, 0x1) timer_create(0x2, 0x0, &(0x7f0000001d00)=0x0) clock_gettime(0x0, &(0x7f0000001d40)={0x0, 0x0}) timer_settime(r6, 0x0, &(0x7f0000001d80)={{0x0, 0x989680}, {r7, r8+60000000}}, 0x0) timer_settime(r6, 0x0, &(0x7f0000001f00), &(0x7f0000001f40)) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) lseek(r9, 0x0, 0x4) timer_settime(r6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, r0, 0x45809000) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e", @ANYRESOCT], 0x0) (async) syz_usb_ep_write(r2, 0x8d, 0xfb, &(0x7f00000001c0)="d0be166e5e8b26a5e6b39aa93e00d43ec7e813e40b8fcad530f5176b71ef3ac478184911afdd2a979d4c5b7fccca3f0c6871b5032e4727642967374587861ca6bd95847cd7fa48e161817931a074a00f2d99471f511f07fc4bd392b89c581899e2ae79abe551ecce24444d0d91595054bea9bb0ce5ca2985043edb126c403549e7c5d36ceba659a4acb46b1361f31359c9f1c4b02f5edbe98e11edb32d0c08ce4e024fcefdee253f92ee9a9acfc0642ca6543d7ee1bab1") (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x0, 0xbc4, 0x2}}, 0x30) (async) dup(r3) (async) fsmount(r5, 0x0, 0x1) (async) timer_create(0x2, 0x0, &(0x7f0000001d00)) (async) clock_gettime(0x0, &(0x7f0000001d40)) (async) timer_settime(r6, 0x0, &(0x7f0000001d80)={{0x0, 0x989680}, {r7, r8+60000000}}, 0x0) (async) timer_settime(r6, 0x0, &(0x7f0000001f00), &(0x7f0000001f40)) (async) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x0) (async) lseek(r9, 0x0, 0x4) (async) timer_settime(r6, 0x0, &(0x7f0000000080), &(0x7f00000000c0)) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @loopback}, 0x10) (async) 390.366785ms ago: executing program 2 (id=278): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xc7) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r3, &(0x7f0000000200)='[', 0xc, 0x80, &(0x7f0000000040)={0xa, 0x4e23, 0xfa86, @mcast2, 0xffffffff}, 0x1c) r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000100)={0x2a, 0x3, 0x1}, 0xc) bind$qrtr(r4, &(0x7f0000000080)={0x2a, 0x1, 0xf4}, 0xc) (async) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) (async) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={0x0, 0xe7f2}, 0x8) 340.526374ms ago: executing program 2 (id=279): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000200), 0x22c00, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000006c0)={&(0x7f0000000300), 0xc, &(0x7f0000000680)={&(0x7f0000000380)={0x2cc, r5, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xc9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xe543}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2c}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xca}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x570a}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7db01614}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf9}]}, @TIPC_NLA_BEARER={0x8c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3b9016fd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'ib', 0x3a, 'nicvf0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3e}}}}}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'geneve1\x00'}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x68000000}]}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}}}, {0x14, 0x2, @in={0x2, 0x4e24, @loopback}}}}]}, @TIPC_NLA_BEARER={0x24, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'wlan1\x00'}}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x14}, 0x8001) (async) openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000180)=@attr_arm64={0x0, 0x1, 0x2, &(0x7f0000000000)=0x9}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x8, 0x20, 0x6, 0x2ac, {{0x1a, 0x4, 0x1, 0x8, 0x68, 0x65, 0x0, 0x5, 0x29, 0x0, @rand_addr=0x64010101, @remote, {[@ssrr={0x89, 0x27, 0x5c, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010100, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @empty, @multicast1, @rand_addr=0x64010102]}, @timestamp_prespec={0x44, 0x14, 0x3e, 0x3, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@multicast2, 0xfffffe01}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6, 0x3}, @end, @lsrr={0x83, 0xb, 0x5d, [@private=0xa010100, @multicast2]}]}}}}}) (async) syz_usb_connect$cdc_ncm(0x2, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', r6, 0x29, 0x1f, 0x4, 0x5, 0x40, @local, @loopback, 0x0, 0x40, 0x1e, 0x6}}) (async) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) (async) sendmsg$netlink(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)={0x18, 0x42, 0x601, 0x0, 0x0, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}]}, 0x18}], 0x1}, 0x800) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) write$char_usb(r9, &(0x7f0000000000)="2d3020da", 0x4) (async) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f00000002c0)={0x0, 'bridge_slave_1\x00', 0x1}, 0x18) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000000)={'gretap0\x00', r7, 0x10, 0x1, 0x2, 0x1, {{0x19, 0x4, 0x0, 0x5, 0x64, 0x65, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, {[@ssrr={0x89, 0x7, 0xd9, [@loopback]}, @cipso={0x86, 0x49, 0x1, [{0x1, 0x6, "8b4fd92f"}, {0x7, 0x10, "19dcef3e99f39b79b115ee55a06b"}, {0x5, 0xd, "283423329ba11fb9169afa"}, {0x6, 0xe, "020770c1799e6c6e10084398"}, {0x7, 0x12, "90486aa127647a585424bcfa051d7583"}]}]}}}}}) 163.97107ms ago: executing program 2 (id=280): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) (async, rerun: 64) r1 = signalfd(r0, &(0x7f0000000000)={[0x188]}, 0x8) (rerun: 64) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x20) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 146.029562ms ago: executing program 2 (id=281): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20000) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000000)={r5, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r5, 0x9, 0x7fff, 0x2}, 0x10) getsockopt$bt_hci(r2, 0x84, 0x7f, 0x0, &(0x7f0000000000)) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c80012000e00050018000a00120298370500ff07095efd439700"], 0x17) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x80}, 0x2) 98.164345ms ago: executing program 2 (id=282): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000040000a118000c000600142603600e1208000f0100810401a8001600200001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x4040001}, 0x0) recvmsg$unix(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001f00)=""/4096, 0x1000}], 0x1}, 0x12060) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f00009a4000/0x2000)=nil, 0x2000, 0x3000005, 0x8010, r3, 0x383c8000) (async) mmap(&(0x7f00009a4000/0x2000)=nil, 0x2000, 0x3000005, 0x8010, r3, 0x383c8000) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r4, 0x0, 0x2, 0x0, &(0x7f0000000240)) 0s ago: executing program 2 (id=283): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000300)={0x28, 0x4, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='ext2\x00', 0x20080c4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.8' (ED25519) to the list of known hosts. [ 67.836749][ T5820] cgroup: Unknown subsys name 'net' [ 67.988909][ T5820] cgroup: Unknown subsys name 'cpuset' [ 67.997661][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.367860][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.321840][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.328317][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.720439][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.737072][ T5836] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.745409][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 71.753687][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 71.761380][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 71.770176][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.778155][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.789118][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 71.796479][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.807218][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.814677][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 71.824294][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.836925][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.851066][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.859871][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.880043][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.890981][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.900247][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.909743][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.921025][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.295920][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 72.452542][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 72.495113][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 72.609981][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.617559][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.625014][ T5834] bridge_slave_0: entered allmulticast mode [ 72.633954][ T5834] bridge_slave_0: entered promiscuous mode [ 72.668964][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.676759][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.683906][ T5834] bridge_slave_1: entered allmulticast mode [ 72.691225][ T5834] bridge_slave_1: entered promiscuous mode [ 72.703304][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 72.806557][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.828781][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.836423][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.843589][ T5837] bridge_slave_0: entered allmulticast mode [ 72.851583][ T5837] bridge_slave_0: entered promiscuous mode [ 72.874058][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.899697][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.907147][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.914476][ T5837] bridge_slave_1: entered allmulticast mode [ 72.922025][ T5837] bridge_slave_1: entered promiscuous mode [ 72.941138][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.948777][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.956158][ T5829] bridge_slave_0: entered allmulticast mode [ 72.963475][ T5829] bridge_slave_0: entered promiscuous mode [ 73.000646][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.008237][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.015491][ T5829] bridge_slave_1: entered allmulticast mode [ 73.022405][ T5829] bridge_slave_1: entered promiscuous mode [ 73.031374][ T5834] team0: Port device team_slave_0 added [ 73.045160][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.066302][ T5834] team0: Port device team_slave_1 added [ 73.100883][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.123872][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.137200][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.157488][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.164941][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.172317][ T5842] bridge_slave_0: entered allmulticast mode [ 73.179663][ T5842] bridge_slave_0: entered promiscuous mode [ 73.231230][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.238744][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.247074][ T5842] bridge_slave_1: entered allmulticast mode [ 73.254634][ T5842] bridge_slave_1: entered promiscuous mode [ 73.272915][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.281647][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.307968][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.321218][ T5829] team0: Port device team_slave_0 added [ 73.344372][ T5837] team0: Port device team_slave_0 added [ 73.350989][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.357976][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.384067][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.397722][ T5829] team0: Port device team_slave_1 added [ 73.415693][ T5837] team0: Port device team_slave_1 added [ 73.442281][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.493047][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.515129][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.522132][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.549061][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.561605][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.570452][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.596726][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.609521][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.616731][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.642883][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.673992][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.682543][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.709251][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.746704][ T5842] team0: Port device team_slave_0 added [ 73.760150][ T5834] hsr_slave_0: entered promiscuous mode [ 73.767190][ T5834] hsr_slave_1: entered promiscuous mode [ 73.779195][ T5842] team0: Port device team_slave_1 added [ 73.876438][ T51] Bluetooth: hci1: command tx timeout [ 73.884064][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.891330][ T51] Bluetooth: hci0: command tx timeout [ 73.891969][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.923109][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.936660][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.943602][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.969739][ T51] Bluetooth: hci2: command tx timeout [ 73.969751][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.978176][ T5832] Bluetooth: hci3: command tx timeout [ 74.011578][ T5829] hsr_slave_0: entered promiscuous mode [ 74.018004][ T5829] hsr_slave_1: entered promiscuous mode [ 74.024021][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.031802][ T5829] Cannot create hsr debugfs directory [ 74.058804][ T5837] hsr_slave_0: entered promiscuous mode [ 74.065654][ T5837] hsr_slave_1: entered promiscuous mode [ 74.071699][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.079298][ T5837] Cannot create hsr debugfs directory [ 74.197365][ T5842] hsr_slave_0: entered promiscuous mode [ 74.203638][ T5842] hsr_slave_1: entered promiscuous mode [ 74.210441][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.218451][ T5842] Cannot create hsr debugfs directory [ 74.530590][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.543361][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.553953][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.573779][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.686653][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.713111][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.723515][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.734797][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.809657][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.817821][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.829255][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.857490][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.880467][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.928950][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.941918][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.960351][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.971549][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.992585][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.037348][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.044532][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.073752][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.080921][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.148440][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.217673][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.257321][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.264481][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.291717][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.298896][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.339697][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.353591][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.418920][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.430768][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.459145][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.466470][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.506121][ T2131] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.513346][ T2131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.524582][ T2131] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.531716][ T2131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.567493][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.574659][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.623773][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.789714][ T5834] veth0_vlan: entered promiscuous mode [ 75.833016][ T5834] veth1_vlan: entered promiscuous mode [ 75.951610][ T5834] veth0_macvtap: entered promiscuous mode [ 75.957581][ T5832] Bluetooth: hci0: command tx timeout [ 75.959139][ T51] Bluetooth: hci1: command tx timeout [ 75.992488][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.017179][ T5834] veth1_macvtap: entered promiscuous mode [ 76.036895][ T51] Bluetooth: hci2: command tx timeout [ 76.045725][ T51] Bluetooth: hci3: command tx timeout [ 76.060505][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.072354][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.139366][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.149710][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.189488][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.201214][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.216430][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.266628][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.346722][ T5837] veth0_vlan: entered promiscuous mode [ 76.357404][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.378096][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.409835][ T5842] veth0_vlan: entered promiscuous mode [ 76.419686][ T5837] veth1_vlan: entered promiscuous mode [ 76.451473][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.463517][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.469038][ T5842] veth1_vlan: entered promiscuous mode [ 76.531740][ T5837] veth0_macvtap: entered promiscuous mode [ 76.550538][ T5837] veth1_macvtap: entered promiscuous mode [ 76.565040][ T5829] veth0_vlan: entered promiscuous mode [ 76.578798][ T5842] veth0_macvtap: entered promiscuous mode [ 76.588943][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.597300][ T5829] veth1_vlan: entered promiscuous mode [ 76.620467][ T5842] veth1_macvtap: entered promiscuous mode [ 76.652250][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.678907][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.696429][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.723290][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.754583][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.764558][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.796679][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.824043][ T5829] veth0_macvtap: entered promiscuous mode [ 76.849185][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.892004][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.912495][ T5829] veth1_macvtap: entered promiscuous mode [ 76.922955][ T5920] Can't find a SQUASHFS superblock on rnullb0 [ 76.939611][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.950095][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.982799][ T49] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.049568][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.066243][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.086830][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.125668][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.162225][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.173288][ T2131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.184680][ T2131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.239508][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.251615][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.270353][ T5924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7'. [ 77.270632][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.279255][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.300846][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.326085][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.342393][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.509233][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.546936][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.591204][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.677178][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.705078][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.712866][ T5939] exFAT-fs (rnullb0): invalid boot record signature [ 77.726024][ T5939] exFAT-fs (rnullb0): failed to read boot sector [ 77.732884][ T5939] exFAT-fs (rnullb0): failed to recognize exfat type [ 78.036467][ T51] Bluetooth: hci1: command tx timeout [ 78.036536][ T5832] Bluetooth: hci0: command tx timeout [ 78.102879][ T5954] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.114102][ T5955] netlink: 44 bytes leftover after parsing attributes in process `syz.1.12'. [ 78.123314][ T5832] Bluetooth: hci3: command tx timeout [ 78.123356][ T5832] Bluetooth: hci2: command tx timeout [ 78.156101][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 78.176808][ T5956] /dev/rnullb0: Can't open blockdev [ 78.211836][ T5958] 9pnet_fd: Insufficient options for proto=fd [ 78.315525][ T10] usb 3-1: device descriptor read/64, error -71 [ 78.577087][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 78.728065][ T10] usb 3-1: device descriptor read/64, error -71 [ 78.788533][ T5981] /dev/rnullb0: Can't open blockdev [ 78.852619][ T10] usb usb3-port1: attempt power cycle [ 78.898545][ T30] audit: type=1326 audit(1751433413.248:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5951 comm="syz.3.11" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7e2b18e929 code=0x7fc00000 [ 79.011158][ T5985] /dev/rnullb0: Can't open blockdev [ 79.199311][ T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 79.226594][ T10] usb 3-1: device descriptor read/8, error -71 [ 79.246160][ T5995] input: syz1 as /devices/virtual/input/input5 [ 79.262484][ T5996] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 79.271409][ T5996] /dev/rnullb0: Can't open blockdev [ 79.456419][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.465417][ T10] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 79.528281][ T10] usb 3-1: device descriptor read/8, error -71 [ 79.612997][ T6008] /dev/rnullb0: Can't open blockdev [ 79.618378][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.618409][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 79.620497][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.647844][ T10] usb usb3-port1: unable to enumerate USB device [ 79.690058][ T6010] /dev/rnullb0: Can't open blockdev [ 79.698070][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 79.711635][ T6011] /dev/rnullb0: Can't open blockdev [ 79.719980][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.732404][ T24] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 79.752567][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.762808][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 79.776921][ T24] usb 4-1: SerialNumber: syz [ 79.880310][ T6016] /dev/rnullb0: Can't open blockdev [ 80.017669][ T5875] usb 4-1: USB disconnect, device number 2 [ 80.103209][ T6016] sp0: Synchronizing with TNC [ 80.115839][ T51] Bluetooth: hci1: command tx timeout [ 80.125690][ T51] Bluetooth: hci0: command tx timeout [ 80.136623][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.206012][ T5832] Bluetooth: hci3: command tx timeout [ 80.211659][ T51] Bluetooth: hci2: command tx timeout [ 80.295648][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 80.313371][ T10] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 80.321661][ T10] usb 2-1: config 0 has no interface number 0 [ 80.330735][ T10] usb 2-1: New USB device found, idVendor=2001, idProduct=7e19, bcdDevice=59.1b [ 80.344204][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.365573][ T10] usb 2-1: Product: syz [ 80.369765][ T10] usb 2-1: Manufacturer: syz [ 80.374362][ T10] usb 2-1: SerialNumber: syz [ 80.399172][ T10] usb 2-1: config 0 descriptor?? [ 80.421653][ T10] qmi_wwan 2-1:0.4: probe with driver qmi_wwan failed with error -22 [ 80.562205][ T6033] /dev/rnullb0: Can't open blockdev [ 80.674170][ T5875] usb 2-1: USB disconnect, device number 2 [ 80.787193][ T6042] /dev/rnullb0: Can't open blockdev [ 81.081241][ T6049] capability: warning: `syz.3.41' uses 32-bit capabilities (legacy support in use) [ 82.102934][ T6071] /dev/rnullb0: Can't open blockdev [ 82.171796][ T6075] gfs2: gfs2 mount does not exist [ 82.242582][ T6076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.384322][ T6076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.485329][ T5882] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 82.552043][ T6087] netlink: 20 bytes leftover after parsing attributes in process `syz.1.48'. [ 82.583800][ T6087] netlink: 160 bytes leftover after parsing attributes in process `syz.1.48'. [ 82.619150][ T6089] /dev/rnullb0: Can't open blockdev [ 82.624687][ T6087] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'. [ 82.895444][ T30] audit: type=1326 audit(1751433417.238:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6098 comm="syz.2.53" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f713198e929 code=0x0 [ 82.944005][ T6104] ======================================================= [ 82.944005][ T6104] WARNING: The mand mount option has been deprecated and [ 82.944005][ T6104] and is ignored by this kernel. Remove the mand [ 82.944005][ T6104] option from the mount to silence this warning. [ 82.944005][ T6104] ======================================================= [ 82.984361][ T6105] Zero length message leads to an empty skb [ 83.166822][ T5896] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 83.204035][ T6115] /dev/rnullb0: Can't open blockdev [ 83.285481][ T5882] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 83.327694][ T5896] usb 2-1: config 0 has no interfaces? [ 83.338495][ T5896] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 83.351840][ T5896] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 83.360089][ T5896] usb 2-1: Manufacturer: syz [ 83.367855][ T5896] usb 2-1: config 0 descriptor?? [ 83.448866][ T5882] usb 4-1: config 7 interface 0 has no altsetting 0 [ 83.461046][ T5882] usb 4-1: string descriptor 0 read error: -22 [ 83.470931][ T5882] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 83.483723][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.519776][ T5882] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 83.532303][ T5882] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 83.547409][ T5882] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 83.556535][ T5882] usb 4-1: media controller created [ 83.584106][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.597710][ T5875] usb 2-1: USB disconnect, device number 3 [ 83.768008][ T5882] usb 4-1: USB disconnect, device number 4 [ 83.820975][ T6126] /dev/rnullb0: Can't open blockdev [ 84.090887][ T6138] /dev/rnullb0: Can't open blockdev [ 84.152168][ T6140] overlayfs: failed lookup in lower (newroot/26, name='file1', err=-40): overlapping layers [ 84.224321][ T6143] hpfs: Bad magic ... probably not HPFS [ 84.224707][ T6144] /dev/rnullb0: Can't open blockdev [ 84.256413][ T6143] capability: warning: `syz.2.68' uses deprecated v2 capabilities in a way that may be insecure [ 84.312639][ T6147] netlink: 12 bytes leftover after parsing attributes in process `syz.1.70'. [ 84.411801][ T6156] NILFS (rnullb0): couldn't find nilfs on the device [ 84.426323][ T5882] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.555385][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 84.597428][ T5882] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.615959][ T5882] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.626770][ T5882] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.653610][ T5882] usb 1-1: config 0 descriptor?? [ 84.747685][ T10] usb 2-1: config 0 has an invalid interface number: 52 but max is 0 [ 84.757038][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.767527][ T10] usb 2-1: config 0 has no interface number 0 [ 84.773627][ T10] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 84.786572][ T10] usb 2-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 84.796830][ T10] usb 2-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.830191][ T10] usb 2-1: config 0 interface 52 has no altsetting 0 [ 84.844345][ T10] usb 2-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 84.853511][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 84.861829][ T10] usb 2-1: SerialNumber: syz [ 84.876551][ T10] usb 2-1: config 0 descriptor?? [ 84.895398][ T5896] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 85.074739][ T5882] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 85.087556][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 85.100856][ T10] synaptics_usb 2-1:0.52: synusb_open - usb_submit_urb failed, error: -90 [ 85.106606][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 85.125556][ T10] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -5 [ 85.135601][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 85.136751][ T5882] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0001/input/input7 [ 85.166082][ T5896] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 85.198232][ T5896] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 85.214852][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.234897][ T5896] usb 4-1: config 0 descriptor?? [ 85.295311][ T10] usb 2-1: USB disconnect, device number 4 [ 85.321937][ T5882] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 85.441117][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 85.529536][ T5831] usb 1-1: USB disconnect, device number 2 [ 85.651849][ T5896] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 85.668963][ T5896] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 85.900348][ T6188] syz.1.81 uses obsolete (PF_INET,SOCK_PACKET) [ 86.247391][ T6200] /dev/rnullb0: Can't open blockdev [ 86.485486][ T5875] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.615314][ T5875] usb 1-1: device descriptor read/64, error -71 [ 86.679489][ T120] cfg80211: failed to load regulatory.db [ 86.855409][ T5875] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.005430][ T5875] usb 1-1: device descriptor read/64, error -71 [ 87.062488][ T6206] /dev/rnullb0: Can't open blockdev [ 87.118028][ T6208] /dev/rnullb0: Can't open blockdev [ 87.133845][ T5875] usb usb1-port1: attempt power cycle [ 87.262643][ T6211] mkiss: ax0: crc mode is auto. [ 87.475720][ T5875] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 87.513828][ T5875] usb 1-1: device descriptor read/8, error -71 [ 87.555951][ T6221] binder: BINDER_SET_CONTEXT_MGR already set [ 87.562075][ T6221] binder: 6220:6221 ioctl 4018620d 200000000040 returned -16 [ 87.591610][ T6221] binder: 6220:6221 ioctl ae41 2 returned -22 [ 87.678754][ T6225] affs: No valid root block on device loop3 [ 87.774524][ T10] usb 4-1: USB disconnect, device number 5 [ 87.788607][ T5875] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 87.807781][ T6227] /dev/rnullb0: Can't open blockdev [ 87.828859][ T5875] usb 1-1: device descriptor read/8, error -71 [ 87.967004][ T5875] usb usb1-port1: unable to enumerate USB device [ 88.077046][ T6236] /dev/rnullb0: Can't open blockdev [ 88.250389][ T6248] /dev/rnullb0: Can't open blockdev [ 88.271736][ T6250] /dev/rnullb0: Can't open blockdev [ 88.280676][ T6246] netlink: 'syz.2.102': attribute type 2 has an invalid length. [ 88.412831][ T6259] /dev/rnullb0: Can't open blockdev [ 88.442165][ T6261] netlink: 'syz.2.106': attribute type 4 has an invalid length. [ 88.476555][ T6261] /dev/rnullb0: Can't open blockdev [ 88.566604][ T6265] /dev/rnullb0: Can't open blockdev [ 88.672044][ T51] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 88.685365][ T51] CPU: 0 UID: 0 PID: 51 Comm: kworker/u9:0 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 88.685390][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 88.685402][ T51] Workqueue: hci0 hci_rx_work [ 88.685429][ T51] Call Trace: [ 88.685436][ T51] [ 88.685443][ T51] dump_stack_lvl+0x189/0x250 [ 88.685465][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 88.685492][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.685511][ T51] ? __pfx__printk+0x10/0x10 [ 88.685533][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 88.685555][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 88.685581][ T51] ? kernfs_path_from_node+0x22c/0x260 [ 88.685603][ T51] ? kernfs_path_from_node+0x2c/0x260 [ 88.685630][ T51] sysfs_create_dir_ns+0x259/0x280 [ 88.685675][ T51] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 88.685702][ T51] ? do_raw_spin_unlock+0x122/0x240 [ 88.685728][ T51] kobject_add_internal+0x59f/0xb40 [ 88.685767][ T51] kobject_add+0x155/0x220 [ 88.685793][ T51] ? __pfx_kobject_add+0x10/0x10 [ 88.685818][ T51] ? _raw_spin_unlock+0x28/0x50 [ 88.685841][ T51] ? get_device_parent+0x366/0x3a0 [ 88.685865][ T51] device_add+0x408/0xb50 [ 88.685888][ T51] hci_conn_add_sysfs+0xd5/0x1e0 [ 88.685918][ T51] le_conn_complete_evt+0xc3a/0x1220 [ 88.685957][ T51] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 88.685980][ T51] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 88.685999][ T51] ? __asan_memcpy+0x40/0x70 [ 88.686027][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 88.686049][ T51] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.686069][ T51] ? skb_pull_data+0xfb/0x200 [ 88.686094][ T51] hci_le_conn_complete_evt+0x187/0x450 [ 88.686124][ T51] hci_event_packet+0x78c/0x1200 [ 88.686147][ T51] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 88.686171][ T51] ? __pfx_hci_event_packet+0x10/0x10 [ 88.686192][ T51] ? kcov_remote_start+0x4d3/0x7f0 [ 88.686214][ T51] ? lockdep_hardirqs_on+0x20/0x150 [ 88.686237][ T51] ? hci_send_to_monitor+0xe2/0x570 [ 88.686264][ T51] hci_rx_work+0x46a/0xe80 [ 88.686292][ T51] ? process_scheduled_works+0x9ef/0x17b0 [ 88.686320][ T51] process_scheduled_works+0xae1/0x17b0 [ 88.686380][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 88.686424][ T51] worker_thread+0x8a0/0xda0 [ 88.686471][ T51] kthread+0x70e/0x8a0 [ 88.686494][ T51] ? __pfx_worker_thread+0x10/0x10 [ 88.686510][ T51] ? __pfx_kthread+0x10/0x10 [ 88.686533][ T51] ? _raw_spin_unlock_irq+0x23/0x50 [ 88.686552][ T51] ? lockdep_hardirqs_on+0x9c/0x150 [ 88.686570][ T51] ? __pfx_kthread+0x10/0x10 [ 88.686592][ T51] ret_from_fork+0x3fc/0x770 [ 88.686621][ T51] ? __pfx_ret_from_fork+0x10/0x10 [ 88.686653][ T51] ? __switch_to_asm+0x39/0x70 [ 88.686672][ T51] ? __switch_to_asm+0x33/0x70 [ 88.686691][ T51] ? __pfx_kthread+0x10/0x10 [ 88.686712][ T51] ret_from_fork_asm+0x1a/0x30 [ 88.686763][ T51] [ 88.687352][ T51] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 88.881921][ T6275] /dev/rnullb0: Can't open blockdev [ 88.885804][ T51] Bluetooth: hci0: failed to register connection device [ 88.955385][ T120] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 89.244337][ T6285] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.266692][ T6268] /dev/rnullb0: Can't open blockdev [ 89.267293][ T6283] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 89.277463][ T120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 89.292019][ T120] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 89.302302][ T120] usb 2-1: can't read configurations, error -71 [ 89.868856][ T6306] netlink: 372 bytes leftover after parsing attributes in process `syz.0.124'. [ 90.057806][ T6313] netlink: 'syz.1.125': attribute type 5 has an invalid length. [ 90.145334][ T5882] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 90.258404][ T6320] ./cgroup: Can't lookup blockdev [ 90.296670][ T5882] usb 1-1: Using ep0 maxpacket: 16 [ 90.309568][ T5882] usb 1-1: config 0 has an invalid interface number: 48 but max is 1 [ 90.328039][ T5882] usb 1-1: config 0 has an invalid interface number: 97 but max is 1 [ 90.345415][ T5882] usb 1-1: config 0 has an invalid interface number: 198 but max is 1 [ 90.357906][ T5882] usb 1-1: config 0 has 3 interfaces, different from the descriptor's value: 2 [ 90.384869][ T5882] usb 1-1: config 0 has no interface number 0 [ 90.395524][ T5882] usb 1-1: config 0 has no interface number 1 [ 90.401634][ T5882] usb 1-1: config 0 has no interface number 2 [ 90.415404][ T5882] usb 1-1: config 0 interface 48 altsetting 129 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 90.426671][ T5882] usb 1-1: config 0 interface 48 altsetting 129 endpoint 0x9 has invalid maxpacket 51177, setting to 64 [ 90.442361][ T5882] usb 1-1: config 0 interface 48 altsetting 129 has 3 endpoint descriptors, different from the interface descriptor's value: 7 [ 90.455826][ T5882] usb 1-1: config 0 interface 97 altsetting 52 endpoint 0xE has invalid wMaxPacketSize 0 [ 90.465767][ T5882] usb 1-1: config 0 interface 97 altsetting 52 has 5 endpoint descriptors, different from the interface descriptor's value: 2 [ 90.488165][ T5882] usb 1-1: config 0 interface 48 has no altsetting 0 [ 90.504296][ T5882] usb 1-1: config 0 interface 97 has no altsetting 0 [ 90.526336][ T5882] usb 1-1: config 0 interface 198 has no altsetting 0 [ 90.546513][ T5882] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff58, bcdDevice=7e.6a [ 90.566270][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.585218][ T5882] usb 1-1: Product: syz [ 90.589662][ T5882] usb 1-1: Manufacturer: syz [ 90.594266][ T5882] usb 1-1: SerialNumber: syz [ 90.618807][ T5882] usb 1-1: config 0 descriptor?? [ 90.690309][ T6337] fuse: Bad value for 'group_id' [ 90.695511][ T6337] fuse: Bad value for 'group_id' [ 90.842249][ T6306] gfs2: not a GFS2 filesystem [ 90.861708][ T5882] option 1-1:0.48: GSM modem (1-port) converter detected [ 90.870422][ T120] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 90.897006][ T5882] usb 1-1: USB disconnect, device number 7 [ 90.923548][ T5882] option 1-1:0.48: device disconnected [ 90.936493][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 91.017328][ T6344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.032710][ T120] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 91.039970][ T6344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.045269][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 91.065152][ T120] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 91.065179][ T120] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 91.065219][ T120] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.065695][ T120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.071036][ T120] usb 2-1: config 0 descriptor?? [ 91.137224][ T5918] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 91.137254][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.137273][ T5918] usb 3-1: Product: syz [ 91.137287][ T5918] usb 3-1: Manufacturer: syz [ 91.137300][ T5918] usb 3-1: SerialNumber: syz [ 91.150305][ T5918] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 91.231233][ T6346] tty tty26: ldisc open failed (-12), clearing slot 25 [ 91.246184][ T5882] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 91.325723][ T5875] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 91.470496][ T24] usb 3-1: USB disconnect, device number 6 [ 91.491212][ T120] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 91.506354][ T30] audit: type=1326 audit(1751433425.838:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.0.138" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea6698e929 code=0x0 [ 91.543681][ T120] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.754371][ T6357] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.139'. [ 91.977512][ T6367] /dev/rnullb0: Can't open blockdev [ 92.124978][ T6371] /dev/rnullb0: Can't open blockdev [ 92.275429][ T5882] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 92.297702][ T5882] ath9k_htc: Failed to initialize the device [ 92.326371][ T24] usb 3-1: ath9k_htc: USB layer deinitialized [ 92.602500][ T6387] hpfs: Bad magic ... probably not HPFS [ 92.708468][ T6394] hpfs: Bad magic ... probably not HPFS [ 92.838205][ T6391] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 92.867200][ T6391] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 93.215498][ T5918] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 93.376829][ T5918] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 93.389073][ T5918] usb 1-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 93.399379][ T5918] usb 1-1: config 220 interface 0 has no altsetting 0 [ 93.412129][ T5918] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 93.425624][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.433744][ T5918] usb 1-1: Product: syz [ 93.440178][ T5918] usb 1-1: Manufacturer: syz [ 93.445034][ T5918] usb 1-1: SerialNumber: syz [ 93.674348][ T5918] usb 1-1: Found UVC 0.00 device syz (8086:0b07) [ 93.682608][ T5918] usb 1-1: No valid video chain found. [ 93.691864][ T5918] usb 1-1: USB disconnect, device number 8 [ 93.785415][ T120] usb 2-1: reset high-speed USB device number 7 using dummy_hcd [ 93.936507][ T120] usb 2-1: device firmware changed [ 93.942805][ T5882] usb 2-1: USB disconnect, device number 7 [ 94.085365][ T5882] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 94.200496][ T6426] warning: `syz.0.161' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.247244][ T5882] usb 2-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 94.261047][ T5882] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.272053][ T6431] /dev/rnullb0: Can't open blockdev [ 94.284600][ T5882] usb 2-1: config 0 descriptor?? [ 94.291540][ T6431] gfs2: not a GFS2 filesystem [ 94.301298][ T6432] netlink: 37 bytes leftover after parsing attributes in process `syz.0.162'. [ 94.320401][ T5882] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 94.746242][ T6418] CUSE: DEVNAME unspecified [ 94.771278][ T980] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 94.935348][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 94.944676][ T980] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 94.957809][ T5882] gspca_sunplus: reg_w_riv err -71 [ 94.963035][ T5882] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 94.974445][ T980] usb 3-1: config 0 has no interface number 0 [ 94.981714][ T980] usb 3-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 94.993973][ T5882] usb 2-1: USB disconnect, device number 8 [ 95.000489][ T980] usb 3-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.025156][ T980] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 95.038714][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.048861][ T980] usb 3-1: Product: syz [ 95.053039][ T980] usb 3-1: Manufacturer: syz [ 95.061687][ T980] usb 3-1: SerialNumber: syz [ 95.070818][ T980] usb 3-1: config 0 descriptor?? [ 95.082182][ T980] redrat3 3-1:0.83: Couldn't find all endpoints [ 95.165376][ T5875] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 95.320362][ T5875] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.345582][ T5875] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 95.371272][ T5875] usb 1-1: config 1 has no interface number 1 [ 95.380961][ T5875] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 95.398339][ T5875] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.404663][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 95.455750][ T5875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.491374][ T24] usb 3-1: USB disconnect, device number 7 [ 95.515667][ T5875] usb 1-1: Product: syz [ 95.519857][ T5875] usb 1-1: Manufacturer: syz [ 95.524539][ T5875] usb 1-1: SerialNumber: syz [ 95.577519][ T6462] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 95.897908][ T5875] usb 1-1: USB disconnect, device number 9 [ 95.976757][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.267524][ T6483] /dev/rnullb0: Can't open blockdev [ 96.468951][ T6489] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 96.777847][ T6497] syzkaller1: entered promiscuous mode [ 96.783451][ T6497] syzkaller1: entered allmulticast mode [ 97.671779][ T6530] netlink: 'syz.1.186': attribute type 37 has an invalid length. [ 97.695467][ T6533] netlink: 'syz.1.186': attribute type 37 has an invalid length. [ 97.740160][ T6530] /dev/rnullb0: Can't open blockdev [ 98.024137][ T6547] qnx4: no qnx4 filesystem (no root dir). [ 98.039286][ T6537] /dev/rnullb0: Can't open blockdev [ 98.058492][ T30] audit: type=1326 audit(1751433432.398:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6542 comm="syz.3.189" exe="/root/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f7e2b18e929 code=0x0 [ 98.585382][ T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 98.765788][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 98.781662][ T24] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 98.805372][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.825516][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.828242][ T5882] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.848759][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 98.879576][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.906099][ T24] usb 1-1: Product: syz [ 98.910308][ T24] usb 1-1: Manufacturer: syz [ 98.912941][ T6565] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 98.914905][ T24] usb 1-1: SerialNumber: syz [ 98.936372][ T6565] UDF-fs: Scanning with blocksize 4096 failed [ 99.025402][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 99.033257][ T5882] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 99.044802][ T5882] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 99.055868][ T5882] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 99.064209][ T5882] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 99.074822][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 99.088669][ T5882] usb 2-1: config 0 has no interface number 0 [ 99.094894][ T5882] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 99.109723][ T5882] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 99.121029][ T5882] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 99.136337][ T5882] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.151558][ T5882] usb 2-1: config 0 interface 125 has no altsetting 2 [ 99.161260][ T5882] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 99.170769][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.179199][ T5882] usb 2-1: Product: syz [ 99.183477][ T5882] usb 2-1: Manufacturer: syz [ 99.188454][ T5882] usb 2-1: SerialNumber: syz [ 99.196711][ T5882] usb 2-1: config 0 descriptor?? [ 99.224305][ T5882] usb 2-1: selecting invalid altsetting 2 [ 99.367945][ T24] usb 1-1: 0:2 : does not exist [ 99.389076][ T6569] /dev/rnullb0: Can't open blockdev [ 99.421357][ T5882] usb 2-1: USB disconnect, device number 9 [ 99.722280][ T6578] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 99.740228][ T6578] Error validating options; rc = [-22] [ 99.748492][ T6578] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 99.767442][ T6578] Error validating options; rc = [-22] [ 99.850861][ T6582] process 'syz.2.200' launched './file0' with NULL argv: empty string added [ 99.875913][ T6582] program syz.2.200 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.047059][ T6584] /dev/rnullb0: Can't open blockdev [ 100.154117][ T6586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.202'. [ 100.171403][ T6586] /dev/rnullb0: Can't open blockdev [ 100.427037][ T6597] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.700363][ T6604] program syz.3.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.741259][ T6606] libceph: resolve '4' (ret=-3): failed [ 100.742604][ T6608] Can't find a SQUASHFS superblock on rnullb0 [ 100.783194][ T6558] Can't find a SQUASHFS superblock on rnullb0 [ 100.825782][ T24] usb 1-1: USB disconnect, device number 10 [ 100.868111][ T5840] udevd[5840]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 100.985755][ T120] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 101.021011][ T6616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.213'. [ 101.031172][ T6616] NILFS (rnullb0): couldn't find nilfs on the device [ 101.083254][ T6618] FAT-fs (rnullb0): bogus number of reserved sectors [ 101.091314][ T6618] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 101.140112][ T120] usb 2-1: unable to get BOS descriptor or descriptor too short [ 101.149209][ T120] usb 2-1: config 7 has an invalid interface number: 20 but max is 0 [ 101.158731][ T120] usb 2-1: config 7 has no interface number 0 [ 101.165604][ T120] usb 2-1: config 7 interface 20 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1024 [ 101.176000][ T120] usb 2-1: config 7 interface 20 has no altsetting 0 [ 101.184995][ T120] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=77.e6 [ 101.195561][ T5875] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.203667][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.212921][ T120] usb 2-1: Product: syz [ 101.217323][ T120] usb 2-1: Manufacturer: syz [ 101.221962][ T120] usb 2-1: SerialNumber: syz [ 101.232014][ T6606] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 101.355496][ T5875] usb 4-1: Using ep0 maxpacket: 32 [ 101.372586][ T5875] usb 4-1: unable to get BOS descriptor or descriptor too short [ 101.385843][ T5875] usb 4-1: no configurations [ 101.390545][ T5875] usb 4-1: can't read configurations, error -22 [ 101.451564][ T120] usbtest 2-1:7.20: couldn't get endpoints, -22 [ 101.461840][ T120] usbtest 2-1:7.20: probe with driver usbtest failed with error -22 [ 101.520540][ T120] usb 2-1: USB disconnect, device number 10 [ 101.579630][ T6625] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 101.590483][ T6625] netlink: 'syz.0.217': attribute type 29 has an invalid length. [ 101.619063][ T6626] program syz.0.217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.633327][ T6625] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 101.648113][ T6626] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 101.878652][ T6632] /dev/rnullb0: Can't open blockdev [ 101.884160][ T6631] /dev/rnullb0: Can't open blockdev [ 102.023544][ T6634] program syz.0.220 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.167147][ T6639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 102.270017][ T6647] /dev/rnullb0: Can't open blockdev [ 102.435984][ T120] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 102.520163][ T6651] /dev/rnullb0: Can't open blockdev [ 102.585457][ T120] usb 2-1: Using ep0 maxpacket: 32 [ 102.593094][ T120] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 102.601769][ T120] usb 2-1: config 0 has no interface number 0 [ 102.608089][ T120] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 102.618319][ T120] usb 2-1: config 0 interface 196 has no altsetting 0 [ 102.625545][ T5882] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 102.640212][ T120] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 102.663577][ T6654] /dev/rnullb0: Can't open blockdev [ 102.668932][ T120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.689684][ T120] usb 2-1: Product: syz [ 102.693879][ T120] usb 2-1: Manufacturer: syz [ 102.698547][ T120] usb 2-1: SerialNumber: syz [ 102.718206][ T120] usb 2-1: config 0 descriptor?? [ 102.725414][ T6644] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 102.767967][ T6659] /dev/rnullb0: Can't open blockdev [ 102.788024][ T5882] usb 4-1: config 0 has no interfaces? [ 102.793539][ T5882] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.816271][ T5882] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.832552][ T5882] usb 4-1: config 0 descriptor?? [ 102.960173][ T6666] program syz.0.231 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 103.005372][ T120] ipheth 2-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 103.026351][ T120] ipheth 2-1:0.196: probe with driver ipheth failed with error -71 [ 103.052747][ T6636] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.071572][ T5875] usb 4-1: USB disconnect, device number 9 [ 103.121294][ T120] usb 2-1: USB disconnect, device number 11 [ 103.489607][ T6682] Mount JFS Failure: -22 [ 103.705345][ T120] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 103.846952][ T6698] qnx4: no qnx4 filesystem (no root dir). [ 103.856139][ T6696] MTD: Couldn't look up 'memory.events': -15 [ 103.865347][ T120] usb 3-1: Using ep0 maxpacket: 8 [ 103.879520][ T120] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 103.905326][ T120] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 103.913339][ T120] usb 3-1: Product: syz [ 103.934258][ T120] usb 3-1: Manufacturer: syz [ 103.940129][ T120] usb 3-1: SerialNumber: syz [ 103.961816][ T120] usb 3-1: config 0 descriptor?? [ 103.978292][ T120] usbtest 3-1:0.0: FX2 device [ 103.985471][ T6703] program syz.1.242 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.000738][ T120] usbtest 3-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 104.179345][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.188411][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.396720][ T5882] usb 3-1: USB disconnect, device number 8 [ 104.505756][ T6726] atomic_op ffff888028a49198 conn xmit_atomic 0000000000000000 [ 104.527886][ T6726] /dev/rnullb0: Can't open blockdev [ 104.563152][ T6728] random: crng reseeded on system resumption [ 104.658747][ T6733] program syz.3.252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.678626][ T30] audit: type=1326 audit(1751433439.028:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6734 comm="syz.0.251" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea6698e929 code=0x0 [ 105.219062][ T6750] /dev/rnullb0: Can't open blockdev [ 105.224783][ T6751] /dev/rnullb0: Can't open blockdev [ 105.301932][ T6753] /dev/rnullb0: Can't open blockdev [ 105.401869][ T6757] /dev/rnullb0: Can't open blockdev [ 105.514399][ T6763] /dev/rnullb0: Can't open blockdev [ 105.525695][ T6763] /dev/rnullb0: Can't open blockdev [ 105.534782][ T6759] /dev/rnullb0: Can't open blockdev [ 105.563757][ T6764] Mount JFS Failure: -22 [ 105.644845][ T6770] program syz.0.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.654772][ T6771] Mount JFS Failure: -22 [ 105.761249][ T6773] vxfs: WRONG superblock magic 00000000 at 1 [ 105.778435][ T6773] vxfs: WRONG superblock magic 00000000 at 8 [ 105.784313][ T6777] netlink: 'syz.3.268': attribute type 27 has an invalid length. [ 105.788215][ T6773] vxfs: can't find superblock. [ 106.022271][ T980] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 106.155360][ T5918] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.164321][ T980] usb 1-1: device descriptor read/64, error -71 [ 106.332675][ T5918] usb 4-1: config 0 has an invalid descriptor of length 228, skipping remainder of the config [ 106.356344][ T5918] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 106.368408][ T5918] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 106.384697][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.399548][ T5918] usb 4-1: Product: syz [ 106.403740][ T5918] usb 4-1: Manufacturer: syz [ 106.414078][ T5918] usb 4-1: SerialNumber: syz [ 106.427274][ T980] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 106.444708][ T5918] usb 4-1: config 0 descriptor?? [ 106.566190][ T980] usb 1-1: device descriptor read/64, error -71 [ 106.656944][ T6801] program syz.2.277 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.677310][ T980] usb usb1-port1: attempt power cycle [ 107.015337][ T980] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 107.036174][ T980] usb 1-1: device descriptor read/8, error -71 [ 107.046428][ T6819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.064593][ T6819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.082397][ T6821] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 107.105787][ T6819] ------------[ cut here ]------------ [ 107.111448][ T6819] WARNING: mm/page_alloc.c:5121 at __alloc_frozen_pages_noprof+0x2c8/0x370, CPU#1: syz.3.270/6819 [ 107.122171][ T6819] Modules linked in: [ 107.126808][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.3.270 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 107.139472][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.150664][ T6819] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 107.158951][ T6819] Code: 74 10 4c 89 e7 89 54 24 0c e8 b4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 df 85 95 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 107.179947][ T6819] RSP: 0018:ffffc9001908f960 EFLAGS: 00010246 [ 107.186195][ T6819] RAX: ffffc9001908f900 RBX: 0000000000000032 RCX: 0000000000000000 [ 107.194350][ T6819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001908f9c8 [ 107.202407][ T6819] RBP: ffffc9001908fa60 R08: ffffc9001908f9c7 R09: 0000000000000000 [ 107.210485][ T6819] R10: ffffc9001908f9a0 R11: fffff52003211f39 R12: 0000000000000000 [ 107.218674][ T6819] R13: 1ffff92003211f30 R14: 0000000000040d40 R15: dffffc0000000000 [ 107.226701][ T6819] FS: 00007f7e2c0666c0(0000) GS:ffff888125ae4000(0000) knlGS:0000000000000000 [ 107.236950][ T6819] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 107.244278][ T6819] CR2: 00007f7e2b4e24c0 CR3: 00000000711e8000 CR4: 00000000003526f0 [ 107.252329][ T6819] Call Trace: [ 107.255665][ T6819] [ 107.258607][ T6819] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.264956][ T6819] ? kfree+0x18e/0x440 [ 107.269088][ T6819] ? policy_nodemask+0x27c/0x720 [ 107.274040][ T6819] ? p9_client_clunk+0x1b6/0x250 [ 107.275427][ T980] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 107.279049][ T6819] alloc_pages_mpol+0x232/0x4a0 [ 107.291448][ T6819] ___kmalloc_large_node+0x5f/0x1b0 [ 107.296738][ T6819] __kmalloc_large_node_noprof+0x18/0x90 [ 107.302387][ T6819] __kmalloc_noprof+0x36f/0x4f0 [ 107.307340][ T6819] ? v9fs_fid_get_acl+0x4f/0x100 [ 107.312289][ T6819] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 107.316050][ T980] usb 1-1: device descriptor read/8, error -71 [ 107.319196][ T6819] v9fs_fid_get_acl+0x4f/0x100 [ 107.329612][ T6819] v9fs_get_acl+0x9a/0x360 [ 107.334842][ T6819] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 107.341298][ T6819] v9fs_mount+0x6eb/0xa50 [ 107.345705][ T6819] ? __pfx_v9fs_mount+0x10/0x10 [ 107.350619][ T6819] ? rcu_is_watching+0x15/0xb0 [ 107.355453][ T6819] legacy_get_tree+0xfd/0x1a0 [ 107.360141][ T6819] ? __pfx_v9fs_mount+0x10/0x10 [ 107.365007][ T6819] vfs_get_tree+0x8f/0x2b0 [ 107.369554][ T6819] do_new_mount+0x24a/0xa40 [ 107.374092][ T6819] __se_sys_mount+0x317/0x410 [ 107.378812][ T6819] ? __pfx___se_sys_mount+0x10/0x10 [ 107.384004][ T6819] ? rcu_is_watching+0x15/0xb0 [ 107.388791][ T6819] ? do_syscall_64+0xbe/0x3b0 [ 107.393477][ T6819] ? __x64_sys_mount+0x20/0xc0 [ 107.399746][ T6819] do_syscall_64+0xfa/0x3b0 [ 107.404251][ T6819] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.409587][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.415704][ T6819] ? clear_bhb_loop+0x60/0xb0 [ 107.420388][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.426314][ T6819] RIP: 0033:0x7f7e2b18e929 [ 107.430740][ T6819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.437763][ T980] usb usb1-port1: unable to enumerate USB device [ 107.451207][ T6819] RSP: 002b:00007f7e2c066038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.466036][ T6819] RAX: ffffffffffffffda RBX: 00007f7e2b3b6080 RCX: 00007f7e2b18e929 [ 107.474021][ T6819] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 107.482069][ T6819] RBP: 00007f7e2b210b39 R08: 0000200000000500 R09: 0000000000000000 [ 107.490152][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.498157][ T6819] R13: 0000000000000000 R14: 00007f7e2b3b6080 R15: 00007ffea9274c78 [ 107.506211][ T6819] [ 107.509242][ T6819] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 107.516528][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.3.270 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 107.527900][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 107.537952][ T6819] Call Trace: [ 107.541233][ T6819] [ 107.544164][ T6819] dump_stack_lvl+0x99/0x250 [ 107.548743][ T6819] ? __asan_memcpy+0x40/0x70 [ 107.553325][ T6819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.558525][ T6819] ? __pfx__printk+0x10/0x10 [ 107.563111][ T6819] panic+0x2db/0x790 [ 107.566994][ T6819] ? __pfx_panic+0x10/0x10 [ 107.571405][ T6819] __warn+0x334/0x4c0 [ 107.575381][ T6819] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 107.581456][ T6819] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 107.587428][ T6819] report_bug+0x2be/0x4f0 [ 107.591746][ T6819] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 107.597719][ T6819] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 107.603713][ T6819] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 107.609686][ T6819] handle_bug+0x84/0x160 [ 107.613923][ T6819] exc_invalid_op+0x1a/0x50 [ 107.618418][ T6819] asm_exc_invalid_op+0x1a/0x20 [ 107.623261][ T6819] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 107.629844][ T6819] Code: 74 10 4c 89 e7 89 54 24 0c e8 b4 1d 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 df 85 95 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 107.649444][ T6819] RSP: 0018:ffffc9001908f960 EFLAGS: 00010246 [ 107.655508][ T6819] RAX: ffffc9001908f900 RBX: 0000000000000032 RCX: 0000000000000000 [ 107.663465][ T6819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9001908f9c8 [ 107.671432][ T6819] RBP: ffffc9001908fa60 R08: ffffc9001908f9c7 R09: 0000000000000000 [ 107.679402][ T6819] R10: ffffc9001908f9a0 R11: fffff52003211f39 R12: 0000000000000000 [ 107.687364][ T6819] R13: 1ffff92003211f30 R14: 0000000000040d40 R15: dffffc0000000000 [ 107.695339][ T6819] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 107.701663][ T6819] ? kfree+0x18e/0x440 [ 107.705731][ T6819] ? policy_nodemask+0x27c/0x720 [ 107.710651][ T6819] ? p9_client_clunk+0x1b6/0x250 [ 107.715576][ T6819] alloc_pages_mpol+0x232/0x4a0 [ 107.720434][ T6819] ___kmalloc_large_node+0x5f/0x1b0 [ 107.725620][ T6819] __kmalloc_large_node_noprof+0x18/0x90 [ 107.731238][ T6819] __kmalloc_noprof+0x36f/0x4f0 [ 107.736074][ T6819] ? v9fs_fid_get_acl+0x4f/0x100 [ 107.740998][ T6819] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 107.747327][ T6819] v9fs_fid_get_acl+0x4f/0x100 [ 107.752084][ T6819] v9fs_get_acl+0x9a/0x360 [ 107.756489][ T6819] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 107.762028][ T6819] v9fs_mount+0x6eb/0xa50 [ 107.766349][ T6819] ? __pfx_v9fs_mount+0x10/0x10 [ 107.771188][ T6819] ? rcu_is_watching+0x15/0xb0 [ 107.775944][ T6819] legacy_get_tree+0xfd/0x1a0 [ 107.780611][ T6819] ? __pfx_v9fs_mount+0x10/0x10 [ 107.785447][ T6819] vfs_get_tree+0x8f/0x2b0 [ 107.789855][ T6819] do_new_mount+0x24a/0xa40 [ 107.794438][ T6819] __se_sys_mount+0x317/0x410 [ 107.799122][ T6819] ? __pfx___se_sys_mount+0x10/0x10 [ 107.804317][ T6819] ? rcu_is_watching+0x15/0xb0 [ 107.809081][ T6819] ? do_syscall_64+0xbe/0x3b0 [ 107.813752][ T6819] ? __x64_sys_mount+0x20/0xc0 [ 107.818513][ T6819] do_syscall_64+0xfa/0x3b0 [ 107.823003][ T6819] ? lockdep_hardirqs_on+0x9c/0x150 [ 107.828184][ T6819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.834232][ T6819] ? clear_bhb_loop+0x60/0xb0 [ 107.838896][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.844771][ T6819] RIP: 0033:0x7f7e2b18e929 [ 107.849180][ T6819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.868774][ T6819] RSP: 002b:00007f7e2c066038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 107.877177][ T6819] RAX: ffffffffffffffda RBX: 00007f7e2b3b6080 RCX: 00007f7e2b18e929 [ 107.885130][ T6819] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 107.893082][ T6819] RBP: 00007f7e2b210b39 R08: 0000200000000500 R09: 0000000000000000 [ 107.901037][ T6819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.908992][ T6819] R13: 0000000000000000 R14: 00007f7e2b3b6080 R15: 00007ffea9274c78 [ 107.916974][ T6819] [ 107.920215][ T6819] Kernel Offset: disabled [ 107.924525][ T6819] Rebooting in 86400 seconds..