last executing test programs: 6m10.136340592s ago: executing program 0 (id=318): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000001180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c1f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x5, {0x5, 0x11, "00f400"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6m9.771934517s ago: executing program 1 (id=323): r0 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c0071215223000"], 0x0) fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000001c0)='cmdline\x00') readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1) 6m8.646875426s ago: executing program 0 (id=333): r0 = open(&(0x7f0000000340)='./file0\x00', 0x80000, 0x49) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) ioctl$SIOCAX25DELUID(r1, 0x891a, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0x2020) read(r2, &(0x7f0000000100)=""/147, 0x93) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000000000)) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc605800024004000400050082c137153e3719ac0180feff0000d1bd", 0x33fe0}], 0x1}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = openat$vim2m(0xffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, &(0x7f00000002c0)={0xf6, 0x8, 0x8}) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000005440)={0x105, 0x2, 0x0, "c1659a0400a27dffff28a656f5163c957f84f1b11d2047b59cc4c6111ed5e400", 0x32344d59}) fcntl$lock(r4, 0x26, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x7}) fcntl$lock(r4, 0x24, &(0x7f00000001c0)={0x2, 0x4, 0x6f, 0x9}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000002ac0), 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) r8 = openat$incfs(r0, &(0x7f0000000380)='.pending_reads\x00', 0x481, 0x11) ioctl$KVM_TPR_ACCESS_REPORTING(r8, 0xc028ae92, &(0x7f00000003c0)={0x3ca, 0x40100000}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x4, @empty, 0x40}}, 0x2, 0x9}, 0x90) read$hidraw(r6, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r9) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r10, 0xfffffffc) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 6m8.508094211s ago: executing program 0 (id=334): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffff"], 0x398}}, 0x0) 6m8.411259872s ago: executing program 0 (id=337): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m8.320212933s ago: executing program 3 (id=338): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) 6m8.306629124s ago: executing program 0 (id=339): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) r4 = dup(r3) write$UHID_DESTROY(r4, &(0x7f0000000080), 0x4) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x909, 0x20000000, 0x0, {{}, {}, {0x4c, 0x18, {0x60, @media='udp\x00'}}}}, 0x68}}, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x5, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1, '\x00', 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x23, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0xfe, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x8, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0xa, 0x9}, {0x4, 0x6, 0x0, '\x00', 0x49}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x28, 0x2, '\x00', 0xc3}, {0x8, 0x9, 0x54, '\x00', 0x9}]}}) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000340)={r8}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r7, 0x7dfff000) 6m8.09237123s ago: executing program 0 (id=342): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, r2, r3, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x545c, 0x0) 6m7.917809641s ago: executing program 32 (id=342): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x2000, 0x200, 0xfffffffe, 0x5b, 0x0, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x1, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x4000002, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, r2, r3, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x545c, 0x0) 6m7.711297232s ago: executing program 3 (id=344): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=ANY=[], 0x268}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000) 6m7.612486534s ago: executing program 3 (id=345): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffff"], 0x398}}, 0x0) 6m7.409247777s ago: executing program 3 (id=347): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m7.250094305s ago: executing program 3 (id=348): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, &(0x7f0000000140)={0x40, 0x2, 0xa2, {0xa2, 0x21, "576081b474b8107fd8815319aa9e083c2d7e209ce5ef0039efc0a498d9d6e633f80406f9a8e98d2bd2f1f873274894fff72de67a36f74566855fb086931918b0177e04e701975bf7b4f72fca0091641bf0ac05456b3246603b02a451a9e8962c2a4bcff7a40a535eaf04326db8c95ad5421d0a74191bddbf501ebe7ba9a3dc296f8b0bd6a5cd1c919fc9e5013d6736eb508f782657a53ab7efaf0be484153fef"}}, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000240)={0x40, 0xa, 0x4a, "56918f3a64b3cac100bd7e30904a18f678d456cb23240f7d5fca901317806711a1b989f08e6cb8b42df92d36b5144c75c0e976d4032327a584ea7724af0e5fbcd480fed9d3c410daa29b"}, &(0x7f00000000c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x6, 0x4, 0xd623, 0xa2a9, 0x9, 0xd80, 0x0, 0x6, 0x7fff, 0x400, 0x0, 0x1}}, &(0x7f0000000340)={0x20, 0x85, 0x4, 0x163}, &(0x7f0000000380)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000003c0)={0x20, 0x87, 0x2, 0xc}, &(0x7f0000000400)={0x20, 0x89, 0x2, 0x1}}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mmap(&(0x7f0000adc000/0x3000)=nil, 0x3000, 0x4, 0xc0133, r0, 0xe1e2d000) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x80000000, @empty}, 0x1c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) sendto$phonet(r1, &(0x7f0000000040)="5f93b183958128b74ece7ed720d297b7998430d8379ead4fdf520966db7ae4e5941d507e39221495", 0x28, 0x90, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f000021f000/0x4000)=nil, 0x4000, 0x4) mremap(&(0x7f0000b50000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) prctl$PR_GET_FPEMU(0x9, &(0x7f00000004c0)) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 6m6.721659375s ago: executing program 1 (id=351): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000080)={'geneve0\x00', 0x40}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, &(0x7f0000000100)=""/179, &(0x7f00000001c0)=0xb3) fcntl$setownex(r2, 0xf, &(0x7f0000000200)={0x0, r1}) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x4, 0x6, 0x7}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f0000000480)={r3, 0x4, &(0x7f00000003c0)=[0x2, 0xf1, 0x7, 0x7], &(0x7f0000000400)=[0x7, 0x800, 0x6, 0x1, 0x1, 0x8, 0x6, 0x3, 0x8, 0x730], &(0x7f0000000440)=[0x2b59, 0x7, 0x4, 0xa]}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000500)={0x0, r5, r4, 0x0, 0x0, 0x1, &(0x7f00000004c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r2, 0xc01864b0, &(0x7f0000000540)={r3, r6, 0x4, 0xfffffff9, 0xd970}) getpgid(r1) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000580)="889a5b6f64824fdd8139b3a5a1ede5d8", 0x10) ioctl$DRM_IOCTL_MODE_SETGAMMA(r2, 0xc02064a5, &(0x7f0000000680)={r3, 0x1, &(0x7f00000005c0)=[0x9], &(0x7f0000000600)=[0x2], &(0x7f0000000640)=[0x200, 0x5, 0x9f0a]}) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000006c0), 0x42000, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000700)={0xb7, 0x5, 0x1ff, 0x3, 0x7f}) timer_create(0x2, &(0x7f00000007c0)={0x0, 0x18, 0x0, @thr={&(0x7f0000000740)="64631a07582e2984214402c1fa62f67c40ddca330f44142e813f", &(0x7f0000000780)="5cc995a636246085e30c4de8a0630cb766ac3d88b6d79d73ef08d93d38555f7f1d35dfc71ed3cd5d3f9e6506e006ae8d62d191fec32890"}}, &(0x7f0000000800)=0x0) timer_settime(r8, 0x1, &(0x7f0000000840), &(0x7f0000000880)) r9 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r9, &(0x7f00000008c0)="a1c4dac71918c3a602a50bf563a7dfe5bdcfb65e13636c8a168ab72f9921eb6593afd4f7c5a7a33cd2a7a1fa251244fb67bba28380a937ca611c37a929799e073f07f5d2fb9cef2528e844afa3aae66d3a85e22bc96bb4c0", 0x58) r10 = open(&(0x7f0000000940)='./file0\x00', 0x20000, 0x118) r11 = pidfd_getfd(r2, r2, 0x0) fcntl$setownex(r11, 0xf, &(0x7f0000000980)={0x0, r1}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r10, 0x84, 0x18, &(0x7f00000009c0)={0x0, 0x7fff}, &(0x7f0000000a00)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000a40)={r12, 0x4}, 0x8) ioctl$SG_BLKTRACESTART(r2, 0x1274, 0x0) ioctl$SIOCAX25ADDFWD(r2, 0x89ea, &(0x7f0000000a80)={@default, @default}) write$9p(r2, &(0x7f0000000ac0)="dac286fdcacde1b588dffc5364914893fb1d779fcb", 0x15) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000b00)=0x4, 0x4) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc03064ca, &(0x7f0000000c80)={&(0x7f0000000c00)=[0x0, 0x0], &(0x7f0000000c40)=[0xfffffffffffffffc, 0x0, 0x9, 0xf0, 0x5c788e63], 0x9, 0x2}) 6m6.508187229s ago: executing program 1 (id=354): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffff"], 0x398}}, 0x0) 6m6.251705674s ago: executing program 1 (id=355): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m6.231444967s ago: executing program 1 (id=356): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf003, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "a0890326"}]}}, 0x0}, 0x0) 6m6.230094568s ago: executing program 3 (id=357): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x200000000000000, 0x110000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m5.638389408s ago: executing program 33 (id=357): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x200000000000000, 0x110000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m5.599575539s ago: executing program 1 (id=359): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x8000000000000001, 0x10) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00005d7000/0x4000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x4000, 0x2}) sendfile(r0, r0, 0x0, 0x7ffff000) 6m5.281412414s ago: executing program 34 (id=359): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, &(0x7f0000000000)=0x8000000000000001, 0x10) r1 = userfaultfd(0x80801) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x101000, 0x800, 0x3, 0x1}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r3, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x60) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f00000000c0)={&(0x7f00005d7000/0x4000)=nil, &(0x7f0000d76000/0x3000)=nil, 0x4000, 0x2}) sendfile(r0, r0, 0x0, 0x7ffff000) 1m56.326274317s ago: executing program 6 (id=2565): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a000, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="02e77400000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) sendfile(r1, r0, 0x0, 0xfffc) 1m56.183341138s ago: executing program 6 (id=2568): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x40000010}, 0xc000000) (async) futimesat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000400)) 1m56.07358923s ago: executing program 6 (id=2570): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc) r1 = syz_io_uring_setup(0x1f40, &(0x7f0000000080)={0x0, 0xb75b, 0x40, 0x0, 0x5d}, &(0x7f0000000140), &(0x7f0000000180)) connect(r0, &(0x7f00000002c0)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @multicast1}, 0x3, 0x4, 0x1, 0x1}}, 0x80) socket$alg(0x26, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = inotify_init() inotify_add_watch(r3, 0x0, 0xf0000232) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) syz_io_uring_setup(0x471c, &(0x7f00000001c0)={0x0, 0xc108, 0x4000, 0x0, 0x3c, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000280)) 1m55.841946796s ago: executing program 6 (id=2573): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a000, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x2a000, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) creat(&(0x7f0000000040)='./file0\x00', 0x179) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',\t\x00ot+oIK=0000000000000000002(000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x20000000000}}], 0x58}, 0x0) (async) sendmsg$rds(r2, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0xfffffc01}, 0xffffffffffffffff, 0x0, 0x8, 0x7c0d08aa, 0x2b, 0xffffffffffffff5d, 0x35, 0x20000000000}}], 0x58}, 0x0) sendfile(r1, r0, 0x0, 0xfffc) r3 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000080)=""/114, 0x72}, {&(0x7f0000000300)=""/247, 0xf7}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/99, 0x63}], 0x5, &(0x7f0000000d40)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x6}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {&(0x7f0000000580)=""/92, 0x5c}, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/4, 0x4}, {&(0x7f00000006c0)=""/238, 0xee}], 0x2, 0x42, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x5}, &(0x7f0000000800)=0xdf7f, &(0x7f0000000880)=0x84a, 0x7, 0x1, 0x6, 0x1, 0x1, 0xfff}}, @rdma_args={0x48, 0x114, 0x1, {{0x46b, 0x9}, {&(0x7f00000008c0)=""/16, 0x10}, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/253, 0xfd}, {&(0x7f0000000ac0)=""/34, 0x22}], 0x3, 0x0, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x2}, &(0x7f0000000b40), &(0x7f0000000b80)=0x5, 0xa146, 0x9, 0xffffffff, 0x2, 0x40, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x80000000}, {&(0x7f0000000bc0)=""/156, 0x9c}, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/71, 0x47}], 0x1, 0x57, 0x5}}], 0x1a0}, 0x20000000) (async) sendmsg$rds(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)=""/140, 0x8c}, {&(0x7f0000000080)=""/114, 0x72}, {&(0x7f0000000300)=""/247, 0xf7}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f0000000480)=""/99, 0x63}], 0x5, &(0x7f0000000d40)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x6}, @rdma_args={0x48, 0x114, 0x1, {{0x9, 0x7}, {&(0x7f0000000580)=""/92, 0x5c}, &(0x7f00000007c0)=[{&(0x7f0000000680)=""/4, 0x4}, {&(0x7f00000006c0)=""/238, 0xee}], 0x2, 0x42, 0x2}}, @cswp={0x58, 0x114, 0x7, {{0x1, 0x5}, &(0x7f0000000800)=0xdf7f, &(0x7f0000000880)=0x84a, 0x7, 0x1, 0x6, 0x1, 0x1, 0xfff}}, @rdma_args={0x48, 0x114, 0x1, {{0x46b, 0x9}, {&(0x7f00000008c0)=""/16, 0x10}, &(0x7f0000000b00)=[{&(0x7f0000000900)=""/151, 0x97}, {&(0x7f00000009c0)=""/253, 0xfd}, {&(0x7f0000000ac0)=""/34, 0x22}], 0x3, 0x0, 0x7}}, @mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x2}, &(0x7f0000000b40), &(0x7f0000000b80)=0x5, 0xa146, 0x9, 0xffffffff, 0x2, 0x40, 0x6}}, @rdma_args={0x48, 0x114, 0x1, {{0x7, 0x80000000}, {&(0x7f0000000bc0)=""/156, 0x9c}, &(0x7f0000000d00)=[{&(0x7f0000000c80)=""/71, 0x47}], 0x1, 0x57, 0x5}}], 0x1a0}, 0x20000000) 1m55.608097028s ago: executing program 6 (id=2574): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x7fe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000000c0)=@mmap={0x1, 0x1, 0x4, 0x1, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x1, "bfb25e4b"}, 0x0, 0x1, {}, 0x0, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000000)=0x1) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r3, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x3, "d9298498abdba7f561bd1ca44c226af5160e961711a03760760beeaa91e8ff0055e5c0d48bd63ffdbb3bd43a847a1597c8ef03da5be42a00", 0x39}, 0x60) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000080)={0x0, 0x470d, 0x29}) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000001340)=[{{&(0x7f0000000940)={0xa, 0x4e20, 0xa6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000180)="a6", 0x1}], 0x1}}], 0x1, 0x20000000) shutdown(r4, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000400)=0x8) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001440)={{r2}, "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"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') mount(&(0x7f0000001400)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x20880, 0x0) 1m55.254014257s ago: executing program 6 (id=2575): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, 0xfffffffffffffffe}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 32) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r0, 0x0, "b12388", "61287a9d84bd9cc247b567bd3bb166343420bab6bddde9610458212795c6d3482fffd111a3c3fc1437d3e82b7ce39210a80930229d4be9e82b6bf496f3c79f1057222055b439043fd99f0eb20bcde545544f1da575f346c4652a3d4136894de400b98e9d630a5065e44bd5a78f07ce213e7a2acb3440e4267777722c08c341cdd0bf392072baaf318eef88c1c1c023f602b711af2d8ec6c473351bcb08901e6d489b0c71e0829045fdea150706de6085955d5bdec2b28112013d3c1934106e20772b1bb96c6ca99b3aa15787274b635083fbe37a34d262065d2c4614ddee12fbec00123a42830dc5540403174e3b29d98abf9a1660b4f0ed622da4369a3965d0"}}, 0xfffffffffffffff7) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r7, 0x1, 0x7, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 1m40.180532821s ago: executing program 35 (id=2575): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r1, 0x400, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz1\x00', 0x1ff) r2 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r2, 0xc0287c02, &(0x7f0000000000)={0x80000000, 0x0, 0xfffffffffffffffe}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (rerun: 32) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='FROZEN\x00', 0x7) (async) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_REJECT(r5, &(0x7f0000000280)={0x9, 0x108, 0xfa00, {r0, 0x0, "b12388", "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"}}, 0xfffffffffffffff7) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, r7, 0x1, 0x7, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}]}, 0x20}}, 0x0) (async) set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x200000a, 0x4c831, 0xffffffffffffffff, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 1m25.512515555s ago: executing program 2 (id=2717): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x20a00, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90d, 0x9, '\x00', @string=&(0x7f0000000240)=0xca}}) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, 0x0, 0x0) writev(r2, &(0x7f0000000880)=[{&(0x7f00000000c0)="8d2558a3aecffd5b25bf5b299aa9f0fd223626c1", 0x14}, {&(0x7f00000001c0)="c7be4ec29b548ba437ee5e90e6c9f1c7a3247ee396cb48a7448e8ea2b5526a7aae81c4021ca5b6a87f0baab821c534bd890911ba19dd0b3cd993aba8991377fc4eb8721e153a9f99af0a41369d8f80f976da78d9ecb6fc04c7c0de026c05a67786645d94643944de0bf97991dd7b61a88b315f690a4fc2d3f774c1c5734b6105438dc6ba1ee379a229485422223dd81f0102fe7633daf18c872b6f0fa251980fc44b2ed992035606d1f93c8986e97993a790128e97057e220090c41d3ec39427b015bdc5a6174cfe1e9682b4d6017b988ef43fcfe9a9ca", 0xd7}, {&(0x7f00000002c0)}, {&(0x7f0000000940)="e53283212bd6ca62cfda80257f4ba25326826c747f6df00a03dc472abc59dbbb21beb2df7f9fe5b654139f967cf741e559a93705ac5a0dcec419324ab0e36f90c94535de756237087779d579e7de128aa8d3a475a00d63b778c970252c9b746b4e27f2c1c48e96fa1a55d32334abcf41511d5e0b49e70128fea026373a7262252f69962ba8ef666e803de3e338a5294115ccd7921832847cb62dd2beb0c5480315ae7a9ff8a8b393e776482e05accfc7bd29c450c36a5a1943d4f8c569dbe88c8ee0", 0xc2}, {&(0x7f0000000540)="5e395ea2fc601394846aa3ebcdfccc66f3c481d7eef2a6b8c5d38dc3382fa82ce524169c6fb3b938817a351f0e34adf6c374cb58148cc08fdf35513e5a0cc43529f018565bd42310f8e8e2685fec8d410c6180b41f0e5ff9b57c84708fa6c835d2e013d32bd706df29429ddd2f788166f10853d0841512a834b4914d1db74a8acf543dfb7cba70298583b31d791fa33813814effd5204ff91d64cd5a2e733381f6095451a503e591eced79e66b4cdf40c4c6403f4c079f99cdb9b53d5f964b8d63963271b04c3b81262112e0f8", 0xcd}, {&(0x7f00000003c0)="81b6a45d139e68d8105c0f4e35bc66ceba3e9e1904c91ba1001ffa345248e00efdf6f01cea4df224b5ffc32056e1f603ba6f36d20736c3c3532cca6f28d1b8bb974f0002c77a44a95fcd12", 0x4b}, {&(0x7f00000002c0)="9e81c9f119e2a03b701a1087abd5c97fce01489b4262c4aaea8f31d3ad10c7f4eca92881000000b3d9070800a2c432f95b906b0938a6b133899f048b40112e8c54591543765c40fcf7e37bee8393e412cd8c76a7dc2637ad687578c191d9504272bfdda545f13c", 0x67}, {&(0x7f00000006c0)="51f03df4b1520d965d4ad0308cad56bb9672da6dc7a8733efd7a31a40377103a48e92f4689ab91124b03f9e1fd746a9f536afdb96a709dfbe1b8927d976b107a77306a1e0458eef05509cd46b119b8d4d4e24b218fdf2fc065f01c252bf1374cf5aa8f6731b33ac588e969caa8ebdd8e9ad70f8c5027b21d86f5d31f7d4749b68d2d0401ccafd66fbcd00447375596401898c64f", 0x94}, {&(0x7f0000000780)="e22d150487dd85767b5297628201cc2d7664fe82bc233546f9c7040371262efe4c93d89fd9ad7e409e953a310fbcb2dd7036a09bc4a639c261ddf50bfaa51585581c39864bfb01b941291e69a19c234de6ef4568317a6bdfb9a5f4a3e2bec88ac8f9c0356797c0bd94bf12351dcbc8cff852bec3", 0x74}, {&(0x7f0000000800)="0b23c8ffe700687dab22231dd9b066deecb0c75aa7035ee0ffce13218b298ce6df6f26d62a3ca80a60b121abfdae5e82e5f9461c9fcf9a7e43c9d3e897bcbf34493ff2f8965b265728720667b202fa4267d68b1e6c1b76ccdaac7bd619a2a9de0eb16c99", 0x64}], 0xa) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="e90000000000000000252c20000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0xe79cccea089a010}, 0x20004050) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000080)=0x4) 1m24.366969071s ago: executing program 2 (id=2722): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='efivarfs\x00', 0x8000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{r1, r2/1000+10000}}, 0x100) creat(&(0x7f0000001380)='./file0\x00', 0x0) (async) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='efivarfs\x00', 0x8000, 0x0) (async) clock_gettime(0x0, &(0x7f0000000100)) (async) utimensat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)={{r1, r2/1000+10000}}, 0x100) (async) 1m24.080981667s ago: executing program 2 (id=2723): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd700000dcdf251a0004000700210062620000100022800400008004"], 0x2c}, 0x1, 0x0, 0x0, 0x4040001}, 0x8000) (async) listen(0xffffffffffffffff, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000c80)={0x34, &(0x7f0000000480)={0x40, 0xb, 0x1, "e4"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000005c0)=ANY=[@ANYBLOB="401800010000b4"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000240)={0x20, 0x8, 0x1, "b4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000580)={0x1c, &(0x7f00000003c0)={0x0, 0x14, 0x2, "e3d1"}, 0x0, 0x0}) (async) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) brk(0x9) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r3, 0x2000) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000940)}, 0x40) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 1m23.107063993s ago: executing program 2 (id=2726): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x102) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) (async) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f0000000280)='./file1\x00', 0x0, 0x10000, 0x0) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x800000, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x800000, 0x0) mount(0x0, &(0x7f0000000100)='./cgroup\x00', 0x0, 0x2208080, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000001080)={0x18, 0x2, {0x0, @remote}}, 0x1e) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 1m22.760203825s ago: executing program 2 (id=2727): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) dup(r1) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 1m22.382382153s ago: executing program 2 (id=2729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYRES64=r2], 0x15) r4 = dup(r1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x0, 0xd000, 0x1000, &(0x7f000000d000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="b9be0300000f320f01f80f20d835200000004f0f202323901ce50a00000000000000ba000000000f30b9ee0200000f3242f7ef0f0666baf80cb88cff018def66bafc0cb800000080efc0fd00460f08", 0x4f}], 0x1, 0xf1e17c17512dff24, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 1m21.880531578s ago: executing program 36 (id=2729): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r2 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000180)) syz_emit_vhci(&(0x7f0000000880)=ANY=[@ANYRES64=r2], 0x15) r4 = dup(r1) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) write$cgroup_pid(r4, &(0x7f00000000c0)=r5, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x1ff) syz_open_dev$evdev(&(0x7f0000000140), 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x0, 0xd000, 0x1000, &(0x7f000000d000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r7, r4, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000300)="b9be0300000f320f01f80f20d835200000004f0f202323901ce50a00000000000000ba000000000f30b9ee0200000f3242f7ef0f0666baf80cb88cff018def66bafc0cb800000080efc0fd00460f08", 0x4f}], 0x1, 0xf1e17c17512dff24, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r8) sendmsg$ETHTOOL_MSG_DEBUG_SET(r8, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 8.084195885s ago: executing program 4 (id=3049): semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000180)=""/78) 7.961188751s ago: executing program 4 (id=3050): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x1, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f00e50000008700060000090581030002c0b9ff09058202080000fd00090503020002"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48}) 7.941093476s ago: executing program 5 (id=3051): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) 7.780168912s ago: executing program 5 (id=3052): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x125, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="3515012aebe7e312e5ca18cf01f5b3617103"], 0x12) 6.847760177s ago: executing program 5 (id=3053): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) 6.702680118s ago: executing program 5 (id=3054): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$netlink(0x10, 0x3, 0xa) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x4b46, 0x0) 6.264194719s ago: executing program 4 (id=3057): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x1, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 6.142217614s ago: executing program 8 (id=3059): syz_usb_connect$uac1(0x69a90eab3db9c902, 0xa6, &(0x7f0000000280)=ANY=[@ANYBLOB="12010002000000406b1d010140000102030109029400030104a0090904000021010100000a2401f7ff0702010209240303000303030b05240506020904010000010200000904010101010200000924020182040910ca0c240201090407065d7b68d509050109"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) 5.180921201s ago: executing program 4 (id=3061): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2c, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc4000) 5.024567362s ago: executing program 4 (id=3063): r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000380), 0x69a840, 0x0) waitid$P_PIDFD(0x3, r0, &(0x7f00000003c0), 0x1000000, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setfsgid(0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(r2) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r5, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x2, 0x100, "b049f0da3c5c207202518dbc5808412d5419056d1a10622053c6544d04c2a821", 0x8, 0x100, 0x5, 0x6, 0xc1}) close(r1) 4.887877474s ago: executing program 7 (id=3064): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newae={0x5c, 0x1e, 0x1, 0x0, 0x0, {{@in=@empty}, @in6=@empty}, [@replay_esn_val={0x1c}]}, 0x5c}}, 0x0) 4.515913979s ago: executing program 7 (id=3065): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x13b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800, 0x0}) read$FUSE(r2, &(0x7f0000002cc0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$inet(0x2, 0x800, 0xffffff9e) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005b40)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @rights={{0x10}}], 0x48, 0x4000090}}, {{&(0x7f0000001880)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002c40)=[{&(0x7f0000001900)="4f7b92fa943298295b34341d2947d643458f4803d095fbbc8f6908627ac76d56120e06ef7987c43392fc92a54e7314da517f8ee4ff04fd6f69982122eda3c1d56be52a5ded5c0129e72c8172b7ae6938c306c0c0cd4e8b33f15d70f1a749a6e29155296e23c40cfe6d125b4f90340b8297d36e2d77946dabab7b1f5d7149441a534717d2f0d98a6b41c91ead57c93feefaa91498e812f1054ed03458af1c1ca00474e72ed2f75276721a9167eca7705cfbe0d1aca200bb7017c9223d867f61ebec8e4a37998fdf0eda23636b4e5185f887b35b", 0xd3}, {&(0x7f0000001a00)="74e911ba055e5881a20bb4ff77a6bb7117b20e", 0x13}, {&(0x7f0000001a40)="a46e0b3b46aad8f22a854f338d7d3e2e90b825731d78ddbd1f18556c6751ec2b01ccc0fe20394dfb714ccb13a0ced40e73f326e2ce11e212ee7f17df1c071c2d573ae5c6680e4550cb7bc201ba9dca96ab4a8040578d621aa0a7c31d0834ea47cc948b8d55851ea1cd96da98b5a62b6c377543f07c4169b52b0bfca258f733eeb9ff724547476617307b45de60ea817b1d15f9c1c4871eab5e34d3c80f482da384", 0xa1}, {&(0x7f0000001b40)="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", 0xfe0}, {&(0x7f0000002b40)="becf260f2e737aacfed26a8ba64b97543bda37940c8caf299493892fdb966d40567eee06714d06ae2b47e0a76b3e94d3baf2afa60345a38d51292b072fb88266c8cf66a33df6", 0x46}, {&(0x7f0000002bc0)="1179273013098c98153d50de0552a7c93dbb2120d7304481c9113b05f39fc386004f090cce36c6823f4bfc8b3aeeb4a240dd4aa7bbd9d497491b3bce421e77cf27e55156e6eeef489284ff578a", 0x4d}], 0x6, &(0x7f0000004d40)=[@cred={{0x1c, 0x1, 0x2, {r1, r4}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1, r4}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x78, 0x4020000}}, {{&(0x7f0000004e40)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000005080)=[{0x0}, {&(0x7f00000050c0)="46ac9eeebde40f6bbd568735c6259267e5bb29f6aea059d8cc3243b4138e5f0a6762ba544eb58b85d0e4eb5d5f192903acff385eaee0ef83167b1c7f94f6f81d4e20eb9f1fcd1850f206bcbce56bfbe5f8866aba47ff95072ffcac6c40d9ea9909161173c51fc50516078ae8a8c656e037b42d05e2cd7b7278b96077dd42f29a31ff45e6c9a449bfedef68263d2868b991b9ecf1705b1d245cb72d1cee6d598d2194d245c38fdab359ec6cb0729834e72bc3d5077b36987ac1880be19534bca7c4f1b82d6867b97e8090162291d4f16544163b5f99f79fb41d56603a8c67ad88f3a617cf43a28936e94ea6291acafba9e8cd54eb5d46c946fc428857c04d359c887ecc8fc0cc04d9c7f8bde921903b46408bcad538d8ca54259ad4d09101cdecf35ceadf21531a5964041ebadd7dc908c0557d8682980ecd", 0x138}, {&(0x7f0000004fc0)="eb077e8b0e4ed5e620168b7cdbedab0da55c4d40f549e623e88eff77606953136d66daba7324ca25b31fb028b85c2d0c1662fc296b1dcd540547cdc1a5895a5b7a31a96edccad0007326840b2ff104bd0ad67804849928c06a9950d4c91dbac41e48ca3655bb3f66da9acb06e095cd7561be7606728ff581aa602fb76ecac112e74b9626c09eb666d957a39237394cfefc404e29ad64940f16e3a59f2ea58ce10bcc70190ca4cba41deff0", 0xab}], 0x3, &(0x7f0000005240)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r3, r4}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x90, 0x10}}, {{0x0, 0x0, &(0x7f0000005780), 0x0, &(0x7f00000058c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x30, 0x4000004}}, {{&(0x7f0000005940)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005a00)=[{&(0x7f00000059c0)="44e714a42f96c4ecf7565221ab7095e9f8edb18481a6a94b4850c0", 0x1b}], 0x1, &(0x7f0000005a80)=[@cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x4044801}}], 0x5, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r7 = socket(0x40000000015, 0x5, 0x0) bind$inet(r7, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000040)=@req={0x8, 0x50, 0x6, 0x2}, 0xfd7c) close_range(r8, 0xffffffffffffffff, 0x0) 3.975712208s ago: executing program 8 (id=3066): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x20e00, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0xff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x44040) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="28008281", @ANYRES16=r3, @ANYBLOB="2503feffffff0000000016000000140001800d0001007564703a73797a3200000000"], 0x28}}, 0x0) pipe2$9p(0x0, 0x0) r4 = socket(0xe5c7a992384457a1, 0x80002, 0x72) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r6, 0xab00, r7) ioctl$NBD_CLEAR_SOCK(r6, 0xab04) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) r8 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/dev_mcast\x00') ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0x7) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000200)={0x0, 0x9}, &(0x7f0000000240)=0x8) r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) 3.968236533s ago: executing program 4 (id=3067): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x402}}}, 0x0) r1 = userfaultfd(0x80001) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'ipvlan1\x00', {0x2}}) sendmmsg$inet(r3, 0x0, 0x0, 0x20008000) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000380)="e8", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fb00000000085308460100000000000109"], 0x0) shutdown(0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000640)={{&(0x7f0000297000/0x1000)=nil, 0x1000}}) 2.848038198s ago: executing program 8 (id=3068): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x28) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x82403) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000080)=0xd0) close_range(r5, 0xffffffffffffffff, 0x0) 1.715577724s ago: executing program 8 (id=3069): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.661347397s ago: executing program 5 (id=3070): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listen(r0, 0x3) accept4(r0, 0x0, 0x0, 0x0) 1.476047522s ago: executing program 7 (id=3071): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x118}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 951.778668ms ago: executing program 7 (id=3072): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r2) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x40111}, 0x20000004) 934.321809ms ago: executing program 8 (id=3073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x40010, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setrlimit(0xb, &(0x7f0000000340)={0xa00000000, 0x7abc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_extract_tcp_res(0x0, 0x4, 0xfffffff8) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_procfs(0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000040) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, 0x0, 0x0) 180.122657ms ago: executing program 7 (id=3074): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000140)=0x9, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="14", 0x1, 0x8000004, 0x0, 0x0) 127.25636ms ago: executing program 5 (id=3075): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="8033", 0x2, 0x40801, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000001c0)="94680d84e0cfc515e62730806e949ea6aa38e6007314780ce28ec93328d650c0a9696d7afa8ea2", 0x27}, {0x0}], 0x2}, 0x44000) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x0, 0x0, 0x0, &(0x7f0000002240)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000000180)=0x40) 90.195778ms ago: executing program 7 (id=3076): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'pcl818\x00', [0xfffffffb, 0x2167, 0x2, 0x100000, 0x88d7, 0x8f, 0xfffffffd, 0x1000010, 0x3, 0xffffffff, 0x200, 0xfff, 0x344, 0x1, 0x0, 0xffffffff, 0x6, 0x3, 0x81, 0xe, 0x0, 0x0, 0x80, 0x7ff, 0x5, 0x0, 0xb0c4, 0x7df, 0x8, 0x1, 0x1]}) 0s ago: executing program 8 (id=3077): syz_open_dev$dri(&(0x7f0000000000), 0xabd7, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000100), 0x8, 0x14100) shutdown(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x12}}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="38000000161411"], 0x8b}, 0x1, 0x0, 0x0, 0x20000080}, 0x400d0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000200)={0x2, 'vlan0\x00', {0x7}, 0x5}) syz_80211_inject_frame(0x0, 0x0, 0x36) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801) ioctl$BLKTRACESETUP(r5, 0xc0481273, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f00000002c0)={r7}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): 5 has an invalid descriptor of length 1, skipping remainder of the config [ 375.833162][T13984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.841918][ T5890] usb 5-1: config 15 has 6 interfaces, different from the descriptor's value: 4 [ 375.858332][ T5890] usb 5-1: config 15 has no interface number 0 [ 375.876271][T13984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.895865][ T3469] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.897889][ T5890] usb 5-1: config 15 has no interface number 1 [ 375.925152][ T3469] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.938067][ T5890] usb 5-1: config 15 has no interface number 2 [ 375.960049][ T5890] usb 5-1: config 15 has no interface number 3 [ 375.977199][ T3469] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.982083][ T5890] usb 5-1: config 15 has no interface number 4 [ 376.013196][ T5890] usb 5-1: config 15 has no interface number 5 [ 376.026933][ T5890] usb 5-1: config 15 interface 125 altsetting 38 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 376.045367][ T3469] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.055499][ T5890] usb 5-1: config 15 interface 125 altsetting 38 has an invalid descriptor for endpoint zero, skipping [ 376.067499][ T5856] Bluetooth: hci3: command tx timeout [ 376.089907][ T5890] usb 5-1: config 15 interface 125 altsetting 38 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 376.129282][T14199] 9pnet_fd: Insufficient options for proto=fd [ 376.137442][ T5890] usb 5-1: too many endpoints for config 15 interface 64 altsetting 111: 121, using maximum allowed: 30 [ 376.157910][ T5890] usb 5-1: config 15 interface 64 altsetting 111 has a duplicate endpoint with address 0x8, skipping [ 376.168804][T14199] /dev/rnullb0: Can't lookup blockdev [ 376.175128][ T5890] usb 5-1: config 15 interface 64 altsetting 111 has an invalid descriptor for endpoint zero, skipping [ 376.186287][ T5890] usb 5-1: config 15 interface 64 altsetting 111 has 3 endpoint descriptors, different from the interface descriptor's value: 121 [ 376.192237][ T1014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.199820][ T5890] usb 5-1: config 15 interface 118 altsetting 3 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 376.229818][ T5890] usb 5-1: config 15 interface 118 altsetting 3 endpoint 0x86 has invalid maxpacket 43974, setting to 1024 [ 376.244606][ T5890] usb 5-1: config 15 interface 118 altsetting 3 bulk endpoint 0x86 has invalid maxpacket 1024 [ 376.275750][ T5890] usb 5-1: config 15 interface 118 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 376.279241][ T1014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.300788][ T5890] usb 5-1: config 15 interface 118 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 376.336709][ T5890] usb 5-1: config 15 interface 118 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 376.366239][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.373920][ T5890] usb 5-1: config 15 interface 118 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 376.420889][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.422666][ T5890] usb 5-1: config 15 interface 81 altsetting 65 has a duplicate endpoint with address 0x9, skipping [ 376.469202][T14207] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2407'. [ 376.480575][ T5890] usb 5-1: config 15 interface 81 altsetting 65 has an invalid descriptor for endpoint zero, skipping [ 376.506824][ T5890] usb 5-1: config 15 interface 81 altsetting 65 has a duplicate endpoint with address 0xB, skipping [ 376.552847][ T5890] usb 5-1: config 15 interface 81 altsetting 65 endpoint 0x1 has invalid maxpacket 80, setting to 64 [ 376.590124][ T5890] usb 5-1: config 15 interface 81 altsetting 65 has a duplicate endpoint with address 0x8, skipping [ 376.625762][ T5890] usb 5-1: config 15 interface 81 altsetting 65 has 7 endpoint descriptors, different from the interface descriptor's value: 12 [ 376.644077][T14212] /dev/rnullb0: Can't open blockdev [ 376.672888][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 376.751085][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0x8, skipping [ 376.813079][ T5890] usb 5-1: config 15 interface 72 altsetting 10 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 376.825089][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0xA, skipping [ 376.837443][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 376.881398][ T5890] usb 5-1: config 15 interface 72 altsetting 10 bulk endpoint 0xC has invalid maxpacket 16 [ 376.911260][ T5890] usb 5-1: config 15 interface 72 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 376.928116][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0x5, skipping [ 376.978314][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 377.017237][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0x8, skipping [ 377.052025][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 377.094654][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0xF, skipping [ 377.133320][ T5890] usb 5-1: config 15 interface 72 altsetting 10 has a duplicate endpoint with address 0x7, skipping [ 377.157663][ T5890] usb 5-1: config 15 interface 72 altsetting 10 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 377.174196][T14230] /dev/rnullb0: Can't lookup blockdev [ 377.192159][ T5890] usb 5-1: config 15 interface 207 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 377.224477][ T5890] usb 5-1: config 15 interface 125 has no altsetting 0 [ 377.237920][ T5890] usb 5-1: config 15 interface 64 has no altsetting 0 [ 377.254939][ T5890] usb 5-1: config 15 interface 118 has no altsetting 0 [ 377.285311][ T5890] usb 5-1: config 15 interface 81 has no altsetting 0 [ 377.302372][ T5890] usb 5-1: config 15 interface 72 has no altsetting 0 [ 377.313115][ T5890] usb 5-1: config 15 interface 207 has no altsetting 0 [ 377.333526][ T5890] usb 5-1: New USB device found, idVendor=1740, idProduct=9709, bcdDevice=64.d2 [ 377.352958][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.373205][ T5890] usb 5-1: Product: 꽷䃬é³åœ†ì¹³å°àµ‹ã¥¬ä›¼ê“Œæœ—六묠懦⌒줧㱑ꕥ먓͢ [ 377.395676][ T5890] usb 5-1: Manufacturer: â  [ 377.401825][ T5890] usb 5-1: SerialNumber: Ñ… [ 377.810116][T14258] /dev/rnullb0: Can't open blockdev [ 377.902606][ T5890] usb 5-1: USB disconnect, device number 66 [ 377.982312][T14263] /dev/rnullb0: Can't open blockdev [ 379.186274][T14275] netlink: 180 bytes leftover after parsing attributes in process `syz.5.2425'. [ 379.294162][T14282] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2427'. [ 379.418010][ T5856] Bluetooth: hci1: command 0x0c1a tx timeout [ 379.418206][T14233] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 380.169272][ T30] audit: type=1804 audit(1751851792.063:54): pid=14287 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2428" name="rnullb0" dev="tmpfs" ino=677 res=1 errno=0 [ 380.253210][T14292] netlink: 'syz.5.2429': attribute type 10 has an invalid length. [ 380.266516][T14295] bond0: entered promiscuous mode [ 380.271628][T14295] bond_slave_0: entered promiscuous mode [ 380.278606][T14295] bond_slave_1: entered promiscuous mode [ 380.293967][T14233] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.300698][T14233] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 380.311631][T14233] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 380.317810][T14233] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 380.320621][T14292] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 380.335754][T14292] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 380.351084][T14233] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 380.363851][T14233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.372978][T14233] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.385725][T14233] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 380.603259][T14307] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2433'. [ 380.647998][ T5890] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 380.683378][T14309] /dev/rnullb0: Can't lookup blockdev [ 380.803002][T14311] /dev/rnullb0: Can't open blockdev [ 380.840806][T14315] /dev/rnullb0: Can't lookup blockdev [ 380.857908][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 380.864784][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.897901][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.907666][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 380.966093][ T5890] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 380.983472][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.006217][T14319] /dev/rnullb0: Can't open blockdev [ 381.010032][ T5890] usb 5-1: config 0 descriptor?? [ 381.280325][ T5890] usbhid 5-1:0.0: can't add hid device: -71 [ 381.298166][ T5890] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 381.323087][ T5890] usb 5-1: USB disconnect, device number 67 [ 381.498431][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 381.546836][T14343] /dev/rnullb0: Can't open blockdev [ 381.779001][T14351] tmpfs: Bad value for 'mpol' [ 382.378369][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.378393][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.740491][T14380] /dev/rnullb0: Can't open blockdev [ 382.775762][T14368] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2454'. [ 382.944217][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 382.971938][T14368] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.248245][ T24] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 383.344997][T14368] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.452559][ T24] usb 5-1: config 2 has an invalid interface number: 2 but max is 0 [ 383.477943][ T24] usb 5-1: config 2 has no interface number 0 [ 383.498653][ T24] usb 5-1: config 2 interface 2 has no altsetting 0 [ 383.519084][ T24] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=7f.a4 [ 383.538671][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.546682][ T24] usb 5-1: Product: syz [ 383.578029][ T5850] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.588100][ T24] usb 5-1: Manufacturer: syz [ 383.592733][ T24] usb 5-1: SerialNumber: syz [ 383.674070][T14368] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.822447][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.830360][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.865672][T14393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.874624][T14393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.917828][T14368] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.943466][ T24] usb 5-1: USB disconnect, device number 68 [ 384.027447][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 384.089092][T14422] netlink: 'syz.6.2470': attribute type 10 has an invalid length. [ 384.103588][T14422] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2470'. [ 384.139406][T14422] batman_adv: batadv0: Adding interface: virt_wifi0 [ 384.164770][T14422] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.200038][T14425] /dev/rnullb0: Can't open blockdev [ 384.206615][T14422] batman_adv: batadv0: Interface activated: virt_wifi0 [ 384.288440][ T49] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.350115][ T49] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.368806][ T49] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.407497][ T49] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.435188][T14432] /dev/rnullb0: Can't open blockdev [ 384.458586][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 384.459893][ T5856] Bluetooth: hci4: command 0x0c1a tx timeout [ 384.885296][T14455] netlink: 14 bytes leftover after parsing attributes in process `syz.6.2480'. [ 384.904792][T14447] /dev/rnullb0: Can't open blockdev [ 385.138804][T14455] hsr_slave_1 (unregistering): left promiscuous mode [ 385.188892][T14466] netlink: 'syz.5.2484': attribute type 41 has an invalid length. [ 385.370323][T14468] overlayfs: missing 'lowerdir' [ 385.389264][T14468] /dev/rnullb0: Can't open blockdev [ 385.440497][ T30] audit: type=1804 audit(1751851797.333:55): pid=14475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2488" name="rnullb0" dev="tmpfs" ino=677 res=1 errno=0 [ 385.617985][ T890] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 385.768014][ T890] usb 5-1: Using ep0 maxpacket: 32 [ 385.775456][ T890] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 385.787667][ T890] usb 5-1: config 0 has no interface number 0 [ 385.806081][ T890] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 385.838333][ T890] usb 5-1: config 0 interface 196 has no altsetting 0 [ 385.847436][ T890] usb 5-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 385.867406][ T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.876827][ T890] usb 5-1: Product: syz [ 385.885239][ T890] usb 5-1: Manufacturer: syz [ 385.890240][ T890] usb 5-1: SerialNumber: syz [ 385.915628][ T890] usb 5-1: config 0 descriptor?? [ 385.925778][T14472] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.034095][T14506] delete_channel: no stack [ 386.046941][T14506] delete_channel: no stack [ 386.162174][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.173497][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.181778][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.187571][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.199686][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.206130][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.215465][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.218445][ T5979] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 386.222115][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.238132][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.244018][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.260824][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.267765][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.282319][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.289106][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.296235][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.306086][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.314439][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.323401][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.329949][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.335878][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.344502][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.352350][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.364842][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.371560][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.383093][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.390483][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.391140][T14521] /dev/rnullb0: Can't open blockdev [ 386.398381][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.407414][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.408491][ T5979] usb 3-1: Using ep0 maxpacket: 8 [ 386.416941][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.425192][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.430248][ T5979] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 386.434473][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.444855][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.448123][ T5979] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.466961][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.477110][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.482773][ T5979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.483179][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.499595][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.506282][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.512596][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.518631][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.525004][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.531235][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.533283][ T5979] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.537212][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.551545][ T890] ipheth 5-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 386.552644][ T5856] Bluetooth: hci3: command 0x0c1a tx timeout [ 386.559852][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 386.568315][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.588673][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.594536][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.609502][ T5979] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.627801][ T890] ipheth 5-1:0.196: Apple iPhone USB Ethernet device attached [ 386.636703][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.644361][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.653752][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.656876][ T5979] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 386.662503][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.682986][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.692767][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.705470][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.712423][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.718612][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.729950][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.747457][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.761794][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.770679][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.774386][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.786998][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.794674][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.805728][T14472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.823600][T14472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.824656][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.860043][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.866011][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.884800][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.908852][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.914777][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.948076][ T5979] usb 3-1: GET_CAPABILITIES returned 0 [ 386.948610][T14514] /dev/rnullb0: Can't lookup blockdev [ 386.953604][ T5979] usbtmc 3-1:16.0: can't read capabilities [ 387.008332][ T5979] usb 3-1: USB disconnect, device number 48 [ 387.348088][ T5852] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 387.478168][ T5852] usb 7-1: device descriptor read/64, error -71 [ 387.558127][ T5979] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 387.640301][ T5890] usb 5-1: USB disconnect, device number 69 [ 387.718079][ T5852] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 387.728176][ T5979] usb 3-1: Using ep0 maxpacket: 32 [ 387.745621][ T5979] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 387.756706][ T5979] usb 3-1: config 0 has no interface number 0 [ 387.764732][ T5979] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 387.777153][ T5979] usb 3-1: config 0 interface 196 has no altsetting 0 [ 387.787526][ T5979] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 387.807321][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.825866][ T5979] usb 3-1: Product: syz [ 387.831486][ T5979] usb 3-1: Manufacturer: syz [ 387.836105][ T5979] usb 3-1: SerialNumber: syz [ 387.863978][ T5979] usb 3-1: config 0 descriptor?? [ 387.882838][ T5852] usb 7-1: device descriptor read/64, error -71 [ 387.902187][T14543] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 388.013345][T14561] /dev/rnullb0: Can't lookup blockdev [ 388.028450][ T5852] usb usb7-port1: attempt power cycle [ 388.098887][T14566] /dev/rnullb0: Can't lookup blockdev [ 388.182493][T14543] /dev/rnullb0: Can't open blockdev [ 388.208599][ T5979] ipheth 3-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 388.231499][ T5979] ipheth 3-1:0.196: probe with driver ipheth failed with error -71 [ 388.251499][T14571] /dev/rnullb0: Can't lookup blockdev [ 388.259626][ T5979] usb 3-1: USB disconnect, device number 49 [ 388.316407][ T5890] ipheth 5-1:0.196: Apple iPhone USB Ethernet now disconnected [ 388.387971][ T5852] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 388.428736][ T5852] usb 7-1: device descriptor read/8, error -71 [ 388.678074][ T5852] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 388.724298][T14585] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2514'. [ 388.728707][ T5852] usb 7-1: device descriptor read/8, error -71 [ 388.759312][T14585] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2514'. [ 388.868486][ T5852] usb usb7-port1: unable to enumerate USB device [ 388.874677][T14594] netlink: 'syz.2.2516': attribute type 5 has an invalid length. [ 389.138066][ T926] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 389.288348][ T926] usb 5-1: device descriptor read/64, error -71 [ 389.529807][ T926] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 389.688126][ T926] usb 5-1: device descriptor read/64, error -71 [ 389.821179][ T926] usb usb5-port1: attempt power cycle [ 390.163897][ T5850] Bluetooth: unknown link type 9 [ 390.169140][ T5850] Bluetooth: hci4: connection err: -111 [ 390.176927][T14636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2523'. [ 390.192421][ T926] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 390.254383][ T926] usb 5-1: device descriptor read/8, error -71 [ 390.281714][ T5850] Bluetooth: hci3: unexpected event for opcode 0xbfd1 [ 390.607938][ T926] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 390.638800][ T926] usb 5-1: device descriptor read/8, error -71 [ 390.711271][T14661] openvswitch: netlink: Message has 16 unknown bytes. [ 390.750458][ T926] usb usb5-port1: unable to enumerate USB device [ 391.340087][T14691] overlay: ./file0 is not a directory [ 391.504403][T14694] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 391.513085][T14694] overlayfs: missing 'lowerdir' [ 391.523233][T14694] /dev/rnullb0: Can't open blockdev [ 391.693542][T14701] fuse: Unknown parameter '000000000000043454206410x0000000000000004' [ 392.041172][T14713] netlink: 830 bytes leftover after parsing attributes in process `syz.4.2545'. [ 392.055879][T14715] /dev/rnullb0: Can't open blockdev [ 392.060912][T14718] netlink: 'syz.5.2546': attribute type 4 has an invalid length. [ 392.062277][T14715] /dev/rnullb0: Can't open blockdev [ 392.075299][T14715] /dev/rnullb0: Can't open blockdev [ 392.081556][T14715] /dev/rnullb0: Can't open blockdev [ 392.082873][T14713] /dev/rnullb0: Can't open blockdev [ 392.087736][T14715] /dev/rnullb0: Can't open blockdev [ 392.099060][T14715] /dev/rnullb0: Can't open blockdev [ 392.104978][T14715] /dev/rnullb0: Can't open blockdev [ 392.458643][ T5890] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 392.632607][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 392.649507][ T5890] usb 5-1: config 0 has an invalid interface number: 104 but max is 0 [ 392.658452][ T5890] usb 5-1: config 0 has no interface number 0 [ 392.665169][ T5890] usb 5-1: config 0 interface 104 has no altsetting 0 [ 392.674872][ T5890] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=85.b3 [ 392.686515][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.694828][ T5890] usb 5-1: Product: syz [ 392.699512][ T5890] usb 5-1: Manufacturer: syz [ 392.704219][ T5890] usb 5-1: SerialNumber: syz [ 392.712175][ T5890] usb 5-1: config 0 descriptor?? [ 392.734083][T14736] /dev/rnullb0: Can't open blockdev [ 392.805263][T14738] netlink: 'syz.6.2554': attribute type 11 has an invalid length. [ 392.927238][ T5890] i2c-tiny-usb 5-1:0.104: version 85.b3 found at bus 005 address 074 [ 392.953064][ T5890] (null): failure setting delay to 10us [ 392.959288][ T5890] i2c-tiny-usb 5-1:0.104: probe with driver i2c-tiny-usb failed with error -5 [ 392.994527][ T5890] usb 5-1: USB disconnect, device number 74 [ 393.046334][ T30] audit: type=1326 audit(1751851804.933:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14745 comm="syz.5.2556" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f44f998e929 code=0x0 [ 393.267818][T14750] /dev/rnullb0: Can't open blockdev [ 393.556619][T14760] pimreg: entered allmulticast mode [ 393.565088][T14762] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 393.573991][T14760] pimreg: left allmulticast mode [ 393.693423][T14765] overlay: Unknown parameter '/' [ 393.712857][T14765] /dev/rnullb0: Can't open blockdev [ 393.751049][T14767] /dev/rnullb0: Can't open blockdev [ 393.845518][T14771] syz.4.2566: attempt to access beyond end of device [ 393.845518][T14771] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 393.857246][T14772] fuseblk: Bad value for 'user_id' [ 393.866465][T14772] fuseblk: Bad value for 'user_id' [ 393.898359][T14771] SQUASHFS error: Failed to read block 0x0: -5 [ 393.904550][T14771] unable to read squashfs_super_block [ 393.967075][T14778] /dev/rnullb0: Can't open blockdev [ 394.124450][T14783] /dev/rnullb0: Can't open blockdev [ 394.375564][T14791] fuseblk: Unknown parameter ' ' [ 394.448083][ T926] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 394.613710][ T926] usb 5-1: config 0 has an invalid interface number: 69 but max is 0 [ 394.622204][ T5890] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 394.637085][ T926] usb 5-1: config 0 has no interface number 0 [ 394.652823][T14796] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 394.654659][ T926] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 394.720240][ T926] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 394.742849][ T926] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 394.762479][ T926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.781720][ T926] usb 5-1: Product: syz [ 394.785908][ T926] usb 5-1: Manufacturer: syz [ 394.801584][ T926] usb 5-1: SerialNumber: syz [ 394.812922][ T926] usb 5-1: config 0 descriptor?? [ 394.826813][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.854786][T14787] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 394.857911][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 394.874786][ T926] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 394.892303][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 394.908391][ T926] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 394.917781][ T5890] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 394.954404][ T5890] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 394.965207][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.012789][ T5890] usb 3-1: config 0 descriptor?? [ 395.276660][T14787] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 395.309101][T14787] /dev/rnullb0: Can't open blockdev [ 395.444634][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.482649][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.520202][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.539648][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.549657][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.557177][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.564852][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.572394][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.580379][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.608657][ T926] usb 5-1: USB disconnect, device number 75 [ 395.645296][ T926] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 395.666778][ T5890] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 395.700011][ T926] cyberjack 5-1:0.69: device disconnected [ 395.735659][ T5890] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 395.796925][ T5890] usb 3-1: USB disconnect, device number 50 [ 395.954025][T14803] fido_id[14803]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 396.197990][ T926] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 396.374779][ T926] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 396.389393][ T926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.406136][ T926] usb 5-1: Product: syz [ 396.412227][ T926] usb 5-1: Manufacturer: syz [ 396.416854][ T926] usb 5-1: SerialNumber: syz [ 396.454094][ T926] usb 5-1: config 0 descriptor?? [ 396.601473][T14812] /dev/rnullb0: Can't open blockdev [ 396.912874][T14816] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2581'. [ 396.968960][ T5890] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 397.149686][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.168015][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.191398][ T5890] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 397.210835][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.239136][ T5890] usb 3-1: config 0 descriptor?? [ 397.480089][ T926] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 397.656363][T14814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.693754][ T926] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 397.717265][T14814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.725082][ T926] asix 5-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 397.768744][ T926] asix 5-1:0.0: probe with driver asix failed with error -71 [ 397.806811][ T926] usb 5-1: USB disconnect, device number 76 [ 397.813613][ T5890] lenovo 0003:17EF:6047.0011: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0 [ 397.997378][T14814] /dev/rnullb0: Can't open blockdev [ 398.043005][ T5890] lenovo 0003:17EF:6047.0011: Failed to switch F7/9/11 mode: -71 [ 398.064060][T14836] /dev/rnullb0: Can't lookup blockdev [ 398.069492][ T5890] lenovo 0003:17EF:6047.0011: Failed to switch middle button: -71 [ 398.069991][ T5890] lenovo 0003:17EF:6047.0011: Fn-lock setting failed: -71 [ 398.113520][ T5890] lenovo 0003:17EF:6047.0011: Sensitivity setting failed: -71 [ 398.148659][ T5890] usb 3-1: USB disconnect, device number 51 [ 398.463245][T14845] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 398.754295][T14854] netlink: 'syz.5.2590': attribute type 10 has an invalid length. [ 398.779315][T14854] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2590'. [ 398.867943][T14857] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2590'. [ 400.301974][T14872] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 400.315279][T14874] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2596'. [ 400.337932][T14872] netlink: 'syz.2.2595': attribute type 101 has an invalid length. [ 400.373913][T14872] netlink: 836 bytes leftover after parsing attributes in process `syz.2.2595'. [ 400.598132][ T5979] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 400.766843][ T5979] usb 3-1: config 0 has an invalid interface number: 57 but max is 0 [ 400.775360][ T5979] usb 3-1: config 0 has no interface number 0 [ 400.788164][ T5979] usb 3-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 400.809224][ T5979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.838331][ T5979] usb 3-1: config 0 descriptor?? [ 400.856111][ T5979] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 400.865312][ T5979] gspca_mr97310a: reg write [21] error -22 [ 400.878506][ T5979] mr97310a 3-1:0.57: probe with driver mr97310a failed with error -22 [ 401.058123][T14878] netlink: 'syz.2.2595': attribute type 1 has an invalid length. [ 401.067119][T14878] netlink: 'syz.2.2595': attribute type 101 has an invalid length. [ 401.076381][T14878] netlink: 836 bytes leftover after parsing attributes in process `syz.2.2595'. [ 401.378753][T14884] netlink: 'syz.5.2598': attribute type 6 has an invalid length. [ 402.337373][ T926] usb 3-1: USB disconnect, device number 52 [ 402.557719][T14889] /dev/rnullb0: Can't open blockdev [ 402.622617][T14891] /dev/rnullb0: Can't open blockdev [ 402.735958][T14894] IPVS: set_ctl: invalid protocol: 29 172.30.1.5:20002 [ 402.746404][T14894] IPVS: set_ctl: invalid protocol: 50 224.0.0.2:20003 [ 403.141870][T14904] netlink: 'syz.2.2605': attribute type 1 has an invalid length. [ 403.389725][T14912] /dev/rnullb0: Can't lookup blockdev [ 403.398050][ T5979] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 403.558855][T14923] tmpfs: Unknown parameter 'ípol' [ 403.582694][ T5979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 403.637133][T14929] /dev/rnullb0: Can't lookup blockdev [ 403.638081][ T5979] usb 3-1: not running at top speed; connect to a high speed hub [ 403.672309][ T5979] usb 3-1: config 9 has an invalid interface number: 68 but max is 0 [ 403.688348][ T5979] usb 3-1: config 9 has no interface number 0 [ 403.707906][ T5979] usb 3-1: config 9 interface 68 has no altsetting 0 [ 403.737081][ T5979] usb 3-1: New USB device found, idVendor=04dd, idProduct=9050, bcdDevice=43.82 [ 403.750767][ T5979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.779642][ T5979] usb 3-1: Product: syz [ 403.783829][ T5979] usb 3-1: Manufacturer: syz [ 403.806122][ T5979] usb 3-1: SerialNumber: syz [ 404.036734][T14904] /dev/rnullb0: Can't open blockdev [ 404.060128][ T5979] usb 3-1: bad CDC descriptors [ 404.094565][ T5979] usb 3-1: USB disconnect, device number 53 [ 404.715270][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2618'. [ 404.931596][T14968] fuse: Bad value for 'user_id' [ 404.949103][T14968] fuse: Bad value for 'user_id' [ 405.186815][ T30] audit: type=1804 audit(1751851817.073:57): pid=14981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2622" name="rnullb0" dev="tmpfs" ino=677 res=1 errno=0 [ 405.373402][T14985] netlink: 763 bytes leftover after parsing attributes in process `syz.5.2624'. [ 405.407217][T14989] /dev/rnullb0: Can't open blockdev [ 405.418008][ T890] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 405.554151][T14994] netlink: 176 bytes leftover after parsing attributes in process `syz.5.2627'. [ 405.564891][T14994] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2627'. [ 405.575020][T14994] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2627'. [ 405.590811][ T890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 405.601600][ T890] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 405.615616][ T890] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 405.625194][ T890] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 405.659768][ T890] usb 5-1: Manufacturer: syz [ 405.676986][ T890] usb 5-1: config 0 descriptor?? [ 405.919503][T15006] batadv0: entered allmulticast mode [ 405.931644][T15006] /dev/rnullb0: Can't lookup blockdev [ 406.350471][T14992] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.361599][T14992] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.368375][T14992] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 406.374587][T14992] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 406.383592][T15007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.403018][T15007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.441650][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.455321][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.560314][ T890] usb 5-1: USB disconnect, device number 77 [ 407.658053][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.878634][ T926] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 408.040803][ T926] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 408.067742][ T926] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.091016][ T926] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 408.107921][ T926] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 408.116227][ T926] usb 3-1: Manufacturer: syz [ 408.127802][ T926] usb 3-1: config 0 descriptor?? [ 408.248304][ T926] rc_core: IR keymap rc-hauppauge not found [ 408.254249][ T926] Registered IR keymap rc-empty [ 408.269513][ T926] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 408.305849][ T926] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15 [ 408.378738][ T5850] Bluetooth: hci3: command 0x0c1a tx timeout [ 408.384792][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 408.391316][ T5856] Bluetooth: hci0: command 0x0c1a tx timeout [ 408.441971][T15043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.463802][T15043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.548599][T15038] rc rc0: two consecutive events of type space [ 408.637145][T15047] /dev/rnullb0: Can't open blockdev [ 409.124345][T15053] netlink: 180 bytes leftover after parsing attributes in process `syz.4.2642'. [ 409.166323][ T5849] usb 3-1: USB disconnect, device number 54 [ 409.612053][T15068] /dev/rnullb0: Can't open blockdev [ 409.799106][T15070] /dev/rnullb0: Can't open blockdev [ 410.257938][ T5849] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 410.307294][T15080] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 410.441617][ T5849] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 410.454633][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.466425][ T5849] usb 5-1: Product: syz [ 410.473889][ T5849] usb 5-1: Manufacturer: syz [ 410.480079][ T5849] usb 5-1: SerialNumber: syz [ 410.503533][ T5849] usb 5-1: config 0 descriptor?? [ 410.547075][T15084] /dev/rnullb0: Can't open blockdev [ 410.572337][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 410.575620][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 410.593049][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 410.601618][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 410.611552][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 410.682742][T15088] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2656'. [ 410.704585][ T3469] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.725948][ T5849] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 410.844983][ T3469] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.976243][T15100] /dev/rnullb0: Can't open blockdev [ 410.996251][ T3469] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.092613][T15103] /dev/rnullb0: Can't lookup blockdev [ 411.124636][ T3469] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.160591][T15107] /dev/rnullb0: Can't open blockdev [ 411.183015][T15107] /dev/rnullb0: Can't open blockdev [ 411.349567][ T3469] bridge_slave_1: left allmulticast mode [ 411.369327][ T3469] bridge_slave_1: left promiscuous mode [ 411.375120][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.410301][ T3469] bridge_slave_0: left allmulticast mode [ 411.423989][ T3469] bridge_slave_0: left promiscuous mode [ 411.438284][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.858049][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.870267][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.880700][ T3469] bond0 (unregistering): Released all slaves [ 411.905360][T15085] chnl_net:caif_netlink_parms(): no params data found [ 412.018883][ T5849] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 412.078338][ T5849] usb 5-1: USB disconnect, device number 79 [ 412.259712][T15085] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.270302][T15085] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.277499][T15085] bridge_slave_0: entered allmulticast mode [ 412.318767][T15085] bridge_slave_0: entered promiscuous mode [ 412.365690][T15085] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.400229][T15085] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.423180][T15085] bridge_slave_1: entered allmulticast mode [ 412.444296][T15085] bridge_slave_1: entered promiscuous mode [ 412.701550][ T5856] Bluetooth: hci2: command tx timeout [ 412.813318][ T3469] hsr_slave_0: left promiscuous mode [ 412.852712][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 412.878252][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.913167][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 412.943599][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.986233][ T3469] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 412.996951][ T3469] batman_adv: batadv0: Removing interface: virt_wifi0 [ 413.004385][T15155] sctp: [Deprecated]: syz.5.2671 (pid 15155) Use of int in max_burst socket option. [ 413.004385][T15155] Use struct sctp_assoc_value instead [ 413.056083][ T3469] veth1_macvtap: left promiscuous mode [ 413.112000][ T3469] veth0_macvtap: left promiscuous mode [ 413.128078][ T3469] veth1_vlan: left promiscuous mode [ 413.133443][ T3469] veth0_vlan: left promiscuous mode [ 413.279904][T15164] /dev/rnullb0: Can't lookup blockdev [ 413.639697][ T926] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 413.798277][ T926] usb 5-1: device descriptor read/64, error -71 [ 414.048034][ T926] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 414.169760][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 414.198131][ T926] usb 5-1: device descriptor read/64, error -71 [ 414.242905][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 414.312100][ T926] usb usb5-port1: attempt power cycle [ 414.662165][ T926] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 414.698843][ T926] usb 5-1: device descriptor read/8, error -71 [ 414.778010][ T5856] Bluetooth: hci2: command tx timeout [ 414.831347][T15085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.923044][T15085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.947931][ T926] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 414.968711][ T926] usb 5-1: device descriptor read/8, error -71 [ 415.014386][T15085] team0: Port device team_slave_0 added [ 415.052212][T15085] team0: Port device team_slave_1 added [ 415.084652][ T926] usb usb5-port1: unable to enumerate USB device [ 415.246911][T15085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.263518][T15085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.318085][T15085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.359850][T15085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.377071][T15085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.378897][T15199] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 415.440093][T15085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.449568][T15199] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2679'. [ 415.675609][T15085] hsr_slave_0: entered promiscuous mode [ 415.693441][T15085] hsr_slave_1: entered promiscuous mode [ 415.707063][T15085] debugfs: 'hsr0' already exists in 'hsr' [ 415.720515][T15085] Cannot create hsr debugfs directory [ 416.366705][T15221] /dev/rnullb0: Can't open blockdev [ 416.379087][T15222] /dev/rnullb0: Can't open blockdev [ 416.406483][T15225] /dev/rnullb0: Can't open blockdev [ 416.628916][T15227] netlink: 'syz.5.2684': attribute type 10 has an invalid length. [ 416.649054][T15227] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2684'. [ 416.692460][T15235] /dev/rnullb0: Can't open blockdev [ 416.738204][T15229] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2684'. [ 416.858140][ T5856] Bluetooth: hci2: command tx timeout [ 416.911424][T15085] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 416.951670][T15085] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 416.983170][T15085] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 416.998361][T15085] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 417.078035][ T926] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 417.108571][T15253] /dev/rnullb0: Can't lookup blockdev [ 417.278107][ T926] usb 3-1: device descriptor read/64, error -71 [ 417.287185][T15255] fuse: Unknown parameter '_…ìÌ [ 417.287185][T15255] 0–ó"‡_ý•' [ 417.326553][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2689'. [ 417.346273][T15085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.403452][T15085] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.427123][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.434340][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.466372][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.473566][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.518091][ T926] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 417.565414][T15262] /dev/rnullb0: Can't open blockdev [ 417.668938][ T926] usb 3-1: device descriptor read/64, error -71 [ 417.778434][ T926] usb usb3-port1: attempt power cycle [ 418.016169][T15085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.138019][ T926] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 418.189235][ T926] usb 3-1: device descriptor read/8, error -71 [ 418.348921][ T24] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 418.427927][ T926] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 418.459002][ T926] usb 3-1: device descriptor read/8, error -71 [ 418.509561][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.520783][T15085] veth0_vlan: entered promiscuous mode [ 418.531484][ T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 418.535993][T15085] veth1_vlan: entered promiscuous mode [ 418.557185][ T24] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 418.571393][ T926] usb usb3-port1: unable to enumerate USB device [ 418.576655][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.587396][ T24] usb 5-1: Product: syz [ 418.591875][ T24] usb 5-1: Manufacturer: syz [ 418.596545][ T24] usb 5-1: SerialNumber: syz [ 418.604560][ T24] usb 5-1: config 0 descriptor?? [ 418.626917][T15085] veth0_macvtap: entered promiscuous mode [ 418.649911][T15085] veth1_macvtap: entered promiscuous mode [ 418.692439][T15085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.715686][T15085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.744404][ T3469] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.775580][ T3469] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.812089][ T3469] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.818005][ T24] usb 5-1: USB disconnect, device number 84 [ 418.850912][ T3469] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.938262][ T5856] Bluetooth: hci2: command tx timeout [ 418.976555][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.013496][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.026560][T15316] netlink: 'syz.5.2696': attribute type 10 has an invalid length. [ 419.040786][T15316] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2696'. [ 419.106314][T15316] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2696'. [ 419.163994][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.172647][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.005007][ T30] audit: type=1326 audit(1751852087.895:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15340 comm="syz.2.2701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2da78e929 code=0x0 [ 420.318139][ T9] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 420.343298][T15349] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2702'. [ 420.397502][T15349] /dev/rnullb0: Can't open blockdev [ 420.477971][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 420.504120][ T9] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 420.525201][ T9] usb 3-1: config 0 has no interface number 0 [ 420.546876][ T9] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 420.566030][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.587939][ T9] usb 3-1: Product: syz [ 420.592535][ T9] usb 3-1: Manufacturer: syz [ 420.607925][ T9] usb 3-1: SerialNumber: syz [ 420.614252][T15042] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 420.631255][T15042] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 420.644712][T15042] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 420.653136][T15042] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 420.665146][T15042] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 420.728698][ T9] usb 3-1: config 0 descriptor?? [ 421.069079][T15361] veth1_macvtap: left promiscuous mode [ 421.074951][T15361] macsec0: entered allmulticast mode [ 421.103491][T15361] /dev/rnullb0: Can't open blockdev [ 421.322094][T15366] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2706'. [ 421.335641][T15366] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2706'. [ 421.357568][ T1153] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.395953][T15367] binder: 15365:15367 ioctl c0306201 200000000640 returned -22 [ 421.420227][T15367] /dev/rnullb0: Can't open blockdev [ 421.463483][ T1153] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.507298][T15352] chnl_net:caif_netlink_parms(): no params data found [ 421.614016][T15372] /dev/rnullb0: Can't open blockdev [ 421.622837][ T1153] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.761064][ T1153] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.771866][ T5849] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 421.914266][T15352] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.921833][T15352] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.929911][T15352] bridge_slave_0: entered allmulticast mode [ 421.938430][T15352] bridge_slave_0: entered promiscuous mode [ 421.947960][ T5849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.952345][T15352] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.969704][T15352] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.977045][T15352] bridge_slave_1: entered allmulticast mode [ 421.989956][ T5849] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 421.997155][T15352] bridge_slave_1: entered promiscuous mode [ 422.043290][ T5849] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 422.067797][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.134537][ T5849] usb 5-1: config 0 descriptor?? [ 422.146274][T15352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.150533][ T5849] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 422.192476][T15352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.361840][T15352] team0: Port device team_slave_0 added [ 422.416646][T15352] team0: Port device team_slave_1 added [ 422.425524][ T1153] bridge_slave_1: left allmulticast mode [ 422.432566][ T1153] bridge_slave_1: left promiscuous mode [ 422.438662][ T1153] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.449375][ T1153] bridge_slave_0: left allmulticast mode [ 422.455075][ T1153] bridge_slave_0: left promiscuous mode [ 422.462383][ T1153] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.786154][ T5856] Bluetooth: hci3: command tx timeout [ 422.808240][ T5849] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 422.951318][ T1153] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.962402][ T1153] bond_slave_0: left promiscuous mode [ 422.970458][ T1153] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.970820][ T5849] usb 8-1: Using ep0 maxpacket: 32 [ 422.985085][ T1153] bond_slave_1: left promiscuous mode [ 422.994924][ T1153] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 423.004672][ T5849] usb 8-1: config 204 has 1 interface, different from the descriptor's value: 31 [ 423.014436][ T1153] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 423.029300][ T1153] bond0 (unregistering): Released all slaves [ 423.030799][ T5849] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 423.057741][T15306] usb 3-1: USB disconnect, device number 59 [ 423.064625][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.098884][ T5849] usb 8-1: Product: syz [ 423.103089][ T5849] usb 8-1: Manufacturer: syz [ 423.116207][ T5849] usb 8-1: SerialNumber: syz [ 423.127637][T15402] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.178490][T15402] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.197114][T15352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.210044][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.246291][T15352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.266403][T15352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.278239][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.311988][T15352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.332575][ T1153] tipc: Disabling bearer [ 423.347006][ T1153] tipc: Left network mode [ 423.433756][T15352] hsr_slave_0: entered promiscuous mode [ 423.442004][T15400] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.454051][T15352] hsr_slave_1: entered promiscuous mode [ 423.467542][T15400] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.471677][T15352] debugfs: 'hsr0' already exists in 'hsr' [ 423.489763][ T5849] airspy 8-1:204.0: usb_control_msg() failed -71 request 09 [ 423.490133][T15352] Cannot create hsr debugfs directory [ 423.497459][ T5849] airspy 8-1:204.0: Could not detect board [ 423.513623][ T5849] airspy 8-1:204.0: probe with driver airspy failed with error -71 [ 423.532411][ T5849] usb 8-1: USB disconnect, device number 2 [ 423.568009][T15306] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 423.694924][ T1153] hsr_slave_0: left promiscuous mode [ 423.701188][ T1153] hsr_slave_1: left promiscuous mode [ 423.707170][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.715011][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.722989][ T1153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.729892][T15306] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 423.730904][ T1153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.746684][T15306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 423.760902][ T1153] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 423.763699][T15306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 423.768670][ T1153] batman_adv: batadv0: Removing interface: virt_wifi0 [ 423.784025][T15306] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 423.805436][T15306] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 423.816234][T15306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.817580][ T1153] veth0_macvtap: left promiscuous mode [ 423.830793][ T1153] veth1_vlan: left promiscuous mode [ 423.836202][ T1153] veth0_vlan: left promiscuous mode [ 423.845825][T15306] usb 3-1: config 0 descriptor?? [ 424.210956][T15412] /dev/rnullb0: Can't open blockdev [ 424.266363][T15306] hid_parser_main: 5 callbacks suppressed [ 424.266390][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.298019][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.310236][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.317678][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.325623][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.333406][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.341268][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.372498][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.420424][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.442849][T15306] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 424.479814][T15306] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 424.577269][T15306] usb 3-1: USB disconnect, device number 60 [ 424.612835][ T9] usb 5-1: USB disconnect, device number 85 [ 424.676824][T15419] fido_id[15419]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 424.858132][ T5856] Bluetooth: hci3: command tx timeout [ 424.893797][ T1153] team0 (unregistering): Port device team_slave_1 removed [ 424.945893][ T1153] team0 (unregistering): Port device team_slave_0 removed [ 425.196637][ T1153] batadv0 (unregistering): left allmulticast mode [ 425.374150][T15428] netlink: 'syz.4.2718': attribute type 11 has an invalid length. [ 425.510588][T15435] /dev/rnullb0: Can't open blockdev [ 425.665454][T15439] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2720'. [ 425.780224][T15442] /dev/rnullb0: Can't open blockdev [ 426.068412][ T24] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 426.161363][T15352] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 426.174485][T15352] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 426.191021][T15352] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 426.241487][T15352] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 426.248399][ T24] usb 8-1: Using ep0 maxpacket: 16 [ 426.271531][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 426.301635][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 426.307204][T15462] /dev/rnullb0: Can't open blockdev [ 426.312973][ T24] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 426.335252][ T24] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.348512][ T10] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 426.352337][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.365346][ T24] usb 8-1: Product: syz [ 426.370093][ T24] usb 8-1: Manufacturer: syz [ 426.388260][ T24] usb 8-1: SerialNumber: syz [ 426.506722][T15352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.520280][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 426.550889][ T10] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 426.560651][T15352] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.567968][ T10] usb 3-1: config 0 has no interface number 0 [ 426.581323][ T10] usb 3-1: config 0 interface 12 has no altsetting 0 [ 426.604713][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.611912][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.621312][ T10] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 426.640024][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.641173][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.655208][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.657971][ T10] usb 3-1: Product: syz [ 426.677057][ T10] usb 3-1: Manufacturer: syz [ 426.687168][ T10] usb 3-1: SerialNumber: syz [ 426.722163][ T10] usb 3-1: config 0 descriptor?? [ 426.822177][ T24] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 426.938144][ T5856] Bluetooth: hci3: command tx timeout [ 426.980096][ T10] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 426.997450][ T10] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 427.015378][ T10] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 427.024808][ T10] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 427.045692][ T10] usb 3-1: USB disconnect, device number 61 [ 427.280466][T15352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.641931][ T24] usb 8-1: 2:1: cannot get freq at ep 0x82 [ 427.742558][ T24] usb 8-1: USB disconnect, device number 3 [ 427.759298][ T3469] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.805559][ T5859] udevd[5859]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.955457][ T3469] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.978514][ T5852] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 428.083849][ T3469] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.158050][ T5852] usb 5-1: Using ep0 maxpacket: 8 [ 428.165944][ T5852] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 428.179622][ T5852] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 428.199950][ T3469] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.218378][ T5852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 428.248091][ T5852] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 428.269217][ T5852] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 428.269768][T15352] veth0_vlan: entered promiscuous mode [ 428.292770][ T5852] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 428.320083][ T5852] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.334398][T15352] veth1_vlan: entered promiscuous mode [ 428.592972][ T5852] usb 5-1: usb_control_msg returned -71 [ 428.603981][T15352] veth0_macvtap: entered promiscuous mode [ 428.619083][ T5852] usbtmc 5-1:16.0: can't read capabilities [ 428.649231][T15352] veth1_macvtap: entered promiscuous mode [ 428.656802][ T3469] bridge_slave_1: left allmulticast mode [ 428.660219][ T5852] usb 5-1: USB disconnect, device number 86 [ 428.671847][ T3469] bridge_slave_1: left promiscuous mode [ 428.679176][ T3469] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.718305][ T3469] bridge_slave_0: left allmulticast mode [ 428.724866][ T3469] bridge_slave_0: left promiscuous mode [ 428.733364][ T3469] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.784513][T15515] /dev/rnullb0: Can't open blockdev [ 428.889871][T15042] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.905408][T15042] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.923669][T15042] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.946375][T15042] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.957153][T15042] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 429.018577][T15042] Bluetooth: hci3: command tx timeout [ 429.215771][ T3469] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.227095][ T3469] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.240339][ T3469] bond0 (unregistering): Released all slaves [ 429.457429][T15352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.509813][T15352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.613283][ T59] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.622196][ T59] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.685335][T15532] /dev/rnullb0: Can't open blockdev [ 429.735982][ T59] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.761389][ T59] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.025617][ T3469] hsr_slave_0: left promiscuous mode [ 430.035529][ T3469] hsr_slave_1: left promiscuous mode [ 430.046266][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.068705][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.085783][ T3469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.100964][ T3469] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.115605][ T3469] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 430.126676][ T3469] batman_adv: batadv0: Removing interface: virt_wifi0 [ 430.159768][ T3469] veth1_macvtap: left promiscuous mode [ 430.165340][ T3469] veth0_macvtap: left promiscuous mode [ 430.178183][ T3469] veth1_vlan: left promiscuous mode [ 430.183560][ T3469] veth0_vlan: left promiscuous mode [ 430.294526][T15532] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.666061][T15553] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 430.676887][T15553] /dev/rnullb0: Can't open blockdev [ 430.972393][T15566] overlayfs: failed to resolve './bus': -2 [ 431.019570][T15042] Bluetooth: hci0: command tx timeout [ 431.028093][ T24] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 431.116376][ T3469] team0 (unregistering): Port device team_slave_1 removed [ 431.162217][ T3469] team0 (unregistering): Port device team_slave_0 removed [ 431.201862][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.221179][ T24] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.238057][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.249713][ T24] usb 5-1: config 0 descriptor?? [ 431.275167][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 431.413086][T15574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 431.670667][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 431.694617][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 431.708407][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 431.721333][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 431.734711][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 431.749538][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 431.776336][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 431.791261][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 431.805216][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 431.820267][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 431.833955][ T1007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.848026][ T24] pwc: recv_control_msg error -32 req 02 val 2400 [ 431.864103][ T24] pwc: recv_control_msg error -32 req 02 val 2600 [ 431.869917][ T1007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.879551][ T24] pwc: recv_control_msg error -32 req 02 val 2900 [ 431.889550][ T24] pwc: recv_control_msg error -32 req 02 val 2800 [ 431.912390][ T24] pwc: recv_control_msg error -32 req 04 val 1100 [ 431.953098][ T24] pwc: Registered as video103. [ 431.973718][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 432.127458][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.155439][T15555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.170675][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.211068][T15555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.249822][ T5979] usb 5-1: USB disconnect, device number 87 [ 432.354845][T15518] chnl_net:caif_netlink_parms(): no params data found [ 432.851688][T15518] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.890861][T15518] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.918047][T15518] bridge_slave_0: entered allmulticast mode [ 432.925682][T15518] bridge_slave_0: entered promiscuous mode [ 432.949402][T15518] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.956665][T15518] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.976900][T15518] bridge_slave_1: entered allmulticast mode [ 432.988266][ T5979] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 433.010271][T15518] bridge_slave_1: entered promiscuous mode [ 433.098463][ T5856] Bluetooth: hci0: command tx timeout [ 433.140021][ T5979] usb 6-1: device descriptor read/64, error -71 [ 433.201299][T15518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 433.240199][T15518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 433.396816][T15518] team0: Port device team_slave_0 added [ 433.406897][ T5979] usb 6-1: new low-speed USB device number 37 using dummy_hcd [ 433.431914][T15518] team0: Port device team_slave_1 added [ 433.565708][T15518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.572849][ T5979] usb 6-1: device descriptor read/64, error -71 [ 433.582641][T15518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.629809][T15518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.690185][ T5979] usb usb6-port1: attempt power cycle [ 433.695008][T15518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.717926][T15518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.799222][T15518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.931422][T15518] hsr_slave_0: entered promiscuous mode [ 433.940464][T15518] hsr_slave_1: entered promiscuous mode [ 434.028048][ T5979] usb 6-1: new low-speed USB device number 38 using dummy_hcd [ 434.058952][ T5979] usb 6-1: device descriptor read/8, error -71 [ 434.088031][ T5849] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 434.151168][ T5852] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 434.238701][ T5849] usb 5-1: Using ep0 maxpacket: 16 [ 434.251472][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.286045][ T5849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.303873][ T5852] usb 8-1: device descriptor read/64, error -71 [ 434.307141][ T5849] usb 5-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 434.329163][ T5979] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 434.344261][ T5849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.344827][T15518] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 434.369172][ T5849] usb 5-1: config 0 descriptor?? [ 434.377570][T15518] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 434.391221][ T5979] usb 6-1: device descriptor read/8, error -71 [ 434.399474][T15518] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 434.414432][T15518] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 434.510590][ T5979] usb usb6-port1: unable to enumerate USB device [ 434.558329][ T5852] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 434.593039][T15518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.623877][T15518] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.650167][ T3469] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.657385][ T3469] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.689495][ T3469] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.696661][ T3469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.704481][ T5852] usb 8-1: device descriptor read/64, error -71 [ 434.828232][ T5852] usb usb8-port1: attempt power cycle [ 434.848130][ T5849] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0013/input/input17 [ 434.969806][ T5849] input: HID 0458:5012 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5012.0013/input/input18 [ 435.011205][T15649] overlay: filesystem on ./cgroup is read-only [ 435.071106][ T5849] kye 0003:0458:5012.0013: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.4-1/input0 [ 435.110020][ C0] raw-gadget.1 gadget.4: ignoring, device is not running [ 435.139544][T15518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.152981][ T5849] usb 5-1: USB disconnect, device number 88 [ 435.181165][ T5856] Bluetooth: hci0: command 0x040f tx timeout [ 435.191022][ T5852] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 435.239078][ T5852] usb 8-1: device descriptor read/8, error -71 [ 435.271722][T15684] fido_id[15684]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 435.488082][ T5852] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 435.540918][ T5852] usb 8-1: device descriptor read/8, error -71 [ 435.668682][ T5852] usb usb8-port1: unable to enumerate USB device [ 435.723158][T15518] veth0_vlan: entered promiscuous mode [ 435.756477][T15518] veth1_vlan: entered promiscuous mode [ 435.865291][T15518] veth0_macvtap: entered promiscuous mode [ 435.878551][T15703] /dev/rnullb0: Can't open blockdev [ 435.882424][T15518] veth1_macvtap: entered promiscuous mode [ 435.892666][T15702] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 435.899542][T15702] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 435.920687][T15707] /dev/rnullb0: Can't open blockdev [ 435.936308][T15518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.963705][T15518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 436.002802][ T3469] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.022883][ T3469] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.050701][ T3469] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.105477][ T3469] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.200416][T15715] /dev/rnullb0: Can't open blockdev [ 436.227166][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.252240][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.312978][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.329023][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.353741][T15718] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2759'. [ 436.369010][T15718] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2759'. [ 436.386434][T15718] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2759'. [ 436.402426][T15524] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 436.568052][T15524] usb 5-1: Using ep0 maxpacket: 8 [ 436.579205][T15524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.593410][T15524] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.604623][T15524] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 436.621101][T15524] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 436.631616][T15524] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.652684][T15524] usb 5-1: config 0 descriptor?? [ 436.788949][ T5979] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 436.800505][T15730] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2761'. [ 437.010922][ T5979] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 437.037958][ T5979] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 437.061408][ T5979] usb 9-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 437.077524][ T5979] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.092523][ T5979] usb 9-1: Product: syz [ 437.096918][ T5979] usb 9-1: Manufacturer: syz [ 437.102473][ T5979] usb 9-1: SerialNumber: syz [ 437.115851][ T5979] usb 9-1: config 0 descriptor?? [ 437.137107][T15524] hid_parser_main: 5 callbacks suppressed [ 437.137126][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.155844][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.167133][T15745] /dev/rnullb0: Can't open blockdev [ 437.173894][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.181744][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.189870][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.197068][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.205677][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.214463][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.224382][T15524] hid-rmi 0003:06CB:81A7.0014: unknown main item tag 0x0 [ 437.231937][T15524] hid-rmi 0003:06CB:81A7.0014: unbalanced collection at end of report description [ 437.243898][T15524] hid-rmi 0003:06CB:81A7.0014: parse failed [ 437.252224][T15524] hid-rmi 0003:06CB:81A7.0014: probe with driver hid-rmi failed with error -22 [ 437.261703][T15042] Bluetooth: hci0: command 0x040f tx timeout [ 437.268118][ T926] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 437.330728][ T30] audit: type=1800 audit(1751852105.225:59): pid=15721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2730" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 437.432128][ T926] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 437.453929][ T926] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.462218][ T926] usb 8-1: Product: syz [ 437.466472][ T926] usb 8-1: Manufacturer: syz [ 437.473840][ T926] usb 8-1: SerialNumber: syz [ 437.493163][ T926] usb 8-1: config 0 descriptor?? [ 437.725588][ T926] usb 8-1: USB disconnect, device number 8 [ 438.016333][T15766] /dev/rnullb0: Can't open blockdev [ 438.449210][ T30] audit: type=1326 audit(1751852106.335:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15780 comm="syz.7.2766" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9c3878e929 code=0x0 [ 439.162816][ T926] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 439.197788][ T5849] usb 5-1: USB disconnect, device number 89 [ 439.328063][ T926] usb 6-1: device descriptor read/64, error -71 [ 439.338006][T15042] Bluetooth: hci0: command 0x040f tx timeout [ 439.572116][ T5849] usb 9-1: USB disconnect, device number 2 [ 439.590897][ T926] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 439.674319][T15814] binder: 15813:15814 ioctl 40046210 0 returned -14 [ 439.748091][ T926] usb 6-1: device descriptor read/64, error -71 [ 439.862968][ T926] usb usb6-port1: attempt power cycle [ 440.108456][T15524] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 440.217767][ T5979] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 440.228804][ T926] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 440.258630][ T926] usb 6-1: device descriptor read/8, error -71 [ 440.310933][T15524] usb 5-1: Invalid ep0 maxpacket: 16 [ 440.400045][ T5979] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 440.427192][ T5979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 440.443677][ T5979] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 440.457201][T15524] usb 5-1: new low-speed USB device number 91 using dummy_hcd [ 440.472625][ T5979] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 440.497516][ T5979] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 440.502000][ T926] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 440.508341][ T5979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.535236][ T5979] usb 9-1: config 0 descriptor?? [ 440.546105][T15827] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 440.563295][ T926] usb 6-1: device descriptor read/8, error -71 [ 440.648067][T15524] usb 5-1: Invalid ep0 maxpacket: 16 [ 440.660685][T15524] usb usb5-port1: attempt power cycle [ 440.689242][ T926] usb usb6-port1: unable to enumerate USB device [ 441.005389][ T5979] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 441.038486][T15524] usb 5-1: new low-speed USB device number 92 using dummy_hcd [ 441.070795][T15524] usb 5-1: Invalid ep0 maxpacket: 16 [ 441.209322][T15524] usb 5-1: new low-speed USB device number 93 using dummy_hcd [ 441.242641][T15524] usb 5-1: Invalid ep0 maxpacket: 16 [ 441.251821][T15524] usb usb5-port1: unable to enumerate USB device [ 442.056138][T15871] /dev/rnullb0: Can't open blockdev [ 442.430859][ T5942] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 442.439653][T15880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2781'. [ 442.588077][ T5942] usb 9-1: device descriptor read/64, error -32 [ 442.839922][ T5942] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 442.989210][ T5942] usb 9-1: device descriptor read/64, error -32 [ 443.022355][T15906] tipc: Started in network mode [ 443.047656][T15906] tipc: Node identity da2c7ea2758d, cluster identity 4711 [ 443.061615][T15906] tipc: Enabled bearer , priority 10 [ 443.140600][T15906] tipc: Resetting bearer [ 443.172904][T15905] tipc: Resetting bearer [ 443.238480][ T5942] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 443.241765][T15910] /dev/rnullb0: Can't open blockdev [ 443.278068][ T5942] usb 9-1: device descriptor read/8, error -32 [ 443.627340][T15921] /dev/rnullb0: Can't open blockdev [ 444.168759][ T5979] tipc: Node number set to 2946596514 [ 444.452661][ T5942] usb 9-1: reset high-speed USB device number 3 using dummy_hcd [ 444.486088][ T5942] usb 9-1: device firmware changed [ 444.501860][ T890] usb 9-1: USB disconnect, device number 3 [ 444.670507][ T890] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 444.707995][T15306] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 444.847492][ T890] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.871579][ T890] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 444.878885][T15306] usb 8-1: Using ep0 maxpacket: 8 [ 444.902729][ T890] usb 9-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 444.913115][T15938] /dev/rnullb0: Can't open blockdev [ 444.914841][ T890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.929775][T15306] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 444.937964][ T890] usb 9-1: Product: syz [ 444.942222][ T890] usb 9-1: Manufacturer: syz [ 444.951153][ T890] usb 9-1: SerialNumber: syz [ 444.956640][T15306] usb 8-1: config 179 has no interface number 0 [ 444.970655][T15306] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 444.972332][ T890] usb 9-1: config 0 descriptor?? [ 445.004798][T15306] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 445.047859][T15306] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 67, changing to 10 [ 445.079758][T15306] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 445.093600][T15306] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 445.113644][T15306] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 445.123864][T15306] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.130428][ T30] audit: type=1326 audit(1751852113.025:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15940 comm="syz.5.2794" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facb278e929 code=0x0 [ 445.149532][T15935] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 445.233473][ T30] audit: type=1800 audit(1751852113.125:62): pid=15932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2791" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 445.264844][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.271602][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.392175][T15935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.402860][T15935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.246921][ T890] usb 8-1: USB disconnect, device number 9 [ 446.409485][T15905] tipc: Disabling bearer [ 446.617754][T15957] /dev/rnullb0: Can't open blockdev [ 447.184919][ T5852] usb 9-1: USB disconnect, device number 4 [ 447.369492][ T10] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 447.528379][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 447.544897][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 447.553514][T15306] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 447.562701][ T10] usb 8-1: can't read configurations, error -61 [ 447.618402][ T5852] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 447.717922][ T10] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 447.739021][T15306] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 447.768068][ T5852] usb 9-1: device descriptor read/64, error -71 [ 447.788307][T15306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 447.833867][T15306] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 447.865879][T15306] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 447.892992][T15306] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 447.937775][T15306] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.938244][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 447.974240][T15306] usb 6-1: config 0 descriptor?? [ 447.995615][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 448.008970][ T10] usb 8-1: can't read configurations, error -61 [ 448.018477][ T10] usb usb8-port1: attempt power cycle [ 448.047900][ T5852] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 448.198056][ T5852] usb 9-1: device descriptor read/64, error -71 [ 448.352761][ T5852] usb usb9-port1: attempt power cycle [ 448.396971][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.404552][ T10] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 448.432728][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.448131][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.456025][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 448.472584][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 448.481884][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.491813][ T10] usb 8-1: can't read configurations, error -61 [ 448.523345][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.541956][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.587427][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.656468][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.664094][ T10] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 448.697018][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.726900][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 448.731063][ T5852] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 448.758967][ T10] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 448.772050][T15306] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 448.782977][ T5852] usb 9-1: device descriptor read/8, error -71 [ 448.795547][ T10] usb 8-1: can't read configurations, error -61 [ 448.815103][ T10] usb usb8-port1: unable to enumerate USB device [ 448.875294][T15306] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 449.019159][T15306] usb 6-1: USB disconnect, device number 44 [ 449.034551][ T5852] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 449.079536][ T5852] usb 9-1: device descriptor read/8, error -71 [ 449.158796][T16024] fido_id[16024]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 449.208326][ T5852] usb usb9-port1: unable to enumerate USB device [ 450.118056][ T890] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 450.308250][ T890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.344271][ T890] usb 6-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 450.384474][ T890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=35 [ 450.409989][ T890] usb 6-1: SerialNumber: syz [ 450.428735][ T890] usb 6-1: config 0 descriptor?? [ 450.457182][ T890] usb 6-1: selecting invalid altsetting 1 [ 450.470091][ T890] usb 6-1: Can not set alternate setting to 1, error: -22 [ 450.505053][ T890] synaptics_usb 6-1:0.0: probe with driver synaptics_usb failed with error -22 [ 450.704523][T16044] tipc: Started in network mode [ 450.887968][T16044] tipc: Node identity de0436baa7e7, cluster identity 4711 [ 451.014829][T16044] tipc: Enabled bearer , priority 0 [ 451.114067][T16044] tipc: Resetting bearer [ 452.140498][ T9] tipc: Node number set to 2044933818 [ 453.816039][T16105] veth0_to_team: entered promiscuous mode [ 453.854204][T16105] veth0_to_team: entered allmulticast mode [ 454.462521][ T5942] usb 6-1: USB disconnect, device number 45 [ 454.521654][T16066] tipc: Disabling bearer [ 455.270113][T16151] netlink: 'syz.8.2835': attribute type 21 has an invalid length. [ 455.278084][T16151] netlink: 128 bytes leftover after parsing attributes in process `syz.8.2835'. [ 455.287586][T16151] netlink: 'syz.8.2835': attribute type 4 has an invalid length. [ 455.295452][T16151] netlink: 3 bytes leftover after parsing attributes in process `syz.8.2835'. [ 455.315880][T16151] hfsplus: unable to find HFS+ superblock [ 456.468400][T16166] syz_tun: entered allmulticast mode [ 457.192253][T16165] syz_tun: left allmulticast mode [ 457.492192][T16177] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 458.617761][T16193] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2847'. [ 458.669336][ T10] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 458.957960][T15306] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 458.979724][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 458.986499][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.999849][ T10] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 459.016791][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.048192][ T10] usb 9-1: config 0 descriptor?? [ 459.057605][ T10] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 459.110505][T15306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.124687][T15306] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.147903][T15306] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 459.171911][T15306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.213163][T15306] usb 5-1: config 0 descriptor?? [ 459.647110][T15306] hid_parser_main: 5 callbacks suppressed [ 459.647136][T15306] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.715090][T15306] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.722793][ T5849] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 459.771803][T15306] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.807910][T15306] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.828900][T15306] playstation 0003:054C:0DF2.0017: unknown main item tag 0x0 [ 459.860795][T15306] playstation 0003:054C:0DF2.0017: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 459.875785][ T10] gspca_vc032x: reg_w err -71 [ 459.880783][ T10] vc032x 9-1:0.0: probe with driver vc032x failed with error -71 [ 459.920123][ T5849] usb 6-1: Using ep0 maxpacket: 8 [ 459.926386][ T10] usb 9-1: USB disconnect, device number 9 [ 459.935424][ T5849] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.963710][ T5849] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 459.975435][ T5849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.988556][T15306] playstation 0003:054C:0DF2.0017: Failed to retrieve feature with reportID 9: -71 [ 460.004563][ T5849] usb 6-1: config 0 descriptor?? [ 460.025281][T15306] playstation 0003:054C:0DF2.0017: Failed to retrieve DualSense pairing info: -71 [ 460.037120][ T5849] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 460.062287][T15306] playstation 0003:054C:0DF2.0017: Failed to get MAC address from DualSense [ 460.071209][T15306] playstation 0003:054C:0DF2.0017: Failed to create dualsense. [ 460.084033][T15306] playstation 0003:054C:0DF2.0017: probe with driver playstation failed with error -71 [ 460.110490][T15306] usb 5-1: USB disconnect, device number 94 [ 460.148095][T16211] fido_id[16211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 461.121966][T16245] ALSA: mixer_oss: invalid OSS volume 'u' [ 461.662103][ T5849] gspca_vc032x: reg_w err -71 [ 462.417545][ T5849] vc032x 6-1:0.0: probe with driver vc032x failed with error -71 [ 462.474967][ T5849] usb 6-1: USB disconnect, device number 46 [ 462.520991][T15042] Bluetooth: hci2: unknown advertising packet type: 0x65 [ 462.521057][T15042] Bluetooth: hci2: Malformed LE Event: 0x02 [ 465.489364][T15306] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 465.837937][T15306] usb 9-1: Using ep0 maxpacket: 16 [ 466.096284][T15306] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 466.146632][T15306] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.185433][T15306] usb 9-1: config 0 descriptor?? [ 466.241492][T15306] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected [ 466.358676][T16301] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 466.417928][T15306] usb 9-1: Detected FT232A [ 466.428119][T15306] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 466.477011][T15306] usb 9-1: USB disconnect, device number 10 [ 466.524739][T15306] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 466.563077][T15306] ftdi_sio 9-1:0.0: device disconnected [ 467.137923][ T5852] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 467.298654][ T5852] usb 6-1: Using ep0 maxpacket: 8 [ 467.305494][ T5852] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 467.317859][ T5852] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 467.339791][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.354317][ T5852] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.415376][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.427619][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.447269][ T5852] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 467.466124][ T5852] usb 6-1: config 168 interface 0 has no altsetting 0 [ 467.474633][ T5852] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 467.490280][ T5852] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 467.533870][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.551567][ T5852] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.566071][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.580402][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.592251][ T5852] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 467.606455][ T5852] usb 6-1: config 168 interface 0 has no altsetting 0 [ 467.614846][ T5852] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 467.625602][ T5852] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 467.638790][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 467.650954][ T5852] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.664307][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.676065][ T5852] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.709844][ T5852] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 467.725820][ T5852] usb 6-1: config 168 interface 0 has no altsetting 0 [ 467.777755][ T5852] usb 6-1: string descriptor 0 read error: -22 [ 467.793486][ T5852] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 467.806183][ T5852] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.155270][ T5852] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 468.377742][ T5852] usb 6-1: USB disconnect, device number 47 [ 468.400322][T16356] adutux: No device or device unplugged -19 [ 469.734689][T16376] Process accounting resumed [ 470.710520][T15042] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 471.143342][T16408] input: syz0 as /devices/virtual/input/input21 [ 471.399748][ T24] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 471.891212][T16414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.902138][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 471.925043][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 471.932721][ T24] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 471.948227][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 471.959762][ T24] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 471.975049][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 472.030102][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 472.068070][ T24] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 472.127203][ T24] usb 6-1: config 168 interface 0 has no altsetting 0 [ 472.148039][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 472.155457][ T24] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 472.172096][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 472.201409][ T24] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.231837][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 472.254231][T16424] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2900'. [ 472.259118][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 472.319592][ T24] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 472.347889][ T24] usb 6-1: config 168 interface 0 has no altsetting 0 [ 472.375735][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 472.398289][ T24] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 472.421904][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 472.443689][ T24] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 472.514771][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 472.572554][ T24] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 472.606681][ T24] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 472.659581][ T24] usb 6-1: config 168 interface 0 has no altsetting 0 [ 472.693768][ T24] usb 6-1: string descriptor 0 read error: -22 [ 472.707743][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 472.724377][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.765718][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 472.869033][T16446] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2906'. [ 472.997967][T15306] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 473.173803][T15306] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 473.277594][T15306] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.499613][T15306] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 473.651843][T15306] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 473.682832][ T5849] usb 6-1: USB disconnect, device number 48 [ 473.776556][T15306] usb 8-1: Manufacturer: syz [ 474.022815][T15306] usb 8-1: config 0 descriptor?? [ 476.177873][T15306] rc_core: IR keymap rc-hauppauge not found [ 476.196574][T15306] Registered IR keymap rc-empty [ 476.241777][T15306] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 476.321870][T15306] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input22 [ 476.392125][ T5852] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 476.663455][ T5852] usb 9-1: config 0 has no interfaces? [ 476.816830][T15306] usb 8-1: USB disconnect, device number 14 [ 476.849377][ T5852] usb 9-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 476.920798][ T5852] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.976607][ T5852] usb 9-1: Product: syz [ 476.986722][ T5852] usb 9-1: Manufacturer: syz [ 476.989080][ T5849] IPVS: starting estimator thread 0... [ 477.006995][ T5852] usb 9-1: SerialNumber: syz [ 477.045948][ T5852] usb 9-1: config 0 descriptor?? [ 477.138053][T16482] IPVS: using max 30 ests per chain, 72000 per kthread [ 477.661191][ T5852] usb 9-1: USB disconnect, device number 11 [ 479.451452][T16513] sg_write: data in/out 16514940/2 bytes for SCSI command 0x25-- guessing data in; [ 479.451452][T16513] program syz.4.2922 not setting count and/or reply_len properly [ 479.678285][ T30] audit: type=1800 audit(1751852147.565:63): pid=16517 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2923" name="bus" dev="overlay" ino=2578 res=0 errno=0 [ 481.458199][ T5979] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 481.698447][ T5979] usb 9-1: Using ep0 maxpacket: 8 [ 481.824857][ T5979] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.837072][ T5979] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 481.853392][ T5979] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 481.887889][ T5979] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.917530][ T5979] hub 9-1:1.0: bad descriptor, ignoring hub [ 481.951431][ T5979] hub 9-1:1.0: probe with driver hub failed with error -5 [ 482.648736][ T5979] usb 9-1: reset high-speed USB device number 12 using dummy_hcd [ 483.198350][ T5979] usb 9-1: USB disconnect, device number 12 [ 483.507957][T15042] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 483.628718][ T926] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 483.805338][ T926] usb 6-1: Using ep0 maxpacket: 16 [ 483.843521][ T926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 483.895237][ T926] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 483.954825][ T926] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 483.991513][ T926] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 484.011710][ T926] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.069406][ T926] usb 6-1: config 0 descriptor?? [ 485.192436][T16589] random: crng reseeded on system resumption [ 485.502560][ T926] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 486.605062][ T926] shield 0003:0955:7214.0018: Registered Thunderstrike controller [ 486.706714][ T926] shield 0003:0955:7214.0018: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 486.990215][T16525] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 487.004420][ T926] usb 6-1: USB disconnect, device number 49 [ 487.118024][T16525] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 487.173239][T16525] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 487.214077][T16525] shield 0003:0955:7214.0018: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 487.433757][ T30] audit: type=1326 audit(1751852155.305:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16645 comm="syz.5.2955" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7facb278e929 code=0x0 [ 488.476092][T16656] infiniband syz0: set down [ 488.507314][T16656] infiniband syz0: added ipvlan1 [ 488.606148][T16656] RDS/IB: syz0: added [ 488.616329][T16656] smc: adding ib device syz0 with port count 1 [ 488.624180][T16656] smc: ib device syz0 port 1 has pnetid [ 488.657707][T15042] Bluetooth: hci1: unexpected event for opcode 0x0804 [ 489.686304][T16692] netlink: 'syz.4.2969': attribute type 11 has an invalid length. [ 489.707447][T16692] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2969'. [ 491.024847][T16706] binder: BC_ATTEMPT_ACQUIRE not supported [ 491.048030][T16706] binder: 16705:16706 ioctl c0306201 200000000640 returned -22 [ 491.470306][T15042] Bluetooth: hci1: unexpected event for opcode 0x200b [ 494.061801][T16792] JFS: discard option not supported on device [ 494.070971][T16792] Mount JFS Failure: -22 [ 494.075287][T16792] jfs_mount failed w/return code = -22 [ 495.009527][T16807] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.3004' sets config #-511 [ 495.568276][T16525] kernel read not supported for file /dsp (pid: 16525 comm: kworker/0:7) [ 495.652972][ T24] usb 6-1: new full-speed USB device number 50 using dummy_hcd [ 495.810523][ T24] usb 6-1: unable to get BOS descriptor or descriptor too short [ 495.831454][ T24] usb 6-1: not running at top speed; connect to a high speed hub [ 495.917972][ T5979] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 495.939185][ T24] usb 6-1: config 13 has an invalid interface number: 90 but max is 0 [ 495.949123][ T24] usb 6-1: config 13 has no interface number 0 [ 495.957827][ T24] usb 6-1: config 13 interface 90 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 495.973294][ T24] usb 6-1: config 13 interface 90 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 496.012423][ T24] usb 6-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=81.b7 [ 496.027923][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.703104][ T24] usb 6-1: Product: syz [ 496.708807][ T24] usb 6-1: Manufacturer: syz [ 496.713452][ T24] usb 6-1: SerialNumber: syz [ 496.719799][ T5979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.732404][ T5979] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 496.743860][ T5979] usb 8-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 496.774547][ T5979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.802511][ T5979] usb 8-1: config 0 descriptor?? [ 496.984860][ T24] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 497.054826][ T24] snd-usb-audio 6-1:13.90: probe with driver snd-usb-audio failed with error -2 [ 497.090945][ T24] usb 6-1: USB disconnect, device number 50 [ 497.134867][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:13.90/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 497.236652][ T5979] arvo 0003:1E7D:30D4.0019: unknown main item tag 0x0 [ 497.246513][ T5979] arvo 0003:1E7D:30D4.0019: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.7-1/input0 [ 497.646209][ T890] usb 8-1: USB disconnect, device number 15 [ 497.657941][ T5856] Bluetooth: hci0: command 0x040f tx timeout [ 497.766094][T16854] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 498.119430][T16871] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3020'. [ 498.130188][T16871] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3020'. [ 498.142733][T16871] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3020'. [ 499.097578][T16910] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3030'. [ 499.254071][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3032'. [ 500.508048][ T5849] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 500.668013][ T5849] usb 8-1: Using ep0 maxpacket: 16 [ 500.675198][ T5849] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 500.708618][ T5849] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 500.772352][ T5849] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 500.800542][ T5849] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.820761][ T5849] usb 8-1: Product: syz [ 500.824950][ T5849] usb 8-1: Manufacturer: syz [ 500.848085][ T5849] usb 8-1: SerialNumber: syz [ 500.892258][ T5849] usb 8-1: config 0 descriptor?? [ 500.906692][ T5849] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 500.936987][ T5849] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 502.061948][ T5849] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 502.082406][ T5849] em28xx 8-1:0.0: Config register raw data: 0x6e [ 502.102197][ T5849] em28xx 8-1:0.0: I2S Audio (1 sample rate(s)) [ 502.120978][ T5849] em28xx 8-1:0.0: No AC97 audio processor [ 502.301354][T16525] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 502.445985][ T1007] nci: nci_rx_work: unknown MT 0x1 [ 502.492586][T16525] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.504034][T16525] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 502.523707][T16525] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 502.534885][T16525] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 502.560884][T16525] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 502.575486][T16525] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 502.584140][T16525] usb 9-1: Manufacturer: syz [ 502.598661][T16525] usb 9-1: config 0 descriptor?? [ 502.688101][ T5890] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 502.868714][ T5890] usb 5-1: Using ep0 maxpacket: 16 [ 502.877100][ T5890] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 502.894884][T16525] rc_core: IR keymap rc-hauppauge not found [ 502.906137][ T5849] usb 8-1: USB disconnect, device number 16 [ 502.918068][ T5890] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 502.935285][T16525] Registered IR keymap rc-empty [ 502.955189][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 502.969215][ T5890] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 502.987269][ T5890] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 502.997117][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 503.011893][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.032305][ T5890] usb 5-1: SerialNumber: syz [ 503.049074][T16979] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 503.050919][T16525] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 503.081100][T16525] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input24 [ 503.099487][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.118459][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.142221][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.167982][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.197948][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.222585][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.268622][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.276679][ T5890] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 503.327034][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.335023][ T5890] usb 5-1: USB disconnect, device number 95 [ 503.372659][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.409325][T16525] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 503.466930][T16525] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 503.503116][T16525] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 503.533224][T16525] usb 9-1: USB disconnect, device number 13 [ 503.749076][ T9] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 503.925123][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 503.979262][ T9] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 503.987648][ T9] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 504.027291][ T9] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 504.040949][ T9] usb 6-1: config 250 has no interface number 0 [ 504.047258][ T9] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 504.188326][ T9] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 504.298292][T16525] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 504.338689][ T9] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 504.369753][ T9] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 504.599672][T16525] usb 9-1: not running at top speed; connect to a high speed hub [ 504.652324][ T9] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 504.670798][T16525] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 504.688025][ T9] usb 6-1: config 250 interface 228 has no altsetting 0 [ 504.727469][T16525] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 504.738921][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 504.768903][T16525] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 504.787906][ T9] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 504.797259][ T9] usb 6-1: Product: syz [ 504.818047][T16525] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 504.829470][ T9] usb 6-1: SerialNumber: syz [ 504.841861][T17044] binder: 17043:17044 ioctl c0306201 200000000900 returned -14 [ 504.849782][ T9] hub 6-1:250.228: bad descriptor, ignoring hub [ 504.856076][ T9] hub 6-1:250.228: probe with driver hub failed with error -5 [ 504.865284][T16525] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 504.881339][T16525] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.891255][T16525] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.927117][T16525] usb 9-1: Product: syz [ 504.931478][T16525] usb 9-1: Manufacturer: syz [ 504.936132][T16525] usb 9-1: SerialNumber: syz [ 505.052599][ T9] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 51 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 505.195655][T16525] usb 9-1: 0:2 : does not exist [ 505.269502][T16525] usb 9-1: USB disconnect, device number 14 [ 505.945402][T17018] usb 6-1: reset high-speed USB device number 51 using dummy_hcd [ 505.986980][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.285296][T17068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 506.296357][T17068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.318941][T17068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.331795][T17068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.468219][T15725] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 506.755032][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.765096][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.931420][T15725] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 506.951905][T17070] block nbd8: shutting down sockets [ 506.958582][T17070] 9pnet_fd: Insufficient options for proto=fd [ 506.993043][T17068] sp0: Synchronizing with TNC [ 506.998071][T15725] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.014441][T15725] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.028558][T17067] [U] è [ 507.031474][T15725] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.039685][T15725] usb 5-1: Product: syz [ 507.044078][T15725] usb 5-1: Manufacturer: syz [ 507.054790][T15725] usb 5-1: SerialNumber: syz [ 507.078212][ T5852] usb 6-1: USB disconnect, device number 51 [ 507.105478][ T5852] usblp0: removed [ 508.413145][T17088] 8021q: VLANs not supported on ipvlan1 [ 508.450091][T17088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.492252][T17088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.831603][T15725] usb 5-1: 0:2 : does not exist [ 509.919259][T15725] usb 5-1: USB disconnect, device number 96 [ 510.004410][ T5861] udevd[5861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 510.106774][T17110] comedi comedi3: pcl818: I/O port conflict (0xfffffffffffffffb,16) [ 510.117104][T17110] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI [ 510.129020][T17110] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f] [ 510.137475][T17110] CPU: 0 UID: 0 PID: 17110 Comm: syz.7.3076 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 510.149014][T17110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 510.159084][T17110] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 510.164657][T17110] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 79 ca 34 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 58 ca 34 f9 4d 8b 24 24 48 83 c3 [ 510.184289][T17110] RSP: 0018:ffffc9000f12f9f0 EFLAGS: 00010206 [ 510.190361][T17110] RAX: 0000000000000005 RBX: ffff888023f89900 RCX: 0000000000080000 [ 510.198330][T17110] RDX: ffffc9001090d000 RSI: 00000000000022c0 RDI: 00000000000022c1 [ 510.206308][T17110] RBP: 0000000000000001 R08: ffff88814cacc92f R09: 1ffff11029959925 [ 510.214282][T17110] R10: dffffc0000000000 R11: ffffffff88efad60 R12: 0000000000000028 [ 510.222257][T17110] R13: dffffc0000000000 R14: ffff88814cacc800 R15: dffffc0000000000 [ 510.230227][T17110] FS: 00007f9c3967f6c0(0000) GS:ffff8881257af000(0000) knlGS:0000000000000000 [ 510.239151][T17110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.245729][T17110] CR2: 0000555592eb8808 CR3: 0000000065396000 CR4: 00000000003526f0 [ 510.253700][T17110] Call Trace: [ 510.256976][T17110] [ 510.259906][T17110] pcl818_detach+0x66/0xd0 [ 510.264327][T17110] comedi_device_detach+0x134/0x720 [ 510.269544][T17110] comedi_device_attach+0x568/0x670 [ 510.274745][T17110] comedi_unlocked_ioctl+0x686/0xf40 [ 510.280037][T17110] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 510.285859][T17110] ? __lock_acquire+0xab9/0xd20 [ 510.290733][T17110] ? __fget_files+0x2a/0x420 [ 510.295325][T17110] ? __fget_files+0x2a/0x420 [ 510.299917][T17110] ? __fget_files+0x3a0/0x420 [ 510.304598][T17110] ? __fget_files+0x2a/0x420 [ 510.309199][T17110] ? bpf_lsm_file_ioctl+0x9/0x20 [ 510.314156][T17110] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 510.319971][T17110] __se_sys_ioctl+0xf9/0x170 [ 510.324574][T17110] do_syscall_64+0xfa/0x3b0 [ 510.329094][T17110] ? lockdep_hardirqs_on+0x9c/0x150 [ 510.334302][T17110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.340368][T17110] ? clear_bhb_loop+0x60/0xb0 [ 510.345054][T17110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.350951][T17110] RIP: 0033:0x7f9c3878e929 [ 510.355384][T17110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.375003][T17110] RSP: 002b:00007f9c3967f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.383428][T17110] RAX: ffffffffffffffda RBX: 00007f9c389b5fa0 RCX: 00007f9c3878e929 [ 510.391415][T17110] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 510.399395][T17110] RBP: 00007f9c38810b39 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 510.407370][T17110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.415350][T17110] R13: 0000000000000000 R14: 00007f9c389b5fa0 R15: 00007fff70464218 [ 510.423339][T17110] [ 510.426370][T17110] Modules linked in: [ 510.431152][T17110] ---[ end trace 0000000000000000 ]--- [ 510.462211][T17110] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0 [ 510.474095][T17110] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 79 ca 34 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 58 ca 34 f9 4d 8b 24 24 48 83 c3 [ 510.509892][T17110] RSP: 0018:ffffc9000f12f9f0 EFLAGS: 00010206 [ 510.516657][T17110] RAX: 0000000000000005 RBX: ffff888023f89900 RCX: 0000000000080000 [ 510.526706][T17113] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3077'. [ 510.815082][T17110] RDX: ffffc9001090d000 RSI: 00000000000022c0 RDI: 00000000000022c1 [ 510.838199][T17110] RBP: 0000000000000001 R08: ffff88814cacc92f R09: 1ffff11029959925 [ 510.848121][T17111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.870482][T17110] R10: dffffc0000000000 R11: ffffffff88efad60 R12: 0000000000000028 [ 510.939090][T17110] R13: dffffc0000000000 R14: ffff88814cacc800 R15: dffffc0000000000 [ 510.971596][T17110] FS: 00007f9c3967f6c0(0000) GS:ffff8881258af000(0000) knlGS:0000000000000000 [ 511.012854][T17110] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.027977][T17110] CR2: 00007fd7dd4e7d60 CR3: 0000000065396000 CR4: 00000000003526f0 [ 511.035995][T17110] Kernel panic - not syncing: Fatal exception [ 511.042378][T17110] Kernel Offset: disabled [ 511.046702][T17110] Rebooting in 86400 seconds..