last executing test programs: 10m27.651107609s ago: executing program 3 (id=713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_GROUP={0x6, 0x1, 0x1, 0x0, 0x5}, @NFTA_LOG_QTHRESHOLD={0x6, 0x4, 0x1, 0x0, 0x200}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x4008000}, 0xf5ff) 10m27.492186007s ago: executing program 3 (id=715): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) syz_open_dev$sndpcmp(0x0, 0xe6, 0x103800) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) dup3(r5, r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) syz_usb_control_io(r1, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x7, 0x202812, r0, 0x7dfff000) 10m25.74459347s ago: executing program 3 (id=725): clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x3, 0x2, 0x4, 0x2000, 0x800, {r0, r1/1000+60000}, {0x2, 0x0, 0x0, 0x13, 0x4a, 0x98, "f7dfd1ba"}, 0x7, 0x4, {0xffffffffffffffff}, 0x80}) ioctl$VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000140)=@multiplanar_fd={0xff, 0xb, 0x4, 0x100, 0x3, {0x0, 0x2710}, {0x1, 0x0, 0x6, 0x8, 0x9, 0x8, "6a9d4b3e"}, 0x0, 0x4, {&(0x7f00000000c0)=[{0x2, 0x3013, {0xffffffffffffffff}}, {0x5, 0xe, {r2}, 0x8}]}, 0x3}) r4 = syz_usb_connect$uac1(0x5, 0x9f, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x2, 0x90, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xf4a0, 0x7f}, [@feature_unit={0x11, 0x24, 0x6, 0x6, 0x5, 0x5, [0x6, 0xa, 0x4, 0x3, 0x9], 0x50}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x9, 0x3, 0x4f, "cb3a0096"}, @as_header={0x7, 0x24, 0x1, 0x1, 0xfe}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x1, 0x40, 0x7, {0x7, 0x25, 0x1, 0x1, 0x31, 0x400}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0xb, "f9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x4, 0x6b, 0xde, {0x7, 0x25, 0x1, 0x80, 0x2, 0xe5}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x7, 0x8, 0x5, 0x40, 0x9}, 0x5c, &(0x7f00000002c0)={0x5, 0xf, 0x5c, 0x6, [@ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x41, 0xf01e, 0x3, [0xff0000, 0xf, 0xf]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x5, 0xb, 0xffff, 0x5}, @generic={0x2b, 0x10, 0x3, "9ac05fd2fb66449f914ddb256c209f7c1ed11aff2513419e74116270f3ef518f307fb381d10d76bc"}, @ptm_cap={0x3}, @ptm_cap={0x3}]}, 0x5, [{0x35, &(0x7f0000000340)=@string={0x35, 0x3, "b11aa233a964662194ce3ecc50d755b2cbd8b70afd49cda5f3d59b12461d4073338d42ab392a7ee364a21a4a317392eea75074"}}, {0x71, &(0x7f0000000380)=@string={0x71, 0x3, "116d27cad61a632b77af243594743fa01e6dac1f481ae5afbf2f03ef715495eee056dba4d9f17907f53f94e571a39d98d1588aa0f8f9a9d94f3ef4bca2f69ad3166f5b01d6bc2d24ab21e0dc47c2ec616d8b3d822c2e579f5d2bb59ff9082983b2a5f02b77561d486fbe372af3fd47"}}, {0x3, &(0x7f0000000400)=@string={0x3, 0x3, '4'}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x421}}]}) syz_usb_control_io$uac1(r4, &(0x7f0000000600)={0x14, &(0x7f0000000540)={0x0, 0xa, 0x5d, {0x5d, 0x31, "de7bcb4cbcae91cf32e8a07455a7c8d6e739819ef10db00ebf92d8875fc21268b591a154be66a9da4819d02260dfde2e56f8c08abe4615b32424e41ae80b40ecec663092ef013c97161c82e5dc334040b618f9176182f68d783483"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000840)={0x44, &(0x7f0000000640)={0x40, 0x0, 0x1d, "4f6c909f1d9878de14f226bff9627f575151f7c0bc9a6ff82ce3bcf0bf"}, &(0x7f0000000680)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000700)={0x20, 0x81, 0x3, "1a9a32"}, &(0x7f0000000740)={0x20, 0x82, 0x2, "b3f7"}, &(0x7f0000000780)={0x20, 0x83, 0x1, '\t'}, &(0x7f00000007c0)={0x20, 0x84, 0x4, "3e1ee32e"}, &(0x7f0000000800)={0x20, 0x85, 0x3, "cafce8"}}) io_setup(0x401, &(0x7f00000008c0)=0x0) io_pgetevents(r5, 0x6, 0x4, &(0x7f0000000900)=[{}, {}, {}, {}], 0x0, &(0x7f00000009c0)={&(0x7f0000000980), 0x8}) syz_usb_ep_write(r4, 0xf5, 0xce, &(0x7f0000000a00)="202624799613cdf6af947a8588b24719b451359ecf0cced910c7c40ed09632be9873165bf1e3583af50ef5c89b48ecba5690ba0088a36da861f20f9f6ef44e1124e9c0593d168265a74fb687b221e87e94252b0e727cb7cdda24a9c8c76cfe3391f8c3321f6afad7b9c5cbcac3b9dd10258a8ade7aadf671f5b013f4e2383360f65f85d50ed535a41921f7fdf8d5757fd23e91a9db4f08e1784e2ae233d8225f6e7c1fd8a9476c8f5ba2da446c75277e6a5f26c73092794374e573eaef926ad658eb2beab11827ab8e233580c91d") newfstatat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x400) syz_usb_control_io$uac1(r4, &(0x7f0000000d00)={0x14, &(0x7f0000000bc0)={0x20, 0xb, 0xb7, {0xb7, 0x9, "2d174263a543cba48a23d8cd433d7559ca5494a72ff76a4ea378b1c5728fbda646ee8837287f4c1a2f23ac36758c39f28431a7a1569383932c23b19987203af89721c494c2a471706cfb80e578dec1b518202939926b3b9b85d164f4cce5eeda25440c5ad49d638d6ab2910c1b845034799dec6ba712eb66120dc40fefcdfbca0aa1653f1f6b81b4f75e0c29cf875d043188889a53a54b9b168801d993747e0fec33f1195ed7b3a4d6caff1b672164bb069c3344cb"}}, &(0x7f0000000c80)={0x0, 0x3, 0x5c, @string={0x5c, 0x3, "adb2c7aa8403a67724bf209fb5683483593d29b38806bca869d922e8442ac9e01ddbb33592cc83ba010bd036aef9eb787867f939409d4424f115d62ffc39cd2b01595b5c3dd8c7fd73a0af2f32d8c5adcb03562b63adac5ffbd6"}}}, &(0x7f0000001000)={0x44, &(0x7f0000000d40)={0x0, 0x8, 0xdd, "087277d680f405346e759a2e2a63881457edbd9cb3ff715393c514ba5271c5a23ab51c6f23987da8c2183747ea8e21370c55b4cb774e3e6e9665cde1cab3d7b5dade7d06483e5bc2aa4bfa0899dc9e6e9fc9950d1cb717de9f506118e95d60fc3eabbd02dad184da2968b6f24808f1d9ff6a01880b25d744b25e94cd3c2fbff64027f78ea1b66f85d7e23ef016d9265ea3baa43a465648ca01d971971fef3edfaf65fab0ca71aa080e07cc1cc2813dc97241e779feb0daf3bf61d3eb1f247eb7d09c4c1155493b894eb62bb1e8d9abed7ab8f9e145b580387d2253b601"}, &(0x7f0000000e40)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000e80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000ec0)={0x20, 0x81, 0x3, "ec997a"}, &(0x7f0000000f00)={0x20, 0x82, 0x3, "d6ad9c"}, &(0x7f0000000f40)={0x20, 0x83, 0x2, "96cf"}, &(0x7f0000000f80)={0x20, 0x84, 0x1, 'I'}, &(0x7f0000000fc0)={0x20, 0x85, 0x3, "4faf26"}}) rt_sigpending(&(0x7f0000001080), 0x8) r6 = dup(r3) ppoll(&(0x7f00000010c0)=[{r6, 0x9308}, {r3, 0x42c0}, {0xffffffffffffffff, 0x224}], 0x3, &(0x7f0000001100)={0x77359400}, &(0x7f0000001140)={[0xffffffffffffffff]}, 0x8) accept4$ax25(r6, &(0x7f0000001180)={{}, [@remote, @null, @default, @null, @null, @default, @null, @default]}, &(0x7f0000001200)=0x48, 0x80000) recvmsg$can_bcm(r6, &(0x7f0000003680)={&(0x7f0000001240)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002600)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/204, 0xcc}, {&(0x7f00000023c0)=""/154, 0x9a}, {&(0x7f0000002480)=""/140, 0x8c}, {&(0x7f0000002540)=""/177, 0xb1}], 0x5, &(0x7f0000002680)=""/4096, 0x1000}, 0x2123) getsockopt$TIPC_IMPORTANCE(r6, 0x10f, 0x7f, &(0x7f00000036c0), &(0x7f0000003700)=0x4) clock_getres(0x3, &(0x7f0000003740)) r7 = socket$nl_rdma(0x10, 0x3, 0x14) tee(r2, r7, 0x5, 0x2) setsockopt$IP_VS_SO_SET_TIMEOUT(r6, 0x0, 0x48a, &(0x7f0000003780)={0xffff, 0x9, 0x6}, 0xc) syz_usb_control_io$uac1(r4, &(0x7f00000038c0)={0x14, &(0x7f00000037c0)={0xaf9c3d4ffbcc6645, 0x3, 0x7c, {0x7c, 0xf, "c1578e6877cb50490e9ee8ed4d547979b472a513cb8a7a009f90185e177f1c47c04f24e90316c0c0c30ada644f78ac67525fa4f437ea28399278a12666a722be9d8102a12500e68ce4d447ff7d5f9e35010babf9b4b3614bbd26de534750a787891ce7de200aad2082103ea309668b4a303a6d78d3f75a9894b6"}}, &(0x7f0000003880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x448}}}, &(0x7f0000003b80)={0x44, &(0x7f0000003900)={0x20, 0x17, 0x7c, "57699a83cf5d28deb48d24a830a965599cd1bb19639bd5b211e94731bb8dd76394045386db612ea632a2816514bdd39d8dfb1d490bc11de8a39fe6f9b3618102b9575883239f29c460b870d1d94f11ad95294f11d5ab8a2b067dc0afafe4866cf5c40d512dacabd48e41dfac039cef141cc8641fb8e3303e0a3c7897"}, &(0x7f00000039c0)={0x0, 0xa, 0x1, 0x2d}, &(0x7f0000003a00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000003a40)={0x20, 0x81, 0x3, "5e1248"}, &(0x7f0000003a80)={0x20, 0x82, 0x2, "8869"}, &(0x7f0000003ac0)={0x20, 0x83, 0x2, '?5'}, &(0x7f0000003b00)={0x20, 0x84, 0x4, "f54315c5"}, &(0x7f0000003b40)={0x20, 0x85, 0x3, "803615"}}) r8 = syz_usb_connect$cdc_ncm(0x4, 0x78, &(0x7f0000003c00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x98, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x66, 0x2, 0x1, 0x2d, 0x70, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "6003"}, {0x5, 0x24, 0x0, 0x1000}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x1, 0x8, 0xa}, {0x6, 0x24, 0x1a, 0xdc86, 0x1a}, [@mbim_extended={0x8, 0x24, 0x1c, 0x1000, 0x8, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x2, 0x6, 0x66}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xd, 0xfc, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0xf, 0x9, 0x3}}}}}}}]}}, &(0x7f0000003e40)={0xa, &(0x7f0000003c80)={0xa, 0x6, 0x310, 0x8, 0xd, 0x0, 0x10, 0x10}, 0x108, &(0x7f0000003cc0)={0x5, 0xf, 0x108, 0x3, [@generic={0xe8, 0x10, 0x3, "d86e7f3bbc41110d3951d781bd23c638ff8aea2931b2fb5b7a6a64d44482f4325ce8dd9c840be8cd29306d5af0dfc72b09903a5121b4d8aec3a66b9d88597aebbd8df7ef83567f1bcb6bd332df4e6b102eab06f4a6d893ea3beacfcb9944d89bed75af17f6c472d5be21e44a25cdc2f8f25f4d76bdf209af0420d6078b5f167c6edc81ee8df4f12151a90b3178c6411e4a65fcc2d104609fe4342ab551f7df8f1339b0b17c1cbbcc7e973d42354080a4ac4ea904bfcd40bc498ec54db39bd719dc39451ed11c01d0ff9f1e3075857f3a2ebf0017b363cd920f4fa01f55d0f252c010bde442"}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "64e843ab45e2b3ca62dd772183fd3e60"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0xc, 0x9}]}, 0x1, [{0x4, &(0x7f0000003e00)=@lang_id={0x4, 0x3, 0x402}}]}) syz_usb_control_io$cdc_ncm(r8, &(0x7f0000003f80)={0x14, &(0x7f0000003e80)={0x40, 0x3, 0xa9, {0xa9, 0x31, "c9837037cdffac962f14fa9e35a830953679a464698fecd49ef560c2de15e80ce7a075dc990504bec1ea3ad5d23df79873ea8683bfe44321e3b372230f7f068d1edad7b79e11238137773bb3273941fe47ccab04e1e86d779cb854fcb2f8860e04cb240b5b50c724e7ce867d1d4d37d4b99e246fc9428ab9a5e4d7df8cfa7319a5e228fd67704dde4edf98a27a8412f087f44088a3f9a354f167aa343f7d09d585f5d7e4d67f50"}}, &(0x7f0000003f40)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004200)={0x44, &(0x7f0000003fc0)={0x0, 0x17, 0x48, "fbcee7856ad5ab08f256d0b1a77b8f2d70a720f613794e3f679d20cbbabe682fce4893ac88d2ef7af3388074ac32b14cc5d0b86da01313a082a40b71ce60f2bfe73353eb94e80573"}, &(0x7f0000004040)={0x0, 0xa, 0x1, 0x80}, &(0x7f0000004080)={0x0, 0x8, 0x1, 0x28}, &(0x7f00000040c0)={0x20, 0x80, 0x1c, {0x6, 0x3, 0xfffffff7, 0xc, 0x6, 0x9, 0x81, 0x401, 0x9, 0xff75, 0xc, 0x5}}, &(0x7f0000004100)={0x20, 0x85, 0x4, 0x8000}, &(0x7f0000004140)={0x20, 0x83, 0x2}, &(0x7f0000004180)={0x20, 0x87, 0x2, 0x2}, &(0x7f00000041c0)={0x20, 0x89, 0x2}}) newfstatat(0xffffffffffffff9c, &(0x7f0000004280)='./file0/file0\x00', &(0x7f00000042c0), 0x6000) mq_timedreceive(r6, &(0x7f0000004340)=""/219, 0xdb, 0x5, &(0x7f0000004440)) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f00000044c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000004480)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000004500)={0x8, 0x120, 0xfa00, {0x2, {0x441, 0x5, "f716fc459142181b34d2de61826a70424dc5c7157d0e5bb96f728b7e2512cc6fa6e7a19bbfc7f743276a6188044d2e7d81e46bc6640c3498c4548144acd1cf7c3a5638a7ced313b83507d804ddb092df3d03453d55f9c35873eca8a5d40542203faf1bad525edbef76aaf3add41d26a94f56f72f69924b8e310e7773074777bd6a6dca78b9bb598ab9ae2412335222c815170386e1319205347bb317061dd8d20c720ab5a8808b059dcd95e622d107d09031174401b5741e0d906f7b5afae15c530fbc514a54f6dcae637e03fd3095e24df1ffc9cccf6e7aaa67f9ef2799f382b7bf830464e0cb94320f1263323f5b0634cc92dcfbf83131f089d1a53bda49cc", 0x1, 0x3, 0xa, 0x7f, 0xc, 0x4, 0x2}, r9}}, 0x128) syz_usb_control_io(r8, &(0x7f00000047c0)={0x2c, &(0x7f0000004640)={0x20, 0x23, 0x6d, {0x6d, 0x21, "04eb6f3dfcdeca1ee386840ea5bbaa25530c4776d70dde8b5a3dfe952a7c8504f239561c00abec8b55632debd3d7594a5761bb6977b805a8544bf01696d74f2f5400d9ca803a34ed36e2a75bbbd9e642ca740a362b438a208c6ec906cb5858cab14b580bd3ece98e8bccdd"}}, &(0x7f00000046c0)={0x0, 0x3, 0x14, @string={0x14, 0x3, "0e2d1b49cdd6945f658ccfa6a8fb166c5638"}}, &(0x7f0000004700)={0x0, 0xf, 0x2d, {0x5, 0xf, 0x2d, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x6, 0x6, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "7b903101cbbcd6e1b445c0835e58924c"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2e135c33053896a7, 0x0, 0x9, 0x3ff}]}}, &(0x7f0000004740)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x2, 0x1, 0x0, "f191db19", "34a62d57"}}, &(0x7f0000004780)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb8, 0x4, 0x7b, 0x5, 0x6, 0x4, 0x4}}}, &(0x7f0000004c80)={0x84, &(0x7f0000004800)={0x0, 0x16, 0xa1, "d6527c4bd98fea677cf5d0479dae7fdcb19f1272056e2e593597d17659623e00e54eaed61a9478ac5f8c77a16b85250b648443c19b0a44ab6d56fd5030c2afa4c738c413b5d22fe12eba87df7701a3fc457a1727772add8baaed7a61700e59ce1b21910058d8573d7bb8e13a8e53837f14ea6b299c3b8f1de87327c98e20c231c81d087e1d9742d95bd909adca4f65f587983bd96097cd2d9111737ff3cb85a2b0"}, &(0x7f00000048c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004900)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000004940)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000004980)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f00000049c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000004a00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000004a40)={0x40, 0xb, 0x2, "ba1c"}, &(0x7f0000004a80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000004ac0)={0x40, 0x13, 0x6}, &(0x7f0000004b00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000004b40)={0x40, 0x19, 0x2, "1753"}, &(0x7f0000004b80)={0x40, 0x1a, 0x2, 0x8}, &(0x7f0000004bc0)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000004c00)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000004c40)={0x40, 0x21, 0x1}}) mq_timedreceive(r6, &(0x7f0000004d40)=""/252, 0xfc, 0x4, &(0x7f0000004e40)) io_destroy(r5) 10m22.699992186s ago: executing program 3 (id=733): mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000040)="a1"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@cache_fscache}, {@aname={'aname', 0x3d, '*'}}, {@access_any}], [], 0x6b}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000080)={0x14, &(0x7f0000000100)={0x20, 0x4, 0xf0, {0xf0, 0x7, "a4770269e075b4b628e6d03ba77784534c67c67f6d5daf56dfb3bc121e3618ce6fd429b923bd8d21b1e037fff6484e1250df9232baa0aee50edf4112c07520ba5088e5bc45ca6bc13b7c5aeebdbab47fceaafc0ab43b6e9449764ed169f014240fbc729de385764c3f768ffe068419152a19f81f8ae68cf5f4213d7afeb701b2fb1af01cf09c7c38761d90771cacd6d31f2c45ddca81a9bb2dc3719cb5150e1c0e95ffa3368efc9f86d258bb47d1cfa49ca857dd20591176d00c38709cbe7206e70405bf76f562e6f3af7bea772d0363338826fff9bdff6ead3fb65b1beb85ed5ab9269b779e0c3c22d865843ddf"}}, &(0x7f00000002c0)={0x0, 0x3, 0x99, @string={0x99, 0x3, "f184b53fe1265a50159c2055637f98cd54a7d725c37129c3dcf0b82dfac61a52ccfb3e6289ca8d1dfb803f7318e5cca737afff28735c57018baa017ee985dd45e5796d17043ef99312b966790b6b819bc00ecbd03b03ce70a85cf65bab736e805d91bada8972eccfc254228c294ebbd98f9320d09f24a2fe115523cd091ffe061786f91ab61ba1604b3f85031a8c52a0825065f2839711"}}}, &(0x7f0000001a00)={0x34, &(0x7f0000000380)={0x40, 0xa, 0x78, "b70a58a312d181fb3fd5a3c510097f2bcea65ee6f49fc68c9eb105daef89e4db1b0ee8a258786c58496e9214c4070f8a86ff3b80ad73eccdce52f961efa840cf4a8d9506cd173e5033e826daae43be874737d7aee0bf5297a2289972f9f3ac4fa1717e5cb585cde66098832c0401d8da720ae35cb2e2cdcf"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001ac0)={0x20, 0x0, 0xfc, {0xfa, "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"}}, &(0x7f0000001980)={0x20, 0x1, 0x1, 0x80}, &(0x7f00000019c0)={0x20, 0x0, 0x1, 0x6}}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYRES64], 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000008c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r6, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x101, 0x9, 0x7, 0x0, 0x0, 0x5}, 0xc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x408, 0x320, 0x220, 0x110, 0x320, 0x320, 0x320, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @local, @private=0xa010102, 0xf}}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @dev={0xac, 0x14, 0x14, 0x2}, @dev={0xac, 0x14, 0x14, 0xf}, 0xf, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "64ca196ce0e9c8517870dfa483245d55a109f15920041b116dfbc5f8cb36"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x458) 10m19.460061313s ago: executing program 3 (id=743): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9d43, 0x0) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x54) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) (async) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x541b, 0x0) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x541b, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) (async) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}}) read$FUSE(r1, &(0x7f00000024c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r3, &(0x7f0000004500)={0x2020}, 0x2020) getpgrp(0xffffffffffffffff) (async) getpgrp(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x90, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) tgkill(r4, r4, 0x67) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008ae05, &(0x7f0000000ac0)=""/4096) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r8, 0xc008ae05, &(0x7f0000000ac0)=""/4096) sendfile(r3, r0, 0x0, 0xfffc) 10m19.271585362s ago: executing program 3 (id=744): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0x4}, {0x4}, 0x0, 0x7}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="5802009400140091d491323b473a0877b61193e169bbc7050478b1541870e4ca1ad9ef7deb81f1753629257f278905000000000000f8feefd73a81000e226c1add024bf752e306d096339c5e", 0x4c}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 10m3.860158671s ago: executing program 32 (id=744): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r3, 0x40383d0c, &(0x7f00000000c0)={{0x4}, {0x4}, 0x0, 0x7}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="5802009400140091d491323b473a0877b61193e169bbc7050478b1541870e4ca1ad9ef7deb81f1753629257f278905000000000000f8feefd73a81000e226c1add024bf752e306d096339c5e", 0x4c}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r1]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 4m43.713953099s ago: executing program 0 (id=3140): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28202, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 4m43.572785863s ago: executing program 0 (id=3141): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_DEVICE_ATTR(r6, 0x5761, 0x0) fcntl$setstatus(r3, 0x4, 0x40800) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x8, 0x0, 0x0, 0xea2}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x5}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x9e, 0x0, 0x0, 0x0, @time={0x1505, 0x1002}, {0x0, 0x3e}, {0x9}, @queue={0x2, {0x7, 0x10001}}}], 0x1c) ioctl$SCSI_IOCTL_GET_PCI(r7, 0x5393, &(0x7f0000000000)) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$eventfd(r8, 0x0, 0x0) ftruncate(r8, 0x2000009) sendfile(r3, r8, 0x0, 0x7ffff004) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x66d, 0x9, 0x9, 0x100, 0x831e}, 0x14) ioctl$sock_netrom_SIOCADDRT(r9, 0x891e, 0x0) sendto$packet(r1, &(0x7f00000000c0)="3f031c00dce0140006001e0088a8", 0xe, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2}, 0x48) creat(&(0x7f0000001380)='./file0\x00', 0x4) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$bt_l2cap(r10, &(0x7f0000000240)={0x1f, 0x4, @any, 0xe0}, 0xe) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 4m43.532875651s ago: executing program 0 (id=3142): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000000780)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a1", 0x10}], 0x1, 0x0, 0x0, 0x20000850}], 0x1, 0x4008090) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000001400)=0xfffffffffffffffb, 0x12) mkdir(&(0x7f0000000000)='./file0\x00', 0x18a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000010105000100000000000000050000090100124000030000"], 0x1c}, 0x1, 0x0, 0x0, 0x4c041}, 0x80) mount(&(0x7f0000001400)=@sg0, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x8008, 0x0) 4m42.624168228s ago: executing program 0 (id=3148): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x18) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00001bc000/0x18000)=nil, &(0x7f0000000340)=[@textreal={0x8, &(0x7f0000000000)="ba6100ec0f20e06635200000000f22e083b20000000f011d0fc7bbf6ff0f32deac95ba210066b82e4e000066ef0f01c860", 0x31}], 0x1, 0x17, 0x0, 0x0) (async) truncate(0x0, 0x1) (async, rerun: 64) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) (rerun: 64) 4m41.536095065s ago: executing program 0 (id=3150): creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') (async) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) setpgid(0x0, r0) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) (async) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3000, 0x10, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 4m40.616156074s ago: executing program 0 (id=3153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000ffffffffffffff83000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 4m25.520606783s ago: executing program 33 (id=3153): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000ffffffffffffff83000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2m58.095051985s ago: executing program 1 (id=3986): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x202, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) capset(&(0x7f0000000480)={0x20080522}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x7, 0x7ff, 0x7, 0xffffffff, 0xfff}) 2m58.01259883s ago: executing program 1 (id=3988): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x200000) (async) r2 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000001c0)='cgroup.kill\x00', 0x0, 0x0) recvmmsg(r3, &(0x7f0000002b40)=[{{&(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/168, 0xa8}, {&(0x7f0000001340)=""/67, 0x43}, {&(0x7f00000013c0)=""/155, 0x9b}], 0x4, &(0x7f00000014c0)=""/121, 0x79}, 0x6a1}, {{&(0x7f0000001540)=@generic, 0x80, &(0x7f0000001840)=[{&(0x7f00000015c0)=""/197, 0xc5}, {&(0x7f00000016c0)=""/190, 0xbe}, {&(0x7f0000001780)=""/177, 0xb1}], 0x3, &(0x7f0000001880)=""/28, 0x1c}}, {{&(0x7f00000018c0)=@un=@abs, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/140, 0x8c}, {&(0x7f0000001a00)=""/250, 0xfa}], 0x2, &(0x7f0000001b40)=""/4096, 0x1000}, 0x7f}], 0x3, 0x40002122, &(0x7f0000002c00)={0x77359400}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002c80), r4) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000002d80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x70, r6, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3d}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8001}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x25, 0x10}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3eb}]}, 0x70}}, 0x20) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x2, &(0x7f0000002dc0), 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002e40), r0) (async, rerun: 32) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000002f40)={'gretap0\x00', &(0x7f0000002e80)={'syztnl2\x00', 0x0, 0x1, 0x3b6c2755b4b93db8, 0x8, 0x9fd, {{0x1c, 0x4, 0x0, 0x5, 0x70, 0x65, 0x0, 0x4, 0x4, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x10, 0xd4, 0x0, 0xc, [0x0, 0x5, 0x3]}, @cipso={0x86, 0x1a, 0x0, [{0x5, 0xa, "ef06f252b820ea0b"}, {0x5, 0xa, "394321756a73d84e"}]}, @rr={0x7, 0x13, 0xb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @empty, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0x99, [@remote, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback]}, @timestamp={0x44, 0x8, 0x41, 0x0, 0x6, [0x40]}, @noop]}}}}}) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000003000)={'syztnl1\x00', &(0x7f0000002f80)={'syztnl2\x00', 0x0, 0x4, 0xc, 0x98, 0x9, 0x40, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00', 0x80, 0x8, 0xe7e, 0x7}}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r7, &(0x7f0000003100)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x70, r8, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x40}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x7fff}, @ETHTOOL_A_CHANNELS_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7ff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x6}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x70}}, 0x200080c4) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000003200)={&(0x7f0000003140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000031c0)={&(0x7f0000003180)={0x1c, r8, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x80) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000003240)={0x0, 0x2, 0x20, 0x4, 0xaa}, &(0x7f0000003280)=0x18) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000032c0)={r11, 0xfbb0ef1}, 0x8) (async) r12 = fsmount(r3, 0x1, 0x80) (async, rerun: 64) mount(&(0x7f0000003300)=@sg0, &(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='jffs2\x00', 0x1004c0e, &(0x7f00000033c0)='Q(,:[$(}\x90#\f\x00') (rerun: 64) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000003400)=0x80000000, 0x4) getsockopt$SO_TIMESTAMP(r12, 0x1, 0x3f, &(0x7f0000003440), &(0x7f0000003480)=0x4) r13 = accept$inet6(r4, &(0x7f00000034c0)={0xa, 0x0, 0x0, @private1}, &(0x7f0000003500)=0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000003540)={r11, 0xa00}, 0x8) (async) recvmsg(0xffffffffffffffff, &(0x7f0000003740)={&(0x7f0000003580)=@tipc=@name, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003600)=""/61, 0x3d}, {&(0x7f0000003640)=""/100, 0x64}], 0x2, &(0x7f0000003700)=""/18, 0x12}, 0x40000000) (async) write$P9_RSETATTR(r7, &(0x7f0000003780)={0x7, 0x1b, 0x1}, 0x7) (async) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) bind$pptp(r12, &(0x7f00000037c0)={0x18, 0x2, {0x0, @local}}, 0x1e) close(r0) 2m57.83563622s ago: executing program 1 (id=3991): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000080), 0x72a, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x10009, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x1, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x80000001, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2c2, 0x6c9, 0x9, 0x46, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x404, 0x0, 0x2, 0x2, 0x10a, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x104, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x49, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x80, 0x2, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7ffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x8, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1f7, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x404, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m57.684206659s ago: executing program 1 (id=3994): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 2m55.838781195s ago: executing program 1 (id=4008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) accept4(r0, 0x0, 0x0, 0x800) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='fdinfo/3\x00') r2 = memfd_create(&(0x7f0000001600)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe8\x12#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85d\xe1B\x9f\xc1Q\xee\xcc\xbd\x8b)\x14\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x20080, 0x0) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f00000002c0)=""/206, 0xce}, {&(0x7f00000001c0)=""/184, 0xb8}, {&(0x7f00000003c0)=""/19, 0x13}, {&(0x7f0000000400)=""/136, 0x88}, {&(0x7f00000004c0)=""/122, 0x7a}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000000540)=""/52, 0x34}], 0x8, &(0x7f0000000600)=""/175, 0xaf}, 0x2020) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r4, &(0x7f0000000280)={0x2, 0x500, @broadcast}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x1, 0x6}) 4.393280787s ago: executing program 6 (id=5553): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40186f40, &(0x7f0000000080)={0x0, 0x0, 0x1, 0xfffffffe, 'syz1\x00'}) (async) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x80000, 0x80000002, 0x2], [0x0, 0x0, 0x10001, 0x1]}) (async, rerun: 64) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r7, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r8, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r7, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, r9, r10, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r7, 0x3b8b, &(0x7f0000000140)={0x10, 0x0, r11}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x2, 0x2, 0x806}) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6}) (rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r6}) (async, rerun: 64) r12 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 64) ioctl$TIOCSWINSZ(r12, 0x5414, &(0x7f0000000400)={0x3, 0x10, 0xe1c, 0xffff}) (async, rerun: 32) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (rerun: 32) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='cifs\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) (async, rerun: 64) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) (async, rerun: 64) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) 4.391504305s ago: executing program 4 (id=5554): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', 0x0, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0xb001, 0x4, 0x3a8, 0xe8, 0xe8, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x9}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@AUDIT={0x28}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, 0xff000000, 0xffffff00, 0xf, 0x9, {@empty, {[0x0, 0xff, 0x20ebd73230e7e6c7, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x8, 0x9, 0x7, 0x81, 0x3, 0x3, 'bond0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async) chdir(&(0x7f0000000080)='./file1\x00') (async) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x106) (async) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file1/file4\x00', 0x0, 0x0, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000b80)={'filter\x00', 0xb001, 0x4, 0x3a8, 0xe8, 0xe8, 0x2c0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9, 0x9}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@AUDIT={0x28}}, {{@arp={@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, 0xff000000, 0xffffff00, 0xf, 0x9, {@empty, {[0x0, 0xff, 0x20ebd73230e7e6c7, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0xff]}}, 0x8, 0x9, 0x7, 0x81, 0x3, 0x3, 'bond0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x20}, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x200808, 0x0) (async) 4.213556658s ago: executing program 4 (id=5555): r0 = creat(&(0x7f0000000000)='./cgroup\x00', 0x0) unlink(&(0x7f0000000140)='./cgroup\x00') read$qrtrtun(r0, &(0x7f00000000c0)=""/85, 0x55) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 4.119851886s ago: executing program 6 (id=5556): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x8) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000202010400000000000000028006000340000100000600034000030000080009400000000d"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x1) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.771352463s ago: executing program 4 (id=5558): creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0xcf, 0x7d, 0x8b, 0x40, 0x4cb, 0x109, 0xc188, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0xa0, 0x4, [{{0x9, 0x4, 0xfe, 0x0, 0x0, 0xcb, 0x88, 0x2d, 0xc3}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x5e, 0x0}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 3.219134831s ago: executing program 35 (id=5558): creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect(0x5, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x201, 0xcf, 0x7d, 0x8b, 0x40, 0x4cb, 0x109, 0xc188, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x0, 0xa0, 0x4, [{{0x9, 0x4, 0xfe, 0x0, 0x0, 0xcb, 0x88, 0x2d, 0xc3}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x5e, 0x0}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 2.080868567s ago: executing program 5 (id=5562): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './bus\x00'}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/dev/rnullb0\x00'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsdef={'smackfsdef', 0x3d, '.#'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0x9e28}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') recvmsg$can_raw(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000280)=""/159, 0x9f}], 0x6, &(0x7f00000007c0)=""/110, 0x6e}, 0x0) linkat(r2, &(0x7f0000000380)='./file1\x00', r2, &(0x7f00000003c0)='./bus\x00', 0x400) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) unlink(&(0x7f00000001c0)='./file0\x00') fadvise64(r0, 0x3, 0x3, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xee00}}, './bus\x00'}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@dont_appraise}, {@obj_role={'obj_role', 0x3d, '/dev/rnullb0\x00'}}, {@fowner_lt={'fowner<', r1}}, {@smackfsdef={'smackfsdef', 0x3d, '.#'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0x9e28}}]}) (async) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (async) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) recvmsg$can_raw(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)=""/104, 0x68}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000005c0)=""/206, 0xce}, {&(0x7f00000006c0)=""/236, 0xec}, {&(0x7f0000001640)=""/4096, 0x1000}, {&(0x7f0000000280)=""/159, 0x9f}], 0x6, &(0x7f00000007c0)=""/110, 0x6e}, 0x0) (async) linkat(r2, &(0x7f0000000380)='./file1\x00', r2, &(0x7f00000003c0)='./bus\x00', 0x400) (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) (async) unlink(&(0x7f00000001c0)='./file0\x00') (async) fadvise64(r0, 0x3, 0x3, 0x5) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) (async) 1.799270695s ago: executing program 5 (id=5563): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x2208080, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee00}}, './cgroup\x00'}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in=@initdev, @in=@multicast2}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) statx(0xffffffffffffffff, &(0x7f00000002c0)='./cgroup\x00', 0x0, 0x20, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) fcntl$setownex(r3, 0xf, &(0x7f0000000000)={0x2}) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000580)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fcntl$setpipe(r0, 0x407, 0x6) sendfile(r4, r7, &(0x7f0000000500)=0x1, 0x3) bind$bt_l2cap(r7, &(0x7f00000002c0)={0x1f, 0x0, @none, 0xfffa}, 0xe) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7}, 0xe) shutdown(r7, 0x1b5fa5139d4fc450) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0), 0x120402a, &(0x7f00000025c0)=ANY=[@ANYBLOB='mode=00000000000000000001407,uid=', @ANYRESOCT, @ANYBLOB=',g^d=', @ANYRESHEX=r1, @ANYBLOB=',uid=', @ANYRES16=r6, @ANYRESHEX=r1, @ANYRESHEX=r2, @ANYBLOB="412d5ff32c6769643d", @ANYRESHEX=r5, @ANYBLOB=',mode=00000000000000000074153,subj_role=/dev/rnullb0\x00,seclabel,dont_appraise,\x00']) socket$unix(0x1, 0x1, 0x0) 1.719220635s ago: executing program 2 (id=5564): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0x2, 0x5, 0x1, 0x0, 'syz1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x30, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000080)='nilfs2\x00', 0x3db922f45fd6594a, 0x0) 1.578904858s ago: executing program 5 (id=5565): r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x180c00) shutdown(r0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 1.437744285s ago: executing program 5 (id=5566): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x1501) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x4b5a9da54893e123, 0x3, 0x4, 0xffff}, 0x8, 0x0, 0x0, 0x0, 0x6, 0x81, 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x3c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x2}]}, 0x3c}}, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000180)=0xc) setreuid(0x0, r6) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 1.34423618s ago: executing program 2 (id=5567): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x6, 0x1, 0x0, 0xfffffffffffffffc, 0x7f, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0xc9, 0x0, 0x4, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac0000000000001200", "f4bd000000801900", [0x0, 0x2000000000001]}}) 1.201028803s ago: executing program 5 (id=5568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="7f4d25bd7000fcdbdf253400000008000300", @ANYRES32=r3, @ANYBLOB="140055002635eb6f2d8ab08636000000"], 0x3c}}, 0x50) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 1.015072326s ago: executing program 6 (id=5569): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000008002, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x2, 0x0) (async, rerun: 32) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) (rerun: 32) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fallocate(r3, 0x28, 0x0, 0x3) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(r2, 0x0, 0x5) fchdir(r4) (async) write$6lowpan_enable(r4, &(0x7f00000019c0)='1', 0x1) syz_open_dev$loop(&(0x7f0000000080), 0xb0, 0x84040) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001700)={0x70, 0x0, &(0x7f0000000640)=[@decrefs={0x40046307, 0x2}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000580)={@fda={0x66646185, 0x8, 0x1, 0x203d}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/173, 0xad, 0x2, 0xd}, @fda={0x66646185, 0x3, 0x2, 0x13}}, &(0x7f0000000600)={0x0, 0x20, 0x48}}}, @increfs={0x40046304, 0x3}, @acquire_done={0x40106309, 0x2}], 0x1000, 0x0, &(0x7f0000002880)="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"}) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6}, 0x50) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001740)='/sys/power/pm_wakeup_irq', 0x101000, 0x8) (async, rerun: 64) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000017c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r7, &(0x7f0000001980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001940)={&(0x7f0000001800)=ANY=[@ANYBLOB="c0", @ANYRES16=r8, @ANYBLOB="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"], 0x11c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async, rerun: 64) r9 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) (async, rerun: 64) r10 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r10, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x2a}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000100)="93", 0x1}], 0x1}}, {{&(0x7f00000004c0)={0xa, 0x4e22, 0x6, @private2, 0x8}, 0x1c, &(0x7f0000000a40)=[{&(0x7f0000000500)='J', 0x1}], 0x1}}], 0x2, 0xc010) (async) shutdown(r10, 0x1) (async, rerun: 64) getsockopt$bt_hci(r10, 0x84, 0x82, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) (async, rerun: 64) write$UHID_INPUT(r9, 0x0, 0x3c) (async) sendfile(r0, 0xffffffffffffffff, 0x0, 0x203) (async) sync_file_range(0xffffffffffffffff, 0xe0000000000000, 0xea0, 0x1) 933.794973ms ago: executing program 2 (id=5570): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) (async) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2, 0xfffffffd}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000003c0)={"fe8d5110ab3bf8b463625186133624b7", 0x0, 0x0, {0x51, 0x4}, {0xffffffffffff7fff, 0x101}, 0x4, [0x10, 0x8, 0x9, 0x8, 0xc178, 0x7, 0x5, 0x5, 0x7, 0x7, 0x1000, 0x9, 0x2, 0x40, 0x6]}) (async) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000003c0)={"fe8d5110ab3bf8b463625186133624b7", 0x0, 0x0, {0x51, 0x4}, {0xffffffffffff7fff, 0x101}, 0x4, [0x10, 0x8, 0x9, 0x8, 0xc178, 0x7, 0x5, 0x5, 0x7, 0x7, 0x1000, 0x9, 0x2, 0x40, 0x6]}) ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000001240)={{r4}, r5, 0x0, @inherit={0x60, &(0x7f0000000540)={0x0, 0x3, 0x6, 0xb, {0x0, 0x9, 0x401, 0x7ff, 0x1000}, [0x4, 0x2, 0x100]}}, @name="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"}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x44, r6, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x44}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)={0x44, r6, 0x607, 0x70bd2a, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x460769a9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x44}}, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000280)=0xe) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000280)=0xe) recvmmsg(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10021, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RREAD(r7, &(0x7f00000002c0)={0x18, 0x75, 0x1, {0xd, "31e65b82ff3696c2d3ab7d8ab6"}}, 0x18) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) unshare(0x2a020480) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000100)="240000005a001f001007f41108000400020100020800038005000000ffc8bbb86ec81f7d", 0x24) mount$pvfs2(&(0x7f00000000c0), &(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140), 0x40, &(0x7f0000000180)={[{'(.,,:+'}, {'/dev/rnullb0\x00'}, {'xfs\x00'}, {'/dev/rnullb0\x00'}, {'/dev/rnullb0\x00'}, {'\'('}, {'xfs\x00'}, {'^.{'}], [{@obj_role={'obj_role', 0x3d, '[$*\\,'}}, {@context={'context', 0x3d, 'user_u'}}, {@subj_role}]}) 780.095648ms ago: executing program 5 (id=5571): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000000000000000000086009078000000000090ffffff0000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 779.594577ms ago: executing program 6 (id=5572): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) personality(0x5400004) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={0x0, 0x1bc}, 0x8) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)={0x8f, 0x0, 0x4}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='adfs\x00', 0x100a000, &(0x7f0000000100)='\x00') mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 697.013977ms ago: executing program 6 (id=5573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000080)=0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000000c0)=0x2) write$dsp(r1, &(0x7f0000000280)="034e6ddc35f6ca4aea4231070b408a15ac9ca93b88ce0851f71748a0c27a355260bd26f7a0407e77bc9fc81345c280ae196c675a684e48b92c279d7e9dbd1de80b1c6a0754f15cd59e180609a889b9c61a0c0d2c478131707bf965f6168afae296a1bcd1a0d9a7a119bcb260123cf763bf52d89263d07bc2a26dfdb56fd15f278f", 0x81) mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000b, 0x8012, r1, 0x0) close(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x0, 0x0, @pic={0x10, 0xb, 0x5, 0x2d, 0x8, 0x4, 0x1, 0x1, 0x3, 0xfc, 0x8, 0x3, 0xfb, 0x8, 0x6, 0xa0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) listen(0xffffffffffffffff, 0x2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40840) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='9p\x00', 0x200000, 0x0) 478.465657ms ago: executing program 2 (id=5574): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000)=0x80000, 0x4) setrlimit(0x6, &(0x7f0000000040)={0x0, 0x5}) 344.463811ms ago: executing program 2 (id=5575): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000000, 0x4010, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000686000/0x2000)=nil, 0x2000) syz_clone(0x20000, 0x0, 0x2c, 0x0, 0x0, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r3 = syz_open_procfs(r1, &(0x7f0000000000)='net/snmp\x00') mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r0, 0x5a208000) (async) r4 = syz_open_dev$rtc(&(0x7f0000000180), 0xadb, 0x200) sendfile(r2, r4, 0x0, 0xf) (async) creat(&(0x7f0000000040)='./file0\x00', 0x3c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001200"], 0x1c}], 0x1, 0x0, 0x0, 0x4008850}, 0x0) (async) ioctl$VIDIOC_G_SLICED_VBI_CAP(r3, 0xc0745645, &(0x7f0000000080)={0x2, [0x41, 0x7, 0x7fff, 0xfff3, 0x0, 0x70c5, 0x0, 0x8, 0x3, 0x3, 0x4, 0xa, 0x8, 0x3, 0xd, 0x7, 0x10, 0x2e, 0x60b, 0x7ff, 0xd3e, 0x3, 0x8001, 0xff, 0x6, 0x2003, 0x4, 0x5, 0x8, 0x4, 0x9, 0x56c, 0x8, 0x3, 0x3ff, 0x5, 0x6, 0x5, 0xa1, 0x4, 0x408, 0x2, 0x9, 0x6, 0x738d, 0x11, 0xf, 0xc7], 0xa}) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='jfs\x00', 0x0, 0x0) 0s ago: executing program 2 (id=5576): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0xffffffffffffff22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x8) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) close(r1) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000202010400000000000000028006000340000100000600034000030000080009400000000d"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x4000001) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000000300)=0xff, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x835, 0x1) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r7, 0x4068aea3, &(0x7f0000000180)={0x8f, 0x0, 0x2}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f0000000000)=@arm64={0x0, 0x0, 0x9, '\x00', 0x3}) syz_init_net_socket$ax25(0x3, 0x3, 0x1) kernel console output (not intermixed with test programs): facturer: syz [ 696.820436][ T982] usb 3-1: SerialNumber: syz [ 696.833731][ T982] usb 3-1: config 0 descriptor?? [ 696.922064][T21140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4764'. [ 696.943046][T21140] openvswitch: netlink: nsh attr 0 has unexpected len 21 expected 0 [ 697.022895][T21140] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 697.280556][T21155] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4769'. [ 697.447202][T21161] netlink: 'syz.5.4771': attribute type 21 has an invalid length. [ 697.489994][T21161] netlink: 'syz.5.4771': attribute type 5 has an invalid length. [ 697.516511][T21161] netlink: 128 bytes leftover after parsing attributes in process `syz.5.4771'. [ 697.937780][T21178] loop2: detected capacity change from 0 to 7 [ 697.965215][T21116] "syz.2.4754" (21116) uses obsolete ecb(arc4) skcipher [ 697.996890][T21178] Dev loop2: unable to read RDB block 7 [ 698.002518][T21178] loop2: unable to read partition table [ 698.037336][ T5879] usb 3-1: USB disconnect, device number 72 [ 698.042780][T21178] loop2: partition table beyond EOD, truncated [ 698.053597][T21178] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 698.232003][T21188] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4779'. [ 698.341936][T21193] netlink: 348 bytes leftover after parsing attributes in process `syz.4.4782'. [ 698.565103][T21195] overlayfs: failed to clone upperpath [ 698.591060][T21195] overlayfs: failed to clone upperpath [ 698.656803][T21200] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 698.663114][T21203] netlink: 'syz.5.4783': attribute type 4 has an invalid length. [ 698.768861][T21203] : renamed from bond0 (while UP) [ 699.132515][T21215] /dev/rnullb0: Can't open blockdev [ 699.313187][T21221] fuse: Unknown parameter 'rootmoda' [ 699.555028][T21229] MTD: Couldn't look up '/dev/rnullb0': -15 [ 699.631198][T21236] ceph: Path missing in source [ 699.696165][T21240] /dev/rnullb0: Can't lookup blockdev [ 699.768659][T21242] fuse: Unknown parameter '' [ 699.876413][T21249] __nla_validate_parse: 2 callbacks suppressed [ 699.876431][T21249] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4803'. [ 699.893928][T21251] /dev/rnullb0: Can't open blockdev [ 700.073740][T21254] syzkaller0: entered promiscuous mode [ 700.082070][T21254] syzkaller0: entered allmulticast mode [ 700.245311][T21268] /dev/rnullb0: Can't open blockdev [ 700.294654][T21271] sit0: entered promiscuous mode [ 700.314398][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 700.325423][T21271] netlink: 'syz.6.4812': attribute type 1 has an invalid length. [ 700.333339][T21271] netlink: 1 bytes leftover after parsing attributes in process `syz.6.4812'. [ 700.474630][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 700.486098][ T5916] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 700.494868][ T5916] usb 5-1: config 0 has no interface number 0 [ 700.500999][ T5916] usb 5-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 700.515867][ T5916] usb 5-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 700.525687][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.534755][ T5916] usb 5-1: Product: syz [ 700.539043][ T5916] usb 5-1: Manufacturer: syz [ 700.543649][ T5916] usb 5-1: SerialNumber: syz [ 700.553410][ T5916] usb 5-1: config 0 descriptor?? [ 700.667863][T21282] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4816'. [ 700.683300][T21277] /dev/rnullb0: Can't open blockdev [ 700.800072][T21285] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4817'. [ 700.888732][T21288] netlink: 'syz.5.4819': attribute type 4 has an invalid length. [ 700.900155][T21288] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4819'. [ 700.910635][T21288] netlink: 'syz.5.4819': attribute type 4 has an invalid length. [ 700.932227][T21288] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4819'. [ 700.948410][T21288] netlink: 'syz.5.4819': attribute type 4 has an invalid length. [ 700.958590][T21291] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 700.964368][T21288] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4819'. [ 700.976919][T21291] /dev/rnullb0: Can't open blockdev [ 700.981968][T21288] netlink: 'syz.5.4819': attribute type 4 has an invalid length. [ 701.003623][T21288] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4819'. [ 701.031367][T21288] netlink: 'syz.5.4819': attribute type 4 has an invalid length. [ 701.070119][T21288] netlink: 17 bytes leftover after parsing attributes in process `syz.5.4819'. [ 701.094684][T21296] tipc: Started in network mode [ 701.099790][T21296] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 701.109931][T21296] tipc: Enabling of bearer rejected, failed to enable media [ 701.382109][T21308] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4825'. [ 701.542523][T21313] netlink: 'syz.2.4827': attribute type 10 has an invalid length. [ 701.583513][T21313] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 701.634380][T13268] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 701.743406][T21313] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 701.751503][T21313] /dev/rnullb0: Can't open blockdev [ 701.786177][T13268] usb 7-1: config 0 has an invalid interface number: 229 but max is 0 [ 701.795726][T13268] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.807284][T13268] usb 7-1: config 0 has no interface number 0 [ 701.813942][T13268] usb 7-1: config 0 interface 229 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 701.827142][T13268] usb 7-1: config 0 interface 229 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 701.859084][T13268] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=1f.38 [ 701.869697][T13268] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 701.879032][T13268] usb 7-1: Product: syz [ 701.883371][T13268] usb 7-1: Manufacturer: syz [ 701.890519][T13268] usb 7-1: SerialNumber: syz [ 701.898655][T13268] usb 7-1: config 0 descriptor?? [ 701.994281][ T5879] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 702.003635][T21328] MTD: Couldn't look up '/dev/rnullb0': -15 [ 702.115769][T13268] qmi_wwan 7-1:0.229: probe with driver qmi_wwan failed with error -22 [ 702.138481][T13268] usb 7-1: USB disconnect, device number 16 [ 702.144745][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 702.158319][ T5879] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 702.174526][ T5879] usb 3-1: config 0 has no interface number 0 [ 702.200805][ T5879] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 702.211961][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.223439][ T5879] usb 3-1: Product: syz [ 702.231894][ T5879] usb 3-1: Manufacturer: syz [ 702.242701][ T5879] usb 3-1: SerialNumber: syz [ 702.251179][ T5879] usb 3-1: config 0 descriptor?? [ 702.259360][ T5879] asix 3-1:0.251: probe with driver asix failed with error -22 [ 702.461727][ T5922] usb 3-1: USB disconnect, device number 73 [ 702.739004][T21354] /dev/rnullb0: Can't open blockdev [ 702.790960][ T5916] usbtouchscreen 5-1:0.214: Failed to read FW rev: -71 [ 702.801905][ T5916] usbtouchscreen 5-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 702.833357][ T5916] usb 5-1: USB disconnect, device number 9 [ 703.395471][T21365] fuse: Unknown parameter '' [ 704.016861][T21371] loop6: detected capacity change from 0 to 63 [ 704.025584][T21371] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 704.049919][T21371] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 704.059038][T21371] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 704.069055][T21371] Buffer I/O error on dev loop6, logical block 3, lost async page write [ 704.078680][T21371] Buffer I/O error on dev loop6, logical block 4, lost async page write [ 704.079200][T21370] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 704.088992][T21371] Buffer I/O error on dev loop6, logical block 5, lost async page write [ 704.108292][T21372] input: syz1 as /devices/virtual/input/input56 [ 704.114947][T21371] Buffer I/O error on dev loop6, logical block 6, lost async page write [ 704.509859][T21378] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 704.520473][T21378] /dev/rnullb0: Can't open blockdev [ 704.601033][T21380] fuse: Bad value for 'user_id' [ 704.609728][T21380] fuse: Bad value for 'user_id' [ 704.930008][T21383] /dev/rnullb0: Can't open blockdev [ 705.168669][T21388] /dev/rnullb0: Can't open blockdev [ 705.620371][T21399] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 705.696191][T21400] /dev/rnullb0: Can't open blockdev [ 706.201285][ T5894] kworker/0:6 (5894) used greatest stack depth: 19784 bytes left [ 706.267618][T21408] /dev/rnullb0: Can't open blockdev [ 706.398242][T21415] /dev/rnullb0: Can't open blockdev [ 706.508849][T21423] af_packet: tpacket_rcv: packet too big, clamped from 65526 to 2942. macoff=82 [ 706.825647][T21439] syz.4.4868: attempt to access beyond end of device [ 706.825647][T21439] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 707.001783][T21451] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.049088][T21453] /dev/rnullb0: Can't open blockdev [ 707.212612][T21460] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 707.309193][T21466] /dev/rnullb0: Can't open blockdev [ 707.472570][T21473] TCP: out of memory -- consider tuning tcp_mem [ 707.497100][T21474] overlay: ./file0 is not a directory [ 707.512374][T21474] /dev/sg0: Can't lookup blockdev [ 707.549418][T21476] __nla_validate_parse: 1 callbacks suppressed [ 707.549436][T21476] netlink: 156 bytes leftover after parsing attributes in process `syz.6.4881'. [ 707.627156][T21481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 707.635165][T21479] sp0: Synchronizing with TNC [ 707.657992][T21479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4883'. [ 707.684288][T21481] UDF-fs: Scanning with blocksize 512 failed [ 707.701433][T21481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 707.719477][T21486] /dev/rnullb0: Can't open blockdev [ 707.724869][T21481] UDF-fs: Scanning with blocksize 1024 failed [ 707.731265][T21481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 707.756510][T21481] UDF-fs: Scanning with blocksize 2048 failed [ 707.763078][T21481] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 707.808564][T21481] UDF-fs: Scanning with blocksize 4096 failed [ 708.191880][T21510] netlink: 'syz.6.4893': attribute type 63 has an invalid length. [ 708.210273][T21510] netlink: 5 bytes leftover after parsing attributes in process `syz.6.4893'. [ 708.223769][T21510] netlink: 260 bytes leftover after parsing attributes in process `syz.6.4893'. [ 708.264495][ T5922] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 708.391903][T21518] sctp: [Deprecated]: syz.6.4897 (pid 21518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 708.391903][T21518] Use struct sctp_sack_info instead [ 708.476706][ T5922] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.496971][ T5922] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 708.514736][ T5922] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 708.535708][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.543741][ T5922] usb 3-1: Product: syz [ 708.558161][ T5922] usb 3-1: Manufacturer: syz [ 708.562898][ T5922] usb 3-1: SerialNumber: syz [ 708.810215][T21500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 708.977994][T21545] /dev/rnullb0: Can't lookup blockdev [ 708.992764][T21547] /dev/rnullb0: Can't open blockdev [ 709.080679][T21551] bpf: Bad value for 'gid' [ 709.302834][T21558] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 709.310668][T21558] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 709.317481][T21558] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 709.323759][T21558] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 709.330555][T21558] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 709.342301][T21558] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 709.390524][T21564] netlink: 'syz.6.4915': attribute type 29 has an invalid length. [ 709.401490][T21564] netlink: 'syz.6.4915': attribute type 29 has an invalid length. [ 709.411519][T21564] netlink: 'syz.6.4915': attribute type 29 has an invalid length. [ 709.420324][T21564] netlink: 'syz.6.4915': attribute type 29 has an invalid length. [ 709.431241][T21500] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 709.644686][ T5922] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 709.653978][ T5922] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 709.666798][ T5922] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 709.814435][ T5916] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 709.856453][ T5922] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 709.863499][T21573] delete_channel: no stack [ 709.871793][T21573] delete_channel: no stack [ 709.871962][ T5922] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 709.909493][ T5922] wwan wwan0: port wwan0mbim0 attached [ 709.938130][ T5922] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 709.974767][ T5916] usb 5-1: device descriptor read/64, error -71 [ 710.065886][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.072881][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.080859][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.087576][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.104403][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.111147][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.119331][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.126055][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.132626][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.139338][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.145846][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.152550][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.158965][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.165669][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.172122][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.178826][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.191197][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.197921][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.204985][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 710.211699][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 710.224338][ T5916] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 710.296354][T21500] /dev/rnullb0: Can't open blockdev [ 710.404282][ T5916] usb 5-1: device descriptor read/64, error -71 [ 710.542316][T21598] /dev/rnullb0: Can't open blockdev [ 710.555043][ T5916] usb usb5-port1: attempt power cycle [ 710.898325][T21613] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4926'. [ 710.917298][ T5916] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 710.978298][ T5916] usb 5-1: device descriptor read/8, error -71 [ 711.158826][ T5498] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 711.225450][ T5922] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 711.244141][ T5916] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 711.278443][ T5916] usb 5-1: device descriptor read/8, error -71 [ 711.314874][ T5839] Bluetooth: hci1: command 0x0405 tx timeout [ 711.321004][T19505] Bluetooth: hci3: command 0x0406 tx timeout [ 711.394795][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 711.397220][T19505] Bluetooth: hci2: command 0x0c1a tx timeout [ 711.408064][ T5922] usb 7-1: Using ep0 maxpacket: 16 [ 711.413542][ T5916] usb usb5-port1: unable to enumerate USB device [ 711.441578][ T5922] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 711.448254][T13268] usb 3-1: USB disconnect, device number 74 [ 711.465388][T13268] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 711.506770][ T5922] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 711.547819][ T5922] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 711.559982][ T5922] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 711.578366][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 711.616203][ T5922] usb 7-1: Product: syz [ 711.634416][ T5922] usb 7-1: Manufacturer: syz [ 711.639068][ T5922] usb 7-1: SerialNumber: syz [ 711.705978][T21638] /dev/rnullb0: Can't open blockdev [ 711.752755][T13268] wwan wwan0: port wwan0mbim0 disconnected [ 712.093972][ T5922] usb 7-1: 0:2 : does not exist [ 712.094215][T21654] /dev/rnullb0: Can't open blockdev [ 712.104319][ T5916] IPVS: starting estimator thread 0... [ 712.137180][T21656] /dev/rnullb0: Can't open blockdev [ 712.194637][T21655] IPVS: using max 33 ests per chain, 79200 per kthread [ 712.620655][T21675] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 712.621248][T21667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 713.483350][T19505] Bluetooth: hci4: command 0x0c1a tx timeout [ 713.546586][T21616] /dev/rnullb0: Can't open blockdev [ 713.575731][T21697] loop8: detected capacity change from 16384 to 0 [ 713.828707][ T5922] usb 7-1: 1:0: cannot get min/max values for control 6 (id 1) [ 713.894243][ T5922] usb 7-1: USB disconnect, device number 17 [ 714.071024][T10500] udevd[10500]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 714.335213][T21729] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.4945'. [ 714.378509][T21733] bpf: Bad value for 'uid' [ 714.380985][T21729] /dev/rnullb0: Can't open blockdev [ 714.409860][T21729] netlink: 'syz.6.4945': attribute type 4 has an invalid length. [ 714.424697][T21729] netlink: 124 bytes leftover after parsing attributes in process `syz.6.4945'. [ 714.542349][T21743] tmpfs: Bad value for 'mpol' [ 714.571717][T21739] sctp: [Deprecated]: syz.4.4947 (pid 21739) Use of int in max_burst socket option deprecated. [ 714.571717][T21739] Use struct sctp_assoc_value instead [ 714.602545][T21743] /dev/rnullb0: Can't open blockdev [ 714.901018][T21756] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4952'. [ 715.315617][T21729] wg0 speed is unknown, defaulting to 1000 [ 715.346410][T21774] /dev/rnullb0: Can't lookup blockdev [ 715.444487][ T5871] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 715.559024][T19505] Bluetooth: hci4: command 0x0c1a tx timeout [ 715.615900][ T5871] usb 5-1: Using ep0 maxpacket: 8 [ 715.655786][ T5871] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 715.677658][ T5871] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 715.721693][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 715.742353][ T5871] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 715.763207][ T5871] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.784872][ T5871] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 715.794038][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.914562][T21794] /dev/rnullb0: Can't lookup blockdev [ 715.978209][T21792] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 716.034409][ T5871] usb 5-1: usb_control_msg returned -32 [ 716.042510][ T5871] usbtmc 5-1:16.0: can't read capabilities [ 716.319897][T21805] netlink: 156 bytes leftover after parsing attributes in process `syz.5.4965'. [ 716.332622][T21805] overlayfs: failed to clone upperpath [ 716.389367][T21809] usbtmc 5-1:16.0: INITIATE_CLEAR returned 0 [ 716.421815][T21809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 716.452498][T21809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 716.545284][T21813] MTD: Couldn't look up '/dev/rnullb0': -15 [ 716.747769][T21816] /dev/rnullb0: Can't open blockdev [ 717.086034][ T30] audit: type=1326 audit(718.045:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21824 comm="syz.2.4971" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f64a8f8e929 code=0x0 [ 717.372990][T21844] netlink: 'syz.6.4976': attribute type 1 has an invalid length. [ 717.383440][T21844] netlink: 'syz.6.4976': attribute type 101 has an invalid length. [ 717.391781][T21844] netlink: 564 bytes leftover after parsing attributes in process `syz.6.4976'. [ 717.700252][T21853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.711970][T21853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 717.729572][T21853] /dev/rnullb0: Can't open blockdev [ 717.855765][T21863] /dev/rnullb0: Can't lookup blockdev [ 717.954266][ T5922] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 718.104282][ T5922] usb 7-1: device descriptor read/64, error -71 [ 718.159774][ T5879] usb 5-1: USB disconnect, device number 14 [ 718.273933][T21875] /dev/rnullb0: Can't open blockdev [ 718.354964][ T5922] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 718.410757][T21877] /dev/rnullb0: Can't open blockdev [ 718.461054][T21879] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4988'. [ 718.474830][T21879] /dev/rnullb0: Can't open blockdev [ 718.494410][ T5922] usb 7-1: device descriptor read/64, error -71 [ 718.614617][ T5922] usb usb7-port1: attempt power cycle [ 718.764359][ T5916] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 718.877748][ T1317] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 718.927571][ T5916] usb 3-1: Using ep0 maxpacket: 16 [ 718.934870][ T5916] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 718.943054][ T5916] usb 3-1: config 0 has no interface number 0 [ 718.949552][ T5916] usb 3-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.960761][ T5922] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 718.973954][ T5916] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 718.983889][ T5916] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.992159][ T5916] usb 3-1: Product: syz [ 718.997271][ T5916] usb 3-1: Manufacturer: syz [ 719.002377][ T5922] usb 7-1: device descriptor read/8, error -71 [ 719.008736][ T5916] usb 3-1: SerialNumber: syz [ 719.017946][ T5916] usb 3-1: config 0 descriptor?? [ 719.030408][ T5916] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 719.124493][T21888] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4991'. [ 719.133963][T21888] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4991'. [ 719.144633][T21888] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4991'. [ 719.153930][T21888] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4991'. [ 719.244172][ T5922] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 719.264747][ T5922] usb 7-1: device descriptor read/8, error -71 [ 719.283106][T21892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 719.292307][T21892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 719.301269][T21892] /dev/rnullb0: Can't open blockdev [ 719.374568][ T5922] usb usb7-port1: unable to enumerate USB device [ 719.383789][T11436] usb 3-1: Failed to submit usb control message: -71 [ 719.384188][ T5879] usb 3-1: USB disconnect, device number 75 [ 719.392095][T11436] usb 3-1: unable to send the bmi data to the device: -71 [ 719.405188][T11436] usb 3-1: unable to get target info from device [ 719.421289][T11436] usb 3-1: could not get target info (-71) [ 719.429319][T11436] usb 3-1: could not probe fw (-71) [ 719.530226][T21898] __nla_validate_parse: 61 callbacks suppressed [ 719.530239][T21898] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4993'. [ 719.893757][T21907] MTD: Couldn't look up '/dev/rnullb0': -15 [ 720.305644][T21919] netlink: 'syz.2.5001': attribute type 39 has an invalid length. [ 720.354019][T21919] /dev/rnullb0: Can't open blockdev [ 720.552895][T21922] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5002'. [ 720.893784][T21930] loop2: detected capacity change from 0 to 7 [ 720.920412][T21930] Dev loop2: unable to read RDB block 7 [ 720.949214][T21930] loop2: unable to read partition table [ 720.964530][T21930] loop2: partition table beyond EOD, truncated [ 720.981711][T21930] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 721.038955][ T5203] Dev loop2: unable to read RDB block 7 [ 721.074231][ T5203] loop2: unable to read partition table [ 721.089406][ T5203] loop2: partition table beyond EOD, truncated [ 721.182304][T21939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.202047][T21939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.228868][T21939] tmpfs: Cannot disable swap on remount [ 721.256716][T21940] netlink: 4416 bytes leftover after parsing attributes in process `syz.4.5007'. [ 721.280218][T21909] /dev/rnullb0: Can't lookup blockdev [ 721.292901][T21942] /dev/rnullb0: Can't open blockdev [ 721.308989][T21939] netlink: 4416 bytes leftover after parsing attributes in process `syz.4.5007'. [ 721.414274][ T5922] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 721.454333][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 721.752044][ T3492] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.951944][ T3492] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.121086][ T3492] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.298127][ T3492] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.449915][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 722.506990][T21964] veth0_to_team: entered promiscuous mode [ 722.512850][T21964] veth0_to_team: entered allmulticast mode [ 722.524735][T21965] Error validating options; rc = [-22] [ 722.530575][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 722.564385][T21965] Error validating options; rc = [-22] [ 722.573987][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 722.676570][T21965] Error validating options; rc = [-22] [ 722.682420][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 722.810482][T21965] Error validating options; rc = [-22] [ 722.865411][T21972] /dev/rnullb0: Can't open blockdev [ 722.881092][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 722.912192][ T3492] bridge_slave_1: left allmulticast mode [ 722.926272][ T3492] bridge_slave_1: left promiscuous mode [ 722.952962][ T3492] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.961203][T21965] Error validating options; rc = [-22] [ 722.979931][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 723.018684][ T3492] bridge_slave_0: left allmulticast mode [ 723.029866][ T3492] bridge_slave_0: left promiscuous mode [ 723.034930][T21975] /dev/rnullb0: Can't open blockdev [ 723.039949][ T3492] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.043732][T21965] Error validating options; rc = [-22] [ 723.057258][T21977] bpf: Bad value for 'uid' [ 723.094846][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 723.162216][T21965] Error validating options; rc = [-22] [ 723.182959][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 723.224930][T21965] Error validating options; rc = [-22] [ 723.253482][T21965] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 723.274412][T21965] Error validating options; rc = [-22] [ 723.419551][T21992] netlink: 'syz.6.5022': attribute type 11 has an invalid length. [ 723.451243][T21992] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5022'. [ 723.633958][T22002] /dev/rnullb0: Can't open blockdev [ 723.726978][T22006] fuse: Bad value for 'user_id' [ 723.732095][T22006] fuse: Bad value for 'user_id' [ 723.749910][T22006] /dev/rnullb0: Can't lookup blockdev [ 723.757399][ T3492] team0: Port device geneve0 removed [ 723.881070][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 723.882013][T22010] QAT: failed to copy from user cfg_data. [ 724.032661][ T3492] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 724.033818][T22010] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 724.052094][ T3492] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 724.063722][ T3492] bond0 (unregistering): Released all slaves [ 724.074592][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 724.083524][ T24] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 724.097110][ T24] usb 7-1: config 0 has no interface number 0 [ 724.122685][ T24] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 724.141364][ T24] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 724.153416][ T24] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 724.170596][ T24] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 724.181887][ T24] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 724.209723][T22016] syz.4.5031: attempt to access beyond end of device [ 724.209723][T22016] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 724.236613][T21997] sp0: Synchronizing with TNC [ 724.241626][ T24] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 724.252091][T22016] hpfs: hpfs_map_sector(): read error [ 724.274350][ T24] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 724.319991][ T24] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has an invalid bInterval 118, changing to 10 [ 724.351864][ T24] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 25956, setting to 1024 [ 724.382872][ T24] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 724.443830][ T24] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 724.453145][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.473829][ T24] usb 7-1: Product: syz [ 724.513201][ T24] usb 7-1: Manufacturer: syz [ 724.519091][T22024] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5034'. [ 724.541105][ T24] usb 7-1: SerialNumber: syz [ 724.553911][ T24] usb 7-1: config 0 descriptor?? [ 724.563530][T22000] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 724.572229][T22028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5035'. [ 724.581616][T22000] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 724.612703][T22028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5035'. [ 724.623303][ T24] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 724.640078][ T24] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 724.651531][T22027] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5035'. [ 724.816513][ T24] usb 7-1: USB disconnect, device number 22 [ 724.901815][T22048] /dev/rnullb0: Can't open blockdev [ 725.047669][T22056] /dev/rnullb0: Can't open blockdev [ 725.187499][T22062] syz.4.5042: attempt to access beyond end of device [ 725.187499][T22062] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 725.245556][T22062] gfs2: error -5 reading superblock [ 725.459724][T22072] /dev/rnullb0: Can't open blockdev [ 725.656767][ T3492] tipc: Disabling bearer [ 725.662664][ T3492] tipc: Left network mode [ 725.679475][T22078] /dev/rnullb0: Can't lookup blockdev [ 725.768028][T22087] QAT: Invalid ioctl 21531 [ 725.826895][T22079] netlink: 1041 bytes leftover after parsing attributes in process `syz.6.5049'. [ 725.858526][T22079] /dev/rnullb0: Can't open blockdev [ 726.029383][T22101] netlink: 4860 bytes leftover after parsing attributes in process `syz.4.5053'. [ 726.164647][T22105] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 726.171864][T22105] /dev/rnullb0: Can't open blockdev [ 726.594357][ T5879] usb 3-1: new low-speed USB device number 76 using dummy_hcd [ 726.773974][ T5879] usb 3-1: unable to get BOS descriptor or descriptor too short [ 726.815185][ T5879] usb 3-1: config 7 has an invalid interface number: 194 but max is 0 [ 726.849420][ T5879] usb 3-1: config 7 has no interface number 0 [ 726.864879][ T5879] usb 3-1: config 7 interface 194 altsetting 0 endpoint 0x7 has invalid maxpacket 16, setting to 0 [ 726.911978][ T5879] usb 3-1: No eUSB2 isoc ep 7 companion for config 7 interface 194 altsetting 0 [ 726.948052][ T5879] usb 3-1: string descriptor 0 read error: -22 [ 726.964335][ T5879] usb 3-1: New USB device found, idVendor=2019, idProduct=ed18, bcdDevice=ca.21 [ 727.000134][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.351083][T22140] loop2: detected capacity change from 0 to 7 [ 727.358680][ T5879] usb 3-1: USB disconnect, device number 76 [ 727.385106][T22140] Dev loop2: unable to read RDB block 7 [ 727.441583][T22140] loop2: unable to read partition table [ 727.452146][T22140] loop2: partition table beyond EOD, truncated [ 727.502127][T22140] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 727.511771][ T3492] hsr_slave_0: left promiscuous mode [ 727.524967][ T3492] hsr_slave_1: left promiscuous mode [ 727.531311][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 727.554166][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 727.601131][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 727.650254][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 727.712329][ T3492] veth1_macvtap: left promiscuous mode [ 727.741320][ T3492] veth0_macvtap: left promiscuous mode [ 727.744459][T22142] vivid-000: disconnect [ 727.747104][ T3492] veth1_vlan: left promiscuous mode [ 727.764701][ T3492] veth0_vlan: left promiscuous mode [ 727.768000][T22141] vivid-000: reconnect [ 728.121597][ T3492] pimreg (unregistering): left allmulticast mode [ 729.369754][T22161] /dev/rnullb0: Can't open blockdev [ 729.567938][T22165] /dev/rnullb0: Can't open blockdev [ 729.935556][T22176] loop2: detected capacity change from 0 to 7 [ 729.961709][T22176] Dev loop2: unable to read RDB block 7 [ 729.983950][T22176] loop2: unable to read partition table [ 729.995187][T22176] loop2: partition table beyond EOD, truncated [ 730.033289][T22176] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 730.216866][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 730.297184][ T3492] team0 (unregistering): Port device C removed [ 730.305630][ T36] smc: removing ib device sy{2 [ 730.513966][ T1317] Bluetooth: hci0: Frame reassembly failed (-84) [ 730.911846][T22150] pim6reg: entered allmulticast mode [ 730.963682][T22182] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5072'. [ 731.100331][T22178] wg0 speed is unknown, defaulting to 1000 [ 731.184322][T22189] "syz.4.5075" (22189) uses obsolete ecb(arc4) skcipher [ 731.448568][T22203] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5077'. [ 731.605015][T22207] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 731.611578][T22207] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 731.653707][T22203] netlink: 243 bytes leftover after parsing attributes in process `syz.6.5077'. [ 731.697516][T22207] vhci_hcd vhci_hcd.0: Device attached [ 731.944604][ T982] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 732.119195][T22232] /dev/rnullb0: Can't lookup blockdev [ 732.130188][T22210] vhci_hcd: connection reset by peer [ 732.137522][ T2985] vhci_hcd: stop threads [ 732.141796][ T2985] vhci_hcd: release socket [ 732.153331][ T2985] vhci_hcd: disconnect device [ 732.304117][ T5879] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 732.488500][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 732.513027][ T5879] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 732.525163][ T5839] Bluetooth: hci0: command 0x1003 tx timeout [ 732.532604][T19505] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 732.549226][ T5879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 732.567094][ T5879] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 732.579531][ T5879] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.596349][ T5879] usb 5-1: Product: syz [ 732.600963][ T5879] usb 5-1: Manufacturer: syz [ 732.610213][ T5879] usb 5-1: SerialNumber: syz [ 732.663793][ T5879] usb 5-1: config 0 descriptor?? [ 732.681389][T22231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 732.694389][T22231] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 732.747414][ T5879] usb 5-1: ucan: probing device on interface #0 [ 732.791540][T22239] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5086'. [ 733.080842][T22230] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 733.264651][T22248] netdevsim netdevsim6: Direct firmware load for  failed with error -2 [ 733.277944][T22248] netdevsim netdevsim6: Falling back to sysfs fallback for:  [ 733.377378][ T5879] ucan 5-1:0.0 can0: registered device [ 733.393853][ T5879] ucan 5-1:0.0 can0: firmware string: unknown [ 733.448471][T22258] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.5090'. [ 733.569687][T22257] /dev/rnullb0: Can't lookup blockdev [ 733.706753][ T3492] IPVS: stop unused estimator thread 0... [ 733.771062][ T5922] usb 5-1: USB disconnect, device number 16 [ 733.842292][T22268] veth0_vlan: mtu greater than device maximum [ 733.900643][T22272] loop2: detected capacity change from 0 to 7 [ 733.928473][T10654] Dev loop2: unable to read RDB block 7 [ 733.953839][T10654] loop2: unable to read partition table [ 733.976100][T10654] loop2: partition table beyond EOD, truncated [ 734.025963][T22272] Dev loop2: unable to read RDB block 7 [ 734.039527][T22272] loop2: unable to read partition table [ 734.053143][T22272] loop2: partition table beyond EOD, truncated [ 734.069451][T22272] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 734.434450][T22283] /dev/rnullb0: Can't lookup blockdev [ 734.451250][T22281] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5095'. [ 734.664206][ T5871] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 734.808510][T22299] /dev/rnullb0: Can't open blockdev [ 734.817099][T22299] /dev/rnullb0: Can't open blockdev [ 734.834350][ T5871] usb 5-1: Using ep0 maxpacket: 32 [ 734.841585][ T5871] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 734.874718][ T5871] usb 5-1: config 0 interface 0 has no altsetting 0 [ 734.891733][ T5871] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 734.921091][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.940465][T22304] overlay: ./file0 is not a directory [ 734.951515][ T5871] usb 5-1: config 0 descriptor?? [ 734.969560][ T5871] usbhid 5-1:0.0: can't add hid device: -22 [ 734.991803][T22306] loop2: detected capacity change from 0 to 7 [ 734.991938][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 735.026747][T22306] Dev loop2: unable to read RDB block 7 [ 735.042640][T22306] loop2: unable to read partition table [ 735.062986][T22306] loop2: partition table beyond EOD, truncated [ 735.087835][T22306] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 735.204968][T22279] pim6reg: tun_chr_ioctl cmd 1074025676 [ 735.224330][T22279] pim6reg: owner set to 0 [ 735.421743][T22322] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 735.435388][T22323] netlink: 'syz.5.5106': attribute type 5 has an invalid length. [ 735.451120][T22323] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5106'. [ 736.084365][ T5922] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 736.227170][T19505] Bluetooth: hci2: unexpected event for opcode 0x080e [ 736.228830][T22350] ./cgroup: Can't lookup blockdev [ 736.275406][ T5922] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 736.291530][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.300724][ T5922] usb 3-1: Product: syz [ 736.309416][ T5922] usb 3-1: Manufacturer: syz [ 736.314160][ T5922] usb 3-1: SerialNumber: syz [ 736.321535][ T5922] usb 3-1: config 0 descriptor?? [ 736.335567][ T5922] ch341 3-1:0.0: ch341-uart converter detected [ 736.442223][T22355] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xee [ 736.465463][T22355] /dev/rnullb0: Can't open blockdev [ 736.490147][ T30] audit: type=1804 audit(737.445:69): pid=22357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.5113" name="rnullb0" dev="tmpfs" ino=2065 res=1 errno=0 [ 736.721653][T22366] netlink: 'syz.5.5116': attribute type 7 has an invalid length. [ 736.733019][T22366] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5116'. [ 737.052231][T22385] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5120'. [ 737.061387][ T5872] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 737.074321][ T982] vhci_hcd: vhci_device speed not set [ 737.173020][T22385] /dev/rnullb0: Can't lookup blockdev [ 737.224207][ T5872] usb 7-1: Using ep0 maxpacket: 8 [ 737.255528][ T5872] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 737.271872][ T5872] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 737.282913][ T5872] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.297774][ T5872] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.318765][ T5872] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.329956][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.364913][ T5922] ch341-uart ttyUSB0: break control not supported, using simulated break [ 737.391689][ T5922] usb 3-1: ch341-uart converter now attached to ttyUSB0 [ 737.434560][ T5922] usb 3-1: USB disconnect, device number 77 [ 737.468058][ T5922] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 737.485784][ T5922] ch341 3-1:0.0: device disconnected [ 737.502015][ T24] usb 5-1: USB disconnect, device number 17 [ 737.598811][ T5872] usb 7-1: GET_CAPABILITIES returned 0 [ 737.616269][ T5872] usbtmc 7-1:16.0: can't read capabilities [ 737.803305][ T5872] usb 7-1: USB disconnect, device number 23 [ 737.970219][T22418] netlink: 'syz.5.5127': attribute type 10 has an invalid length. [ 737.985420][T22418] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5127'. [ 738.456513][T22442] /dev/rnullb0: Can't open blockdev [ 738.796099][T22452] netlink: 'syz.2.5137': attribute type 11 has an invalid length. [ 738.810996][T22452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5137'. [ 739.250939][ T982] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 739.321437][T22475] netlink: 'syz.2.5143': attribute type 10 has an invalid length. [ 739.353616][T22475] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5143'. [ 739.426590][ T982] usb 5-1: Using ep0 maxpacket: 16 [ 739.445915][ T982] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.463526][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.501885][ T982] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 739.520130][ T982] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 739.583022][ T982] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.607034][ T982] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 739.624236][ T982] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 739.632272][ T982] usb 5-1: Manufacturer: syz [ 739.647059][ T982] usb 5-1: config 0 descriptor?? [ 739.674192][ T5872] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 739.836294][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.848853][ T5872] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.868284][ T5872] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 739.882949][ T5872] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 739.905269][ T5872] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.905915][T22500] loop2: detected capacity change from 0 to 7 [ 739.916431][ T5872] usb 7-1: config 0 descriptor?? [ 739.924543][T22500] Dev loop2: unable to read RDB block 7 [ 739.930288][T22500] loop2: unable to read partition table [ 739.940119][ T982] rc_core: IR keymap rc-hauppauge not found [ 739.947434][T22500] loop2: partition table beyond EOD, truncated [ 739.953936][T22500] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 739.954921][ T982] Registered IR keymap rc-empty [ 739.976064][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 739.995009][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.015303][ T982] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 740.033539][ T982] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input58 [ 740.060724][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.116084][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.135097][T22507] /dev/rnullb0: Can't open blockdev [ 740.157957][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.184254][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.204519][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.224381][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.272586][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.284142][T19505] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 740.292881][T19505] Bluetooth: hci2: Injecting HCI hardware error event [ 740.303683][ T5839] Bluetooth: hci2: hardware error 0x00 [ 740.316144][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.344302][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.356836][ T5872] plantronics 0003:047F:FFFF.004D: No inputs registered, leaving [ 740.379055][ T982] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 740.403359][ T5872] plantronics 0003:047F:FFFF.004D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 740.432314][ T982] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 740.451173][ T982] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 740.886407][T22524] /dev/rnullb0: Can't lookup blockdev [ 741.174199][ T982] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 741.337494][ T982] usb 3-1: config 6 has an invalid interface number: 191 but max is 1 [ 741.347515][ T982] usb 3-1: config 6 has an invalid interface number: 38 but max is 1 [ 741.356394][ T982] usb 3-1: config 6 has no interface number 0 [ 741.362809][ T982] usb 3-1: config 6 has no interface number 1 [ 741.369051][ T982] usb 3-1: config 6 interface 191 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 741.380253][ T982] usb 3-1: config 6 interface 191 altsetting 9 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 741.392097][ T982] usb 3-1: config 6 interface 191 altsetting 9 has an endpoint descriptor with address 0x5D, changing to 0xD [ 741.405405][ T982] usb 3-1: config 6 interface 191 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 741.416441][ T982] usb 3-1: config 6 interface 191 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 741.427459][ T982] usb 3-1: config 6 interface 191 altsetting 9 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 741.441089][ T982] usb 3-1: config 6 interface 38 altsetting 4 endpoint 0x3 has an invalid bInterval 120, changing to 10 [ 741.452500][ T982] usb 3-1: config 6 interface 38 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 741.463311][ T982] usb 3-1: config 6 interface 38 altsetting 4 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 741.474391][ T982] usb 3-1: config 6 interface 191 has no altsetting 0 [ 741.481194][ T982] usb 3-1: config 6 interface 38 has no altsetting 0 [ 741.924425][T22546] exfat: Unknown parameter ' ' [ 741.973780][ T5922] usb 5-1: USB disconnect, device number 18 [ 742.248536][T22561] Invalid ELF header magic: != ELF [ 742.316117][T22567] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5171'. [ 742.354261][ T5839] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 742.394359][ T5922] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 742.478766][ T5916] usb 7-1: USB disconnect, device number 24 [ 742.557164][ T5922] usb 5-1: Using ep0 maxpacket: 16 [ 742.576234][ T5922] usb 5-1: config 1 interface 0 altsetting 238 endpoint 0x81 has an invalid bInterval 165, changing to 11 [ 742.604851][ T5922] usb 5-1: config 1 interface 0 altsetting 238 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 742.619861][ T5922] usb 5-1: config 1 interface 0 has no altsetting 0 [ 742.629761][ T5922] usb 5-1: New USB device found, idVendor=0eef, idProduct=726b, bcdDevice= 0.40 [ 742.640346][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.663230][ T5922] usb 5-1: Product: ࠠ [ 742.668300][ T5922] usb 5-1: Manufacturer: щ [ 742.672973][ T5922] usb 5-1: SerialNumber: ᮱꙯豛け䓥ⲕꊀϰ鐔焾琪롌㴵齯䡶茪﷾䅔ⴶ楎 [ 742.690474][T22574] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5174'. [ 743.103071][T22554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.113199][T22554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.194255][ T10] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 743.333246][T22554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.341933][ T10] usb 7-1: device descriptor read/64, error -71 [ 743.364375][T22554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.460449][T19505] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 743.472076][T19505] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 743.482036][T19505] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 743.491543][T19505] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 743.501549][T19505] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 743.548140][T22594] wg0 speed is unknown, defaulting to 1000 [ 743.584884][ T10] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 743.598807][T22554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.607901][T22554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.655618][T22554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.682990][T22554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.710951][ T5922] usbhid 5-1:1.0: can't add hid device: -71 [ 743.717710][ T5922] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 743.733594][ T5922] usb 5-1: USB disconnect, device number 19 [ 743.774633][ T10] usb 7-1: device descriptor read/64, error -71 [ 743.910172][ T982] usb 3-1: New USB device found, idVendor=05c6, idProduct=920b, bcdDevice=62.20 [ 743.917315][ T10] usb usb7-port1: attempt power cycle [ 743.924094][ T982] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.946197][ T982] usb 3-1: can't set config #6, error -71 [ 743.971770][ T982] usb 3-1: USB disconnect, device number 78 [ 744.178568][T22594] chnl_net:caif_netlink_parms(): no params data found [ 744.255005][T22615] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5184'. [ 744.281181][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 744.314989][ T10] usb 7-1: device descriptor read/8, error -71 [ 744.408042][T22594] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.424980][T22594] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.432245][T22594] bridge_slave_0: entered allmulticast mode [ 744.455876][T22594] bridge_slave_0: entered promiscuous mode [ 744.470622][T22594] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.481013][T22594] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.493045][T22594] bridge_slave_1: entered allmulticast mode [ 744.511283][T22594] bridge_slave_1: entered promiscuous mode [ 744.566967][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 744.581670][T22594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.605880][ T10] usb 7-1: device descriptor read/8, error -71 [ 744.619057][T22594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 744.683472][T22594] team0: Port device team_slave_0 added [ 744.693684][T22594] team0: Port device team_slave_1 added [ 744.703733][T22629] /dev/rnullb0: Can't open blockdev [ 744.738924][ T10] usb usb7-port1: unable to enumerate USB device [ 744.765864][T22594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 744.773596][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.817252][T22594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 744.832490][T22594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 744.854531][T22594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 744.908593][T22594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 745.032856][T22637] /dev/rnullb0: Can't open blockdev [ 745.042016][T22594] hsr_slave_0: entered promiscuous mode [ 745.057820][T22594] hsr_slave_1: entered promiscuous mode [ 745.089157][T22594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 745.114216][T22594] Cannot create hsr debugfs directory [ 745.131302][T22634] veth1_to_batadv: entered allmulticast mode [ 745.137462][T22641] /dev/rnullb0: Can't open blockdev [ 745.215706][T22643] overlay: Bad value for 'workdir' [ 745.226103][T22643] input: syz1 as /devices/virtual/input/input59 [ 745.350275][T22645] loop2: detected capacity change from 0 to 7 [ 745.365439][T22645] Dev loop2: unable to read RDB block 7 [ 745.371066][T22645] loop2: unable to read partition table [ 745.385089][T22645] loop2: partition table beyond EOD, truncated [ 745.394708][T22645] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 745.554626][ T5839] Bluetooth: hci0: command tx timeout [ 745.563017][T22653] /dev/rnullb0: Can't open blockdev [ 745.640764][T22594] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.719989][T22660] /dev/rnullb0: Can't open blockdev [ 745.803208][T22664] ufs: You didn't specify the type of your ufs filesystem [ 745.803208][T22664] [ 745.803208][T22664] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 745.803208][T22664] [ 745.803208][T22664] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 745.857967][T22594] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.878257][T22664] ufs: ufstype=old is supported read-only [ 745.886760][T22664] syz.4.5199: attempt to access beyond end of device [ 745.886760][T22664] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 745.904950][T22665] ufs: You didn't specify the type of your ufs filesystem [ 745.904950][T22665] [ 745.904950][T22665] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 745.904950][T22665] [ 745.904950][T22665] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 745.966570][T22665] ufs: ufstype=old is supported read-only [ 745.990603][T22665] syz.4.5199: attempt to access beyond end of device [ 745.990603][T22665] loop4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 746.061376][T22594] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.116290][T22673] loop2: detected capacity change from 0 to 7 [ 746.134978][T10500] Dev loop2: unable to read RDB block 7 [ 746.144227][T10500] loop2: unable to read partition table [ 746.159648][T22594] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 746.163770][T10500] loop2: partition table beyond EOD, truncated [ 746.188933][T22673] Dev loop2: unable to read RDB block 7 [ 746.212230][T22673] loop2: unable to read partition table [ 746.220694][T22673] loop2: partition table beyond EOD, truncated [ 746.233517][T22673] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 746.284164][ T982] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 746.457872][T22594] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 746.466112][ T982] usb 3-1: Using ep0 maxpacket: 32 [ 746.479417][ T982] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84 [ 746.497181][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 746.500173][T22594] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 746.536313][T22594] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 746.551876][ T982] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16 [ 746.564586][ T982] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3 [ 746.574447][T22594] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 746.581914][ T982] usb 3-1: Product: syz [ 746.587513][T22687] program syz.4.5205 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 746.588686][ T982] usb 3-1: Manufacturer: syz [ 746.610069][ T982] usb 3-1: SerialNumber: syz [ 746.616996][T22687] /dev/rnullb0: Can't open blockdev [ 746.632422][ T982] usb 3-1: config 0 descriptor?? [ 746.652388][ T982] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 746.802566][T22594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.828733][T22594] 8021q: adding VLAN 0 to HW filter on device team0 [ 746.864082][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.871275][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.887342][T22671] /dev/rnullb0: Can't open blockdev [ 746.896912][ T10] usb 3-1: USB disconnect, device number 79 [ 746.902989][ T3492] usb 3-1: Failed to submit usb control message: -71 [ 746.912995][ T3492] usb 3-1: unable to send the bmi data to the device: -71 [ 746.927690][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.934911][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.934932][ T3492] usb 3-1: unable to get target info from device [ 746.951935][ T3492] usb 3-1: could not get target info (-71) [ 746.959964][ T3492] usb 3-1: could not probe fw (-71) [ 747.134231][ T5922] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 747.173354][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.183233][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.219135][T22594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 747.304323][ T5922] usb 5-1: Using ep0 maxpacket: 8 [ 747.313057][ T5922] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 747.331697][ T5922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.352631][ T5922] usb 5-1: config 0 descriptor?? [ 747.505708][ T982] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 747.532529][T22594] veth0_vlan: entered promiscuous mode [ 747.556231][T22594] veth1_vlan: entered promiscuous mode [ 747.599658][T22594] veth0_macvtap: entered promiscuous mode [ 747.612155][T22594] veth1_macvtap: entered promiscuous mode [ 747.636067][ T5839] Bluetooth: hci0: command tx timeout [ 747.641479][T22594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.677205][T22594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.684524][ T982] usb 7-1: Using ep0 maxpacket: 8 [ 747.706757][ T982] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 747.730735][T22594] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.746267][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.765483][T22594] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.782856][ T982] usb 7-1: config 0 descriptor?? [ 747.789714][T22594] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.816734][T22594] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.971873][T22723] netlink: 'syz.2.5210': attribute type 29 has an invalid length. [ 748.012015][ T982] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 748.029197][T22724] netlink: 'syz.2.5210': attribute type 29 has an invalid length. [ 748.052464][ T982] asix 7-1:0.0: probe with driver asix failed with error -32 [ 748.061351][T22723] netlink: 'syz.2.5210': attribute type 29 has an invalid length. [ 748.079164][ T1317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.080225][T22723] netlink: 'syz.2.5210': attribute type 29 has an invalid length. [ 748.111375][ T1317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.228110][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.243740][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.349196][T22736] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.5211'. [ 748.377206][T22736] /dev/rnullb0: Can't open blockdev [ 748.920481][T22759] /dev/rnullb0: Can't open blockdev [ 749.324315][ T982] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 749.514454][ T982] usb 6-1: Using ep0 maxpacket: 8 [ 749.538155][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.559026][ T982] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 749.578168][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 749.591141][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 749.625621][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 749.664182][ T982] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.690640][ T982] usb 6-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 749.700895][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.709859][ T982] usb 6-1: Product: syz [ 749.715629][ T982] usb 6-1: Manufacturer: syz [ 749.716945][ T5839] Bluetooth: hci0: command tx timeout [ 749.720289][ T982] usb 6-1: SerialNumber: syz [ 749.742448][ T982] usb 6-1: config 0 descriptor?? [ 749.775084][T22763] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 749.787082][ T982] ati_remote 6-1:0.0: ati_remote_probe: Unexpected endpoint_out [ 749.806489][ T2985] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 749.882325][ T5922] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 749.922666][ T5922] asix 5-1:0.0: probe with driver asix failed with error -71 [ 749.961096][ T5922] usb 5-1: USB disconnect, device number 20 [ 750.043694][T22788] /dev/rnullb0: Can't open blockdev [ 750.121085][ T5921] usb 6-1: USB disconnect, device number 37 [ 750.230185][T22795] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 750.243253][T22795] /dev/rnullb0: Can't open blockdev [ 750.305145][ T982] usb 7-1: USB disconnect, device number 29 [ 750.570353][T22807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.606564][T22807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.794419][ T5872] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 750.970037][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 751.014623][ T5872] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 751.074278][ T5872] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 751.110628][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.138322][T22820] /dev/rnullb0: Can't open blockdev [ 751.153128][ T5872] usb 5-1: config 0 descriptor?? [ 751.371900][T22818] netlink: 176 bytes leftover after parsing attributes in process `syz.2.5225'. [ 751.608539][T22807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 751.617560][T22807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.646436][T22833] /dev/rnullb0: Can't open blockdev [ 751.677541][T22834] /dev/rnullb0: Can't open blockdev [ 751.683127][T22809] FAT-fs (nullb0): bogus number of reserved sectors [ 751.689844][T22809] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 751.698592][T22807] overlay: Unknown parameter 'dont_appraise' [ 751.745454][ T5872] usbhid 5-1:0.0: can't add hid device: -71 [ 751.751949][ T5872] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 751.794829][ T5839] Bluetooth: hci0: command tx timeout [ 751.819905][ T5872] usb 5-1: USB disconnect, device number 21 [ 751.941008][ T30] audit: type=1326 audit(752.895:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 751.993986][ T30] audit: type=1326 audit(752.895:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.020502][ T30] audit: type=1326 audit(752.895:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.052873][ T30] audit: type=1326 audit(752.895:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.075540][ T30] audit: type=1326 audit(752.895:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.104625][ T30] audit: type=1326 audit(752.895:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.136250][ T30] audit: type=1326 audit(752.895:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.159060][T22504] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 752.203465][ T30] audit: type=1326 audit(752.895:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.225169][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.238554][ T30] audit: type=1326 audit(752.895:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.260198][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.269085][ T30] audit: type=1326 audit(752.895:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22825 comm="syz.5.5227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983c18e929 code=0x7fc00000 [ 752.290770][ C1] vkms_vblank_simulate: vblank timer overrun [ 752.355630][T22504] usb 7-1: Invalid ep0 maxpacket: 16 [ 752.484370][T22504] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 752.654414][T22504] usb 7-1: Invalid ep0 maxpacket: 16 [ 752.678978][T22504] usb usb7-port1: attempt power cycle [ 752.746155][T22872] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5235'. [ 753.022616][T22885] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 753.048551][T22885] /dev/rnullb0: Can't open blockdev [ 753.064323][T22504] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 753.104853][T22504] usb 7-1: Invalid ep0 maxpacket: 16 [ 753.155066][T22891] /dev/rnullb0: Can't open blockdev [ 753.162326][T22892] /dev/rnullb0: Can't open blockdev [ 753.237416][T22504] usb 7-1: new low-speed USB device number 33 using dummy_hcd [ 753.265387][T22504] usb 7-1: Invalid ep0 maxpacket: 16 [ 753.271132][T22504] usb usb7-port1: unable to enumerate USB device [ 753.275959][T22897] tmpfs: Unknown parameter 'grpqiota' [ 753.394721][ T5921] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 753.443900][T22906] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5243'. [ 753.577064][ T5921] usb 5-1: Using ep0 maxpacket: 16 [ 753.602607][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 753.624845][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 753.647860][ T5921] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a [ 753.657349][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.668662][T22916] /dev/rnullb0: Can't open blockdev [ 753.675394][ T5921] usb 5-1: Product: syz [ 753.684359][ T5921] usb 5-1: Manufacturer: syz [ 753.689027][ T5921] usb 5-1: SerialNumber: syz [ 753.717328][ T5921] usb 5-1: config 0 descriptor?? [ 753.971556][ T5921] pegasus_notetaker 5-1:0.0: probe with driver pegasus_notetaker failed with error -22 [ 754.002085][ T5921] usb 5-1: USB disconnect, device number 22 [ 754.057681][T22926] /dev/rnullb0: Can't open blockdev [ 754.247436][T22938] /dev/rnullb0: Can't open blockdev [ 754.550150][T22951] /dev/rnullb0: Can't open blockdev [ 754.639903][T22954] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5252'. [ 755.024438][T22973] /dev/rnullb0: Can't open blockdev [ 755.049439][T22969] /dev/rnullb0: Can't open blockdev [ 755.223073][T22976] tun0: tun_chr_ioctl cmd 26152 [ 755.249538][T22976] tun0: tun_chr_ioctl cmd 1074025675 [ 755.279197][T22976] tun0: persist enabled [ 755.302045][T22976] tun0: tun_chr_ioctl cmd 1074025675 [ 755.312747][T22976] tun0: persist enabled [ 755.323444][T22976] pvfs2: Unknown parameter 'veth0_vlan' [ 755.497319][T22987] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5261'. [ 755.544180][ T10] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 755.704223][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 755.716742][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 755.724793][ T10] usb 3-1: too many configurations: 27, using maximum allowed: 8 [ 755.747588][ T10] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 755.757472][ T10] usb 3-1: config 129 has no interface number 0 [ 755.763830][ T10] usb 3-1: config 129 interface 71 has no altsetting 0 [ 755.779133][ T10] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 755.788688][ T10] usb 3-1: config 129 has no interface number 0 [ 755.798916][ T10] usb 3-1: config 129 interface 71 has no altsetting 0 [ 755.807743][ T10] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 755.820826][ T10] usb 3-1: config 129 has no interface number 0 [ 755.829390][ T10] usb 3-1: config 129 interface 71 has no altsetting 0 [ 755.842360][T23000] /dev/rnullb0: Can't open blockdev [ 755.858073][ T10] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 755.869253][ T10] usb 3-1: config 129 has no interface number 0 [ 755.891802][ T10] usb 3-1: config 129 interface 71 has no altsetting 0 [ 755.906957][ T10] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 755.909630][T23002] overlayfs: failed to resolve './file0': -2 [ 755.918720][ T10] usb 3-1: config 129 has no interface number 0 [ 755.930623][ T10] usb 3-1: config 129 interface 71 has no altsetting 0 [ 755.950663][ T10] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 755.967994][ T10] usb 3-1: config 129 has no interface number 0 [ 755.981903][ T10] usb 3-1: config 129 interface 71 has no altsetting 0 [ 755.984163][ T5922] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 755.990032][ T10] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 756.010710][ T10] usb 3-1: config 129 has no interface number 0 [ 756.038209][ T10] usb 3-1: config 129 interface 71 has no altsetting 0 [ 756.057203][ T10] usb 3-1: config 129 has an invalid interface number: 71 but max is 0 [ 756.065671][ T10] usb 3-1: config 129 has no interface number 0 [ 756.085443][ T10] usb 3-1: config 129 interface 71 has no altsetting 0 [ 756.105783][ T10] usb 3-1: New USB device found, idVendor=2013, idProduct=0262, bcdDevice=5b.8b [ 756.116763][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.125068][ T10] usb 3-1: Product: syz [ 756.129253][ T10] usb 3-1: Manufacturer: syz [ 756.133866][ T10] usb 3-1: SerialNumber: syz [ 756.139945][T23006] syz.6.5266: attempt to access beyond end of device [ 756.139945][T23006] loop6: rw=0, sector=2, nr_sectors = 2 limit=0 [ 756.153752][ T5922] usb 6-1: device descriptor read/64, error -71 [ 756.167183][T23006] vxfs: unable to read disk superblock at 1 [ 756.173461][T23006] syz.6.5266: attempt to access beyond end of device [ 756.173461][T23006] loop6: rw=0, sector=16, nr_sectors = 2 limit=0 [ 756.197980][T23006] vxfs: unable to read disk superblock at 8 [ 756.203909][T23006] vxfs: can't find superblock. [ 756.327843][T23010] input: syz1 as /devices/virtual/input/input61 [ 756.405088][ T5922] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 756.554553][ T5922] usb 6-1: device descriptor read/64, error -71 [ 756.685004][T23020] /dev/rnullb0: Can't open blockdev [ 756.691598][ T5922] usb usb6-port1: attempt power cycle [ 756.862549][T23023] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5271'. [ 757.008017][T23027] usb usb1: usbfs: process 23027 (syz.6.5273) did not claim interface 0 before use [ 757.064190][ T5922] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 757.108203][ T5922] usb 6-1: device descriptor read/8, error -71 [ 757.166758][T23033] netlink: 116 bytes leftover after parsing attributes in process `syz.6.5275'. [ 757.200518][T23033] /dev/rnullb0: Can't open blockdev [ 757.285117][T23039] /dev/rnullb0: Can't open blockdev [ 757.364529][ T5922] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 757.434767][ T5922] usb 6-1: device descriptor read/8, error -71 [ 757.554599][ T5922] usb usb6-port1: unable to enumerate USB device [ 757.978346][T23045] loop2: detected capacity change from 0 to 7 [ 758.016380][T23045] Dev loop2: unable to read RDB block 7 [ 758.034618][T23045] loop2: unable to read partition table [ 758.040638][T23045] loop2: partition table beyond EOD, truncated [ 758.054173][T23045] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 758.247169][T23047] /dev/rnullb0: Can't open blockdev [ 758.457009][T23050] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5282'. [ 758.460572][ T10] usb 3-1: USB disconnect, device number 80 [ 758.681804][T23069] /dev/rnullb0: Can't open blockdev [ 758.769147][T23071] /dev/rnullb0: Can't open blockdev [ 758.926541][T23073] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5287'. [ 759.466876][T23076] loop2: detected capacity change from 0 to 7 [ 759.480663][T23076] Dev loop2: unable to read RDB block 7 [ 759.491016][T23076] loop2: unable to read partition table [ 759.523539][T23076] loop2: partition table beyond EOD, truncated [ 759.543096][T23076] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 759.675796][T23089] /dev/rnullb0: Can't open blockdev [ 759.727124][T23091] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5293'. [ 759.755499][ T5872] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 759.815762][T23097] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 759.894556][ T5872] usb 3-1: device descriptor read/64, error -71 [ 760.134223][ T5872] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 760.218666][T23123] loop2: detected capacity change from 0 to 7 [ 760.225964][T23123] Dev loop2: unable to read RDB block 7 [ 760.231595][T23123] loop2: unable to read partition table [ 760.238073][T23123] loop2: partition table beyond EOD, truncated [ 760.255728][T23123] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 760.274311][ T5872] usb 3-1: device descriptor read/64, error -71 [ 760.373807][T23125] /dev/rnullb0: Can't open blockdev [ 760.384444][ T5872] usb usb3-port1: attempt power cycle [ 760.432455][T23127] /dev/rnullb0: Can't open blockdev [ 760.440760][T23127] /dev/rnullb0: Can't open blockdev [ 760.454354][ T5921] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 760.618097][ T5921] usb 7-1: config 171 has an invalid interface number: 109 but max is 0 [ 760.645283][ T5921] usb 7-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 760.665499][ T5921] usb 7-1: config 171 has no interface number 0 [ 760.673227][ T5921] usb 7-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 760.727001][ T5921] usb 7-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 760.734537][ T5872] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 760.745993][ T5921] usb 7-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 760.748218][ T5921] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 760.795533][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.805268][T23140] /dev/rnullb0: Can't open blockdev [ 760.810566][ T5921] usb 7-1: Product: syz [ 760.814939][ T5921] usb 7-1: Manufacturer: syz [ 760.819112][ T5872] usb 3-1: device descriptor read/8, error -71 [ 760.819706][ T5921] usb 7-1: SerialNumber: syz [ 760.837569][T23121] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 760.895385][T23140] batadv0: entered allmulticast mode [ 760.993413][T23147] bpf: Bad value for 'uid' [ 761.049496][T23148] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 761.051759][T23121] /dev/rnullb0: Can't open blockdev [ 761.057167][T23148] /dev/rnullb0: Can't open blockdev [ 761.069555][ T5872] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 761.070983][T23121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.096284][T23121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.127302][ T5921] ath6kl: Failed to submit usb control message: -71 [ 761.134000][ T5921] ath6kl: unable to send the bmi data to the device: -71 [ 761.168990][ T5872] usb 3-1: device descriptor read/8, error -71 [ 761.199825][ T5921] ath6kl: Unable to send get target info: -71 [ 761.231772][ T5921] ath6kl: Failed to init ath6kl core: -71 [ 761.257104][ T5921] ath6kl_usb 7-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 761.311001][ T5872] usb usb3-port1: unable to enumerate USB device [ 761.329868][ T5921] usb 7-1: USB disconnect, device number 34 [ 761.502150][T23167] /dev/rnullb0: Can't open blockdev [ 761.606360][T23171] /dev/rnullb0: Can't open blockdev [ 761.742958][T23180] /dev/rnullb0: Can't open blockdev [ 761.759962][ T5872] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 761.822958][T23183] netlink: 'syz.6.5322': attribute type 1 has an invalid length. [ 761.836829][T23184] netlink: 'syz.6.5322': attribute type 1 has an invalid length. [ 761.848869][T23183] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.856698][T23184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 761.870899][T23183] /dev/rnullb0: Can't open blockdev [ 761.925531][ T5872] usb 6-1: Using ep0 maxpacket: 8 [ 761.948936][ T5872] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 761.964685][T19505] Bluetooth: hci0: command 0x0405 tx timeout [ 761.966063][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.999488][ T5872] usb 6-1: config 0 descriptor?? [ 762.001462][T23187] /dev/rnullb0: Can't open blockdev [ 762.007325][T23189] /dev/rnullb0: Can't open blockdev [ 762.229667][ T5872] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 762.255354][ T5872] asix 6-1:0.0: probe with driver asix failed with error -32 [ 762.409814][T23202] /dev/rnullb0: Can't open blockdev [ 762.417118][T23202] /dev/rnullb0: Can't open blockdev [ 762.538743][ T2985] bridge_slave_1: left allmulticast mode [ 762.554224][ T2985] bridge_slave_1: left promiscuous mode [ 762.563374][ T2985] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.632438][T23208] /dev/sg0: Can't lookup blockdev [ 762.697401][ T2985] bridge_slave_0: left allmulticast mode [ 762.726983][ T2985] bridge_slave_0: left promiscuous mode [ 762.735638][ T2985] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.826749][T23217] loop2: detected capacity change from 0 to 7 [ 762.857329][T10500] Dev loop2: unable to read RDB block 7 [ 762.862963][T10500] loop2: unable to read partition table [ 762.879145][T10500] loop2: partition table beyond EOD, truncated [ 762.897806][T23217] Dev loop2: unable to read RDB block 7 [ 762.917673][T23217] loop2: unable to read partition table [ 762.933779][T23217] loop2: partition table beyond EOD, truncated [ 762.963690][T23217] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 763.492153][ T2985] team0: Port device geneve1 removed [ 764.205438][ T2985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 764.223010][ T2985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 764.238728][ T2985] bond0 (unregistering): Released all slaves [ 764.345529][ T2985] : left promiscuous mode [ 764.403972][T23249] /dev/rnullb0: Can't open blockdev [ 764.430041][ T2985] tipc: Left network mode [ 764.514261][ T5871] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 764.572404][ T5872] usb 6-1: USB disconnect, device number 42 [ 764.694298][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 764.716758][ T5871] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 764.737420][ T5871] usb 3-1: config 0 has no interface number 0 [ 764.774006][ T5871] usb 3-1: config 0 interface 184 has no altsetting 0 [ 764.815605][ T5871] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 764.849186][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.873667][ T5871] usb 3-1: Product: syz [ 764.888236][ T5871] usb 3-1: Manufacturer: syz [ 764.901912][ T5871] usb 3-1: SerialNumber: syz [ 764.966794][T23258] loop2: detected capacity change from 0 to 7 [ 764.975935][ T5871] usb 3-1: config 0 descriptor?? [ 764.991647][T23258] Dev loop2: unable to read RDB block 7 [ 765.018696][T23258] loop2: unable to read partition table [ 765.064746][T23258] loop2: partition table beyond EOD, truncated [ 765.071235][ T5871] smsc75xx v1.0.0 [ 765.124225][T23258] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 765.365918][T23261] netlink: 220 bytes leftover after parsing attributes in process `syz.5.5345'. [ 765.384146][ T2985] hsr_slave_0: left promiscuous mode [ 765.421815][ T2985] hsr_slave_1: left promiscuous mode [ 765.439570][ T2985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 765.444251][ T5871] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 765.464987][T23265] /dev/rnullb0: Can't open blockdev [ 765.483507][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.483622][ T5871] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 765.560318][ T2985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 765.584711][ T2985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.628266][ T5871] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 765.638921][ T2985] veth1_macvtap: left promiscuous mode [ 765.648545][ T2985] veth0_macvtap: left promiscuous mode [ 765.663334][ T5871] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 765.677071][ T2985] veth1_vlan: left promiscuous mode [ 765.687012][ T5871] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 765.728790][ T5871] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 765.752295][ T5871] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -61 [ 765.800961][T23272] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5348'. [ 765.869879][T23273] syz.4.5348: attempt to access beyond end of device [ 765.869879][T23273] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 765.895781][T23273] XFS (nbd4): SB validate failed with error -5. [ 765.948267][ T982] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 766.106649][ T982] usb 6-1: device descriptor read/64, error -71 [ 766.372278][ T982] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 766.510145][ T982] usb 6-1: device descriptor read/64, error -71 [ 766.569099][ T2985] team0 (unregistering): Port device team_slave_1 removed [ 766.628339][ T2985] team0 (unregistering): Port device team_slave_0 removed [ 766.636585][ T982] usb usb6-port1: attempt power cycle [ 766.978859][ T982] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 767.007105][ T982] usb 6-1: device descriptor read/8, error -71 [ 767.285301][ T982] usb 6-1: new full-speed USB device number 46 using dummy_hcd [ 767.295191][ T5871] usb 3-1: USB disconnect, device number 85 [ 767.331546][ T982] usb 6-1: device descriptor read/8, error -71 [ 767.475934][ T982] usb usb6-port1: unable to enumerate USB device [ 767.513923][ T2985] IPVS: stop unused estimator thread 0... [ 767.622403][T23293] loop2: detected capacity change from 0 to 7 [ 767.630235][T23293] Dev loop2: unable to read RDB block 7 [ 767.641166][T23293] loop2: unable to read partition table [ 767.649177][T23293] loop2: partition table beyond EOD, truncated [ 767.665842][T23293] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 767.704224][ T5871] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 767.734493][ T5921] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 767.883023][ T5871] usb 3-1: Using ep0 maxpacket: 32 [ 767.891342][ T5871] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 767.902843][ T5871] usb 3-1: config 0 has no interface number 0 [ 767.911165][ T5871] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.911911][ T5921] usb 5-1: Using ep0 maxpacket: 8 [ 767.925356][ T5871] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.939857][ T5921] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 767.952740][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.957629][ T5871] usb 3-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 767.980409][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.985777][ T5921] usb 5-1: config 0 descriptor?? [ 768.022620][ T5871] usb 3-1: config 0 descriptor?? [ 768.214467][ T5921] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 768.245696][ T5921] asix 5-1:0.0: probe with driver asix failed with error -32 [ 768.495331][ T5921] kernel read not supported for file /sequencer (pid: 5921 comm: kworker/1:4) [ 768.509380][T23315] binder: 23314:23315 ioctl c018620c 200000000100 returned -22 [ 768.623614][T23320] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5358'. [ 768.657652][T23285] /dev/rnullb0: Can't open blockdev [ 768.669025][ T5871] uclogic 0003:28BD:0094.004E: failed retrieving string descriptor #100: -71 [ 768.679367][ T5871] uclogic 0003:28BD:0094.004E: failed retrieving pen parameters: -71 [ 768.692823][ T5871] uclogic 0003:28BD:0094.004E: pen probing failed: -71 [ 768.702484][ T5871] uclogic 0003:28BD:0094.004E: failed probing parameters: -71 [ 768.724243][ T5871] uclogic 0003:28BD:0094.004E: probe with driver uclogic failed with error -71 [ 768.763269][ T5871] usb 3-1: USB disconnect, device number 86 [ 768.780755][T23324] /dev/rnullb0: Can't open blockdev [ 768.788156][T23325] /dev/rnullb0: Can't open blockdev [ 768.982676][T23339] loop2: detected capacity change from 0 to 7 [ 768.999631][T10500] Dev loop2: unable to read RDB block 7 [ 769.008420][T10500] loop2: unable to read partition table [ 769.015231][T10500] loop2: partition table beyond EOD, truncated [ 769.040987][T23339] Dev loop2: unable to read RDB block 7 [ 769.047733][T23339] loop2: unable to read partition table [ 769.053943][T23339] loop2: partition table beyond EOD, truncated [ 769.063298][T23339] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 769.338945][T23357] /dev/rnullb0: Can't open blockdev [ 769.351856][T23353] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5368'. [ 769.446506][T23361] /dev/rnullb0: Can't open blockdev [ 769.471491][T23363] /dev/rnullb0: Can't open blockdev [ 769.559738][T23368] loop2: detected capacity change from 0 to 7 [ 769.568732][T10500] Dev loop2: unable to read RDB block 7 [ 769.579301][T10500] loop2: unable to read partition table [ 769.585916][T10500] loop2: partition table beyond EOD, truncated [ 769.605495][T23368] Dev loop2: unable to read RDB block 7 [ 769.611187][T23368] loop2: unable to read partition table [ 769.617913][T23368] loop2: partition table beyond EOD, truncated [ 769.626216][T23368] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 769.752046][T23373] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 769.772315][T23373] /dev/rnullb0: Can't open blockdev [ 769.848831][T23375] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 769.916463][T23380] cgroup: Invalid name [ 770.002766][T23384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5379'. [ 770.304582][ T10] usb 6-1: new full-speed USB device number 47 using dummy_hcd [ 770.364177][ T5871] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 770.442060][T22504] usb 5-1: USB disconnect, device number 23 [ 770.462328][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 770.472742][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.491589][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 770.509639][ T5871] usb 7-1: device descriptor read/64, error -71 [ 770.516088][T23396] loop2: detected capacity change from 0 to 7 [ 770.523521][T23396] Dev loop2: unable to read RDB block 7 [ 770.528390][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.530119][T23396] loop2: unable to read partition table [ 770.544423][T23396] loop2: partition table beyond EOD, truncated [ 770.553517][T23396] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 770.741999][ T10] usb 6-1: usb_control_msg returned -32 [ 770.748120][ T10] usbtmc 6-1:16.0: can't read capabilities [ 770.767521][ T5871] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 770.886069][ T982] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 770.904395][ T5871] usb 7-1: device descriptor read/64, error -71 [ 771.014652][ T5871] usb usb7-port1: attempt power cycle [ 771.057925][ T982] usb 5-1: not running at top speed; connect to a high speed hub [ 771.071639][ T982] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 771.085130][ T982] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 771.098917][ T982] usb 5-1: config 1 interface 0 has no altsetting 0 [ 771.109102][ T982] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 771.118663][ T982] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.130613][ T982] usb 5-1: Product: 攙⛮ꌾ夝Ḍܗ밉了廌糮筸ᔼӄ蕀ᘅ쀂兡痚줂㰬ଢ쮫ؼꌰ힬뱍鷿足殪⇮븧稵䈌巾忍뎚૜娑鍡顚걟⟽㐚ꔊ쯋퇙临䋮亾释ﲜ熓מּ緒㘹᲎٠쭉ᘈ䋻筱ﲶ濺ꞥ雾領坬뛴䬺ᘙ茌︚涙ଁ诤š爛⻟얩㭍့ਖ਼雔㶔ꄺ貺虀㏫茜אּ䧤䌇밣癩꼡疞㈤ﯴ飍Პ苦粜湁䁰幑ך샄螭뵡쑹堇 [ 771.195244][ T982] usb 5-1: Manufacturer: 쏻䡽恐̠⁜勒ɐ럲툇蹵짲薪㟜쬭ᡑ₣濬犌ꅨ癆ꡕ㲲疹쟓첯눳탉Ͷ핛朝ꋴ웚芅鵫筲穊厹ꆉ뉯裋⵮곀獛ᰂ៻鄽ꪮ丹쬸폻쓲錊딂긦톅䆈詶蚠ⴋ쀠ﻟ䑨䭂볖ሒ [ 771.229351][ T982] usb 5-1: SerialNumber: 룻磂愾쎶敱ᯨꆋ坂ꈊ摕ᤧ룁쑹梪槦鈯뱷䅿烌倏炓䱨㤓㙵䖧銟钹㊟㉠ࡧ伟⚸婾턟噊⑒˕㐀匁쭆㉋煏첸莰䅰谸誱嘺昊蚍珀₀㣁ą搯⭦䯶㳚鰜紬꣯谚쭣钥荣Ø鴶䲊ěHꨘ蓂䁶咪恻ᇤ쪷葽언 [ 771.282666][T23398] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 771.293112][T23398] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 771.354154][ T5871] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 771.384977][ T5871] usb 7-1: device descriptor read/8, error -71 [ 771.590055][T23410] tipc: Started in network mode [ 771.601107][ T10] usb 6-1: USB disconnect, device number 47 [ 771.604273][T23410] tipc: Node identity ac14140f, cluster identity 4711 [ 771.624230][ T5871] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 771.634274][T23410] tipc: New replicast peer: 255.255.255.31 [ 771.644813][T23410] tipc: Enabled bearer , priority 10 [ 771.656749][T23409] tipc: Enabling of bearer rejected, already enabled [ 771.657507][ T5871] usb 7-1: device descriptor read/8, error -71 [ 771.723288][T23398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.734755][T23398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.774743][ T5871] usb usb7-port1: unable to enumerate USB device [ 771.841000][T23418] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5391'. [ 771.951720][T23398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.970653][T23398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.995900][T23398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.024174][T23398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.038055][T23398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 772.051490][T23398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 772.065261][ T5839] Bluetooth: hci3: ACL packet for unknown connection handle 3294 [ 772.126155][T23432] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 772.141173][T23432] lo: entered promiscuous mode [ 772.146509][T23432] lo: left promiscuous mode [ 772.153632][T23432] /dev/rnullb0: Can't open blockdev [ 772.164435][ T982] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 772.276964][ T10] usb 5-1: USB disconnect, device number 24 [ 772.304449][T23436] mkiss: ax0: crc mode is auto. [ 772.326964][ T982] usb 6-1: Using ep0 maxpacket: 8 [ 772.338123][ T982] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 772.349835][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.362233][ T982] usb 6-1: config 0 descriptor?? [ 772.392152][T23437] mkiss: ax0: crc mode is auto. [ 772.402973][T23436] /dev/rnullb0: Can't open blockdev [ 772.557892][T23440] /dev/rnullb0: Can't open blockdev [ 772.572958][ T982] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 772.583253][ T982] asix 6-1:0.0: probe with driver asix failed with error -32 [ 772.634522][ T982] tipc: Node number set to 2886997007 [ 772.839137][T23442] cgroup: Unknown subsys name 'uid<00000000000000000000' [ 772.887861][T23442] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 772.895069][T23442] /dev/rnullb0: Can't open blockdev [ 772.952755][T23448] /dev/rnullb0: Can't open blockdev [ 772.975425][T23448] overlay: Unknown parameter 'fowner>00000000000000000000' [ 773.047504][T23452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5401'. [ 773.298093][T23462] netlink: 36 bytes leftover after parsing attributes in process `syz.6.5406'. [ 773.310456][T23462] /dev/rnullb0: Can't open blockdev [ 773.319505][T23460] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 773.394032][T23464] /dev/rnullb0: Can't open blockdev [ 773.483887][T23467] 9pnet_fd: Insufficient options for proto=fd [ 773.492979][T23467] /dev/rnullb0: Can't open blockdev [ 773.583043][T23471] /dev/rnullb0: Can't open blockdev [ 773.617499][T23472] /dev/rnullb0: Can't open blockdev [ 773.637125][T23465] /dev/rnullb0: Can't open blockdev [ 773.733011][T23474] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5410'. [ 773.950192][T23482] loop2: detected capacity change from 0 to 7 [ 773.962592][T23482] Dev loop2: unable to read RDB block 7 [ 773.971907][T23482] loop2: unable to read partition table [ 773.978680][T23482] loop2: partition table beyond EOD, truncated [ 773.985156][T23482] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 774.034578][ T5922] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 774.078946][T23484] /dev/rnullb0: Can't open blockdev [ 774.204281][ T5922] usb 7-1: Using ep0 maxpacket: 8 [ 774.213229][ T5922] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 774.239271][ T5922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.251224][ T5922] usb 7-1: Product: syz [ 774.258373][ T5922] usb 7-1: Manufacturer: syz [ 774.271611][ T5922] usb 7-1: SerialNumber: syz [ 774.282983][ T5922] usb 7-1: config 0 descriptor?? [ 774.498872][T23476] /dev/sg0: Can't lookup blockdev [ 774.520274][ T5922] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 774.540093][ T5922] gspca_sunplus: reg_w_riv err -71 [ 774.545785][ T982] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 774.553473][ T5922] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 774.566480][ T5922] usb 7-1: USB disconnect, device number 39 [ 774.673875][T23496] /dev/rnullb0: Can't open blockdev [ 774.714193][ T982] usb 5-1: Using ep0 maxpacket: 8 [ 774.728273][ T982] usb 5-1: config 0 interface 0 has no altsetting 0 [ 774.736022][ T982] usb 5-1: New USB device found, idVendor=0b05, idProduct=183d, bcdDevice= 0.00 [ 774.749172][ T982] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.760784][ T982] usb 5-1: config 0 descriptor?? [ 774.770212][T23498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5421'. [ 774.922536][T23502] loop2: detected capacity change from 0 to 7 [ 774.933862][T10500] Dev loop2: unable to read RDB block 7 [ 774.945046][T10500] loop2: unable to read partition table [ 774.950890][T10500] loop2: partition table beyond EOD, truncated [ 774.960993][ T5871] usb 6-1: USB disconnect, device number 48 [ 774.977878][T23502] Dev loop2: unable to read RDB block 7 [ 774.983528][T23502] loop2: unable to read partition table [ 775.014983][T23502] loop2: partition table beyond EOD, truncated [ 775.038330][T23504] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5424'. [ 775.043172][T23502] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 775.198809][T23508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.219389][ T982] asus 0003:0B05:183D.004F: item fetching failed at offset 2/5 [ 775.236089][ T982] asus 0003:0B05:183D.004F: Asus hid parse failed: -22 [ 775.253266][ T982] asus 0003:0B05:183D.004F: probe with driver asus failed with error -22 [ 775.415538][ T5871] usb 5-1: USB disconnect, device number 25 [ 775.642472][T23520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5430'. [ 776.092536][T23532] loop2: detected capacity change from 0 to 7 [ 776.114334][T23532] Dev loop2: unable to read RDB block 7 [ 776.120087][T23532] loop2: unable to read partition table [ 776.151403][T23532] loop2: partition table beyond EOD, truncated [ 776.168101][T23532] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 776.214206][ T5879] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 776.374316][ T5879] usb 7-1: device descriptor read/64, error -71 [ 776.473579][T23538] syz.5.5437: attempt to access beyond end of device [ 776.473579][T23538] loop5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 776.492659][T23538] (syz.5.5437,23538,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 776.502091][T23538] (syz.5.5437,23538,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 776.514986][T23538] (syz.5.5437,23538,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 776.524421][T23538] (syz.5.5437,23538,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 776.616300][ T5879] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 776.644208][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 776.754262][ T5879] usb 7-1: device descriptor read/64, error -71 [ 776.774860][T22504] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 776.794175][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 776.800664][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 776.809297][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 776.819220][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 776.829036][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 776.839040][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 776.849094][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.862874][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 776.872155][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.880261][ T5879] usb usb7-port1: attempt power cycle [ 776.892012][ T10] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 776.938093][T22504] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 776.947458][T22504] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 776.956432][T22504] usb 6-1: Product: syz [ 776.960716][T22504] usb 6-1: Manufacturer: syz [ 776.966051][T22504] usb 6-1: SerialNumber: syz [ 776.972552][T22504] usb 6-1: config 0 descriptor?? [ 776.982182][T22504] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 777.095723][T23535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 777.104911][T23535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 777.113560][T23535] netlink: 'syz.4.5436': attribute type 4 has an invalid length. [ 777.121598][T23535] netlink: 17 bytes leftover after parsing attributes in process `syz.4.5436'. [ 777.180456][T22504] sonixb 6-1:0.0: Error reading register 00: -71 [ 777.209023][T22504] usb 6-1: USB disconnect, device number 49 [ 777.226220][ T5879] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 777.242652][ T5871] usb 5-1: USB disconnect, device number 26 [ 777.271365][ T5879] usb 7-1: device descriptor read/8, error -71 [ 777.450761][T23549] /dev/rnullb0: Can't open blockdev [ 777.514307][ T5879] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 777.535272][ T5879] usb 7-1: device descriptor read/8, error -71 [ 777.583345][T23553] /dev/rnullb0: Can't open blockdev [ 777.645708][ T5879] usb usb7-port1: unable to enumerate USB device [ 777.652462][T23555] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5442'. [ 777.742851][T23559] loop2: detected capacity change from 0 to 7 [ 777.754870][T23559] Dev loop2: unable to read RDB block 7 [ 777.760726][T23559] loop2: unable to read partition table [ 777.771043][T23559] loop2: partition table beyond EOD, truncated [ 777.777725][T23559] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 777.800052][T23557] /dev/sg0: Can't lookup blockdev [ 778.136520][T23572] /dev/rnullb0: Can't open blockdev [ 778.234362][T23577] /dev/rnullb0: Can't open blockdev [ 778.239723][ T5879] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 778.304185][T23582] /dev/rnullb0: Can't open blockdev [ 778.384158][ T5879] usb 5-1: device descriptor read/64, error -71 [ 778.593017][T23601] /dev/rnullb0: Can't open blockdev [ 778.634362][ T5879] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 778.643909][T23604] /dev/rnullb0: Can't open blockdev [ 778.774872][ T5879] usb 5-1: device descriptor read/64, error -71 [ 778.884959][ T5879] usb usb5-port1: attempt power cycle [ 778.922112][T23618] /dev/rnullb0: Can't open blockdev [ 778.930388][T23619] fuse: Unknown parameter ' [ 778.930388][T23619] 0xffffffffffffffff' [ 778.981903][T23621] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 779.123955][T23625] /dev/rnullb0: Can't open blockdev [ 779.234598][ T5879] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 779.264845][ T5879] usb 5-1: device descriptor read/8, error -71 [ 779.464684][T23639] /dev/rnullb0: Can't open blockdev [ 779.519958][ T5879] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 779.565305][ T5879] usb 5-1: device descriptor read/8, error -71 [ 779.594223][ T5871] usb 7-1: new full-speed USB device number 44 using dummy_hcd [ 779.694678][ T5879] usb usb5-port1: unable to enumerate USB device [ 779.733361][T23652] /dev/rnullb0: Can't open blockdev [ 779.756209][ T5871] usb 7-1: unable to get BOS descriptor or descriptor too short [ 779.774903][ T5871] usb 7-1: not running at top speed; connect to a high speed hub [ 779.797791][ T5871] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 779.815996][ T5871] usb 7-1: config 0 has no interface number 0 [ 779.832340][ T5871] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 779.863998][ T5871] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 779.878393][ T5871] usb 7-1: config 0 interface 88 has no altsetting 0 [ 779.893726][T23656] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5480'. [ 779.896054][ T5871] usb 7-1: string descriptor 0 read error: -22 [ 779.914256][ T5871] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 779.933523][ T5871] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 779.965081][ T5871] usb 7-1: config 0 descriptor?? [ 779.984565][ T5871] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input63 [ 780.126663][T10654] udevd[10654]: Error opening device "/dev/input/event4": Input/output error [ 780.139508][T10654] udevd[10654]: Unable to EVIOCGABS device "/dev/input/event4" [ 780.142626][T23663] /dev/rnullb0: Can't open blockdev [ 780.151094][T10654] udevd[10654]: Unable to EVIOCGABS device "/dev/input/event4" [ 780.181988][ T982] usb 7-1: USB disconnect, device number 44 [ 780.829209][ T2985] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 780.992408][T23686] delete_channel: no stack [ 781.107095][T23692] /dev/rnullb0: Can't open blockdev [ 781.120042][T23693] /dev/rnullb0: Can't open blockdev [ 781.904209][ T5879] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 781.981954][T23717] /dev/rnullb0: Can't open blockdev [ 782.062805][T23719] /dev/rnullb0: Can't open blockdev [ 782.064120][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 782.086456][ T5879] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 782.104174][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.117276][ T5879] usb 5-1: config 0 descriptor?? [ 782.331538][ T5879] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 782.348552][ T5879] asix 5-1:0.0: probe with driver asix failed with error -32 [ 782.577006][T23733] /dev/rnullb0: Can't open blockdev [ 782.764253][ T5879] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 782.934251][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 782.949603][T23743] Invalid/unusable pipe [ 782.959753][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.980383][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.991175][ T5879] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 783.027104][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.052984][ T5879] usb 3-1: config 0 descriptor?? [ 783.080906][ T5879] hub 3-1:0.0: USB hub found [ 783.148282][T23750] /dev/rnullb0: Can't open blockdev [ 783.182740][T23702] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5492'. [ 783.265524][ T5879] hub 3-1:0.0: 1 port detected [ 783.474569][T23732] overlayfs: failed to resolve 'TޠYCQ?': -2 [ 783.496225][ T5879] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 783.512898][ T5879] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 783.532999][ T5879] usbhid 3-1:0.0: can't add hid device: -71 [ 783.549305][ T5879] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 783.587026][ T5879] usb 3-1: USB disconnect, device number 87 [ 783.627384][T23761] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5512'. [ 783.636895][T23761] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 784.133413][T23763] ieee802154 phy0 wpan0: encryption failed: -22 [ 784.432600][T23767] /dev/rnullb0: Can't open blockdev [ 784.478138][T23770] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 784.733183][ T5879] usb 5-1: USB disconnect, device number 31 [ 784.832611][T23787] block device autoloading is deprecated and will be removed. [ 784.887898][T23787] syz.6.5522: attempt to access beyond end of device [ 784.887898][T23787] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 785.042537][T23794] /dev/rnullb0: Can't open blockdev [ 785.085427][T23798] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 785.104281][T23798] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 785.113141][T23798] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 785.138753][T23798] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 785.518277][ T982] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 785.684171][ T982] usb 6-1: Using ep0 maxpacket: 8 [ 785.692737][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 785.709725][ T982] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 785.731815][ T982] usb 6-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 785.742729][ T982] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.759784][ T982] usb 6-1: Product: syz [ 785.774150][T22722] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 785.782937][ T982] usb 6-1: Manufacturer: syz [ 785.788841][ T982] usb 6-1: SerialNumber: syz [ 785.796855][ T982] usb 6-1: config 0 descriptor?? [ 785.813055][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 785.813069][ T30] audit: type=1326 audit(786.765:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23823 comm="syz.4.5536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f836f98e929 code=0x0 [ 785.866626][T23826] bridge0: port 3(syz_tun) entered blocking state [ 785.877595][T23826] bridge0: port 3(syz_tun) entered disabled state [ 785.885103][T23826] syz_tun: entered allmulticast mode [ 785.892069][T23826] syz_tun: entered promiscuous mode [ 785.899842][T23826] bridge0: port 3(syz_tun) entered blocking state [ 785.907638][T23826] bridge0: port 3(syz_tun) entered forwarding state [ 785.919671][T23826] netlink: 'syz.4.5536': attribute type 10 has an invalid length. [ 785.928745][T23826] bridge0: port 3(syz_tun) entered disabled state [ 785.935414][T23826] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.942716][T23826] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.954755][T22722] usb 3-1: Using ep0 maxpacket: 8 [ 785.958668][T23826] bridge0: port 3(syz_tun) entered blocking state [ 785.962489][T22722] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 785.966374][T23826] bridge0: port 3(syz_tun) entered forwarding state [ 785.976822][T22722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.983722][T23826] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.995140][T22722] usb 3-1: config 0 descriptor?? [ 785.997153][T23826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.009524][T23826] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.016758][T23826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.041716][T23826] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 786.207936][T22722] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 786.209582][ T10] usb 6-1: USB disconnect, device number 50 [ 786.219481][T22722] asix 3-1:0.0: probe with driver asix failed with error -32 [ 786.822279][T23841] /dev/rnullb0: Can't open blockdev [ 786.978681][T23853] /dev/rnullb0: Can't open blockdev [ 787.023695][T23856] Bluetooth: MGMT ver 1.23 [ 787.087494][T23859] /dev/rnullb0: Can't open blockdev [ 787.127245][T23856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 787.141370][T23856] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 787.161977][T23863] sp0: Synchronizing with TNC [ 787.172653][T23861] [U] [ 787.544180][ T5871] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 787.698896][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 787.710504][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 787.722023][ T5871] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 787.731856][ T5871] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 787.744804][ T5871] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 787.753859][ T5871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.764709][ T5871] usb 6-1: config 0 descriptor?? [ 788.175291][ T5871] plantronics 0003:047F:FFFF.0050: invalid report_size -2062826183 [ 788.183372][ T5871] plantronics 0003:047F:FFFF.0050: item 0 4 1 7 parsing failed [ 788.191573][ T5871] plantronics 0003:047F:FFFF.0050: parse failed [ 788.198115][ T5871] plantronics 0003:047F:FFFF.0050: probe with driver plantronics failed with error -22 [ 788.379930][T23866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.388762][T23866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.399054][T22722] IPVS: starting estimator thread 0... [ 788.456012][T23866] could not allocate digest TFM handle crct10dif-generic [ 788.468261][T22722] usb 6-1: USB disconnect, device number 51 [ 788.506135][T23867] IPVS: using max 52 ests per chain, 124800 per kthread [ 788.550594][ T982] usb 3-1: USB disconnect, device number 88 [ 788.640168][T23875] /dev/rnullb0: Can't open blockdev [ 788.893022][T23889] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.984195][ T982] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 789.074418][ T5839] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 789.075178][T19505] Bluetooth: hci3: command 0x0406 tx timeout [ 789.080957][ T5838] Bluetooth: hci0: command 0x0405 tx timeout [ 789.159710][T19226] bridge0: port 3(syz_tun) entered disabled state [ 789.168533][T19505] Bluetooth: hci4: command 0x0c1a tx timeout [ 789.176849][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.189799][ T982] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.220275][ T982] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 789.230716][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.236092][T19226] syz_tun (unregistering): left allmulticast mode [ 789.251247][ T982] usb 3-1: config 0 descriptor?? [ 789.276105][T19226] syz_tun (unregistering): left promiscuous mode [ 789.282587][T19226] bridge0: port 3(syz_tun) entered disabled state [ 789.294239][ T43] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 789.364217][ T5871] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 789.446406][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 789.465891][ T43] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 789.488366][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.524886][ T43] usb 7-1: config 0 descriptor?? [ 789.533784][ T36] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.673164][ T36] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.771425][ T43] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 789.805244][ T43] asix 7-1:0.0: probe with driver asix failed with error -32 [ 789.819048][ T36] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.867780][ T982] usb 3-1: language id specifier not provided by device, defaulting to English [ 789.969781][ T36] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.042766][ T43] wg0 speed is unknown, defaulting to 1000 [ 790.054083][ T43] syz2: Port: 1 Link DOWN [ 790.264408][ T36] bridge_slave_1: left allmulticast mode [ 790.270127][ T36] bridge_slave_1: left promiscuous mode [ 790.285988][T23876] Mount JFS Failure: -22 [ 790.299966][T23876] jfs_mount failed w/return code = -22 [ 790.301242][T23911] netlink: 'syz.5.5560': attribute type 21 has an invalid length. [ 790.305942][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.324729][ T982] uclogic 0003:256C:006D.0051: failed retrieving string descriptor #200: -71 [ 790.333585][ T982] uclogic 0003:256C:006D.0051: failed retrieving pen parameters: -71 [ 790.344320][ T982] uclogic 0003:256C:006D.0051: failed probing pen v2 parameters: -71 [ 790.353178][T23911] netlink: 176 bytes leftover after parsing attributes in process `syz.5.5560'. [ 790.353837][ T982] uclogic 0003:256C:006D.0051: failed probing parameters: -71 [ 790.374079][ T36] bridge_slave_0: left allmulticast mode [ 790.380384][ T36] bridge_slave_0: left promiscuous mode [ 790.386762][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.414313][T23912] NILFS (rnullb0): couldn't find nilfs on the device [ 790.414748][ T982] uclogic 0003:256C:006D.0051: probe with driver uclogic failed with error -71 [ 790.459562][ T982] usb 3-1: USB disconnect, device number 89 [ 790.621821][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 790.640659][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 790.659244][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 790.688732][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 790.706318][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 790.773861][ T36] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 791.002393][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 791.014634][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 791.025769][ T36] bond0 (unregistering): Released all slaves [ 791.141521][T23914] wg0 speed is unknown, defaulting to 1000 [ 791.194335][ T36] tipc: Left network mode [ 791.194939][T23921] overlay: Unknown parameter 'dont_appraise' [ 791.638318][T23933] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5564'. [ 791.922650][T23944] loop2: detected capacity change from 0 to 7 [ 791.940202][T23944] Dev loop2: unable to read RDB block 7 [ 791.982094][T23944] loop2: unable to read partition table [ 792.043176][T23944] loop2: partition table beyond EOD, truncated [ 792.095379][T23950] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5568'. [ 792.106613][T23944] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 792.152706][ T5922] usb 7-1: USB disconnect, device number 45 [ 792.171277][T23953] Can't find a SQUASHFS superblock on rnullb0 [ 792.370772][ T36] hsr_slave_0: left promiscuous mode [ 792.383466][T23958] XFS (rnullb0): Invalid superblock magic number [ 792.400416][ T36] hsr_slave_1: left promiscuous mode [ 792.409687][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.439624][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.462220][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.470603][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 792.558213][ T36] veth1_macvtap: left promiscuous mode [ 792.563806][ T36] veth0_macvtap: left promiscuous mode [ 792.582027][ T36] veth1_vlan: left promiscuous mode [ 792.596163][ T36] veth0_vlan: left promiscuous mode [ 792.624757][T23961] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/rnullb0": -EINTR [ 792.698489][T23980] 9pnet_virtio: no channels available for device /dev/rnullb0 [ 792.762416][T19505] Bluetooth: hci1: command tx timeout [ 792.945177][ T2985] smc: removing ib device syz0 [ 793.492272][ T982] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 793.518244][ T36] team0 (unregistering): Port device team_slave_1 removed [ 793.580949][ T36] team0 (unregistering): Port device team_slave_0 removed [ 793.655800][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 793.678485][ T982] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 793.687864][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.704642][ T982] usb 3-1: config 0 descriptor?? [ 793.958927][ T982] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 793.970479][ T982] asix 3-1:0.0: probe with driver asix failed with error -32 [ 794.083235][ T36] batadv0 (unregistering): left allmulticast mode [ 794.401965][ T5871] ================================================================== [ 794.410092][ T5871] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x6e/0x190 [ 794.418883][ T5871] Read of size 8 at addr ffff88807273c2e8 by task kworker/0:3/5871 [ 794.426777][ T5871] [ 794.429097][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/0:3 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 794.429114][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 794.429124][ T5871] Workqueue: events smc_ib_port_event_work [ 794.429146][ T5871] Call Trace: [ 794.429152][ T5871] [ 794.429158][ T5871] dump_stack_lvl+0x189/0x250 [ 794.429174][ T5871] ? __virt_addr_valid+0x1c8/0x5c0 [ 794.429190][ T5871] ? rcu_is_watching+0x15/0xb0 [ 794.429205][ T5871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 794.429219][ T5871] ? rcu_is_watching+0x15/0xb0 [ 794.429232][ T5871] ? lock_release+0x4b/0x3e0 [ 794.429248][ T5871] ? __virt_addr_valid+0x1c8/0x5c0 [ 794.429263][ T5871] ? __virt_addr_valid+0x4a5/0x5c0 [ 794.429278][ T5871] print_report+0xd2/0x2b0 [ 794.429295][ T5871] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 794.429313][ T5871] kasan_report+0x118/0x150 [ 794.429330][ T5871] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 794.429349][ T5871] __ethtool_get_link_ksettings+0x6e/0x190 [ 794.429367][ T5871] ib_get_eth_speed+0x15e/0x7b0 [ 794.429384][ T5871] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 794.429402][ T5871] ? do_raw_spin_unlock+0x122/0x240 [ 794.429422][ T5871] rxe_query_port+0x93/0x3b0 [ 794.429436][ T5871] ib_query_port+0x16d/0x830 [ 794.429454][ T5871] smc_ib_port_event_work+0x15a/0x940 [ 794.429474][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 794.429490][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 794.429504][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 794.429518][ T5871] process_scheduled_works+0xae1/0x17b0 [ 794.429541][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 794.429560][ T5871] worker_thread+0x8a0/0xda0 [ 794.429574][ T5871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 794.429595][ T5871] ? __kthread_parkme+0x7b/0x200 [ 794.429612][ T5871] kthread+0x70e/0x8a0 [ 794.429629][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 794.429643][ T5871] ? __pfx_kthread+0x10/0x10 [ 794.429659][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 794.429675][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 794.429693][ T5871] ? __pfx_kthread+0x10/0x10 [ 794.429709][ T5871] ret_from_fork+0x3fc/0x770 [ 794.429723][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 794.429737][ T5871] ? __switch_to_asm+0x39/0x70 [ 794.429752][ T5871] ? __switch_to_asm+0x33/0x70 [ 794.429767][ T5871] ? __pfx_kthread+0x10/0x10 [ 794.429783][ T5871] ret_from_fork_asm+0x1a/0x30 [ 794.429803][ T5871] [ 794.429807][ T5871] [ 794.665803][ T5871] Allocated by task 15789: [ 794.670213][ T5871] kasan_save_track+0x3e/0x80 [ 794.674883][ T5871] __kasan_kmalloc+0x93/0xb0 [ 794.679468][ T5871] __kvmalloc_node_noprof+0x30d/0x5f0 [ 794.684831][ T5871] alloc_netdev_mqs+0xa6/0x11e0 [ 794.689675][ T5871] rtnl_create_link+0x31f/0xd10 [ 794.694528][ T5871] rtnl_newlink_create+0x25c/0xb00 [ 794.699630][ T5871] rtnl_newlink+0x16d6/0x1c70 [ 794.704296][ T5871] rtnetlink_rcv_msg+0x7cc/0xb70 [ 794.709224][ T5871] netlink_rcv_skb+0x208/0x470 [ 794.713973][ T5871] netlink_unicast+0x75b/0x8d0 [ 794.718722][ T5871] netlink_sendmsg+0x805/0xb30 [ 794.723474][ T5871] __sock_sendmsg+0x219/0x270 [ 794.728160][ T5871] __sys_sendto+0x3bd/0x520 [ 794.732663][ T5871] __x64_sys_sendto+0xde/0x100 [ 794.737419][ T5871] do_syscall_64+0xfa/0x3b0 [ 794.741921][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.747829][ T5871] [ 794.750151][ T5871] Freed by task 36: [ 794.753944][ T5871] kasan_save_track+0x3e/0x80 [ 794.758615][ T5871] kasan_save_free_info+0x46/0x50 [ 794.763635][ T5871] __kasan_slab_free+0x62/0x70 [ 794.768390][ T5871] kfree+0x18e/0x440 [ 794.772275][ T5871] device_release+0x99/0x1c0 [ 794.776852][ T5871] kobject_put+0x22b/0x480 [ 794.781254][ T5871] netdev_run_todo+0xd2e/0xea0 [ 794.786014][ T5871] default_device_exit_batch+0x81e/0x890 [ 794.791632][ T5871] ops_undo_list+0x522/0x990 [ 794.796209][ T5871] cleanup_net+0x4c5/0x800 [ 794.800610][ T5871] process_scheduled_works+0xae1/0x17b0 [ 794.806142][ T5871] worker_thread+0x8a0/0xda0 [ 794.810717][ T5871] kthread+0x70e/0x8a0 [ 794.814775][ T5871] ret_from_fork+0x3fc/0x770 [ 794.819354][ T5871] ret_from_fork_asm+0x1a/0x30 [ 794.824108][ T5871] [ 794.826415][ T5871] The buggy address belongs to the object at ffff88807273c000 [ 794.826415][ T5871] which belongs to the cache kmalloc-cg-4k of size 4096 [ 794.840717][ T5871] The buggy address is located 744 bytes inside of [ 794.840717][ T5871] freed 4096-byte region [ffff88807273c000, ffff88807273d000) [ 794.854593][ T5871] [ 794.856909][ T5871] The buggy address belongs to the physical page: [ 794.863312][ T5871] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x72738 [ 794.872058][ T5871] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 794.880538][ T5871] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 794.888066][ T5871] page_type: f5(slab) [ 794.892035][ T5871] raw: 00fff00000000040 ffff88801a84b500 ffffea0000c69600 dead000000000002 [ 794.900619][ T5871] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 794.909188][ T5871] head: 00fff00000000040 ffff88801a84b500 ffffea0000c69600 dead000000000002 [ 794.917841][ T5871] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 794.926496][ T5871] head: 00fff00000000003 ffffea0001c9ce01 00000000ffffffff 00000000ffffffff [ 794.935151][ T5871] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 794.943799][ T5871] page dumped because: kasan: bad access detected [ 794.950200][ T5871] page_owner tracks the page as allocated [ 794.955901][ T5871] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5840, tgid 5840 (syz-executor), ts 71150025355, free_ts 71140051084 [ 794.977258][ T5871] post_alloc_hook+0x240/0x2a0 [ 794.982017][ T5871] get_page_from_freelist+0x21e4/0x22c0 [ 794.987561][ T5871] __alloc_frozen_pages_noprof+0x181/0x370 [ 794.993359][ T5871] alloc_pages_mpol+0x232/0x4a0 [ 794.998198][ T5871] allocate_slab+0x8a/0x3b0 [ 795.002689][ T5871] ___slab_alloc+0xbfc/0x1480 [ 795.007356][ T5871] __kmalloc_noprof+0x305/0x4f0 [ 795.012193][ T5871] __register_sysctl_table+0x72/0x1340 [ 795.017731][ T5871] __addrconf_sysctl_register+0x398/0x530 [ 795.023440][ T5871] addrconf_sysctl_register+0x168/0x1c0 [ 795.028971][ T5871] ipv6_add_dev+0xd46/0x1370 [ 795.033544][ T5871] addrconf_notify+0x794/0x1010 [ 795.038383][ T5871] notifier_call_chain+0x1b3/0x3e0 [ 795.043479][ T5871] register_netdevice+0x1608/0x1ae0 [ 795.048666][ T5871] macvlan_common_newlink+0x120a/0x1980 [ 795.054205][ T5871] rtnl_newlink_create+0x30d/0xb00 [ 795.059316][ T5871] page last free pid 5833 tgid 5833 stack trace: [ 795.065623][ T5871] __free_frozen_pages+0xc71/0xe70 [ 795.070733][ T5871] __slab_free+0x326/0x400 [ 795.075149][ T5871] qlist_free_all+0x97/0x140 [ 795.079725][ T5871] kasan_quarantine_reduce+0x148/0x160 [ 795.085168][ T5871] __kasan_slab_alloc+0x22/0x80 [ 795.090004][ T5871] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 795.095886][ T5871] __alloc_skb+0x112/0x2d0 [ 795.100287][ T5871] netlink_ack+0x146/0xa50 [ 795.104690][ T5871] netlink_rcv_skb+0x28c/0x470 [ 795.109440][ T5871] netlink_unicast+0x75b/0x8d0 [ 795.114190][ T5871] netlink_sendmsg+0x805/0xb30 [ 795.118941][ T5871] __sock_sendmsg+0x219/0x270 [ 795.123608][ T5871] __sys_sendto+0x3bd/0x520 [ 795.128097][ T5871] __x64_sys_sendto+0xde/0x100 [ 795.132848][ T5871] do_syscall_64+0xfa/0x3b0 [ 795.137334][ T5871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.143212][ T5871] [ 795.145521][ T5871] Memory state around the buggy address: [ 795.151136][ T5871] ffff88807273c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 795.159183][ T5871] ffff88807273c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 795.167232][ T5871] >ffff88807273c280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 795.175279][ T5871] ^ [ 795.182715][ T5871] ffff88807273c300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 795.190760][ T5871] ffff88807273c380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 795.198803][ T5871] ================================================================== [ 795.220426][T19505] Bluetooth: hci1: command tx timeout [ 795.226481][ T5871] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 795.233697][ T5871] CPU: 0 UID: 0 PID: 5871 Comm: kworker/0:3 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 795.245762][ T5871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 795.255824][ T5871] Workqueue: events smc_ib_port_event_work [ 795.261645][ T5871] Call Trace: [ 795.264911][ T5871] [ 795.267830][ T5871] dump_stack_lvl+0x99/0x250 [ 795.272410][ T5871] ? __asan_memcpy+0x40/0x70 [ 795.276990][ T5871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.282187][ T5871] ? __pfx__printk+0x10/0x10 [ 795.286770][ T5871] panic+0x2db/0x790 [ 795.290655][ T5871] ? __pfx_panic+0x10/0x10 [ 795.295063][ T5871] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 795.300952][ T5871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 795.307270][ T5871] ? print_memory_metadata+0x314/0x400 [ 795.312720][ T5871] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 795.318691][ T5871] check_panic_on_warn+0x89/0xb0 [ 795.323619][ T5871] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 795.329589][ T5871] end_report+0x78/0x160 [ 795.333821][ T5871] kasan_report+0x129/0x150 [ 795.338331][ T5871] ? __ethtool_get_link_ksettings+0x6e/0x190 [ 795.344324][ T5871] __ethtool_get_link_ksettings+0x6e/0x190 [ 795.350134][ T5871] ib_get_eth_speed+0x15e/0x7b0 [ 795.354991][ T5871] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 795.360358][ T5871] ? do_raw_spin_unlock+0x122/0x240 [ 795.365555][ T5871] rxe_query_port+0x93/0x3b0 [ 795.370166][ T5871] ib_query_port+0x16d/0x830 [ 795.374755][ T5871] smc_ib_port_event_work+0x15a/0x940 [ 795.380121][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 795.385311][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 795.391019][ T5871] ? process_scheduled_works+0x9ef/0x17b0 [ 795.396730][ T5871] process_scheduled_works+0xae1/0x17b0 [ 795.402288][ T5871] ? __pfx_process_scheduled_works+0x10/0x10 [ 795.408275][ T5871] worker_thread+0x8a0/0xda0 [ 795.412863][ T5871] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 795.419193][ T5871] ? __kthread_parkme+0x7b/0x200 [ 795.424129][ T5871] kthread+0x70e/0x8a0 [ 795.428192][ T5871] ? __pfx_worker_thread+0x10/0x10 [ 795.433293][ T5871] ? __pfx_kthread+0x10/0x10 [ 795.437875][ T5871] ? _raw_spin_unlock_irq+0x23/0x50 [ 795.443066][ T5871] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.448255][ T5871] ? __pfx_kthread+0x10/0x10 [ 795.452834][ T5871] ret_from_fork+0x3fc/0x770 [ 795.457416][ T5871] ? __pfx_ret_from_fork+0x10/0x10 [ 795.462517][ T5871] ? __switch_to_asm+0x39/0x70 [ 795.467272][ T5871] ? __switch_to_asm+0x33/0x70 [ 795.472026][ T5871] ? __pfx_kthread+0x10/0x10 [ 795.476608][ T5871] ret_from_fork_asm+0x1a/0x30 [ 795.481365][ T5871] [ 795.484626][ T5871] Kernel Offset: disabled [ 795.488938][ T5871] Rebooting in 86400 seconds..