last executing test programs: 3m51.509700275s ago: executing program 0 (id=37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6gre0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="10031400e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000f06000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 3m51.177013794s ago: executing program 0 (id=41): creat(&(0x7f0000001380)='./file0\x00', 0x4) brk(0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}}) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) 3m51.044769313s ago: executing program 0 (id=43): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648e000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, 0x0, 0x0) mlock(&(0x7f00007c0000/0x1000)=nil, 0x1000) 3m50.856245891s ago: executing program 0 (id=45): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) r1 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, 0x0) (async) ioctl$SG_IO(r1, 0x2285, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x800) lgetxattr(0x0, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)=ANY=[@ANYBLOB="18000000550001002bbd7000000000040000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) 3m50.575904123s ago: executing program 0 (id=47): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4000010, r0, 0xf648d000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000550001002bbd7000000000000200000004002000a1a748fe5a5f"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r1, 0x1, 0x2e, 0x0, &(0x7f0000000440)) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3m49.596861672s ago: executing program 0 (id=51): r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000002c0)="714c9e99070e0d87d4525c19d6449cd8ac6e38a05a78a4945bafd5f118f78616e0129d37cac4253940d4ec668f2ae6fdf658232336e6e1a84b7fac72275b457b071198a0a9c14996fec6571f2df5ba0291a172d98e75b6adacbbdf74ed0a595649b12f545e66643b6034346a3aa30ffebaedd09aaa67dc7285e35bdecce19338ddfa0c5283b3a29be470d4d4b45c86100353351bfbf073218a30214b4fec27ffdd3ac4d961e8dbfca6cf3cd8462f02b8fa5adc0e1d521136e77315661dcf583d3bb325b66995489a1b9f95d04d30b44a8ec99c2b4abe67cf3d85c50d2a4cf7b4a9e861a878dae484a2f4939c63e075ba33", 0xf1}], 0x2) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1, 0xd, 0x1f9, 0x0}) fanotify_init(0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x0, 0xbdc4cb52f915c1a8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000001440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r1, @ANYBLOB=',cache=fscache']) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r7, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402"], 0x0) fanotify_mark(r3, 0x80, 0x48000009, r2, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x9, 0x7b, 0x5, 0x80000008}]}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='gfs2\x00', 0x208002, 0x0) 3m34.682312912s ago: executing program 32 (id=51): r0 = memfd_create(&(0x7f0000000100)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xca', 0x2) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000440)="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", 0x1000}, {&(0x7f00000002c0)="714c9e99070e0d87d4525c19d6449cd8ac6e38a05a78a4945bafd5f118f78616e0129d37cac4253940d4ec668f2ae6fdf658232336e6e1a84b7fac72275b457b071198a0a9c14996fec6571f2df5ba0291a172d98e75b6adacbbdf74ed0a595649b12f545e66643b6034346a3aa30ffebaedd09aaa67dc7285e35bdecce19338ddfa0c5283b3a29be470d4d4b45c86100353351bfbf073218a30214b4fec27ffdd3ac4d961e8dbfca6cf3cd8462f02b8fa5adc0e1d521136e77315661dcf583d3bb325b66995489a1b9f95d04d30b44a8ec99c2b4abe67cf3d85c50d2a4cf7b4a9e861a878dae484a2f4939c63e075ba33", 0xf1}], 0x2) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000400)={0x2, 0x1, 0x1, 0xd, 0x1f9, 0x0}) fanotify_init(0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x0, 0xbdc4cb52f915c1a8) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) open(&(0x7f0000000180)='./file0\x00', 0x440, 0xc2) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r6, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000001440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESOCT=r1, @ANYBLOB=',cache=fscache']) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) writev(r7, &(0x7f0000000000)=[{&(0x7f00000006c0)='\t', 0x2003f}], 0x1) syz_usb_connect(0x0, 0x33, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007b8955403a0976245b0d0102030109022100010d20000009040000000e0100000f2402"], 0x0) fanotify_mark(r3, 0x80, 0x48000009, r2, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x9, 0x7b, 0x5, 0x80000008}]}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r8, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='gfs2\x00', 0x208002, 0x0) 5.495032953s ago: executing program 4 (id=1516): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000798000/0x2000)=nil, 0x2000, 0x5a051feb1c984a1c, 0x1010, r0, 0x7e000000) 5.436092106s ago: executing program 4 (id=1518): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x101100, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000040)={0xb, 0xa, 0xa80}) 5.303043434s ago: executing program 4 (id=1519): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f00000000c0)="f5c89e1e", 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0xfffffff7, @loopback, 0x1ff}, 0x1c) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000200)=0x2d, 0x4) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) (async) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 4.350469274s ago: executing program 4 (id=1525): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000380), 0x12) syz_usb_connect(0x2, 0x3f, &(0x7f0000000240)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009058502000000001009058b1e"], 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 2.999169217s ago: executing program 3 (id=1530): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}], 0x1, 0x2000) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/38, 0x26}], 0x1}, 0xfffffffd}], 0x1, 0x12162, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x80003, 0x0) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) getpeername$qrtr(r4, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x1000000, 0x4, 0x1, 0x0, 0x0, [{0x9, 0x0, 0x0, '\x00', 0xff}, {0xfd}, {0x0, 0x7}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {}, {0x0, 0x0, 0xc6, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x2, 0x0, '\x00', 0x80}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x9}, {0x40, 0x0, 0x40, '\x00', 0x24}, {}, {0x0, 0x0, 0x8}, {}, {0x0, 0x9, 0x4}, {0x0, 0x2, 0xb, '\x00', 0x20}, {}, {0x3, 0x0, 0x0, '\x00', 0xfc}, {0x20, 0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xb}, {0x0, 0x9}, {0x0, 0x0, 0x40}]}}) fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./cgroup\x00', r2, r6) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}], 0x1, 0x2000) (async) recvmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/38, 0x26}], 0x1}, 0xfffffffd}], 0x1, 0x12162, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x80003, 0x0) (async) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) socket$qrtr(0x2a, 0x2, 0x0) (async) getpeername$qrtr(r4, 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r5, 0x4048aec9, &(0x7f0000000140)={0x6, 0x0, @ioapic={0x1000000, 0x4, 0x1, 0x0, 0x0, [{0x9, 0x0, 0x0, '\x00', 0xff}, {0xfd}, {0x0, 0x7}, {0x0, 0x0, 0x0, '\x00', 0xfd}, {}, {0x0, 0x0, 0xc6, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x2, 0x0, '\x00', 0x80}, {0x0, 0x0, 0x0, '\x00', 0x4}, {0x9}, {0x40, 0x0, 0x40, '\x00', 0x24}, {}, {0x0, 0x0, 0x8}, {}, {0x0, 0x9, 0x4}, {0x0, 0x2, 0xb, '\x00', 0x20}, {}, {0x3, 0x0, 0x0, '\x00', 0xfc}, {0x20, 0x0, 0x4}, {0x0, 0x0, 0x0, '\x00', 0x7}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, '\x00', 0xb}, {0x0, 0x9}, {0x0, 0x0, 0x40}]}}) (async) fstat(0xffffffffffffffff, &(0x7f00000001c0)) (async) lchown(&(0x7f0000000080)='./cgroup\x00', r2, r6) (async) 2.998045079s ago: executing program 3 (id=1531): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x180) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) connect$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, @any, 0xd}, 0xa) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000000c0)={"0e00", 0x0, 0x6, 0x2, 0x0, 0x0, "f78000", '\x00\x00\a\x00', "0300", "fcffffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0c436d743c97c443084000", "ff81000000008000"]}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000040)={0x5, 0x1, 0x5, 0x3ae9, 0x3, 0x3, "02f8ffff070000fbb4883d45f400", 0x8, 0xae, 0x7, 0x8, 0x2, 0x0, 0x7}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) syz_open_dev$hiddev(&(0x7f0000000000), 0x684f, 0x40000) creat(0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r4, &(0x7f0000000100)=""/107, 0x6b) write$nci(r4, &(0x7f0000000100)=ANY=[], 0x4) write$proc_mixer(r4, &(0x7f0000000000)=[{'LINE', @void}, {'DIGITAL1', @void}], 0xe) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000001c0)=0x1, 0xffe7) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "00000004000100", "6abc0000b31600010000000100100400", "f0630400", "c14ec98dcd2ad89f"}, 0x28) sendto$inet6(r3, &(0x7f0000000240)="c62ee5d6a89f2387cb4093532f7c0a22ce", 0xffffffffffffff69, 0x8040, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x4580b000) 2.993439375s ago: executing program 1 (id=1537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(0xffffffffffffffff) ioctl$KVM_CHECK_EXTENSION(r1, 0xae01, 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000000)={0x0, 0x308000, 0x8}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) recvmmsg(r2, &(0x7f0000001f80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000021c0)=""/4096, 0x17c}], 0x1}, 0x8bf}], 0x1, 0x40000100, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e24, 0xdd48, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, {0xa, 0x4e22, 0x6462, @empty, 0x5e}, 0x0, {[0x3, 0x9, 0x3a, 0x2, 0x0, 0xb, 0x0, 0x8000]}}, 0x5c) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000900)={0x0, 0x48f5, 0x1, [0xfffffffffffffffc, 0x100000001, 0x8, 0x9, 0x406], [0x3, 0x3, 0x1, 0x0, 0x100000000, 0x922, 0x2, 0x72200ef2, 0x2, 0x80, 0x0, 0x3ff, 0x2, 0x401, 0x6, 0x4, 0x5, 0x7, 0xef9, 0x7fffffffffffffff, 0x4, 0x100, 0x8, 0x1, 0x1, 0x3, 0x8, 0x9, 0x1751800000000000, 0x4, 0xb, 0x5, 0x10, 0xac57, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x7, 0x4, 0x8, 0x0, 0x100000000, 0x3ff, 0x0, 0x0, 0x1000, 0x6, 0x1, 0x8000000000000000, 0x1, 0x2, 0x4, 0x746, 0x7, 0x6, 0x1, 0xe, 0x5, 0x12a, 0x4, 0x4, 0x1000, 0x8000000000000008, 0xffffffff, 0x1, 0x100000001, 0x8, 0x2, 0x8, 0x0, 0x3, 0x4f2850b7, 0xd9b, 0x3, 0x7fffffffffffffff, 0x2, 0x10e2, 0x4, 0xa, 0x91, 0x1, 0xb, 0xe95a, 0x0, 0x10000, 0x5, 0x1, 0xfffffffffffffffc, 0xa8f, 0x8, 0x4, 0x61, 0x1, 0x101, 0x8, 0x6, 0x8, 0x1000, 0x2, 0x3, 0x6, 0x1, 0x3, 0x8000000000000001, 0x7fffffff, 0x1, 0xe2, 0x6c, 0xa7e4, 0x4, 0x2, 0x8000000000000001, 0x6, 0x28e5, 0x2, 0x7, 0xd6, 0x7, 0x8, 0x100, 0xfff, 0xdf]}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000d40)={0x0, 0x5, {0x6, @usage=0xffffffffffffffff, 0x0, 0x7, 0x4, 0x10, 0x3, 0x3, 0x9, @struct={0x1, 0x6}, 0xb, 0x10001, [0x7fffffffffffffff, 0x7, 0xda2e, 0xffffffffffffffff, 0x8, 0x6]}, {0x800, @struct={0x0, 0xc37f}, 0x0, 0x7f, 0x804, 0x2, 0x2, 0x5, 0x4d, @usage=0x9, 0x8, 0x3, [0x2, 0x6, 0xe, 0x7, 0x9, 0x1000]}, {0x2, @usage=0xfffffffffffffff9, r3, 0x5, 0x100000000, 0x2, 0x6, 0x5, 0x1, @usage=0x9, 0x5f201e36, 0x0, [0x1, 0x4, 0x8, 0x9, 0x570, 0x106]}, {0x401, 0x1, 0xfffffffffffffff7}}) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xcfa, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x40086602, &(0x7f0000000080)={0x17e}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r6, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000480)={r8, 0x101, 0x80, 0x9, 0x100, 0x1}, 0x14) sendto$inet(r2, &(0x7f0000000640)="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", 0xfffffffffffffde9, 0x4c011, 0x0, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000380)=""/212, 0xd4}], 0x1, 0xffeffffb, 0x1007) 2.918038374s ago: executing program 3 (id=1538): syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946f2270ab4edbe20facf6f1d6052d5fe92744ca46439ef57826bb82875d02c450a2ae26f553a63c8be0f") ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="2e00000010008188040f6fec59acbc0435a181003f00000003010000000000000e000d000d6ed60012801900121f", 0x2e}], 0x1}, 0x0) ptrace$setregset(0x4205, r0, 0x2, &(0x7f0000000380)={&(0x7f0000000480)="c08a463a9ec7c4e9232edcc65d2df73f95f65440e3a2d6a338de2ca32c2b1639040069f3afecd0666612c61bdc164a7cbcb0dabb9deada7bab42e5f1bd370eb17fbd97e9b1c6b59c116dc7ada62b32cb18dc19360a3c2a0fe951bfd4a6817882fcc981b4814f89e46e18a28604f7517d8f4140ae7e3c6168b89267f7be17a70499c5abbd896fe43dbed3c3256011ccf77267fc410aa6438d970fa66fbc", 0x9d}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x5c}}, 0x0) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r8, 0x2000) 1.915725825s ago: executing program 2 (id=1545): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4420, 0x0) r0 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x3, 0x2) syz_clone3(&(0x7f0000000380)={0x104000000, &(0x7f0000000100), &(0x7f0000000140)=0x0, &(0x7f0000000180), {0x10}, &(0x7f00000001c0)=""/147, 0x93, &(0x7f0000000280)=""/182, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000400)={'\x00', 0x8, 0x6, 0x8, 0x7, 0x6, 0x0}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000200)={&(0x7f000049b000/0x3000)=nil, &(0x7f000059e000/0x2000)=nil, 0x3000, 0x7}) setreuid(0x0, 0xee00) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000080)=""/152) lsetxattr$trusted_overlay_upper(&(0x7f0000000480)='./cgroup\x00', &(0x7f00000004c0), &(0x7f0000000500)={0x0, 0xfb, 0x95, 0x1, 0x3, "cacd9d1a9ccef54edf90002498a890bc", "44874e6ab3e6c45d9348d05b05e06b5ddafbd5bdf3666f3788e8e4c624bbc11d365b862781f3cf4ec57a31cbfac0cf6ae95b7d2dd01939f4d0dc297d65930bcb1db0a7315dceb1c40c60b4dd2421fb1382e70c40330726d0a734263ed679832be233c94a4d574e305df55df2370e93dc5b4c96aa519cd3419d7cb3cb22adcd03"}, 0x95, 0x5) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(r4, 0xae80, 0x0) kcmp(r1, r2, 0x5, r0, r0) 1.915295528s ago: executing program 2 (id=1546): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) fsopen(0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) dup(0xffffffffffffffff) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_INFO(r1, 0x3, 0x0) clock_gettime(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 1.912855421s ago: executing program 1 (id=1547): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x22020600) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x2, 0x101, 0x5, 0x0, [{0xd, 0x9, 0x6, '\x00', 0x1}, {0x6, 0x2, 0x26, '\x00', 0xfc}, {0x2, 0xef, 0xd, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0x9, 0x2, '\x00', 0x62}, {0x0, 0x3, 0x2, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x4}, {0x9, 0xdb, 0x1}, {0x81, 0x23, 0x5, '\x00', 0x2}, {0xde, 0x20, 0x3}, {0x40, 0x4, 0xf8, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xfe}, {0x7, 0x3, 0x2b, '\x00', 0x6}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0x40, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x72}, {0x6e, 0x4, 0x4, '\x00', 0xe}, {0x7, 0x2, 0x0, '\x00', 0x7}, {0xf, 0x7, 0x5}, {0x1, 0x6, 0x9}, {0x4, 0x6, 0x1, '\x00', 0x8}, {0xee, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0x3}, {0x8, 0x9, 0x54, '\x00', 0x8}]}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@empty, 0x0, 0x3, 0x0, 0x0, 0xa, 0x0, 0x20, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}}, [@tmpl={0x144, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x0, 0x0, 0xff}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x1, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x3c}, 0x2, @in=@empty, 0xffffffff}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1}]}]}, 0x1fc}}, 0x0) personality(0x5400004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7fc00000) r5 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000340)={r5}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) 1.84814619s ago: executing program 3 (id=1548): r0 = fsopen(&(0x7f0000000540)='msdos\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r1, 0xf648e000) madvise(&(0x7f000026d000/0x2000)=nil, 0x2000, 0x16) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001180)={0x18, 0x55, 0x1, 0x70bd2b, 0x0, {0x2}, [@typed={0x4, 0x120}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.780313373s ago: executing program 3 (id=1549): creat(&(0x7f0000001380)='./file0\x00', 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x9b, 0x1c, 0x3d, 0x10, 0x67b, 0x331a, 0x4a31, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x5, 0x0, 0x0, [{{0x9, 0x4, 0xa1, 0x0, 0x0, 0xc2, 0x16, 0x2}}]}}]}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c7910006007c09e8fe55a10a0017", 0x1f}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b904020000", 0x2}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 1.769480615s ago: executing program 1 (id=1550): openat$rnullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={0x34, r2, 0x5, 0x70bd25, 0x8, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0xc, 0x49, [0xfac05, 0xfac01]}]]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x488c0) write$sysctl(r0, &(0x7f0000000580)='1\x00', 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000440)) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x7, 'vlan0\x00', {0x3}, 0x4}) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x2208080, 0x0) 1.615113508s ago: executing program 1 (id=1551): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x2004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) unshare(0x40280) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') setns(r1, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e00)={0x0, 0x99a, 0x4, 0x91c14f9d3c8235f9}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000900)={r2, 0x7ff, 0x7, 0x1}) syz_clone3(&(0x7f0000000d80)={0xf00a2000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$bind(&(0x7f0000000440)='./file0/file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0845658, &(0x7f0000000880)={0x0, 0x10}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x2004, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) (async) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) (async) unshare(0x40280) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') (async) setns(r1, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000e00)={0x0, 0x99a, 0x4, 0x91c14f9d3c8235f9}) (async) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000900)={r2, 0x7ff, 0x7, 0x1}) (async) syz_clone3(&(0x7f0000000d80)={0xf00a2000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mount$bind(&(0x7f0000000440)='./file0/file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) (async) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0845658, &(0x7f0000000880)={0x0, 0x10}) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) (async) 1.436428953s ago: executing program 2 (id=1552): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x8, &(0x7f0000000180), &(0x7f0000000200)=0x4) creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x48000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 1.356064525s ago: executing program 2 (id=1553): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$vcsu(&(0x7f0000000080), 0x200, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @broadcast}, 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) 1.210669397s ago: executing program 4 (id=1554): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86", 0x28}], 0x2}], 0x1, 0x4040850) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg(r1, &(0x7f0000002e40)=[{{&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x1, 0xa, 0xc8, 0xd, "da9c386c0671b4e376ad74c087a6e47da86c0050f6290a4d527c4cc67c29f5493bef655384b906f680a3699af1f21cf70fad0b120583c8e8f31d3e29a88f63", 0x26}, 0x80, 0x0}}], 0x1, 0xc080) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a86", 0x28}], 0x2}], 0x1, 0x4040850) (async) socket$caif_stream(0x25, 0x1, 0x0) (async) sendmmsg(r1, &(0x7f0000002e40)=[{{&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x1, 0xa, 0xc8, 0xd, "da9c386c0671b4e376ad74c087a6e47da86c0050f6290a4d527c4cc67c29f5493bef655384b906f680a3699af1f21cf70fad0b120583c8e8f31d3e29a88f63", 0x26}, 0x80, 0x0}}], 0x1, 0xc080) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00'}) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x4000000, 0x0, 0x0}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b34, &(0x7f0000000000)={'wlan0\x00'}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) (async) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000000)) (async) 1.21026745s ago: executing program 2 (id=1555): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'none\x00', 0x1, 0x7, 0x78}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f21, 0x3, 'rr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x0, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'none\x00', 0x1, 0x7, 0x78}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4f21, 0x3, 'rr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x0, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) (async) 1.082055417s ago: executing program 1 (id=1556): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) kexec_load(0x5e, 0x1, &(0x7f0000000240)=[{0x0, 0x0, 0x6, 0xfffffffffffffffb}], 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x1, 0x0, @ioapic={0x8082801, 0x8, 0x8, 0x1ff, 0x0, [{0x3, 0x6, 0x9, '\x00', 0xe}, {0x5, 0xb, 0x72, '\x00', 0x6}, {0xfe, 0x5, 0x9, '\x00', 0x5}, {0x81, 0x3, 0x8, '\x00', 0x5}, {0xb, 0x50, 0x7f, '\x00', 0x60}, {0x0, 0x0, 0x2}, {0x6, 0x9, 0x1, '\x00', 0xa}, {0xd, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0x0, '\x00', 0xff}, {0x6, 0x3, 0x0, '\x00', 0x6}, {0x40, 0x4, 0x2, '\x00', 0x1}, {0x8, 0x4, 0x19, '\x00', 0xff}, {0x3, 0x86, 0xc, '\x00', 0xf9}, {0x5, 0x4f, 0x2}, {0x64, 0x87, 0x96, '\x00', 0x7}, {0xb, 0x0, 0x23, '\x00', 0x7b}, {0x3, 0x7, 0xd1}, {0x68, 0x3, 0x2, '\x00', 0x3}, {0x8, 0x9e, 0xc0, '\x00', 0x2}, {0x3e, 0x48, 0xa, '\x00', 0x2}, {0x7, 0x1, 0x2, '\x00', 0x1}, {0x3, 0x7, 0x6, '\x00', 0x4}, {0x93, 0x9, 0x4, '\x00', 0xe6}, {0x3, 0x7f, 0xe0, '\x00', 0x47}]}}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) close(0x3) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @pic={0x0, 0x7, 0x5, 0x93, 0x0, 0x0, 0x4, 0xbb, 0x2, 0xc0, 0x6d, 0x26, 0x61, 0x7, 0x95, 0xd}}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000004c0)={"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"}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000008c0)={"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"}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='vxfs\x00', 0x200c0f0, 0x0) 906.892091ms ago: executing program 4 (id=1557): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x1400037e) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0x1f2) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000280)=[@acquire], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x17, 0x0, &(0x7f0000000700)=[@request_death, @release], 0x54, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@dev, @in=@private}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000000c0)=0xe8) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000080), 0x1180403, &(0x7f00000003c0)={[{@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@nfs_export_on}], [{@dont_appraise}, {@subj_user={'subj_user', 0x3d, '\\]&-^K'}}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) close(r5) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r7, 0x1, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0x1, 0x0, 0x0, 0x0, r4}]) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r9, 0x45809000) ioctl$COMEDI_CHANINFO(r8, 0x80306403, &(0x7f0000000040)={0x1000, 0x0, 0x0, 0x0}) 830.994422ms ago: executing program 2 (id=1558): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000000201, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_GET_SPECULATION_CTRL(0x23, 0x5, 0x7fffffffeff3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000000)) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x2800, 0xd59f83, 0x200019f2, 0x3f, 0x19ef, 0x83, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0x1, 0x38, {0x8, 0xffffffff}, 0xd0, 0x9}}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xe8) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x1810000, &(0x7f0000000340)=ANY=[@ANYBLOB="7472616e733d76697274696f2c6e6f78617474722c76657273696f6e3d3970323030302e752c61e3636573733d636c69656e742c64666c747569643d", @ANYRESHEX, @ANYBLOB=',noxattr,directio,uid<', @ANYRESDEC=r5, @ANYBLOB=',smackfsroot=\x00,\x00']) 9.668941ms ago: executing program 3 (id=1559): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x2760c000) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYRES64=r1]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f000068c000/0x1000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0x0, 0x0, 0x10000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x2, 0x0, 0x7fff, 0x0, 0x9, 0x0, 0x7], 0xeeee8000, 0x2113c0}) preadv(r4, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1, 0x583, 0x2) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) mmap(&(0x7f0000782000/0x1000)=nil, 0x1000, 0x0, 0x8010, r5, 0xd1d4d000) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_KEYBIT(r6, 0x40045565, 0x1fa) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(ecb-camellia-aesni-avx2)\x00'}, 0x58) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r3, &(0x7f0000001e80)=""/96, 0x60) (async) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xeb) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) pwritev(r7, &(0x7f0000000b00)=[{&(0x7f0000000100)="010000005cc135121e58e6d23b58765bc592fd71b19c05d42faf337052402ce7f05b0cc598bdfa5c", 0x28}], 0x1, 0x0, 0x0) (async) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x13) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) modify_ldt$write(0x1, &(0x7f00000002c0)={0x81, 0xffffffffffffffff, 0x1000, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r8, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xd6d4}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="15ffffff240001002bbd70000000000002000000bcd27d06b26adf0f6010280668a22e991461ad1ce597c4ad87bd74ae0b9ad6db38822b4749aa5cb81a612628985c0a0b5f9b721a8dd1e5085c832dddf1a6905456a17e98a3b63e69e01ef5704ab1a6de129a8ba5472b24193e34a9f892963eba2805cf710bf47cbb0fe8b54ca298dca0de8225480af4a20c4a59d892ab4c4c62167fd16cfdcf9170fa0a92763f7cdd5456a12eb5fdff836652151caefd2a55ea9aa168e585eebfbb48777cc69562ac8628612959b8538d5328cf8714758a980715b04cc4c6f80330bbfb0000"], 0x18}, 0x1, 0x0, 0x0, 0x4c504}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 0s ago: executing program 1 (id=1560): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000101401002cbd7000fe080003000100000008004a000100000008000100000000000800030000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x5, 0xed, 0x20b1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r8}) read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2024) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r9, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r9, &(0x7f00000003c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}}, 0x48) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) kernel console output (not intermixed with test programs): s value: 253 [ 231.576098][ T43] usb 5-1: config 0 interface 0 has no altsetting 0 [ 231.592401][ T43] usb 5-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 231.603475][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.623139][ T43] usb 5-1: config 0 descriptor?? [ 231.680327][ T8511] Scaler: ================= START STATUS ================= [ 231.692915][ T8511] Scaler: ================== END STATUS ================== [ 232.092283][ T43] zeroplus 0003:0C12:0030.0009: hidraw0: USB HID v0.03 Device [HID 0c12:0030] on usb-dummy_hcd.4-1/input0 [ 232.129325][ T43] zeroplus 0003:0C12:0030.0009: no inputs found [ 232.164951][ T8534] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 232.206675][ T8534] VFS: Can't find a romfs filesystem on dev rnullb0. [ 232.206675][ T8534] [ 232.260083][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.720'. [ 232.426513][ T5945] usb 5-1: USB disconnect, device number 26 [ 232.470712][ T8537] fido_id[8537]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 232.670419][ T8553] kAFS: unable to lookup cell '' [ 232.996979][ T43] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 233.056119][ T929] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 233.179460][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 233.187388][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.199702][ T43] usb 5-1: config 227 has an invalid interface number: 101 but max is 0 [ 233.211214][ T43] usb 5-1: config 227 has no interface number 0 [ 233.224096][ T43] usb 5-1: config 227 interface 101 altsetting 158 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 233.239376][ T43] usb 5-1: config 227 interface 101 has no altsetting 0 [ 233.247130][ T929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.265308][ T929] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 233.287712][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.296141][ T43] usb 5-1: New USB device found, idVendor=040b, idProduct=6521, bcdDevice=c6.59 [ 233.305256][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.332015][ T43] usb 5-1: Product: syz [ 233.338071][ T929] usb 3-1: config 0 descriptor?? [ 233.346286][ T5856] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 233.356394][ T43] usb 5-1: Manufacturer: syz [ 233.365169][ T43] usb 5-1: SerialNumber: syz [ 233.465338][ T8572] gfs2: not a GFS2 filesystem [ 233.516248][ T5856] usb 4-1: Using ep0 maxpacket: 32 [ 233.524245][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.560685][ T5856] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 233.582337][ T5856] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 233.594873][ T5856] usb 4-1: Product: syz [ 233.599765][ T5856] usb 4-1: Manufacturer: syz [ 233.605009][ T5856] usb 4-1: SerialNumber: syz [ 233.615801][ T8553] gfs2: not a GFS2 filesystem [ 233.625320][ T5856] usb 4-1: config 0 descriptor?? [ 233.649151][ T43] xbox_remote_probe: Unexpected desc.bNumEndpoints: 2 [ 233.670112][ T43] usb 5-1: USB disconnect, device number 27 [ 233.753836][ T929] usbhid 3-1:0.0: can't add hid device: -71 [ 233.760329][ T929] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 233.783013][ T929] usb 3-1: USB disconnect, device number 40 [ 233.839656][ T5856] usb 4-1: USB disconnect, device number 44 [ 234.292131][ T8587] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 234.450362][ T5868] Bluetooth: hci4: unexpected event for opcode 0x200f [ 234.475654][ T8593] hugetlbfs: Bad value '' for mount option 'size' [ 234.475654][ T8593] [ 234.523372][ T8593] /dev/rnullb0: Can't open blockdev [ 234.614930][ T8599] /dev/rnullb0: Can't open blockdev [ 234.746743][ T929] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 234.756043][ T5856] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 234.838726][ T8609] netlink: 'syz.1.762': attribute type 3 has an invalid length. [ 234.852061][ T8609] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 234.862169][ T8609] netlink: 192 bytes leftover after parsing attributes in process `syz.1.762'. [ 234.877570][ T8609] NCSI netlink: No device for ifindex 0 [ 234.884190][ T8612] /dev/rnullb0: Can't open blockdev [ 234.941798][ T929] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 234.951105][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.989820][ T929] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 235.005893][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.017084][ T929] usb 4-1: config 220 has no interface number 2 [ 235.024299][ T5856] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 235.037513][ T929] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 235.066096][ T5856] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 235.077447][ T929] usb 4-1: config 220 interface 0 has no altsetting 0 [ 235.084277][ T929] usb 4-1: config 220 interface 76 has no altsetting 0 [ 235.097400][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.118125][ T929] usb 4-1: config 220 interface 1 has no altsetting 0 [ 235.132879][ T929] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 235.144403][ T5856] usb 5-1: config 0 descriptor?? [ 235.156127][ T929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.180057][ T929] usb 4-1: Product: syz [ 235.184342][ T929] usb 4-1: Manufacturer: syz [ 235.202993][ T929] usb 4-1: SerialNumber: syz [ 235.488299][ T8632] /dev/rnullb0: Can't open blockdev [ 235.603767][ T5856] plantronics 0003:047F:FFFF.000A: reserved main item tag 0xd [ 235.695545][ T5856] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 235.856534][ T8591] nbd: must specify a size in bytes for the device [ 235.865600][ T3475] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.016524][ T929] usb 4-1: selecting invalid altsetting 0 [ 236.025042][ T929] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 236.025082][ T929] usb 4-1: No valid video chain found. [ 236.039444][ T929] usb 4-1: selecting invalid altsetting 0 [ 236.039479][ T929] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 236.045567][ T929] usb 4-1: USB disconnect, device number 45 [ 236.231430][ T8646] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 236.285480][ T8646] netlink: 44 bytes leftover after parsing attributes in process `syz.2.769'. [ 236.347644][ T929] usb 5-1: USB disconnect, device number 28 [ 236.462805][ T8652] /dev/rnullb0: Can't open blockdev [ 236.473158][ T8653] /dev/rnullb0: Can't open blockdev [ 236.547217][ T8655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.557051][ T8655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.737788][ T8661] loop6: detected capacity change from 0 to 7 [ 236.746685][ T8661] Dev loop6: unable to read RDB block 7 [ 236.752379][ T8661] loop6: AHDI p1 p2 [ 236.758891][ T8661] loop6: partition table partially beyond EOD, truncated [ 236.767632][ T8661] loop6: p1 start 926365495 is beyond EOD, truncated [ 236.842813][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 237.029335][ T8672] dns_resolver: Unsupported server list version (56) [ 237.106794][ T8676] /dev/rnullb0: Can't open blockdev [ 237.442309][ T8685] /dev/rnullb0: Can't open blockdev [ 237.660910][ T8697] /dev/rnullb0: Can't open blockdev [ 237.668722][ T8696] loop6: detected capacity change from 0 to 7 [ 237.682716][ T8696] Dev loop6: unable to read RDB block 7 [ 237.689532][ T8696] loop6: AHDI p1 p2 [ 237.693488][ T8696] loop6: partition table partially beyond EOD, truncated [ 237.717658][ T8701] /dev/rnullb0: Can't open blockdev [ 237.723802][ T8696] loop6: p1 start 926365495 is beyond EOD, truncated [ 237.836872][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 237.978268][ T8714] /dev/rnullb0: Can't open blockdev [ 237.981950][ T8700] syz.3.785 (8700) used greatest stack depth: 17712 bytes left [ 238.346256][ T929] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 238.518837][ T929] usb 4-1: config 0 has no interfaces? [ 238.530079][ T929] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 238.531572][ T8731] comedi comedi0: rti802: I/O port conflict (0x80008,4) [ 238.565850][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.601271][ T929] usb 4-1: config 0 descriptor?? [ 238.710712][ T8740] /dev/rnullb0: Can't open blockdev [ 238.761678][ T8742] loop6: detected capacity change from 0 to 7 [ 238.771031][ T8742] Dev loop6: unable to read RDB block 7 [ 238.786102][ T8742] loop6: AHDI p1 p2 [ 238.794181][ T8742] loop6: partition table partially beyond EOD, truncated [ 238.803040][ T8742] loop6: p1 start 926365495 is beyond EOD, truncated [ 238.845635][ T929] usb 4-1: USB disconnect, device number 46 [ 238.908246][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 239.042254][ T8753] /dev/rnullb0: Can't open blockdev [ 239.143456][ T8756] gfs2: gfs2 mount does not exist [ 239.216281][ T8758] batadv_slave_1: entered promiscuous mode [ 239.234742][ T8758] batadv_slave_1: left promiscuous mode [ 239.251429][ T8760] netlink: 176 bytes leftover after parsing attributes in process `syz.2.802'. [ 239.262264][ T8758] /dev/rnullb0: Can't open blockdev [ 239.276841][ T8764] /dev/rnullb0: Can't open blockdev [ 239.369190][ T8768] loop6: detected capacity change from 0 to 7 [ 239.387159][ T8768] Dev loop6: unable to read RDB block 7 [ 239.393990][ T8770] 8021q: VLANs not supported on nr0 [ 239.399847][ T8768] loop6: AHDI p1 p2 [ 239.403810][ T8768] loop6: partition table partially beyond EOD, truncated [ 239.461194][ T8768] loop6: p1 start 926365495 is beyond EOD, truncated [ 239.519304][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 239.550523][ T8778] /dev/rnullb0: Can't open blockdev [ 239.680106][ T8783] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 240.046137][ T929] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 240.055330][ T8799] netlink: 'syz.2.812': attribute type 1 has an invalid length. [ 240.219094][ T929] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.230295][ T929] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 240.301216][ T8813] loop6: detected capacity change from 0 to 7 [ 240.313498][ T7866] Dev loop6: unable to read RDB block 7 [ 240.323380][ T7866] loop6: AHDI p1 p2 [ 240.341852][ T7866] loop6: partition table partially beyond EOD, truncated [ 240.360721][ T7866] loop6: p1 start 926365495 is beyond EOD, truncated [ 240.394483][ T929] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.394816][ T8813] Dev loop6: unable to read RDB block 7 [ 240.405942][ T929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.435846][ T929] usb 5-1: Product: syz [ 240.440072][ T929] usb 5-1: Manufacturer: syz [ 240.444692][ T929] usb 5-1: SerialNumber: syz [ 240.449569][ T8813] loop6: AHDI p1 p2 [ 240.453618][ T8813] loop6: partition table partially beyond EOD, truncated [ 240.490912][ T929] cdc_mbim 5-1:1.0: skipping garbage [ 240.508186][ T8813] loop6: p1 start 926365495 is beyond EOD, truncated [ 240.530944][ T8816] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20001 [ 240.556641][ T8816] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20001 [ 240.634769][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 240.686804][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 240.689500][ T8783] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 240.924780][ T8826] /dev/rnullb0: Can't open blockdev [ 240.992076][ T929] cdc_mbim 5-1:1.0: bind() failure [ 241.014334][ T929] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 241.055574][ T929] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 241.085672][ T929] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 241.121530][ T929] usb 5-1: USB disconnect, device number 29 [ 241.282574][ T5868] Bluetooth: hci1: Malformed Event: 0x02 [ 241.284547][ T8837] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 241.296775][ T8837] /dev/rnullb0: Can't open blockdev [ 241.499825][ T8853] loop6: detected capacity change from 0 to 7 [ 241.520422][ T8853] Dev loop6: unable to read RDB block 7 [ 241.543426][ T8853] loop6: AHDI p1 p2 [ 241.561003][ T8853] loop6: partition table partially beyond EOD, truncated [ 241.581460][ T8853] loop6: p1 start 926365495 is beyond EOD, truncated [ 241.711189][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 241.855346][ T8862] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.881121][ T8862] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.046502][ T8868] /dev/rnullb0: Can't open blockdev [ 242.069965][ T8869] loop6: detected capacity change from 0 to 7 [ 242.137720][ T8875] /dev/rnullb0: Can't open blockdev [ 242.205112][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.214371][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.238468][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.247818][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.256604][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.265804][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.289876][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.299109][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.313308][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.322557][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.333703][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.342946][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.351553][ T8868] ldm_validate_partition_table(): Disk read failed. [ 242.364610][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.373841][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.389252][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.398542][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.411123][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.420454][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.429334][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 242.438553][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 242.459232][ T8868] Dev loop6: unable to read RDB block 0 [ 242.473149][ T8879] /dev/rnullb0: Can't open blockdev [ 242.485287][ T8868] loop6: unable to read partition table [ 242.494155][ T8868] loop6: partition table beyond EOD, truncated [ 242.660389][ T8883] /dev/rnullb0: Can't open blockdev [ 242.678108][ T8884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.835'. [ 242.748175][ T8884] /dev/rnullb0: Can't open blockdev [ 242.805316][ T8889] /dev/rnullb0: Can't open blockdev [ 242.992408][ T8894] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 243.002319][ T5856] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 243.022760][ T8893] tipc: Started in network mode [ 243.022833][ T8893] tipc: Node identity d2abb9c9e418, cluster identity 4711 [ 243.023091][ T8893] tipc: Enabled bearer , priority 10 [ 243.102006][ T8893] tipc: Resetting bearer [ 243.114283][ T8891] tipc: Resetting bearer [ 243.160533][ T5856] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.173131][ T5856] usb 3-1: config index 0 descriptor too short (expected 566, got 54) [ 243.181684][ T5856] usb 3-1: config 1 has an invalid interface number: 142 but max is 0 [ 243.194439][ T5856] usb 3-1: config 1 has no interface number 0 [ 243.206389][ T5856] usb 3-1: config 1 interface 142 altsetting 0 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 243.217476][ T5856] usb 3-1: config 1 interface 142 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 243.230912][ T5856] usb 3-1: New USB device found, idVendor=0cf3, idProduct=0003, bcdDevice=9e.c5 [ 243.241058][ T5856] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.249694][ T5856] usb 3-1: Product: syz [ 243.253900][ T5856] usb 3-1: Manufacturer: syz [ 243.272813][ T5856] usb 3-1: SerialNumber: syz [ 243.504669][ T5856] usb 3-1: Could not find all expected endpoints [ 243.527222][ T5856] usb 3-1: USB disconnect, device number 41 [ 243.537029][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.547433][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.626390][ T8906] /dev/rnullb0: Can't open blockdev [ 244.095876][ T5856] tipc: Node number set to 917748169 [ 244.464941][ T5945] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 244.643887][ T5945] usb 3-1: Using ep0 maxpacket: 32 [ 244.652599][ T5945] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 244.661591][ T5945] usb 3-1: config 0 has no interface number 0 [ 244.668181][ T5945] usb 3-1: config 0 interface 184 has no altsetting 0 [ 244.677615][ T5945] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 244.687292][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.696302][ T5945] usb 3-1: Product: syz [ 244.700537][ T5945] usb 3-1: Manufacturer: syz [ 244.705664][ T5945] usb 3-1: SerialNumber: syz [ 244.713140][ T5945] usb 3-1: config 0 descriptor?? [ 244.731695][ T5945] smsc75xx v1.0.0 [ 244.751760][ T8891] tipc: Disabling bearer [ 244.767291][ T8901] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 244.877942][ T8917] /dev/rnullb0: Can't open blockdev [ 244.899011][ T8919] /dev/rnullb0: Can't open blockdev [ 244.985689][ T8922] /dev/rnullb0: Can't open blockdev [ 245.061589][ T5868] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 245.544059][ T8915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.552977][ T8915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.649416][ T5945] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 245.665735][ T5945] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 245.710225][ T5945] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 245.749470][ T5945] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 245.775456][ T5945] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 245.792702][ T8935] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 245.815608][ T5945] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 245.847460][ T5945] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 245.881948][ T5945] usb 3-1: USB disconnect, device number 42 [ 246.006528][ T8941] loop6: detected capacity change from 0 to 7 [ 246.028656][ T8941] Dev loop6: unable to read RDB block 7 [ 246.044159][ T8941] loop6: AHDI p1 p2 [ 246.054899][ T8941] loop6: partition table partially beyond EOD, truncated [ 246.073204][ T8941] loop6: p1 start 926365495 is beyond EOD, truncated [ 246.191229][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 246.269866][ T8948] /dev/rnullb0: Can't open blockdev [ 246.400668][ T8952] /dev/rnullb0: Can't open blockdev [ 246.827345][ T8968] delete_channel: no stack [ 246.832451][ T8968] delete_channel: no stack [ 246.872014][ T8972] loop6: detected capacity change from 0 to 7 [ 246.894586][ T8972] Dev loop6: unable to read RDB block 7 [ 246.911001][ T8972] loop6: AHDI p1 p2 [ 246.915558][ T8972] loop6: partition table partially beyond EOD, truncated [ 246.924087][ T8972] loop6: p1 start 926365495 is beyond EOD, truncated [ 246.926231][ T8968] /dev/rnullb0: Can't open blockdev [ 247.029658][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 247.296414][ T8986] /dev/rnullb0: Can't open blockdev [ 247.314585][ T8983] /dev/rnullb0: Can't open blockdev [ 247.565435][ T8990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.870'. [ 247.599590][ T8990] /dev/rnullb0: Can't open blockdev [ 247.851380][ T9011] loop6: detected capacity change from 0 to 7 [ 247.882407][ T9011] Dev loop6: unable to read RDB block 7 [ 247.888044][ T9011] loop6: AHDI p1 p2 [ 247.903767][ T9011] loop6: partition table partially beyond EOD, truncated [ 247.920922][ T9011] loop6: p1 start 926365495 is beyond EOD, truncated [ 247.996099][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 248.042527][ T5856] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 248.066354][ T9015] ./file0: Can't lookup blockdev [ 248.075923][ T9016] ./file0: Can't lookup blockdev [ 248.128610][ T9018] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 248.208793][ T5856] usb 5-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 248.221148][ T5856] usb 5-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 248.253675][ T5856] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 248.291995][ T5856] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 248.316933][ T5856] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 248.330319][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.362456][ T43] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 248.521971][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 248.541830][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7 [ 248.605431][ T43] usb 3-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f [ 248.632234][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.660914][ T43] usb 3-1: Product: syz [ 248.670345][ T43] usb 3-1: Manufacturer: syz [ 248.676042][ T43] usb 3-1: SerialNumber: syz [ 248.696488][ T9034] netlink: 60 bytes leftover after parsing attributes in process `syz.3.882'. [ 248.713210][ T43] usb 3-1: config 0 descriptor?? [ 248.719692][ T9034] unsupported nlmsg_type 40 [ 248.736473][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 248.747548][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 248.766337][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 248.808012][ T9035] binder: 9033:9035 ioctl c018620b 200000000000 returned -14 [ 248.969778][ T24] usb 3-1: USB disconnect, device number 43 [ 249.232707][ T5856] ath6kl: Failed to submit usb control message: -71 [ 249.250750][ T5856] ath6kl: unable to send the bmi data to the device: -71 [ 249.281113][ T5856] ath6kl: Unable to send get target info: -71 [ 249.316583][ T5856] ath6kl: Failed to init ath6kl core: -71 [ 249.347694][ T5856] ath6kl_usb 5-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 249.373114][ T5856] usb 5-1: USB disconnect, device number 30 [ 249.569389][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.885'. [ 249.589730][ T9043] /dev/rnullb0: Can't open blockdev [ 249.639687][ T9045] loop6: detected capacity change from 0 to 7 [ 249.647652][ T9045] Dev loop6: unable to read RDB block 7 [ 249.658612][ T9045] loop6: AHDI p1 p2 [ 249.664039][ T9045] loop6: partition table partially beyond EOD, truncated [ 249.676802][ T9045] loop6: p1 start 926365495 is beyond EOD, truncated [ 249.731837][ T5856] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 249.755138][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 249.759082][ T9049] syz.2.888: attempt to access beyond end of device [ 249.759082][ T9049] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 249.863846][ T9054] /dev/rnullb0: Can't open blockdev [ 249.880759][ T9055] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 249.890628][ T9055] /dev/rnullb0: Can't open blockdev [ 249.901405][ T5856] usb 5-1: Using ep0 maxpacket: 8 [ 249.915017][ T5856] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.928144][ T5856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.938326][ T5856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.940007][ T9057] /dev/rnullb0: Can't open blockdev [ 249.948556][ T5856] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.948610][ T5856] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 249.948633][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.045770][ T9059] batadv_slave_0: entered promiscuous mode [ 250.055151][ T9058] batadv_slave_0: left promiscuous mode [ 250.168998][ T5856] usb 5-1: GET_CAPABILITIES returned 0 [ 250.178746][ T5856] usbtmc 5-1:16.0: can't read capabilities [ 250.205716][ T5868] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 250.237279][ T9068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.250250][ T9068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.263998][ T9068] /dev/rnullb0: Can't open blockdev [ 250.373169][ T5856] usb 5-1: USB disconnect, device number 31 [ 250.700099][ T9071] /dev/rnullb0: Can't open blockdev [ 250.838698][ T9076] /dev/rnullb0: Can't open blockdev [ 250.903628][ T9078] loop6: detected capacity change from 0 to 7 [ 250.916952][ T9078] Dev loop6: unable to read RDB block 7 [ 250.924241][ T9078] loop6: AHDI p1 p2 [ 250.928716][ T9078] loop6: partition table partially beyond EOD, truncated [ 250.950036][ T9078] loop6: p1 start 926365495 is beyond EOD, truncated [ 251.028027][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 251.107902][ T9084] /dev/sg0: Can't lookup blockdev [ 251.190623][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 251.340622][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 251.349291][ T24] usb 5-1: config 0 has an invalid interface number: 54 but max is 0 [ 251.357703][ T24] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 251.366801][ T24] usb 5-1: config 0 has no interface number 1 [ 251.373763][ T24] usb 5-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 251.382996][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.393851][ T24] usb 5-1: config 0 descriptor?? [ 251.400354][ T929] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 251.409596][ T24] usb 5-1: bad CDC descriptors [ 251.560384][ T929] usb 3-1: Using ep0 maxpacket: 8 [ 251.568463][ T929] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 251.576985][ T929] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 251.587191][ T929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 251.597341][ T929] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 251.610224][ T929] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.623822][ T9080] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.898'. [ 251.624282][ T929] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 251.643157][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.646684][ T9080] /dev/rnullb0: Can't open blockdev [ 251.702665][ T5923] usb 5-1: USB disconnect, device number 32 [ 251.865474][ T929] usb 3-1: GET_CAPABILITIES returned 0 [ 251.871198][ T929] usbtmc 3-1:16.0: can't read capabilities [ 252.122459][ T9087] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 252.124145][ T5923] usb 3-1: USB disconnect, device number 44 [ 252.239931][ T929] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 252.307187][ T9098] /dev/rnullb0: Can't open blockdev [ 252.391206][ T929] usb 4-1: Using ep0 maxpacket: 16 [ 252.398863][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.410748][ T929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.424352][ T929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 252.437791][ T929] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 252.447370][ T929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.459392][ T929] usb 4-1: config 0 descriptor?? [ 252.533749][ T9103] loop6: detected capacity change from 0 to 7 [ 252.543106][ T9103] Dev loop6: unable to read RDB block 7 [ 252.549192][ T9103] loop6: AHDI p1 p2 [ 252.555089][ T9103] loop6: partition table partially beyond EOD, truncated [ 252.563110][ T9103] loop6: p1 start 926365495 is beyond EOD, truncated [ 252.636151][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 252.883798][ T9092] random: crng reseeded on system resumption [ 252.910360][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 252.954524][ T929] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 253.035785][ T929] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 253.045655][ T929] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 253.062049][ T24] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 253.075248][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.093766][ T24] usb 5-1: config 0 descriptor?? [ 253.168436][ T9092] /dev/rnullb0: Can't open blockdev [ 253.182441][ T5856] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 253.192447][ T5944] usb 4-1: USB disconnect, device number 47 [ 253.217356][ T5856] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 253.271259][ T5856] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 253.311010][ T5856] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 253.377706][ T9122] syz.1.913: attempt to access beyond end of device [ 253.377706][ T9122] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 253.391959][ T9122] FAT-fs (nbd1): unable to read boot sector [ 253.408866][ T9122] netlink: 558 bytes leftover after parsing attributes in process `syz.1.913'. [ 253.750433][ T9131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.784902][ T9133] loop6: detected capacity change from 0 to 7 [ 253.793854][ T9131] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.808073][ T9133] Dev loop6: unable to read RDB block 7 [ 253.820872][ T9133] loop6: AHDI p1 p2 [ 253.829548][ T9133] loop6: partition table partially beyond EOD, truncated [ 253.848183][ T9133] loop6: p1 start 926365495 is beyond EOD, truncated [ 253.996866][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 254.670284][ T9156] tipc: Failed to remove unknown binding: 66,1,1/0:3940606712/3940606714 [ 254.681821][ T9156] tipc: Failed to remove unknown binding: 66,1,1/0:3940606712/3940606714 [ 254.692551][ T9156] /dev/rnullb0: Can't open blockdev [ 254.850182][ T24] pegasus 5-1:0.0: can't reset MAC [ 254.856291][ T24] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 254.886944][ T24] usb 5-1: USB disconnect, device number 33 [ 255.002594][ T9161] loop6: detected capacity change from 0 to 7 [ 255.031089][ T9161] Dev loop6: unable to read RDB block 7 [ 255.036714][ T9161] loop6: AHDI p1 p2 [ 255.062502][ T9161] loop6: partition table partially beyond EOD, truncated [ 255.093174][ T9161] loop6: p1 start 926365495 is beyond EOD, truncated [ 255.146814][ T9163] /dev/rnullb0: Can't open blockdev [ 255.238165][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 255.249323][ T9167] /dev/rnullb0: Can't open blockdev [ 255.324085][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.338010][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.458586][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 255.549064][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.572669][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.585017][ T9181] netlink: 'syz.4.932': attribute type 1 has an invalid length. [ 255.600500][ T9181] netlink: 'syz.4.932': attribute type 2 has an invalid length. [ 255.619421][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.679765][ T24] usb 4-1: config 2 has an invalid interface number: 138 but max is 0 [ 255.688406][ T24] usb 4-1: config 2 has no interface number 0 [ 255.694570][ T24] usb 4-1: config 2 interface 138 has no altsetting 0 [ 255.705516][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.716031][ T9169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.729444][ T24] usb 4-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice=d2.84 [ 255.743590][ T9169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.753863][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.764885][ T24] usb 4-1: Product: syz [ 255.769519][ T24] usb 4-1: Manufacturer: syz [ 255.774149][ T24] usb 4-1: SerialNumber: syz [ 255.814099][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.824164][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.967543][ T9195] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 255.968805][ T9169] /dev/rnullb0: Can't open blockdev [ 255.982473][ T9195] syz.4.937: attempt to access beyond end of device [ 255.982473][ T9195] nbd4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 256.014569][ T24] usb 4-1: USB disconnect, device number 48 [ 256.059882][ T5856] usb 3-1: new low-speed USB device number 45 using dummy_hcd [ 256.076758][ T9197] loop6: detected capacity change from 0 to 7 [ 256.084165][ T9197] Dev loop6: unable to read RDB block 7 [ 256.092019][ T9197] loop6: AHDI p1 p2 [ 256.096056][ T9197] loop6: partition table partially beyond EOD, truncated [ 256.103454][ T9197] loop6: p1 start 926365495 is beyond EOD, truncated [ 256.158292][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 256.225333][ T5856] usb 3-1: Invalid ep0 maxpacket: 64 [ 256.315920][ T9204] /dev/rnullb0: Can't open blockdev [ 256.358219][ T5856] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 256.474138][ T9209] netlink: 'syz.4.942': attribute type 5 has an invalid length. [ 256.489787][ T30] audit: type=1326 audit(6044038207.530:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.4.942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f846b18e929 code=0x0 [ 256.538679][ T5856] usb 3-1: Invalid ep0 maxpacket: 64 [ 256.542849][ T30] audit: type=1326 audit(6044038207.580:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9208 comm="syz.4.942" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f846b18e929 code=0x0 [ 256.559791][ T5856] usb usb3-port1: attempt power cycle [ 256.734489][ T9218] syzkaller1: entered promiscuous mode [ 256.740687][ T9218] syzkaller1: entered allmulticast mode [ 256.933733][ T5856] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 256.987703][ T5856] usb 3-1: Invalid ep0 maxpacket: 64 [ 257.137946][ T5856] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 257.179858][ T5856] usb 3-1: Invalid ep0 maxpacket: 64 [ 257.203053][ T5856] usb usb3-port1: unable to enumerate USB device [ 257.363507][ T9242] /dev/rnullb0: Can't open blockdev [ 257.524659][ T9246] /dev/rnullb0: Can't open blockdev [ 257.616649][ T9248] netlink: 48 bytes leftover after parsing attributes in process `syz.3.951'. [ 257.913337][ T9257] /dev/rnullb0: Can't open blockdev [ 258.042126][ T9262] /dev/rnullb0: Can't open blockdev [ 258.139712][ T9265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.167222][ T9265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.545674][ T5868] Bluetooth: hci2: unexpected event for opcode 0x0407 [ 258.726855][ T5856] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 258.865646][ T9283] /dev/rnullb0: Can't open blockdev [ 258.911722][ T5856] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 258.944857][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 258.969363][ T5856] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.988221][ T5856] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 259.001835][ T5856] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 259.019104][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.047690][ T5856] usb 4-1: config 0 descriptor?? [ 259.180212][ T5944] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 259.344213][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 259.363012][ T5944] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 259.376474][ T5944] usb 3-1: config 0 interface 0 has no altsetting 0 [ 259.383134][ T5944] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 259.399767][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.437125][ T5944] usb 3-1: config 0 descriptor?? [ 259.674204][ T5856] usb 4-1: USB disconnect, device number 49 [ 259.889803][ T5944] chicony 0003:04F2:1421.000D: item fetching failed at offset 5/7 [ 259.900847][ T5944] chicony 0003:04F2:1421.000D: Chicony hid parse failed: -22 [ 259.916359][ T5944] chicony 0003:04F2:1421.000D: probe with driver chicony failed with error -22 [ 260.455932][ T5944] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 260.595744][ T5944] usb 5-1: device descriptor read/64, error -71 [ 260.839899][ T5944] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 260.978796][ T5944] usb 5-1: device descriptor read/64, error -71 [ 261.054436][ T5856] usb 3-1: USB disconnect, device number 49 [ 261.086098][ T5944] usb usb5-port1: attempt power cycle [ 261.341725][ T9314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.360217][ T9314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.445300][ T5944] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 261.470232][ T5944] usb 5-1: device descriptor read/8, error -71 [ 261.715253][ T5944] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 261.735919][ T5944] usb 5-1: device descriptor read/8, error -71 [ 261.767991][ T9323] /dev/rnullb0: Can't open blockdev [ 261.846720][ T5944] usb usb5-port1: unable to enumerate USB device [ 261.938655][ T9333] loop6: detected capacity change from 0 to 7 [ 261.955612][ T9333] Dev loop6: unable to read RDB block 7 [ 261.961240][ T9333] loop6: AHDI p1 p2 [ 261.972349][ T9333] loop6: partition table partially beyond EOD, truncated [ 261.980686][ T9333] loop6: p1 start 926365495 is beyond EOD, truncated [ 262.025151][ T5856] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 262.083136][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 262.111445][ T9337] /dev/rnullb0: Can't open blockdev [ 262.119895][ T9338] /dev/rnullb0: Can't open blockdev [ 262.176164][ T9340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.980'. [ 262.214995][ T5856] usb 4-1: Using ep0 maxpacket: 8 [ 262.225556][ T5856] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.236143][ T5856] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 262.245905][ T5856] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.261926][ T5856] usb 4-1: config 0 descriptor?? [ 262.284286][ T5856] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 262.454656][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 262.620966][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 262.631086][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.639363][ T24] usb 3-1: Product: syz [ 262.644015][ T24] usb 3-1: Manufacturer: syz [ 262.648835][ T24] usb 3-1: SerialNumber: syz [ 262.677307][ T24] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 262.692878][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.715197][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.726403][ T986] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 263.125591][ T9346] /dev/rnullb0: Can't open blockdev [ 263.152330][ T9343] /dev/rnullb0: Can't open blockdev [ 263.153960][ T9323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 263.184901][ T9323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.239236][ T5982] usb 3-1: USB disconnect, device number 50 [ 263.413925][ T9351] /dev/rnullb0: Can't open blockdev [ 263.454779][ T5856] gspca_vc032x: reg_w err -110 [ 263.459720][ T5856] vc032x 4-1:0.0: probe with driver vc032x failed with error -110 [ 263.783737][ T9359] /dev/rnullb0: Can't open blockdev [ 263.804691][ T986] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 263.824743][ T986] ath9k_htc: Failed to initialize the device [ 263.839332][ T5982] usb 3-1: ath9k_htc: USB layer deinitialized [ 263.945866][ T9361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 263.969482][ T9361] /dev/rnullb0: Can't open blockdev [ 264.285965][ T9379] binder: 9377:9379 ioctl c018620b 200000000000 returned -14 [ 264.438833][ T9387] /dev/rnullb0: Can't open blockdev [ 264.569625][ T9394] loop6: detected capacity change from 0 to 7 [ 264.579229][ T9394] Dev loop6: unable to read RDB block 7 [ 264.585431][ T9394] loop6: AHDI p1 p2 [ 264.589368][ T9394] loop6: partition table partially beyond EOD, truncated [ 264.596810][ T9394] loop6: p1 start 926365495 is beyond EOD, truncated [ 264.663100][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 264.667515][ T9396] /dev/rnullb0: Can't open blockdev [ 264.793163][ T9400] netlink: 'syz.4.1000': attribute type 10 has an invalid length. [ 264.807060][ T986] usb 4-1: USB disconnect, device number 50 [ 264.813434][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.823949][ T9400] bridge_slave_1: left allmulticast mode [ 264.829647][ T9400] bridge_slave_1: left promiscuous mode [ 264.849375][ T9400] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.871928][ T9400] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 264.877297][ T9403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1001'. [ 264.905926][ T9400] /dev/rnullb0: Can't open blockdev [ 265.033582][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 265.210239][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 265.220322][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.272056][ T10] usb 3-1: config 0 descriptor?? [ 265.312162][ T10] cp210x 3-1:0.0: cp210x converter detected [ 265.532197][ T9422] loop6: detected capacity change from 0 to 7 [ 265.546221][ T7866] Dev loop6: unable to read RDB block 7 [ 265.551902][ T7866] loop6: AHDI p1 p2 [ 265.568040][ T9423] /dev/rnullb0: Can't open blockdev [ 265.576255][ T7866] loop6: partition table partially beyond EOD, truncated [ 265.594190][ T7866] loop6: p1 start 926365495 is beyond EOD, truncated [ 265.624141][ T9422] Dev loop6: unable to read RDB block 7 [ 265.646978][ T9422] loop6: AHDI p1 p2 [ 265.655663][ T9422] loop6: partition table partially beyond EOD, truncated [ 265.666945][ T9422] loop6: p1 start 926365495 is beyond EOD, truncated [ 265.720307][ T10] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 265.778090][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 265.854869][ T9432] /dev/rnullb0: Can't open blockdev [ 265.866772][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 265.967649][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 266.041897][ T9438] /dev/rnullb0: Can't open blockdev [ 266.158846][ T9398] /dev/rnullb0: Can't open blockdev [ 266.175137][ T5944] usb 3-1: USB disconnect, device number 51 [ 266.204281][ T5944] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 266.238324][ T5944] cp210x 3-1:0.0: device disconnected [ 266.631160][ T9445] /dev/rnullb0: Can't open blockdev [ 266.649471][ T9448] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 266.656916][ T9448] /dev/rnullb0: Can't open blockdev [ 266.876110][ T9460] /dev/rnullb0: Can't open blockdev [ 266.991933][ T9463] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 266.992805][ T9465] /dev/rnullb0: Can't open blockdev [ 267.090869][ T9470] loop6: detected capacity change from 0 to 7 [ 267.102305][ T9470] Dev loop6: unable to read RDB block 7 [ 267.111952][ T9470] loop6: AHDI p1 p2 [ 267.120160][ T9470] loop6: partition table partially beyond EOD, truncated [ 267.128612][ T9470] loop6: p1 start 926365495 is beyond EOD, truncated [ 267.225936][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 267.235496][ T9473] ./file0: Can't lookup blockdev [ 267.463326][ T9486] bond0: (slave erspan0): Error: Device type is different from other slaves [ 267.474975][ T9486] /dev/rnullb0: Can't open blockdev [ 267.475264][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 267.642216][ T5944] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 267.652229][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 267.675035][ T10] usb 5-1: config 166 has an invalid interface number: 177 but max is 1 [ 267.692392][ T10] usb 5-1: config 166 has an invalid interface number: 34 but max is 1 [ 267.712409][ T10] usb 5-1: config 166 has no interface number 0 [ 267.729053][ T10] usb 5-1: config 166 has no interface number 1 [ 267.747257][ T10] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 267.758817][ T10] usb 5-1: config 166 interface 177 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 267.780689][ T10] usb 5-1: config 166 interface 34 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 267.802617][ T10] usb 5-1: config 166 interface 34 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 267.832968][ T5944] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.844711][ T10] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024 [ 267.860500][ T10] usb 5-1: config 166 interface 34 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024 [ 267.874174][ T10] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 267.887900][ T5944] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.897391][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.907257][ T10] usb 5-1: config 166 interface 34 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0 [ 267.918727][ T5944] usb 3-1: Product: syz [ 267.926388][ T5944] usb 3-1: Manufacturer: syz [ 267.931220][ T10] usb 5-1: config 166 interface 34 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 267.944826][ T5944] usb 3-1: SerialNumber: syz [ 267.953189][ T10] usb 5-1: config 166 interface 177 has no altsetting 0 [ 267.963571][ T10] usb 5-1: config 166 interface 34 has no altsetting 0 [ 267.974162][ T10] usb 5-1: New USB device found, idVendor=0bda, idProduct=0138, bcdDevice=30.12 [ 267.987991][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.999498][ T10] usb 5-1: Product: syz [ 268.004263][ T10] usb 5-1: Manufacturer: syz [ 268.009352][ T10] usb 5-1: SerialNumber: syz [ 268.098577][ T9503] loop6: detected capacity change from 0 to 7 [ 268.108955][ T7872] Dev loop6: unable to read RDB block 7 [ 268.116902][ T7872] loop6: AHDI p1 p2 [ 268.121047][ T7872] loop6: partition table partially beyond EOD, truncated [ 268.131125][ T7872] loop6: p1 start 926365495 is beyond EOD, truncated [ 268.147598][ T9503] Dev loop6: unable to read RDB block 7 [ 268.153591][ T9503] loop6: AHDI p1 p2 [ 268.157640][ T9503] loop6: partition table partially beyond EOD, truncated [ 268.167300][ T9503] loop6: p1 start 926365495 is beyond EOD, truncated [ 268.256065][ T9506] /dev/rnullb0: Can't open blockdev [ 268.264295][ T7872] udevd[7872]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 268.290194][ T9509] netlink: 'syz.4.1024': attribute type 12 has an invalid length. [ 268.318843][ T7872] udevd[7872]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 268.349390][ T9510] fuse: Unknown parameter '}roup_id' [ 268.391511][ T9509] /dev/rnullb0: Can't open blockdev [ 268.420667][ T9513] /dev/rnullb0: Can't open blockdev [ 268.574900][ T10] ums-realtek 5-1:166.177: USB Mass Storage device detected [ 268.580235][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.629176][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.696325][ T10] ums-realtek 5-1:166.34: USB Mass Storage device detected [ 268.786045][ T10] ums-realtek 5-1:166.34: probe with driver ums-realtek failed with error -5 [ 268.816339][ T10] usb 5-1: Found UVC 0.00 device syz (0bda:0138) [ 268.830659][ T10] usb 5-1: No valid video chain found. [ 268.856829][ T10] usb 5-1: USB disconnect, device number 38 [ 268.971266][ T5944] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 268.978114][ T5944] cdc_ncm 3-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 268.986090][ T5944] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 269.181766][ T9539] x_tables: ip_tables: TPROXY.0 target: invalid size 16 (kernel) != (user) 24 [ 269.192690][ T9539] /dev/rnullb0: Can't open blockdev [ 269.303429][ T9543] loop6: detected capacity change from 0 to 7 [ 269.321569][ T9543] Dev loop6: unable to read RDB block 7 [ 269.336191][ T9543] loop6: AHDI p1 p2 [ 269.340227][ T9543] loop6: partition table partially beyond EOD, truncated [ 269.376423][ T9543] loop6: p1 start 926365495 is beyond EOD, truncated [ 269.494742][ T5944] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 269.510742][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 269.562190][ T5944] usb 3-1: USB disconnect, device number 52 [ 269.569601][ T5944] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 269.582804][ T9554] /dev/rnullb0: Can't open blockdev [ 270.337741][ T9578] loop6: detected capacity change from 0 to 7 [ 270.384504][ T9578] Dev loop6: unable to read RDB block 7 [ 270.397542][ T9573] syzkaller1: entered promiscuous mode [ 270.420971][ T9578] loop6: AHDI p1 p2 [ 270.424955][ T9578] loop6: partition table partially beyond EOD, truncated [ 270.430928][ T9573] syzkaller1: entered allmulticast mode [ 270.465724][ T9578] loop6: p1 start 926365495 is beyond EOD, truncated [ 270.517288][ T9581] /dev/rnullb0: Can't open blockdev [ 270.595687][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 270.660252][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.676438][ T9585] /dev/rnullb0: Can't open blockdev [ 270.688699][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.978223][ T9590] /dev/rnullb0: Can't open blockdev [ 271.113418][ T9599] loop4: detected capacity change from 0 to 7 [ 271.125570][ C1] blk_print_req_error: 11 callbacks suppressed [ 271.125594][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.141030][ C1] buffer_io_error: 10 callbacks suppressed [ 271.141048][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.155989][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.165258][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.182481][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.188309][ T9601] /dev/rnullb0: Can't open blockdev [ 271.191687][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.206863][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.216069][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.224536][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.233761][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.243372][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.252586][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.260928][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.270094][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.278097][ T7866] ldm_validate_partition_table(): Disk read failed. [ 271.300655][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.309902][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.318826][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.328044][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.336882][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 271.346149][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 271.360377][ T7866] Dev loop4: unable to read RDB block 0 [ 271.373057][ T7866] loop4: unable to read partition table [ 271.382489][ T7866] loop4: partition table beyond EOD, truncated [ 271.422691][ T9599] ldm_validate_partition_table(): Disk read failed. [ 271.442555][ T9599] Dev loop4: unable to read RDB block 0 [ 271.448962][ T9599] loop4: unable to read partition table [ 271.467741][ T9599] loop4: partition table beyond EOD, truncated [ 271.505880][ T9599] loop_reread_partitions: partition scan of loop4 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 271.572140][ T9608] loop6: detected capacity change from 0 to 7 [ 271.594865][ T9608] Dev loop6: unable to read RDB block 7 [ 271.609431][ T9608] loop6: AHDI p1 p2 [ 271.617327][ T9608] loop6: partition table partially beyond EOD, truncated [ 271.660492][ T9608] loop6: p1 start 926365495 is beyond EOD, truncated [ 271.761613][ T30] audit: type=1326 audit(6044038222.808:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9612 comm="syz.2.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f029d58e929 code=0x0 [ 271.808719][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 271.863448][ T9619] /dev/rnullb0: Can't open blockdev [ 271.917812][ T9621] netlink: 'syz.1.1069': attribute type 1 has an invalid length. [ 271.952360][ T9621] netlink: 'syz.1.1069': attribute type 4 has an invalid length. [ 271.969298][ T9621] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1069'. [ 272.015326][ T9621] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 272.029232][ T9621] /dev/rnullb0: Can't open blockdev [ 272.043082][ T9626] /dev/rnullb0: Can't open blockdev [ 272.060123][ T5944] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 272.100638][ T5944] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 272.248177][ T9632] ?H: renamed from lo (while UP) [ 272.283952][ T9635] /dev/rnullb0: Can't open blockdev [ 272.475203][ T9639] /dev/rnullb0: Can't open blockdev [ 272.928122][ T9662] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 272.930558][ T9663] loop6: detected capacity change from 0 to 7 [ 272.945156][ T9662] overlayfs: missing 'lowerdir' [ 272.953222][ T7866] Dev loop6: unable to read RDB block 7 [ 272.958844][ T7866] loop6: AHDI p1 p2 [ 272.968732][ T9662] /dev/rnullb0: Can't open blockdev [ 272.989689][ T7866] loop6: partition table partially beyond EOD, truncated [ 272.997088][ T7866] loop6: p1 start 926365495 is beyond EOD, truncated [ 273.022256][ T9663] Dev loop6: unable to read RDB block 7 [ 273.059567][ T9663] loop6: AHDI p1 p2 [ 273.083679][ T9663] loop6: partition table partially beyond EOD, truncated [ 273.092121][ T9663] loop6: p1 start 926365495 is beyond EOD, truncated [ 273.192144][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 273.304555][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 273.592389][ T9687] /dev/rnullb0: Can't open blockdev [ 273.755924][ T9700] /dev/rnullb0: Can't open blockdev [ 273.819530][ T5945] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 273.929458][ T9705] loop6: detected capacity change from 0 to 7 [ 273.952679][ T7866] Dev loop6: unable to read RDB block 7 [ 273.960343][ T7866] loop6: AHDI p1 p2 [ 273.971915][ T7866] loop6: partition table partially beyond EOD, truncated [ 273.990240][ T7866] loop6: p1 start 926365495 is beyond EOD, truncated [ 274.006971][ T5945] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 274.037369][ T5945] usb 3-1: config 0 has no interface number 0 [ 274.079490][ T9705] Dev loop6: unable to read RDB block 7 [ 274.093602][ T5945] usb 3-1: New USB device found, idVendor=4113, idProduct=0410, bcdDevice=55.e2 [ 274.115700][ T9705] loop6: AHDI p1 p2 [ 274.138698][ T9705] loop6: partition table partially beyond EOD, truncated [ 274.153441][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.169477][ T9705] loop6: p1 start 926365495 is beyond EOD, truncated [ 274.227840][ T5945] usb 3-1: config 0 descriptor?? [ 274.312857][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 274.425439][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 274.428267][ T9715] sctp: [Deprecated]: syz.1.1092 (pid 9715) Use of int in maxseg socket option. [ 274.428267][ T9715] Use struct sctp_assoc_value instead [ 274.460366][ T5945] usb 3-1: USB disconnect, device number 53 [ 274.478805][ T9716] ./file0: Can't lookup blockdev [ 274.509261][ T5982] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 274.648768][ T5982] usb 4-1: device descriptor read/64, error -71 [ 274.868700][ T5856] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 274.888669][ T5982] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 275.017431][ T9727] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 275.026433][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 275.033316][ T5982] usb 4-1: device descriptor read/64, error -71 [ 275.043172][ T5856] usb 5-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 275.049603][ T9727] C: renamed from team_slave_0 (while UP) [ 275.054403][ T5856] usb 5-1: too many endpoints for config 0 interface 0 altsetting 3: 48, using maximum allowed: 30 [ 275.072426][ T5856] usb 5-1: config 0 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 275.076045][ T9727] netlink: 'syz.2.1095': attribute type 2 has an invalid length. [ 275.094020][ T5856] usb 5-1: config 0 interface 0 has no altsetting 0 [ 275.097577][ T5856] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 275.103595][ T9727] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1095'. [ 275.114694][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.121052][ T9727] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 275.128281][ T5856] usb 5-1: Product: syz [ 275.150578][ T5982] usb usb4-port1: attempt power cycle [ 275.157052][ T5856] usb 5-1: Manufacturer: syz [ 275.162919][ T5856] usb 5-1: SerialNumber: syz [ 275.188534][ T5856] usb 5-1: config 0 descriptor?? [ 275.421998][ T5856] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 275.460072][ T5856] usb 5-1: USB disconnect, device number 39 [ 275.468023][ T9736] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 275.491187][ T9736] cramfs: wrong magic [ 275.508618][ T5982] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 275.520637][ T9736] /dev/rnullb0: Can't open blockdev [ 275.530347][ T9739] /dev/rnullb0: Can't open blockdev [ 275.550504][ T5982] usb 4-1: device descriptor read/8, error -71 [ 275.643071][ T9744] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20003 [ 275.656702][ T9744] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 [ 275.849970][ T5982] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 275.895472][ T5982] usb 4-1: device descriptor read/8, error -71 [ 276.019146][ T5982] usb usb4-port1: unable to enumerate USB device [ 276.215253][ T9764] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 276.646597][ T9780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1109'. [ 276.661700][ T9781] loop6: detected capacity change from 0 to 7 [ 276.678631][ T9781] Dev loop6: unable to read RDB block 7 [ 276.687693][ T9781] loop6: AHDI p1 p2 [ 276.694580][ T9781] loop6: partition table partially beyond EOD, truncated [ 276.712674][ T9781] loop6: p1 start 926365495 is beyond EOD, truncated [ 276.814875][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 276.924334][ T9776] IPv6: syztnl0: Disabled Multicast RS [ 277.012620][ T9788] /dev/rnullb0: Can't open blockdev [ 277.021527][ T5868] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 277.330087][ T5856] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 277.355351][ T9792] netlink: 'syz.3.1115': attribute type 6 has an invalid length. [ 277.368231][ T9792] /dev/rnullb0: Can't open blockdev [ 277.498487][ T5856] usb 5-1: Using ep0 maxpacket: 16 [ 277.500543][ T5856] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 277.517581][ T5856] usb 5-1: config 0 has no interface number 0 [ 277.517718][ T5856] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.517748][ T5856] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.517790][ T5856] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 277.517815][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.527852][ T5856] usb 5-1: config 0 descriptor?? [ 277.690299][ T9805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1119'. [ 277.701383][ T9805] /dev/rnullb0: Can't open blockdev [ 277.715293][ T9807] loop6: detected capacity change from 0 to 7 [ 277.725140][ T9807] Dev loop6: unable to read RDB block 7 [ 277.733702][ T9807] loop6: AHDI p1 p2 [ 277.742389][ T9807] loop6: partition table partially beyond EOD, truncated [ 277.755590][ T9807] loop6: p1 start 926365495 is beyond EOD, truncated [ 277.843264][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 278.343175][ T9790] /dev/rnullb0: Can't open blockdev [ 278.370600][ T5856] usbhid 5-1:0.1: can't add hid device: -71 [ 278.386919][ T5856] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 278.417763][ T5856] usb 5-1: USB disconnect, device number 40 [ 278.427256][ T986] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 278.614202][ T986] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.623867][ T986] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.642078][ T986] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.655935][ T986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.656109][ T9830] /dev/rnullb0: Can't open blockdev [ 278.668693][ T986] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.687580][ T986] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.699658][ T986] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.712531][ T986] usb 3-1: Product: syz [ 278.717228][ T986] usb 3-1: Manufacturer: syz [ 278.741234][ T986] cdc_wdm 3-1:1.0: skipping garbage [ 278.753040][ T986] cdc_wdm 3-1:1.0: skipping garbage [ 278.820049][ T986] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 278.826066][ T986] cdc_wdm 3-1:1.0: Unknown control protocol [ 278.938294][ T9817] genirq: Flags mismatch irq 5. 00200000 (pcl818) vs. 00200000 (pcl812) [ 278.963460][ T9817] cdc_wdm 3-1:1.0: Error submitting int urb - -90 [ 278.997328][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.026063][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.047699][ T9817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.058114][ T9836] netlink: 'syz.4.1130': attribute type 1 has an invalid length. [ 279.081971][ T9836] netlink: 624 bytes leftover after parsing attributes in process `syz.4.1130'. [ 279.087961][ T9817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.108920][ T9835] /dev/rnullb0: Can't open blockdev [ 279.145540][ T10] usb 3-1: USB disconnect, device number 54 [ 279.527697][ T5944] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 279.547082][ T9864] /dev/rnullb0: Can't open blockdev [ 279.612834][ T9869] omfs: Invalid superblock (0) [ 279.696747][ T5944] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 279.714392][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.723589][ T5944] usb 4-1: Product: syz [ 279.753190][ T5944] usb 4-1: Manufacturer: syz [ 279.763237][ T5944] usb 4-1: SerialNumber: syz [ 279.797787][ T5944] usb 4-1: config 0 descriptor?? [ 280.069163][ T9880] /dev/rnullb0: Can't open blockdev [ 280.183681][ T9883] /dev/rnullb0: Can't open blockdev [ 280.276419][ T9885] netlink: 'syz.2.1145': attribute type 10 has an invalid length. [ 280.285098][ T9885] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1145'. [ 280.329660][ T9885] netlink: 'syz.2.1145': attribute type 10 has an invalid length. [ 280.344702][ T9885] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1145'. [ 280.545749][ T9897] Invalid source name [ 280.562241][ T9897] UBIFS error (pid: 9897): cannot open "/dev/sg0", error -22 [ 280.580991][ T9897] IPv6: NLM_F_CREATE should be specified when creating new route [ 280.702105][ T9903] /dev/rnullb0: Can't open blockdev [ 280.728971][ T9906] /dev/rnullb0: Can't open blockdev [ 280.738151][ T9902] /dev/rnullb0: Can't open blockdev [ 280.980902][ T3478] Bluetooth: (null): Invalid header checksum [ 280.988361][ T3478] Bluetooth: (null): Invalid header checksum [ 281.087774][ T3493] Bluetooth: (null): Invalid header checksum [ 281.198018][ T3493] Bluetooth: (null): Invalid header checksum [ 281.338370][ T9923] vivid-000: disconnect [ 281.505590][ T5856] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 281.551260][ T9937] /dev/rnullb0: Can't open blockdev [ 281.576563][ T9926] vivid-000: reconnect [ 281.670117][ T9939] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 281.677959][ T5856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.689877][ T5856] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 281.699662][ T9942] /dev/rnullb0: Can't open blockdev [ 281.707164][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.730171][ T5856] usb 5-1: config 0 descriptor?? [ 281.801502][ T9944] /dev/rnullb0: Can't open blockdev [ 282.016662][ T30] audit: type=1800 audit(6044038233.061:11): pid=9955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1167" name="bus" dev="tmpfs" ino=1780 res=0 errno=0 [ 282.211064][ T5856] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 282.231153][ T5856] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000F/input/input17 [ 282.334745][ T5945] usb 4-1: USB disconnect, device number 55 [ 282.345301][ T10] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 282.468162][ T5856] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 282.515592][ T10] usb 3-1: device descriptor read/64, error -71 [ 282.711386][ T9972] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1173'. [ 282.723516][ T5856] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 282.782682][ T5856] hid-generic 0000:0000:0000.0010: hidraw1: HID v0.00 Device [syz1] on syz0 [ 282.785503][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 282.812904][ T5856] usb 5-1: USB disconnect, device number 41 [ 282.967778][ T10] usb 3-1: device descriptor read/64, error -71 [ 283.105187][ T10] usb usb3-port1: attempt power cycle [ 283.188742][ T9971] /dev/rnullb0: Can't open blockdev [ 283.445077][ T10] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 283.487769][ T9978] program syz.1.1176 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.495328][ T9980] /dev/rnullb0: Can't open blockdev [ 283.501119][ T10] usb 3-1: device descriptor read/8, error -71 [ 283.744517][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 283.776974][ T10] usb 3-1: device descriptor read/8, error -71 [ 283.806082][ T9991] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.829351][ T9991] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.839397][ T9992] ufs: You didn't specify the type of your ufs filesystem [ 283.839397][ T9992] [ 283.839397][ T9992] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 283.839397][ T9992] [ 283.839397][ T9992] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 283.873300][ T9992] ufs: ufstype=old is supported read-only [ 283.886028][ T10] usb usb3-port1: unable to enumerate USB device [ 283.895993][ T9994] fuse: Unknown parameter 'dont_hash' [ 283.906607][ T9992] ufs: ufs_fill_super(): bad magic number [ 284.079335][ T9998] /dev/rnullb0: Can't open blockdev [ 284.345772][T10012] loop6: detected capacity change from 0 to 7 [ 284.372201][ T7866] Dev loop6: unable to read RDB block 7 [ 284.384245][ T7866] loop6: AHDI p1 p2 [ 284.392594][ T7866] loop6: partition table partially beyond EOD, truncated [ 284.410301][ T7866] loop6: p1 start 926365495 is beyond EOD, truncated [ 284.435001][T10012] Dev loop6: unable to read RDB block 7 [ 284.464988][T10012] loop6: AHDI p1 p2 [ 284.473495][T10012] loop6: partition table partially beyond EOD, truncated [ 284.496042][T10012] loop6: p1 start 926365495 is beyond EOD, truncated [ 284.656880][T10018] /dev/rnullb0: Can't open blockdev [ 284.662467][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 284.705683][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 285.407015][T10042] /dev/rnullb0: Can't open blockdev [ 285.497173][T10046] loop6: detected capacity change from 0 to 7 [ 285.506774][T10046] Dev loop6: unable to read RDB block 7 [ 285.512390][T10046] loop6: AHDI p1 p2 [ 285.517157][T10046] loop6: partition table partially beyond EOD, truncated [ 285.524822][T10046] loop6: p1 start 926365495 is beyond EOD, truncated [ 285.630110][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 285.703667][ T5945] usb 3-1: new full-speed USB device number 59 using dummy_hcd [ 285.870989][ T5945] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.903038][ T5945] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 255, setting to 64 [ 285.923651][ T5945] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.945813][ T5945] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 285.963957][ T5945] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.982530][ T5945] usb 3-1: Product: syz [ 285.987209][ T5945] usb 3-1: Manufacturer: syz [ 285.991848][ T5945] usb 3-1: SerialNumber: syz [ 286.014165][ T5945] usb 3-1: config 0 descriptor?? [ 286.025376][T10042] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 286.035962][ T5945] usb 3-1: ucan: probing device on interface #0 [ 286.051344][ T5945] usb 3-1: ucan: invalid EP count (1) [ 286.058418][ T5945] usb 3-1: ucan: probe failed; try to update the device firmware [ 286.093455][ T10] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 286.201439][T10059] /dev/rnullb0: Can't open blockdev [ 286.221415][T10056] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 286.249589][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.251447][T10056] /dev/rnullb0: Can't open blockdev [ 286.262533][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.281208][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 286.304193][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 286.306357][ T986] usb 3-1: USB disconnect, device number 59 [ 286.318333][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 286.349704][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1206'. [ 286.358509][ T10] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 286.379218][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.388471][ T10] usb 5-1: Product: syz [ 286.392677][ T10] usb 5-1: Manufacturer: syz [ 286.398725][ T10] usb 5-1: SerialNumber: syz [ 286.409751][ T10] usb 5-1: config 0 descriptor?? [ 286.430655][T10051] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 286.447199][T10051] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 286.475288][ T10] usb 5-1: ucan: probing device on interface #0 [ 286.716848][T10073] loop6: detected capacity change from 0 to 7 [ 286.734685][T10073] Dev loop6: unable to read RDB block 7 [ 286.740662][T10073] loop6: AHDI p1 p2 [ 286.745337][T10073] loop6: partition table partially beyond EOD, truncated [ 286.758172][ T10] usb 5-1: ucan: could not read protocol version, ret=-71 [ 286.763074][T10073] loop6: p1 start 926365495 is beyond EOD, truncated [ 286.767548][ T10] usb 5-1: ucan: probe failed; try to update the device firmware [ 286.792624][ T10] usb 5-1: USB disconnect, device number 42 [ 286.856682][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 286.970340][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'. [ 287.016974][ T30] audit: type=1804 audit(6044038238.064:12): pid=10077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1212" name="/newroot/314/cgroup.controllers" dev="tmpfs" ino=1723 res=1 errno=0 [ 287.141121][ T30] audit: type=1800 audit(6044038238.064:13): pid=10077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1212" name="cgroup.controllers" dev="tmpfs" ino=1723 res=0 errno=0 [ 287.392916][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 287.500072][T10083] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.028242][T10102] loop6: detected capacity change from 0 to 7 [ 288.118420][T10102] Dev loop6: unable to read RDB block 7 [ 288.127910][T10102] loop6: AHDI p1 p2 [ 288.142905][T10102] loop6: partition table partially beyond EOD, truncated [ 288.165847][T10102] loop6: p1 start 926365495 is beyond EOD, truncated [ 288.228746][T10096] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.259033][T10096] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 288.287836][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 288.582497][ T986] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 288.736491][ T986] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 288.745895][ T986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.753999][ T986] usb 3-1: Product: syz [ 288.758185][ T986] usb 3-1: Manufacturer: syz [ 288.762955][ T986] usb 3-1: SerialNumber: syz [ 288.773047][ T986] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 288.792140][ T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 288.802995][ T24] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 288.984223][ T10] usb 4-1: config 0 has an invalid interface number: 225 but max is 0 [ 288.992694][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.007888][T10116] /dev/rnullb0: Can't open blockdev [ 289.016659][ T10] usb 4-1: config 0 has no interface number 0 [ 289.032920][ T10] usb 4-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 289.052063][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.073729][ T10] usb 4-1: config 0 descriptor?? [ 289.164716][T10120] binder: 10119:10120 ioctl c00c6211 0 returned -14 [ 289.172834][T10120] /dev/rnullb0: Can't open blockdev [ 289.217118][T10108] /dev/rnullb0: Can't open blockdev [ 289.286804][T10125] /dev/rnullb0: Can't open blockdev [ 289.328696][T10126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 289.369466][T10126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.379270][T10129] MTD: Couldn't look up './cgroup': -15 [ 289.386342][T10129] ./cgroup: Can't lookup blockdev [ 289.393280][T10126] /dev/rnullb0: Can't open blockdev [ 289.430277][ T986] usb 3-1: USB disconnect, device number 60 [ 289.538966][T10134] loop6: detected capacity change from 0 to 7 [ 289.546309][T10134] Dev loop6: unable to read RDB block 7 [ 289.553585][T10134] loop6: AHDI p1 p2 [ 289.557567][T10134] loop6: partition table partially beyond EOD, truncated [ 289.565508][T10134] loop6: p1 start 926365495 is beyond EOD, truncated [ 289.638954][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 289.979494][T10142] /dev/rnullb0: Can't open blockdev [ 290.033515][ T24] usb 3-1: Service connection timeout for: 256 [ 290.047368][ T24] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 290.084629][T10144] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1234'. [ 290.089635][ T24] ath9k_htc: Failed to initialize the device [ 290.127124][ T986] usb 3-1: ath9k_htc: USB layer deinitialized [ 290.185704][T10148] /dev/rnullb0: Can't open blockdev [ 290.196050][T10148] /dev/rnullb0: Can't open blockdev [ 290.330579][T10157] /dev/rnullb0: Can't open blockdev [ 290.330615][T10155] erofs (device nbd4): cannot find valid erofs superblock [ 290.536683][T10162] loop6: detected capacity change from 0 to 7 [ 290.566576][T10162] Dev loop6: unable to read RDB block 7 [ 290.572954][T10162] loop6: AHDI p1 p2 [ 290.576993][T10162] loop6: partition table partially beyond EOD, truncated [ 290.585119][T10162] loop6: p1 start 926365495 is beyond EOD, truncated [ 290.729756][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 290.797258][T10166] /dev/rnullb0: Can't open blockdev [ 290.813677][T10169] /dev/rnullb0: Can't open blockdev [ 290.916750][T10176] /dev/rnullb0: Can't open blockdev [ 291.058680][T10185] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 291.087281][T10185] /dev/rnullb0: Can't open blockdev [ 291.162058][T10188] /dev/rnullb0: Can't open blockdev [ 291.244432][T10190] /dev/sg0: Can't lookup blockdev [ 291.291318][ T24] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 291.469965][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 291.482477][T10199] loop6: detected capacity change from 0 to 7 [ 291.493186][T10199] Dev loop6: unable to read RDB block 7 [ 291.498961][T10199] loop6: AHDI p1 p2 [ 291.500569][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.503713][T10199] loop6: partition table partially beyond EOD, truncated [ 291.524070][T10199] loop6: p1 start 926365495 is beyond EOD, truncated [ 291.538112][ T24] usb 3-1: config 0 descriptor?? [ 291.601951][ T10] usb 4-1: USB disconnect, device number 56 [ 291.644536][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 291.680862][ T986] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 291.850467][ T986] usb 5-1: Using ep0 maxpacket: 8 [ 291.870849][ T986] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.893191][ T986] usb 5-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 291.914394][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.951713][ T986] usb 5-1: config 0 descriptor?? [ 291.982963][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 292.049240][T10215] ./file0: Can't lookup blockdev [ 292.183038][T10192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.191526][T10186] binder: 10184:10186 ioctl c018620b 200000000080 returned -14 [ 292.193000][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 292.200876][T10192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.290743][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 292.309385][ T24] [drm] Initialized udl on minor 2 [ 292.326710][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 292.351619][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 292.359838][T10217] block nbd1: shutting down sockets [ 292.379211][ T986] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 292.407418][ T24] usb 3-1: USB disconnect, device number 61 [ 292.432561][ T986] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 292.582170][T10223] cgroup: Name too long [ 292.599800][T10223] /dev/rnullb0: Can't open blockdev [ 292.696374][ T5945] usb 5-1: USB disconnect, device number 43 [ 293.316611][T10239] loop6: detected capacity change from 0 to 7 [ 293.332981][ T7866] Dev loop6: unable to read RDB block 7 [ 293.345410][ T7866] loop6: AHDI p1 p2 [ 293.353883][ T7866] loop6: partition table partially beyond EOD, truncated [ 293.369737][ T7866] loop6: p1 start 926365495 is beyond EOD, truncated [ 293.397468][T10239] Dev loop6: unable to read RDB block 7 [ 293.420182][T10239] loop6: AHDI p1 p2 [ 293.425406][T10239] loop6: partition table partially beyond EOD, truncated [ 293.441428][T10239] loop6: p1 start 926365495 is beyond EOD, truncated [ 293.570235][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 293.667967][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 293.702036][T10245] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1268'. [ 294.014545][ T5945] libceph: connect (1)[c::]:6789 error -101 [ 294.021530][ T5945] libceph: mon0 (1)[c::]:6789 connect error [ 294.053566][T10251] ceph: No mds server is up or the cluster is laggy [ 294.408548][T10257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.439720][T10257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.578209][T10263] /dev/rnullb0: Can't open blockdev [ 294.849614][T10265] /dev/rnullb0: Can't open blockdev [ 295.137601][T10267] /dev/rnullb0: Can't open blockdev [ 295.155050][T10268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.185220][T10268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.336885][T10275] loop6: detected capacity change from 0 to 7 [ 295.348341][ T7866] Dev loop6: unable to read RDB block 7 [ 295.361803][ T7866] loop6: AHDI p1 p2 [ 295.365801][ T7866] loop6: partition table partially beyond EOD, truncated [ 295.374932][ T7866] loop6: p1 start 926365495 is beyond EOD, truncated [ 295.378792][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 295.409087][T10275] Dev loop6: unable to read RDB block 7 [ 295.418324][T10275] loop6: AHDI p1 p2 [ 295.428078][T10275] loop6: partition table partially beyond EOD, truncated [ 295.437821][T10275] loop6: p1 start 926365495 is beyond EOD, truncated [ 295.518274][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 295.576241][ T24] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 295.592221][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 295.607788][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.629377][ T24] usb 4-1: config 0 descriptor?? [ 295.684457][T10279] /dev/rnullb0: Can't open blockdev [ 295.814794][T10282] /dev/rnullb0: Can't open blockdev [ 295.828506][ T5856] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 295.847717][ T24] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 295.889323][ T24] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 295.897250][ T24] [drm] Initialized udl on minor 2 [ 295.905199][ T24] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 295.914649][ T24] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 295.952057][T10285] /dev/rnullb0: Can't open blockdev [ 295.969528][ T5856] usb 3-1: device descriptor read/64, error -71 [ 296.049585][T10268] fuse: Unknown parameter 'fds' [ 296.066712][ T986] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 296.067246][ T5944] usb 4-1: USB disconnect, device number 57 [ 296.084333][ T986] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 296.208270][ T5856] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 296.338151][ T5856] usb 3-1: device descriptor read/64, error -71 [ 296.448624][ T5856] usb usb3-port1: attempt power cycle [ 296.650673][T10287] /dev/rnullb0: Can't open blockdev [ 296.679858][T10289] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 296.689883][T10289] /dev/rnullb0: Can't open blockdev [ 296.791307][ T5856] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 296.828901][ T5856] usb 3-1: device descriptor read/8, error -71 [ 296.850264][T10295] loop6: detected capacity change from 0 to 7 [ 296.857727][T10295] Dev loop6: unable to read RDB block 7 [ 296.863934][T10295] loop6: AHDI p1 p2 [ 296.878197][T10295] loop6: partition table partially beyond EOD, truncated [ 296.885464][T10295] loop6: p1 start 926365495 is beyond EOD, truncated [ 296.919578][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 296.979959][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 297.004815][T10299] /dev/rnullb0: Can't open blockdev [ 297.018110][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 297.077802][ T5856] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 297.113745][ T5856] usb 3-1: device descriptor read/8, error -71 [ 297.121020][T10303] /dev/rnullb0: Can't open blockdev [ 297.134340][T10305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.144929][T10305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.178012][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 297.203738][ T24] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 297.215008][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.229223][ T5856] usb usb3-port1: unable to enumerate USB device [ 297.246726][ T24] usb 4-1: config 0 descriptor?? [ 297.257498][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 297.868144][T10291] /dev/rnullb0: Can't open blockdev [ 297.882544][ T24] gspca_sunplus: reg_r err -71 [ 297.894258][ T24] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 297.917852][T10317] /dev/rnullb0: Can't open blockdev [ 297.939766][ T24] usb 4-1: USB disconnect, device number 58 [ 297.945083][T10318] /dev/rnullb0: Can't open blockdev [ 298.066686][T10320] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1294'. [ 298.069066][T10322] loop6: detected capacity change from 0 to 7 [ 298.090885][T10322] Dev loop6: unable to read RDB block 7 [ 298.096829][T10322] loop6: AHDI p1 p2 [ 298.102399][T10322] loop6: partition table partially beyond EOD, truncated [ 298.110251][T10322] loop6: p1 start 926365495 is beyond EOD, truncated [ 298.185850][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 298.353716][T10328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.366304][T10328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.483323][T10333] /dev/rnullb0: Can't open blockdev [ 299.056572][T10364] /dev/rnullb0: Can't open blockdev [ 299.301519][T10384] netlink: 'syz.1.1310': attribute type 5 has an invalid length. [ 299.310873][T10384] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1310'. [ 299.352322][T10384] /dev/rnullb0: Can't open blockdev [ 299.533196][T10388] syz.2.1314: attempt to access beyond end of device [ 299.533196][T10388] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 299.547190][T10388] vxfs: unable to read disk superblock at 1 [ 299.554401][T10388] syz.2.1314: attempt to access beyond end of device [ 299.554401][T10388] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 299.567489][T10388] vxfs: unable to read disk superblock at 8 [ 299.573436][T10388] vxfs: can't find superblock. [ 299.606532][ T10] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 299.757434][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 299.758702][T10392] /dev/rnullb0: Can't open blockdev [ 299.765659][ T10] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 299.778966][ T10] usb 4-1: config 0 has no interface number 0 [ 299.785147][ T10] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 299.795393][ T10] usb 4-1: config 0 interface 196 has no altsetting 0 [ 299.804573][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 299.826413][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.834476][ T10] usb 4-1: Product: syz [ 299.839762][ T10] usb 4-1: Manufacturer: syz [ 299.844399][ T10] usb 4-1: SerialNumber: syz [ 299.854493][ T10] usb 4-1: config 0 descriptor?? [ 299.861500][T10386] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 300.276990][ T10] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 300.306920][ T10] ipheth 4-1:0.196: probe with driver ipheth failed with error -22 [ 300.687177][ T5944] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 300.837417][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout [ 300.885940][ T5944] usb 3-1: Using ep0 maxpacket: 32 [ 300.910026][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1326'. [ 300.919745][ T5944] usb 3-1: config 8 has an invalid interface number: 99 but max is 0 [ 300.943699][ T5944] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 300.962423][T10419] random: crng reseeded on system resumption [ 300.978040][ T5944] usb 3-1: config 8 has an invalid descriptor of length 210, skipping remainder of the config [ 301.014057][T10420] /dev/rnullb0: Can't open blockdev [ 301.025746][ T5944] usb 3-1: config 8 has no interface number 0 [ 301.035802][ T5944] usb 3-1: config 8 interface 99 altsetting 153 endpoint 0x4 has an invalid bInterval 177, changing to 11 [ 301.055897][ T5944] usb 3-1: config 8 interface 99 altsetting 153 endpoint 0x4 has invalid maxpacket 25073, setting to 1024 [ 301.076000][ T5944] usb 3-1: config 8 interface 99 altsetting 153 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 301.100277][ T5944] usb 3-1: config 8 interface 99 has no altsetting 0 [ 301.119304][ T5944] usb 3-1: New USB device found, idVendor=0403, idProduct=d013, bcdDevice=cf.49 [ 301.132167][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.160790][ T5944] usb 3-1: Product: ࠠ [ 301.165048][ T5944] usb 3-1: Manufacturer: 鸏쬋ᕴ頳〧灋䢭ꚍࢦᙼ畊寯璣읮먧炪㎝Ꞣ튔좖นዃꄣ⯁㚟⡸ᦦ辌姱떝峛ʦ靤静ᗟ᪢嘊ᖁ䶸ᅋ㴶쌷絞Ⱝ垛ꨖ軑軭뇒䟠폸媐 [ 301.190215][ T5944] usb 3-1: SerialNumber: ф [ 301.409366][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.418467][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.436392][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.452801][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.469826][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.482614][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.534191][ T5944] ftdi_sio 3-1:8.99: FTDI USB Serial Device converter detected [ 301.548092][ T5944] ftdi_sio ttyUSB0: unknown device type: 0xcf49 [ 301.550737][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1329'. [ 301.563931][ T5944] usb 3-1: USB disconnect, device number 66 [ 301.580665][ T5944] ftdi_sio 3-1:8.99: device disconnected [ 301.628799][T10430] /dev/rnullb0: Can't open blockdev [ 301.636625][ T5856] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 301.704702][T10432] /dev/rnullb0: Can't open blockdev [ 301.775586][ T5856] usb 5-1: device descriptor read/64, error -71 [ 301.894401][T10444] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.903340][T10444] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 302.045445][ T5856] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 302.194694][ T5856] usb 5-1: device descriptor read/64, error -71 [ 302.305637][ T5856] usb usb5-port1: attempt power cycle [ 302.475585][ T43] usb 4-1: USB disconnect, device number 59 [ 302.635020][ T5944] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 302.705025][ T5856] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 302.728485][ T5856] usb 5-1: device descriptor read/8, error -71 [ 302.770348][ T5944] usb 3-1: device descriptor read/64, error -71 [ 302.985904][ T5856] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 303.016510][ T5856] usb 5-1: device descriptor read/8, error -71 [ 303.024961][ T5944] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 303.034830][ T5945] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 303.125570][ T5856] usb usb5-port1: unable to enumerate USB device [ 303.154813][ T5944] usb 3-1: device descriptor read/64, error -71 [ 303.164952][ T5945] usb 4-1: device descriptor read/64, error -71 [ 303.266207][ T5944] usb usb3-port1: attempt power cycle [ 303.404621][ T5945] usb 4-1: new full-speed USB device number 61 using dummy_hcd [ 303.544587][ T5945] usb 4-1: device descriptor read/64, error -71 [ 303.604779][ T5944] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 303.635122][ T5944] usb 3-1: device descriptor read/8, error -71 [ 303.656205][ T5945] usb usb4-port1: attempt power cycle [ 303.676579][T10469] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.682658][T10469] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 303.691626][T10469] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.698296][T10469] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 303.708303][T10469] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.714858][T10469] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 303.731359][T10471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.740744][T10471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.760068][T10469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.770056][T10469] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.884442][ T5944] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 303.905225][ T5944] usb 3-1: device descriptor read/8, error -71 [ 304.004503][ T5945] usb 4-1: new full-speed USB device number 62 using dummy_hcd [ 304.025085][ T5944] usb usb3-port1: unable to enumerate USB device [ 304.032782][ T5945] usb 4-1: device descriptor read/8, error -71 [ 304.284350][ T5945] usb 4-1: new full-speed USB device number 63 using dummy_hcd [ 304.315020][ T5945] usb 4-1: device descriptor read/8, error -71 [ 304.351912][T10473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.363301][T10473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.379442][T10473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.397037][T10473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.429343][ T5945] usb usb4-port1: unable to enumerate USB device [ 304.456820][T10475] /dev/rnullb0: Can't open blockdev [ 304.574254][T10477] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 304.933947][ T5856] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 305.103036][ T5856] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 305.118291][ T5856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.127394][ T5856] usb 5-1: Product: syz [ 305.131650][ T5856] usb 5-1: Manufacturer: syz [ 305.137908][ T5856] usb 5-1: SerialNumber: syz [ 305.154355][ T5856] usb 5-1: config 0 descriptor?? [ 305.363336][ T5856] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 305.468461][T10494] /dev/rnullb0: Can't open blockdev [ 305.559684][T10496] /dev/rnullb0: Can't open blockdev [ 305.623576][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 305.652513][T10498] /dev/rnullb0: Can't open blockdev [ 305.705754][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 305.709705][ T5868] Bluetooth: hci0: command 0x0406 tx timeout [ 305.783448][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout [ 305.789732][ T5868] Bluetooth: hci2: command 0x0c1a tx timeout [ 305.915235][T10505] /dev/rnullb0: Can't open blockdev [ 305.974885][T10479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1345'. [ 306.006462][T10479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1345'. [ 306.181557][T10511] /dev/rnullb0: Can't open blockdev [ 306.423256][ T5944] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 306.523236][ T3475] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.586728][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 306.593883][ T5944] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 306.624085][ T5944] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 306.648376][ T5944] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 306.663017][ T5944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.681401][ T5944] usb 3-1: Product: syz [ 306.686126][ T5944] usb 3-1: Manufacturer: syz [ 306.701809][ T5944] usb 3-1: SerialNumber: syz [ 306.710418][ T5944] usb 3-1: config 0 descriptor?? [ 307.027886][T10508] /dev/rnullb0: Can't open blockdev [ 307.107480][ T5944] rc_core: IR keymap rc-streamzap not found [ 307.128245][ T5944] Registered IR keymap rc-empty [ 307.135686][ T5944] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 307.150335][ T5944] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 307.189171][ T5944] usb 3-1: USB disconnect, device number 71 [ 307.271706][ T5856] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 307.301016][ T5856] usb 5-1: USB disconnect, device number 48 [ 307.508995][T10539] could not allocate digest TFM handle sha384-arm [ 307.702509][ T5868] Bluetooth: hci1: command 0x0406 tx timeout [ 307.919260][T10555] /dev/rnullb0: Can't open blockdev [ 308.076335][T10558] /dev/rnullb0: Can't open blockdev [ 308.317857][T10563] nftables ruleset with unbound chain [ 308.465795][T10569] /dev/rnullb0: Can't open blockdev [ 308.790901][T10577] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 309.117992][T10590] syz.4.1382 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 309.120009][T10591] /dev/rnullb0: Can't open blockdev [ 309.354775][T10600] /dev/rnullb0: Can't open blockdev [ 309.357009][T10599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.370686][T10599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.738568][T10607] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 309.745824][T10607] /dev/rnullb0: Can't open blockdev [ 309.746045][T10608] overlay: ./file0 is not a directory [ 309.805811][T10612] overlayfs: missing 'lowerdir' [ 310.087382][T10624] /dev/rnullb0: Can't open blockdev [ 310.228787][T10626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 310.284932][T10626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 310.486279][T10632] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 310.495450][T10632] /dev/rnullb0: Can't open blockdev [ 310.593898][T10635] lo speed is unknown, defaulting to 1000 [ 310.601865][ T43] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 310.614310][T10635] lo speed is unknown, defaulting to 1000 [ 310.624692][T10635] lo speed is unknown, defaulting to 1000 [ 310.784178][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.797261][ T43] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 310.806841][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.820920][ T43] usb 5-1: Product: syz [ 310.825131][ T43] usb 5-1: Manufacturer: syz [ 310.829757][ T43] usb 5-1: SerialNumber: syz [ 310.859686][ T43] usb 5-1: config 0 descriptor?? [ 310.884399][ T43] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 310.983522][T10635] infiniband syz0: set active [ 310.989301][T10635] infiniband syz0: added lo [ 310.990463][ T43] lo speed is unknown, defaulting to 1000 [ 310.998265][T10635] syz0: rxe_create_cq: returned err = -12 [ 311.008624][T10635] infiniband syz0: Couldn't create ib_mad CQ [ 311.018313][T10635] infiniband syz0: Couldn't open port 1 [ 311.055907][T10635] RDS/IB: syz0: added [ 311.060450][T10635] smc: adding ib device syz0 with port count 1 [ 311.067030][T10635] smc: ib device syz0 port 1 has pnetid [ 311.077004][ T5944] lo speed is unknown, defaulting to 1000 [ 311.084219][T10635] lo speed is unknown, defaulting to 1000 [ 311.103764][ T43] usb 5-1: USB disconnect, device number 49 [ 311.292363][T10635] lo speed is unknown, defaulting to 1000 [ 311.476021][T10635] lo speed is unknown, defaulting to 1000 [ 311.693022][T10643] loop6: detected capacity change from 0 to 7 [ 311.699763][T10635] lo speed is unknown, defaulting to 1000 [ 311.700631][T10643] Dev loop6: unable to read RDB block 7 [ 311.726577][T10643] loop6: AHDI p1 p2 [ 311.732777][T10643] loop6: partition table partially beyond EOD, truncated [ 311.745002][T10643] loop6: p1 start 926365495 is beyond EOD, truncated [ 311.852785][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 311.985609][T10649] /dev/rnullb0: Can't open blockdev [ 311.999252][T10649] overlay: Unknown parameter 'subj_user' [ 312.091480][T10652] /dev/rnullb0: Can't open blockdev [ 312.105397][T10653] /dev/rnullb0: Can't open blockdev [ 312.173795][T10635] lo speed is unknown, defaulting to 1000 [ 312.270175][ T5944] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 312.430082][ T24] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 312.430081][ T5944] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 312.430115][ T5944] usb 5-1: config 1 interface 0 has no altsetting 0 [ 312.465994][ T5944] usb 5-1: New USB device found, idVendor=05ac, idProduct=0214, bcdDevice= 0.40 [ 312.477562][ T5944] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.489407][ T5944] usb 5-1: Product: Ѓ [ 312.495779][ T5944] usb 5-1: Manufacturer: 窄⊁畦跙锰ⵞꚘ饴ᓨ槦諞ᲀꕼ㒒㣂玑➥ᾃ粍佉䊛꛲灵㹇ㅽ醭ᥨⶢ⬹抇赵k✓횶~ᜪ턲龖똏롡쳠ㅝ嬁魖骐븫㭀䇺蠞漉቏ﱽ⯠뾹ꃰ톇뿿৒叕梥蠜몈 [ 312.507311][T10658] /dev/rnullb0: Can't open blockdev [ 312.553997][ T5944] usb 5-1: SerialNumber: ࠓ [ 312.610125][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 312.624514][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 312.639032][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.648578][ T24] usb 3-1: Product: syz [ 312.655642][ T24] usb 3-1: Manufacturer: syz [ 312.660546][ T24] usb 3-1: SerialNumber: syz [ 312.690220][ T24] usb 3-1: config 0 descriptor?? [ 312.700216][ T24] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 312.770211][T10667] /dev/rnullb0: Can't open blockdev [ 312.785492][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.795880][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.816408][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.831340][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.843057][ T5868] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 312.849250][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.869508][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.903774][ T24] gspca_sonixj: reg_w1 err -71 [ 312.911314][ T5944] usbhid 5-1:1.0: can't add hid device: -71 [ 312.911993][ T24] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 312.920515][ T5944] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 312.942568][ T24] usb 3-1: USB disconnect, device number 72 [ 312.949787][T10669] loop6: detected capacity change from 0 to 7 [ 312.962281][T10669] Dev loop6: unable to read RDB block 7 [ 312.962457][ T5944] usb 5-1: USB disconnect, device number 50 [ 312.967883][T10669] loop6: AHDI p1 p2 [ 312.967920][T10669] loop6: partition table partially beyond EOD, truncated [ 312.991205][T10669] loop6: p1 start 926365495 is beyond EOD, truncated [ 313.073880][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 313.155131][T10673] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1410'. [ 313.165715][T10673] tipc: Invalid UDP bearer configuration [ 313.166254][T10673] tipc: Enabling of bearer rejected, failed to enable media [ 313.797108][T10699] loop6: detected capacity change from 0 to 7 [ 313.809472][ T43] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 313.820906][T10699] Dev loop6: unable to read RDB block 7 [ 313.835685][T10699] loop6: AHDI p1 p2 [ 313.849464][T10699] loop6: partition table partially beyond EOD, truncated [ 313.869093][T10699] loop6: p1 start 926365495 is beyond EOD, truncated [ 314.006934][T10704] netlink: 'syz.1.1420': attribute type 29 has an invalid length. [ 314.018748][T10704] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.1420'. [ 314.089424][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 314.137135][ T43] usb 5-1: unable to get BOS descriptor or descriptor too short [ 314.146462][ T43] usb 5-1: config 255 has an invalid interface number: 243 but max is 0 [ 314.160472][ T43] usb 5-1: config 255 has no interface number 0 [ 314.166932][ T43] usb 5-1: config 255 interface 243 has no altsetting 0 [ 314.197320][ T43] usb 5-1: New USB device found, idVendor=5050, idProduct=8004, bcdDevice=80.4a [ 314.197355][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.197377][ T43] usb 5-1: Product: syz [ 314.197394][ T43] usb 5-1: Manufacturer: syz [ 314.197411][ T43] usb 5-1: SerialNumber: syz [ 314.203836][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 314.481612][T10714] /dev/rnullb0: Can't open blockdev [ 314.806998][T10689] /dev/rnullb0: Can't open blockdev [ 315.120735][ T43] ftdi_sio 5-1:255.243: FTDI USB Serial Device converter detected [ 315.130481][ T43] ftdi_sio ttyUSB0: unknown device type: 0x804a [ 315.144000][ T43] usb 5-1: USB disconnect, device number 51 [ 315.151635][ T43] ftdi_sio 5-1:255.243: device disconnected [ 315.232565][T10721] fuse: Unknown parameter 'gRoup_id' [ 315.438613][ T986] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 315.501481][T10712] nfs4: Unknown parameter 'no!c' [ 315.615262][ T986] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.638118][ T986] usb 4-1: config 0 has no interfaces? [ 315.647169][ T986] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 315.678575][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.696017][ T986] usb 4-1: config 0 descriptor?? [ 315.768200][T10740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.809358][T10740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.836970][T10742] loop6: detected capacity change from 0 to 7 [ 315.847788][T10742] Dev loop6: unable to read RDB block 7 [ 315.854324][T10742] loop6: AHDI p1 p2 [ 315.866195][T10742] loop6: partition table partially beyond EOD, truncated [ 315.873998][T10742] loop6: p1 start 926365495 is beyond EOD, truncated [ 315.904964][ T5225] Dev loop6: unable to read RDB block 7 [ 315.911082][ T5225] loop6: AHDI p1 p2 [ 315.915187][ T5225] loop6: partition table partially beyond EOD, truncated [ 315.922665][ T5225] loop6: p1 start 926365495 is beyond EOD, truncated [ 315.943312][ T986] usb 4-1: USB disconnect, device number 64 [ 316.007003][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 316.056291][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 316.655998][T10769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.672951][T10769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.925307][T10774] loop6: detected capacity change from 0 to 7 [ 316.934009][T10774] Dev loop6: unable to read RDB block 7 [ 316.940437][T10774] loop6: AHDI p1 p2 [ 316.944515][T10774] loop6: partition table partially beyond EOD, truncated [ 316.959684][T10774] loop6: p1 start 926365495 is beyond EOD, truncated [ 317.039282][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 317.165017][T10777] /dev/rnullb0: Can't open blockdev [ 317.223241][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.229979][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.651476][T10790] tracefs: Unknown parameter '-}.[' [ 317.703683][T10790] /dev/rnullb0: Can't open blockdev [ 317.748177][T10793] /dev/rnullb0: Can't open blockdev [ 317.765075][T10797] /dev/rnullb0: Can't open blockdev [ 317.779175][T10793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.794909][T10793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.128250][T10814] /dev/rnullb0: Can't open blockdev [ 318.330167][ T5923] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 318.519557][ T5923] usb 4-1: unable to get BOS descriptor or descriptor too short [ 318.528303][ T5923] usb 4-1: not running at top speed; connect to a high speed hub [ 318.538091][ T5923] usb 4-1: config 3 has an invalid interface number: 106 but max is 0 [ 318.559256][ T5923] usb 4-1: config 3 has no interface number 0 [ 318.584655][ T5923] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 318.597458][T10826] netlink: 'syz.1.1456': attribute type 4 has an invalid length. [ 318.602164][ T5868] Bluetooth: hci2: unexpected event for opcode 0x0c7d [ 318.700994][ T5923] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 318.746890][ T5923] usb 4-1: config 3 interface 106 has no altsetting 0 [ 318.775353][ T5923] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 318.789477][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.815233][ T5923] usb 4-1: Product: syz [ 318.824673][ T5923] usb 4-1: Manufacturer: syz [ 318.835559][ T5923] usb 4-1: SerialNumber: syz [ 318.863734][T10812] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 318.873694][T10812] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 319.094051][T10812] /dev/rnullb0: Can't open blockdev [ 319.116957][ T5923] kobil_sct 4-1:3.106: KOBIL USB smart card terminal converter detected [ 319.167330][ T5923] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 319.196272][ T5923] usb 4-1: USB disconnect, device number 65 [ 319.225974][ T5923] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 319.254208][ T5923] kobil_sct 4-1:3.106: device disconnected [ 319.566164][T10847] /dev/rnullb0: Can't open blockdev [ 319.588950][T10849] /dev/rnullb0: Can't open blockdev [ 319.700813][T10851] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 319.741593][T10851] /dev/rnullb0: Can't open blockdev [ 319.781585][T10855] /dev/rnullb0: Can't open blockdev [ 319.861488][T10859] loop6: detected capacity change from 0 to 7 [ 319.875394][ T7866] Dev loop6: unable to read RDB block 7 [ 319.882639][ T7866] loop6: AHDI p1 p2 [ 319.891157][ T7866] loop6: partition table partially beyond EOD, truncated [ 319.905643][ T7866] loop6: p1 start 926365495 is beyond EOD, truncated [ 319.948670][T10859] Dev loop6: unable to read RDB block 7 [ 319.954803][T10859] loop6: AHDI p1 p2 [ 319.968890][T10859] loop6: partition table partially beyond EOD, truncated [ 319.989436][T10859] loop6: p1 start 926365495 is beyond EOD, truncated [ 320.104406][T10865] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 320.109832][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 320.178558][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 320.257386][T10868] /dev/rnullb0: Can't open blockdev [ 320.315361][ T30] audit: type=1326 audit(6044038271.380:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10841 comm="syz.1.1463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ce698e929 code=0x7fc00000 [ 320.459270][T10872] netlink: 372 bytes leftover after parsing attributes in process `syz.1.1475'. [ 320.575045][T10875] /dev/rnullb0: Can't open blockdev [ 320.675936][ T43] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 320.740050][T10877] QAT: Invalid ioctl 1075883590 [ 320.748939][T10877] QAT: Invalid ioctl 1075883590 [ 320.754015][T10877] QAT: Invalid ioctl 1075883590 [ 320.759459][T10877] QAT: Invalid ioctl 1075883590 [ 320.764506][T10877] QAT: Invalid ioctl 1075883590 [ 320.769659][T10877] QAT: Invalid ioctl 1075883590 [ 320.774682][T10877] QAT: Invalid ioctl 1075883590 [ 320.779892][T10877] QAT: Invalid ioctl 1075883590 [ 320.784937][T10877] QAT: Invalid ioctl 1075883590 [ 320.790184][T10877] QAT: Invalid ioctl 1075883590 [ 320.817767][ T43] usb 4-1: device descriptor read/64, error -71 [ 320.972739][T10881] openvswitch: netlink: IP tunnel TTL not specified. [ 321.075771][ T43] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 321.216263][ T43] usb 4-1: device descriptor read/64, error -71 [ 321.336229][ T43] usb usb4-port1: attempt power cycle [ 321.685528][ T43] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 321.716276][ T43] usb 4-1: device descriptor read/8, error -71 [ 321.966242][ T43] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 321.998584][ T43] usb 4-1: device descriptor read/8, error -71 [ 322.108663][ T43] usb usb4-port1: unable to enumerate USB device [ 322.425358][T10921] /dev/rnullb0: Can't open blockdev [ 322.574371][T10923] /dev/rnullb0: Can't open blockdev [ 322.781037][T10927] /dev/rnullb0: Can't open blockdev [ 323.860501][T10941] /dev/rnullb0: Can't open blockdev [ 323.991082][T10945] loop6: detected capacity change from 0 to 7 [ 324.003079][T10945] Dev loop6: unable to read RDB block 7 [ 324.016115][T10945] loop6: AHDI p1 p2 [ 324.020082][T10945] loop6: partition table partially beyond EOD, truncated [ 324.029598][T10945] loop6: p1 start 926365495 is beyond EOD, truncated [ 324.088214][ T7866] udevd[7866]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 324.237732][T10954] /dev/rnullb0: Can't open blockdev [ 324.411134][T10957] fuse: Unknown parameter 'pcr' [ 324.481551][T10960] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 324.654020][ T5944] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 324.813861][ T5944] usb 4-1: Using ep0 maxpacket: 16 [ 324.824143][ T5944] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 324.836764][ T5944] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.860203][ T5944] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 324.883437][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.891589][ T5944] usb 4-1: Product: syz [ 324.898127][ T5944] usb 4-1: Manufacturer: syz [ 324.902856][ T5944] usb 4-1: SerialNumber: syz [ 324.925020][ T5944] usb 4-1: config 0 descriptor?? [ 324.942962][ T5944] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 324.953278][ T5944] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 325.085612][T10976] loop6: detected capacity change from 0 to 7 [ 325.089613][T10975] /dev/rnullb0: Can't open blockdev [ 325.100639][ T8355] Dev loop6: unable to read RDB block 7 [ 325.106351][ T8355] loop6: AHDI p1 p2 [ 325.110435][ T8355] loop6: partition table partially beyond EOD, truncated [ 325.120179][ T8355] loop6: p1 start 926365495 is beyond EOD, truncated [ 325.165197][T10976] Dev loop6: unable to read RDB block 7 [ 325.170858][T10976] loop6: AHDI p1 p2 [ 325.186491][ T24] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 325.195579][T10976] loop6: partition table partially beyond EOD, truncated [ 325.202773][T10978] smc: removing ib device syz0 [ 325.211831][T10976] loop6: p1 start 926365495 is beyond EOD, truncated [ 325.263002][T10979] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1508'. [ 325.305727][T10979] netlink: 'syz.1.1508': attribute type 3 has an invalid length. [ 325.320703][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 325.330843][T10982] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1509'. [ 325.343932][ T24] usb 3-1: device descriptor read/64, error -71 [ 325.378405][T10982] : entered promiscuous mode [ 325.400281][ T8355] udevd[8355]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 325.549520][ T5944] em28xx 4-1:0.0: chip ID is em2874 [ 325.615924][ T24] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 325.788058][ T24] usb 3-1: device descriptor read/64, error -71 [ 325.900463][T10996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1513'. [ 325.923871][ T24] usb usb3-port1: attempt power cycle [ 326.028115][ T5868] Bluetooth: hci4: unexpected event for opcode 0x0406 [ 326.283310][ T24] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 326.303905][ T24] usb 3-1: device descriptor read/8, error -71 [ 326.563353][ T24] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 326.624757][ T24] usb 3-1: device descriptor read/8, error -71 [ 326.721573][T10996] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 326.728499][T10996] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 326.736832][T10996] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 326.743387][T10996] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 326.749613][T10996] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 326.751057][ T24] usb usb3-port1: unable to enumerate USB device [ 327.015254][T11010] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.028102][T11010] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.421585][ T5944] usb 4-1: USB disconnect, device number 70 [ 327.430845][ T5944] em28xx 4-1:0.0: Disconnecting em28xx [ 327.448259][ T5944] em28xx 4-1:0.0: Freeing device [ 327.678880][T11028] /dev/rnullb0: Can't open blockdev [ 328.102444][ T5861] Bluetooth: hci1: command 0x0406 tx timeout [ 328.436266][T11046] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.667509][T11056] /dev/rnullb0: Can't open blockdev [ 328.733397][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 328.771014][T11061] /dev/rnullb0: Can't open blockdev [ 328.811957][ T5861] Bluetooth: hci4: command 0x0c1a tx timeout [ 328.812003][ T5858] Bluetooth: hci0: command 0x0406 tx timeout [ 328.818083][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.046583][T11063] /dev/rnullb0: Can't open blockdev [ 329.537343][T11078] netlink: 'syz.3.1538': attribute type 13 has an invalid length. [ 329.552433][T11078] macvtap0: entered promiscuous mode [ 329.567910][T11078] macvtap0: refused to change device tx_queue_len [ 330.019351][T11090] /dev/rnullb0: Can't open blockdev [ 330.522594][T11102] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 330.739695][T11108] /dev/rnullb0: Can't open blockdev [ 330.858984][T11112] /dev/rnullb0: Can't open blockdev [ 330.901146][ T5868] Bluetooth: hci4: command 0x0c1a tx timeout [ 330.932466][ T5923] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 331.029122][T11117] /dev/rnullb0: Can't open blockdev [ 331.095569][T11119] /dev/rnullb0: Can't open blockdev [ 331.108195][ T5923] usb 4-1: config 0 has an invalid interface number: 161 but max is 0 [ 331.116578][ T5923] usb 4-1: config 0 has no interface number 0 [ 331.135125][ T5923] usb 4-1: New USB device found, idVendor=067b, idProduct=331a, bcdDevice=4a.31 [ 331.151033][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.159092][ T5923] usb 4-1: Product: syz [ 331.191495][ T5923] usb 4-1: Manufacturer: syz [ 331.196154][ T5923] usb 4-1: SerialNumber: syz [ 331.223227][ T5923] usb 4-1: config 0 descriptor?? [ 331.243574][ T5944] IPVS: starting estimator thread 0... [ 331.251203][T11121] /dev/rnullb0: Can't open blockdev [ 331.258610][T11124] IPVS: set_ctl: invalid protocol: 11612 172.30.1.3:20003 [ 331.271437][T11121] /dev/rnullb0: Can't open blockdev [ 331.329865][T11126] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 331.405012][T11122] IPVS: using max 26 ests per chain, 62400 per kthread [ 331.464006][T11106] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1549'. [ 331.504504][T11106] /dev/rnullb0: Can't open blockdev [ 331.526415][ T5923] pl2303 4-1:0.161: required endpoints missing [ 331.601309][ T5923] usb 4-1: USB disconnect, device number 71 [ 331.636218][T11139] binder: 11138:11139 ioctl c0306201 2000000003c0 returned -14 [ 331.684055][T11139] pim6reg1: entered promiscuous mode [ 331.695542][T11139] pim6reg1: entered allmulticast mode [ 331.736683][T11135] "syz.1.1556" (11135) uses obsolete ecb(arc4) skcipher [ 331.905912][T11146] /dev/rnullb0: Can't open blockdev [ 332.560619][T11152] ================================================================== [ 332.568750][T11152] BUG: KASAN: slab-use-after-free in mas_next_slot+0x185/0xcf0 [ 332.576332][T11152] Read of size 8 at addr ffff88802b7b0400 by task syz.1.1560/11152 [ 332.584252][T11152] [ 332.586618][T11152] CPU: 0 UID: 0 PID: 11152 Comm: syz.1.1560 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 332.586647][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 332.586669][T11152] Call Trace: [ 332.586679][T11152] [ 332.586688][T11152] dump_stack_lvl+0x189/0x250 [ 332.586721][T11152] ? __kasan_check_byte+0x12/0x40 [ 332.586756][T11152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 332.586784][T11152] ? lock_release+0x4b/0x3e0 [ 332.586812][T11152] ? __virt_addr_valid+0x4a5/0x5c0 [ 332.586845][T11152] print_report+0xca/0x230 [ 332.586865][T11152] ? mas_next_slot+0x185/0xcf0 [ 332.586884][T11152] kasan_report+0x118/0x150 [ 332.586909][T11152] ? bpf_lsm_mmap_addr+0x9/0x20 [ 332.586940][T11152] ? mas_next_slot+0x185/0xcf0 [ 332.586963][T11152] mas_next_slot+0x185/0xcf0 [ 332.586992][T11152] mas_find+0xb0e/0xd30 [ 332.587016][T11152] __se_sys_mremap+0xaff/0xef0 [ 332.587053][T11152] ? __pfx___se_sys_mremap+0x10/0x10 [ 332.587090][T11152] ? do_syscall_64+0xbe/0x3b0 [ 332.587112][T11152] ? __x64_sys_mremap+0x20/0xc0 [ 332.587138][T11152] do_syscall_64+0xfa/0x3b0 [ 332.587159][T11152] ? lockdep_hardirqs_on+0x9c/0x150 [ 332.587180][T11152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.587200][T11152] ? clear_bhb_loop+0x60/0xb0 [ 332.587223][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.587243][T11152] RIP: 0033:0x7f2ce698e929 [ 332.587267][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.587285][T11152] RSP: 002b:00007f2ce7885038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 332.587308][T11152] RAX: ffffffffffffffda RBX: 00007f2ce6bb5fa0 RCX: 00007f2ce698e929 [ 332.587324][T11152] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000 [ 332.587338][T11152] RBP: 00007f2ce6a10b39 R08: 0000200000a00000 R09: 0000000000000000 [ 332.587353][T11152] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 332.587366][T11152] R13: 0000000000000000 R14: 00007f2ce6bb5fa0 R15: 00007ffdccbd4e98 [ 332.587389][T11152] [ 332.587397][T11152] [ 332.795033][T11152] Allocated by task 11152: [ 332.799452][T11152] kasan_save_track+0x3e/0x80 [ 332.804147][T11152] __kasan_slab_alloc+0x6c/0x80 [ 332.809009][T11152] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 332.814479][T11152] mas_alloc_nodes+0x2e9/0x8e0 [ 332.819249][T11152] mas_preallocate+0x3ad/0x6f0 [ 332.824014][T11152] __split_vma+0x2fa/0xa00 [ 332.828447][T11152] vma_modify+0x13b3/0x1970 [ 332.832963][T11152] vma_modify_flags_uffd+0x204/0x250 [ 332.838259][T11152] userfaultfd_register_range+0x4d7/0x670 [ 332.843982][T11152] userfaultfd_ioctl+0x40b5/0x4c80 [ 332.849099][T11152] __se_sys_ioctl+0xfc/0x170 [ 332.853692][T11152] do_syscall_64+0xfa/0x3b0 [ 332.858198][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.864092][T11152] [ 332.866415][T11152] Freed by task 23: [ 332.870216][T11152] kasan_save_track+0x3e/0x80 [ 332.874904][T11152] kasan_save_free_info+0x46/0x50 [ 332.879929][T11152] __kasan_slab_free+0x62/0x70 [ 332.884702][T11152] kmem_cache_free+0x18f/0x400 [ 332.889479][T11152] rcu_core+0xca8/0x1710 [ 332.893728][T11152] handle_softirqs+0x283/0x870 [ 332.898500][T11152] run_ksoftirqd+0x9b/0x100 [ 332.903011][T11152] smpboot_thread_fn+0x53f/0xa60 [ 332.907959][T11152] kthread+0x70e/0x8a0 [ 332.912030][T11152] ret_from_fork+0x3f9/0x770 [ 332.916629][T11152] ret_from_fork_asm+0x1a/0x30 [ 332.921401][T11152] [ 332.923727][T11152] Last potentially related work creation: [ 332.929444][T11152] kasan_save_stack+0x3e/0x60 [ 332.934133][T11152] kasan_record_aux_stack+0xbd/0xd0 [ 332.939336][T11152] call_rcu+0x157/0x9c0 [ 332.943507][T11152] mas_wr_store_entry+0x1f1b/0x25b0 [ 332.948721][T11152] mas_store_prealloc+0xb00/0xf60 [ 332.953743][T11152] vma_complete+0x224/0xae0 [ 332.958252][T11152] __split_vma+0x8a6/0xa00 [ 332.962674][T11152] vms_gather_munmap_vmas+0x2de/0x12b0 [ 332.968149][T11152] do_vmi_align_munmap+0x25d/0x420 [ 332.973290][T11152] do_vmi_munmap+0x253/0x2e0 [ 332.977894][T11152] do_munmap+0xe1/0x140 [ 332.982068][T11152] mremap_to+0x304/0x7b0 [ 332.986327][T11152] __se_sys_mremap+0xa0b/0xef0 [ 332.991097][T11152] do_syscall_64+0xfa/0x3b0 [ 332.995628][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.001525][T11152] [ 333.003850][T11152] The buggy address belongs to the object at ffff88802b7b0400 [ 333.003850][T11152] which belongs to the cache maple_node of size 256 [ 333.017820][T11152] The buggy address is located 0 bytes inside of [ 333.017820][T11152] freed 256-byte region [ffff88802b7b0400, ffff88802b7b0500) [ 333.031454][T11152] [ 333.033788][T11152] The buggy address belongs to the physical page: [ 333.040200][T11152] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b7b0 [ 333.048961][T11152] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 333.057462][T11152] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 333.065006][T11152] page_type: f5(slab) [ 333.068990][T11152] raw: 00fff00000000040 ffff88801a891000 ffffea0001f08000 dead000000000002 [ 333.077586][T11152] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 333.086180][T11152] head: 00fff00000000040 ffff88801a891000 ffffea0001f08000 dead000000000002 [ 333.094863][T11152] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 333.103539][T11152] head: 00fff00000000001 ffffea0000adec01 00000000ffffffff 00000000ffffffff [ 333.112216][T11152] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 333.120885][T11152] page dumped because: kasan: bad access detected [ 333.127308][T11152] page_owner tracks the page as allocated [ 333.133034][T11152] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x52800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP), pid 26, tgid 26 (kdevtmpfs), ts 22910431372, free_ts 0 [ 333.149724][T11152] post_alloc_hook+0x240/0x2a0 [ 333.154508][T11152] get_page_from_freelist+0x21e4/0x22c0 [ 333.160071][T11152] __alloc_frozen_pages_noprof+0x181/0x370 [ 333.165900][T11152] alloc_pages_mpol+0x232/0x4a0 [ 333.170767][T11152] allocate_slab+0x8a/0x370 [ 333.175300][T11152] ___slab_alloc+0xbeb/0x1410 [ 333.179986][T11152] kmem_cache_alloc_bulk_noprof+0x20e/0x790 [ 333.185887][T11152] mas_alloc_nodes+0x447/0x8e0 [ 333.190667][T11152] mas_insert+0x3ec/0x690 [ 333.195007][T11152] mas_alloc_cyclic+0x20e/0x630 [ 333.199874][T11152] mtree_alloc_cyclic+0x186/0x220 [ 333.204925][T11152] simple_offset_add+0xdc/0x190 [ 333.209839][T11152] shmem_mknod+0x234/0x3e0 [ 333.214319][T11152] vfs_mknod+0x37f/0x3c0 [ 333.218583][T11152] devtmpfs_work_loop+0x98b/0xd20 [ 333.223629][T11152] devtmpfsd+0x4d/0x50 [ 333.227736][T11152] page_owner free stack trace missing [ 333.233131][T11152] [ 333.235474][T11152] Memory state around the buggy address: [ 333.241121][T11152] ffff88802b7b0300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.249205][T11152] ffff88802b7b0380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.257286][T11152] >ffff88802b7b0400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.265353][T11152] ^ [ 333.269430][T11152] ffff88802b7b0480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 333.277503][T11152] ffff88802b7b0500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 333.285589][T11152] ================================================================== [ 333.356851][T11158] loop6: detected capacity change from 0 to 7 [ 333.452151][T11163] /dev/rnullb0: Can't open blockdev [ 333.494157][T11158] Dev loop6: unable to read RDB block 7 [ 333.559499][T11152] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 333.566768][T11152] CPU: 1 UID: 0 PID: 11152 Comm: syz.1.1560 Not tainted 6.16.0-rc6-next-20250714-syzkaller #0 PREEMPT(full) [ 333.578342][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.588433][T11152] Call Trace: [ 333.591739][T11152] [ 333.594702][T11152] dump_stack_lvl+0x99/0x250 [ 333.599338][T11152] ? __asan_memcpy+0x40/0x70 [ 333.603963][T11152] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.609199][T11152] ? __pfx__printk+0x10/0x10 [ 333.613843][T11152] vpanic+0x281/0x750 [ 333.617856][T11152] ? preempt_schedule+0xae/0xc0 [ 333.622730][T11152] ? __pfx_vpanic+0x10/0x10 [ 333.627274][T11152] ? preempt_schedule_common+0x83/0xd0 [ 333.632763][T11152] ? preempt_schedule+0xae/0xc0 [ 333.637640][T11152] ? __pfx_preempt_schedule+0x10/0x10 [ 333.643042][T11152] panic+0xb9/0xc0 [ 333.646794][T11152] ? __pfx_panic+0x10/0x10 [ 333.651242][T11152] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 333.657165][T11152] ? mas_next_slot+0x185/0xcf0 [ 333.661965][T11152] check_panic_on_warn+0x89/0xb0 [ 333.666927][T11152] ? mas_next_slot+0x185/0xcf0 [ 333.671714][T11152] end_report+0x78/0x160 [ 333.675988][T11152] kasan_report+0x129/0x150 [ 333.680516][T11152] ? bpf_lsm_mmap_addr+0x9/0x20 [ 333.685401][T11152] ? mas_next_slot+0x185/0xcf0 [ 333.690194][T11152] mas_next_slot+0x185/0xcf0 [ 333.694814][T11152] mas_find+0xb0e/0xd30 [ 333.699001][T11152] __se_sys_mremap+0xaff/0xef0 [ 333.703812][T11152] ? __pfx___se_sys_mremap+0x10/0x10 [ 333.709144][T11152] ? do_syscall_64+0xbe/0x3b0 [ 333.713846][T11152] ? __x64_sys_mremap+0x20/0xc0 [ 333.718733][T11152] do_syscall_64+0xfa/0x3b0 [ 333.723270][T11152] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.728493][T11152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.734590][T11152] ? clear_bhb_loop+0x60/0xb0 [ 333.739295][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.745216][T11152] RIP: 0033:0x7f2ce698e929 [ 333.749655][T11152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.769287][T11152] RSP: 002b:00007f2ce7885038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 333.777745][T11152] RAX: ffffffffffffffda RBX: 00007f2ce6bb5fa0 RCX: 00007f2ce698e929 [ 333.785751][T11152] RDX: 0000000000600002 RSI: 0000000000600002 RDI: 0000200000000000 [ 333.793753][T11152] RBP: 00007f2ce6a10b39 R08: 0000200000a00000 R09: 0000000000000000 [ 333.801765][T11152] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 333.809759][T11152] R13: 0000000000000000 R14: 00007f2ce6bb5fa0 R15: 00007ffdccbd4e98 [ 333.817782][T11152] [ 333.821145][T11152] Kernel Offset: disabled [ 333.825480][T11152] Rebooting in 86400 seconds..