last executing test programs: 4.51834945s ago: executing program 1 (id=220): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x5, 0x200) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x7, 0x9, {0x0}, {0x0}, 0x3eb, 0xb}) fcntl$setown(r0, 0x8, r1) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1c60000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb4, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7ff}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20008011}, 0x20000800) read$FUSE(r3, &(0x7f0000000600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000002640)={0x0, 0x0, 0x0}, &(0x7f0000002680)=0xc) getresuid(&(0x7f00000026c0), &(0x7f0000002700), &(0x7f0000002740)=0x0) r7 = getgid() r8 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000002780)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r10 = syz_open_dev$cec(&(0x7f00000027c0), 0x0, 0x400c00) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r12 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002800), 0x68000, 0x0) r13 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$unix(r3, &(0x7f0000002940)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000240)="39abfcfa88a94833edace4127fab60e1ccef8d75eb9ba45584ce", 0x1a}, {&(0x7f0000000280)="c4da954fccfe18800354b86129b32923ad55af62da3dc4126901716a3387", 0x1e}, {&(0x7f00000002c0)="c8759792272e30edc8c2ae9c1ba01240eb6ee96735", 0x15}, {&(0x7f0000000300)="12e42d2592f08789", 0x8}, {&(0x7f0000000340)="a5ea670a00176be8a4343241010a7fef3064e8d04e61bd88ee7be8a0bdf01e6e01bd809b912d590627650452e1", 0x2d}, {&(0x7f0000000380)="d0d9847341b2e25ccee26e6a5e04292b30ca939a17d11d4160638320eadc637102f775d1772a33ce3a310df1d5c4a7e392997c1ef02ed5c2023e6fc101bcd06fff1e2cfb125f644d63ac008f848fa2bf7131d06647a1c37d6848", 0x5a}, {&(0x7f0000000400)="267cb4637a5d0d28f84843467880041d20e094b86637dd07e354b75399c115fcbaefa13abef1945fbd0d70e331c4bae0b3f22491fe9f7d35c62f56c1bd62f0238afb1cdd10569523461a2ad727586a4d524d07f325096c6f85e50c", 0x5b}, {&(0x7f0000000480)="e173aedfa02e3e294b11da90c4e53bab43309559f4bd7a727b16512d75f3c8de93321dd813347234a848a039a66e441859450b36180dc2fe4db98efa5218d8d59b70377f235e77d29b595de81f79902cabc74afd3f7d7923460b6306078ea5ed32dfb5c3240e40f004697ad990e0a5677fc9b98ac1a37924b214697249242447da3b3ac18f740688104b0e8ef75979422c321f786cf14c38dd471b99cb366b7dc4dfdaae1ebf3d952653c650ba8044407be410dc2027fdd97f4dab956505e965a1024dff677a26cd655652cf0df515034913e1c3d6f0a6a1957898024d0b60b1cb9c15a3a051c7f756efa0e7ddd67670b53e84adcc945c5dbb", 0xf9}], 0x8, &(0x7f0000002840)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r4}}}, @cred={{0x1c, 0x1, 0x2, {r1, r2, r5}}}, @cred={{0x1c, 0x1, 0x2, {r1, r6, r7}}}, @rights={{0x24, 0x1, 0x1, [r8, r9, r3, r3, r10]}}, @rights={{0x34, 0x1, 0x1, [r11, r0, r3, r3, r3, r12, r0, r0, r3]}}, @rights={{0x1c, 0x1, 0x1, [r13, r3, r0]}}], 0x100, 0x10}}], 0x1, 0x80) r14 = syz_open_dev$sndpcmp(&(0x7f0000002980), 0x1, 0x408082) ioctl$SNDRV_PCM_IOCTL_DROP(r14, 0x4143, 0x0) ioctl$LOOP_CTL_GET_FREE(r12, 0x4c82) epoll_create1(0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r9, 0xc018937a, &(0x7f00000029c0)={{0x1, 0x1, 0x18, r11, {0xfffffffffffffffe}}, './file1\x00'}) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000002a00)={0xf, 0x8}, 0x10) ioctl$FIOCLEX(r0, 0x5451) write$RDMA_USER_CM_CMD_CREATE_ID(r15, &(0x7f0000002a80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002a40)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002ac0)={0x6, 0x118, 0xfa00, {{0x2923, 0x5, "000e240a399aa7343c4a7c063b1f90fb7726c48e468909946e62d3f7c269bccadd9731060d9bd7b5918c2c141fd9564226d101e85585832ee4e20825593c4fe3bb1bc99ef4dfed1674273aa698880890cc22226f4c8f9009247e50420f2dfae9cf8ea91cd176d0ce10095d935367488006486d9f94664f29dcb9db610e2072b631488ee35c66afa7c58c11fd14b7edbb9968ad4bfc84f7f3f9e9c31fc9ec2435bf92eec00c1f394eb1ae3887bb3f78a03bbb2c990e2b98638fda3678a61223c1b1aba0b979e41ecba34c7f4ce9741589e3811c2315a23ffa3182ce222518476cfe63318ae97b3c02e56539ac2444f4d0a85383e6b8db1b802701b03a64ce7a1c", 0x0, 0x0, 0x7, 0x2, 0x6, 0x9, 0x8}, r16}}, 0x120) chmod(&(0x7f0000002c00)='./file0\x00', 0x0) r17 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000002cc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f0000002e00)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002dc0)={&(0x7f0000002d00)={0x88, r17, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r18}, @val={0xc, 0x99, {0x8001, 0x17}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_MESH_CONFIG={0x44, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x40}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff5f}, @NL80211_MESHCONF_RSSI_THRESHOLD={0x8, 0x14, 0xffffffffffffff5a}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x4}, @NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x86}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x400}, @NL80211_MESHCONF_HWMP_ROOT_INTERVAL={0x6, 0x18, 0x6}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x7}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000002e40), 0x8) 4.4133181s ago: executing program 1 (id=222): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000140)) mount(&(0x7f0000000000)=@sr0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 3.398766597s ago: executing program 1 (id=227): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) setitimer(0x2, &(0x7f0000000080)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x2, 0x0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) 3.001844542s ago: executing program 3 (id=231): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="0b01010f7a0000001f020000ff07000008020000197100000000000000000000d9bbb415f7bbe6e5dc770663bf78e56a405b86f38571638d6086d9f438c70a366f60f7711a4312ea96a7400bb82a3e36f5cf0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e2e8ef707ae5741f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffff00"/1362], 0x552) 2.845447207s ago: executing program 3 (id=233): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648b000) (async) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x4, 0x6, 0x9}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.635783682s ago: executing program 3 (id=235): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x8ee4a000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x7}, @device_b, @device_a, @initial, {0x0, 0x9}}, 0x3a, @void}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x20048020) r4 = openat$rnullb(0xffffffffffffff9c, 0x0, 0x40, 0x0) fadvise64(r4, 0x3, 0x0, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) 2.620938031s ago: executing program 2 (id=236): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) 2.410678111s ago: executing program 2 (id=237): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='binder\x00', 0x208002, 0x0) rmdir(&(0x7f0000000080)='./cgroup\x00') 2.400092408s ago: executing program 1 (id=238): r0 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02864c3, &(0x7f0000000540)={0x0}) creat(&(0x7f0000001380)='./file0\x00', 0x0) (async) creat(&(0x7f0000001380)='./file0\x00', 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 2.351838204s ago: executing program 2 (id=239): setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000080)=0x777, 0x4) r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x802) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e4c"], 0x15) r2 = dup(r1) r3 = socket$rds(0x15, 0x5, 0x0) syz_open_procfs$userns(0x0, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x4280, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0xfffd, 0x4, 0xb0000000000, 0x3, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x81, 0xffffffffffffffff, 0x2000000000000000, 0x5a6c101, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x1ff, 0x4}) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) bind$rds(r3, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000027c0)=ANY=[@ANYBLOB="38010000fe00002b094b5626245e5f82390ebe6263639c49f0a5c6a850a4"], 0x138) socketpair(0xf, 0xa, 0x3b49, &(0x7f0000000040)) chdir(0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x10f042, 0x100) write$P9_RLERRORu(r4, &(0x7f0000000240)={0xf, 0x7, 0x1, {{0x2, '+-'}, 0x8000}}, 0xf) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x1b) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e23, 0x9, @empty, 0xd}, 0x1c) sendto$inet6(r8, &(0x7f00000002c0)="9e", 0x1, 0x8000, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @remote, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x40040002) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000480)="2c38842cd423e35a6a3b776e1ab95f2dfd55551500c247346c5a66f20b85259d1a48a22fcedb82fb482d38c7a1f07eda5a077e9b", 0x34}], 0x1) creat(&(0x7f0000001380)='./file0\x00', 0x4) 2.038108532s ago: executing program 1 (id=240): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x341802, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000080)='tracefs\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_RESVSP(r4, 0x4030582b, &(0x7f0000000c00)={0x0, 0x1, 0x4, 0x4e1ee79f, 0x0, 0xf0}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010014000000000000000200e70308000300", @ANYRES32=r6, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x28, r3, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x43}}}}, ["", "", "", "", ""]}, 0x28}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000001a40)={0x20, r7, 0x91, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x12c33a9d8433a13b}, 0x20040000) rmdir(&(0x7f0000000000)='./file0\x00') timer_create(0x0, &(0x7f0000000280)={0x0, 0x22, 0x4, @thr={&(0x7f0000000100)="a1fe5b9487bd0fae78950fdcc2885535e712ca5d26a93b86c0bd8fc6e416bd673ed557df5a819054d14d47084013568c80825e0ba8fac7dec4cd04ec3cba84ad36df9a70680469c8e3b70e5695386e053a879ddbfcb9e2b80f9689c9248db3c99507d913b8f7edadb794ff71d9d3c322da439249ca36ef781bf33f4d22cc575fcf2f29d262ff0e2d8189a3bf205818a037a6a12c84b80d9468e9ebb52331d2d790440cc1e74467c007cd047b5879c4129344aa49c152b1976401542d7f35ab62b840a0d3f6aa46c15e7c56165e2aaa8e3222b9b815b46b29bdb43294", &(0x7f0000000200)="be8057fe9d19de83b6ff915aafca67fbc5dc3fa7dbadf627f313eaae5b46a3c12cd64a92290a9feac9a93eb46ebf137185298febec351cb383a04f690172e8b1423bb32af9ecff38724a4f667f3ab06835832c2c48139a59d28b6ecc07f0519be88502eeb7b1a1687c98887c264baf338e80ec9efa203299ed5c0ea7cf"}}, &(0x7f00000002c0)) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="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", 0xfdae}], 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmsg$DEVLINK_CMD_RATE_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x731, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x200408a1}, 0x80) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f0000000e00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000c00)={0x1ac, r9, 0x10, 0x70bd2b, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x1}}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x45}, 0x44004) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x3b48, @mcast1, 0xfc}, 0x1c) syz_usb_connect$cdc_ncm(0x3, 0x95, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x83, 0x2, 0x1, 0x2, 0xa0, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "674b5628fb"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x9, 0xffff, 0xff}, {0x6, 0x24, 0x1a, 0x3, 0x22}, [@obex={0x5, 0x24, 0x15, 0x7}, @acm={0x4, 0x24, 0x2, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x1, 0x10, 0x8}, @dmm={0x7, 0x24, 0x14, 0x2, 0x5}, @country_functional={0xa, 0x24, 0x7, 0x14, 0x3, [0x1210, 0x4]}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x8f}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x1, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x81, 0x5, 0x3}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0xff, 0xf9, 0x5, 0x20, 0x2}, 0x15, &(0x7f0000000440)={0x5, 0xf, 0x15, 0x1, [@ssp_cap={0x10, 0x10, 0xa, 0x1, 0x1, 0x10, 0xf0f, 0x5, [0xf]}]}, 0x9, [{0xa4, &(0x7f0000000480)=@string={0xa4, 0x3, "a524576289b4d322c1fd4781156b0a34504364b5110ea02ba440ee90b6bf26a8112380e14407869c6b74d5c1eeeec0f3a5f79c34ca1cb50694c1364034d655751b5b5419091890700760656ca5e2f87f07910295d799cfb99ef8595787f68870726137bbd5deefa4b5935f96e149e9a117ed4ca18571897573df210bf4cbf1a1486d26c46a416bbabfea01e147290f94a5140143f347acc91a8ab7def77be5f448b4"}}, {0x45, &(0x7f0000000540)=@string={0x45, 0x3, "cb89017127ce5021a7358259bdbcfd5e1b4d059149ef19e39e7237459676670cbdf5c55b3bb537d842d8d7edd1bcb37c3263d2e2b8c893fec33ca732915222b56578c8"}}, {0xd9, &(0x7f0000000780)=@string={0xd9, 0x3, "61ec6d5d5209b9d4ba5146bbe7ca52cc3603fd4c739c84c53572130b52040e4e6dafac15a9fd723ad61178afe9ea910392b1778e13e99f8f8dca9e61212aa41c3450e044e2ff5889f75d5319d0e7cddd0bd1c18876fe3b90cd64be6ca46dca34728c6b8e7c6da97a83108faef1b10c2e4fa8031d63ff22a29f3f2a46519a78f9555b1b373907ebad887cbd9e95473e651719be059fc1842c37f3bc274aa9d4e7da1c8eb21b7a97b68255f5a06bbfd3f253746e933a437cbcd3c0720380e5de4a880bab716eb15e2a6aa767d527a8877b59d0a535f2b6ed"}}, {0x5d, &(0x7f00000005c0)=@string={0x5d, 0x3, "9c32c35cd56dbddc746eec7badfc845cede54888bfc3e51fd2c6452d33f397839b3f40859c960b5dba61fcf3fec1eb2cdea75db76e17cbac9d2fcc093c31bbb11ecbd86a54b13378eea31ad2b0e2b7a14e175b37cb14dea79d4fe6"}}, {0x67, &(0x7f0000000880)=@string={0x67, 0x3, "783f70193c062e582b9fbe2c6b0ef05591013c27881fb938bb7b057ed6c645e5fa52ce6b5b1d94f5d7b807815bc51b69a8676cadd996e3ce183141cb3b815811c45cbb417e920cb82f72a04e47e02ebbfd10c0210b79dbfd7c418d8719fd517f8c8307310b"}}, {0xee, &(0x7f0000000900)=@string={0xee, 0x3, "768bc1f829fc5c20ff4a033571a8bb330b08bee3ba61464db853fae477046ad312365acc1ac98b776e4fbce94267474ca102dffd07feb771922993461c46ba634063d75b772086672464a542938147b6d9a73b97fd66a317f5dd2dd3c4291219730e48beab767a162535ce50c604bdd164c87cff3312fb2ec905ecf07089699b8ee75742c204a037af77dc8bf7c9ee55afd7c7763ef25685f09e0fa202b06450cc18a6b690e11e0b3d3455e339c0ab4d5523a434c533c045829d13f57d0c42754fbfcf1c812daf4c1f046f586907915c7e3df46fd06d6eb6b6da5c85ac8dcc8a6b17ddb43042fb55604ef2f5"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x1809}}, {0xaf, &(0x7f0000000a00)=@string={0xaf, 0x3, "a12df571ecbdbefcd4cb85e56d1722665a601303cd972cf00b4c44ef7f65cd6a265571d66ec4ed1565ae8f194d91ac13527b07fbfd02da048d76b27684126b640370c4aad8207c6e32fa2a7f9d9b9c45f5d6aa42514bbc073e9077569382c1ca5b4ffe8133f4affbde6d5cfc30386826770a48529c66ff6c8fd546cfbac22b5c5960ad407ac235b61bfcce6fe4d55abb82aa22d59125633f56ff0a3d6cd45e37649484e499676c37dbd15cd34c"}}, {0x9, &(0x7f0000000ac0)=@string={0x9, 0x3, "b061f5c2d576a9"}}]}) 1.974355577s ago: executing program 0 (id=241): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000000c0)={0x9, 0x9, 0x73fe7c75, 0x4, 0x10, 0x9b56}) (async) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f00000000c0)={0x9, 0x9, 0x73fe7c75, 0x4, 0x10, 0x9b56}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff) syz_open_dev$sndctrl(&(0x7f0000008e80), 0x1, 0x0) (async) r3 = syz_open_dev$sndctrl(&(0x7f0000008e80), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000008ec0)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}}) r4 = socket$inet6(0xa, 0x3, 0x8) ioctl$SIOCGSTAMP(r4, 0x8906, 0x0) sendmmsg$inet6(r4, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="249be51fbb71b4fcf411af5c3c182b638c0b7ffb52cc0f6eacdd6ba1626a61ccbea89b880825bae7abf6cfce41701d2abb8629981f0c5d6b00ae0679c6b96b364b432f99a0d6fe05a8f2979fec0a4c1ff3d07d9f8504a5fd1fa5ead0b4d362d1eae3630ea1699441f84116498541e589f3df05d1412d30e0186dd6462b21ca623eb9d2df36208057e09ff6967d778eb6b5fc33671448e695242cfdb1d67c1e7e29d56234c9fb25654de5e7822ee3f401000000b4fab36db72a06b6a1f7b4fa9bee1df5ed2b69"], 0x28}}], 0x1, 0x28000090) recvfrom$inet6(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) (async) recvfrom$inet6(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000040)) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000069000b0008000000060011000a00000073d4860a33dacf97a25db5ff475cbaba595850f29f8e6abbad7b2fad16315eea7a545431b8ea987ce195f1647efa6da279139eec629de68c9ef122469fc41f01b43e104fa599a150377d795a8adedef91af4398b3d43368381ac1517c254ca084c15a4e4e6a3ceaf2bc0036391b6c6679d8dc8e41f7b3dcb06738a1d92f8f905f42baf52f7c8ddd82e5b13e9875951b1a173709f82b723a93e82f1f980e1e2de"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000240)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fbdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000069000b0008000000060011000a00000073d4860a33dacf97a25db5ff475cbaba595850f29f8e6abbad7b2fad16315eea7a545431b8ea987ce195f1647efa6da279139eec629de68c9ef122469fc41f01b43e104fa599a150377d795a8adedef91af4398b3d43368381ac1517c254ca084c15a4e4e6a3ceaf2bc0036391b6c6679d8dc8e41f7b3dcb06738a1d92f8f905f42baf52f7c8ddd82e5b13e9875951b1a173709f82b723a93e82f1f980e1e2de"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006", 0x21}], 0x1}, 0x20000880) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000560000000000000066ba2100b066eeb9e00a00000f"], 0x56}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x201, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r7, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000002340)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x5d, 0x1, 0x8, 0x40, 0x31, 0x6, 0x5, 0x4b}}) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe45) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000080)={0x3, 0x6576, 0x10000009}) 1.871146277s ago: executing program 0 (id=242): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x50, r0, 0x8ee4a000) memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r1, 0x89e3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) 1.646728407s ago: executing program 3 (id=243): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) (async, rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000140)=@x86={0x0, 0x8, 0xe, 0x0, 0x0, 0x2, 0x7, 0xf2, 0x1, 0x12, 0xfe, 0xfe, 0x0, 0x4, 0xa, 0x0, 0x7f, 0x8, 0xc4, '\x00', 0x4, 0x30}) write$UHID_INPUT(r1, &(0x7f0000001080)={0xc, {"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", 0x1000}}, 0x1020) (async) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 1.4985528s ago: executing program 3 (id=244): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x31) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x14, 0x1f, 0x1, 0x0, 0x80000, "", [@nested={0x4}]}, 0x14}], 0x1, 0x0, 0x0, 0x20000004}, 0x140000c4) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x228600, 0x0) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000580), 0x42, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000090601010000000000000000070000060900020073797a3000000000100007800c0018400000000000008001600008800c00078005000300070000000c00078008001c40000068031c0007801800148014005840fe800000000000000000000000000035100007800c00018008000140e00000010c00078005001a00000000000c00078005001500920000004f5b137353e8f0b99a3c54affd5ac80ff1c7f13e6a3249"], 0x90}, 0x1, 0x0, 0x0, 0x2a048081}, 0x14) (async) syz_usb_connect(0x0, 0x24, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x8f, 0x2, 0x53, 0x40, 0xc45, 0x8003, 0xd6bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6e, 0xe4, 0x4e}}]}}]}}, 0x0) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r2, 0x3b8c, &(0x7f0000000300)={0x30, r4, 0x0, 0x0, 0xffff, 0x204, 0x1, 0x0}) (async) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r0, 0x3b8b, &(0x7f00000000c0)={0x10, 0x0, r4}) 1.401258308s ago: executing program 2 (id=245): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = getpid() ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x3, 0x4, 0x100, 0x3, 0x9, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000002c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000080)=0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a7dcf047da816b5521a5affb00558e7744289e1239"}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x2c800}, 0x4000004) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) r10 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r10, &(0x7f0000000180)=ANY=[@ANYRESOCT=r8, @ANYRES16=r9], 0xff3c) syz_clone3(&(0x7f0000000380)={0x80, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140), {0x13}, &(0x7f0000000400)=""/16, 0x10, &(0x7f0000000440)=""/82, &(0x7f0000000340)=[r2, r2, r3, r2], 0x4, {r0}}, 0x58) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 1.334596121s ago: executing program 3 (id=246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSFLAG(r2, 0x4004480f, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 1.19147604s ago: executing program 2 (id=247): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x12, 0xffffffffffffffff, 0xfffff000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) (async) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x8, 0x40a34877319d065b) mmap(&(0x7f000078b000/0x2000)=nil, 0x2000, 0x0, 0x8010, r2, 0x10ee1000) (async, rerun: 32) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x2010, r1, 0x93774000) sendfile(r0, r0, 0x0, 0x7ffff000) r3 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x400) ioctl$SIOCRSSCAUSE(r3, 0x89e1, 0x0) 971.266787ms ago: executing program 0 (id=248): r0 = creat(&(0x7f0000000080)='./file0\x00', 0xac) sendmsg$tipc(r0, &(0x7f0000000840)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x1, {{0x0, 0x4}, 0x2}}, 0x10, &(0x7f0000000700)=[{&(0x7f00000001c0)="6b345b7ab4bc09d61fcc54321750e4b7db625843dff9f582cca8661fa0fbde6db1857e61d2dbed5e5c1f8098ed8ddccfdb37ee7d1ab7ba153e0255ccf4fe16bec00c631d12b8a404fbec1c9a16872c78cd3343965ff1ea8bdc86f7abba3ef0751a9e16934bfded5d66e3e640b62dfc74f6338cbaf49dcb2dd3e3fff13f764d7bcbbfc6d8f58b3f963e5ffc43868a5a29773ddb09e9ee33fa0e96e52303a12201e3a9e9152c558e50ad538412d99285948a5ed636a6947961bf50f295e24513074a581606fac6a19cbf45cdd5033f1a25853fdc676047aa6f1b4c0c2884d55fad76cff8a3", 0xe4}, {&(0x7f00000000c0)="731c8e6cf4e7d45a", 0x8}, {&(0x7f00000002c0)="fc1446a0d3635b52bea06c96435c51e4fdd713d094bf7a6719db21ec481a88fac0371608686736e5e305cbd82bcd593c5d05d16d613bb9b538dbb82d15978fe65fef3a9850ddfa37cbf9fa9ed3df2be2b8302fb7a9e9aa7175129f741b490d8e7a8f1b12c147a45852c8130ae15817826f47919e143465012a08c875e48108e41d137f37ceac605581a5cf5026b387f73d947bc6b50380400f63f2ad6c1dda560ba8d054d875e03dcabe81b84fc02661ba172cc2d3e2a77801b23ea821b714dc4955c06e06", 0xc5}, {&(0x7f00000003c0)="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", 0xfd}, {&(0x7f00000004c0)="24bcf02e1d3b562b6f9553aecc6c5da33ea78262347bc6ad8ae8dcb4d078efddde946e957a259492f6c3a935334654da3ab27a4ff702623480e7336c8e6b017d0e73260474a1134c297b9a8f04ac1e60e67ec3e0aebb8f2b6b10ceabc7f82caf9ccea3e53a29382bb65a5824fdb5d57732f390ecc145d469385f779df791bcca95f59c5a9a6a1e5227e9fc4118999646bb0b562bb2c775f2e396911e83d059", 0x9f}, {&(0x7f0000000580)="e67febac6645214da8324e0d51ba8edc95808ae1813d9f1f36b48b1fc6f7fe564144c51bf8187597bda2c1da9615a8d8f81a3e727c667780873f4b906296dae80d068c4be4a3a6a410f41f86657ce8ac787d5179bba4cd903022bdfe2db5c5ebeb270647a064b189b81d4bb3b194a8ec31d5b02620733eefcd215a2cc2de490df7a816bb72044106ae91b751b9fe41d041dbb3547ca03bc71782ab13841e99bc6bc9101d631c4caca9074f36", 0xac}, {&(0x7f0000000100)="4d1b47bc897e5ca1eaeaa008c2aa0fb64c3e4773ce8c836954b373b7a5e480a8e5ccfeba06470649acf76018dcac01", 0x2f}, {&(0x7f0000000640)="1b121bbcd2ae71f3d4088f7c2b4f78685bc4fe7e6d97289efc0cf46d3b781624875b06fcdf2c15fdc9fa40d7449b9ddfc55fff5cc7d8a3ae9dc2f86a410a6079541517b2816d92a6ac24498c36befa4435931f9f38e7af3d3aab9ca1b9977825a1cb3441cc57c2a1fc46cabca3e616776889d5941e7a4432a2dec0392024201cd204cfe1c4d319b51904d1f7b81edee3ace4c1b766b3f210d9fe287fd25fac92146cb6ad66632d5c634c250cb04e7cba16aa0131e75c8c3c8a84be27c602a3d9", 0xc0}], 0x8, &(0x7f0000000780)="f1be9c3d71560d0f5bfedf6a9be705865b3654c3f8b8b8d507be207b388313b4edf2f598b60d6565e8b639ae73c3397b166b450983eca783c214177a46244f993dc9f2e22aa66cb6e6b4e177b71e744f3db9e1dd823f090c8a9e757ddcfdd74aa7e831b7a2a82a5553ba3bf6d243ea3168effbc0c4c126f073123f8219ee982a132231c7ab52986f9c359a4d3b9ae980ea", 0x91}, 0x40000) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 861.658647ms ago: executing program 0 (id=249): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x151100, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xc3a51000) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 704.960051ms ago: executing program 1 (id=250): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x96d6a000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r1, 0x93774000) sendfile(r0, r0, 0x0, 0x7ffff000) r2 = accept4$rose(0xffffffffffffffff, 0x0, 0x0, 0x400) r3 = socket$inet(0xa, 0x801, 0x84) accept4(r3, 0x0, 0x0, 0x0) ioctl$SIOCRSSCAUSE(r2, 0x89e1, 0x0) 273.111169ms ago: executing program 0 (id=251): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x40841, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="b578eb1f21d36852918dd4259a0238963cf9656f8f969c02230fadd2901b366ba88ca17da58184ce3d26ea3890261532631854451167820730b823db4b2282cfa4c19491affb057946ba8644cf55318f429c8fb031d8025899221fdecbe7203880f8f6914c9538651f285b61ca07063293c81bf2e23fe6eacb6f9b5787682d7a6ce92af91fc8", 0x86}, {&(0x7f0000000000)="70457d5b3254469463bfc8424dc2", 0xe}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648d000) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r3}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0xc}}, 0x10) r4 = openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PIN_GETFUNC2(r4, 0xc0603d0f, &(0x7f0000000040)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0x6) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 202.418665ms ago: executing program 2 (id=252): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000080), 0x0, 0x0) ioctl$I2C_SMBUS(r1, 0x720, 0x0) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000000)) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r6], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000140)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r8, r5, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000340)={@flat=@weak_binder={0x77622a85, 0x0, 0x3}, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) write$6lowpan_enable(r9, &(0x7f0000000080)='0', 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000840)) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r11 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r11, 0xc0884113, &(0x7f0000000100)={0x0, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x2}) ioctl$SNDRV_PCM_IOCTL_FORWARD(r11, 0x40084149, &(0x7f00000001c0)=0x6) syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/pid_for_children\x00') sendfile(r0, r0, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=253): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x24000, 0x0) r1 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async) r2 = socket(0x2, 0x2, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r1, 0xab00, r2) (async, rerun: 64) ioctl$NBD_DO_IT(r3, 0xab03) (rerun: 64) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './cgroup\x00'}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r6) (async) socket$inet6(0xa, 0x80003, 0x6) (async) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="c300"}) (async, rerun: 32) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r8, 0x4068aea3, &(0x7f0000000080)={0x8f, 0x0, 0xe}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) (async) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r10, 0x65, 0x20, 0x0, &(0x7f00000008c0)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0xb, r4, 0x0, r5}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts. [ 83.198643][ T5835] cgroup: Unknown subsys name 'net' [ 83.347121][ T5835] cgroup: Unknown subsys name 'cpuset' [ 83.357013][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.062791][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.907838][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.916298][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.924320][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.936673][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.945653][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.953203][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.962368][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.969708][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.993200][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.006504][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.033786][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.034122][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.051141][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.064423][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.072816][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.147461][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.156101][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.164276][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.172531][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.180613][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.481976][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 88.707859][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.715290][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.722746][ T5844] bridge_slave_0: entered allmulticast mode [ 88.731208][ T5844] bridge_slave_0: entered promiscuous mode [ 88.785944][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.793207][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.800386][ T5844] bridge_slave_1: entered allmulticast mode [ 88.807924][ T5844] bridge_slave_1: entered promiscuous mode [ 88.815339][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.924271][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.942558][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.016876][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 89.031565][ T5844] team0: Port device team_slave_0 added [ 89.065280][ T5844] team0: Port device team_slave_1 added [ 89.071676][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 89.166747][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.174292][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.181455][ T5848] bridge_slave_0: entered allmulticast mode [ 89.189601][ T5848] bridge_slave_0: entered promiscuous mode [ 89.232091][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.239456][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.246912][ T5848] bridge_slave_1: entered allmulticast mode [ 89.254526][ T5848] bridge_slave_1: entered promiscuous mode [ 89.262488][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.269820][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.296146][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.335575][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.342576][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.368764][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.435810][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.448541][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.538243][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.545905][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.554050][ T5853] bridge_slave_0: entered allmulticast mode [ 89.561561][ T5853] bridge_slave_0: entered promiscuous mode [ 89.584731][ T5848] team0: Port device team_slave_0 added [ 89.610897][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.618451][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.626301][ T5860] bridge_slave_0: entered allmulticast mode [ 89.634161][ T5860] bridge_slave_0: entered promiscuous mode [ 89.642213][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.649705][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.658041][ T5853] bridge_slave_1: entered allmulticast mode [ 89.665713][ T5853] bridge_slave_1: entered promiscuous mode [ 89.674478][ T5848] team0: Port device team_slave_1 added [ 89.686207][ T5844] hsr_slave_0: entered promiscuous mode [ 89.692665][ T5844] hsr_slave_1: entered promiscuous mode [ 89.699707][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.706996][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.714512][ T5860] bridge_slave_1: entered allmulticast mode [ 89.721871][ T5860] bridge_slave_1: entered promiscuous mode [ 89.832071][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.839104][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.865601][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.880117][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.894108][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.905957][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.919569][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.937744][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.944833][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.971819][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.993793][ T5847] Bluetooth: hci0: command tx timeout [ 90.086699][ T5847] Bluetooth: hci1: command tx timeout [ 90.100256][ T5860] team0: Port device team_slave_0 added [ 90.109515][ T5853] team0: Port device team_slave_0 added [ 90.139002][ T5860] team0: Port device team_slave_1 added [ 90.146957][ T5853] team0: Port device team_slave_1 added [ 90.154144][ T5847] Bluetooth: hci2: command tx timeout [ 90.233003][ T51] Bluetooth: hci3: command tx timeout [ 90.246654][ T5848] hsr_slave_0: entered promiscuous mode [ 90.253866][ T5848] hsr_slave_1: entered promiscuous mode [ 90.260106][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 90.266049][ T5848] Cannot create hsr debugfs directory [ 90.302128][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.309205][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.336368][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.349279][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.357321][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.383755][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.395970][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.403487][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.429534][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.448261][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.455301][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.481984][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.671633][ T5860] hsr_slave_0: entered promiscuous mode [ 90.678183][ T5860] hsr_slave_1: entered promiscuous mode [ 90.685170][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 90.690970][ T5860] Cannot create hsr debugfs directory [ 90.714508][ T5853] hsr_slave_0: entered promiscuous mode [ 90.721073][ T5853] hsr_slave_1: entered promiscuous mode [ 90.727998][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 90.734391][ T5853] Cannot create hsr debugfs directory [ 90.858733][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.898946][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.930415][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.963671][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.188126][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.205306][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.217369][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.232263][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.359581][ T5853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.374631][ T5853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.388805][ T5853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.402491][ T5853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.501680][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.518441][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.530755][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.545610][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.567065][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.589603][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.611921][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.619944][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.648602][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.655811][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.768073][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.816228][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.839157][ T5844] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.863883][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.871051][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.882448][ T1109] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.889665][ T1109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.952159][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.057097][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.073441][ T51] Bluetooth: hci0: command tx timeout [ 92.092189][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.118177][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.125422][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.152688][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.159967][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.170897][ T51] Bluetooth: hci1: command tx timeout [ 92.218934][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.233543][ T51] Bluetooth: hci2: command tx timeout [ 92.262689][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.269991][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.313967][ T51] Bluetooth: hci3: command tx timeout [ 92.335031][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.342250][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.360871][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.557482][ T5844] veth0_vlan: entered promiscuous mode [ 92.577724][ T5844] veth1_vlan: entered promiscuous mode [ 92.664166][ T5844] veth0_macvtap: entered promiscuous mode [ 92.690181][ T5844] veth1_macvtap: entered promiscuous mode [ 92.751565][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.791803][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.829948][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.871752][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.886559][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.919611][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.938542][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.967455][ T5848] veth0_vlan: entered promiscuous mode [ 93.026388][ T5848] veth1_vlan: entered promiscuous mode [ 93.052182][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.141869][ T1050] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.158916][ T5848] veth0_macvtap: entered promiscuous mode [ 93.165218][ T1050] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.188807][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.208890][ T5848] veth1_macvtap: entered promiscuous mode [ 93.241094][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.263636][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.279451][ T5853] veth0_vlan: entered promiscuous mode [ 93.310832][ T5853] veth1_vlan: entered promiscuous mode [ 93.334503][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.366894][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.370909][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.422199][ T5860] veth0_vlan: entered promiscuous mode [ 93.442331][ T1109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.472343][ T5860] veth1_vlan: entered promiscuous mode [ 93.504818][ T1109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.521375][ T1109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.571997][ T5853] veth0_macvtap: entered promiscuous mode [ 93.594694][ T1109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.641766][ T5853] veth1_macvtap: entered promiscuous mode [ 93.718574][ T5860] veth0_macvtap: entered promiscuous mode [ 93.786023][ T5860] veth1_macvtap: entered promiscuous mode [ 93.801631][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.826586][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.843362][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.896534][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.917410][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.975778][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.997487][ T1050] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.011416][ T1050] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.035689][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.046492][ T1050] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.057049][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.065331][ T1050] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.094185][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.103333][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.153822][ T51] Bluetooth: hci0: command tx timeout [ 94.165722][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.189911][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.233324][ T51] Bluetooth: hci1: command tx timeout [ 94.313298][ T51] Bluetooth: hci2: command tx timeout [ 94.392998][ T51] Bluetooth: hci3: command tx timeout [ 94.525082][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.565691][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.679138][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.702760][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.761664][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.784639][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.817015][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.838569][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.926497][ T5948] /dev/rnullb0: Can't open blockdev [ 95.255087][ T5959] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.383249][ T5906] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.391983][ T5913] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 95.544785][ T5913] usb 3-1: device descriptor read/64, error -71 [ 95.566365][ T5906] usb 1-1: unable to get BOS descriptor or descriptor too short [ 95.585292][ T5906] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 95.600681][ T5906] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 95.612072][ T5906] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 95.627659][ T5906] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 95.642585][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.665199][ T5906] usb 1-1: Product: syz [ 95.669427][ T5906] usb 1-1: Manufacturer: syz [ 95.700989][ T5906] usb 1-1: SerialNumber: syz [ 95.796149][ T5961] input: syz0 as /devices/virtual/input/input5 [ 95.803230][ T5913] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.933271][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.946911][ T5913] usb 3-1: device descriptor read/64, error -71 [ 95.972981][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.982373][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.023596][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.024154][ T5963] Mount JFS Failure: -22 [ 96.041033][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.057714][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.070616][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.102702][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.111125][ T5913] usb usb3-port1: attempt power cycle [ 96.145455][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.168088][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.227721][ T5970] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 96.233497][ T51] Bluetooth: hci0: command tx timeout [ 96.237648][ T5970] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 96.313416][ T51] Bluetooth: hci1: command tx timeout [ 96.393742][ T51] Bluetooth: hci2: command tx timeout [ 96.463258][ T5913] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.477350][ T51] Bluetooth: hci3: command tx timeout [ 96.513563][ T5913] usb 3-1: device descriptor read/8, error -71 [ 96.603233][ T5906] usb 1-1: 0:2 : does not exist [ 96.659266][ T5906] usb 1-1: USB disconnect, device number 2 [ 96.740307][ T5957] udevd[5957]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 96.742044][ T5983] autofs4:pid:5983:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.3), cmd(0xc0189377) [ 96.770729][ T5913] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.779469][ T5983] autofs4:pid:5983:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189377) [ 96.823870][ T5913] usb 3-1: device descriptor read/8, error -71 [ 96.953091][ T5913] usb usb3-port1: unable to enumerate USB device [ 97.043121][ T928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.183066][ T928] usb 4-1: device descriptor read/64, error -71 [ 97.190821][ T30] audit: type=1326 audit(1754284848.692:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5995 comm="syz.1.20" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ee878eb69 code=0x0 [ 97.222957][ T5913] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.275689][ T850] cfg80211: failed to load regulatory.db [ 97.343767][ T5997] /dev/rnullb0: Can't open blockdev [ 97.387093][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.400107][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.410989][ T5913] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 97.420283][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.439770][ T5913] usb 1-1: config 0 descriptor?? [ 97.453303][ T928] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.604521][ T928] usb 4-1: device descriptor read/64, error -71 [ 97.713533][ T928] usb usb4-port1: attempt power cycle [ 97.868056][ T5913] cp2112 0003:10C4:EA90.0001: unknown main item tag 0x0 [ 97.881558][ T5913] cp2112 0003:10C4:EA90.0001: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0 [ 98.061391][ T5913] cp2112 0003:10C4:EA90.0001: Part Number: 0x00 Device Version: 0x4D [ 98.071109][ T928] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 98.113559][ T928] usb 4-1: device descriptor read/8, error -71 [ 98.363366][ T928] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 98.395075][ T928] usb 4-1: device descriptor read/8, error -71 [ 98.513734][ T928] usb usb4-port1: unable to enumerate USB device [ 98.618689][ T30] audit: type=1400 audit(1754284850.122:3): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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netlink: 256 bytes leftover after parsing attributes in process `syz.2.22'. [ 98.740358][ T5991] cp2112 0003:10C4:EA90.0001: Multi-message I2C transactions not supported [ 98.753387][ T5991] ======================================================= [ 98.753387][ T5991] WARNING: The mand mount option has been deprecated and [ 98.753387][ T5991] and is ignored by this kernel. Remove the mand [ 98.753387][ T5991] option from the mount to silence this warning. [ 98.753387][ T5991] ======================================================= [ 98.788372][ C1] vkms_vblank_simulate: vblank timer overrun [ 98.841425][ T5991] /dev/rnullb0: Can't open blockdev [ 99.408281][ T5913] cp2112 0003:10C4:EA90.0001: error reading lock byte: -71 [ 99.432577][ T5913] usb 1-1: USB disconnect, device number 3 [ 99.596116][ T6016] /dev/rnullb0: Can't open blockdev [ 99.901153][ T6024] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.990144][ T6036] /dev/rnullb0: Can't open blockdev [ 100.175025][ T6039] /dev/rnullb0: Can't open blockdev [ 100.294388][ T6041] /dev/rnullb0: Can't open blockdev [ 100.301036][ T6041] /dev/rnullb0: Can't open blockdev [ 100.364078][ T6041] /dev/rnullb0: Can't open blockdev [ 100.391529][ T6041] /dev/rnullb0: Can't open blockdev [ 100.397949][ T6041] /dev/rnullb0: Can't open blockdev [ 100.445170][ T6041] /dev/rnullb0: Can't open blockdev [ 100.465399][ T6041] /dev/rnullb0: Can't open blockdev [ 100.485870][ T6041] /dev/rnullb0: Can't open blockdev [ 100.502310][ T6050] netlink: 'syz.2.35': attribute type 21 has an invalid length. [ 100.513780][ T6050] netlink: 'syz.2.35': attribute type 1 has an invalid length. [ 100.571737][ T6041] /dev/rnullb0: Can't open blockdev [ 100.713159][ T6041] /dev/rnullb0: Can't open blockdev [ 100.727172][ T6041] /dev/rnullb0: Can't open blockdev [ 100.761843][ T6041] /dev/rnullb0: Can't open blockdev [ 100.771766][ T6041] /dev/rnullb0: Can't open blockdev [ 100.783297][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.792004][ T6041] /dev/rnullb0: Can't open blockdev [ 100.833688][ T6041] /dev/rnullb0: Can't open blockdev [ 100.857149][ T6041] /dev/rnullb0: Can't open blockdev [ 100.885626][ T6041] /dev/rnullb0: Can't open blockdev [ 100.935522][ T6041] /dev/rnullb0: Can't open blockdev [ 100.949559][ T6041] /dev/rnullb0: Can't open blockdev [ 100.953901][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 100.968872][ T6041] /dev/rnullb0: Can't open blockdev [ 100.979026][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 100.985549][ T6041] /dev/rnullb0: Can't open blockdev [ 101.011155][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 101.018712][ T6041] /dev/rnullb0: Can't open blockdev [ 101.033103][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.042642][ T6041] /dev/rnullb0: Can't open blockdev [ 101.057916][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.058329][ T6041] /dev/rnullb0: Can't open blockdev [ 101.081577][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 101.108298][ T6054] process 'syz.0.36' launched './file0' with NULL argv: empty string added [ 101.109127][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.351239][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 101.413038][ T24] usbtmc 3-1:16.0: can't read capabilities [ 101.566695][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 101.576647][ T6050] usbtmc 3-1:16.0: Unable to send data, error -71 [ 101.597667][ T24] usb 3-1: USB disconnect, device number 6 [ 102.023087][ T928] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 102.182983][ T928] usb 4-1: Using ep0 maxpacket: 32 [ 102.200245][ T928] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 102.221685][ T928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.221715][ T928] usb 4-1: Product: syz [ 102.221731][ T928] usb 4-1: Manufacturer: syz [ 102.221747][ T928] usb 4-1: SerialNumber: syz [ 102.228142][ T928] usb 4-1: config 0 descriptor?? [ 102.291222][ T6083] /dev/rnullb0: Can't open blockdev [ 102.633432][ T928] peak_usb 4-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 102.653225][ T928] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 102.676930][ T928] peak_usb 4-1:0.0 can0: sending command failure: -22 [ 102.755180][ T928] peak_usb 4-1:0.0: probe with driver peak_usb failed with error -22 [ 103.078590][ T6100] Zero length message leads to an empty skb [ 103.298181][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.52'. [ 103.312006][ T6108] syzkaller0: entered promiscuous mode [ 103.327130][ T6109] syzkaller0: entered allmulticast mode [ 103.342289][ T6108] syzkaller0 (unregistering): left promiscuous mode [ 103.378231][ T6108] syzkaller0 (unregistering): left allmulticast mode [ 103.603079][ T850] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 103.839939][ T6116] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.766644][ T6135] /dev/rnullb0: Can't open blockdev [ 104.804001][ T9] usb 4-1: USB disconnect, device number 6 [ 104.873008][ T850] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 105.036158][ T6139] /dev/rnullb0: Can't open blockdev [ 105.061408][ T850] usb 3-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 105.082330][ T6140] program syz.1.62 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.102290][ T850] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 105.124147][ T850] usb 3-1: Product: syz [ 105.128385][ T850] usb 3-1: Manufacturer: syz [ 105.136027][ T6139] bpf: Bad value for 'gid' [ 105.174205][ T850] usb 3-1: SerialNumber: syz [ 105.212773][ T850] usb 3-1: config 0 descriptor?? [ 105.254540][ T850] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 105.272881][ T850] dvb-usb: bulk message failed: -22 (4/0) [ 105.292953][ T850] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.313157][ T850] dvb-usb: bulk message failed: -22 (5/0) [ 105.323162][ T850] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.358722][ T850] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 105.374245][ T850] dvbdev: DVB: registering new adapter (Pinnacle 400e DVB-S USB2.0) [ 105.383715][ T850] usb 3-1: media controller created [ 105.413788][ T850] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.440070][ T6130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.465381][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 105.474915][ T6130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.487462][ T850] usb 3-1: selecting invalid altsetting 3 [ 105.491054][ T6147] /dev/rnullb0: Can't open blockdev [ 105.493420][ T850] ttusb2: set interface to alts=3 failed [ 105.603350][ T850] DVB: Unable to find symbol tda10086_attach() [ 105.618862][ T850] dvb-usb: no frontend was attached by 'Pinnacle 400e DVB-S USB2.0' [ 105.642182][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 105.665414][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.680278][ T850] dvb-usb: bulk message failed: -22 (4/0) [ 105.686438][ T9] usb 2-1: Product: syz [ 105.690657][ T9] usb 2-1: Manufacturer: syz [ 105.695456][ T850] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.706162][ T9] usb 2-1: SerialNumber: syz [ 105.711075][ T850] dvb-usb: bulk message failed: -22 (5/0) [ 105.720315][ T9] usb 2-1: config 0 descriptor?? [ 105.727442][ T850] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 105.738213][ T850] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully initialized and connected. [ 105.750992][ T9] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 105.763841][ T850] usb 3-1: USB disconnect, device number 7 [ 105.873265][ T850] dvb-usb: Pinnacle 400e DVB-S USB2.0 successfully deinitialized and disconnected. [ 106.160821][ T6143] /dev/rnullb0: Can't open blockdev [ 106.181276][ T9] sonixb 2-1:0.0: Error writing register 01: -71 [ 106.207635][ T9] sonixb 2-1:0.0: probe with driver sonixb failed with error -71 [ 106.230142][ T9] usb 2-1: USB disconnect, device number 3 [ 106.672984][ T928] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 106.867723][ T928] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 106.903011][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.911110][ T928] usb 3-1: Product: syz [ 106.923157][ T928] usb 3-1: Manufacturer: syz [ 106.927848][ T928] usb 3-1: SerialNumber: syz [ 106.946181][ T928] usb 3-1: config 0 descriptor?? [ 107.251916][ T6165] /dev/rnullb0: Can't open blockdev [ 107.471004][ T928] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 107.484970][ T928] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 107.492710][ T928] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 107.522020][ T928] usb 3-1: USB disconnect, device number 8 [ 108.162946][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 108.334525][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 108.358444][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 108.379176][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.422110][ T24] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 108.458128][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.487414][ T24] usb 2-1: config 0 descriptor?? [ 108.520480][ T6181] /dev/rnullb0: Can't open blockdev [ 108.554403][ T6183] /dev/rnullb0: Can't open blockdev [ 108.700662][ T6185] syz.2.79: attempt to access beyond end of device [ 108.700662][ T6185] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 108.718985][ T6185] hpfs: hpfs_map_sector(): read error [ 108.783222][ T5933] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.916360][ T6172] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.925737][ T6172] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.953143][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 108.975464][ T5933] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 108.995214][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.023379][ T5933] usb 1-1: config 0 descriptor?? [ 109.140188][ T6172] netlink: 168 bytes leftover after parsing attributes in process `syz.1.74'. [ 109.162324][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 109.168991][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 109.189169][ T24] usb 2-1: USB disconnect, device number 4 [ 109.273324][ T5934] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.445972][ T5934] usb 4-1: Using ep0 maxpacket: 8 [ 109.453726][ T5934] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 109.465551][ T5934] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.476802][ T5934] usb 4-1: config 0 descriptor?? [ 109.623583][ T6198] tmpfs: Bad value for 'mpol' [ 109.653307][ T5933] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 109.665731][ T5933] asix 1-1:0.0: probe with driver asix failed with error -61 [ 109.757718][ T6200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.84'. [ 109.844184][ T6202] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(16) [ 109.851012][ T6202] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 109.875973][ T6202] vhci_hcd vhci_hcd.0: Device attached [ 109.894195][ T6203] vhci_hcd: connection closed [ 109.898376][ T13] vhci_hcd: stop threads [ 109.916995][ T13] vhci_hcd: release socket [ 109.921546][ T13] vhci_hcd: disconnect device [ 110.713731][ T928] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 110.812931][ T5906] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.873105][ T928] usb 3-1: Using ep0 maxpacket: 8 [ 110.887171][ T928] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.902089][ T928] usb 3-1: config 1 interface 0 altsetting 129 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.919850][ T928] usb 3-1: config 1 interface 0 has no altsetting 0 [ 110.947032][ T928] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.964792][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.978136][ T928] usb 3-1: Product: syz [ 110.982629][ T928] usb 3-1: Manufacturer: syz [ 110.991966][ T928] usb 3-1: SerialNumber: syz [ 111.022956][ T5906] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.033348][ T5906] usb 2-1: config 0 has no interfaces? [ 111.038900][ T5906] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.048071][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.061640][ T5906] usb 2-1: config 0 descriptor?? [ 111.223858][ T928] usb 3-1: bad CDC descriptors [ 111.241472][ T928] usb 3-1: USB disconnect, device number 9 [ 111.285105][ T6211] warning: `syz.1.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.673736][ T928] usb 1-1: USB disconnect, device number 4 [ 111.885159][ T6216] Bluetooth: MGMT ver 1.23 [ 112.111269][ T5934] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 112.146329][ T5934] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 112.194563][ T5934] asix 4-1:0.0: probe with driver asix failed with error -71 [ 113.062058][ T5934] usb 4-1: USB disconnect, device number 7 [ 113.685019][ T850] usb 2-1: USB disconnect, device number 5 [ 113.759906][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.96'. [ 113.777940][ T6248] openvswitch: netlink: Missing key (keys=40, expected=100) [ 113.967921][ T6254] comedi: valid board names for 8255 driver are: [ 113.980260][ T6254] 8255 [ 113.983655][ T6254] comedi: valid board names for vmk80xx driver are: [ 113.990492][ T6254] vmk80xx [ 114.000141][ T6254] comedi: valid board names for usbduxsigma driver are: [ 114.007642][ T6254] usbduxsigma [ 114.011131][ T6254] comedi: valid board names for usbduxfast driver are: [ 114.018775][ T6254] usbduxfast [ 114.022567][ T6254] comedi: valid board names for usbdux driver are: [ 114.034544][ T6254] usbdux [ 114.037628][ T6254] comedi: valid board names for ni6501 driver are: [ 114.045647][ T6254] ni6501 [ 114.048722][ T6254] comedi: valid board names for dt9812 driver are: [ 114.058480][ T6254] dt9812 [ 114.061575][ T6254] comedi: valid board names for ni_labpc_cs driver are: [ 114.070393][ T6254] ni_labpc_cs [ 114.079576][ T6254] comedi: valid board names for ni_daq_700 driver are: [ 114.090298][ T6254] ni_daq_700 [ 114.094217][ T6254] comedi: valid board names for labpc_pci driver are: [ 114.101332][ T6254] labpc_pci [ 114.143452][ T6254] comedi: valid board names for adl_pci9118 driver are: [ 114.162221][ T6254] pci9118dg [ 114.182513][ T6254] pci9118hg [ 114.193002][ T6254] pci9118hr [ 114.196304][ T6254] comedi: valid board names for 8255_pci driver are: [ 114.227527][ T6254] 8255_pci [ 114.243521][ T6254] comedi: valid board names for s526 driver are: [ 114.269786][ T6254] s526 [ 114.280262][ T6259] /dev/rnullb0: Can't open blockdev [ 114.291198][ T6254] comedi: valid board names for multiq3 driver are: [ 114.311608][ T6254] multiq3 [ 114.321971][ T6261] /dev/rnullb0: Can't open blockdev [ 114.322509][ T6254] comedi: valid board names for pcmuio driver are: [ 114.344952][ T6254] pcmuio48 [ 114.348374][ T6254] pcmuio96 [ 114.352726][ T6254] comedi: valid board names for pcmmio driver are: [ 114.374873][ T6254] pcmmio [ 114.377906][ T6254] comedi: valid board names for pcmda12 driver are: [ 114.399383][ T6254] pcmda12 [ 114.402585][ T6254] comedi: valid board names for pcmad driver are: [ 114.417615][ T6254] pcmad12 [ 114.420805][ T6254] pcmad16 [ 114.427843][ T6254] comedi: valid board names for ni_labpc driver are: [ 114.439187][ T6254] lab-pc-1200 [ 114.442631][ T6254] lab-pc-1200ai [ 114.451393][ T6254] lab-pc+ [ 114.457757][ T6254] comedi: valid board names for atmio16 driver are: [ 114.467528][ T6254] atmio16 [ 114.470615][ T6254] atmio16d [ 114.487690][ T6254] comedi: valid board names for ni_at_ao driver are: [ 114.512954][ T6254] at-ao-6 [ 114.516170][ T6254] at-ao-10 [ 114.519324][ T6254] comedi: valid board names for ni_at_a2150 driver are: [ 114.546845][ T6254] ni_at_a2150 [ 114.560749][ T6254] comedi: valid board names for adq12b driver are: [ 114.568600][ T6254] adq12b [ 114.571643][ T6254] comedi: valid board names for mpc624 driver are: [ 114.578858][ T6254] mpc624 [ 114.581850][ T6254] comedi: valid board names for c6xdigio driver are: [ 114.589243][ T6254] c6xdigio [ 114.592958][ T850] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 114.601120][ T6254] comedi: valid board names for aio_iiro_16 driver are: [ 114.608509][ T6254] aio_iiro_16 [ 114.612056][ T6254] comedi: valid board names for aio_aio12_8 driver are: [ 114.624720][ T6268] /dev/rnullb0: Can't open blockdev [ 114.630370][ T6254] aio_aio12_8 [ 114.634441][ T6254] aio_ai12_8 [ 114.640115][ T6254] aio_ao12_4 [ 114.649140][ T6254] comedi: valid board names for fl512 driver are: [ 114.656054][ T6254] fl512 [ 114.659165][ T6254] comedi: valid board names for dmm32at driver are: [ 114.666590][ T6254] dmm32at [ 114.669746][ T6254] comedi: valid board names for dt282x driver are: [ 114.678334][ T6254] dt2821 [ 114.681414][ T6254] dt2821-f [ 114.685104][ T6254] dt2821-g [ 114.688304][ T6254] dt2823 [ 114.691278][ T6254] dt2824-pgh [ 114.695199][ T6254] dt2824-pgl [ 114.698531][ T6254] dt2825 [ 114.701499][ T6254] dt2827 [ 114.705004][ T6254] dt2828 [ 114.707975][ T6254] dt2829 [ 114.710940][ T6254] dt21-ez [ 114.714729][ T6254] dt23-ez [ 114.717792][ T6254] dt24-ez [ 114.720910][ T6254] dt24-ez-pgl [ 114.724970][ T6254] comedi: valid board names for dt2817 driver are: [ 114.731552][ T6254] dt2817 [ 114.734994][ T6254] comedi: valid board names for dt2815 driver are: [ 114.744953][ T6254] dt2815 [ 114.747949][ T6254] comedi: valid board names for dt2814 driver are: [ 114.755007][ T6254] dt2814 [ 114.757995][ T6254] comedi: valid board names for dt2811 driver are: [ 114.765003][ T6254] dt2811-pgh [ 114.768381][ T6254] dt2811-pgl [ 114.771729][ T6254] comedi: valid board names for dt2801 driver are: [ 114.773426][ T850] usb 1-1: Using ep0 maxpacket: 32 [ 114.779054][ T6254] dt2801 [ 114.787181][ T6254] comedi: valid board names for das6402 driver are: [ 114.797480][ T6254] das6402-12 [ 114.800830][ T6254] das6402-16 [ 114.805180][ T6254] comedi: valid board names for das1800 driver are: [ 114.811815][ T6254] das-1701st [ 114.815597][ T6254] das-1701st-da [ 114.819234][ T6254] das-1702st [ 114.820908][ T850] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 114.822539][ T6254] das-1702st-da [ 114.838707][ T850] usb 1-1: config 0 has no interface number 0 [ 114.847116][ T6254] das-1702hr [ 114.851624][ T6254] das-1702hr-da [ 114.854527][ T850] usb 1-1: config 0 interface 67 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 114.855974][ T6254] das-1701ao [ 114.870711][ T6254] das-1702ao [ 114.874608][ T6254] das-1801st [ 114.879389][ T6254] das-1801st-da [ 114.885877][ T6254] das-1802st [ 114.889627][ T850] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 114.890349][ T6254] das-1802st-da [ 114.899967][ T850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.903335][ T6254] das-1802hr [ 114.912553][ T850] usb 1-1: Product: syz [ 114.918997][ T6254] das-1802hr-da [ 114.921087][ T850] usb 1-1: Manufacturer: syz [ 114.922619][ T6254] das-1801hc [ 114.922631][ T6254] das-1802hc [ 114.922640][ T6254] das-1801ao [ 114.922649][ T6254] das-1802ao [ 114.922659][ T6254] comedi: valid board names for das800 driver are: [ 114.927669][ T850] usb 1-1: SerialNumber: syz [ 114.933613][ T850] usb 1-1: config 0 descriptor?? [ 114.946279][ T6254] das-800 [ 114.961633][ T6254] cio-das800 [ 114.965391][ T6254] das-801 [ 114.968445][ T6254] cio-das801 [ 114.971989][ T6254] das-802 [ 114.975239][ T850] smsc95xx v2.0.0 [ 114.975939][ T6254] cio-das802 [ 114.982334][ T6254] cio-das802/16 [ 114.986178][ T6254] comedi: valid board names for isa-das08 driver are: [ 114.993052][ T6254] isa-das08 [ 114.996314][ T6254] das08-pgm [ 114.999535][ T6254] das08-pgh [ 115.003603][ T6254] das08-pgl [ 115.006867][ T6254] das08-aoh [ 115.010106][ T6254] das08-aol [ 115.013405][ T6254] das08-aom [ 115.016647][ T6254] das08/jr-ao [ 115.020046][ T6254] das08jr-16-ao [ 115.024831][ T6254] pc104-das08 [ 115.028286][ T6254] das08jr/16 [ 115.031623][ T6254] comedi: valid board names for das16m1 driver are: [ 115.039064][ T6254] das16m1 [ 115.042229][ T6254] comedi: valid board names for dac02 driver are: [ 115.051426][ T6254] dac02 [ 115.055480][ T6254] comedi: valid board names for rti802 driver are: [ 115.062082][ T6254] rti802 [ 115.065660][ T6254] comedi: valid board names for rti800 driver are: [ 115.072281][ T6254] rti800 [ 115.075467][ T6254] rti815 [ 115.078472][ T6254] comedi: valid board names for pcm3724 driver are: [ 115.085197][ T6254] pcm3724 [ 115.088264][ T6254] comedi: valid board names for pcl818 driver are: [ 115.094844][ T6254] pcl818l [ 115.097958][ T6254] pcl818h [ 115.101030][ T6254] pcl818hd [ 115.104346][ T6254] pcl818hg [ 115.107507][ T6254] pcl818 [ 115.110461][ T6254] pcl718 [ 115.113552][ T6254] pcm3718 [ 115.116640][ T6254] comedi: valid board names for pcl816 driver are: [ 115.123268][ T6254] pcl816 [ 115.123454][ T5934] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.126249][ T6254] pcl814b [ 115.138325][ T6254] comedi: valid board names for pcl812 driver are: [ 115.145213][ T6254] pcl812 [ 115.148631][ T6254] pcl812pg [ 115.151816][ T6254] acl8112pg [ 115.155151][ T6254] acl8112dg [ 115.158417][ T6254] acl8112hg [ 115.161660][ T6254] a821pgl [ 115.164906][ T6254] a821pglnda [ 115.168232][ T6254] a821pgh [ 115.171301][ T6254] a822pgl [ 115.174561][ T6254] a822pgh [ 115.177784][ T6254] a823pgl [ 115.180882][ T6254] a823pgh [ 115.184182][ T6254] pcl813 [ 115.187141][ T6254] pcl813b [ 115.190215][ T6254] acl8113 [ 115.195878][ T6254] iso813 [ 115.198900][ T6254] acl8216 [ 115.201957][ T6254] a826pg [ 115.205004][ T6254] comedi: valid board names for pcl730 driver are: [ 115.211556][ T6254] pcl730 [ 115.214598][ T6254] iso730 [ 115.217585][ T6254] acl7130 [ 115.220633][ T6254] pcm3730 [ 115.223796][ T6254] pcl725 [ 115.226778][ T6254] p8r8dio [ 115.229828][ T6254] acl7225b [ 115.233014][ T6254] p16r16dio [ 115.236253][ T6254] pcl733 [ 115.239209][ T6254] pcl734 [ 115.242163][ T6254] opmm-1616-xt [ 115.245716][ T6254] pearl-mm-p [ 115.249059][ T6254] ir104-pbf [ 115.252669][ T6254] comedi: valid board names for pcl726 driver are: [ 115.259330][ T6254] pcl726 [ 115.262310][ T6254] pcl727 [ 115.265367][ T6254] pcl728 [ 115.268350][ T6254] acl6126 [ 115.271401][ T6254] acl6128 [ 115.274531][ T6254] comedi: valid board names for pcl724 driver are: [ 115.281085][ T6254] pcl724 [ 115.284268][ T6254] pcl722 [ 115.287253][ T6254] pcl731 [ 115.290243][ T6254] acl7122 [ 115.293377][ T6254] acl7124 [ 115.296529][ T6254] pet48dio [ 115.299676][ T6254] pcmio48 [ 115.302741][ T6254] onyx-mm-dio [ 115.306219][ T5934] usb 2-1: Using ep0 maxpacket: 8 [ 115.311453][ T6254] comedi: valid board names for pcl711 driver are: [ 115.319316][ T5934] usb 2-1: config 0 has an invalid interface number: 201 but max is 0 [ 115.319365][ T6254] pcl711 [ 115.331059][ T6254] pcl711b [ 115.333523][ T5934] usb 2-1: config 0 has no interface number 0 [ 115.334248][ T6254] acl8112hg [ 115.344007][ T6254] acl8112dg [ 115.346140][ T5934] usb 2-1: New USB device found, idVendor=10b8, idProduct=0bb9, bcdDevice=56.29 [ 115.347293][ T6254] comedi: valid board names for amplc_pc263 driver are: [ 115.364665][ T6254] pc263 [ 115.366602][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.367678][ T6254] comedi: valid board names for amplc_pc236 driver are: [ 115.376628][ T5934] usb 2-1: Product: syz [ 115.383585][ T6254] pc36at [ 115.388944][ T5934] usb 2-1: Manufacturer: syz [ 115.390256][ T850] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 115.398299][ T5934] usb 2-1: SerialNumber: syz [ 115.406180][ T6254] comedi: valid board names for amplc_dio200 driver are: [ 115.417463][ T6254] pc212e [ 115.418065][ T850] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.421906][ T5934] usb 2-1: config 0 descriptor?? [ 115.431164][ T6254] pc214e [ 115.440587][ T6254] pc215e [ 115.444208][ T6254] pc218e [ 115.447357][ T6254] pc272e [ 115.450343][ T6254] comedi: valid board names for comedi_parport driver are: [ 115.458084][ T6254] comedi_parport [ 115.461786][ T6254] comedi: valid board names for comedi_test driver are: [ 115.470285][ T6254] comedi_test [ 115.473822][ T6254] comedi: valid board names for comedi_bond driver are: [ 115.480813][ T6254] comedi_bond [ 115.569560][ T6273] random: crng reseeded on system resumption [ 115.677466][ T5934] dvb-usb: found a 'DiBcom USB1.1 DVB-T reference design (MOD3000)' in warm state. [ 115.687284][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 115.715868][ T5934] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 115.726858][ T5934] dvbdev: DVB: registering new adapter (DiBcom USB1.1 DVB-T reference design (MOD3000)) [ 115.736883][ T5934] usb 2-1: media controller created [ 115.765045][ T5934] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 115.788688][ T5934] dvb-usb: bulk message failed: -22 (6/0) [ 115.795573][ T5934] dvb-usb: no frontend was attached by 'DiBcom USB1.1 DVB-T reference design (MOD3000)' [ 115.809762][ T5934] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 115.825467][ T5934] dvb-usb: schedule remote query interval to 150 msecs. [ 115.832535][ T5934] dvb-usb: bulk message failed: -22 (3/0) [ 115.852859][ T5934] dvb-usb: DiBcom USB1.1 DVB-T reference design (MOD3000) successfully initialized and connected. [ 115.863084][ T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 115.873600][ T5934] usb 2-1: USB disconnect, device number 6 [ 115.920683][ T5934] dvb-usb: DiBcom USB1.1 DVB-T reference design (M successfully deinitialized and disconnected. [ 116.037312][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 116.049531][ T9] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 116.058716][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.071037][ T9] usb 4-1: config 0 descriptor?? [ 116.509734][ T9] uclogic 0003:5543:0522.0002: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.3-1/input0 [ 116.562963][ T5934] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.699965][ T6275] /dev/rnullb0: Can't open blockdev [ 116.708729][ T9] usb 4-1: USB disconnect, device number 8 [ 116.739356][ T5934] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 116.750803][ T5934] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 116.761289][ T5934] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.772217][ T5934] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.785199][ T6283] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.800571][ T5934] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.006055][ T5934] usb 2-1: USB disconnect, device number 7 [ 117.461982][ T6245] cgroup: subsys name conflicts with all [ 117.973319][ T850] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 118.016554][ T850] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 118.080705][ T850] usb 1-1: USB disconnect, device number 5 [ 118.117273][ T6291] syz.3.110 uses obsolete (PF_INET,SOCK_PACKET) [ 118.180096][ T6291] /dev/rnullb0: Can't open blockdev [ 118.315538][ T6293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 118.330533][ T6293] /dev/rnullb0: Can't open blockdev [ 118.707905][ T5906] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.881362][ T6297] /dev/rnullb0: Can't open blockdev [ 118.923071][ T5906] usb 3-1: Using ep0 maxpacket: 32 [ 119.055002][ T6301] /dev/rnullb0: Can't open blockdev [ 119.406944][ T6306] /dev/rnullb0: Can't open blockdev [ 119.427481][ T6306] /dev/rnullb0: Can't open blockdev [ 119.435666][ T6306] /dev/rnullb0: Can't open blockdev [ 119.447170][ T6306] /dev/rnullb0: Can't open blockdev [ 119.458549][ T6306] /dev/rnullb0: Can't open blockdev [ 119.467791][ T6306] /dev/rnullb0: Can't open blockdev [ 119.477723][ T6306] /dev/rnullb0: Can't open blockdev [ 119.494247][ T6306] /dev/rnullb0: Can't open blockdev [ 119.501969][ T6306] /dev/rnullb0: Can't open blockdev [ 119.520946][ T6306] /dev/rnullb0: Can't open blockdev [ 119.530466][ T6306] /dev/rnullb0: Can't open blockdev [ 119.537920][ T6306] /dev/rnullb0: Can't open blockdev [ 119.544973][ T6306] /dev/rnullb0: Can't open blockdev [ 119.551789][ T6306] /dev/rnullb0: Can't open blockdev [ 119.560010][ T6306] /dev/rnullb0: Can't open blockdev [ 119.567773][ T6306] /dev/rnullb0: Can't open blockdev [ 119.574413][ T6306] /dev/rnullb0: Can't open blockdev [ 119.581084][ T6306] /dev/rnullb0: Can't open blockdev [ 119.589417][ T6306] /dev/rnullb0: Can't open blockdev [ 119.596948][ T6306] /dev/rnullb0: Can't open blockdev [ 119.604471][ T6306] /dev/rnullb0: Can't open blockdev [ 119.611131][ T6306] /dev/rnullb0: Can't open blockdev [ 119.619707][ T6306] /dev/rnullb0: Can't open blockdev [ 119.628161][ T6306] /dev/rnullb0: Can't open blockdev [ 119.638499][ T6306] /dev/rnullb0: Can't open blockdev [ 119.646570][ T6306] /dev/rnullb0: Can't open blockdev [ 119.653576][ T5913] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 119.667775][ T6306] /dev/rnullb0: Can't open blockdev [ 119.679356][ T6306] /dev/rnullb0: Can't open blockdev [ 119.686491][ T6306] /dev/rnullb0: Can't open blockdev [ 119.694113][ T6306] /dev/rnullb0: Can't open blockdev [ 119.700799][ T6306] /dev/rnullb0: Can't open blockdev [ 119.708070][ T6306] /dev/rnullb0: Can't open blockdev [ 119.718993][ T6306] /dev/rnullb0: Can't open blockdev [ 119.727366][ T6306] /dev/rnullb0: Can't open blockdev [ 119.736169][ T6306] /dev/rnullb0: Can't open blockdev [ 119.744177][ T6306] /dev/rnullb0: Can't open blockdev [ 119.751014][ T6306] /dev/rnullb0: Can't open blockdev [ 119.765114][ T6306] /dev/rnullb0: Can't open blockdev [ 119.772150][ T6306] /dev/rnullb0: Can't open blockdev [ 119.784115][ T6306] /dev/rnullb0: Can't open blockdev [ 119.791114][ T6306] /dev/rnullb0: Can't open blockdev [ 119.804548][ T6306] /dev/rnullb0: Can't open blockdev [ 119.811309][ T6306] /dev/rnullb0: Can't open blockdev [ 119.824514][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.842453][ T5913] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 119.853884][ T6306] /dev/rnullb0: Can't open blockdev [ 119.862401][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.876088][ T6306] /dev/rnullb0: Can't open blockdev [ 119.886130][ T6306] /dev/rnullb0: Can't open blockdev [ 119.899541][ T6306] /dev/rnullb0: Can't open blockdev [ 119.910781][ T5913] usb 4-1: config 0 descriptor?? [ 119.921579][ T5913] pwc: Askey VC010 type 2 USB webcam detected. [ 119.935022][ T6306] /dev/rnullb0: Can't open blockdev [ 119.941919][ T6306] /dev/rnullb0: Can't open blockdev [ 119.951122][ T6306] /dev/rnullb0: Can't open blockdev [ 119.957747][ T6306] /dev/rnullb0: Can't open blockdev [ 119.967062][ T6306] /dev/rnullb0: Can't open blockdev [ 119.976975][ T6306] /dev/rnullb0: Can't open blockdev [ 119.983776][ T6306] /dev/rnullb0: Can't open blockdev [ 119.989859][ T6306] /dev/rnullb0: Can't open blockdev [ 119.998254][ T6306] /dev/rnullb0: Can't open blockdev [ 120.004446][ T6306] /dev/rnullb0: Can't open blockdev [ 120.010603][ T6306] /dev/rnullb0: Can't open blockdev [ 120.018209][ T6306] /dev/rnullb0: Can't open blockdev [ 120.024390][ T6306] /dev/rnullb0: Can't open blockdev [ 120.030447][ T6306] /dev/rnullb0: Can't open blockdev [ 120.037247][ T6306] /dev/rnullb0: Can't open blockdev [ 120.044905][ T6306] /dev/rnullb0: Can't open blockdev [ 120.051176][ T6306] /dev/rnullb0: Can't open blockdev [ 120.058591][ T6306] /dev/rnullb0: Can't open blockdev [ 120.320671][ T5913] pwc: recv_control_msg error -32 req 02 val 2b00 [ 120.330970][ T5913] pwc: recv_control_msg error -32 req 02 val 2700 [ 120.348290][ T5913] pwc: recv_control_msg error -32 req 02 val 2c00 [ 120.365480][ T5913] pwc: recv_control_msg error -32 req 04 val 1000 [ 120.383338][ T5913] pwc: recv_control_msg error -32 req 04 val 1300 [ 120.398401][ T5913] pwc: recv_control_msg error -32 req 04 val 1400 [ 120.418850][ T5913] pwc: recv_control_msg error -32 req 02 val 2000 [ 120.930415][ T5913] pwc: recv_control_msg error -71 req 04 val 1500 [ 120.949827][ T5913] pwc: recv_control_msg error -71 req 02 val 2500 [ 120.977712][ T5913] pwc: recv_control_msg error -71 req 02 val 2400 [ 120.989955][ T5913] pwc: recv_control_msg error -71 req 02 val 2600 [ 121.067441][ T5913] pwc: recv_control_msg error -71 req 02 val 2900 [ 121.089512][ T5913] pwc: recv_control_msg error -71 req 02 val 2800 [ 121.102118][ T5913] pwc: recv_control_msg error -71 req 04 val 1100 [ 121.131873][ T5913] pwc: recv_control_msg error -71 req 04 val 1200 [ 121.179641][ T5913] pwc: Registered as video103. [ 121.189514][ T5913] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 121.279417][ T5913] usb 4-1: USB disconnect, device number 9 [ 121.522207][ T5906] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.575772][ T5906] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 121.596553][ T5906] usb 3-1: can't read configurations, error -71 [ 122.068228][ T6350] /dev/rnullb0: Can't open blockdev [ 122.485449][ T6355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.126'. [ 122.563364][ T6356] netlink: 60 bytes leftover after parsing attributes in process `syz.3.126'. [ 122.620759][ T6355] netlink: 60 bytes leftover after parsing attributes in process `syz.3.126'. [ 122.729995][ T6362] syz.0.129: attempt to access beyond end of device [ 122.729995][ T6362] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 123.056450][ T6371] /dev/rnullb0: Can't open blockdev [ 123.073289][ T5933] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.245657][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.285391][ T5933] usb 4-1: config 13 has an invalid interface number: 50 but max is 3 [ 123.294616][ T5933] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 123.323240][ T5933] usb 4-1: config 13 has 1 interface, different from the descriptor's value: 4 [ 123.355813][ T5933] usb 4-1: config 13 has no interface number 0 [ 123.362140][ T5933] usb 4-1: config 13 interface 50 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.423230][ T5933] usb 4-1: config 13 interface 50 has no altsetting 0 [ 123.447358][ T5933] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=a9.e8 [ 123.462963][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.505808][ T5933] usb 4-1: Product: syz [ 123.510064][ T5933] usb 4-1: Manufacturer: syz [ 123.552915][ T5933] usb 4-1: SerialNumber: syz [ 123.686227][ T6384] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 123.686227][ T6384] The task syz.0.133 (6384) triggered the difference, watch for misbehavior. [ 123.852013][ T49] usb 4-1: Failed to submit usb control message: -71 [ 123.858536][ T5933] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 123.883248][ T5933] usb 4-1: USB disconnect, device number 10 [ 123.910489][ T49] usb 4-1: unable to send the bmi data to the device: -71 [ 123.968924][ T49] usb 4-1: unable to get target info from device [ 124.010854][ T49] usb 4-1: could not get target info (-71) [ 124.033988][ T49] usb 4-1: could not probe fw (-71) [ 124.392366][ T6384] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.420491][ T6384] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 124.530998][ T6384] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.553478][ T6384] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 124.720424][ T6411] /dev/rnullb0: Can't open blockdev [ 124.775242][ T6384] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.790041][ T6384] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 124.809899][ T6411] /dev/rnullb0: Can't open blockdev [ 124.895135][ T6411] /dev/rnullb0: Can't open blockdev [ 124.910089][ T6384] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.930607][ T6411] /dev/rnullb0: Can't open blockdev [ 124.943591][ T6384] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 124.964719][ T6411] /dev/rnullb0: Can't open blockdev [ 124.970778][ T6411] /dev/rnullb0: Can't open blockdev [ 125.011503][ T6411] /dev/rnullb0: Can't open blockdev [ 125.043125][ T6411] /dev/rnullb0: Can't open blockdev [ 125.055809][ T6411] /dev/rnullb0: Can't open blockdev [ 125.064738][ T6411] /dev/rnullb0: Can't open blockdev [ 125.070849][ T6411] /dev/rnullb0: Can't open blockdev [ 125.078047][ T6411] /dev/rnullb0: Can't open blockdev [ 125.105250][ T6411] /dev/rnullb0: Can't open blockdev [ 125.111267][ T6411] /dev/rnullb0: Can't open blockdev [ 125.164616][ T6411] /dev/rnullb0: Can't open blockdev [ 125.170196][ T6419] /dev/rnullb0: Can't open blockdev [ 125.177787][ T6411] /dev/rnullb0: Can't open blockdev [ 125.203799][ T6411] /dev/rnullb0: Can't open blockdev [ 125.209781][ T6411] /dev/rnullb0: Can't open blockdev [ 125.247720][ T6411] /dev/rnullb0: Can't open blockdev [ 125.274683][ T6411] /dev/rnullb0: Can't open blockdev [ 125.294465][ T6411] /dev/rnullb0: Can't open blockdev [ 125.311189][ T6411] /dev/rnullb0: Can't open blockdev [ 125.333653][ T6411] /dev/rnullb0: Can't open blockdev [ 125.348609][ T6411] /dev/rnullb0: Can't open blockdev [ 125.382620][ T6411] /dev/rnullb0: Can't open blockdev [ 125.419396][ T6411] /dev/rnullb0: Can't open blockdev [ 125.435791][ T6411] /dev/rnullb0: Can't open blockdev [ 125.442246][ T6411] /dev/rnullb0: Can't open blockdev [ 125.459557][ T6411] /dev/rnullb0: Can't open blockdev [ 125.469284][ T6411] /dev/rnullb0: Can't open blockdev [ 125.969863][ T6449] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 126.424398][ T6458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.463761][ T6463] /dev/rnullb0: Can't open blockdev [ 126.471974][ T6458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.632202][ T850] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 126.771558][ T6474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.150'. [ 126.783064][ T6475] netlink: 2 bytes leftover after parsing attributes in process `syz.3.152'. [ 126.980879][ T6474] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.023252][ T850] usb 1-1: device descriptor read/64, error -71 [ 127.293382][ T850] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.333109][ T6494] sctp: [Deprecated]: syz.3.155 (pid 6494) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.333109][ T6494] Use struct sctp_sack_info instead [ 127.383939][ T6494] netlink: 'syz.3.155': attribute type 21 has an invalid length. [ 127.391938][ T6494] netlink: 164 bytes leftover after parsing attributes in process `syz.3.155'. [ 127.419209][ T6494] netlink: 40 bytes leftover after parsing attributes in process `syz.3.155'. [ 127.477994][ T850] usb 1-1: Using ep0 maxpacket: 16 [ 127.496301][ T30] audit: type=1326 audit(1754284878.989:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 127.520666][ T850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.552622][ T850] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.577827][ T6502] /dev/rnullb0: Can't open blockdev [ 127.585656][ T30] audit: type=1326 audit(1754284878.989:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 127.593996][ T850] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 127.675954][ T30] audit: type=1326 audit(1754284878.989:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 127.702659][ T30] audit: type=1326 audit(1754284878.989:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 127.716593][ T850] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.734371][ T6504] /dev/rnullb0: Can't open blockdev [ 127.781994][ T30] audit: type=1326 audit(1754284878.989:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 127.815048][ T850] usb 1-1: config 0 descriptor?? [ 127.878851][ T30] audit: type=1326 audit(1754284878.989:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 127.948617][ T6514] /dev/rnullb0: Can't open blockdev [ 127.957059][ T30] audit: type=1326 audit(1754284878.989:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 128.192852][ T30] audit: type=1326 audit(1754284878.989:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 128.290939][ T850] corsair 0003:1B1C:1B02.0003: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 128.292426][ T30] audit: type=1326 audit(1754284878.989:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 128.426418][ T30] audit: type=1326 audit(1754284878.989:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6466 comm="syz.2.149" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06d778eb69 code=0x7fc00000 [ 128.460558][ T6468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.503410][ T6468] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.531064][ T850] corsair 0003:1B1C:1B02.0003: Failed to get K90 initial state (error -71). [ 128.619064][ T850] usb 1-1: USB disconnect, device number 7 [ 128.683861][ T6521] fido_id[6521]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 128.747257][ T6532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.809391][ T6532] bond0: (slave rose0): Enslaving as an active interface with an up link [ 128.963840][ T5932] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 129.165467][ T5932] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.191937][ T5932] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 129.221384][ T5932] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 129.240797][ T5932] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.255570][ T5932] usb 2-1: config 0 descriptor?? [ 129.284597][ T6547] syz.0.167: attempt to access beyond end of device [ 129.284597][ T6547] loop0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 129.340689][ T6547] XFS (loop0): SB validate failed with error -5. [ 129.465738][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.494594][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.520197][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.548642][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.562894][ T5934] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 129.568068][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.607620][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.635579][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.658554][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.693015][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.701875][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.722880][ T5934] usb 3-1: Using ep0 maxpacket: 8 [ 129.734621][ T5934] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 129.751555][ T5934] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 129.761091][ T5934] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 129.788601][ T5934] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 129.852893][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 129.883949][ T5934] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.911408][ T5932] usbhid 2-1:0.0: can't add hid device: -71 [ 129.922793][ T5934] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 129.945312][ T5932] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 129.971288][ T5932] usb 2-1: USB disconnect, device number 8 [ 129.980105][ T5934] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 129.992922][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.021382][ T5934] usb 3-1: Product: syz [ 130.031523][ T5934] usb 3-1: Manufacturer: syz [ 130.052876][ T5934] usb 3-1: SerialNumber: syz [ 130.079358][ T5934] usb 3-1: config 0 descriptor?? [ 130.133505][ T5934] hub 3-1:0.0: bad descriptor, ignoring hub [ 130.160006][ T5934] hub 3-1:0.0: probe with driver hub failed with error -5 [ 130.198674][ T5934] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 130.733822][ T5906] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 130.915166][ T5906] usb 4-1: Using ep0 maxpacket: 8 [ 130.934389][ T5906] usb 4-1: config 1 interface 0 has no altsetting 0 [ 130.962034][ T5906] usb 4-1: New USB device found, idVendor=046d, idProduct=c512, bcdDevice= 0.40 [ 130.990891][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.000964][ T5906] usb 4-1: Product: Э [ 131.007834][ T5906] usb 4-1: Manufacturer: Ѝ [ 131.016431][ T5906] usb 4-1: SerialNumber: 祰⫖ᷪ굙聴ᦶᢈ쟁쏗銷惑暜෡瑛Ͼ똠퓍᧮㨞ᔁ砩翵良넊⭑ࡏ伽㲶pᆿ잏ᱤ탻观㇬颰ᄽ曮⫚ [ 131.476199][ T6581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.512937][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.517941][ T6581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.541105][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.633929][ T5906] usbhid 4-1:1.0: can't add hid device: -71 [ 131.673392][ T5906] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 131.705733][ T5906] usb 4-1: USB disconnect, device number 11 [ 132.134669][ T6617] can0: slcan on ptm0. [ 132.164127][ T6619] /dev/rnullb0: Can't open blockdev [ 132.196546][ T5933] usb 3-1: USB disconnect, device number 12 [ 132.315768][ T6616] can0 (unregistered): slcan off ptm0. [ 132.641504][ T6634] could not allocate digest TFM handle sha224-ce [ 133.135965][ T6648] capability: warning: `syz.1.185' uses deprecated v2 capabilities in a way that may be insecure [ 133.988553][ T6673] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 134.014948][ T6673] /dev/rnullb0: Can't open blockdev [ 134.142937][ T5932] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.340799][ T5932] usb 1-1: Using ep0 maxpacket: 8 [ 134.363275][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 134.388095][ T5932] usb 1-1: config index 0 descriptor too short (expected 256, got 18) [ 134.407652][ T5932] usb 1-1: config 9 has an invalid descriptor of length 167, skipping remainder of the config [ 134.421053][ T5932] usb 1-1: config 9 has 0 interfaces, different from the descriptor's value: 2 [ 134.449926][ T5932] usb 1-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=d8.44 [ 134.465047][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.479041][ T5932] usb 1-1: Product: syz [ 134.486460][ T5932] usb 1-1: Manufacturer: syz [ 134.491298][ T5932] usb 1-1: SerialNumber: syz [ 134.730374][ T6664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.764029][ T6664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.785911][ T6664] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 135.264058][ T5932] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 135.354478][ T5934] usb 1-1: USB disconnect, device number 9 [ 135.444476][ T5932] usb 4-1: Using ep0 maxpacket: 8 [ 135.454658][ T6705] /dev/rnullb0: Can't open blockdev [ 135.476210][ T5932] usb 4-1: unable to get BOS descriptor or descriptor too short [ 135.486027][ T5932] usb 4-1: config 16 interface 0 has no altsetting 0 [ 135.520199][ T5932] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=1a.35 [ 135.549945][ T5932] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.568467][ T5932] usb 4-1: Product: syz [ 135.579666][ T5932] usb 4-1: Manufacturer: syz [ 135.610007][ T5932] usb 4-1: SerialNumber: syz [ 135.840254][ T6699] netlink: 19 bytes leftover after parsing attributes in process `syz.3.194'. [ 135.994746][ T5932] usb 4-1: ucan: probing device on interface #0 [ 136.002326][ T5932] usb 4-1: ucan: invalid endpoint configuration [ 136.003369][ T850] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 136.032998][ T5932] usb 4-1: ucan: probe failed; try to update the device firmware [ 136.105242][ T5932] usb 4-1: USB disconnect, device number 12 [ 136.235187][ T850] usb 3-1: Using ep0 maxpacket: 8 [ 136.246420][ T850] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 136.272971][ T850] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.289590][ T850] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.301696][ T850] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 136.315896][ T850] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.350049][ T850] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.365229][ T850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.591084][ T850] usb 3-1: usb_control_msg returned -32 [ 136.603281][ T5906] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 136.616289][ T850] usbtmc 3-1:16.0: can't read capabilities [ 136.792992][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 136.803344][ T5906] usb 2-1: config 5 has an invalid interface number: 168 but max is 0 [ 136.812208][ T5906] usb 2-1: config 5 has no interface number 0 [ 136.823596][ T5906] usb 2-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 136.838750][ T5906] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x8B has invalid maxpacket 1024 [ 136.851271][ T5906] usb 2-1: config 5 interface 168 altsetting 7 bulk endpoint 0x4 has invalid maxpacket 1023 [ 136.862705][ T5906] usb 2-1: config 5 interface 168 has no altsetting 0 [ 136.873081][ T5906] usb 2-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 136.882720][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.884199][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 136.900876][ T5906] usb 2-1: Product: syz [ 136.905451][ T5906] usb 2-1: Manufacturer: syz [ 136.910093][ T5906] usb 2-1: SerialNumber: syz [ 136.921215][ T6711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.929293][ T6711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 136.948154][ T6746] usbtmc 3-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 137.054687][ T6748] /dev/rnullb0: Can't open blockdev [ 137.083312][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 137.096532][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.117232][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 137.146778][ T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 137.167223][ T5932] usb 3-1: USB disconnect, device number 13 [ 137.169950][ C0] usb 2-1: NFC: Urb failure (status -71) [ 137.185677][ C0] usb 2-1: NFC: Urb failure (status -71) [ 137.197958][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.215650][ T5906] usb 2-1: NFC: Unable to get FW version [ 137.222329][ T6752] /dev/rnullb0: Can't open blockdev [ 137.233481][ T5906] pn533_usb 2-1:5.168: probe with driver pn533_usb failed with error -71 [ 137.244253][ T9] usb 4-1: config 0 descriptor?? [ 137.278807][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 137.290074][ T5906] usb 2-1: USB disconnect, device number 9 [ 137.303084][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 137.327044][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 137.342485][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 137.353247][ T9] usb 4-1: media controller created [ 137.392470][ T6755] /dev/rnullb0: Can't open blockdev [ 137.395142][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.424532][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 137.430690][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 137.442126][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 137.454861][ T6740] dvb-usb: bulk message failed: -22 (4/0) [ 137.468647][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 137.478599][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 137.526490][ T6757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.526930][ T6757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.623014][ T5932] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 137.634400][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 137.640400][ T9] dvb-usb: error while querying for an remote control event. [ 137.762928][ T5932] usb 1-1: device descriptor read/64, error -71 [ 137.807585][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 137.832289][ T9] dvb-usb: error while querying for an remote control event. [ 137.852399][ T6760] /dev/rnullb0: Can't open blockdev [ 138.012857][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 138.013881][ T5932] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 138.018661][ T5906] dvb-usb: error while querying for an remote control event. [ 138.132850][ T5934] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 138.173620][ T5932] usb 1-1: device descriptor read/64, error -71 [ 138.180306][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 138.195558][ T5906] dvb-usb: error while querying for an remote control event. [ 138.236596][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.243422][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.293584][ T5934] usb 3-1: Using ep0 maxpacket: 16 [ 138.299015][ T5932] usb usb1-port1: attempt power cycle [ 138.311574][ T5934] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 138.320914][ T5934] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 138.329379][ T5934] usb 3-1: Product: syz [ 138.333657][ T5934] usb 3-1: Manufacturer: syz [ 138.338306][ T5934] usb 3-1: SerialNumber: syz [ 138.349963][ T5934] usb 3-1: config 0 descriptor?? [ 138.363788][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 138.374013][ T5906] dvb-usb: error while querying for an remote control event. [ 138.445269][ T5933] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 138.533051][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 138.538992][ T5906] dvb-usb: error while querying for an remote control event. [ 138.604941][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 138.616025][ T5933] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 138.626588][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.637833][ T5933] usb 2-1: config 0 descriptor?? [ 138.643283][ T5932] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 138.651861][ T6771] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 138.663572][ T5932] usb 1-1: device descriptor read/8, error -71 [ 138.703289][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 138.709208][ T5906] dvb-usb: error while querying for an remote control event. [ 138.877333][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 138.883811][ T5906] dvb-usb: error while querying for an remote control event. [ 138.912999][ T5932] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 138.944284][ T5932] usb 1-1: device descriptor read/8, error -71 [ 139.043022][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 139.049184][ T5906] dvb-usb: error while querying for an remote control event. [ 139.067016][ T5932] usb usb1-port1: unable to enumerate USB device [ 139.075206][ T5933] elan 0003:04F3:0755.0004: unknown main item tag 0x0 [ 139.083659][ T5933] elan 0003:04F3:0755.0004: item fetching failed at offset 3/5 [ 139.091806][ T5933] elan 0003:04F3:0755.0004: Hid Parse failed [ 139.098104][ T5933] elan 0003:04F3:0755.0004: probe with driver elan failed with error -22 [ 139.214631][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 139.220542][ T5906] dvb-usb: error while querying for an remote control event. [ 139.382886][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 139.388792][ T5906] dvb-usb: error while querying for an remote control event. [ 139.552990][ T5906] dvb-usb: bulk message failed: -22 (1/0) [ 139.558914][ T5906] dvb-usb: error while querying for an remote control event. [ 139.619318][ T5933] usb 4-1: USB disconnect, device number 13 [ 139.719057][ T5933] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 139.937883][ T6781] syz.3.212: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 139.957217][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.3.212 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 139.957248][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 139.957265][ T6781] Call Trace: [ 139.957273][ T6781] [ 139.957282][ T6781] dump_stack_lvl+0x189/0x250 [ 139.957320][ T6781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.957350][ T6781] ? __pfx__printk+0x10/0x10 [ 139.957380][ T6781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 139.957410][ T6781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 139.957442][ T6781] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 139.957475][ T6781] warn_alloc+0x214/0x310 [ 139.957504][ T6781] ? __pfx_warn_alloc+0x10/0x10 [ 139.957537][ T6781] ? __get_vm_area_node+0x28f/0x300 [ 139.957579][ T6781] ? packet_set_ring+0x6f4/0x2380 [ 139.957610][ T6781] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 139.957664][ T6781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 139.957687][ T6781] ? alloc_pages_mpol+0x3cd/0x4a0 [ 139.957724][ T6781] ? packet_set_ring+0x6f4/0x2380 [ 139.957751][ T6781] vzalloc_noprof+0xb2/0xf0 [ 139.957771][ T6781] ? packet_set_ring+0x6f4/0x2380 [ 139.957799][ T6781] packet_set_ring+0x6f4/0x2380 [ 139.957850][ T6781] ? __pfx_packet_set_ring+0x10/0x10 [ 139.957899][ T6781] ? _copy_from_user+0x94/0xb0 [ 139.957924][ T6781] packet_setsockopt+0xc5a/0x12c0 [ 139.957954][ T6781] ? __pfx_packet_setsockopt+0x10/0x10 [ 139.957986][ T6781] ? __lock_acquire+0xab9/0xd20 [ 139.958013][ T6781] ? aa_sk_perm+0x81e/0x950 [ 139.958042][ T6781] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.958085][ T6781] ? __fget_files+0x2a/0x420 [ 139.958109][ T6781] ? aa_sock_opt_perm+0xff/0x1b0 [ 139.958138][ T6781] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 139.958165][ T6781] ? __pfx_packet_setsockopt+0x10/0x10 [ 139.958193][ T6781] do_sock_setsockopt+0x17c/0x1b0 [ 139.958222][ T6781] __x64_sys_setsockopt+0x13f/0x1b0 [ 139.958251][ T6781] do_syscall_64+0xfa/0x3b0 [ 139.958270][ T6781] ? lockdep_hardirqs_on+0x9c/0x150 [ 139.958301][ T6781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.958322][ T6781] ? clear_bhb_loop+0x60/0xb0 [ 139.958349][ T6781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.958370][ T6781] RIP: 0033:0x7fef9718eb69 [ 139.958397][ T6781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.958414][ T6781] RSP: 002b:00007fef94ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.958436][ T6781] RAX: ffffffffffffffda RBX: 00007fef973b6160 RCX: 00007fef9718eb69 [ 139.958452][ T6781] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000044 [ 139.958464][ T6781] RBP: 00007fef97211df1 R08: 000000000000001c R09: 0000000000000000 [ 139.958477][ T6781] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 139.958490][ T6781] R13: 0000000000000000 R14: 00007fef973b6160 R15: 00007ffc53579648 [ 139.958524][ T6781] [ 139.958537][ T6781] Mem-Info: [ 140.255434][ T6781] active_anon:6088 inactive_anon:0 isolated_anon:0 [ 140.255434][ T6781] active_file:25760 inactive_file:61814 isolated_file:0 [ 140.255434][ T6781] unevictable:768 dirty:31 writeback:0 [ 140.255434][ T6781] slab_reclaimable:11023 slab_unreclaimable:93797 [ 140.255434][ T6781] mapped:24948 shmem:1363 pagetables:1174 [ 140.255434][ T6781] sec_pagetables:0 bounce:0 [ 140.255434][ T6781] kernel_misc_reclaimable:0 [ 140.255434][ T6781] free:1294096 free_pcp:19651 free_cma:0 [ 140.300852][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.307965][ T6781] Node 0 active_anon:24308kB inactive_anon:0kB active_file:103040kB inactive_file:247052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99776kB dirty:120kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11696kB pagetables:4532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.340130][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.346584][ T6781] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 140.376427][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.386708][ T6781] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.421997][ T6781] lowmem_reserve[]: 0 2496 2497 2497 2497 [ 140.428110][ T6781] Node 0 DMA32 free:1287380kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24164kB inactive_anon:0kB active_file:103040kB inactive_file:245964kB unevictable:1536kB writepending:120kB present:3129332kB managed:2556208kB mlocked:0kB bounce:0kB free_pcp:44520kB local_pcp:23688kB free_cma:0kB [ 140.460557][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.471977][ T6781] lowmem_reserve[]: 0 0 1 1 1 [ 140.477397][ T6781] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1088kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.506391][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.513268][ T6781] lowmem_reserve[]: 0 0 0 0 0 [ 140.518902][ T6781] Node 1 Normal free:3873548kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:34628kB local_pcp:10560kB free_cma:0kB [ 140.550159][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.559733][ T6781] lowmem_reserve[]: 0 0 0 0 0 [ 140.565681][ T6781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.581740][ T6781] Node 0 DMA32: 931*4kB (UME) 778*8kB (UME) 266*16kB (UME) 143*32kB (UME) 92*64kB (UME) 31*128kB (UME) 13*256kB (M) 7*512kB (UM) 3*1024kB (UM) 2*2048kB (ME) 304*4096kB (UM) = 1287900kB [ 140.603985][ T6781] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 140.615900][ T6784] /dev/rnullb0: Can't open blockdev [ 140.618848][ T6781] Node 1 Normal: 41*4kB (UM) 5*8kB (ME) 10*16kB (UME) 52*32kB (UME) 23*64kB (UME) 9*128kB (UME) 3*256kB (UE) 3*512kB (UME) 4*1024kB (UME) 2*2048kB (UE) 942*4096kB (M) = 3873580kB [ 140.643129][ T6781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.652960][ T6781] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.669153][ T6781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.678979][ T6781] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.688411][ T6781] 88932 total pagecache pages [ 140.693613][ T6781] 0 pages in swap cache [ 140.700936][ T6781] Free swap = 124996kB [ 140.706596][ T6781] Total swap = 124996kB [ 140.711038][ T6781] 2097051 pages RAM [ 140.718111][ T6781] 0 pages HighMem/MovableOnly [ 140.723380][ T6781] 426101 pages reserved [ 140.727654][ T6781] 0 pages cma reserved [ 140.927688][ T5932] usb 3-1: USB disconnect, device number 14 [ 141.369680][ T5932] usb 2-1: USB disconnect, device number 10 [ 141.394398][ T6806] input: syz1 as /devices/virtual/input/input10 [ 141.751916][ T6816] mkiss: ax0: crc mode is auto. [ 142.032832][ T5932] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 142.204121][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 142.218454][ T5932] usb 3-1: config 15 has an invalid interface number: 107 but max is 0 [ 142.234789][ T5932] usb 3-1: config 15 has no interface number 0 [ 142.248097][ T5932] usb 3-1: config 15 interface 107 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 142.274242][ T5932] usb 3-1: config 15 interface 107 has no altsetting 0 [ 142.296589][ T5932] usb 3-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3 [ 142.316081][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.335181][ T5932] usb 3-1: Product: syz [ 142.345228][ T5932] usb 3-1: Manufacturer: syz [ 142.355517][ T5932] usb 3-1: SerialNumber: syz [ 142.581095][ T6816] /dev/rnullb0: Can't open blockdev [ 142.666376][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.0.226'. [ 142.704276][ T6828] syz.1.227 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 142.725121][ T5932] usb 3-1: USB disconnect, device number 15 [ 142.916475][ T6833] /dev/rnullb0: Can't open blockdev [ 143.000478][ T6835] /dev/rnullb0: Can't open blockdev [ 143.171528][ T6840] /dev/rnullb0: Can't open blockdev [ 143.495238][ T6852] /dev/rnullb0: Can't open blockdev [ 143.723449][ T9] libceph: connect (1)[c::]:6789 error -101 [ 143.733581][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 143.733673][ T6861] netlink: 165 bytes leftover after parsing attributes in process `syz.2.239'. [ 143.744417][ T9] libceph: connect (1)[c::]:6789 error -101 [ 143.755713][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 143.789938][ T9] libceph: connect (1)[c::]:6789 error -101 [ 143.796473][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 143.804720][ T6864] /dev/rnullb0: Can't open blockdev [ 143.815019][ T6856] ceph: No mds server is up or the cluster is laggy [ 143.826019][ T6857] ceph: No mds server is up or the cluster is laggy [ 144.105344][ T6875] netlink: 16 bytes leftover after parsing attributes in process `syz.0.241'. [ 144.242845][ T9] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 144.374943][ T6882] /dev/rnullb0: Can't open blockdev [ 144.392933][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 144.413478][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8 [ 144.423749][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 144.437895][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.447518][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.456764][ T9] usb 2-1: Product: 嵭॒풹冺뭆쫧챒̶䳽鱳얄爵ଓђ与꽭ᖬﶩ㩲ᇖ꽸Α높蹷辟쪍憞⨡Ფ倴䓠￢襘巷ᥓ턋裁ﹶ逻操沾涤㓊豲蹫浼窩ႃ꺏뇱⸌ꡏᴃ｣ꈢ㾟䘪驑兩孕㜛ܹ귫粈麽䞕放ᤗ־솟Ⲅ➼ꥊ᳚늎稛뚗喂ꃵ뽫瑓鍮䌺뱼샓Ͳ䫞ஈ熫녮⩞Ꝫ핧ꠧ箇큙㖥뛲 [ 144.490330][ T9] usb 2-1: Manufacturer: 觋焁츧⅐㖧如벽廽䴛鄅犞䔷皖౧寅딻병粳挲좸ﺓ㳃㊧劑딢硥 [ 144.503338][ T9] usb 2-1: SerialNumber: ㊜峃淕湴篬ﲭ岄衈쎿ῥ웒ⵅ莗㾛蕀障崋憺쇾Ⳬ꟞띝ᝮ곋⾝ৌㄼ놻쬞櫘녔砳ꏮ툚ꆷᝎ㝛ᓋ꟞依 [ 144.573533][ T6884] /dev/rnullb0: Can't open blockdev [ 144.756621][ T9] cdc_ncm 2-1:1.0: bind() failure [ 144.772428][ T9] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 144.779460][ T9] cdc_ncm 2-1:1.1: bind() failure [ 144.795730][ T9] usb 2-1: USB disconnect, device number 11 [ 144.952962][ T928] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 145.065762][ T6897] /dev/rnullb0: Can't open blockdev [ 145.104932][ T928] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 145.128278][ T928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 145.153458][ T928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 145.163675][ T928] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.176970][ T928] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.205830][ T928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.226416][ T928] usb 4-1: config 0 descriptor?? [ 145.713755][ T928] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 145.936685][ T6891] /dev/rnullb0: Can't open blockdev [ 145.945058][ T5934] usb 4-1: USB disconnect, device number 14 [ 146.193158][ T6912] [ 146.195569][ T6912] ====================================================== [ 146.202620][ T6912] WARNING: possible circular locking dependency detected [ 146.209688][ T6912] 6.16.0-next-20250731-syzkaller #0 Not tainted [ 146.215955][ T6912] ------------------------------------------------------ [ 146.223006][ T6912] syz.0.253/6912 is trying to acquire lock: [ 146.228932][ T6912] ffff88801b6ff988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove+0x30/0x60 [ 146.238219][ T6912] [ 146.238219][ T6912] but task is already holding lock: [ 146.245608][ T6912] ffff888142f54f28 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 146.255942][ T6912] [ 146.255942][ T6912] which lock already depends on the new lock. [ 146.255942][ T6912] [ 146.266377][ T6912] [ 146.266377][ T6912] the existing dependency chain (in reverse order) is: [ 146.275428][ T6912] [ 146.275428][ T6912] -> #2 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 146.284183][ T6912] lock_acquire+0x120/0x360 [ 146.289258][ T6912] blk_alloc_queue+0x538/0x620 [ 146.294589][ T6912] __blk_mq_alloc_disk+0x15c/0x340 [ 146.300299][ T6912] nbd_dev_add+0x46c/0xae0 [ 146.305285][ T6912] nbd_init+0x168/0x1f0 [ 146.310010][ T6912] do_one_initcall+0x233/0x820 [ 146.315352][ T6912] do_initcall_level+0x104/0x190 [ 146.320870][ T6912] do_initcalls+0x59/0xa0 [ 146.325771][ T6912] kernel_init_freeable+0x334/0x4b0 [ 146.331546][ T6912] kernel_init+0x1d/0x1d0 [ 146.336439][ T6912] ret_from_fork+0x3fc/0x770 [ 146.341600][ T6912] ret_from_fork_asm+0x1a/0x30 [ 146.346945][ T6912] [ 146.346945][ T6912] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 146.354202][ T6912] lock_acquire+0x120/0x360 [ 146.359266][ T6912] fs_reclaim_acquire+0x72/0x100 [ 146.364766][ T6912] kmem_cache_alloc_lru_noprof+0x49/0x3d0 [ 146.371059][ T6912] alloc_inode+0xb8/0x1b0 [ 146.375953][ T6912] iget_locked+0xf0/0x570 [ 146.380857][ T6912] kernfs_get_inode+0x4f/0x780 [ 146.386195][ T6912] kernfs_get_tree+0x5a9/0x920 [ 146.391528][ T6912] sysfs_get_tree+0x46/0x110 [ 146.396697][ T6912] vfs_get_tree+0x92/0x2b0 [ 146.401687][ T6912] do_new_mount+0x2a2/0x9e0 [ 146.406755][ T6912] __se_sys_mount+0x317/0x410 [ 146.411999][ T6912] do_syscall_64+0xfa/0x3b0 [ 146.417066][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.423524][ T6912] [ 146.423524][ T6912] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 146.431570][ T6912] validate_chain+0xb9b/0x2140 [ 146.436904][ T6912] __lock_acquire+0xab9/0xd20 [ 146.442142][ T6912] lock_acquire+0x120/0x360 [ 146.447203][ T6912] down_write+0x96/0x1f0 [ 146.452008][ T6912] kernfs_remove+0x30/0x60 [ 146.456979][ T6912] __kobject_del+0xe1/0x300 [ 146.462046][ T6912] kobject_del+0x45/0x60 [ 146.466848][ T6912] elevator_change_done+0xef/0x540 [ 146.472516][ T6912] elevator_change+0x332/0x450 [ 146.477858][ T6912] elevator_set_none+0x42/0xb0 [ 146.483191][ T6912] blk_mq_update_nr_hw_queues+0x72c/0x19a0 [ 146.489567][ T6912] nbd_start_device+0x17f/0xb10 [ 146.494997][ T6912] nbd_ioctl+0x636/0xeb0 [ 146.499809][ T6912] blkdev_ioctl+0x5a5/0x6d0 [ 146.504877][ T6912] __se_sys_ioctl+0xfc/0x170 [ 146.510042][ T6912] do_syscall_64+0xfa/0x3b0 [ 146.515101][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.521553][ T6912] [ 146.521553][ T6912] other info that might help us debug this: [ 146.521553][ T6912] [ 146.531835][ T6912] Chain exists of: [ 146.531835][ T6912] &root->kernfs_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#50 [ 146.531835][ T6912] [ 146.545798][ T6912] Possible unsafe locking scenario: [ 146.545798][ T6912] [ 146.553281][ T6912] CPU0 CPU1 [ 146.558683][ T6912] ---- ---- [ 146.564083][ T6912] lock(&q->q_usage_counter(io)#50); [ 146.569509][ T6912] lock(fs_reclaim); [ 146.576052][ T6912] lock(&q->q_usage_counter(io)#50); [ 146.583992][ T6912] lock(&root->kernfs_rwsem); [ 146.588842][ T6912] [ 146.588842][ T6912] *** DEADLOCK *** [ 146.588842][ T6912] [ 146.597017][ T6912] 4 locks held by syz.0.253/6912: [ 146.602071][ T6912] #0: ffff888025797188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xa7/0x19a0 [ 146.613541][ T6912] #1: ffff8880257970d8 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xba/0x19a0 [ 146.624579][ T6912] #2: ffff888142f54f28 (&q->q_usage_counter(io)#50){++++}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 146.635368][ T6912] #3: ffff888142f54f60 (&q->q_usage_counter(queue)#2){+.+.}-{0:0}, at: nbd_start_device+0x17f/0xb10 [ 146.646319][ T6912] [ 146.646319][ T6912] stack backtrace: [ 146.652236][ T6912] CPU: 0 UID: 0 PID: 6912 Comm: syz.0.253 Not tainted 6.16.0-next-20250731-syzkaller #0 PREEMPT(full) [ 146.652266][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 146.652280][ T6912] Call Trace: [ 146.652288][ T6912] [ 146.652296][ T6912] dump_stack_lvl+0x189/0x250 [ 146.652332][ T6912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.652360][ T6912] ? __pfx__printk+0x10/0x10 [ 146.652390][ T6912] ? print_lock_name+0xde/0x100 [ 146.652418][ T6912] print_circular_bug+0x2ee/0x310 [ 146.652447][ T6912] check_noncircular+0x134/0x160 [ 146.652473][ T6912] validate_chain+0xb9b/0x2140 [ 146.652509][ T6912] __lock_acquire+0xab9/0xd20 [ 146.652533][ T6912] ? kernfs_remove+0x30/0x60 [ 146.652552][ T6912] lock_acquire+0x120/0x360 [ 146.652571][ T6912] ? kernfs_remove+0x30/0x60 [ 146.652596][ T6912] down_write+0x96/0x1f0 [ 146.652618][ T6912] ? kernfs_remove+0x30/0x60 [ 146.652645][ T6912] ? __pfx_down_write+0x10/0x10 [ 146.652665][ T6912] ? kernfs_root+0x1c/0x230 [ 146.652695][ T6912] ? kernfs_root+0x1c/0x230 [ 146.652722][ T6912] ? kernfs_root+0x1c/0x230 [ 146.652750][ T6912] ? kernfs_root+0x1ea/0x230 [ 146.652778][ T6912] kernfs_remove+0x30/0x60 [ 146.652796][ T6912] __kobject_del+0xe1/0x300 [ 146.652815][ T6912] kobject_del+0x45/0x60 [ 146.652832][ T6912] elevator_change_done+0xef/0x540 [ 146.652856][ T6912] elevator_change+0x332/0x450 [ 146.652881][ T6912] elevator_set_none+0x42/0xb0 [ 146.652905][ T6912] blk_mq_update_nr_hw_queues+0x72c/0x19a0 [ 146.652942][ T6912] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 146.652981][ T6912] ? __pfx___mutex_lock+0x10/0x10 [ 146.653016][ T6912] nbd_start_device+0x17f/0xb10 [ 146.653052][ T6912] nbd_ioctl+0x636/0xeb0 [ 146.653085][ T6912] ? __pfx_nbd_ioctl+0x10/0x10 [ 146.653121][ T6912] ? __pfx_nbd_ioctl+0x10/0x10 [ 146.653153][ T6912] blkdev_ioctl+0x5a5/0x6d0 [ 146.653178][ T6912] ? __pfx_blkdev_ioctl+0x10/0x10 [ 146.653200][ T6912] ? __fget_files+0x2a/0x420 [ 146.653227][ T6912] ? bpf_lsm_file_ioctl+0x9/0x20 [ 146.653256][ T6912] ? __pfx_blkdev_ioctl+0x10/0x10 [ 146.653279][ T6912] __se_sys_ioctl+0xfc/0x170 [ 146.653313][ T6912] do_syscall_64+0xfa/0x3b0 [ 146.653330][ T6912] ? lockdep_hardirqs_on+0x9c/0x150 [ 146.653361][ T6912] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.653382][ T6912] ? clear_bhb_loop+0x60/0xb0 [ 146.653405][ T6912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.653426][ T6912] RIP: 0033:0x7f7e9cf8eb69 [ 146.653445][ T6912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.653463][ T6912] RSP: 002b:00007f7e9dd9d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.653485][ T6912] RAX: ffffffffffffffda RBX: 00007f7e9d1b6080 RCX: 00007f7e9cf8eb69 [ 146.653501][ T6912] RDX: 0000000000000000 RSI: 000000000000ab03 RDI: 0000000000000005 [ 146.653514][ T6912] RBP: 00007f7e9d011df1 R08: 0000000000000000 R09: 0000000000000000 [ 146.653527][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.653539][ T6912] R13: 0000000000000000 R14: 00007f7e9d1b6080 R15: 00007ffcbe5c6198 [ 146.653562][ T6912] [ 147.075936][ T6912] block nbd0: shutting down sockets