last executing test programs: 3m40.911826276s ago: executing program 0 (id=1): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, 0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) pwritev2(r0, &(0x7f0000000980)=[{&(0x7f0000000940)="579e", 0x2}], 0x1, 0x5, 0xe, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) fstat(r1, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x20041) 3m40.37697498s ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, &(0x7f0000000180)='gid=1\x00\x1c\x00\x00\x00m\xbe\xd7\xa9:\n\xf9\b\rk[\xa1\xcc\xd6\xa28|5}(\x06l\xa8\x86di\xf3vJ,S.\xc3\x9b\xaaNj0\xef\x810EZ\xb6\x16\x88AZg`\xee\xe2\x93r\xd7\xa3v\x1f\xdb\x04\xd1\xe0\xabR \xeb\x80\r\x1b\x17\x0e\r\x93K\xe6\xc3BFz\xba\x7f\xc0\x1e@\xe4\xd0\xea\x16\xaa-aR)\\\x16\x8b^>\xbf\x06p\xc8\x9b\xf0N:\x05F\xe7fJ\x9a8\xa4\xb0FA\x9a\xe9E\xf9GJaGTf\x0f\xec\xff\x00\xb4\x97\x86\xd1&\a\xb554\x86\xd7\xbdeY\xa6\x91\r@0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x3) listen(r4, 0x3) 3m39.327787401s ago: executing program 32 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r3, 0x3) listen(r4, 0x3) 1m57.338911898s ago: executing program 4 (id=829): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f0000000000)={0x4}) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1m57.268004913s ago: executing program 4 (id=831): write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000380)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x2}}, 0x48) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x8000, &(0x7f0000001080)=0xfff, 0x20000000001000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x8010, 0xffffffffffffffff, 0xffffc000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) socket(0x10, 0x803, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 1m56.585303011s ago: executing program 4 (id=840): r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x22, 0x2) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f00000000c0)) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f00000b1000/0x2000)=nil, 0x2000, 0x100000b, 0x13, r2, 0x5708e000) 1m56.524311386s ago: executing program 4 (id=841): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x2}) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x1004040, 0x0) chroot(&(0x7f0000000180)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000200)='./file0\x00') ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000001000)) mount(&(0x7f0000000000)=@filename='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0xadaa2aff833ec80c, 0x0) 1m56.431990789s ago: executing program 4 (id=842): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f000004f000/0x4000)=nil, 0x4000, 0x3000007, 0x10, r0, 0x89b74000) r1 = socket(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be040205fe056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) connect$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180)={0x27, r2, 0x0, 0x4, 0xb, 0x2, "b3a134585462bb9467bedd2e8d6da847f3224e9e2d919808707024e9567820baff03012aceb50c5a5b162328f3fbbb3964c898b78a64532495fcb4f1ecf2a5", 0x22}, 0x60) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x24, r6, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0xffffffe0}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4001) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r6, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @void}}}, 0x28}}, 0x0) ioctl$VIDIOC_G_STD(r4, 0x80085617, &(0x7f0000000380)) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f00000002c0)={0xca9}) r8 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) r9 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000200)={0x0, &(0x7f00000002c0)}) r10 = mmap$KVM_VCPU(&(0x7f0000050000/0x3000)=nil, r8, 0x100000c, 0x20010, r9, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@mcast1, @ipv4={'\x00', '\xff\xff', @broadcast}, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffff2, 0x5, 0x8000, 0x400, 0x6, 0x5210012}) fanotify_init(0x10, 0x101000) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r10], 0x7c}}, 0x20044040) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c7200000001000000000100070000000a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010) syz_clone(0x5800100, &(0x7f0000000000)="083434c1cdfd08456a8f5278f45ac826c3486ffe", 0x14, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="610ae973d19bd1096e6197967a8b28287749762ee2114f4ac82ef227c14b5efd758bdb72fcd335d12ce018d2619c5aab529e6f60a82cb54b0d5b12f6a0f9ed129f96a84418e017e7d9074c4bb74c7534baf246ca8cc418be284a0ad35395fffc318038a01abdb5dcd3f62cad") 1m56.214450846s ago: executing program 4 (id=844): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x7040, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$kcm(0x29, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) getdents64(r6, &(0x7f0000000200)=""/179, 0xb3) lseek(r6, 0xfffffffffffffffe, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)="ac8a6ef6c8b551c2eb8e265746e2ebb34b5847819c", 0x15}, 0x1, 0x0, 0x0, 0x80}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) recvmmsg(r8, &(0x7f0000001c40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, &(0x7f0000001380)=""/115, 0x73}, 0xfa6}, {{&(0x7f0000001400)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f0000001580)=""/183, 0xb7}, {&(0x7f0000001640)=""/159, 0x9f}, {&(0x7f0000001700)=""/80, 0x50}, {&(0x7f0000001780)=""/232, 0xe8}, {&(0x7f0000001880)=""/48, 0x30}, {&(0x7f00000018c0)=""/244, 0xf4}, {&(0x7f00000019c0)=""/113, 0x71}, {&(0x7f0000001a40)=""/129, 0x81}], 0x9, &(0x7f0000001bc0)=""/104, 0x68}, 0x5}], 0x2, 0x40, 0x0) 1m56.056732516s ago: executing program 33 (id=844): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x19}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r4, 0x7040, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$kcm(0x29, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') creat(&(0x7f0000000440)='./file0\x00', 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x17e) getdents64(r6, &(0x7f0000000200)=""/179, 0xb3) lseek(r6, 0xfffffffffffffffe, 0x1) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = syz_open_dev$video(&(0x7f0000000300), 0x9, 0x0) ioctl$VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000000)={0xd, @vbi}) write$tun(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a0010000000400bb80060ec97000fc83b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)="ac8a6ef6c8b551c2eb8e265746e2ebb34b5847819c", 0x15}, 0x1, 0x0, 0x0, 0x80}, 0x4080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa4717000) recvmmsg(r8, &(0x7f0000001c40)=[{{&(0x7f0000000080)=@nfc, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)=""/90, 0x5a}, {&(0x7f0000000180)=""/245, 0xf5}, {&(0x7f0000000000)=""/58, 0x3a}, {&(0x7f0000000380)=""/4096, 0x1000}], 0x4, &(0x7f0000001380)=""/115, 0x73}, 0xfa6}, {{&(0x7f0000001400)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001480)=""/255, 0xff}, {&(0x7f0000001580)=""/183, 0xb7}, {&(0x7f0000001640)=""/159, 0x9f}, {&(0x7f0000001700)=""/80, 0x50}, {&(0x7f0000001780)=""/232, 0xe8}, {&(0x7f0000001880)=""/48, 0x30}, {&(0x7f00000018c0)=""/244, 0xf4}, {&(0x7f00000019c0)=""/113, 0x71}, {&(0x7f0000001a40)=""/129, 0x81}], 0x9, &(0x7f0000001bc0)=""/104, 0x68}, 0x5}], 0x2, 0x40, 0x0) 4.423600295s ago: executing program 1 (id=1723): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x20000000) sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="00042abd708c11dc33a250a75a61cb378d5b3d6c00fddbdf2504000000040004000500050001000000eb9a9b"], 0x20}, 0x1, 0x0, 0x0, 0x20004801}, 0x40890) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0xfffc, 0xbfff, 0x19, "ec28a144f13d7607"}) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x12, "0062ba5d8200"}) r2 = syz_open_pts(r1, 0x20800) r3 = dup3(r2, r1, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000001c0)=@x86={0x5, 0x5, 0x17, 0x0, 0x4000003, 0xfc, 0x2, 0x81, 0xfd, 0x8, 0x6, 0xff, 0x0, 0x7, 0x5, 0xfc, 0xe, 0x7, 0xfa, '\x00', 0x0, 0x9}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_GSI_ROUTING(r5, 0x4020ae46, &(0x7f00000003c0)=ANY=[]) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)=0x44) listen(0xffffffffffffffff, 0x3) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) listen(0xffffffffffffffff, 0x8) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x74, &(0x7f0000000200)={r9, 0x9, 0x30, 0xd8ba, 0x9}, &(0x7f0000000080)=0x36) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000200)={r9, @in6={{0xa, 0x4e20, 0x5, @private2, 0x2}}}, 0x84) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000000e00)={{0x1, 0x0, 0x80, {0x1000, 0x2, 0x3}}, "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", "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"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) 3.924167192s ago: executing program 1 (id=1719): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (async) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0x13) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r0, 0xffffe000) (async) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f00000012c0)={0x1, 0x0, 0x1d, 0x16, 0x400084, &(0x7f0000000ec0)}) 3.862470241s ago: executing program 1 (id=1720): r0 = socket$can_j1939(0x1d, 0x2, 0x7) close(r0) openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi2\x00', 0x40080, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/vlan/config\x00') close(r1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000240)=0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000000140)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x80000) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280), 0xffffffffffffffff) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x67}, {0x6, 0xc8}}}, 0x7) sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, r7, 0x1, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}]}, 0x1c}}, 0x20000010) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffd}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='devpts\x00', 0x4400, 0x0) 3.742605353s ago: executing program 1 (id=1721): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) preadv(r0, &(0x7f0000001440), 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x400000008000f28, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r4, 0x8818564c, &(0x7f0000000300)) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f00000001c0)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x9, 0xb6420, 0x6ccbf}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000280)={0x48, 0x6, r1, 0x0, r5}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000000)) mount(&(0x7f0000000100)=@rnullb, &(0x7f00000000c0)='./cgroup/file0\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 3.607065895s ago: executing program 3 (id=1724): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x601c2, 0x0) ftruncate(r0, 0x8800000) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendfile(r1, r0, 0x0, 0x578410e9) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000197305e07af0300000000000000", @ANYBLOB="0400"], 0x1c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x2c39000) 3.542759227s ago: executing program 3 (id=1725): r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20012, r1, 0xf648d000) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) socket(0x10, 0x3, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) (async) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000040), 0x4) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20012, r1, 0xf648d000) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) (async) 3.349403033s ago: executing program 3 (id=1727): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r1, &(0x7f00000029c0)={0x2020}, 0x2020) 3.234387763s ago: executing program 3 (id=1728): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000001380)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x4040800) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x24000010) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 3.103994284s ago: executing program 3 (id=1729): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000340)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x120, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x13, &(0x7f0000000000)=@generic={0x5, 0x2, 0xb, "36bb8acd", "e9854775bec41a5161b783"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x40880, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x3}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmsg$can_raw(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=""/71, 0x47}, {&(0x7f00000002c0)=""/165, 0xa5}], 0x2}, 0x20) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x24044001}, 0x4000880) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x100000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000003c0)={0x2c, 0x1, 0x0, "a6892d080000000e5dedae4d40137137c17a5ac1f393f65946a68dd1f8822c88", 0x30314742}) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xd0060, &(0x7f0000000180)={[{@gid}]}) syz_usb_connect$cdc_ecm(0x0, 0x82, &(0x7f0000000280)=ANY=[@ANYBLOB="12015002020000202505a1a4400001020300ed02700001018080090904000702020600000b240600000300000068d6052400dc00b50d240f01050000000400040008152412bd0ea317a88b045e4f01a607c0ffcb7e392a1524120800a317a88b045e4f01a607c0ffcb7e392a052401010509058202ff03f3b80509050302ff031000c6"], 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f0000000080)) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0xfffffffffffffd7e, &(0x7f0000000040)=@ready={0x0, 0x0, 0x8, "1ae65a95", {0x1, 0xbf9, 0x6, 0x9c, 0x8}}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 2.69602103s ago: executing program 2 (id=1735): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x276e9000) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl726\x00', [0x4f26, 0x1, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0x1, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x0, 0x395, 0x80001089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x40003e, 0x8, 0x4, 0x8000000, 0x100]}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x8ab80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r2, 0x5708e000) 2.284141004s ago: executing program 2 (id=1738): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) recvmmsg(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000180)=""/244, 0xf4}, {&(0x7f00000000c0)=""/29, 0x1d}], 0x4, &(0x7f00000002c0)=""/18, 0x12}, 0x200}, {{&(0x7f0000000300)=@pptp={0x18, 0x2, {0x0, @remote}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/46, 0x2e}, {&(0x7f00000003c0)=""/238, 0xee}], 0x2, &(0x7f0000000500)=""/142, 0x8e}, 0xa2}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/193, 0xc1}], 0x1, &(0x7f0000000700)=""/2, 0x2}, 0x9}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/250, 0xfa}, {&(0x7f00000008c0)=""/171, 0xab}, {&(0x7f0000000980)=""/161, 0xa1}], 0x3, &(0x7f0000000a80)=""/105, 0x69}, 0x8e18}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b00)=""/145, 0x91}], 0x1, &(0x7f0000000c00)=""/248, 0xf8}, 0x7}], 0x5, 0x4d4ee1fda94d8e36, &(0x7f0000000e40)={0x0, 0x3938700}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.272894525s ago: executing program 2 (id=1739): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = syz_open_procfs(0x0, &(0x7f0000002100)='attr/keycreate\x00') preadv2(r1, &(0x7f0000002780)=[{&(0x7f0000002680)=""/247, 0xf7}], 0x1, 0x1cf3d4a8, 0x4, 0x2) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x20011, r2, 0x1a1c1000) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f0000000080)=0x2) 2.23831657s ago: executing program 2 (id=1740): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$BLKREPORTZONE(r2, 0x1261, 0x0) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000140)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000002c0)={r1, 0x11, 0x6, @random="08d32bfb45c9"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000200)={r1, 0x1, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000580)={r1, 0x1, 0x6, @local}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0xe4}}, 0x20050800) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r5, 0x8943, &(0x7f0000000180)={'dummy0\x00', @ifru_mtu=0x8001}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r8, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="8c000000020101030000000000000000000000442600068034000380060002004e220000060072004e240000060002004e220000060001004e210000060001"], 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000800) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010029bd7000000000000c000000200001801400020073797a5f74756e000000000000000000080003000200000018000380140003801000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 2.152077583s ago: executing program 5 (id=1741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000030000000900010073797a300000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000130000000030a03000000000000000000030000000900030073797a30000000000900010073797a30000000000000048014000000110001"], 0xa0}}, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0xe, 0x0, 0xfffffffc, 0x3}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xfffffdff}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r2, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0xfe}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) ioctl$TIOCL_SETSEL(r1, 0x4b52, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 2.149907713s ago: executing program 2 (id=1742): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) (async, rerun: 32) r1 = accept$alg(r0, 0x0, 0x0) (rerun: 32) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) (async, rerun: 64) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) (rerun: 64) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) ioctl$KVM_SET_MSRS(r9, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYRES64=r6, @ANYRES64]) accept4(r9, &(0x7f0000000740)=@caif=@rfm, &(0x7f00000007c0)=0x80, 0x80000) (async) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r10, 0x100000000) (async) r11 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r11, 0x5708e000) 2.082716261s ago: executing program 5 (id=1743): prlimit64(0x0, 0x9, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0xa, 0x4) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x4004}, 0x48084) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f00000002c0)={0x0, 0x6e, &(0x7f0000000240)=""/110}) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}]}) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) fallocate(r5, 0x3, 0xfeef, 0x401) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4000000) io_setup(0x6, 0x0) io_getevents(0x0, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.967452144s ago: executing program 2 (id=1744): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = dup(r2) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) ioctl$KVM_SET_CPUID2(r3, 0xc008ae09, &(0x7f0000000000)=ANY=[@ANYRESOCT=r3]) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f00000002c0)={0x11, 0xf5, 0x0, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r8, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000001840)={0x4c, r9, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x4c}, 0x1, 0x0, 0x0, 0xc804}, 0x0) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c1a4904ecbd4a48263dda60de000000", @ANYRES16=r9, @ANYBLOB="000425bd7000fbdbdf2557000000060095000500000006009500ff030000060095000300000006009500e0a600000600950007000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000180)={{&(0x7f000000c000/0x3000)=nil, 0x3000}, 0x1}) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) recvmmsg(r4, &(0x7f0000008200)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000240)=""/143, 0x8f}, {&(0x7f0000002d40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/177, 0xb1}], 0x3}, 0x8000006}, {{0x0, 0x0, 0x0}, 0x987e}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000380)=""/159, 0x9f}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f00000004c0)=""/52, 0x34}, {&(0x7f0000000000)=""/63, 0x3f}, {&(0x7f00000009c0)=""/4125, 0x101d}, {&(0x7f00000006c0)=""/233, 0xe9}, {&(0x7f0000000340)=""/38, 0x26}], 0x8}, 0x8cc}, {{0x0, 0x0, 0x0}, 0x24}], 0x5, 0x12002, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 1.860173044s ago: executing program 5 (id=1745): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f00000029c0)={0x2020}, 0x2020) 1.842424702s ago: executing program 5 (id=1746): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_clone(0x100, &(0x7f0000000080)="15effef67161391c77f45ac35cfc8e9432f3fab023ebfa805e8147e06ffa198bb1788b98c59be48c885744c1790b40ab59b76d4a6cecd5f62da61b0a39", 0x3d, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="3962ad630383b2cf7862491b5b410dbf444f4c02ee8e3cd8173fb79f08451611ad52b674b7dc296b4465b2d997a03f002cd698b6f635b19884b211926ff0f5d9be25ea1dd725d34cb030fc9ae43754609968326a9a0648dc1f96a9883b4222d6b21c8be082c27c135fec4c5ebf01ac3c9dd55b05cd0a737ff2b339c02ba8f3bcf59d0d7a84fe966552209b358eb89363470fdfa22dd0d754c25578a889ba19fc0aea5058f332705e5b1807f8e4f409dac79b2b") get_robust_list(r0, &(0x7f0000000380)=&(0x7f0000000340)={&(0x7f0000000280), 0x0, &(0x7f0000000300)={&(0x7f00000002c0)}}, &(0x7f00000003c0)=0x18) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) splice(r1, &(0x7f0000000000)=0x3, r1, &(0x7f0000000040)=0x4, 0x80000000, 0x1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={0x28, r3, 0x5, 0x0, 0x0, {{0x12}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x24000000) sendfile(r1, r1, 0x0, 0x7ffff000) 1.154049913s ago: executing program 3 (id=1747): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)}, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x3}], 0x3, 0x40010000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x5ed900, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r1, 0xf648d000) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_inet_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f00000000c0)) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000ba7000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000100)={0x0, 0x1e000, 0x8}) write$binfmt_aout(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="03040000b500000000000000feefffff"], 0xc8) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) r6 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DO_IT(r6, 0x127d) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x8}}, 0x2}}, 0x2e) 884.192266ms ago: executing program 5 (id=1748): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbb9, 0x20011, r0, 0x52fbf000) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000718000/0x3000)=nil, 0x3000) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x6c033, 0xffffffffffffffff, 0x0) 797.102364ms ago: executing program 5 (id=1749): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x1f, &(0x7f0000002240)={0x2b, 0x1, 0x2}) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r3, r3, 0x0, 0x7ffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x70, r5, 0x11, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x18}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x64}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x79}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}]}, 0x70}, 0x1, 0x0, 0x0, 0x20009001}, 0x4000) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xcf) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000480)=0xe) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000380)=0xff) ioctl$SIOCAX25GETINFOOLD(r7, 0x8915, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x34, 0x42, 0xb, 0x70bd26, 0x4000, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @fd=r4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0xec, 0x0, 0x0, @ipv6=@private0}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40080b0}, 0x4048000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 479.131708ms ago: executing program 1 (id=1750): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) (async) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi2\x00', 0x438680, 0x0) (async) r1 = accept(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000004, 0x20011, r2, 0xf648d000) madvise(&(0x7f00002a7000/0x1000)=nil, 0x1000, 0x2) shmget$private(0x0, 0x2000, 0x100, &(0x7f000056f000/0x2000)=nil) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 1 (id=1751): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f00000021c0)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r3, 0x8028640c, &(0x7f0000000040)={0xc000003, 0xf, &(0x7f0000000180)=[0x20, 0xa, 0xf909, 0x200005, 0x80, 0x1, 0x7, 0x10, 0xfffffe01, 0x4d, 0x4, 0x2, 0x88, 0x8811, 0x2], 0x1, 0x4000007}) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, 0x0, &(0x7f0000001cc0)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000140)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001180)={r4, @in6={{0xa, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}}, 0x6}, &(0x7f0000001240)=0x90) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x40}) r5 = socket$inet(0x2, 0x1, 0x100) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)='(', 0x1}], 0x1}, 0x80) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f00000020c0), &(0x7f0000002100)=0x4) openat(0xffffffffffffff9c, &(0x7f0000001080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x20042, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r7, 0x227b, &(0x7f00000001c0)=0x2001) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc", 0x13}], 0x1}, 0x40810) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000004800913a745c7388641f9c0e0a"], 0xfe33) r9 = fcntl$dupfd(r7, 0x0, r7) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f0000000400)='cache=none\x92\x03[()bv\xd8\xaar\n\xdc\xd9\x9f\t\xbb\x169\x8a;\r\xd1^\x8a\xacd\xc8!\xe5/\x99\xea\xad7u\\\x93\x97\x02\xc0\xdd\xb4\xdf\x17M\x04\xd9D\xff\x1a\xd2\x8f\xa5eY\xffo\xee \x98\x96\x93\xadP\xd950\x9ce\xc2B>K\xdcX\x92/\xa4\xe6\x0e\xc6TJ*\x9f)\x12\x97J\x01\xa8\xfd(\xd4\xc5)\xd5\x80\xb6\x98\x91K\x9c\x92\x18\xbc\xf7\x99\xf3\xb5\xccf\x7f\xcb\x1e5&\x8b\x98\x80Lq\xbe\x7f\xbcq\xa32\x06\xdeW\xb5hWd\xb8\xe7\xc20\x00g\xb6X5\xb7O\xaf\x91') write$sndseq(r9, &(0x7f0000000100)=[{0x9, 0x8, 0xa, 0x7, @time={0x4, 0xfffffffd}, {0x10, 0x7}, {0x6, 0xd9}, @connect={{0xa, 0x1}, {0x9a, 0x2}}}, {0x2, 0x6, 0xf8, 0x81, @time={0x480, 0x1}, {0x8, 0x80}, {0x9, 0x1}, @raw32={[0x8, 0x3ff]}}], 0x38) getsockopt$netrom_NETROM_T1(r9, 0x103, 0x1, &(0x7f0000002140), &(0x7f0000002180)=0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='erofs\x00', 0x20620a4, 0x0) kernel console output (not intermixed with test programs): 175.757336][ T9014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.766099][ T9] usb 4-1: Manufacturer: ᠁ [ 175.774210][ T9] usb 4-1: SerialNumber: 璚ㅖ [ 175.782673][ T9018] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 176.170705][ T5950] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 176.310623][ T5859] Bluetooth: hci2: command tx timeout [ 176.332089][ T5950] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 176.341729][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.352467][ T5950] usb 3-1: config 0 descriptor?? [ 176.550460][ T9033] kvm: user requested TSC rate below hardware speed [ 176.665688][ T9037] syzkaller1: entered promiscuous mode [ 176.672070][ T9037] syzkaller1: entered allmulticast mode [ 176.848729][ T5945] hid_parser_main: 643 callbacks suppressed [ 176.848750][ T5945] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 176.885446][ T5945] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 177.200672][ T9043] input: syz1 as /devices/virtual/input/input22 [ 177.740646][ T5945] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 177.890578][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 177.903289][ T5945] usb 2-1: New USB device found, idVendor=17cc, idProduct=1020, bcdDevice=16.7b [ 177.913130][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.921511][ T5945] usb 2-1: Product: syz [ 177.925856][ T5945] usb 2-1: Manufacturer: syz [ 177.930647][ T5945] usb 2-1: SerialNumber: syz [ 177.936974][ T5945] usb 2-1: config 0 descriptor?? [ 178.070416][ T1212] usb 6-1: USB disconnect, device number 3 [ 178.104349][ T1212] usblp0: removed [ 178.167316][ T9] cdc_ncm 4-1:1.0: bind() failure [ 178.191907][ T5945] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -71 [ 178.197953][ T9] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 178.219788][ T9] cdc_ncm 4-1:1.1: bind() failure [ 178.227350][ T5945] usb 2-1: USB disconnect, device number 37 [ 178.247955][ T9] usb 4-1: USB disconnect, device number 38 [ 178.266083][ T9054] netlink: 108 bytes leftover after parsing attributes in process `syz.3.908'. [ 178.266568][ T9055] /dev/rnullb0: Can't open blockdev [ 178.610982][ T7972] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 178.737915][ T5950] usb 3-1: Cannot set MAC address [ 178.758636][ T5950] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 178.808736][ T5950] usb 3-1: USB disconnect, device number 37 [ 178.840681][ T7972] usb 6-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 178.860573][ T7972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.868614][ T7972] usb 6-1: Product: syz [ 178.881660][ T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 178.902415][ T7972] usb 6-1: Manufacturer: syz [ 178.907085][ T7972] usb 6-1: SerialNumber: syz [ 178.921175][ T7972] usb 6-1: config 0 descriptor?? [ 179.050600][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 179.060457][ T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 179.072689][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.081086][ T9] usb 4-1: Product: syz [ 179.085484][ T9] usb 4-1: Manufacturer: syz [ 179.090084][ T9] usb 4-1: SerialNumber: syz [ 179.100606][ T9] usb 4-1: config 0 descriptor?? [ 179.115319][ T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 179.131601][ T9] usb 4-1: Detected FT4233HP [ 179.666455][ T9090] Invalid source name [ 179.686254][ T9090] UBIFS error (pid: 9090): cannot open "ubifs", error -22 [ 179.696925][ T9090] /dev/rnullb0: Can't open blockdev [ 179.878545][ T9095] /dev/rnullb0: Can't open blockdev [ 180.081757][ T9107] veth1_macvtap: left promiscuous mode [ 180.120026][ T9112] veth1_macvtap: entered promiscuous mode [ 181.484700][ T7972] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 181.504040][ T7972] asix 6-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 181.523842][ T7972] asix 6-1:0.0: probe with driver asix failed with error -71 [ 181.544776][ T7972] usb 6-1: USB disconnect, device number 4 [ 181.599722][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 181.613855][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 181.653806][ T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 181.667337][ T9126] /dev/rnullb0: Can't open blockdev [ 181.692825][ T9] usb 4-1: USB disconnect, device number 39 [ 181.702312][ T9126] Option ' ' to dns_resolver key: bad/missing value [ 181.728902][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 181.751527][ T9] ftdi_sio 4-1:0.0: device disconnected [ 182.022859][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 182.529572][ T9170] /dev/rnullb0: Can't open blockdev [ 182.873272][ T982] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 182.920911][ T7972] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 183.013947][ T982] usb 6-1: device descriptor read/64, error -71 [ 183.107411][ T7972] usb 4-1: device descriptor read/64, error -71 [ 183.293601][ T982] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 183.440715][ T7972] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 183.464138][ T982] usb 6-1: device descriptor read/64, error -71 [ 183.580924][ T982] usb usb6-port1: attempt power cycle [ 183.613505][ T7972] usb 4-1: device descriptor read/64, error -71 [ 183.721220][ T7972] usb usb4-port1: attempt power cycle [ 183.852234][ T9223] /dev/rnullb0: Can't open blockdev [ 183.895748][ T9227] /dev/rnullb0: Can't open blockdev [ 183.920603][ T982] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 183.930787][ T5945] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 183.949050][ T982] usb 6-1: device descriptor read/8, error -71 [ 184.060677][ T7972] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 184.084033][ T7972] usb 4-1: device descriptor read/8, error -71 [ 184.101862][ T5945] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.112977][ T5945] usb 3-1: config 0 interface 0 has no altsetting 0 [ 184.119631][ T5945] usb 3-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00 [ 184.129147][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.139498][ T5945] usb 3-1: config 0 descriptor?? [ 184.220699][ T982] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 184.240936][ T982] usb 6-1: device descriptor read/8, error -71 [ 184.320625][ T7972] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 184.341046][ T7972] usb 4-1: device descriptor read/8, error -71 [ 184.352108][ T982] usb usb6-port1: unable to enumerate USB device [ 184.460629][ T7972] usb usb4-port1: unable to enumerate USB device [ 184.554753][ T5945] hid-alps 0003:044E:1215.000B: unknown main item tag 0x1 [ 184.577265][ T5945] hid-alps 0003:044E:1215.000B: hidraw0: USB HID v0.04 Device [HID 044e:1215] on usb-dummy_hcd.2-1/input0 [ 184.752423][ T9210] /dev/rnullb0: Can't open blockdev [ 184.758237][ T9] usb 3-1: USB disconnect, device number 38 [ 184.930626][ T5901] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 185.102180][ T5901] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 185.110372][ T5901] usb 2-1: config 0 has no interface number 0 [ 185.117074][ T5901] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64 [ 185.128209][ T5901] usb 2-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf [ 185.137359][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.146422][ T5901] usb 2-1: config 0 descriptor?? [ 185.153226][ T5901] rndis_host 2-1:0.219: invalid descriptor buffer length [ 185.160276][ T5901] usb 2-1: bad CDC descriptors [ 185.165547][ T5901] cdc_acm 2-1:0.219: invalid descriptor buffer length [ 185.544359][ T9282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.555563][ T9282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.577318][ T5945] usb 2-1: USB disconnect, device number 38 [ 185.774589][ T9291] /dev/rnullb0: Can't open blockdev [ 185.849330][ T9295] /dev/rnullb0: Can't open blockdev [ 185.932889][ T9299] syzkaller1: entered promiscuous mode [ 185.938621][ T9299] syzkaller1: entered allmulticast mode [ 186.000923][ T9299] delete_channel: no stack [ 186.090656][ T43] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 186.170647][ T9] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 186.242409][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.251265][ T43] usb 4-1: config 7 has an invalid interface number: 20 but max is 0 [ 186.259394][ T43] usb 4-1: config 7 has no interface number 0 [ 186.260399][ T9317] 8021q: VLANs not supported on lo [ 186.265571][ T43] usb 4-1: config 7 interface 20 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1024 [ 186.265605][ T43] usb 4-1: config 7 interface 20 has no altsetting 0 [ 186.268444][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=77.e6 [ 186.299416][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.307647][ T43] usb 4-1: Product: syz [ 186.312016][ T5945] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 186.319911][ T43] usb 4-1: Manufacturer: syz [ 186.325416][ T43] usb 4-1: SerialNumber: syz [ 186.330749][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 186.338664][ T9289] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 186.348575][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 186.360621][ T9] usb 6-1: string descriptor 0 read error: -22 [ 186.366866][ T9] usb 6-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=82.fe [ 186.376850][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.470693][ T5945] usb 3-1: Using ep0 maxpacket: 16 [ 186.477346][ T5945] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 186.485554][ T5945] usb 3-1: config 0 has no interface number 0 [ 186.491787][ T5945] usb 3-1: config 0 interface 32 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.502887][ T5945] usb 3-1: config 0 interface 32 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.513019][ T5945] usb 3-1: config 0 interface 32 has no altsetting 0 [ 186.519745][ T5945] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 186.529193][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.539027][ T5945] usb 3-1: config 0 descriptor?? [ 186.555016][ T43] usbtest 4-1:7.20: couldn't get endpoints, -22 [ 186.560930][ T5901] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 186.562677][ T43] usbtest 4-1:7.20: probe with driver usbtest failed with error -22 [ 186.580933][ T43] usb 4-1: USB disconnect, device number 44 [ 186.593817][ T9] asix 6-1:7.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 186.604681][ T9] asix 6-1:7.0: probe with driver asix failed with error -61 [ 186.722103][ T5901] usb 2-1: config index 0 descriptor too short (expected 65183, got 72) [ 186.733278][ T5901] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.742456][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.750451][ T5901] usb 2-1: Product: syz [ 186.754886][ T5901] usb 2-1: Manufacturer: syz [ 186.759580][ T5901] usb 2-1: SerialNumber: syz [ 186.768022][ T5901] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 186.789413][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 186.950853][ T5945] corsair 0003:1B1C:1B34.000C: unknown main item tag 0x0 [ 186.958289][ T5945] corsair 0003:1B1C:1B34.000C: unknown main item tag 0x0 [ 186.966279][ T5945] corsair 0003:1B1C:1B34.000C: unknown main item tag 0x0 [ 186.973444][ T5945] corsair 0003:1B1C:1B34.000C: unknown main item tag 0x0 [ 186.981660][ T5945] corsair 0003:1B1C:1B34.000C: unknown main item tag 0x0 [ 186.989298][ T5945] corsair 0003:1B1C:1B34.000C: failed to start in urb: -90 [ 186.998624][ T5945] corsair 0003:1B1C:1B34.000C: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input32 [ 187.009077][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.022174][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.036511][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.047241][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.066142][ T5945] usb 2-1: USB disconnect, device number 39 [ 187.103203][ T9324] netlink: 124 bytes leftover after parsing attributes in process `syz.3.972'. [ 187.113445][ T9324] /dev/rnullb0: Can't open blockdev [ 187.381291][ T5901] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 187.550706][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 187.557808][ T5901] usb 4-1: unable to get BOS descriptor or descriptor too short [ 187.567462][ T5901] usb 4-1: config 7 has an invalid interface number: 169 but max is 0 [ 187.575693][ T5901] usb 4-1: config 7 has no interface number 0 [ 187.583728][ T5901] usb 4-1: New USB device found, idVendor=04c5, idProduct=1330, bcdDevice=79.99 [ 187.592987][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.601051][ T5901] usb 4-1: Product: syz [ 187.605204][ T5901] usb 4-1: Manufacturer: syz [ 187.609780][ T5901] usb 4-1: SerialNumber: syz [ 187.828591][ T5901] usb 4-1: USB disconnect, device number 45 [ 187.835547][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 187.843624][ T9] ath9k_htc: Failed to initialize the device [ 187.853395][ T5945] usb 2-1: ath9k_htc: USB layer deinitialized [ 188.073838][ T5950] usb 3-1: USB disconnect, device number 39 [ 188.170711][ T5945] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 188.330585][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 188.338140][ T5945] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 188.353316][ T5945] usb 2-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=d2.a2 [ 188.363481][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.372362][ T5945] usb 2-1: Product: syz [ 188.376622][ T5945] usb 2-1: Manufacturer: syz [ 188.381589][ T5945] usb 2-1: SerialNumber: syz [ 188.388827][ T5945] usb 2-1: config 0 descriptor?? [ 188.397178][ T5945] mos7840 2-1:0.0: required endpoints missing [ 188.565753][ T9332] XFS (nullb0): Invalid superblock magic number [ 188.636456][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.3.979'. [ 188.655461][ T9347] /dev/rnullb0: Can't open blockdev [ 188.806287][ T9364] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 188.815506][ T9364] /dev/rnullb0: Can't open blockdev [ 188.905236][ T9368] netlink: 'syz.2.986': attribute type 8 has an invalid length. [ 188.974811][ T7972] usb 6-1: USB disconnect, device number 9 [ 189.025769][ T9373] /dev/rnullb0: Can't open blockdev [ 189.400661][ T7972] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 189.571962][ T7972] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.584721][ T7972] usb 6-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.602162][ T7972] usb 6-1: config 0 interface 0 has no altsetting 0 [ 189.608860][ T7972] usb 6-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.00 [ 189.618740][ T7972] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.629394][ T7972] usb 6-1: config 0 descriptor?? [ 189.774907][ T9381] ./cgroup: Can't lookup blockdev [ 189.848327][ T7972] usbhid 6-1:0.0: can't add hid device: -71 [ 189.868413][ T9382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.889544][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.990'. [ 189.902978][ T7972] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 189.927109][ T7972] usb 6-1: USB disconnect, device number 10 [ 189.938011][ T9382] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 190.140595][ T7972] usb 2-1: USB disconnect, device number 40 [ 190.712838][ T9424] omfs: Invalid superblock (0) [ 190.720987][ T9424] omfs: Invalid superblock (0) [ 190.760427][ T9429] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 190.769770][ T9429] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 190.780089][ T9429] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 190.910571][ T5945] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 191.000719][ T9] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 191.060598][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 191.069546][ T5945] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 191.080222][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.088579][ T5945] usb 3-1: Product: syz [ 191.093179][ T5945] usb 3-1: Manufacturer: syz [ 191.097925][ T5945] usb 3-1: SerialNumber: syz [ 191.104548][ T5945] usb 3-1: config 0 descriptor?? [ 191.119801][ T5945] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 191.140742][ T9] usb 4-1: device descriptor read/64, error -71 [ 191.185282][ T9447] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 191.192859][ T9447] VFS: Can't find a romfs filesystem on dev rnullb0. [ 191.192859][ T9447] [ 191.300740][ T9452] 9p: Unknown parameter 'k' [ 191.312019][ T9452] omfs: Invalid superblock (0) [ 191.401034][ T9] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 191.416312][ T9454] CUSE: info not properly terminated [ 191.491929][ T9459] Mount JFS Failure: -22 [ 191.529275][ T5945] gspca_stk1135: reg_w 0x0 err -71 [ 191.536067][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 191.545841][ T5945] gspca_stk1135: Sensor write failed [ 191.552047][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 191.558789][ T5945] gspca_stk1135: Sensor write failed [ 191.564677][ T9] usb 4-1: device descriptor read/64, error -71 [ 191.566455][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 191.578875][ T5945] gspca_stk1135: Sensor read failed [ 191.584914][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 191.591565][ T5945] gspca_stk1135: Sensor read failed [ 191.596947][ T5945] gspca_stk1135: Detected sensor type unknown (0x0) [ 191.603631][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 191.609970][ T5945] gspca_stk1135: Sensor read failed [ 191.615333][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 191.621940][ T5945] gspca_stk1135: Sensor read failed [ 191.627193][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 191.633665][ T5945] gspca_stk1135: Sensor write failed [ 191.638969][ T5945] gspca_stk1135: serial bus timeout: status=0x00 [ 191.645632][ T5945] gspca_stk1135: Sensor write failed [ 191.651053][ T5945] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 191.663745][ T5945] usb 3-1: USB disconnect, device number 40 [ 191.680836][ T9] usb usb4-port1: attempt power cycle [ 191.711125][ T5950] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 191.781161][ T5901] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 191.872234][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 191.883186][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.893057][ T5950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 191.906171][ T5950] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3232, bcdDevice= 0.00 [ 191.916430][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.926066][ T5950] usb 2-1: config 0 descriptor?? [ 191.951913][ T5901] usb 6-1: config 0 has an invalid interface number: 169 but max is 0 [ 191.960150][ T5901] usb 6-1: config 0 has no interface number 0 [ 191.960718][ T5945] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 191.973572][ T5901] usb 6-1: New USB device found, idVendor=0557, idProduct=7820, bcdDevice=30.d9 [ 191.983043][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.991201][ T5901] usb 6-1: Product: syz [ 191.995380][ T5901] usb 6-1: Manufacturer: syz [ 191.999970][ T5901] usb 6-1: SerialNumber: syz [ 192.006145][ T5901] usb 6-1: config 0 descriptor?? [ 192.020645][ T9] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 192.042330][ T9] usb 4-1: device descriptor read/8, error -71 [ 192.122764][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 192.133765][ T5945] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 192.143498][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 192.153902][ T5945] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 192.166669][ T5945] usb 3-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 192.175906][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.183986][ T5945] usb 3-1: Product: syz [ 192.188170][ T5945] usb 3-1: Manufacturer: syz [ 192.192880][ T5945] usb 3-1: SerialNumber: syz [ 192.198799][ T5945] usb 3-1: config 0 descriptor?? [ 192.205967][ T5945] ti_usb_3410_5052 3-1:0.0: TI USB 3410 1 port adapter converter detected [ 192.216034][ T9464] Mount JFS Failure: -22 [ 192.216179][ T5945] usb 3-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 192.225732][ T9464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.239438][ T9464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.260248][ T5901] mos7840 6-1:0.169: required endpoints missing [ 192.291662][ T5901] usb 6-1: USB disconnect, device number 11 [ 192.300864][ T9] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 192.341140][ T9] usb 4-1: device descriptor read/8, error -71 [ 192.349556][ T5950] ryos 0003:1E7D:3232.000D: unbalanced delimiter at end of report description [ 192.362136][ T5950] ryos 0003:1E7D:3232.000D: parse failed [ 192.367848][ T5950] ryos 0003:1E7D:3232.000D: probe with driver ryos failed with error -22 [ 192.420821][ T5950] usb 3-1: USB disconnect, device number 41 [ 192.438293][ T5950] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 192.450801][ T9] usb usb4-port1: unable to enumerate USB device [ 192.457737][ T5950] ti_usb_3410_5052 3-1:0.0: device disconnected [ 192.701781][ T5950] usb 2-1: USB disconnect, device number 41 [ 192.746365][ T9480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.960117][ T9485] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 192.967353][ T9485] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 192.975510][ T9485] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 193.240626][ T5950] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 193.360639][ T5901] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 193.390704][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 193.397027][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.408787][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.418594][ T5950] usb 3-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 193.427740][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.438259][ T5950] usb 3-1: config 0 descriptor?? [ 193.510667][ T7972] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 193.510671][ T5901] usb 6-1: Using ep0 maxpacket: 16 [ 193.512525][ T5901] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.533837][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 193.544884][ T5901] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 193.554717][ T5901] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 193.564411][ T5901] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.578792][ T5901] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 193.588441][ T5901] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 193.596619][ T5901] usb 6-1: Manufacturer: syz [ 193.602261][ T5901] usb 6-1: config 0 descriptor?? [ 193.660571][ T7972] usb 2-1: Using ep0 maxpacket: 16 [ 193.667649][ T7972] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.679924][ T7972] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 193.690297][ T7972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.699548][ T7972] usb 2-1: Product: syz [ 193.704752][ T7972] usb 2-1: Manufacturer: syz [ 193.709419][ T7972] usb 2-1: SerialNumber: syz [ 193.722219][ T7972] usb 2-1: config 0 descriptor?? [ 193.729932][ T7972] cypress_m8 2-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 193.740649][ T7972] nokiaca42v2 ttyUSB0: required endpoint is missing [ 193.862132][ T5901] rc_core: IR keymap rc-hauppauge not found [ 193.868285][ T5901] Registered IR keymap rc-empty [ 193.874690][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 193.901713][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 193.922076][ T5901] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 193.937012][ T5901] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input23 [ 193.964730][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 193.980844][ T9] usb 2-1: USB disconnect, device number 42 [ 194.004709][ T9] cypress_m8 2-1:0.0: device disconnected [ 194.011747][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.031168][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.059370][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.070318][ T5950] usbhid 3-1:0.0: can't add hid device: -71 [ 194.078247][ T5950] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 194.089781][ T5950] usb 3-1: USB disconnect, device number 42 [ 194.100699][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.130742][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.139797][ T9507] /dev/rnullb0: Can't open blockdev [ 194.152130][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.182086][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.200664][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.221014][ T5901] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 194.258144][ T5901] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 194.273985][ T5901] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 194.315134][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.324365][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.446296][ T9526] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1034'. [ 194.489002][ T9526] netlink: 'syz.3.1034': attribute type 11 has an invalid length. [ 194.673493][ T9531] netlink: 'syz.5.1025': attribute type 10 has an invalid length. [ 194.690339][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.697875][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.737059][ T9531] netlink: 'syz.5.1025': attribute type 291 has an invalid length. [ 194.807083][ T9538] fuse: Bad value for 'fd' [ 194.831801][ T9538] /dev/rnullb0: Can't open blockdev [ 195.734219][ T9557] fuse: Bad value for 'fd' [ 195.754645][ T9559] tipc: Enabled bearer , priority 10 [ 195.761446][ T9559] trusted_key: syz.1.1046 sent an empty control message without MSG_MORE. [ 196.153999][ T5901] usb 6-1: USB disconnect, device number 12 [ 196.447663][ T9565] binder: 9564:9565 ioctl c0306201 200000000680 returned -14 [ 197.001183][ T9586] /dev/rnullb0: Can't open blockdev [ 197.115000][ T9591] /dev/rnullb0: Can't open blockdev [ 197.369797][ T9598] /dev/rnullb0: Can't open blockdev [ 197.620572][ T9] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 197.747586][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1061'. [ 197.756871][ T9] usb 2-1: device descriptor read/64, error -71 [ 197.767419][ T9615] /dev/rnullb0: Can't open blockdev [ 198.540674][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 198.601764][ T9626] /dev/rnullb0: Can't open blockdev [ 198.665734][ T9628] /dev/rnullb0: Can't open blockdev [ 198.680662][ T9] usb 2-1: device descriptor read/64, error -71 [ 198.803946][ T9] usb usb2-port1: attempt power cycle [ 199.065506][ T9642] FAT-fs (nullb0): bogus number of reserved sectors [ 199.072903][ T9642] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 199.150672][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 199.211349][ T9] usb 2-1: device descriptor read/8, error -71 [ 199.337844][ T9657] binder: 9656:9657 ioctl c0306201 200000000640 returned -22 [ 199.451913][ T9] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 199.496857][ T9] usb 2-1: device descriptor read/8, error -71 [ 199.622069][ T9] usb usb2-port1: unable to enumerate USB device [ 199.763320][ T9675] Set syz0 is full, maxelem 0 reached [ 199.773649][ T9677] /dev/rnullb0: Can't open blockdev [ 199.806948][ T9679] /dev/rnullb0: Can't open blockdev [ 200.005947][ T9686] netlink: 'syz.1.1088': attribute type 1 has an invalid length. [ 200.193203][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1089'. [ 200.270598][ T5945] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 200.451849][ T5945] usb 6-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 200.462333][ T5945] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.471440][ T5945] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 19211, setting to 1024 [ 200.482578][ T5945] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 200.492765][ T5945] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.507968][ T5945] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.520125][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.528241][ T5945] usb 6-1: Product: syz [ 200.532552][ T5945] usb 6-1: Manufacturer: syz [ 200.537222][ T5945] usb 6-1: SerialNumber: syz [ 200.551744][ T9667] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 200.575744][ T9682] usb usb8: usbfs: process 9682 (syz.2.1087) did not claim interface 0 before use [ 200.596839][ T9698] tmpfs: Bad value for 'mpol' [ 200.770598][ T5945] usb 6-1: 0:2 : does not exist [ 200.829918][ T5945] usb 6-1: USB disconnect, device number 13 [ 200.888314][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1093'. [ 201.416373][ T9717] /dev/rnullb0: Can't open blockdev [ 201.448499][ T9717] /dev/rnullb0: Can't open blockdev [ 202.463187][ T9759] xfrm0 speed is unknown, defaulting to 1000 [ 202.613072][ T9762] /dev/rnullb0: Can't open blockdev [ 202.889782][ T9768] /dev/rnullb0: Can't open blockdev [ 203.270986][ T1212] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 203.400599][ T1212] usb 6-1: device descriptor read/64, error -71 [ 203.642069][ T1212] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 203.700093][ T9782] /dev/rnullb0: Can't open blockdev [ 203.800666][ T1212] usb 6-1: device descriptor read/64, error -71 [ 203.913677][ T1212] usb usb6-port1: attempt power cycle [ 204.032959][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.042178][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.207944][ T9799] block nbd1: Attempted send on invalid socket [ 204.214946][ T9799] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.227032][ T9799] vxfs: unable to read disk superblock at 1 [ 204.233395][ T9799] block nbd1: Attempted send on invalid socket [ 204.239916][ T9799] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 204.253279][ T9799] vxfs: unable to read disk superblock at 8 [ 204.259364][ T9799] vxfs: can't find superblock. [ 204.270661][ T9] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 204.278311][ T1212] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 204.301551][ T1212] usb 6-1: device descriptor read/8, error -71 [ 204.390557][ T9810] efs: device does not support 512 byte blocks [ 204.396941][ T9810] device does not support 512 byte blocks [ 204.396941][ T9810] [ 204.434290][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.447630][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.459231][ T9] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 204.468866][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.488049][ T9] usb 4-1: config 0 descriptor?? [ 204.542589][ T1212] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 204.560871][ T5901] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 204.571442][ T1212] usb 6-1: device descriptor read/8, error -71 [ 204.690924][ T1212] usb usb6-port1: unable to enumerate USB device [ 204.707081][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 204.722482][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 204.739524][ T9] usb 4-1: USB disconnect, device number 50 [ 204.748977][ T5901] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 204.767426][ T5901] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.786724][ T5901] usb 3-1: config 2 interface 0 has no altsetting 0 [ 204.799452][ T5901] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 204.809557][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.819273][ T5901] usb 3-1: Product: syz [ 204.823948][ T5901] usb 3-1: Manufacturer: syz [ 204.828696][ T5901] usb 3-1: SerialNumber: syz [ 205.042504][ T5901] ims_pcu 3-1:2.0: Missing CDC union descriptor [ 205.048993][ T5901] ims_pcu 3-1:2.0: probe with driver ims_pcu failed with error -22 [ 205.058693][ T5901] usb 3-1: USB disconnect, device number 43 [ 205.582599][ T9827] dvmrp0: entered allmulticast mode [ 205.598822][ T9827] syz_tun: entered allmulticast mode [ 205.608213][ T9827] dvmrp0: left allmulticast mode [ 205.621097][ T9827] syz_tun: left allmulticast mode [ 205.660355][ T9837] /dev/rnullb0: Can't open blockdev [ 205.745095][ T9843] /dev/rnullb0: Can't open blockdev [ 206.088130][ T9853] kvm: kvm [9852]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc1) = 0x60000000000 [ 206.203534][ T9862] /dev/rnullb0: Can't open blockdev [ 206.261675][ T9853] kvm: kvm [9852]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc1) = 0x60000008201 [ 206.289066][ T9853] kvm: kvm [9852]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc1) = 0x60000000003 [ 206.338768][ T9853] kvm: kvm [9852]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc1) = 0x60000000003 [ 206.368503][ T9853] kvm: kvm [9852]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc1) = 0xfd00000003 [ 206.406568][ T9853] kvm: kvm [9852]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc1) = 0xfd00000003 [ 206.438070][ T9853] kvm: kvm [9852]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0xc1) = 0xfd00000c89 [ 206.573351][ T9866] /dev/sg0: Can't lookup blockdev [ 206.646827][ T9868] i2c i2c-0: Invalid block write size 254 [ 206.938315][ T9877] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1145'. [ 207.142916][ T9884] netlink: 'syz.3.1148': attribute type 7 has an invalid length. [ 207.240582][ T9] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 207.413826][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 207.427490][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.450331][ T9] usb 2-1: Product: syz [ 207.467353][ T9] usb 2-1: Manufacturer: syz [ 207.499970][ T9] usb 2-1: SerialNumber: syz [ 207.645607][ T9895] evm: overlay not supported [ 207.653042][ T9895] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 207.660000][ T9895] VFS: Can't find a romfs filesystem on dev rnullb0. [ 207.660000][ T9895] [ 207.731276][ T5901] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 207.900639][ T5901] usb 4-1: Using ep0 maxpacket: 32 [ 207.911342][ T5901] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 207.931702][ T5901] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 207.939842][ T5901] usb 4-1: config 0 has no interface number 0 [ 207.961981][ T5901] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 207.970098][ T5901] usb 4-1: config 0 has no interface number 0 [ 207.994034][ T5901] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.002241][ T5901] usb 4-1: config 0 has no interface number 0 [ 208.009413][ T5901] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.017687][ T5901] usb 4-1: config 0 has no interface number 0 [ 208.024928][ T5901] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.033148][ T5901] usb 4-1: config 0 has no interface number 0 [ 208.051307][ T5901] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.059356][ T5901] usb 4-1: config 0 has no interface number 0 [ 208.066789][ T5901] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.075203][ T5901] usb 4-1: config 0 has no interface number 0 [ 208.082533][ T5901] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 208.090860][ T5901] usb 4-1: config 0 has no interface number 0 [ 208.102203][ T5901] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 208.111372][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.119391][ T5901] usb 4-1: Product: syz [ 208.140582][ T5901] usb 4-1: Manufacturer: syz [ 208.145227][ T5901] usb 4-1: SerialNumber: syz [ 208.162061][ T5901] usb 4-1: config 0 descriptor?? [ 208.170344][ T5901] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 208.369720][ T5901] etas_es58x 4-1:0.2: could not parse product info: '424242424242' [ 210.710689][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 211.017011][ T9934] ALSA: seq fatal error: cannot create timer (-22) [ 211.179854][ T9941] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 211.331588][ C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0061. [ 211.342752][ C1] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 211.350752][ C1] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 211.358541][ C1] etas_es58x 4-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0xC7D8. [ 211.369510][ C1] etas_es58x 4-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 211.377503][ C1] etas_es58x 4-1:0.2: es58x_split_urb() returned error -EBADMSG [ 211.400182][ T5530] etas_es58x 4-1:0.2 can0: bit-timing not yet defined [ 211.700842][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO [ 211.719514][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 211.734428][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 211.745569][ T9] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 211.761805][ T9] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 211.790835][ T9] usb 2-1: USB disconnect, device number 47 [ 211.847238][ T30] audit: type=1326 audit(1756804254.841:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9945 comm="syz.2.1162" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f484038ebe9 code=0x0 [ 212.047871][ T9957] hfs: can't find a HFS filesystem on dev rnullb0 [ 212.060960][ T5945] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 212.257475][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 212.266702][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 212.275913][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 212.285202][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 212.294403][ C1] etas_es58x 4-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 212.303596][ C1] etas_es58x 4-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 212.313812][ T7972] usb 4-1: USB disconnect, device number 51 [ 212.320643][ T7972] etas_es58x 4-1:0.2: Disconnecting syz syz [ 212.335699][ T5530] etas_es58x 4-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 213.743515][T10039] /dev/rnullb0: Can't open blockdev [ 213.971514][T10047] /dev/rnullb0: Can't open blockdev [ 214.210690][ T30] audit: type=1326 audit(1756804257.151:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10056 comm="syz.1.1184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ebb78ebe9 code=0x0 [ 214.833579][T10074] binder: BINDER_SET_CONTEXT_MGR already set [ 214.839642][T10074] binder: 10072:10074 ioctl 4018620d 200000004a80 returned -16 [ 214.850261][T10074] /dev/rnullb0: Can't open blockdev [ 215.033742][T10081] syzkaller1: entered promiscuous mode [ 215.040647][T10081] syzkaller1: entered allmulticast mode [ 215.088528][T10083] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 215.120681][T10083] EXT4-fs (loop1): unable to read superblock [ 215.570890][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.585357][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.599782][T10111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.610389][T10111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.664142][T10116] gfs2: path_lookup on c::: returned error -2 [ 215.804057][T10118] gfs2: gfs2 mount does not exist [ 215.877817][T10121] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 215.884986][T10121] /dev/rnullb0: Can't open blockdev [ 215.921713][ T43] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 216.080850][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 216.090170][ T43] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 216.101384][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.109846][ T43] usb 2-1: Product: syz [ 216.115811][ T43] usb 2-1: Manufacturer: syz [ 216.121810][ T43] usb 2-1: SerialNumber: syz [ 216.128304][ T43] usb 2-1: config 0 descriptor?? [ 216.562668][T10116] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 216.610022][ T43] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 216.630384][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 216.640920][ T43] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 216.708177][ T43] usb 2-1: media controller created [ 216.747154][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 217.240652][ T5945] usb 3-1: device descriptor read/64, error -110 [ 217.290895][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 217.298041][T10116] dtv5100: wlen = 0, aborting. [ 217.304313][ T43] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 217.320272][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 217.338137][ T43] usb 2-1: USB disconnect, device number 48 [ 217.390112][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 217.470634][ T982] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 217.490585][ T5945] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 217.589123][T10142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.598457][T10142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.607723][T10142] /dev/rnullb0: Can't open blockdev [ 217.630608][ T5945] usb 3-1: device descriptor read/64, error -32 [ 217.637041][ T982] usb 6-1: Using ep0 maxpacket: 32 [ 217.644719][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.656276][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.667851][ T982] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 217.676944][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.685924][ T982] usb 6-1: config 0 descriptor?? [ 217.730328][T10146] Bluetooth: MGMT ver 1.23 [ 217.750886][ T5945] usb usb3-port1: attempt power cycle [ 217.970480][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'. [ 218.101503][ T5945] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 218.110288][ T982] ft260 0003:0403:6030.000E: unknown main item tag 0x7 [ 218.130788][ T5945] usb 3-1: device descriptor read/8, error -32 [ 218.240929][ T5945] raw-gadget.0 gadget.2: failed to queue suspend event [ 218.292457][T10161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.319154][T10161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.343296][ T982] ft260 0003:0403:6030.000E: chip code: 6424 8183 [ 218.352186][ T5945] raw-gadget.0 gadget.2: failed to queue reset event [ 218.358124][T10163] /dev/rnullb0: Can't open blockdev [ 218.430648][ T5945] raw-gadget.0 gadget.2: failed to queue resume event [ 218.547041][ T982] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 218.585787][T10171] /dev/rnullb0: Can't open blockdev [ 218.609003][ T5945] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 218.747598][ T982] ft260 0003:0403:6030.000E: failed to retrieve status: -32, no wakeup [ 218.771479][ T982] ft260 0003:0403:6030.000E: failed to retrieve status: -32 [ 218.781181][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 218.783753][T10175] ./file0: Can't lookup blockdev [ 218.788378][ T5945] usb 3-1: device descriptor read/8, error -32 [ 218.913812][ T5945] raw-gadget.0 gadget.2: failed to queue suspend event [ 218.933037][ T5945] usb usb3-port1: unable to enumerate USB device [ 219.001241][ T5945] usb 6-1: USB disconnect, device number 18 [ 219.184769][ T5901] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 219.199161][T10192] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1225'. [ 219.355871][ T5901] usb 4-1: no configurations [ 219.360696][ T5901] usb 4-1: can't read configurations, error -22 [ 219.470614][ T5945] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 219.490679][ T5901] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 219.653196][ T5901] usb 4-1: no configurations [ 219.668036][ T5901] usb 4-1: can't read configurations, error -22 [ 219.678457][ T5901] usb usb4-port1: attempt power cycle [ 219.810698][ T5945] usb 2-1: Using ep0 maxpacket: 32 [ 219.820998][ T5945] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 219.829445][ T5945] usb 2-1: config 0 has no interface number 0 [ 219.836232][ T5945] usb 2-1: config 0 interface 156 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 219.850345][ T5945] usb 2-1: config 0 interface 156 has no altsetting 0 [ 219.859509][ T5945] usb 2-1: New USB device found, idVendor=2040, idProduct=6500, bcdDevice=1c.9d [ 219.873433][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.881761][ T5945] usb 2-1: Product: syz [ 219.886167][ T5945] usb 2-1: Manufacturer: syz [ 219.891288][ T5945] usb 2-1: SerialNumber: syz [ 219.909087][ T5945] usb 2-1: config 0 descriptor?? [ 220.030789][ T5901] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 220.062675][ T5901] usb 4-1: no configurations [ 220.067509][ T5901] usb 4-1: can't read configurations, error -22 [ 220.157272][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.171636][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.202450][ T5901] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 220.252566][ T5901] usb 4-1: no configurations [ 220.257511][ T5901] usb 4-1: can't read configurations, error -22 [ 220.267562][ T5901] usb usb4-port1: unable to enumerate USB device [ 220.312575][ T5945] em28xx 2-1:0.156: New device syz syz @ 480 Mbps (2040:6500, interface 156, class 156) [ 220.324436][ T5945] em28xx 2-1:0.156: Video interface 156 found: isoc [ 220.400896][ T5945] em28xx 2-1:0.156: unknown em28xx chip ID (0) [ 220.473958][ T5186] Bluetooth: hci2: command 0x0405 tx timeout [ 220.492833][ T5945] em28xx 2-1:0.156: reading from i2c device at 0xa0 failed (error=-5) [ 220.505485][ T5945] em28xx 2-1:0.156: board has no eeprom [ 220.546075][T10208] sg_write: data in/out 44713/14 bytes for SCSI command 0x0-- guessing data in; [ 220.546075][T10208] program syz.5.1230 not setting count and/or reply_len properly [ 220.621714][ T5945] em28xx 2-1:0.156: Identified as Hauppauge WinTV HVR 900 (card=10) [ 220.638575][ T5945] em28xx 2-1:0.156: analog set to isoc mode. [ 220.657255][ T5945] usb 2-1: USB disconnect, device number 49 [ 220.671586][ T5945] em28xx 2-1:0.156: Disconnecting em28xx [ 220.679180][ T24] em28xx 2-1:0.156: Registering V4L2 extension [ 220.707180][T10218] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1232'. [ 220.770610][ T24] em28xx 2-1:0.156: Config register raw data: 0xffffffed [ 220.778419][ T24] em28xx 2-1:0.156: AC97 chip type couldn't be determined [ 220.786938][ T24] em28xx 2-1:0.156: No AC97 audio processor [ 220.805620][ T24] em28xx 2-1:0.156: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 220.824920][ T24] em28xx 2-1:0.156: Binding DVB extension [ 220.840919][ T24] em28xx 2-1:0.156: no endpoint for DVB mode and transfer type 0 [ 220.859011][ T24] em28xx 2-1:0.156: failed to pre-allocate USB transfer buffers for DVB. [ 220.889967][ T24] em28xx 2-1:0.156: Registering input extension [ 220.907284][ T5945] em28xx 2-1:0.156: Closing input extension [ 220.927303][ T5945] em28xx 2-1:0.156: Freeing device [ 221.691004][T10268] /dev/rnullb0: Can't open blockdev [ 221.741471][T10278] /dev/rnullb0: Can't open blockdev [ 222.005967][T10295] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1254'. [ 222.400698][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 222.550595][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 222.557552][ T9] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 222.568396][ T9] usb 4-1: config 1 has no interface number 0 [ 222.574815][ T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 222.586932][ T9] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 222.597460][ T9] usb 4-1: config 1 interface 105 has no altsetting 0 [ 222.608091][ T9] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 222.617817][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.627181][ T9] usb 4-1: Product: syz [ 222.634329][ T9] usb 4-1: Manufacturer: syz [ 222.652700][ T9] usb 4-1: SerialNumber: syz [ 222.669841][T10301] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.678317][T10301] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 222.921087][ T9] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 222.946867][ T9] usb 4-1: USB disconnect, device number 56 [ 223.268179][T10322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.301203][T10322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.534860][ T9] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 223.964116][T10334] fuse: Bad value for 'group_id' [ 223.977895][T10334] fuse: Bad value for 'group_id' [ 224.222624][ T1212] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 224.232786][T10354] /dev/rnullb0: Can't open blockdev [ 224.255469][T10359] input: syz1 as /devices/virtual/input/input25 [ 224.266345][T10359] /dev/rnullb0: Can't open blockdev [ 224.271731][ T982] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 224.281437][ T5860] udevd[5860]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 224.380634][ T1212] usb 4-1: Using ep0 maxpacket: 32 [ 224.387642][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.400823][ T1212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.412338][ T1212] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 224.422461][ T1212] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.430734][ T9] usb 6-1: device descriptor read/64, error -71 [ 224.439870][ T1212] usb 4-1: config 0 descriptor?? [ 224.670759][ T9] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 224.832273][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.844541][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.857078][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 31658, setting to 64 [ 224.873446][ T1212] koneplus 0003:1E7D:2D51.000F: unbalanced collection at end of report description [ 224.887469][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.906777][ T1212] koneplus 0003:1E7D:2D51.000F: parse failed [ 224.913494][ T1212] koneplus 0003:1E7D:2D51.000F: probe with driver koneplus failed with error -22 [ 224.926152][ T9] usb 6-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 224.944112][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.956322][ T9] usb 6-1: Product: syz [ 224.961853][ T9] usb 6-1: Manufacturer: syz [ 224.966663][ T9] usb 6-1: SerialNumber: syz [ 224.977235][ T9] usb 6-1: config 0 descriptor?? [ 224.984517][T10352] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 224.997268][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26 [ 225.119610][T10339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.137627][T10339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.191810][ T9] usb 4-1: USB disconnect, device number 57 [ 225.256430][T10371] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1274'. [ 225.309967][ T1212] usb 6-1: USB disconnect, device number 20 [ 225.316118][ C0] kbtab 6-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 225.360615][ T982] usb 2-1: device descriptor read/64, error -71 [ 225.607651][T10385] input: syz1 as /devices/virtual/input/input27 [ 225.610648][ T982] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 225.689013][T10390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.699344][T10390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.771162][ T982] usb 2-1: device descriptor read/64, error -71 [ 225.880884][ T982] usb usb2-port1: attempt power cycle [ 226.240599][ T982] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 226.281786][ T982] usb 2-1: device descriptor read/8, error -71 [ 226.530965][ T982] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 226.571975][ T982] usb 2-1: device descriptor read/8, error -71 [ 226.608658][T10409] /dev/rnullb0: Can't open blockdev [ 226.701820][ T982] usb usb2-port1: unable to enumerate USB device [ 226.808957][T10415] /dev/rnullb0: Can't open blockdev [ 227.077971][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1294'. [ 227.087231][T10422] netlink: 'syz.3.1295': attribute type 5 has an invalid length. [ 227.161843][T10427] program syz.3.1297 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 227.214384][T10428] /dev/rnullb0: Can't open blockdev [ 227.523503][T10432] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 228.160996][ T982] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 228.331906][ T982] usb 2-1: config 0 has an invalid interface number: 6 but max is 0 [ 228.339939][ T982] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.360627][ T982] usb 2-1: config 0 has no interface number 0 [ 228.370571][ T982] usb 2-1: config 0 interface 6 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.391203][ T982] usb 2-1: config 0 interface 6 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 228.562862][T10445] block nbd3: Attempted send on invalid socket [ 228.579302][T10445] I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.598995][T10445] qnx4: unable to read the superblock [ 228.606565][T10446] block nbd3: Attempted send on invalid socket [ 228.621820][T10446] I/O error, dev nbd3, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 228.646112][T10446] qnx4: unable to read the superblock [ 228.682880][ T982] usb 2-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 228.692189][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.700213][ T982] usb 2-1: Product: syz [ 228.711085][ T982] usb 2-1: Manufacturer: syz [ 228.715738][ T982] usb 2-1: SerialNumber: syz [ 228.731538][ T982] usb 2-1: config 0 descriptor?? [ 228.760781][ T982] vmk80xx 2-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 228.877143][T10456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.900812][T10456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.948483][T10424] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1296'. [ 228.958655][T10424] /dev/rnullb0: Can't open blockdev [ 228.966460][ T5950] usb 2-1: USB disconnect, device number 54 [ 229.109100][T10420] kexec: Could not allocate control_code_buffer [ 229.554836][T10474] /dev/rnullb0: Can't open blockdev [ 229.604211][T10478] /dev/rnullb0: Can't open blockdev [ 229.730870][ T5950] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 229.747850][T10484] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.759016][T10484] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.881672][ T5950] usb 4-1: Using ep0 maxpacket: 16 [ 229.888786][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.903394][ T5950] usb 4-1: New USB device found, idVendor=c690, idProduct=6a2d, bcdDevice= 0.00 [ 229.913004][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.923945][ T5950] usb 4-1: config 0 descriptor?? [ 230.146860][ T5950] hid-generic 0003:C690:6A2D.0010: hidraw0: USB HID v10.00 Device [HID c690:6a2d] on usb-dummy_hcd.3-1/input0 [ 230.174450][ T5950] usb 4-1: USB disconnect, device number 58 [ 230.217082][T10491] fido_id[10491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 232.359827][T10524] /dev/rnullb0: Can't open blockdev [ 232.385202][T10524] /dev/rnullb0: Can't open blockdev [ 232.610699][ T5950] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 232.785343][ T5950] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 232.816514][ T5950] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 232.820747][T10556] /dev/rnullb0: Can't open blockdev [ 232.840633][ T5950] usb 4-1: config 220 interface 0 has no altsetting 0 [ 232.866909][ T5950] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 232.891570][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.921826][ T5950] usb 4-1: Product: syz [ 232.966379][ T5950] usb 4-1: Manufacturer: syz [ 232.972804][ T5950] usb 4-1: SerialNumber: syz [ 233.096919][T10586] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 233.114130][T10586] VFS: Can't find a romfs filesystem on dev rnullb0. [ 233.114130][T10586] [ 233.131072][T10590] /dev/rnullb0: Can't open blockdev [ 233.260002][T10601] exFAT-fs (nullb0): invalid boot record signature [ 233.268721][ T5950] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 233.276387][ T5950] usb 4-1: No valid video chain found. [ 233.285612][T10601] exFAT-fs (nullb0): failed to read boot sector [ 233.302349][T10601] exFAT-fs (nullb0): failed to recognize exfat type [ 233.309390][ T5950] usb 4-1: USB disconnect, device number 59 [ 233.664497][T10631] loop9: detected capacity change from 0 to 7 [ 233.687923][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.701279][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.709237][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.742441][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.765414][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.789509][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.812386][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.844760][ T5860] ldm_validate_partition_table(): Disk read failed. [ 233.856022][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.865086][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.873691][ T5860] Buffer I/O error on dev loop9, logical block 0, async page read [ 233.885176][ T5860] Dev loop9: unable to read RDB block 0 [ 233.886507][T10646] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1354'. [ 233.891695][ T5860] loop9: unable to read partition table [ 233.906273][ T5860] loop9: partition table beyond EOD, truncated [ 233.913938][T10631] ldm_validate_partition_table(): Disk read failed. [ 233.922600][T10631] Dev loop9: unable to read RDB block 0 [ 233.930888][T10631] loop9: unable to read partition table [ 233.950838][T10631] loop9: partition table beyond EOD, truncated [ 233.957047][T10631] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 233.957047][T10631] ) failed (rc=-5) [ 234.061114][ T5950] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 234.225387][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.248171][ T5950] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.290590][ T5950] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 234.320559][ T5950] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 234.350552][ T5950] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.382054][ T5950] usb 6-1: config 0 descriptor?? [ 234.600682][ T5950] usbhid 6-1:0.0: can't add hid device: -71 [ 234.623108][ T5950] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 234.666892][ T5950] usb 6-1: USB disconnect, device number 21 [ 235.570590][ T982] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 235.721867][ T982] usb 6-1: Using ep0 maxpacket: 8 [ 235.732019][ T982] usb 6-1: too many endpoints for config 1 interface 0 altsetting 1: 255, using maximum allowed: 30 [ 235.762163][ T982] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 235.773148][ T5950] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 235.782566][ T982] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 235.792834][ T982] usb 6-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 235.804105][ T982] usb 6-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 235.822761][ T982] usb 6-1: config 1 interface 0 has no altsetting 0 [ 235.831013][ T982] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 235.847376][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 235.855919][ T982] usb 6-1: SerialNumber: syz [ 235.865958][T10705] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 235.874208][T10705] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 235.930821][ T5950] usb 2-1: Using ep0 maxpacket: 16 [ 235.937821][ T5950] usb 2-1: unable to get BOS descriptor or descriptor too short [ 235.948868][ T5950] usb 2-1: config 174 has an invalid interface number: 8 but max is 0 [ 235.957865][ T5950] usb 2-1: config 174 has no interface number 0 [ 235.964398][ T5950] usb 2-1: config 174 interface 8 altsetting 2 endpoint 0x3 has invalid wMaxPacketSize 0 [ 235.976695][ T5950] usb 2-1: config 174 interface 8 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 0 [ 235.987149][ T5950] usb 2-1: config 174 interface 8 has no altsetting 0 [ 235.996187][ T5950] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0016, bcdDevice=d2.70 [ 236.005629][ T5950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.015483][ T5950] usb 2-1: Product: syz [ 236.019664][ T5950] usb 2-1: Manufacturer: syz [ 236.030757][ T5950] usb 2-1: SerialNumber: syz [ 236.235107][T10705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.260899][T10705] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.279019][T10718] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1366'. [ 236.383764][T10735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.434374][T10735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.605508][ T5950] kvaser_usb 2-1:174.8: error -ENODEV: Cannot get usb endpoint(s) [ 236.642614][ T5950] usb 2-1: USB disconnect, device number 55 [ 236.806952][T10739] cgroup: release_agent respecified [ 236.863622][T10741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.872841][T10741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.903846][T10746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.912659][T10746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.984176][ T982] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 237.003865][ T982] cdc_acm 6-1:1.0: ttyACM0: USB ACM device [ 237.018676][ T982] usb 6-1: USB disconnect, device number 22 [ 237.830831][ T982] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 237.949266][T10771] xfrm0 speed is unknown, defaulting to 1000 [ 237.982595][ T982] usb 6-1: device descriptor read/64, error -71 [ 237.993475][T10773] NILFS (rnullb0): couldn't find nilfs on the device [ 238.081719][T10779] rdma_rxe: rxe_newlink: failed to add wlan1 [ 238.101407][T10779] /dev/rnullb0: Can't open blockdev [ 238.230730][ T982] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 238.339372][T10777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.378505][ T982] usb 6-1: device descriptor read/64, error -71 [ 238.380961][T10777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.493970][ T982] usb usb6-port1: attempt power cycle [ 238.870752][ T982] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 238.911183][ T982] usb 6-1: device descriptor read/8, error -71 [ 239.170578][ T982] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 239.221489][ T982] usb 6-1: device descriptor read/8, error -71 [ 239.308171][T10797] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 239.314821][T10797] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 239.323946][T10797] vhci_hcd vhci_hcd.0: Device attached [ 239.330808][ T982] usb usb6-port1: unable to enumerate USB device [ 239.339328][T10797] /dev/rnullb0: Can't open blockdev [ 239.345461][T10798] vhci_hcd: connection closed [ 239.345650][ T3836] vhci_hcd: stop threads [ 239.355942][ T3836] vhci_hcd: release socket [ 239.361262][ T3836] vhci_hcd: disconnect device [ 240.054887][T10819] Mount JFS Failure: -22 [ 240.059157][T10819] jfs_mount failed w/return code = -22 [ 240.166417][T10821] Mount JFS Failure: -22 [ 240.214394][T10834] FAT-fs (rnullb0): bogus number of reserved sectors [ 240.225288][T10834] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 240.894194][T10868] /dev/rnullb0: Can't open blockdev [ 241.404257][T10886] ptrace attach of "./syz-executor exec"[10887] was attempted by "./syz-executor exec"[10886] [ 241.560187][T10897] binder: Unknown parameter 'obj_role' [ 241.900585][ T982] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 242.051524][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 242.061784][ T982] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 242.069982][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.100554][ T982] usb 6-1: config 0 has no interface number 0 [ 242.106681][ T982] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 242.140568][ T982] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 242.160561][ T982] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 242.180560][ T982] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 242.190489][ T982] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 242.221053][ T982] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 242.230765][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.251530][ T982] usb 6-1: config 0 descriptor?? [ 242.257199][T10890] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 242.282683][ T982] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 242.492375][ T982] usb 6-1: USB disconnect, device number 27 [ 242.564849][T10917] /dev/rnullb0: Can't open blockdev [ 242.748387][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.761879][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.773263][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.783316][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.791230][ T982] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 242.950995][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 242.957894][ T982] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 242.966988][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.970582][ T5950] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 242.977249][ T982] usb 6-1: config 0 has no interface number 0 [ 242.992404][ T982] usb 6-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 242.995863][T10943] vxfs: WRONG superblock magic 00000000 at 1 [ 243.004235][ T982] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 243.004266][ T982] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 243.004288][ T982] usb 6-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 243.004306][ T982] usb 6-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 243.004341][ T982] usb 6-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 243.004361][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.012603][ T982] usb 6-1: config 0 descriptor?? [ 243.023822][T10943] vxfs: WRONG superblock magic 00000000 at 8 [ 243.039796][T10890] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 243.043551][T10943] vxfs: can't find superblock. [ 243.061814][ T982] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.100061][T10944] CUSE: info not properly terminated [ 243.182574][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.197922][ T5950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 243.214299][ T5950] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 243.223751][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.241189][ T5950] usb 2-1: config 0 descriptor?? [ 243.278079][ T982] usb 6-1: USB disconnect, device number 28 [ 243.362469][T10949] netlink: 'syz.2.1437': attribute type 11 has an invalid length. [ 243.519449][T10949] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 243.525708][T10949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.536990][T10949] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 243.598494][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.610045][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.626115][T10953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.640782][T10953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.654526][ T5950] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x4 [ 243.683495][ T5950] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 243.707787][ T5950] cp2112 0003:10C4:EA90.0011: unknown main item tag 0x0 [ 243.717453][ T5950] cp2112 0003:10C4:EA90.0011: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 243.812242][T10963] netlink: 'syz.2.1440': attribute type 10 has an invalid length. [ 243.820288][T10963] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.827886][T10963] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.843383][T10963] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.850590][T10963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.858064][T10963] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.865239][T10963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.874660][ T5950] cp2112 0003:10C4:EA90.0011: error requesting version [ 243.897443][ T5950] cp2112 0003:10C4:EA90.0011: probe with driver cp2112 failed with error -32 [ 243.909714][T10963] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 244.227491][T10978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.236364][T10978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.360713][ T5950] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 244.522177][ T5950] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 244.530652][ T982] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 244.532462][ T5950] usb 4-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 244.548995][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.560425][ T5950] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 244.670687][ T982] usb 6-1: device descriptor read/64, error -71 [ 244.910631][ T982] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 245.040589][ T982] usb 6-1: device descriptor read/64, error -71 [ 245.151694][ T982] usb usb6-port1: attempt power cycle [ 245.501588][ T982] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 245.510839][ T5859] Bluetooth: hci2: command 0x0405 tx timeout [ 245.531319][ T982] usb 6-1: device descriptor read/8, error -71 [ 245.591535][ T5950] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 245.608052][ T5950] stv0680 4-1:4.0: STV(e): camera ping failed!! [ 245.620592][ T5950] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 245.628825][ T5950] stv0680 4-1:4.0: last error: 0, command = 0x0 [ 245.637514][ T5950] usb 4-1: USB disconnect, device number 60 [ 245.739033][ T1212] usb 2-1: USB disconnect, device number 56 [ 245.780768][ T982] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 245.812669][ T982] usb 6-1: device descriptor read/8, error -71 [ 245.920857][ T982] usb usb6-port1: unable to enumerate USB device [ 246.072898][T11000] mkiss: ax0: crc mode is auto. [ 246.079672][T11000] /dev/rnullb0: Can't open blockdev [ 246.086582][T11001] /dev/rnullb0: Can't open blockdev [ 246.110606][ T1212] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 246.176862][T11006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.188657][T11006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.230039][T11012] tmpfs: Bad value for 'mpol' [ 246.271077][T11016] /dev/rnullb0: Can't open blockdev [ 246.271083][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 246.274029][ T1212] usb 2-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 246.301069][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.313481][ T1212] usb 2-1: Product: syz [ 246.319027][ T1212] usb 2-1: Manufacturer: syz [ 246.324945][ T1212] usb 2-1: SerialNumber: syz [ 246.399695][T11022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1458'. [ 246.402784][T11023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.418909][T11023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.740586][ T24] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 246.757002][T10998] /dev/rnullb0: Can't open blockdev [ 246.806087][ T1212] mxuport 2-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 246.816282][ T1212] mxuport 2-1:254.0: probe with driver mxuport failed with error -5 [ 246.838690][ T1212] usb 2-1: USB disconnect, device number 57 [ 246.912320][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 246.923516][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.950659][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 246.970125][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.989922][ T24] usb 4-1: config 0 descriptor?? [ 247.002079][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 247.590814][ T5859] Bluetooth: hci2: command 0x0405 tx timeout [ 247.730709][ T43] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 247.892302][ T43] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 247.902811][ T24] gspca_vc032x: reg_r err -110 [ 247.907656][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 247.916184][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.937863][ T43] usb 6-1: config 0 descriptor?? [ 248.341797][ T24] usb 4-1: USB disconnect, device number 61 [ 248.758207][ T43] usb 6-1: Cannot set autoneg [ 248.767759][ T43] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 248.924166][T11048] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 248.941686][T11048] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 249.058310][T11050] /dev/rnullb0: Can't open blockdev [ 249.093458][T11052] netlink: 'syz.3.1469': attribute type 8 has an invalid length. [ 249.101798][T11052] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1469'. [ 249.683149][ T24] usb 6-1: USB disconnect, device number 33 [ 249.760706][ T5859] Bluetooth: hci2: command 0x0405 tx timeout [ 250.923092][ T43] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 250.931868][T11092] erofs (device rnullb0): cannot find valid erofs superblock [ 251.038662][T11094] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 251.082293][ T43] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 251.110679][ T43] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 251.124667][ T5901] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 251.130564][ T43] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 251.159556][ T43] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 251.169172][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.184688][T11084] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 251.281097][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 251.294293][ T5901] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 251.311712][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.328750][ T5901] usb 2-1: Product: syz [ 251.348565][ T5901] usb 2-1: Manufacturer: syz [ 251.370354][ T5901] usb 2-1: SerialNumber: syz [ 251.382639][ T5901] usb 2-1: config 0 descriptor?? [ 251.399968][ T5901] gspca_main: 174f:6a31 too many config [ 251.417425][T11084] hfs: can't find a HFS filesystem on dev rnullb0 [ 251.431202][ T43] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 251.439550][ T43] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input30 [ 251.469647][T11103] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 251.473193][ T43] usb 4-1: USB disconnect, device number 62 [ 251.476377][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 251.691857][ T5950] usb 2-1: USB disconnect, device number 58 [ 252.570612][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 252.745077][ T24] usb 2-1: config 0 has an invalid interface number: 11 but max is 0 [ 252.756429][ T24] usb 2-1: config 0 has no interface number 0 [ 252.766443][ T24] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 252.780885][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.799124][ T24] usb 2-1: Product: syz [ 252.804183][ T24] usb 2-1: Manufacturer: syz [ 252.811388][ T24] usb 2-1: SerialNumber: syz [ 252.818362][ T24] usb 2-1: config 0 descriptor?? [ 252.825354][ T24] usb 2-1: Expected 3 endpoints, found: 0 [ 252.937817][T11158] /dev/rnullb0: Can't open blockdev [ 253.040898][T11159] mmap: syz.2.1506 (11159): VmData 37728256 exceed data ulimit 2. Update limits or use boot option ignore_rlimit_data. [ 253.170130][T11176] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 253.177313][T11175] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 253.290616][ T24] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 253.440968][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 253.452960][ T24] usb 6-1: config 15 has an invalid interface number: 107 but max is 0 [ 253.469608][ T24] usb 6-1: config 15 has no interface number 0 [ 253.485026][ T24] usb 6-1: config 15 interface 107 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 253.513081][ T24] usb 6-1: config 15 interface 107 has no altsetting 0 [ 253.530741][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3 [ 253.540882][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.549016][ T24] usb 6-1: Product: syz [ 253.553574][ T24] usb 6-1: Manufacturer: syz [ 253.558299][ T24] usb 6-1: SerialNumber: syz [ 253.667508][ T43] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 253.772805][T11163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.786899][T11163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.812970][ T24] usb 6-1: USB disconnect, device number 34 [ 253.821278][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 253.837636][ T43] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 253.853588][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.861936][ T43] usb 4-1: Product: syz [ 253.866109][ T43] usb 4-1: Manufacturer: syz [ 253.871100][ T43] usb 4-1: SerialNumber: syz [ 253.881710][ T43] usb 4-1: config 0 descriptor?? [ 253.889872][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 254.398398][T11198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.407388][T11198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.504155][ T43] gspca_stk1135: reg_w 0x3 err -71 [ 254.510577][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 254.517420][ T43] gspca_stk1135: Sensor write failed [ 254.523114][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 254.529475][ T43] gspca_stk1135: Sensor write failed [ 254.534907][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 254.541540][ T43] gspca_stk1135: Sensor read failed [ 254.546980][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 254.553837][ T43] gspca_stk1135: Sensor read failed [ 254.559066][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 254.565902][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 254.572383][ T43] gspca_stk1135: Sensor read failed [ 254.577695][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 254.584620][ T43] gspca_stk1135: Sensor read failed [ 254.589836][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 254.596282][ T43] gspca_stk1135: Sensor write failed [ 254.601618][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 254.607936][ T43] gspca_stk1135: Sensor write failed [ 254.610668][ T5901] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 254.613511][ T43] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 254.632482][ T43] usb 4-1: USB disconnect, device number 63 [ 254.772448][ T5901] usb 6-1: unable to get BOS descriptor or descriptor too short [ 254.782380][ T5901] usb 6-1: not running at top speed; connect to a high speed hub [ 254.791277][ T5901] usb 6-1: config 8 has an invalid interface number: 199 but max is 0 [ 254.799489][ T5901] usb 6-1: config 8 has no interface number 0 [ 254.805658][ T5901] usb 6-1: config 8 interface 199 has no altsetting 0 [ 254.813999][ T5901] usb 6-1: New USB device found, idVendor=2ef5, idProduct=000a, bcdDevice=37.35 [ 254.823107][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.831166][ T5901] usb 6-1: Product: syz [ 254.835416][ T5901] usb 6-1: Manufacturer: syz [ 254.839995][ T5901] usb 6-1: SerialNumber: syz [ 255.047990][T11203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.058244][T11203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.068299][ T5901] plfxlc 6-1:8.199: Firmware Version: 0 [ 255.078285][ T5901] plfxlc 6-1:8.199: Unit type is station [ 255.268425][ T43] usb 2-1: USB disconnect, device number 59 [ 255.753616][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.763267][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.797860][T11223] sctp: [Deprecated]: syz.5.1527 (pid 11223) Use of int in maxseg socket option. [ 255.797860][T11223] Use struct sctp_assoc_value instead [ 255.876617][T11224] binder: BINDER_SET_CONTEXT_MGR already set [ 255.882935][T11224] binder: 11222:11224 ioctl 4018620d 2000000002c0 returned -16 [ 255.894076][T11224] binder: 11222:11224 ioctl c00c620f 2000000004c0 returned -22 [ 255.909883][T11224] binder: 11222:11224 ioctl c0306201 200000000240 returned -11 [ 255.997471][ T5901] plfxlc 6-1:8.199: vendor command failed (-71) [ 256.003908][ T5901] plfxlc 6-1:8.199: FPGA download failed (-22) [ 256.056917][ T1048] Bluetooth: hci4: Frame reassembly failed (-84) [ 256.065809][ T5901] plfxlc 6-1:8.199: pureLifi:Device error [ 256.073616][ T5901] plfxlc 6-1:8.199: probe with driver plfxlc failed with error -22 [ 256.088990][ T5901] usb 6-1: USB disconnect, device number 35 [ 256.171819][T11228] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 256.709381][T11258] /dev/rnullb0: Can't open blockdev [ 257.052802][T11274] /dev/rnullb0: Can't open blockdev [ 257.064859][T11274] /dev/rnullb0: Can't open blockdev [ 257.072185][T11274] /dev/rnullb0: Can't open blockdev [ 257.088786][T11274] /dev/rnullb0: Can't open blockdev [ 257.107572][T11274] /dev/rnullb0: Can't open blockdev [ 257.122961][T11274] /dev/rnullb0: Can't open blockdev [ 257.135273][T11274] /dev/rnullb0: Can't open blockdev [ 257.151206][T11274] /dev/rnullb0: Can't open blockdev [ 257.157106][T11274] /dev/rnullb0: Can't open blockdev [ 257.163053][T11274] /dev/rnullb0: Can't open blockdev [ 257.169299][T11274] /dev/rnullb0: Can't open blockdev [ 257.177358][T11274] /dev/rnullb0: Can't open blockdev [ 257.183539][T11274] /dev/rnullb0: Can't open blockdev [ 257.189397][T11274] /dev/rnullb0: Can't open blockdev [ 257.197430][T11274] /dev/rnullb0: Can't open blockdev [ 257.203606][T11274] /dev/rnullb0: Can't open blockdev [ 257.209640][T11274] /dev/rnullb0: Can't open blockdev [ 257.216117][T11274] /dev/rnullb0: Can't open blockdev [ 257.224401][T11274] /dev/rnullb0: Can't open blockdev [ 257.230376][T11274] /dev/rnullb0: Can't open blockdev [ 257.236781][T11274] /dev/rnullb0: Can't open blockdev [ 257.247024][T11274] /dev/rnullb0: Can't open blockdev [ 257.262426][T11274] /dev/rnullb0: Can't open blockdev [ 257.273254][T11274] /dev/rnullb0: Can't open blockdev [ 257.279192][T11274] /dev/rnullb0: Can't open blockdev [ 257.286430][T11274] /dev/rnullb0: Can't open blockdev [ 257.292873][T11274] /dev/rnullb0: Can't open blockdev [ 257.298933][T11274] /dev/rnullb0: Can't open blockdev [ 257.306828][T11274] /dev/rnullb0: Can't open blockdev [ 257.313345][T11274] /dev/rnullb0: Can't open blockdev [ 257.319881][T11274] /dev/rnullb0: Can't open blockdev [ 257.327468][T11274] /dev/rnullb0: Can't open blockdev [ 257.333888][T11274] /dev/rnullb0: Can't open blockdev [ 257.339883][T11274] /dev/rnullb0: Can't open blockdev [ 257.352902][T11274] /dev/rnullb0: Can't open blockdev [ 257.361444][T11286] block nbd1: Attempted send on invalid socket [ 257.362753][T11274] /dev/rnullb0: Can't open blockdev [ 257.369888][T11286] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 257.386283][T11274] /dev/rnullb0: Can't open blockdev [ 257.392610][T11274] /dev/rnullb0: Can't open blockdev [ 257.398606][T11274] /dev/rnullb0: Can't open blockdev [ 257.404871][T11274] /dev/rnullb0: Can't open blockdev [ 257.411970][T11286] EXT4-fs (nbd1): unable to read superblock [ 257.412373][T11274] /dev/rnullb0: Can't open blockdev [ 257.424152][T11274] /dev/rnullb0: Can't open blockdev [ 257.430168][T11274] /dev/rnullb0: Can't open blockdev [ 257.436618][T11274] /dev/rnullb0: Can't open blockdev [ 257.442829][T11274] /dev/rnullb0: Can't open blockdev [ 257.453746][T11274] /dev/rnullb0: Can't open blockdev [ 257.459661][T11274] /dev/rnullb0: Can't open blockdev [ 257.468269][T11274] /dev/rnullb0: Can't open blockdev [ 257.475316][T11274] /dev/rnullb0: Can't open blockdev [ 257.482638][T11274] /dev/rnullb0: Can't open blockdev [ 257.489363][T11274] /dev/rnullb0: Can't open blockdev [ 257.498431][T11274] /dev/rnullb0: Can't open blockdev [ 257.505059][T11274] /dev/rnullb0: Can't open blockdev [ 257.516172][T11274] /dev/rnullb0: Can't open blockdev [ 257.524576][T11274] /dev/rnullb0: Can't open blockdev [ 257.532432][T11274] /dev/rnullb0: Can't open blockdev [ 257.545090][T11274] /dev/rnullb0: Can't open blockdev [ 257.557829][T11274] /dev/rnullb0: Can't open blockdev [ 257.577906][T11274] /dev/rnullb0: Can't open blockdev [ 257.586239][T11274] /dev/rnullb0: Can't open blockdev [ 257.595077][T11274] /dev/rnullb0: Can't open blockdev [ 257.606081][T11274] /dev/rnullb0: Can't open blockdev [ 257.613365][T11274] /dev/rnullb0: Can't open blockdev [ 257.619330][T11274] /dev/rnullb0: Can't open blockdev [ 257.626423][T11274] /dev/rnullb0: Can't open blockdev [ 257.935583][T11308] /dev/rnullb0: Can't open blockdev [ 258.100620][ T5859] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 258.106917][ T5186] Bluetooth: hci4: command 0x1003 tx timeout [ 258.685079][T11329] /dev/rnullb0: Can't open blockdev [ 258.802554][T11331] Invalid source name [ 258.820120][T11331] UBIFS error (pid: 11331): cannot open "/dev/rnullb0", error -22 [ 258.855625][T11333] /dev/rnullb0: Can't open blockdev [ 258.869582][T11333] /dev/rnullb0: Can't open blockdev [ 258.896842][T11335] /dev/rnullb0: Can't open blockdev [ 259.038945][T11323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.061890][ T1212] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 259.069380][T11323] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 259.098300][T11346] netlink: 592 bytes leftover after parsing attributes in process `syz.5.1555'. [ 259.130133][ T3836] Bluetooth: hci4: Frame reassembly failed (-84) [ 259.225764][T11351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.233447][ T1212] usb 2-1: Using ep0 maxpacket: 8 [ 259.235186][T11351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.244150][ T1212] usb 2-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 259.257513][ T1212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.266582][ T1212] usb 2-1: Product: syz [ 259.271233][ T1212] usb 2-1: Manufacturer: syz [ 259.275967][ T1212] usb 2-1: SerialNumber: syz [ 259.282573][ T1212] usb 2-1: config 0 descriptor?? [ 259.293741][ T1212] gspca_main: sq905-2.14.0 probing 2770:9120 [ 259.450634][ T982] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 259.602260][ T982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 259.610981][ T982] usb 6-1: config 251 has an invalid descriptor of length 0, skipping remainder of the config [ 259.621670][ T982] usb 6-1: config 251 has 1 interface, different from the descriptor's value: 2 [ 259.633140][ T982] usb 6-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=6d.47 [ 259.642409][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.650428][ T982] usb 6-1: Product: syz [ 259.654664][ T982] usb 6-1: Manufacturer: syz [ 259.659266][ T982] usb 6-1: SerialNumber: syz [ 259.692549][T11331] Invalid source name [ 259.696685][T11331] UBIFS error (pid: 11331): cannot open "/dev/rnullb0", error -22 [ 259.696858][T11352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.697725][ T1212] gspca_sq905: sq905_command: usb_control_msg failed 2 (-32) [ 259.705079][T11352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.716877][ T1212] sq905 2-1:0.0: probe with driver sq905 failed with error -32 [ 259.744370][ T43] usb 2-1: USB disconnect, device number 60 [ 259.871633][T11349] netlink: 'syz.5.1556': attribute type 10 has an invalid length. [ 259.893470][T11349] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.904991][T11349] bond0: (slave team0): Enslaving as an active interface with an up link [ 259.918478][T11349] netlink: 'syz.5.1556': attribute type 10 has an invalid length. [ 259.943790][T11349] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 259.966353][ T982] usb 6-1: interface 1 not found [ 259.985493][ T982] usb 6-1: USB disconnect, device number 36 [ 260.125538][T11374] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 260.125765][T11377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.142177][T11377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.157783][T11376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.169864][T11376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.176046][T11381] vivid-002: ================= START STATUS ================= [ 260.186537][T11381] vivid-002: ================== END STATUS ================== [ 260.645148][T11397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.655513][T11397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.679729][T11399] 9pnet: p9_errstr2errno: server reported unknown error ile0 [ 260.880716][ T982] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 261.035201][ T982] usb 6-1: device descriptor read/64, error -71 [ 261.199427][ T5859] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 261.205991][ T5186] Bluetooth: hci4: command 0x1003 tx timeout [ 261.292024][ T982] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 261.454688][T11422] erofs (device nullb0): cannot find valid erofs superblock [ 261.571238][T11427] sp0: Synchronizing with TNC [ 262.370867][ T5862] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 262.400100][T11426] [U] [ 262.541288][ T5862] usb 2-1: Using ep0 maxpacket: 16 [ 262.563663][ T5862] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 262.578468][ T5862] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 262.593917][ T5862] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 262.603876][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.621339][ T5862] usb 2-1: Product: syz [ 262.625542][ T5862] usb 2-1: Manufacturer: syz [ 262.630154][ T5862] usb 2-1: SerialNumber: syz [ 262.659533][ T5862] usb 2-1: config 0 descriptor?? [ 262.669662][ T5862] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 262.683884][ T5862] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 262.810935][ T982] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 262.913636][T11467] /dev/rnullb0: Can't open blockdev [ 262.970814][ T982] usb 6-1: Using ep0 maxpacket: 32 [ 262.984529][ T982] usb 6-1: unable to get BOS descriptor or descriptor too short [ 263.001195][ T982] usb 6-1: config 5 has an invalid interface number: 52 but max is 0 [ 263.009580][ T982] usb 6-1: config 5 has no interface number 0 [ 263.017424][ T982] usb 6-1: config 5 interface 52 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 263.029087][ T982] usb 6-1: language id specifier not provided by device, defaulting to English [ 263.044554][ T982] usb 6-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58 [ 263.055499][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.071197][ T982] usb 6-1: Product: с [ 263.075365][ T982] usb 6-1: SerialNumber: syz [ 263.086412][T11442] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 263.162213][T11480] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.172126][T11480] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.200744][ T5945] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 263.234134][T11481] /dev/rnullb0: Can't open blockdev [ 263.273134][ T5862] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 263.280028][ T5862] em28xx 2-1:0.0: Config register raw data: 0x54 [ 263.310858][ T982] aircable 6-1:5.52: aircable converter detected [ 263.319156][ T982] usb 6-1: aircable converter now attached to ttyUSB0 [ 263.329733][ T982] usb 6-1: USB disconnect, device number 39 [ 263.338476][ T982] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 263.347923][ T982] aircable 6-1:5.52: device disconnected [ 263.356043][ T5945] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.368455][ T5945] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.378396][ T5945] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 263.387887][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 263.396606][ T5945] usb 4-1: SerialNumber: syz [ 263.480668][T11431] /dev/rnullb0: Can't open blockdev [ 263.487559][ T5862] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 263.495435][ T5862] em28xx 2-1:0.0: No AC97 audio processor [ 263.506359][ T5862] usb 2-1: USB disconnect, device number 61 [ 263.513607][ T5862] em28xx 2-1:0.0: Disconnecting em28xx [ 263.519967][ T5862] em28xx 2-1:0.0: Freeing device [ 263.609141][ T5945] usb 4-1: 0:2 : does not exist [ 263.619106][ T5945] usb 4-1: USB disconnect, device number 64 [ 263.636832][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 265.142140][ T5862] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 265.290928][ T5862] usb 6-1: Invalid ep0 maxpacket: 16 [ 265.420627][ T982] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 265.431606][ T5862] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 265.452963][T11522] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1612'. [ 265.581303][ T982] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.594682][ T982] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.598723][T11527] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 265.605347][ T982] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.619735][ T5862] usb 6-1: Invalid ep0 maxpacket: 16 [ 265.620367][ T982] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.627644][ T5862] usb usb6-port1: attempt power cycle [ 265.633335][ T982] usb 2-1: Product: syz [ 265.639739][T11527] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 265.643151][ T982] usb 2-1: Manufacturer: syz [ 265.654266][ T982] usb 2-1: SerialNumber: syz [ 265.654295][T11527] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 265.668020][T11527] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 265.675258][T11527] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 265.682531][T11527] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 265.689194][T11527] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 265.695875][T11527] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 265.702917][T11527] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 265.709469][T11527] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 265.715984][T11527] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 265.722590][T11527] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 265.868965][ T982] usb 2-1: 0:2 : does not exist [ 265.884131][ T982] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 265.908478][ T982] usb 2-1: USB disconnect, device number 62 [ 265.942557][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.000700][ T5862] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 266.021806][T11538] netlink: 'syz.3.1618': attribute type 29 has an invalid length. [ 266.032421][ T5862] usb 6-1: Invalid ep0 maxpacket: 16 [ 266.160702][ T5862] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 266.196969][T11540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.201351][ T5862] usb 6-1: Invalid ep0 maxpacket: 16 [ 266.207087][T11540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.231449][ T5862] usb usb6-port1: unable to enumerate USB device [ 266.426044][T11544] rdma_rxe: rxe_newlink: failed to add wlan1 [ 266.619646][T11551] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1623'. [ 266.633506][T11551] hpfs: Bad magic ... probably not HPFS [ 266.910579][ T5862] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 267.060577][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 267.068480][ T5862] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.080916][ T5862] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.089996][ T5862] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 267.107066][ T5862] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.117671][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.128089][ T5862] usb 2-1: Product: syz [ 267.132542][ T5862] usb 2-1: Manufacturer: 䝘틙ᩐ뒔୾韋肒ට䈓鹔ప闱寭ᏻ췭鰟㟨Ṫ촛⢖죻濌⣙젷ꡐ뎊卆ꉤ̃欑蕨裓쬐낕᫆跿ᛁ꺐š놉늼竻뾅灦砡芹鏨ṃⵓ聝謶ɓㆠṕ쾆킰㽴ꃣ␅Ꝧ䘝ﶍ稦揌멱家桗뢛疋駊㝧ሶ꫿⬔ɻ䠩Ě樖뵆 [ 267.161784][ T5862] usb 2-1: SerialNumber: syz [ 267.168662][T11553] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 267.559857][ T5861] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 267.575609][ T5861] CPU: 0 UID: 0 PID: 5861 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 267.575634][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 267.575651][ T5861] Call Trace: [ 267.575659][ T5861] [ 267.575666][ T5861] dump_stack_lvl+0x189/0x250 [ 267.575706][ T5861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.575729][ T5861] ? __pfx__printk+0x10/0x10 [ 267.575751][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.575771][ T5861] dump_header+0xd3/0x480 [ 267.575788][ T5861] oom_kill_process+0x387/0x920 [ 267.575808][ T5861] out_of_memory+0xf09/0x12a0 [ 267.575828][ T5861] ? mem_cgroup_iter+0x3b/0x460 [ 267.575847][ T5861] ? __pfx_out_of_memory+0x10/0x10 [ 267.575868][ T5861] mem_cgroup_out_of_memory+0x145/0x240 [ 267.575886][ T5861] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 267.575908][ T5861] ? _raw_spin_unlock+0x28/0x50 [ 267.575926][ T5861] ? memcg1_oom_prepare+0x37f/0x450 [ 267.575948][ T5861] try_charge_memcg+0xdff/0x1290 [ 267.575969][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.575989][ T5861] ? perf_trace_rdev_dump_mpp+0xd0/0x560 [ 267.576011][ T5861] ? __pfx_try_charge_memcg+0x10/0x10 [ 267.576031][ T5861] ? rcu_irq_exit_check_preempt+0x201/0x210 [ 267.576049][ T5861] ? xa_load+0x60/0x210 [ 267.576069][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.576087][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.576103][ T5861] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 267.576134][ T5861] charge_memcg+0x9f/0x180 [ 267.576155][ T5861] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 267.576175][ T5861] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 267.576199][ T5861] __read_swap_cache_async+0x28c/0x510 [ 267.576223][ T5861] swap_cluster_readahead+0x305/0x5f0 [ 267.576244][ T5861] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 267.576283][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.576299][ T5861] ? filemap_get_entry+0xad/0x2f0 [ 267.576317][ T5861] ? get_vma_policy+0x27c/0x3c0 [ 267.576341][ T5861] swapin_readahead+0x17d/0xb50 [ 267.576359][ T5861] ? __pfx_filemap_get_entry+0x10/0x10 [ 267.576378][ T5861] ? get_swap_device_info+0x1c/0x2b0 [ 267.576396][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.576413][ T5861] ? __pfx_swapin_readahead+0x10/0x10 [ 267.576433][ T5861] ? __filemap_get_folio+0x9a6/0xaf0 [ 267.576457][ T5861] ? swap_cache_get_folio+0xae/0x3b0 [ 267.576474][ T5861] do_swap_page+0x525/0x5ac0 [ 267.576500][ T5861] ? ___pte_offset_map+0x29/0x250 [ 267.576521][ T5861] ? lock_acquire+0x5f/0x360 [ 267.576536][ T5861] ? do_swap_page+0x184/0x5ac0 [ 267.576554][ T5861] ? __pfx_do_swap_page+0x10/0x10 [ 267.576574][ T5861] ? __up_read+0x280/0x680 [ 267.576592][ T5861] ? __pfx_default_wake_function+0x10/0x10 [ 267.576609][ T5861] ? ___pte_offset_map+0x45/0x250 [ 267.576627][ T5861] ? ___pte_offset_map+0x1cf/0x250 [ 267.576649][ T5861] ? pte_offset_map_rw_nolock+0xea/0x160 [ 267.576671][ T5861] __handle_mm_fault+0xe55/0x5400 [ 267.576710][ T5861] ? __pfx___handle_mm_fault+0x10/0x10 [ 267.576731][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.576752][ T5861] ? lock_vma_under_rcu+0x3cb/0x450 [ 267.576767][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.576784][ T5861] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 267.576802][ T5861] handle_mm_fault+0x40a/0x8e0 [ 267.576827][ T5861] do_user_addr_fault+0xa81/0x1390 [ 267.576846][ T5861] ? rcu_is_watching+0x15/0xb0 [ 267.576863][ T5861] ? trace_page_fault_user+0x84/0x1e0 [ 267.576880][ T5861] exc_page_fault+0x82/0x100 [ 267.576901][ T5861] asm_exc_page_fault+0x26/0x30 [ 267.576916][ T5861] RIP: 0033:0x7f838af8eb8a [ 267.576937][ T5861] Code: c1 e8 32 89 c1 69 c0 40 42 0f 00 48 89 0c 24 29 c7 48 69 ff e8 03 00 00 48 89 7c 24 08 48 89 e7 e8 9b 63 ff ff 48 8b 54 24 18 <64> 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 32 00 00 90 [ 267.576952][ T5861] RSP: 002b:00007ffcee23f460 EFLAGS: 00010202 [ 267.576969][ T5861] RAX: 0000000000000000 RBX: 0000000000000489 RCX: 0000000000000000 [ 267.576979][ T5861] RDX: a5b38c52dca13a00 RSI: 0000000000000000 RDI: 000055556fc7e808 [ 267.576991][ T5861] RBP: 00007ffcee23f4cc R08: 0000000000000000 R09: 0000000000000000 [ 267.577002][ T5861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 267.577019][ T5861] R13: 00000000000927c0 R14: 0000000000040f2b R15: 00007ffcee23f520 [ 267.577038][ T5861] [ 267.577108][ T5861] memory: usage 307200kB, limit 307200kB, failcnt 18150 [ 267.983675][T11553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.987042][ T5861] memory+swap: usage 308120kB, limit 9007199254740988kB, failcnt 0 [ 268.008729][T11553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.009087][ T5861] kmem: usage 3640kB, limit 9007199254740988kB, failcnt 0 [ 268.029987][ T5861] Memory cgroup stats for /syz3: [ 268.030162][ T5861] cache 304513024 [ 268.038802][ T5861] rss 6283264 [ 268.045488][ T5861] rss_huge 0 [ 268.048723][ T5861] shmem 302809088 [ 268.052421][ T5861] mapped_file 4096 [ 268.056164][ T5861] dirty 4096 [ 268.059375][ T5861] writeback 0 [ 268.060276][T11553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.063190][ T5861] workingset_refault_anon 1363 [ 268.076002][ T5861] workingset_refault_file 545 [ 268.080815][ T5861] swap 974848 [ 268.084117][ T5861] swapcached 126976 [ 268.087933][ T5861] pgpgin 420121 [ 268.091586][ T5861] pgpgout 345515 [ 268.095150][ T5861] pgfault 202018 [ 268.098711][ T5861] pgmajfault 2255 [ 268.102395][ T5861] inactive_anon 302809088 [ 268.103271][T11553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.106770][ T5861] active_anon 159744 [ 268.118426][ T5861] inactive_file 0 [ 268.122225][ T5861] active_file 1703936 [ 268.126215][ T5861] unevictable 6103040 [ 268.130207][ T5861] hierarchical_memory_limit 314572800 [ 268.135642][ T5861] hierarchical_memsw_limit 9223372036854771712 [ 268.142077][ T5861] total_cache 304513024 [ 268.146260][ T5861] total_rss 6283264 [ 268.150076][ T5861] total_rss_huge 0 [ 268.154383][ T5861] total_shmem 302809088 [ 268.158586][ T5861] total_mapped_file 4096 [ 268.163056][ T5861] total_dirty 4096 [ 268.166850][ T5861] total_writeback 0 [ 268.175509][ T5862] usb 2-1: 0:2 : does not exist [ 268.185042][ T5861] total_workingset_refault_anon 1363 [ 268.194029][ T5862] usb 2-1: USB disconnect, device number 63 [ 268.200853][ T5861] total_workingset_refault_file 545 [ 268.207467][ T5861] total_swap 974848 [ 268.225200][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.242450][ T5861] total_swapcached 126976 [ 268.246793][ T5861] total_pgpgin 420121 [ 268.268682][ T5861] total_pgpgout 345515 [ 268.275878][ T5861] total_pgfault 202018 [ 268.279964][ T5861] total_pgmajfault 2255 [ 268.285171][ T5861] total_inactive_anon 302809088 [ 268.290080][ T5861] total_active_anon 159744 [ 268.296324][ T5861] total_inactive_file 0 [ 268.301808][ T5861] total_active_file 1703936 [ 268.306646][ T5861] total_unevictable 6103040 [ 268.311845][ T5861] anon_cost 0 [ 268.315136][ T5861] file_cost 0 [ 268.318483][ T5861] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.1618,pid=11537,uid=0 [ 268.334677][ T5861] Memory cgroup out of memory: Killed process 11537 (syz.3.1618) total-vm:102024kB, anon-rss:10620kB, file-rss:23592kB, shmem-rss:0kB, UID:0 pgtables:148kB oom_score_adj:1000 [ 269.210837][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 269.378571][T11557] Set syz1 is full, maxelem 65536 reached [ 269.508797][T11560] rdma_rxe: rxe_newlink: failed to add wlan1 [ 269.565635][T11563] netlink: 'syz.5.1627': attribute type 1 has an invalid length. [ 269.572388][T11561] rdma_rxe: rxe_newlink: failed to add wlan1 [ 269.573641][T11563] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1627'. [ 269.723374][T11570] /dev/nbd2: Can't open blockdev [ 269.811968][T11578] /dev/rnullb0: Can't open blockdev [ 269.874157][T11580] /dev/rnullb0: Can't open blockdev [ 269.913390][T11582] /dev/nbd2: Can't open blockdev [ 269.919103][T11582] /dev/nbd2: Can't open blockdev [ 269.940958][ T5862] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 269.958374][T11584] /dev/sg0: Can't lookup blockdev [ 270.010995][T11587] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 270.019351][T11587] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 270.130636][ T5862] usb 2-1: Using ep0 maxpacket: 8 [ 270.139160][ T5862] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 270.148623][ T5862] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.165765][ T5862] usb 2-1: Product: syz [ 270.174536][ T5862] usb 2-1: Manufacturer: syz [ 270.183927][ T5862] usb 2-1: SerialNumber: syz [ 270.202681][ T5862] usb 2-1: config 0 descriptor?? [ 270.314152][T11597] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 270.323781][T11597] /dev/rnullb0: Can't open blockdev [ 270.410856][ T5862] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 270.472352][ T32] oom_reaper: reaped process 11537 (syz.3.1618), now anon-rss:0kB, file-rss:22472kB, shmem-rss:0kB [ 270.728573][T11605] /dev/rnullb0: Can't open blockdev [ 270.817264][T11607] /dev/rnullb0: Can't open blockdev [ 271.202368][ T5945] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 271.280838][ T982] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 271.360604][ T5945] usb 6-1: Using ep0 maxpacket: 16 [ 271.372605][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.384166][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.394653][ T5945] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.407569][ T5945] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.416784][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.436757][ T5945] usb 6-1: config 0 descriptor?? [ 271.443494][ T982] usb 4-1: Using ep0 maxpacket: 16 [ 271.459011][ T982] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 271.470418][ T982] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.480975][ T982] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.492937][ T982] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 271.502498][ T982] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.510888][ T982] usb 4-1: Product: syz [ 271.515361][ T982] usb 4-1: Manufacturer: syz [ 271.520047][ T982] usb 4-1: SerialNumber: syz [ 271.748302][T11572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.764079][T11572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.855406][ T5862] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 271.860813][ T5945] microsoft 0003:045E:07DA.0012: report_id 4230573140 is invalid [ 271.873748][ T5862] usb 2-1: USB disconnect, device number 64 [ 271.894562][ T5945] microsoft 0003:045E:07DA.0012: item 0 4 1 8 parsing failed [ 271.902633][ T5945] microsoft 0003:045E:07DA.0012: parse failed [ 271.908884][ T5945] microsoft 0003:045E:07DA.0012: probe with driver microsoft failed with error -22 [ 271.950703][ T982] usb 4-1: 0:2 : does not exist [ 272.310083][T11645] syzkaller1: entered promiscuous mode [ 272.318743][T11645] syzkaller1: entered allmulticast mode [ 272.528954][T11656] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 272.535938][T11656] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 272.556585][T11616] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1644'. [ 272.741854][ T982] usb 4-1: USB disconnect, device number 65 [ 272.905265][T11665] can: request_module (can-proto-0) failed. [ 272.910867][T11667] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1656'. [ 273.329664][T11687] block nbd5: NBD_DISCONNECT [ 273.375560][T11685] /dev/rnullb0: Can't open blockdev [ 274.006898][T11700] bridge0: port 3(batadv0) entered blocking state [ 274.036509][T11700] bridge0: port 3(batadv0) entered disabled state [ 274.086662][T11700] batadv0: entered allmulticast mode [ 274.124868][T11700] batadv0: entered promiscuous mode [ 274.152205][T11700] bridge0: port 3(batadv0) entered blocking state [ 274.158735][T11700] bridge0: port 3(batadv0) entered forwarding state [ 274.196455][ T5950] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 274.218209][T11701] batadv0: left allmulticast mode [ 274.267195][T11701] batadv0: left promiscuous mode [ 274.280820][T11701] bridge0: port 3(batadv0) entered disabled state [ 274.362856][ T5950] usb 2-1: Using ep0 maxpacket: 32 [ 274.383171][ T5950] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 274.392289][ T5950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.405854][ T5950] usb 2-1: config 0 descriptor?? [ 274.415773][ T5950] gspca_main: sunplus-2.14.0 probing 041e:400b [ 274.625515][ T30] audit: type=1326 audit(1756804318.620:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11727 comm="syz.2.1677" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f484038ebe9 code=0x0 [ 275.528650][T11738] /dev/rnullb0: Can't open blockdev [ 275.819520][T11751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.842931][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.862863][T11751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.877430][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.898225][T11754] /dev/rnullb0: Can't open blockdev [ 275.917352][T11750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.933858][T11750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.960715][ T5950] gspca_sunplus: reg_w_riv err -110 [ 275.966004][ T5950] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 276.280909][ T43] usb 4-1: new full-speed USB device number 66 using dummy_hcd [ 276.443034][ T43] usb 4-1: config 4 has an invalid interface number: 88 but max is 1 [ 276.465897][ T43] usb 4-1: config 4 has an invalid interface number: 29 but max is 1 [ 276.482116][ T43] usb 4-1: config 4 has no interface number 0 [ 276.490640][ T43] usb 4-1: config 4 has no interface number 1 [ 276.496776][ T43] usb 4-1: config 4 interface 88 altsetting 119 has a duplicate endpoint with address 0xB, skipping [ 276.527517][ T43] usb 4-1: config 4 interface 88 altsetting 119 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 276.554782][ T43] usb 4-1: config 4 interface 88 altsetting 119 endpoint 0x85 has invalid maxpacket 11067, setting to 64 [ 276.566170][ T43] usb 4-1: config 4 interface 88 altsetting 119 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 276.579743][ T43] usb 4-1: config 4 interface 29 altsetting 9 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 276.591685][ T43] usb 4-1: config 4 interface 29 altsetting 9 endpoint 0x86 has invalid maxpacket 1023, setting to 64 [ 276.620578][ T43] usb 4-1: config 4 interface 88 has no altsetting 0 [ 276.630826][ T43] usb 4-1: config 4 interface 29 has no altsetting 0 [ 276.639542][ T43] usb 4-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7 [ 276.649292][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.680762][ T43] usb 4-1: Product: syz [ 276.685046][ T43] usb 4-1: Manufacturer: syz [ 276.706423][ T43] usb 4-1: SerialNumber: syz [ 276.723500][T11757] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 276.778391][ T5950] usb 2-1: USB disconnect, device number 65 [ 276.822598][T11763] /dev/rnullb0: Can't open blockdev [ 276.922075][T11771] /dev/rnullb0: Can't open blockdev [ 276.952237][T11771] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1692'. [ 276.958642][ T43] chaoskey 4-1:4.29: Unable to register with hwrng [ 276.982111][ T43] usb 4-1: USB disconnect, device number 66 [ 277.243072][T11780] erofs (device rnullb0): cannot find valid erofs superblock [ 277.356066][T11785] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1696'. [ 277.696600][T11796] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 277.720873][T11796] /dev/rnullb0: Can't open blockdev [ 278.066367][T11809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.077233][T11809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.207592][T11814] /dev/rnullb0: Can't open blockdev [ 278.442144][T11825] /dev/rnullb0: Can't open blockdev [ 278.576176][T11832] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1714'. [ 279.071801][T11837] /dev/rnullb0: Can't open blockdev [ 279.154493][T11840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.441480][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.468662][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.612219][T11856] binder: 11855:11856 ioctl 40046629 200000000140 returned -22 [ 279.637694][T11856] binder: 11855:11856 ioctl c0306201 200000000640 returned -22 [ 279.757298][T11860] netlink: 'syz.3.1722': attribute type 1 has an invalid length. [ 279.930685][T11865] netlink: 'syz.3.1725': attribute type 10 has an invalid length. [ 279.938683][T11865] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.946155][T11865] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.981443][T11865] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.988601][T11865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 279.996124][T11865] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.003290][T11865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 280.023106][T11865] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 280.049681][T11871] syzkaller1: entered promiscuous mode [ 280.055396][T11871] syzkaller1: entered allmulticast mode [ 280.242096][T11876] /dev/rnullb0: Can't open blockdev [ 280.591160][ T5950] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 280.772459][ T5950] usb 4-1: too many configurations: 32, using maximum allowed: 8 [ 280.801882][ T5950] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 280.812065][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.820165][ T5950] usb 4-1: Product: syz [ 280.830580][ T5950] usb 4-1: Manufacturer: syz [ 280.836405][ T5950] usb 4-1: SerialNumber: syz [ 280.850000][ T5950] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 280.868023][ T5862] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 281.208397][T11912] batadv_slave_1: entered promiscuous mode [ 281.227339][T11911] batadv_slave_1: left promiscuous mode [ 281.274291][T11917] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1741'. [ 281.299492][T11917] dlm: no local IP address has been set [ 281.310708][T11917] dlm: cannot start dlm midcomms -107 [ 281.317260][T11917] vxfs: WRONG superblock magic 00000000 at 1 [ 281.323754][T11917] vxfs: WRONG superblock magic 00000000 at 8 [ 281.329834][T11917] vxfs: can't find superblock. [ 281.351991][T11920] pimreg: tun_chr_ioctl cmd 1074025672 [ 281.357587][T11920] pimreg: ignored: set checksum enabled [ 281.390149][T11878] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.403406][T11878] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.431525][T11922] overlayfs: failed to resolve './file0': -2 [ 281.623877][T11878] /dev/rnullb0: Can't open blockdev [ 281.694361][ T5945] usb 4-1: USB disconnect, device number 67 [ 282.521358][ T5862] usb 4-1: Service connection timeout for: 256 [ 282.527561][ T5862] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 282.535876][ T5862] ath9k_htc: Failed to initialize the device [ 282.542409][ T5945] usb 4-1: ath9k_htc: USB layer deinitialized [ 283.462640][ C0] ------------[ cut here ]------------ [ 283.468289][ C0] WARNING: ./include/linux/skbuff.h:1165 at nf_reject_fill_skb_dst+0x2a4/0x330, CPU#0: syz.1.1751/11952 [ 283.479491][ C0] Modules linked in: [ 283.483453][ C0] CPU: 0 UID: 0 PID: 11952 Comm: syz.1.1751 Not tainted syzkaller #0 PREEMPT(full) [ 283.492873][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.502974][ C0] RIP: 0010:nf_reject_fill_skb_dst+0x2a4/0x330 [ 283.509177][ C0] Code: 8b 0d 90 6d c4 08 48 3b 8c 24 e0 00 00 00 75 5d 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 1d 7c 9f f7 90 <0f> 0b 90 e9 38 ff ff ff 44 89 f9 80 e1 07 fe c1 38 c1 0f 8c 2b fe [ 283.528863][ C0] RSP: 0018:ffffc90000007360 EFLAGS: 00010246 [ 283.535031][ C0] RAX: ffffffff8a2152b3 RBX: ffff88804317a5f0 RCX: ffff88802dbe5a00 [ 283.543050][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.551058][ C0] RBP: ffffc90000007490 R08: ffffffff8fe52d37 R09: 1ffffffff1fca5a6 [ 283.559131][ C0] R10: dffffc0000000000 R11: fffffbfff1fca5a7 R12: ffff8880770a0101 [ 283.567416][ C0] R13: dffffc0000000001 R14: 1ffff92000000e70 R15: 0000000000000000 [ 283.575429][ C0] FS: 00007f8eb99f66c0(0000) GS:ffff8881257c4000(0000) knlGS:0000000000000000 [ 283.584395][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.591106][ C0] CR2: 0000200000e68000 CR3: 0000000038cd2000 CR4: 00000000003526f0 [ 283.599090][ C0] DR0: 0000000000000006 DR1: 0000000000000001 DR2: 0000000000000098 [ 283.607101][ C0] DR3: 0000000000000003 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 283.615111][ C0] Call Trace: [ 283.618399][ C0] [ 283.621279][ C0] ? __pfx_nf_reject_fill_skb_dst+0x10/0x10 [ 283.627199][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 283.632619][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 283.637879][ C0] nf_send_unreach+0x17b/0x6e0 [ 283.642702][ C0] ? __pfx_nf_send_unreach+0x10/0x10 [ 283.648003][ C0] nft_reject_inet_eval+0x4bc/0x690 [ 283.653247][ C0] nft_do_chain+0x40c/0x1920 [ 283.657861][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 283.662934][ C0] nft_do_chain_inet+0x25d/0x340 [ 283.667882][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 283.673396][ C0] ? NF_HOOK+0x9a/0x3a0 [ 283.677572][ C0] ? rcu_is_watching+0x15/0xb0 [ 283.682379][ C0] ? lock_acquire+0x5f/0x360 [ 283.685786][ C1] ------------[ cut here ]------------ [ 283.687100][ C0] ? ip_sabotage_in+0x57/0x270 [ 283.692578][ C1] WARNING: ./include/linux/skbuff.h:1165 at nf_send_unreach6+0x828/0xa20, CPU#1: kworker/1:4/5945 [ 283.697330][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 283.707999][ C1] Modules linked in: [ 283.713457][ C0] nf_hook_slow+0xc5/0x220 [ 283.717326][ C1] CPU: 1 UID: 0 PID: 5945 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 283.721731][ C0] NF_HOOK+0x206/0x3a0 [ 283.731105][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 283.735160][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 283.745255][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 283.750359][ C0] ? NF_HOOK+0x9a/0x3a0 [ 283.756463][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 283.760717][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 283.766321][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 283.770904][ C0] ? ip_rcv_core+0x7f7/0xd00 [ 283.790775][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 283.795356][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 283.801419][ C1] RAX: ffffffff8a51b3b7 RBX: ffff8880359e7280 RCX: ffff88801eb89e00 [ 283.806505][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 283.814470][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 283.818951][ C0] __netif_receive_skb+0x143/0x380 [ 283.826911][ C1] RBP: ffffc90000a08568 R08: ffff8880315cc2c3 R09: 1ffff110062b9858 [ 283.832016][ C0] ? process_backlog+0x2d5/0x14f0 [ 283.840053][ C1] R10: dffffc0000000000 R11: ffffed10062b9859 R12: ffff8880770a0101 [ 283.845078][ C0] process_backlog+0x60e/0x14f0 [ 283.853041][ C1] R13: dffffc0000000001 R14: 1ffff11006b3ce5b R15: 0000000000000000 [ 283.857872][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 283.865915][ C1] FS: 0000000000000000(0000) GS:ffff8881258c4000(0000) knlGS:0000000000000000 [ 283.871115][ C0] ? __pfx_process_backlog+0x10/0x10 [ 283.880022][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 283.885313][ C0] ? do_raw_spin_lock+0x121/0x290 [ 283.892054][ C1] CR2: 000000110c247507 CR3: 000000007bd4e000 CR4: 00000000003526f0 [ 283.897143][ C0] __napi_poll+0xc4/0x360 [ 283.905111][ C1] Call Trace: [ 283.909427][ C0] ? rcu_is_watching+0x15/0xb0 [ 283.912701][ C1] [ 283.917435][ C0] net_rx_action+0x707/0xe30 [ 283.920263][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 283.924846][ C0] ? rcu_is_watching+0x15/0xb0 [ 283.930186][ C1] ? unwind_next_frame+0xa5/0x2390 [ 283.934951][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 283.940043][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 283.945186][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 283.950369][ C1] ? rcu_is_watching+0x15/0xb0 [ 283.956643][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 283.961396][ C1] ? rcu_is_watching+0x15/0xb0 [ 283.966746][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 283.971497][ C1] ? lock_release+0x4b/0x3e0 [ 283.976775][ C0] handle_softirqs+0x283/0x870 [ 283.981466][ C1] nft_reject_inet_eval+0x441/0x690 [ 283.986213][ C0] ? do_softirq+0xec/0x180 [ 283.991501][ C1] nft_do_chain+0x40c/0x1920 [ 283.995890][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 284.000451][ C1] ? kernel_text_address+0xa5/0xe0 [ 284.005737][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 284.010842][ C1] ? __kernel_text_address+0xd/0x40 [ 284.015932][ C0] do_softirq+0xec/0x180 [ 284.021201][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 284.025421][ C0] [ 284.031844][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 284.034863][ C0] [ 284.039870][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 284.042841][ C0] ? __pfx_do_softirq+0x10/0x10 [ 284.047679][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 284.052568][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.057931][ C1] ? kasan_save_stack+0x3e/0x60 [ 284.062702][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 284.067524][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 284.072817][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 284.078166][ C1] ? call_rcu+0x157/0x9c0 [ 284.083891][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 284.088204][ C1] ? kmem_cache_free+0x309/0x400 [ 284.093326][ C0] ? lock_release+0x4b/0x3e0 [ 284.098249][ C1] ? blk_flush_complete_seq+0x678/0xcc0 [ 284.102838][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 284.108363][ C1] ? flush_end_io+0xbaf/0xe60 [ 284.113570][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 284.118406][ C1] ? __blk_mq_end_request+0x426/0x600 [ 284.123511][ C0] __dev_queue_xmit+0x1d79/0x3b50 [ 284.128865][ C1] ? scsi_end_request+0x4b3/0x830 [ 284.134589][ C0] ? __dev_queue_xmit+0x27b/0x3b50 [ 284.139817][ C1] ? blk_done_softirq+0x107/0x160 [ 284.144948][ C0] ? unwind_next_frame+0xa5/0x2390 [ 284.149949][ C1] nft_do_chain_inet+0x25d/0x340 [ 284.155054][ C0] ? unwind_next_frame+0xa5/0x2390 [ 284.159969][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 284.165084][ C0] ? unwind_next_frame+0xa5/0x2390 [ 284.170630][ C1] ? NF_HOOK+0x9a/0x3a0 [ 284.175715][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.179929][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.184685][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 284.189418][ C1] ? lock_acquire+0x5f/0x360 [ 284.194785][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 284.199338][ C1] ? ip_sabotage_in+0x57/0x270 [ 284.204533][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.209284][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 284.214046][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.219479][ C1] nf_hook_slow+0xc5/0x220 [ 284.224234][ C0] ? lock_release+0x4b/0x3e0 [ 284.228638][ C1] NF_HOOK+0x206/0x3a0 [ 284.233249][ C0] ? lock_release+0x4b/0x3e0 [ 284.237295][ C1] ? skb_orphan+0xaf/0xd0 [ 284.241877][ C0] ? do_raw_spin_lock+0x121/0x290 [ 284.246206][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 284.251226][ C0] ? ip_output+0x2a1/0x3c0 [ 284.256398][ C1] ? NF_HOOK+0x9a/0x3a0 [ 284.260852][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.264968][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 284.269703][ C0] ? ip_output+0x2a1/0x3c0 [ 284.274298][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 284.278785][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.284006][ C1] __netif_receive_skb+0xd3/0x380 [ 284.288751][ C0] ? ip_output+0x2a1/0x3c0 [ 284.293790][ C1] ? process_backlog+0x2d5/0x14f0 [ 284.293815][ C1] process_backlog+0x60e/0x14f0 [ 284.293834][ C1] ? blk_queue_exit+0x29/0x240 [ 284.293851][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.293873][ C1] ? __pfx_process_backlog+0x10/0x10 [ 284.298266][ C0] ? ip_finish_output2+0xae7/0x1160 [ 284.303290][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 284.308116][ C0] ip_finish_output2+0xd03/0x1160 [ 284.312951][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 284.317737][ C0] ? ip_skb_dst_mtu+0x1a5/0xab0 [ 284.323142][ C1] __napi_poll+0xc4/0x360 [ 284.328319][ C0] ? ip_finish_output2+0x452/0x1160 [ 284.334213][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.339212][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 284.345643][ C1] net_rx_action+0x707/0xe30 [ 284.350579][ C0] ? ip_skb_dst_mtu+0x866/0xab0 [ 284.354884][ C1] ? scsi_end_request+0x339/0x830 [ 284.360059][ C0] ? ip_finish_output+0x33a/0x3f0 [ 284.364834][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 284.370263][ C0] ip_output+0x2a1/0x3c0 [ 284.374844][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 284.379745][ C0] ? ip_output+0x60/0x3c0 [ 284.384738][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 284.389737][ C0] __ip_queue_xmit+0x118d/0x1c30 [ 284.394891][ C1] handle_softirqs+0x283/0x870 [ 284.399195][ C0] ? __asan_memcpy+0x40/0x70 [ 284.404404][ C1] ? do_softirq+0xec/0x180 [ 284.408708][ C0] ? csum_tcpudp_nofold+0x1f/0x60 [ 284.414005][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 284.419024][ C0] ? __ip_queue_xmit+0x5d/0x1c30 [ 284.423856][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 284.428424][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 284.432917][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 284.437917][ C0] __tcp_transmit_skb+0x2215/0x3680 [ 284.443283][ C1] do_softirq+0xec/0x180 [ 284.443308][ C1] [ 284.448225][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.453504][ C1] [ 284.458696][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 284.464600][ C1] ? __pfx_do_softirq+0x10/0x10 [ 284.469783][ C0] ? tcp_fastopen_active_should_disable+0x19f/0x240 [ 284.474031][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.476953][ C0] ? tcp_fastopen_cookie_check+0x2b6/0x470 [ 284.481800][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 284.484720][ C0] tcp_connect+0x3068/0x4ef0 [ 284.490244][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 284.495104][ C0] ? __pfx_tcp_connect+0x10/0x10 [ 284.501676][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 284.506434][ C0] ? get_random_u16+0x154/0x940 [ 284.512240][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 284.517445][ C0] ? get_random_u16+0x4df/0x940 [ 284.522121][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 284.527813][ C0] ? __asan_memset+0x22/0x50 [ 284.532742][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.537787][ C0] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 284.542640][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 284.548336][ C0] ? sk_setup_caps+0x850/0xac0 [ 284.553386][ C1] process_scheduled_works+0xae1/0x17b0 [ 284.558487][ C0] ? dst_release+0x72/0x1b0 [ 284.563115][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 284.567878][ C0] tcp_v4_connect+0x1110/0x1a00 [ 284.574156][ C1] worker_thread+0x8a0/0xda0 [ 284.580051][ C0] ? __pfx_tcp_v4_connect+0x10/0x10 [ 284.584837][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 284.590360][ C0] __inet_stream_connect+0x2ab/0xe80 [ 284.594860][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 284.600833][ C0] ? __pfx___inet_stream_connect+0x10/0x10 [ 284.605739][ C1] ? __kthread_parkme+0x7b/0x200 [ 284.610305][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 284.615519][ C1] kthread+0x711/0x8a0 [ 284.621832][ C0] ? tcp_sendmsg_fastopen+0x1de/0x5e0 [ 284.627096][ C1] ? __pfx_worker_thread+0x10/0x10 [ 284.632984][ C0] tcp_sendmsg_fastopen+0x3a7/0x5e0 [ 284.638769][ C1] ? __pfx_kthread+0x10/0x10 [ 284.643704][ C0] tcp_sendmsg_locked+0x4d9b/0x5620 [ 284.648437][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.652500][ C0] ? tcp_sendmsg_locked+0x4f1/0x5620 [ 284.657842][ C1] ? __pfx_kthread+0x10/0x10 [ 284.662940][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 284.668104][ C1] ret_from_fork+0x47c/0x820 [ 284.672685][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.677855][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 284.682694][ C0] ? trace_contention_end+0x39/0x120 [ 284.687953][ C1] ? __switch_to_asm+0x39/0x70 [ 284.692530][ C0] ? rcu_is_watching+0x15/0xb0 [ 284.698388][ C1] ? __switch_to_asm+0x33/0x70 [ 284.702967][ C0] ? lock_release+0x4b/0x3e0 [ 284.707786][ C1] ? __pfx_kthread+0x10/0x10 [ 284.712919][ C0] ? preempt_schedule+0xae/0xc0 [ 284.718283][ C1] ret_from_fork_asm+0x1a/0x30 [ 284.723065][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 284.727822][ C1] [ 284.732679][ C0] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 284.737254][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 284.737270][ C1] CPU: 1 UID: 0 PID: 5945 Comm: kworker/1:4 Not tainted syzkaller #0 PREEMPT(full) [ 284.737291][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 284.737305][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 284.737328][ C1] Call Trace: [ 284.737338][ C1] [ 284.737345][ C1] dump_stack_lvl+0x99/0x250 [ 284.737373][ C1] ? __asan_memcpy+0x40/0x70 [ 284.737395][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 284.737421][ C1] ? __pfx__printk+0x10/0x10 [ 284.737450][ C1] vpanic+0x281/0x750 [ 284.737473][ C1] ? __pfx_vpanic+0x10/0x10 [ 284.737494][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 284.737512][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 284.737532][ C1] panic+0xb9/0xc0 [ 284.737551][ C1] ? __pfx_panic+0x10/0x10 [ 284.737575][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 284.737596][ C1] __warn+0x334/0x4c0 [ 284.737615][ C1] ? nf_send_unreach6+0x828/0xa20 [ 284.737639][ C1] ? nf_send_unreach6+0x828/0xa20 [ 284.737659][ C1] report_bug+0x2be/0x4f0 [ 284.737681][ C1] ? nf_send_unreach6+0x828/0xa20 [ 284.737702][ C1] ? nf_send_unreach6+0x828/0xa20 [ 284.737723][ C1] ? nf_send_unreach6+0x82a/0xa20 [ 284.737744][ C1] handle_bug+0x84/0x160 [ 284.737760][ C1] exc_invalid_op+0x1a/0x50 [ 284.737776][ C1] asm_exc_invalid_op+0x1a/0x20 [ 284.737793][ C1] RIP: 0010:nf_send_unreach6+0x828/0xa20 [ 284.737816][ C1] Code: 85 f6 74 0a e8 39 1b 6f f7 e9 c8 fc ff ff e8 2f 1b 6f f7 4c 8b 7c 24 18 e9 34 fa ff ff e8 20 1b 6f f7 eb 9b e8 19 1b 6f f7 90 <0f> 0b 90 e9 c7 fb ff ff 48 85 db 0f 84 81 00 00 00 4c 8d a4 24 20 [ 284.737833][ C1] RSP: 0018:ffffc90000a083c0 EFLAGS: 00010246 [ 284.737848][ C1] RAX: ffffffff8a51b3b7 RBX: ffff8880359e7280 RCX: ffff88801eb89e00 [ 284.737863][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 284.737875][ C1] RBP: ffffc90000a08568 R08: ffff8880315cc2c3 R09: 1ffff110062b9858 [ 284.737889][ C1] R10: dffffc0000000000 R11: ffffed10062b9859 R12: ffff8880770a0101 [ 284.737909][ C1] R13: dffffc0000000001 R14: 1ffff11006b3ce5b R15: 0000000000000000 [ 284.737925][ C1] ? nf_send_unreach6+0x827/0xa20 [ 284.737954][ C1] ? __pfx_nf_send_unreach6+0x10/0x10 [ 284.737976][ C1] ? unwind_next_frame+0xa5/0x2390 [ 284.738001][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 284.738018][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.738039][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.738058][ C1] ? lock_release+0x4b/0x3e0 [ 284.738076][ C1] nft_reject_inet_eval+0x441/0x690 [ 284.738100][ C1] nft_do_chain+0x40c/0x1920 [ 284.738116][ C1] ? kernel_text_address+0xa5/0xe0 [ 284.738142][ C1] ? __kernel_text_address+0xd/0x40 [ 284.738168][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 284.738194][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 284.738209][ C1] ? ipv6_find_hdr+0xc78/0x1050 [ 284.738233][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 284.738260][ C1] ? kasan_save_stack+0x3e/0x60 [ 284.738284][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 284.738303][ C1] ? call_rcu+0x157/0x9c0 [ 284.738321][ C1] ? kmem_cache_free+0x309/0x400 [ 284.738346][ C1] ? blk_flush_complete_seq+0x678/0xcc0 [ 284.738365][ C1] ? flush_end_io+0xbaf/0xe60 [ 284.738381][ C1] ? __blk_mq_end_request+0x426/0x600 [ 284.738399][ C1] ? scsi_end_request+0x4b3/0x830 [ 284.738418][ C1] ? blk_done_softirq+0x107/0x160 [ 284.738445][ C1] nft_do_chain_inet+0x25d/0x340 [ 284.738461][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 284.738482][ C1] ? NF_HOOK+0x9a/0x3a0 [ 284.738501][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.738520][ C1] ? lock_acquire+0x5f/0x360 [ 284.738536][ C1] ? ip_sabotage_in+0x57/0x270 [ 284.738559][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 284.738577][ C1] nf_hook_slow+0xc5/0x220 [ 284.738602][ C1] NF_HOOK+0x206/0x3a0 [ 284.738621][ C1] ? skb_orphan+0xaf/0xd0 [ 284.738642][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 284.738662][ C1] ? NF_HOOK+0x9a/0x3a0 [ 284.738681][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 284.738702][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 284.738726][ C1] __netif_receive_skb+0xd3/0x380 [ 284.738748][ C1] ? process_backlog+0x2d5/0x14f0 [ 284.738771][ C1] process_backlog+0x60e/0x14f0 [ 284.738792][ C1] ? blk_queue_exit+0x29/0x240 [ 284.738810][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.738835][ C1] ? __pfx_process_backlog+0x10/0x10 [ 284.738856][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 284.738879][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 284.738944][ C1] __napi_poll+0xc4/0x360 [ 284.738962][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.738983][ C1] net_rx_action+0x707/0xe30 [ 284.739004][ C1] ? scsi_end_request+0x339/0x830 [ 284.739029][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 284.739051][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 284.739077][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 284.739101][ C1] handle_softirqs+0x283/0x870 [ 284.739123][ C1] ? do_softirq+0xec/0x180 [ 284.739143][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 284.739162][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 284.739188][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 284.739209][ C1] do_softirq+0xec/0x180 [ 284.739227][ C1] [ 284.739234][ C1] [ 284.739241][ C1] ? __pfx_do_softirq+0x10/0x10 [ 284.739263][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.739283][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 284.739302][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 284.739324][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 284.739348][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 284.739370][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 284.739390][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.739409][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 284.739429][ C1] process_scheduled_works+0xae1/0x17b0 [ 284.739459][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 284.739485][ C1] worker_thread+0x8a0/0xda0 [ 284.739506][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 284.739530][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 284.739552][ C1] ? __kthread_parkme+0x7b/0x200 [ 284.739576][ C1] kthread+0x711/0x8a0 [ 284.739604][ C1] ? __pfx_worker_thread+0x10/0x10 [ 284.739624][ C1] ? __pfx_kthread+0x10/0x10 [ 284.739647][ C1] ? rcu_is_watching+0x15/0xb0 [ 284.739663][ C1] ? __pfx_kthread+0x10/0x10 [ 284.739680][ C1] ret_from_fork+0x47c/0x820 [ 284.739697][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 284.739715][ C1] ? __switch_to_asm+0x39/0x70 [ 284.739728][ C1] ? __switch_to_asm+0x33/0x70 [ 284.739742][ C1] ? __pfx_kthread+0x10/0x10 [ 284.739760][ C1] ret_from_fork_asm+0x1a/0x30 [ 284.739781][ C1] [ 284.742091][ C1] Kernel Offset: disabled