last executing test programs: 3m18.705301754s ago: executing program 0 (id=36): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x117902, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b8004023655fdbaded39d65000b4824ca940417a3cd3639e431e8e2125f6c00940f6a0325010ebc0000000000000080001328baf0fffeffe809005300fff5dd02000000000000000c10003d5bcf6916b4114b32793792c395da89991a8be619c7ce1ecf8b6e3501aeb67cdb99f356f9518492cbf6d88e98f0df275f9f6dd0e185ac9b0b8902c883e0b63cf78a6f36b97cab227f62b6d35dcd058a8957d1bbf401e51d4302cbc17c3201e7b12fa4daac244b96d402183b429bbe400236cd1f8d50f2568ac466a6d40024f87588cbe7808c481b157f18acb07cee62b1d238ba704435ee1c055697eb1ee0e2cfa36d2efbf1ac9fa85fe4", 0xfdae}], 0x1) 3m18.638085794s ago: executing program 0 (id=38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x48080) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000180)={0x7fffffff, 0x6}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[], 0x52) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="38010000fe0000"], 0x138) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) ftruncate(r4, 0x2) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) r7 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000002740)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) fsetxattr$system_posix_acl(r7, &(0x7f0000002780)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="0200000001000500000000000200b062461080afd10200f61a86cf34d9765b85994846f772272453178680f17f7c637ea743c43f56b91d848a0e1917bb0914f1ee4af067567738ad228d88378056e9879b483f2fd6e5779e23e5c77da9f384f9a4c892c55e009b604813332d41ec32ad2f3373721a02b7735ebf3434dfebcedb507c67a8ebbaa5b6032cc76d2fe65a90093aa3475a3398f12791ae00"/165, @ANYRES32, @ANYBLOB="02000100", @ANYRES32=0x0, @ANYBLOB="040004000000000010000000000000002000060000000000"], 0x34, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000ff02"]) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_GETXATTR(r10, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000005c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3m18.44265807s ago: executing program 0 (id=39): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x20000, 0x0) 3m18.290291932s ago: executing program 0 (id=41): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) timer_create(0x0, 0x0, &(0x7f00000001c0)) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, 0x0, &(0x7f0000000480)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="81050018a066e9008106"], 0x10) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000280)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x24652890ee57d8f4, 0x0, @in={0x2, 0x4e24, @broadcast}}}, 0x90) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r3, 0x92, 0x5, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x20) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r4, 0x6f000) mkdirat(r4, &(0x7f0000000440)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000004200000426b97000fedbff25010200000800dc0000010000"], 0x1c}, 0x1, 0x0, 0x0, 0x890}, 0x10) r6 = gettid() setpgid(0x0, r6) sched_setscheduler(r6, 0x3, &(0x7f0000000580)=0x2754) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r3, 0xa471a000) sendmsg$nl_generic(r5, &(0x7f0000000540)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000f40)=ANY=[@ANYBLOB="ac160000310000042bbd7000fddbdf25170000004cf1762c7950d597b1ff8cb53da4a5573cbb9e53e351184ecd814e49a8765d4fbe787ddd755611427c87710071c0fd4ea4b8bef7260ad0a92a9be5f77e038ce79e73d82ec3f5a4018ccf14de30ffa98725902d599514ff0b61b1f75f433464c76db0672e12c3b260daa94d654258b8ee97c5677ab70607010c05a64b0f7c7c720ff4e5ed40f35925ce7d301cffc62c2b7dc88d1abb394a3cc6f93b926f68e325cb5c0b55f678f36fc96f223b2b6458c6fda2a910d12bce740fb57af2a8aa00c3800c00050008000000000000000400be0004004700adc0edf75a66785b869516b37a6422218c117cde87ce1dedbadb70d30f0cff179a842106d22bedabbc2bd589b863c9abc6e3dc4135b038cc41ddd73c25f406814906073ff6da76a007fa02e698c7df3df0d1107775a4ff5948033e168917b80dbef53fb31a26e8fb99572609ef68fedfc1e1f3e5a899c4ae38e25292162f1737a66419f516eaa28e586b2d86692e04005780000008009700040000009c107a8008001c007d2e5b2aba547fa1f9689181560b531919a46564d4c5781eca10b0d556706f85e5729069372c9c7d034f8df68cc32eb427d83979990394b312b0e3db3d8908a77a6c7c3c32e6cb6f4e92d1a1e63380a06904e37295e9e9d07b7b3e39e443e0d600137e51381b2967922317651b021ede399a78959944405d9220f4f7f592290e38818c08b6412ba3a9da1926e68efa3dc386a3eef902cbccc7bc5e64fab1dd07fe77004967d8755398df5c2f7f5971c21df0d6f0b56ac49388ef14854b1dd7ed3cf572388207137ee73156cf8371dbc64ced9bdcc10d784b94e899150c87b3f2a7c77b27340adf63988118539fecb9ac26a05131eb577525588a66a7ee8d4a26811c5270fdad5d413faef892f77ab253ef84147a4d1e298490478237d0e2a7bf209d1f013f1805a3203d3a963ae2f1c786e22b9b66ed258bb85ae4892b57d1e90aa56878a3688ca38b924c3413961e77233a3fa550c9887b042e53841da4407c1ab0c26088c543493d6dcc0fc98a639a40f77ef67bafbc81eb348d0f705be108861228ca683be6b19785a252160693e804643dd64157233f3b48739f761b4a55c1dcafb060cd11d8cbdf57e286018408f4a9342b1ff190d81c44a6400bc18f21faea31b3c7f290b99909391b8c8a13b263dcfc6d3b699fdb5d242228e0fbe67fc6a5359f1bd8979004a1a68e54bfa1d9daa361d24e3efa47617842fa4685955370d5d834847e6da43c8f31cac1e3a334c81074be9e84168b0b2694f6958f03a94acaba53deba8111741d2d79bd69f45a3b3d7178e8436d5257ab6f76e8b8f7cd6758f3d8c32503573972b1ac6cd721e7347996102f9998be1fab7ad2017946af3278bae09eb85a09d20f816c9ec10aa451df29e12a987618a0aedd52f43c1bcdd16c94fcf9cb3db20dae62423748955ba289a6dbdc191fc2ee208e49cd8282cf1aeb2fac24d428c5256fc913097bfebdeaaac6802bdc0b4bbc0ebf2de39a7fd5400fd39cbe4208f5f31e628579a53925bb3f2a8f45e8e687ae2c3347530e171c68a508a0161582c6c1eb1f5feb679ed5749b962ea1e6a45e4c6206a03f32c79f50dbedc9abc4929227bda7c254b747b24347c68e9e4811f59351147de798d1e0293b48f6c5b102febd62f6176770565096e6a67b60560616f90d333900705c9c21b665a683c8a606d370fe0f62a2641e6eb889df30384b5be29f199f39b6fda30387ea93be8cdbd76c173e724db3cd363447f207fec73deb505446524f45802b4271e068f9303b9656da451834e504a1affd07faea1e56f60df1388d9a09319f000b024a4368bcaa543b55a1e0ecfaa60a59907f75ad4f2df378f4e6b849f7186ead0b4e456f2649b9881d89b74734bfcdbf064e4c7bc3f429812ed3e15baec037e40a93ca2c997e0d517f494de6f61c80a57b49f73a54be0f348b957a36bc60b1244cf7fbb3be703ea3458da1c43abc4985070cba3b9caed7cdfdb283e4d9429d74fa8e802e01abffcd6ca108fb4a35bd26a88360658c6022e08ad6134ef01cf5cc85c254f7e70bb8a09b87f9a249373f8389b3e57d0f087e166b4595f8f5d5f347ed0e5e9ddc87eb146ada83ddeac5b477468818d518e7fe000ed302515d1800ee9ad0c280d9b1087ece03bc439fbb68b4e9c9ab66829341c5502dd02bb36bf9a3d6cb20ee769068be9ea464bbf06619971c31e4db26db56cf0d561b279b2c1ec43a2f38cfb6213d75e592a7c2ee49f7978f36e6bb88c6f896da12c5d314062c61bcff1a892ed0a28bc4651b76b6504adebfe7adeaee879e9b9a4cccd0b61007b052a01d20007a2ed847941079f4a70a77a478d307ff7a7ffdd1292721997bcc1c21c64ec33190cd3a537758bc0a9582c703407666b6b0d73214c0b01f18b3dac5c6bf99e22b4d4c423f763db12365b78bfa27a8f956336ebe41dbb9c0429a132d4c3478771036c626d9c0fcddab381cb9d58b566f9370d80092527354be1400fc6e0b391ad3d549f418764458a1f4fea76afa27c996d3bf3cb7cf7418e0c171cd5a6c91526d560440d5b3cf35492124838206036b4a5930825dd85b625ff3ed032adbbebfb393f394415b09e85dd07311cb39f676ba067683c735d827ed31bad80088662252dea13dae0ff7c974c304345ba61e70803bc2db195e6e4d16b75c4c290350699443c3f43d7b38c676c06a9830c74d6d4df3f223beffde0892635516c5eae7fa51b9039d8789705be0663ad26b6d4112b75a11fb0d34d2067d42798c5bce6c0fe4c301577c62a7a63b9959560fbefaeda13a82d7d7baadf912d4890482f6db676994d7b34be39ff47d8c1f1a39076f1425e704c3d95ca5d61f48ac174755ba581b933d45a19a4ebe8a7b3aa980ce71c67af6b6d4ca2bc4347496c08469bff20ed44f735ac3b172bd502044fb813fe9a15aeb6c6f856aabc50b3d691191e0a4e0f2356e9b5de0b64527136b338b42b0d6a6b294016743ac67005dbe0de28ebad027c3854587837977e256e5a3a2abefe9b693a4f16a7f3aab356e66daff7b959401e8f9617f7e1a5eb32f4e787d0ddf7745eb12d14a58a2d4f39584a5c76897048f8a69d8b666c2cc5189fbe44caca56fc1494fdeaf4d5c84620cc7f7d185f66fe35ae6d56129aa8956c721397408b85b97835e9ca349335db74349abf72ddffa68cf13ca6ce834a2a01d4b2d7c56fedbe2e992a9dd7304396f49a940e088cba1a4f221573b3119af6ba210b057bebc7109f3c6520652ba66726440016919b19d14c638f54a08dde8992c22bbac12b84842420db4367d72b457634d912ff9b6fad820124630814756fd28f73f9de8503750cb3500edd035745a2810d93fc55d84acf0a6ad78ab9c4e5bff052908095751a3e6ff3c14fb9c593954233f1034fe5c3fbad379a43ab584cd59f2e9e002e6dfed316a5739dae07952a03279533bcd930a387f542c5441ffa467a650debede510b060e300d8e8db0fe0c62fb6cb3cef84e6286feeda717d1486640239eeff677aba5350034cf76c140b3134a3cc4724d9e5a779b18dc0fa91e22db7972459a2dee5af3d1c94af1c605f633111864504f94e68619324dcee59faa1b14ae229b83fbb6ee2f8b0e3797f1e52f6b7ec4cda1340a4a43b5aef8f600cbbb50bf630753d8969e10b0f801f0bd2330a5b1877922dc1af65997d672ef41777e87999f0edce1dde4eba3d558679eaa3f3e9457416ccb8e11d79b3b8ebfef94d190a8b08bd87a62c471d83de010e41b846fe8fa182ba01741c3ee86b9ed7a7e4fa57ffad55948ac2a58e45000c1c1366b84ca84e2d9145ccdc738ef20088dbdd4bdbb041274459f3ae798d9bb425d637588de988e0615904b96b386067006e3b005a75c9c858bf254f17d28524c3faf40409e3383f85fa506b57f4e2e29f08f2c91581c3bb738b12bc2f4bab0033fa2c7a3e209492ab75733a9388c17435000da80bdbdd41199e3c435668ed231f167a2ec9aa5917edee28c4f5836988e5e121ea374371f652593a7ee8ce80cb0394976b27d9e5d6f23eb600af9e49aa20d0951acfbb0625c0b6ec3d3cc9c0fe138eab85e106440b2cf0334201dbd84c309ae5a97fc51c94a5f91e0182955a2002430953aaa5a4ea09fb2580f79b6257a3c07d63081a0435b6eaecc7841603b1150c7107f9f36f4ae795af25ada2ba6fde9b875086c1bbc33a54a5cba986e637a309d9713831988be64ec4cb29334271742628c7d9235e932ed15cd609250e03fc52a23c039a5b8db3f5f6bf92c33ac1fa6329821428512712acafd408f5fc881ca22087fcc26af46f0b805581635ba556ae6f2a661c15b5430c6874037c63c154fb2fc47338cb522731fe1b2dc7e5f1a98328a40dc911c3d2413e2c01fcef7d841715d5b67e685bec09c2fbfcb9c912ad215c3e9f718cc4cca16bd2a55eaaaa098411a69104b00f7429188f6209b81af8c53ff6681abe73c68bd32c02e555476a9381ad95bcaf3fd55a9d495c6224ba2ccdf80559eb2ad26373dc308077ba6e29d6dac88b8fbc220766407644eb34f7c88cf4fa91fad12d68b5e469530339345a828f70a60ae8787c1b722f7f6272e530f022e3fc40ef10320295d24ef73450c32c6d17478ab618a4a2fd8bbe64c3d5abe15cfa2bb0ffe00876ab84f492cf46e5511b663a5245f27cdf7923530b068563f9ee0c484df9af4e52a9f9e31d27718b8df6ed03ef0c871e47c5d3bc73e3642f900b8a3a3d0114114c8115fdb2fca9fcad972297460897be22ac9610f4ef8e8686d02b577a39ebe70ec5e237a7b9fd1cc9ab9a6f3404283a3febff5b76c2efaa073c1d727e45d99db06c7ef84f3cd73162e40990b122ac51ef40d8bf7c6e3b289c7dc8e117b301891fc98617dd2d285ec4391fdf4fc21d0119848bceda21eb3ebef19a7381b57ce8f3a37d4005d958866402e5f0d5f5fe1dabf7e6453b5f79df403c0f45c29f8e619a2cf4c4c98285283a53dd89912af90b67938d7db15ee821309f75315bc06cf3816a71a1c225d8e21ce956ed8b0bd785b7ac5937bf02add27cb19237e625804722ab12aa3942b98f3d6b163dd0d9dffe131dd33d258e9b97b455d01062823b686b1dcef8ca77efc6c1cc0f1495bab51a17fc13d92874e70d162fab5ae86d1b346df6b59c1d8cfc20a70edcfdb26e98e767544755835d10ab7bf401a684f94724a2b3ff7bbf3827ead9dbaf564dd06d1b9bdb9a46de40e65a6a16f1c2a27504ed901b52c59ef9f2523e62243759639f1b4c0bc63fd0ffda59baf2d8915c048ece6cec29da79842b7f506582af33812995f18305870810d22dc66a7af0bf59cc89f0c80adb9a72ba0d50edc1bbf4f274d90ee37966f983af43204fadc8a4638e6ce7981405381f78cefbf91af4ed8dc7d343f7af5cd6c9ee65d7177b41bea8648d7a210f5c60f36d2061ed579d105ea19bc9421a751d1e73a9b22157672cf10be283e56cca717641c804cbad5ac68b26de55f6dc33bc9013c123cbe7c00485c33bb59cf0a6a87f6a48287c6a0da0dae9faad8159b09292e0e60eb3472ae761bcfb916147647d04d8ae926907f0b30c079efa7670635f2367b7e66415dc5751e1b99ca1c94d33883d83e19cae37cb3a33379a263c57a52d70793269c99e71455a9dd13e337df9ce1c93f545620c95844eceaa6c37a0ad593e32ab7de800f50d2eda02607b44b3df423501dffb2c235bbbabdac9777739c5ab567b29dee96ef67b84a294fb569421e2637c401eed8ac17497e16356fe27135e37b0967cacba5a66cb76c147b5363f405278cd185137bcc6007560663aabdac2ad5c61332a2c9ec04bb8be16e4079246bdfd9fbaf88215fc637601632e29599782577a0cf92b338eb838c7989e59958230ba7aa972cbec1b7ae80ed4bfa94641d709baa4402321220ca5c03b93034c222e4124e127f4b75fc01964ae6cf318ac8d0472797a72ee6472bcb97f3aeb4eea3983f578bb871c7c09b5a08af1c22a8543b38ce796a4e67e913e4fb249d4a14e27781f578c0d0a3cc1f22883c6db0a698897f6fbe705ecb8e18299e7f6d8c534180e4ac425d16228baa59cb749859a29bc5c0392ada128394bc73d9f16613c27d9b89f51385d0e11c78078c4dc566e7b9d6644d17af2198fe1841b3dc0724282ae9d4345b03dd3f0584e7c484fd6085d16bce3bdc7bb0436b6d8803bf0bd55d8239b1e1d281c9177cf3f32250077a6e576fdab585f6c1072d3fb9a069b3d9228938b627eea86f306d2bfe8247f5847fb694835bc682b3069959bf76b45a30666b3c46157c49ed4bceb5eb03558b176f5e45fa88c1e18f0a9e3b5863f1fe334d0a158a1dd4ff5a9bcca6988ed3bdaff100df57bb58d315a5821a6a64733612c72adc01d9a88618ee11c22880054ecc5974cdacf3a4efdca05ce23398d00cba3b90be19fe7aef31d7ba367f30d471a308d2a7c14172b87c31bb56c7ed9eac1c31e1b48fa3b6dd7e45fc371f3854433e1a55a43823dc28dae9a730270e2c85166ff30d83a5dcbbbdb29a0752e1c75443acd5cbdf2c8b9b10c1f184d6ee6b81fe12366a001805ff775c658ac534d7a078c2e98262a542a98b9225a1a51b71c88d320d0a8644752883dbe9bd9d929f81f2944edbe7d93f7ad6abea8aa64266096f414f140ed302ce80b74536f1075a965a43ceaf824e3740a910e2415641fe528a458798ac7282b55aaf8738461f582022736d15d3fca789eee81695cc540307b65f079b3037c68745dcda9939b86dc5e1b03a11ef3d861cbe72f064d8a1f32d1a680197830bd7e6b0a6a9d6780385ce73de886047a011ff4cfae47f3ccc155f77716d1a82090d04446759e13344d69e582092d799b1e4adcba69ae1b897ac1c903fb9a67debf5753a8225ad435b284a06db88378e09b15ace617638f7003469648d499627955b1095cb2774f1f7668a1fe3264f2aebe3003400780a688877aecb0c23c7f7522fa70314a672c6fb84d0d35460ce9dc4773630bbf5757e42841f84bb8196f31f2ef6cf8994ed1322f9815db2e4fa7ce661be3d07f229ecc59fd1ea6e96fa9fbb3e1fa921e429a9a4021eb7a5711edb6817f7eccc687f034f719b1d2f261379bb11906e066c7ddb038fc92668eea4711a6dc8a96f34380ede9f02fa0214f9571e189b4ea19995f4baaf0144a21f9b13a2308e796126f7cd57200f8a0256377ad2ae1c88804d6ef32b8f26f3562a81613893a3f7ccee3eca3ea0c04d2889cd7a89a4665821fed2a5f7db264cf4b9a5dd17cdcc53000800a400", @ANYRES32=0x0, @ANYBLOB="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"], 0x16ac}, 0x1, 0x0, 0x0, 0x40}, 0x40) 3m17.658987081s ago: executing program 0 (id=45): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000002480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044146, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) writev(r4, &(0x7f0000003500)=[{&(0x7f00000035c0)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758495616c22692c9888acd74c8141f760b360d963b2ea9defa4e0d04a1b08b1e9bca95a6fef2e1e2e3bcdf3fe633f09f44363b28eec64030d7269c6024f118efe0eaeda4ce2ffd74748748ea9e1f264a4efc5eb41bc90831fc6d70a3bb367f094dd21b1165959e0a48e43d1e01976a1b9b430e28acd780f7ea7bb157a161644979b927f6c7109538395a73f29cfbc4b79f775dc80ac55ec12ebf839793e3a665921c15820a20298addeb88eddabce5fcef43cc3e81dd4aa8a5f84a0f9f996f3705c0e88146b1e19b21aee9d4143adf57e60a482507714ac4d52d2d2160cdf2809ec84ec9d77d208fd5f432ec3b99343b90e4acc82033da76f34a63a14afae361533e1fcfa6af0a79632c6c794fc1ec142eac90249a1a805b5ed73226f01b33f95f41fbdc2e25e8dc53cc7ac7ba242d904c7899c839d4c5d9d919e67aa15d9ae4f4da9b080bc0b124af94583cecfb08dcebbe5fe70f2a73d727e5c1e7c402e82497e1596c92fecce9b0f83c7e99bafd08c953529186c98acd728b4885c70664b516100cc7dccbb3b2cb72889564dbe9e8bb4df5ec61b60215a8b0093a47f45be324de9ce13e2cdb02e70945d0bb9931061f0c559b4137e04f6b7d94795a11242565485ca654ccdec9dabfd5a344652dfc9a74fd89fd578408671e2745062713d7fc50486abe3c226b139058f2f9c1cdf0301bbcc388a4ac6ed2ad38f54fe1e4d88e316c15ac1039281b1a74ed890174d4c80a28ce29b05a223e07ad8c4a378a2b44ce349bc74ae73af2852130f7ad525c3853e2328fa12ff7b8444c1ec39a46b1c47ed2d7918d09a70b3d3ea39c16d17f397bccd069b62e231c5d251373de33602641d4220da1f3fb62f55989fbe379f35aa578949a3cdcc638befddd2e24d898d25ef9508467ac6d8952cb2fb9b7a5a9eb5238fb8e1cfc8bd967d2ad877ccbcad2a8f1c41b5e2b779df09ba8596e3faadf8392b8aa465dd76f58ad01073ba37ed93a1dba30df412834a89b9510c42dbd697470087dd4c3c8458b177705a9aea6b5c26ac5999290bd63fa10c441cbdeb24f5918522f1cfd512b9627ecd59f275f0c469dc6e3b12e8a5a5a9a13b134ddd31b5a6feef3f6b9df2165", 0x339}], 0x1) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r7, 0x29, 0xd2, &(0x7f0000000300)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0xfffffffc]}}, 0x5c) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x101041, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f0000000080)={0x4, r0, 0x80001}) ioctl$DMA_BUF_SET_NAME_A(r9, 0x40046201, &(0x7f0000001dc0)='\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc') ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 3m17.168501388s ago: executing program 0 (id=47): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x2a, 0x6, 0x0, {0x1, 0x3, 0x1, 0x0, ']'}}, 0x2a) (async) sendfile(r1, r0, 0x0, 0x7ffff002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000180)={0xfffffffffffffffa, 0x8005}) (async) openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 3m16.413447329s ago: executing program 32 (id=47): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000040)={0x2a, 0x6, 0x0, {0x1, 0x3, 0x1, 0x0, ']'}}, 0x2a) (async) sendfile(r1, r0, 0x0, 0x7ffff002) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$IOC_PR_REGISTER(r2, 0x401870c8, &(0x7f0000000180)={0xfffffffffffffffa, 0x8005}) (async) openat$cgroup_procs(r2, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) 5.756939277s ago: executing program 2 (id=1028): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) (async) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x204081) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async, rerun: 32) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 5.070346438s ago: executing program 2 (id=1030): syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200497f326eecbe90ed2219c7143be8c81894a81106023a26e3a46310e5c2328d49af760b7532bf9eaeb36def498564dce7ccbe05cafe0a1bce353f3a7aa7ecc5519b791319a48f66b182c3dfbb40a794", 0x7c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000cc0)={'filter\x00', 0x6002, 0x4, 0x3d0, 0xf0, 0x2e8, 0x200, 0x2e8, 0x2e8, 0x2e8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x7, 0x0, 0x0, 0x1}}}, {{@arp={@multicast1, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}}, 0x0, 0x0, 0x0, 0x6171, 0x0, 0xffff, 'veth1_vlan\x00', 'nicvf0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @private, 0x0, 0x1}}}, {{@arp={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xffffff, 0xff, 0x6, 0x5, {@empty, {[0x0, 0xff, 0xff, 0x0, 0x0, 0x1c3ae9812108cb68]}}, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x8, 0x46b, 0x1bd, 0x4, 0xc703, 'team_slave_1\x00', 'sit0\x00', {0xff}, {0xff}, 0x0, 0x1}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x3, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x420) r4 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448", 0xd}, {&(0x7f0000000140)="ebe3a0", 0x3}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r4, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) ptrace(0x4206, r1) ptrace(0x4208, r1) rt_sigqueueinfo(r1, 0x7, &(0x7f0000000100)={0x17, 0x7, 0x42580165}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 4.858400704s ago: executing program 2 (id=1031): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) mmap(&(0x7f00004a4000/0x2000)=nil, 0x2000, 0x3000001, 0x10, r0, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x39c0503d) (async) mlock2(&(0x7f000008e000/0x4000)=nil, 0x4000, 0x1) (async) r4 = syz_usbip_server_init(0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(twofish))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0xb8) (async) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_COPY(r6, 0xc028aa05, &(0x7f0000000000)={&(0x7f00001c4000/0x3000)=nil, &(0x7f0000000000/0xc00000)=nil, 0x3000, 0x0, 0x2}) r8 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) (async) write$usbip_server(r4, &(0x7f0000000000)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x4}, 0xfff, 0x1, 0x37, 0x0, 0xfffffffd, 0x0, "a6"}, 0x31) (async) mmap$dsp(&(0x7f0000afc000/0x3000)=nil, 0x3000, 0x1000008, 0x20010, 0xffffffffffffffff, 0x0) r9 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x4, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x607, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}}, 0x0) (async) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x422}) 2.32030142s ago: executing program 3 (id=1052): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./cgroup/file0\x00', &(0x7f0000000280), 0x3a00000, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_none}, {@access_any}, {@ignoreqv}, {@fscache}, {@ignoreqv}, {@access_user}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/rnullb0\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@func={'func', 0x3d, 'CREDS_CHECK'}}]}}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000240)=@ccm_128={{0x303}, "74b658a7aa0b2d59", "88514e52f36f00", "c7e0a3c2", "ff9019438d66c38c"}, 0x28) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/148, 0xa3}, {&(0x7f0000000140)=""/13, 0x1c}, {&(0x7f0000000440)=""/4089, 0xff9}], 0x3, 0x6365, 0x3ff) 2.316958333s ago: executing program 1 (id=1053): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000020c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) 2.254610973s ago: executing program 3 (id=1054): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 2.185058932s ago: executing program 1 (id=1055): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) (async) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140)) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x8882, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0x7040, 0x0) fstat(r1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(0x0, r3) (async) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) (async, rerun: 32) r5 = fcntl$dupfd(r4, 0x0, r4) (rerun: 32) write$sndseq(r5, &(0x7f0000000480)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0xa, 0x4}}], 0x38) (async) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2, 0xaa9]}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x4, 0x1f91b19e}, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @tick=0x64, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0xfc, 0x0, 0x0, 0xfe, @time, {0xfe}, {}, @connect}], 0xc4) (async) read$snapshot(r5, 0x0, 0xffffffbf) (async) read$FUSE(r5, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 2.070177932s ago: executing program 3 (id=1056): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000280)='./cgroup\x00', r1, &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001000000000000001c000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b400000000038000480140001800d00010073796e70726f787900000000200001800d00010073796e70726f7879000000000c00028006000140000900000900010073797a30"], 0xd4}}, 0x40080) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r4) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death={0x400c630e, 0x0, 0x406}, @clear_death], 0xfc, 0x1000000, 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c235a5267cde61ad75f4e5f35000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000f6dbdf250900000008000300", @ANYRES32=r8, @ANYBLOB], 0x1c}}, 0x64000) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), 0xffffffffffffffff) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000000)=0x0) bind$nfc_llcp(r10, &(0x7f0000001040)={0x27, r12, 0xffffffffffffffff, 0x5, 0x0, 0x8, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000a73f00000200000000001900", 0x3c}, 0x60) sendmsg$NFC_CMD_FW_DOWNLOAD(r4, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r9, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x4000804) accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) clock_gettime(0x0, &(0x7f0000000100)) 2.047009295s ago: executing program 1 (id=1057): fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)={'U+', 0x8000000000000001}, 0x16, 0x2) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="04bf02417b010203010902120001000000000904000000cced1b00"], 0x0) (async) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, 0x0, 0x0) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async) r2 = socket$inet(0x2, 0x801, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r2, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000600)='u', 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000180)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x2c, r4, 0x101, 0x70bd26, 0x80000, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params, @NL80211_ATTR_KEYS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4804) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0xfffffffffffffd68, &(0x7f0000000180)=[{&(0x7f00000001c0)="39000000140081ae10003c000500018311001f9f760fcf066505acb612f691f3bd3508abca1be6eeb89e44ebb37358582bdbb7d553b4e92155d3f9a1f159bfc49a67276d46594026e564eb795e65609c1a57e4", 0xffffffffffffffd8}], 0x20}, 0x48005) (async) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) syz_open_dev$radio(&(0x7f0000000280), 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) (async) r10 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab2d663098aff8ec2b5bb6cd04037287af566036f998d7a6d2662cf7b03e266072dd4a1d3c8128025bdbdb2cd4c9c45d98943886cbd4c0a1fa62fbac93e1a2ea842af421dce41e4ff7c6a0226a5a4dec7b0f3c23bfea970cb2da10e9fc6185d79dbecc041ab9bb563073e70a2e0354b73dac0b4dea80e137242383abf269a7710c8a466d95486a6220ba87a19f360ed655d7ee97399422e9f7422375766b3d33e5da9c5d496756197662d9ef5148fec6c2567cb36a21afb6bf20aea750d7fa60e7bc5bac10cf140fcb99ac65adea155629cb33243bd6bda17698292d33f152b28845b4e3f7b534d41b44927d", 0xec, 0x4080, &(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10) (async) fchmod(r10, 0x110) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8982, &(0x7f0000000100)={0x7, 'vlan0\x00', {0xe}, 0x9}) (async) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_INTERRUPT(r11, 0x4004ae86, 0x0) (async) mount(&(0x7f0000000100)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000002c0)='overlay\x00', 0x2420, 0x0) 1.937027583s ago: executing program 1 (id=1058): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r0, 0xf648a000) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x185, 0x90) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x100000001) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'das16m1\x00', [0x4f27, 0x9f, 0x3, 0x1, 0x5, 0xccc, 0xf, 0x7, 0xa, 0xe8aa, 0x68000000, 0x77b, 0xfffffffe, 0xd8e0, 0x46, 0x7, 0x0, 0x1a44b, 0x3, 0x401c0005, 0x99, 0xcaa7, 0x80000001, 0x6, 0xde, 0x2, 0x1, 0x8, 0x2, 0x0, 0xfffffff8]}) getsockopt$sock_buf(r1, 0x1, 0x37, &(0x7f0000000140), &(0x7f00000001c0)) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000200)=[@timestamp, @sack_perm, @mss={0x2, 0xcd400000}, @mss={0x2, 0x4}, @mss={0x2, 0xb15}, @window={0x3, 0x5, 0x2}, @timestamp, @mss={0x2, 0x9}], 0x8) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40440) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1, "fa02c800"}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x7fff, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x5, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x9, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x800, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x35, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x9, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0xd, 0x1ef, 0x5, 0xe, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x8, 0x1000, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x5, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x8, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7c, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x1, 0xa1f, 0x800, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r3, 0x40045701, &(0x7f0000000140)=0x5) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) preadv(r7, &(0x7f0000000440)=[{&(0x7f0000000080)=""/211, 0xd3}], 0x1, 0x4, 0x7fffffff) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000240)='nv\x00', 0x3) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r1) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000), 0x6) ioctl$sock_bt_hci(r8, 0x400448e7, 0x0) 1.782167755s ago: executing program 2 (id=1059): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000)=0x400, 0x4) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xc3a51000) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'vxcan1\x00', &(0x7f0000000040)=@ethtool_cmd={0x21, 0x1, 0x3, 0x800, 0x9, 0x5, 0x3, 0x75, 0x9, 0x5, 0x86, 0x9, 0x9, 0x43, 0xf, 0x1, [0xa, 0x10001]}}) (async, rerun: 32) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000440)={0x0}) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000080)={0x5, 0x0, 0x14, 0x15, 0x61, 0x0}) 1.632526018s ago: executing program 4 (id=1060): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x1, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$OSF_MSG_REMOVE(r3, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4bc, 0x1, 0x5, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [{{0x254, 0x1, {{0x0, 0x1}, 0xf6, 0xf, 0xb4, 0x6, 0x27, 'syz0\x00', "c5cb0ec328e9a5806daf4126c5b7df464895d685fdb7a12912c13cfc74745c19", "70d85b665fa339618b1a34faf19e4d43a5dccb30e213daed6fa0cdb9d882c647", [{0x1, 0x5d, {0x3, 0x7}}, {0x8001, 0x97d6, {0x2, 0x964f}}, {0x257, 0x9, {0x3, 0x9}}, {0xd, 0x1, {0x0, 0x8}}, {0x4, 0x3, {0x0, 0x5}}, {0x1, 0x8000, {0x3}}, {0x8, 0xb, {0x3, 0x10000}}, {0x5db, 0x8d, {0x1, 0x1}}, {0xe78, 0xb437, {0x0, 0x97e}}, {0x2, 0x4, {0x3, 0x8}}, {0x3, 0xfff, {0x3, 0x6}}, {0x1ff, 0x80, {0x0, 0x200}}, {0x5, 0x5, {0x0, 0x5}}, {0xfff9, 0x4, {0x0, 0xb2d}}, {0x830, 0x6, {0x1, 0x7fff}}, {0xf, 0x2, {0x2, 0x10001}}, {0x1, 0x3, {0x1, 0x7}}, {0xfeff, 0x0, {0x0, 0xe}}, {0x5, 0x7, {0x0, 0x5}}, {0xffff, 0xfaf8, {0x0, 0x400}}, {0x0, 0x2, {0x3, 0x9}}, {0x0, 0xfff6, {0x1, 0x1}}, {0xff, 0x86, {0x1, 0xd3ea}}, {0x3, 0x9, {0x3, 0xfff}}, {0x0, 0xfc01, {0x2, 0x8}}, {0x6, 0x62, {0x3, 0x1}}, {0x4, 0x12fd, {0x1, 0x5}}, {0xbbb, 0x1, {0x0, 0x2}}, {0x4, 0x2, {0x0, 0x3667af3e}}, {0x4, 0x948, {0x1, 0x1000}}, {0x5, 0xa, {0x1, 0x1}}, {0xb549, 0x8, {0x1, 0x3}}, {0x4, 0x15d, {0x1, 0x76}}, {0x4, 0x2, {0x1}}, {0x0, 0x18, {0x3, 0x7}}, {0x2, 0x3, {0x1, 0x6}}, {0x6, 0xfffc, {0x1}}, {0x2, 0x8, {0x0, 0x3}}, {0x0, 0x1, {0x0, 0x19}}, {0x5, 0x7, {0x3, 0x7}}]}}}, {{0x254, 0x1, {{0x3, 0x382}, 0x24, 0x5, 0x6e8, 0xc, 0x22, 'syz1\x00', "39f54ff617c3aef8acd7657965c63d8b5e1ffdd8e709dcbe25cd531f74af7180", "a87495460a38aa6c8182047322050d350e6efe148e932509cbf843eb71e7afcd", [{0x640f, 0x4, {0x1, 0xe}}, {0x9, 0x1, {0x2, 0x7}}, {0x5, 0x8, {0x3, 0x5}}, {0xa5, 0x26, {0x3, 0x1000}}, {0x7, 0xb8, {0x2, 0x9}}, {0x8, 0x5, {0x2, 0x7}}, {0x6, 0x7, {0x2, 0x4}}, {0x4, 0x401, {0x2, 0x800}}, {0x7, 0x2e7a, {0x1, 0x7}}, {0x7, 0x0, {0x3}}, {0xd, 0x0, {0x1, 0x7}}, {0x7, 0x1, {0x2, 0x4c9}}, {0xc, 0x5, {0x2, 0x200}}, {0x4, 0x7fff, {0x1, 0x5}}, {0x0, 0xd5, {0x2, 0x6f}}, {0x3, 0x0, {0x3, 0x8}}, {0x7, 0x9, {0x0, 0x4}}, {0x8000, 0x5, {0x2, 0x3}}, {0x7, 0x1681, {0x0, 0x9}}, {0xffff, 0x1, {0x2, 0x1}}, {0x5, 0xc, {0x2, 0x8}}, {0x100, 0x4, {0x1, 0xb8e3}}, {0x13, 0x8, {0x3, 0x3}}, {0x2a, 0x473, {0x1, 0x2}}, {0xa36c, 0x81, {0x2, 0xc4d8}}, {0x10, 0x1, {0x1, 0x4}}, {0x401, 0x9, {0x2, 0x1}}, {0xe97e, 0xdd, {0x0, 0x3}}, {0xb6bd, 0x3, {0x2, 0x4}}, {0x4, 0x9, {0x3, 0x98}}, {0x81, 0x8001, {0x1, 0x2}}, {0x3, 0x0, {0x0, 0x8}}, {0x4, 0x1, {0x3, 0x1}}, {0x2, 0x1000, {0x3, 0x5}}, {0x0, 0x7f, {0x3}}, {0x2, 0xd9cb, {0x0, 0x401}}, {0x5, 0x9, {0x0, 0x86df}}, {0xffff, 0x6, {0x0, 0x51f}}, {0x5, 0x7, {0x0, 0x6}}, {0x400, 0x101, {0x3, 0x1000}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x880}, 0x40) sendmmsg(r2, &(0x7f0000000440), 0x0, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r1, 0x5708e000) 1.00934207s ago: executing program 3 (id=1061): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000100)={'bond_slave_1\x00', @broadcast}) 1.008911932s ago: executing program 1 (id=1062): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) socket(0x2, 0x80805, 0x0) (async) r1 = socket(0x2, 0x80805, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$xdp(0x2c, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04444d5e3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000010c0), &(0x7f0000001100)=0xe) (async) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000010c0), &(0x7f0000001100)=0xe) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000001040)='team0\x00') 887.53929ms ago: executing program 1 (id=1063): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) ioprio_set$pid(0x1, 0x0, 0x0) (async, rerun: 32) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (rerun: 32) sendfile(r0, r0, 0x0, 0x7ffff000) r1 = socket$inet(0x2, 0x6, 0x7) recvmmsg(r1, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/90, 0x5a}, {&(0x7f0000000180)=""/148, 0x94}, {&(0x7f00000000c0)=""/16, 0x10}, {&(0x7f0000000240)=""/237, 0xed}, {&(0x7f0000000340)=""/245, 0xf5}, {&(0x7f0000000440)=""/153, 0x99}, {&(0x7f0000000100)=""/7, 0x7}, {&(0x7f0000000500)=""/30, 0x1e}, {&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f0000000580)=""/83, 0x53}], 0xa, &(0x7f00000006c0)}, 0x5}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000700)=""/61, 0x3d}], 0x1, &(0x7f0000000780)=""/67, 0x43}, 0x8}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000800)=""/95, 0x5f}, {&(0x7f0000000880)=""/173, 0xad}, {&(0x7f0000000940)=""/213, 0xd5}, {&(0x7f0000000a40)=""/163, 0xa3}], 0x5, &(0x7f0000000b80)=""/155, 0x9b}, 0x40000}, {{&(0x7f0000000c40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000004180)=[{&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000000cc0)=""/218, 0xda}, {&(0x7f0000000dc0)=""/20, 0x14}, {&(0x7f0000000e00)=""/58, 0x3a}, {&(0x7f0000000e40)=""/87, 0x57}, {&(0x7f0000000ec0)=""/17, 0x11}, {&(0x7f0000000f00)=""/252, 0xfc}, {&(0x7f0000001000)=""/217, 0xd9}, {&(0x7f0000003180)=""/4096, 0x1000}], 0x9, &(0x7f0000004240)=""/177, 0xb1}, 0x4}], 0x4, 0x40000000, &(0x7f0000001100)) 880.719455ms ago: executing program 4 (id=1064): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 837.321387ms ago: executing program 3 (id=1065): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/42, 0x0, 0xeeee0004}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000480)) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='net/psched\x00') dup3(r1, r3, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000000c0)={0x1, r3}) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000000)=0x59) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 810.759042ms ago: executing program 2 (id=1066): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x84, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x40, 0x7) ftruncate(r0, 0x40) 628.702143ms ago: executing program 2 (id=1067): r0 = socket$unix(0x1, 0x5, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0xcd) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000080)={&(0x7f0000000040)="103b2254", 0x4}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r2) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)="3376865c5859ee7ad543daa3214826a3c590f5b57d72a5b1444ac482e7c81996ecf79cd49e21fcfb8a57cffeab99fe2d9dc13cd307e33584eff341c5d6844a45121846683e2b7774b716a99a5b980229429085c5c91a7722047602a67a919d205dc3f46087382cd610fd3b07303e1b92d8c698a2591a64006e8830dc055d113175fa0b9b0c60b076efa213f519ba21716ab723fcd77c97d96f810f85e2aa7fd3de86633d1cfea8902e8140154406f3d815044fd472d47416a4c7a7629a19652929142857a1d8e5b69d5ac203f6f26ab4d5da67389d", 0xd5}, 0x1, 0x0, 0x0, 0x200040c5}, 0x8000) ptrace(0x4207, r1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{0x0, 0x5, 0x2a, 0x5}, {0x6, 0xbd, 0x8, 0x8}]}) ppoll(&(0x7f0000000300)=[{r0, 0x8000}, {r3, 0x220}, {r0, 0x8000}], 0x3, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380)={[0x7]}, 0x8) rt_sigprocmask(0x3, &(0x7f00000003c0)={[0x7fffffffffffffff]}, 0x0, 0x8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000480)={0x2, r4}) r5 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$VT_WAITACTIVE(r5, 0x5607) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x9) r6 = syz_usb_connect$cdc_ecm(0x2, 0x86, &(0x7f00000004c0)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x1, 0x1, 0x2, 0x80, 0x40, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x2, 0x6, 0x0, 0xfb, {{0xb, 0x24, 0x6, 0x0, 0x0, "e15f9567cb07"}, {0x5, 0x24, 0x0, 0xcc7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0xc14b, 0x6, 0x2}, [@mdlm_detail={0x8, 0x24, 0x13, 0x9, "8bb6e609"}, @ncm={0x6, 0x24, 0x1a, 0x8, 0x2}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0xf4}, @mdlm_detail={0x17, 0x24, 0x13, 0x6, "0a1b2f2e975d11fd6f61ff3db3e594f4af732b"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x3, 0x9, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x18, 0x4, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfc, 0xa2, 0x10}}}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x300, 0x8b, 0x7, 0x7, 0xff, 0x9}, 0x99, &(0x7f00000005c0)={0x5, 0xf, 0x99, 0x5, [@generic={0x27, 0x10, 0x2, "c24b4d9738050db76bb2eef12592edec56b86c0ee1f1de97d2a87d0da4eb74d352a45515"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x5, 0xf, 0x9}, @generic={0x55, 0x10, 0x3, "5b25dd1ba5a92508bc5ec744ef6795dc5973be3105c991fb7e1c4bd2098e31df2c54c8e55b76ce3766723fd475e0b61fdb2d9122256f4a53ea261934b17b64e0e74544d38a4cd2324ba6b4cfebd077088b9a"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8ff1bdc1654a2eca, 0x20, 0x9, 0x2, 0xe0, 0xff}]}, 0x2, [{0x67, &(0x7f0000000680)=@string={0x67, 0x3, "f986fede4b71ac229895a08d6c9c1e2dc5d37edbca172a821fd26febccb6e42a948b5a34c49c8d9eb1848dd0828dd6dabd00c2514092f5c0481fee4e52d263402cff090b6ca0a22463eac3c605ca52b3f39dc034a5f1f5ccf821afb11afbab577ed2a1534d"}}, {0xdf, &(0x7f0000000700)=@string={0xdf, 0x3, "aa6a32fa2295dc26e6c66abda1bd04fde4e5173fcad0e876a120c2cffebdf190485ef6c05c54c9e347d442557e089b189c8305a013645ff8c686d030691ea53e8acc10db4791b9b8fedc57a6c3f01daf0400df689e0bbb5192e7fe390b3d1bdf6c9d2c4db4953d039f1fb66441b9d8138ea4e9a130d682eaf1f6b768d08affab588f30f115448a11db7c5726e1fe8db175cfc732c3912fda9b96aea6d25d9b97b4483c365c1a1574c88c228c2728236ec1d843bfd4ad7f54e789e13169f9f0a7c2fb4f233a3c9f77d6ba154fb467d924396763ebeb73d98be740813b44"}}]}) syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000940)={0x14, &(0x7f0000000840)={0x40, 0x31, 0xb9, {0xb9, 0x6, "5c92f733ba905d64113f9f7ae34980b6a313bf0c526c061ea132020a968ee7f8e6178e2d7d47bacde1339d311cac93e296ead03cd0acd9b2da5539f26b4c0c62dd041bb09b157279ff454f94877dd186f8c471d4ee24cea9abfeec50870cf39d70210fd3048bd04223f6af366febb370104cf3ba76f064964a8029de0b173bb8760549b9d1f6d99dfa626764a5ccd69632864cd6ee6bc1d200073cc9c0f601692bff21748c67e47cf1831b51cd07981d68de06f2eda20d"}}, &(0x7f0000000900)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x1c, &(0x7f0000000980)={0x20, 0x0, 0x82, "822e4d601a7d5c0e5c9e30ae09b574c8813c7d395f694da8dba47c5f0eddee350e3c01995db8324d1033259ed03cfc5cbeb41200d88ed52cf1470c707b071be5fef580c2e83966cdec93474efc2064cfd8be2238901b69910ecc9f8813fe8bc337979aaafb67c6a6232c997c74e810bb542278cea385dec4126cdb028539230e34ed"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000a80)={0x0, 0x8, 0x1}}) timer_create(0x5, &(0x7f0000000c40)={0x0, 0x28, 0x2, @thr={&(0x7f0000000b00)="4c7c4c513acc4eb58f48db5309f69967f628e9616dd82cf0b055f663338547d8db386a43f8ddc909cb01d5fc091526bfbde5cea4bde2ae67ee33b58cece953caba9887d76d32df9b3ff4f80ffcbc1d219c7acddbc115be24472169bd6f90f85d5e770100eed69e3d16aa200946d05cbf32ed7fd0e19dc835b1bf52", &(0x7f0000000b80)="9f03276f3016d21e32db4fd5ef3ecf037a994edd16b5df134b9de49a6e976ec0eeed8eae978735a7898ddec1b8b83d7700136a494e0ac58df50f02082640df387d58130ac1714cd38afe7461846322c6ffd60f706511b77a0efc51d3e4d7d4fb2f2dad5f0e25c02210ea1fd8e0c54965956fd660cb3fa01542c6cd0243d385b1d952dba4b63a5e3e0533eedd67b4c9f7d6b91c7f7e57e7c8b4469ba7d609d150b167482a"}}, &(0x7f0000000c80)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) map_shadow_stack(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000cc0)) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000d00), 0x103400, 0x0) dup2(r7, r8) syz_usb_connect$cdc_ncm(0x2, 0x7e, &(0x7f0000000d40)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x8, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "e7f6"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x1, 0x3, 0xd5}, {0x6, 0x24, 0x1a, 0x400, 0x3f}, [@country_functional={0xe, 0x24, 0x7, 0x4, 0x1, [0x1, 0x2, 0x8001, 0xe]}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xb3, 0x2d}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0xab, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x3, 0x2, 0x5}}}}}}}]}}, &(0x7f0000000fc0)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x300, 0x3, 0x9, 0x0, 0x8, 0x6}, 0x12, &(0x7f0000000e00)={0x5, 0xf, 0x12, 0x3, [@ptm_cap={0x3}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0xb, 0xc, 0x1}]}, 0x3, [{0x33, &(0x7f0000000e40)=@string={0x33, 0x3, "c712229abdd50fdd578919fdef01fd66de883912c6251563911dc4f813338b1f0a8b05192cb6645f90fe5df320e8588470"}}, {0xf4, &(0x7f0000000e80)=@string={0xf4, 0x3, "0bf28b6f8010f17d6e2d4b089151398595f57130c501a4db7fd93af355a848e157dee511fd133fa8649c6ac288462d4c03c7dd4dc10e7613ca51de862108abab6492cf0aba7ea1227f3eefc50d238bda3f49dd13531d74ab5bc46080c95fbf029cab913c0b02e020b683064ddd0cf4566a7e064064feb977d79de2ca299dbf0c084720a7e764e2f3522189431170c8ef7aa61ff2d21eafd6d7a4c576d6302c3383835cbc5a21efdbd9c3926db9db66eedd735b45bef32731cea783f719f18857f3cb5c9cf1865d731538ae4e4871b149862514aa5e2b290775eb01396fd0dfa701f6ae740fb11c77a1bd6913ec654c7a5a76"}}, {0x4, &(0x7f0000000f80)=@lang_id={0x4, 0x3, 0x1c0a}}]}) r9 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) sendto(r9, &(0x7f0000001000)="727bad479c179a5cf86745704186a093b56fe70c150cece99d574bdc49126509a03e4ed53a6e8fd6cc56bd40bf16f13aded5a51969ca16bc5f0f4de90a15d4b18c455e0a5523d7eda4ef56146b55706b3e8e70f586cf5228f47b6aa24f0497e7d2dd1bf8ce49262be381eb285ab74fd71463551b48f57a5cf7346c5ec90145b3fd2fbc78470a0b6288656d41a4692f881bf6923481a778276223320cd542ffef7d6609ed09635fa8e3bdd6bc994e7e63fe7f5fd7642e528d854771939a74363936f4b5a333c06a3b18fc", 0xca, 0x20000001, &(0x7f0000001140)=@can={0x1d, r10}, 0x80) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x0) ioctl$HIDIOCGREPORT(r8, 0x400c4807, &(0x7f00000011c0)={0x1, 0x100, 0x401}) 457.268951ms ago: executing program 4 (id=1068): r0 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000880)="d7b4d9101516daff6d8b8e8aabb53a52fe880021845a91f6789cb2218bae4fd75b35350d1e2ea824", 0x28}], 0x1}, 0xb00) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101802, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000680)="580000004b80", 0x6}], 0x1) 333.953773ms ago: executing program 4 (id=1069): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='smb3\x00', 0x200002, 0x0) 219.307328ms ago: executing program 4 (id=1070): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000000000)=0xffff, 0x4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r2, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r6 = dup(r5) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r6, 0x3b65, 0x9) setreuid(0x0, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r1, 0x2000) 1.191915ms ago: executing program 4 (id=1071): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f00000005c0)=@in6={0x21, 0x4, 0x2, 0x24, {0xa, 0x4e21, 0x2c1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}, 0x24) sendto(r0, &(0x7f0000000100)="c183be961d41a7b2baf42c1587ec3826df384a90cfdf32a3806fe6ddffdd23fdbf2dd6d455845c7419fcaccd27aa1a4bcd6e2e6ab1473ee30259a148d335634121ed5dfc036d75f4908ea88b57f8069c471b0e3ed961321ec8cdb3b1dddd03435c858aa7f17cc54f1d77dcf6b8cd6cb2c5956b0f82ee9d9ea2daff7530e900563fdd5d2d12da37698c0d33b5732406995a4383f1aaf6396c353e0ae1f50a2fa18b722bb4961048518bddea", 0xab, 0x4004000, &(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfd, 0x200000}, 0x80) 0s ago: executing program 3 (id=1072): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180)=0xdb) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xd) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x24, 0x7, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x522f657a0eb12999}, 0x4006080) (async) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000340)={0xa, 0x2, {0x2, @struct={0x10, 0x1}, 0x0, 0x81, 0xb, 0x7, 0x4, 0x300000000, 0x1, @usage=0xef, 0x8, 0x1, [0xd60, 0x7fff, 0xffffffffffffff80, 0x10, 0x1, 0x4]}, {0x100000000, @usage=0x4, 0x0, 0x1, 0x0, 0x40, 0x8, 0x0, 0x400, @usage=0x9, 0x1, 0x8000, [0x1, 0x10, 0x2, 0xcc1, 0x7, 0x3]}, {0x6, @usage=0x2, 0x0, 0x493d, 0x3, 0x9, 0x7, 0x1, 0x4, @struct={0x4, 0x2}, 0x101, 0x1, [0x9, 0x12, 0x8, 0xd931, 0x0, 0x1]}, {0x7}}) ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000000080)={{r0}, {@val={r2}, @max}}) r3 = syz_clone(0x82a00000, &(0x7f0000000740)="00644ee24ca563776f24b0567f4a458f67aa2d0d575e37d13329346c4c3a736061fb69bf7168d357437b1f", 0x2b, &(0x7f0000000780), &(0x7f00000007c0), &(0x7f0000000800)) sendmsg$nl_generic(r1, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000840)={0x188, 0x34, 0x100, 0x70bd28, 0x25dfdbfe, {0x18}, [@typed={0x8, 0x3a, 0x0, 0x0, @pid=r3}, @generic="ce03ff14d6248229b103d482ae55c88d2357e155a0ea31d5742de7dcf7811231f08c799a37a7d449ae9728c2e5810a20d318a7d1c0fa94d9a389f47c0a5ebcb667810f07818ce929d291a243d9ac5bec78618723875a0a7d16db2055c05f0f1ea0384b0b11f562d5c4cdedfe78ac0fc6cda9d80e0fefee5533363ceb4f1244aabd8b0fa912e8900df73124952e51de91f2ff2f8a0e40ba9dd28c846fe2a2e37d2bdae5b82c01f45684b2c32c062683da6e41c9cde43da91c17790d853ba12bd92edf373a53b779dd29178f6bba88c8289698727fdf581f83c0f8fd77a2e8360fe3", @nested={0x3e, 0x32, 0x0, 0x1, [@typed={0xc, 0x10d, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0xef}, @generic="54cba2cc11cdbf66f26db769b90c35f356175f387df64517557283522f3eb94fc60122dce5b80bd65033"]}, @generic="ab779472c336d141b7e70862c0fa5b08f869232fdf9e83ad76d3a91a7fea1612e19bdcff2469", @generic="dedbc5f6c57c5ca15d2ef26bb8fca6e3205f224c83673ed0fd765a3087153eaa568c7e67ce"]}, 0x188}, 0x1, 0x0, 0x0, 0x44}, 0x20008810) kernel console output (not intermixed with test programs): device number 9 using dummy_hcd [ 196.660499][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 196.669126][ T10] usb 5-1: config 4 has an invalid interface number: 46 but max is 0 [ 196.677321][ T10] usb 5-1: config 4 contains an unexpected descriptor of type 0x1, skipping [ 196.688847][ T10] usb 5-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 196.697610][ T10] usb 5-1: config 4 has no interface number 0 [ 196.704827][ T10] usb 5-1: config 4 interface 46 altsetting 14 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 196.717556][ T10] usb 5-1: config 4 interface 46 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 196.729449][ T10] usb 5-1: config 4 interface 46 altsetting 14 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 196.743845][ T10] usb 5-1: config 4 interface 46 altsetting 14 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 196.754939][ T10] usb 5-1: config 4 interface 46 altsetting 14 has a duplicate endpoint with address 0x9, skipping [ 196.765831][ T10] usb 5-1: config 4 interface 46 altsetting 14 has an endpoint descriptor with address 0x6D, changing to 0xD [ 196.777606][ T10] usb 5-1: config 4 interface 46 altsetting 14 endpoint 0xD has invalid maxpacket 15958, setting to 1024 [ 196.788914][ T10] usb 5-1: config 4 interface 46 altsetting 14 bulk endpoint 0xD has invalid maxpacket 1024 [ 196.799149][ T10] usb 5-1: config 4 interface 46 altsetting 14 has a duplicate endpoint with address 0x2, skipping [ 196.810494][ T10] usb 5-1: config 4 interface 46 altsetting 14 has a duplicate endpoint with address 0x9, skipping [ 196.828933][ T10] usb 5-1: config 4 interface 46 altsetting 14 has an invalid descriptor for endpoint zero, skipping [ 196.849537][ T10] usb 5-1: config 4 interface 46 altsetting 14 has a duplicate endpoint with address 0x1, skipping [ 196.878074][ T10] usb 5-1: config 4 interface 46 altsetting 14 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 196.898028][ T10] usb 5-1: config 4 interface 46 has no altsetting 0 [ 196.912858][ T10] usb 5-1: New USB device found, idVendor=148f, idProduct=760a, bcdDevice=ea.64 [ 196.948123][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.956181][ T10] usb 5-1: Product: 䄚㏋抮뀍ᒹ畆阒周䑾െ왰࠶ᛷ䳣勣먢갻䔼辮麈樐䔅릮痀㈊ధ䧖ꅫ큰㥾쯮䱡奎衱ꄪ辇䕌손唳믏䑄㚮닾鞟슓羴݀籩氽溪ﰤꈑ鑴﮹諱᪖⅚晑㏙ពᜤ䣮챭䆱蕗㐓默诵˻칎卶璘 [ 196.994726][ T7714] /dev/rnullb0: Can't open blockdev [ 197.009848][ T10] usb 5-1: Manufacturer: Ђ [ 197.014512][ T10] usb 5-1: SerialNumber:   [ 197.045878][ T7708] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 197.064412][ T7708] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 197.526742][ T10] usb 5-1: USB disconnect, device number 9 [ 197.980892][ T5853] Bluetooth: hci3: unexpected event for opcode 0x200c [ 198.040325][ T7732] /dev/rnullb0: Can't open blockdev [ 198.866731][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 198.874697][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 198.942150][ T5861] usb 2-1: USB disconnect, device number 20 [ 198.956814][ T7742] netlink: 36 bytes leftover after parsing attributes in process `syz.2.476'. [ 198.984681][ T7743] /dev/rnullb0: Can't open blockdev [ 199.896949][ T7772] /dev/rnullb0: Can't open blockdev [ 200.177506][ T7778] loop2: detected capacity change from 0 to 7 [ 200.190320][ T7778] Dev loop2: unable to read RDB block 7 [ 200.206661][ T7778] loop2: unable to read partition table [ 200.217682][ T7778] loop2: partition table beyond EOD, truncated [ 200.234142][ T7778] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 200.278229][ T1216] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 200.448754][ T1216] usb 2-1: device descriptor read/64, error -71 [ 200.487146][ T7783] IPVS: set_ctl: invalid protocol: 43 100.1.1.2:20001 [ 200.718077][ T1216] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 200.773504][ T7796] /dev/rnullb0: Can't open blockdev [ 200.878116][ T1216] usb 2-1: device descriptor read/64, error -71 [ 200.998802][ T1216] usb usb2-port1: attempt power cycle [ 201.126335][ T7808] /dev/rnullb0: Can't open blockdev [ 201.298962][ T7813] /dev/rnullb0: Can't open blockdev [ 201.720350][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 201.878197][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 201.891480][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 201.903336][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.912967][ T10] usb 3-1: Product: syz [ 201.917366][ T10] usb 3-1: Manufacturer: syz [ 201.925374][ T10] usb 3-1: SerialNumber: syz [ 201.944050][ T10] usb 3-1: config 0 descriptor?? [ 201.971992][ T10] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 202.058103][ T1216] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 202.089255][ T1216] usb 2-1: device descriptor read/8, error -71 [ 202.172525][ T10] gspca_sn9c2028: read1 error -32 [ 202.190654][ T10] gspca_sn9c2028: read1 error -32 [ 202.329653][ T1216] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 202.345787][ T7829] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 202.357159][ T1216] usb 2-1: device descriptor read/8, error -71 [ 202.373577][ T7829] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 202.381664][ T7829] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 202.390132][ T7829] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 202.397278][ T7829] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 202.402662][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.405374][ T7829] comedi comedi3: 8255: I/O port conflict (0x5c952397,4) [ 202.426865][ T7829] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 202.434181][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.465269][ T7816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.474718][ T7816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.488200][ T1216] usb usb2-port1: unable to enumerate USB device [ 202.491479][ T7829] comedi comedi3: 8255: I/O port conflict (0x400,4) [ 202.501400][ T7836] binder: 7828:7836 ioctl 4008f510 200000000340 returned -22 [ 202.511471][ T7836] binder: 7828:7836 ioctl c0306201 200000000240 returned -14 [ 202.522929][ T7829] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 202.556875][ T7838] tipc: Started in network mode [ 202.563230][ T7838] tipc: Node identity 0000002d00000000000000625f953d01, cluster identity 4711 [ 202.588349][ T7838] tipc: Enabling of bearer rejected, failed to enable media [ 202.711266][ T7844] loop2: detected capacity change from 0 to 7 [ 202.721022][ T7844] Dev loop2: unable to read RDB block 7 [ 202.726866][ T7844] loop2: unable to read partition table [ 202.733376][ T7844] loop2: partition table beyond EOD, truncated [ 202.740085][ T7844] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 202.820460][ T7846] /dev/rnullb0: Can't open blockdev [ 202.870386][ T10] usb 3-1: USB disconnect, device number 18 [ 203.072490][ T7850] /dev/rnullb0: Can't open blockdev [ 203.138062][ T1216] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 203.292490][ T1216] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 203.302790][ T1216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.302819][ T1216] usb 5-1: Product: syz [ 203.302835][ T1216] usb 5-1: Manufacturer: syz [ 203.302851][ T1216] usb 5-1: SerialNumber: syz [ 203.315464][ T1216] usb 5-1: config 0 descriptor?? [ 203.351778][ T1216] ch341 5-1:0.0: ch341-uart converter detected [ 203.420123][ T7859] netlink: 'syz.3.514': attribute type 12 has an invalid length. [ 203.466940][ T7861] /dev/rnullb0: Can't open blockdev [ 203.738091][ T9] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 203.878600][ T9] usb 4-1: device descriptor read/64, error -71 [ 204.128510][ T9] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 204.269086][ T9] usb 4-1: device descriptor read/64, error -71 [ 204.282237][ T7848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.297547][ T7848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.382290][ T9] usb usb4-port1: attempt power cycle [ 204.462257][ T1216] usb 5-1: failed to send control message: -71 [ 204.479267][ T1216] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 204.527598][ T1216] usb 5-1: USB disconnect, device number 10 [ 204.549037][ T1216] ch341 5-1:0.0: device disconnected [ 204.553458][ T7877] /dev/rnullb0: Can't open blockdev [ 204.595284][ T7878] netlink: 56 bytes leftover after parsing attributes in process `syz.4.519'. [ 204.620979][ T7880] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.520'. [ 204.716681][ T7882] /dev/rnullb0: Can't open blockdev [ 204.726259][ T7883] /dev/rnullb0: Can't open blockdev [ 204.736890][ T7882] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 204.748528][ T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 204.782008][ T9] usb 4-1: device descriptor read/8, error -71 [ 205.038118][ T9] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 205.087923][ T9] usb 4-1: device descriptor read/8, error -71 [ 205.124791][ T7887] /dev/rnullb0: Can't open blockdev [ 205.208448][ T9] usb usb4-port1: unable to enumerate USB device [ 205.342125][ T7893] /dev/rnullb0: Can't open blockdev [ 205.478897][ T30] audit: type=1400 audit(1753795339.395:433): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=7894 comm="syz.1.526" [ 205.500543][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 205.537927][ T7897] /dev/rnullb0: Can't open blockdev [ 205.551385][ T7899] /dev/rnullb0: Can't open blockdev [ 205.667486][ T7907] /dev/rnullb0: Can't open blockdev [ 205.740743][ T7909] overlay: ./file0 is not a directory [ 205.758210][ T7909] /dev/rnullb0: Can't open blockdev [ 205.918751][ T5972] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 205.991877][ T7917] /dev/rnullb0: Can't open blockdev [ 206.110170][ T5972] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 206.128379][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.150909][ T5972] usb 3-1: config 0 descriptor?? [ 206.351215][ T7928] /dev/rnullb0: Can't open blockdev [ 206.542352][ T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 206.560222][ T5972] ath6kl: Unsupported hardware version: 0x0 [ 206.571440][ T5972] ath6kl: Failed to init ath6kl core: -22 [ 206.590251][ T5972] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 206.698311][ T9] usb 2-1: device descriptor read/64, error -71 [ 206.720892][ T7935] /dev/rnullb0: Can't open blockdev [ 206.726884][ T7936] ocfs2_dlmfs: Unknown parameter '/dev/rnullb0' [ 206.864990][ T7940] /dev/rnullb0: Can't open blockdev [ 206.914620][ T7944] /dev/rnullb0: Can't open blockdev [ 206.948653][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 207.036663][ T7948] /dev/rnullb0: Can't open blockdev [ 207.108743][ T9] usb 2-1: device descriptor read/64, error -71 [ 207.218079][ T5972] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.229002][ T9] usb usb2-port1: attempt power cycle [ 207.358075][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 207.378275][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 207.395176][ T5972] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 207.405999][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.416256][ T5972] usb 5-1: Product: syz [ 207.421581][ T5972] usb 5-1: Manufacturer: syz [ 207.426579][ T5972] usb 5-1: SerialNumber: syz [ 207.434899][ T5972] usb 5-1: config 0 descriptor?? [ 207.508154][ T10] usb 4-1: device descriptor read/64, error -71 [ 207.578080][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 207.598873][ T9] usb 2-1: device descriptor read/8, error -71 [ 207.643898][ T5972] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 207.645870][ T7952] /dev/rnullb0: Can't open blockdev [ 207.778276][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 207.838067][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 207.854775][ T5972] usb write operation failed. (-71) [ 207.866154][ T5972] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.880404][ T9] usb 2-1: device descriptor read/8, error -71 [ 207.892374][ T5972] dvbdev: DVB: registering new adapter (Terratec H7) [ 207.901113][ T5972] usb 5-1: media controller created [ 207.906992][ T5972] usb read operation failed. (-71) [ 207.913817][ T5972] usb write operation failed. (-71) [ 207.920719][ T10] usb 4-1: device descriptor read/64, error -71 [ 207.932542][ T5972] dvb_usb_az6007 5-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 207.950975][ T5972] usb 5-1: USB disconnect, device number 11 [ 207.990517][ T9] usb usb2-port1: unable to enumerate USB device [ 208.036595][ T5861] usb 3-1: USB disconnect, device number 19 [ 208.048829][ T10] usb usb4-port1: attempt power cycle [ 208.398116][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 208.437726][ T10] usb 4-1: device descriptor read/8, error -71 [ 208.690505][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 208.724056][ T10] usb 4-1: device descriptor read/8, error -71 [ 208.839084][ T10] usb usb4-port1: unable to enumerate USB device [ 208.926197][ T7961] /dev/rnullb0: Can't open blockdev [ 209.081549][ T7963] /dev/rnullb0: Can't open blockdev [ 209.573435][ T7973] /dev/sg0: Can't lookup blockdev [ 209.876513][ T7981] comedi comedi3: 8255: I/O port conflict (0x4f27,4) [ 209.938182][ T7981] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 209.979588][ T7981] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 210.009450][ T7981] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 210.057830][ T7981] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 210.082617][ T7981] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 210.121098][ T7981] comedi comedi3: 8255: I/O port conflict (0xffffffff80000009,4) [ 210.172571][ T7981] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 210.216066][ T7981] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 210.256373][ T7993] syz.2.558: attempt to access beyond end of device [ 210.256373][ T7993] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 210.258349][ T7981] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 210.288876][ T7993] FAT-fs (nbd2): unable to read boot sector [ 210.306700][ T7981] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 210.898445][ T5861] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 210.980080][ T8014] /dev/rnullb0: Can't open blockdev [ 210.986120][ T8014] /dev/rnullb0: Can't open blockdev [ 211.029611][ T8014] /dev/rnullb0: Can't open blockdev [ 211.038829][ T8014] /dev/rnullb0: Can't open blockdev [ 211.052824][ T8014] /dev/rnullb0: Can't open blockdev [ 211.059716][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 211.073269][ T8014] /dev/rnullb0: Can't open blockdev [ 211.075866][ T5861] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 211.089469][ T5861] usb 3-1: can't read configurations, error -22 [ 211.092934][ T8014] /dev/rnullb0: Can't open blockdev [ 211.116606][ T8014] /dev/rnullb0: Can't open blockdev [ 211.123896][ T8014] /dev/rnullb0: Can't open blockdev [ 211.132733][ T8014] /dev/rnullb0: Can't open blockdev [ 211.139098][ T8014] /dev/rnullb0: Can't open blockdev [ 211.145155][ T8014] /dev/rnullb0: Can't open blockdev [ 211.160198][ T8014] /dev/rnullb0: Can't open blockdev [ 211.173862][ T8014] /dev/rnullb0: Can't open blockdev [ 211.192900][ T8014] /dev/rnullb0: Can't open blockdev [ 211.220017][ T8014] /dev/rnullb0: Can't open blockdev [ 211.238568][ T5861] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 211.241706][ T8014] /dev/rnullb0: Can't open blockdev [ 211.259040][ T8014] /dev/rnullb0: Can't open blockdev [ 211.265018][ T8014] /dev/rnullb0: Can't open blockdev [ 211.268829][ T8024] /dev/rnullb0: Can't open blockdev [ 211.271849][ T8014] /dev/rnullb0: Can't open blockdev [ 211.282343][ T8014] /dev/rnullb0: Can't open blockdev [ 211.288638][ T8014] /dev/rnullb0: Can't open blockdev [ 211.294867][ T8014] /dev/rnullb0: Can't open blockdev [ 211.301795][ T8014] /dev/rnullb0: Can't open blockdev [ 211.310330][ T8014] /dev/rnullb0: Can't open blockdev [ 211.316436][ T8014] /dev/rnullb0: Can't open blockdev [ 211.323042][ T8014] /dev/rnullb0: Can't open blockdev [ 211.332035][ T8014] /dev/rnullb0: Can't open blockdev [ 211.338438][ T8014] /dev/rnullb0: Can't open blockdev [ 211.344424][ T8014] /dev/rnullb0: Can't open blockdev [ 211.351331][ T8014] /dev/rnullb0: Can't open blockdev [ 211.357367][ T8014] /dev/rnullb0: Can't open blockdev [ 211.399667][ T8014] /dev/rnullb0: Can't open blockdev [ 211.408229][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 211.424668][ T5861] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 211.433239][ T5861] usb 3-1: can't read configurations, error -22 [ 211.449264][ T5861] usb usb3-port1: attempt power cycle [ 211.471430][ T30] audit: type=1400 audit(1753795345.395:434): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=FFFF pid=8022 comm="syz.3.566" [ 211.563291][ T8031] /dev/rnullb0: Can't open blockdev [ 211.819143][ T5861] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 211.860221][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 211.867554][ T5861] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 211.878673][ T5861] usb 3-1: can't read configurations, error -22 [ 212.017445][ T5861] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 212.073926][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 212.083281][ T5861] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 212.104155][ T5861] usb 3-1: can't read configurations, error -22 [ 212.118542][ T5861] usb usb3-port1: unable to enumerate USB device [ 212.558168][ T5861] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 212.697144][ T8056] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 212.698868][ T5861] usb 2-1: device descriptor read/64, error -71 [ 212.712888][ T8056] /dev/rnullb0: Can't open blockdev [ 212.794201][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.4.578'. [ 212.958055][ T5861] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 213.098179][ T5861] usb 2-1: device descriptor read/64, error -71 [ 213.218303][ T5861] usb usb2-port1: attempt power cycle [ 213.553493][ T8082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 213.564522][ T8082] netlink: 12 bytes leftover after parsing attributes in process `syz.3.585'. [ 213.574015][ T5861] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 213.601132][ T5861] usb 2-1: device descriptor read/8, error -71 [ 213.806621][ T8086] /dev/rnullb0: Can't open blockdev [ 213.829547][ T8086] /dev/rnullb0: Can't open blockdev [ 213.845866][ T8086] /dev/rnullb0: Can't open blockdev [ 213.851418][ T5861] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 213.873554][ T8086] /dev/rnullb0: Can't open blockdev [ 213.890057][ T5861] usb 2-1: device descriptor read/8, error -71 [ 213.897372][ T8086] /dev/rnullb0: Can't open blockdev [ 213.916613][ T8086] /dev/rnullb0: Can't open blockdev [ 213.933559][ T8086] /dev/rnullb0: Can't open blockdev [ 213.951174][ T8086] /dev/rnullb0: Can't open blockdev [ 213.964595][ T8086] /dev/rnullb0: Can't open blockdev [ 213.981678][ T8086] /dev/rnullb0: Can't open blockdev [ 214.008632][ T5861] usb usb2-port1: unable to enumerate USB device [ 214.017481][ T8086] /dev/rnullb0: Can't open blockdev [ 214.034019][ T8086] /dev/rnullb0: Can't open blockdev [ 214.073012][ T8086] /dev/rnullb0: Can't open blockdev [ 214.107424][ T8086] /dev/rnullb0: Can't open blockdev [ 214.124721][ T8086] /dev/rnullb0: Can't open blockdev [ 214.149114][ T8086] /dev/rnullb0: Can't open blockdev [ 214.155253][ T8086] /dev/rnullb0: Can't open blockdev [ 214.172738][ T8086] /dev/rnullb0: Can't open blockdev [ 214.182979][ T8086] /dev/rnullb0: Can't open blockdev [ 214.200849][ T8086] /dev/rnullb0: Can't open blockdev [ 214.215189][ T8086] /dev/rnullb0: Can't open blockdev [ 214.236522][ T8086] /dev/rnullb0: Can't open blockdev [ 214.258908][ T8086] /dev/rnullb0: Can't open blockdev [ 214.266912][ T8086] /dev/rnullb0: Can't open blockdev [ 214.295419][ T8086] /dev/rnullb0: Can't open blockdev [ 214.306272][ T8086] /dev/rnullb0: Can't open blockdev [ 214.312380][ T8086] /dev/rnullb0: Can't open blockdev [ 214.318468][ T8086] /dev/rnullb0: Can't open blockdev [ 214.327447][ T8086] /dev/rnullb0: Can't open blockdev [ 214.335051][ T8086] /dev/rnullb0: Can't open blockdev [ 214.359503][ T8086] /dev/rnullb0: Can't open blockdev [ 214.365563][ T8086] /dev/rnullb0: Can't open blockdev [ 214.390108][ T8086] /dev/rnullb0: Can't open blockdev [ 215.152121][ T8110] /dev/rnullb0: Can't open blockdev [ 215.598234][ T5861] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 215.735306][ T8120] overlayfs: missing 'workdir' [ 215.806323][ T5861] usb 3-1: config index 0 descriptor too short (expected 65183, got 72) [ 215.863940][ T5861] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 215.874699][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.890328][ T5861] usb 3-1: Product: syz [ 215.894593][ T5861] usb 3-1: Manufacturer: syz [ 215.901395][ T5861] usb 3-1: SerialNumber: syz [ 215.922197][ T5861] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 215.991639][ T5897] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 216.209289][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.234462][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.256896][ T8112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.283234][ T8112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.308772][ T5937] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 216.418602][ T8133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.427681][ T8133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.441477][ T9] usb 3-1: USB disconnect, device number 24 [ 216.492460][ T5937] usb 5-1: Using ep0 maxpacket: 8 [ 216.508683][ T5937] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.528667][ T5937] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 216.539214][ T5937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.560958][ T5937] usb 5-1: config 0 descriptor?? [ 216.576481][ T5937] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 216.895658][ T8146] /dev/rnullb0: Can't open blockdev [ 217.069152][ T8150] kvm: pic: non byte write [ 217.088214][ T5897] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 217.099806][ T5897] ath9k_htc: Failed to initialize the device [ 217.109664][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 217.184292][ T5937] gspca_vc032x: reg_r err -32 [ 217.190577][ T5937] vc032x 5-1:0.0: probe with driver vc032x failed with error -32 [ 217.237777][ T5972] usb 5-1: USB disconnect, device number 12 [ 217.418683][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 217.579633][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 217.598545][ T9] usb 3-1: config index 0 descriptor too short (expected 241, got 72) [ 217.617062][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.642360][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 217.671650][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 217.699997][ T9] usb 3-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 217.726518][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.757713][ T9] usb 3-1: config 0 descriptor?? [ 217.784018][ T9] mos7840 3-1:0.0: missing endpoints [ 218.266888][ T8178] /dev/rnullb0: Can't open blockdev [ 218.278170][ T9] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 218.441957][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.471519][ T8188] netlink: 16 bytes leftover after parsing attributes in process `syz.3.612'. [ 218.481655][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.504191][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 218.514274][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.536696][ T9] usb 2-1: config 0 descriptor?? [ 218.728110][ T5937] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 218.868104][ T5937] usb 5-1: device descriptor read/64, error -71 [ 218.954073][ T9] pyra 0003:1E7D:2CF6.0009: item fetching failed at offset 3/7 [ 218.962355][ T9] pyra 0003:1E7D:2CF6.0009: parse failed [ 218.968145][ T9] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -22 [ 219.036235][ T9] usb 3-1: USB disconnect, device number 25 [ 219.108119][ T5937] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.166566][ T8165] /dev/rnullb0: Can't open blockdev [ 219.180157][ T5897] usb 2-1: USB disconnect, device number 33 [ 219.238079][ T5937] usb 5-1: device descriptor read/64, error -71 [ 219.350396][ T5937] usb usb5-port1: attempt power cycle [ 219.486312][ T8213] sctp: [Deprecated]: syz.3.618 (pid 8213) Use of int in maxseg socket option. [ 219.486312][ T8213] Use struct sctp_assoc_value instead [ 219.512857][ T8213] bond0: entered promiscuous mode [ 219.518211][ T8213] bond_slave_0: entered promiscuous mode [ 219.524177][ T8213] bond_slave_1: entered promiscuous mode [ 219.698222][ T5937] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 219.712605][ T8213] /dev/rnullb0: Can't open blockdev [ 219.751615][ T5937] usb 5-1: device descriptor read/8, error -71 [ 219.792936][ T8215] /dev/rnullb0: Can't open blockdev [ 219.853969][ T8218] /dev/rnullb0: Can't open blockdev [ 219.963222][ T8224] /dev/rnullb0: Can't open blockdev [ 219.998266][ T5937] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 220.018910][ T5937] usb 5-1: device descriptor read/8, error -71 [ 220.128120][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 220.128335][ T5937] usb usb5-port1: unable to enumerate USB device [ 220.197655][ T8228] input: syz1 as /devices/virtual/input/input13 [ 220.281065][ T9] usb 3-1: config 0 has an invalid interface number: 11 but max is 0 [ 220.296147][ T9] usb 3-1: config 0 has no interface number 0 [ 220.308135][ T9] usb 3-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8 [ 220.328506][ T9] usb 3-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 220.359432][ T9] usb 3-1: config 0 interface 11 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 220.381403][ T9] usb 3-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca [ 220.393959][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.406713][ T9] usb 3-1: Product: syz [ 220.413264][ T9] usb 3-1: Manufacturer: syz [ 220.430607][ T9] usb 3-1: SerialNumber: syz [ 220.443217][ T9] usb 3-1: config 0 descriptor?? [ 220.459215][ T8219] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 220.471546][ T9] usb 3-1: Error in usbnet_get_endpoints (-22) [ 220.755663][ T8240] tc_dump_action: action bad kind [ 220.897868][ T8242] /dev/rnullb0: Can't open blockdev [ 221.089961][ T1000] wlan1: Trigger new scan to find an IBSS to join [ 221.101548][ T8246] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 221.108120][ T8246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 221.117719][ T8246] vhci_hcd vhci_hcd.0: Device attached [ 221.127763][ T8247] usbip_core: unknown command [ 221.133751][ T8247] vhci_hcd: unknown pdu 0 [ 221.141711][ T8247] usbip_core: unknown command [ 221.154821][ T1000] vhci_hcd: stop threads [ 221.159256][ T1000] vhci_hcd: release socket [ 221.163788][ T1000] vhci_hcd: disconnect device [ 221.223893][ T9] usb 3-1: USB disconnect, device number 26 [ 221.363177][ T8250] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 221.378211][ T8251] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 221.385579][ T8251] /dev/rnullb0: Can't open blockdev [ 221.394320][ T8250] /dev/rnullb0: Can't open blockdev [ 221.446323][ T8254] /dev/rnullb0: Can't open blockdev [ 221.476395][ T8256] netlink: 24 bytes leftover after parsing attributes in process `syz.2.634'. [ 221.509380][ T8256] /dev/rnullb0: Can't open blockdev [ 221.587864][ T8260] /dev/rnullb0: Can't open blockdev [ 221.643025][ T8262] kvm: pic: non byte write [ 221.707384][ T8265] loop2: detected capacity change from 0 to 7 [ 221.731800][ T8265] Dev loop2: unable to read RDB block 7 [ 221.737549][ T8265] loop2: unable to read partition table [ 221.748561][ T8265] loop2: partition table beyond EOD, truncated [ 221.755023][ T8265] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 221.785605][ T8269] /dev/rnullb0: Can't open blockdev [ 221.966647][ T8271] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 221.968258][ T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 222.004475][ T8271] overlayfs: failed to set xattr on upper [ 222.010797][ T8271] overlayfs: ...falling back to redirect_dir=nofollow. [ 222.017789][ T8271] overlayfs: ...falling back to index=off. [ 222.025100][ T8271] overlayfs: ...falling back to uuid=null. [ 222.084404][ T8271] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 222.150190][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 222.160180][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.172608][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.185898][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.199841][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.217233][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.230017][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.268131][ T5897] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 222.384629][ T8287] netlink: 256 bytes leftover after parsing attributes in process `syz.1.644'. [ 222.397867][ T8287] binder: 8286:8287 ioctl c0306201 2000000001c0 returned -22 [ 222.479168][ T24] usb 3-1: GET_CAPABILITIES returned 0 [ 222.484764][ T24] usbtmc 3-1:16.0: can't read capabilities [ 222.690429][ T8267] /dev/rnullb0: Can't open blockdev [ 222.703097][ T24] usb 3-1: USB disconnect, device number 27 [ 222.778863][ T8291] ubi10: attaching mtd0 [ 223.013708][ T8304] loop2: detected capacity change from 0 to 7 [ 223.022603][ T8304] Dev loop2: unable to read RDB block 7 [ 223.030509][ T8304] loop2: unable to read partition table [ 223.036486][ T8304] loop2: partition table beyond EOD, truncated [ 223.043123][ T8304] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 223.043323][ T5897] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 223.136766][ T8306] /dev/rnullb0: Can't open blockdev [ 223.146292][ T8308] /dev/rnullb0: Can't open blockdev [ 223.181514][ T5972] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 223.208484][ T5897] usb 2-1: device descriptor read/64, error -71 [ 223.230166][ T8310] evm: overlay not supported [ 223.318564][ T5897] usb usb2-port1: attempt power cycle [ 223.363922][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.374289][ T5972] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 223.385820][ T5972] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 223.395298][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.410203][ T5972] usb 4-1: config 0 descriptor?? [ 223.552925][ T24] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 223.619603][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.638919][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.656486][ T8297] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 223.668723][ T5897] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 223.677866][ T5972] Bluetooth: Can't get state to change to load ram patch err [ 223.677885][ T5972] Bluetooth: Loading patch file failed [ 223.677913][ T5972] ath3k 4-1:0.0: probe with driver ath3k failed with error -71 [ 223.703353][ T5897] usb 2-1: device descriptor read/8, error -71 [ 223.710407][ T5972] usb 4-1: USB disconnect, device number 17 [ 223.720749][ T24] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 223.731677][ T24] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 223.748567][ T24] usb 3-1: config 220 has no interface number 2 [ 223.757603][ T24] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 223.771757][ T24] usb 3-1: config 220 interface 0 has no altsetting 0 [ 223.780330][ T24] usb 3-1: config 220 interface 76 has no altsetting 0 [ 223.787432][ T24] usb 3-1: config 220 interface 1 has no altsetting 0 [ 223.797905][ T24] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 223.804566][ T8318] /dev/rnullb0: Can't open blockdev [ 223.807076][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.825826][ T24] usb 3-1: Product: syz [ 223.830195][ T24] usb 3-1: Manufacturer: syz [ 223.835070][ T24] usb 3-1: SerialNumber: syz [ 223.948165][ T5897] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 223.979189][ T5897] usb 2-1: device descriptor read/8, error -71 [ 224.088328][ T5897] usb usb2-port1: unable to enumerate USB device [ 224.095993][ T24] usb 3-1: selecting invalid altsetting 0 [ 224.109400][ T24] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 224.115901][ T24] usb 3-1: No valid video chain found. [ 224.126800][ T24] usb 3-1: selecting invalid altsetting 0 [ 224.132743][ T24] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 224.148578][ T24] usb 3-1: USB disconnect, device number 28 [ 224.258096][ T5972] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 224.365172][ T8331] /dev/rnullb0: Can't open blockdev [ 224.414203][ T8333] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 224.420834][ T8333] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 224.432094][ T8333] vhci_hcd vhci_hcd.0: Device attached [ 224.432234][ T5972] usb 5-1: Using ep0 maxpacket: 8 [ 224.443921][ T8334] usbip_core: unknown command [ 224.446279][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.450774][ T8334] vhci_hcd: unknown pdu 0 [ 224.458752][ T5972] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.473515][ T8334] usbip_core: unknown command [ 224.474212][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 224.483977][ T1000] vhci_hcd: stop threads [ 224.493463][ T1000] vhci_hcd: release socket [ 224.498222][ T1000] vhci_hcd: disconnect device [ 224.505250][ T5972] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=14.a8 [ 224.514481][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.522659][ T5972] usb 5-1: Product: syz [ 224.526844][ T5972] usb 5-1: Manufacturer: syz [ 224.531526][ T5972] usb 5-1: SerialNumber: syz [ 224.539616][ T5972] usb 5-1: config 0 descriptor?? [ 224.548479][ T5972] redrat3 5-1:0.0: Couldn't find all endpoints [ 224.761312][ T8324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.777142][ T8324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.933889][ T8342] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 224.987401][ T5972] usb 5-1: USB disconnect, device number 17 [ 225.188648][ T1216] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 225.348194][ T1216] usb 3-1: Using ep0 maxpacket: 8 [ 225.358499][ T1216] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 225.368055][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.376079][ T1216] usb 3-1: Product: syz [ 225.380856][ T1216] usb 3-1: Manufacturer: syz [ 225.385590][ T1216] usb 3-1: SerialNumber: syz [ 225.403175][ T1216] usb 3-1: config 0 descriptor?? [ 225.421234][ T1216] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 225.442287][ T1216] usb 3-1: setting power ON [ 225.446864][ T1216] dvb-usb: bulk message failed: -22 (2/0) [ 225.472391][ T1216] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 225.483606][ T1216] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 225.495103][ T8350] /dev/rnullb0: Can't open blockdev [ 225.495193][ T1216] usb 3-1: media controller created [ 225.505337][ T8352] /dev/rnullb0: Can't open blockdev [ 225.531186][ T8353] /dev/rnullb0: Can't open blockdev [ 225.546882][ T1216] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 225.586747][ T1216] usb 3-1: selecting invalid altsetting 6 [ 225.596872][ T1216] usb 3-1: digital interface selection failed (-22) [ 225.617133][ T1216] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 225.648714][ T1216] usb 3-1: setting power OFF [ 225.653766][ T1216] dvb-usb: bulk message failed: -22 (2/0) [ 225.671790][ T1216] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 225.694297][ T1216] (NULL device *): no alternate interface [ 225.781730][ T1216] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 225.798087][ T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 225.851423][ T1216] usb 3-1: USB disconnect, device number 29 [ 225.879852][ T8361] /dev/rnullb0: Can't open blockdev [ 225.976401][ T24] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 225.989958][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.003003][ T24] usb 4-1: Product: syz [ 226.007392][ T24] usb 4-1: Manufacturer: syz [ 226.012725][ T24] usb 4-1: SerialNumber: syz [ 226.022289][ T5972] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 226.028395][ T24] usb 4-1: config 0 descriptor?? [ 226.048209][ T3478] wlan1: Trigger new scan to find an IBSS to join [ 226.090798][ T5853] Bluetooth: hci4: urb ffff8880487e3f00 submission failed (2) [ 226.192302][ T5972] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.204039][ T5972] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.217449][ T5972] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.226640][ T5972] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.263840][ T8353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.663'. [ 226.274917][ T8353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.663'. [ 226.380321][ T24] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 226.443115][ T5972] usb 2-1: usb_control_msg returned -32 [ 226.449087][ T5972] usbtmc 2-1:16.0: can't read capabilities [ 226.538040][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 226.545968][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 226.556334][ T24] usb 5-1: config 8 has an invalid interface number: 59 but max is 0 [ 226.564613][ T24] usb 5-1: config 8 has no interface number 0 [ 226.570783][ T24] usb 5-1: too many endpoints for config 8 interface 59 altsetting 5: 42, using maximum allowed: 30 [ 226.581756][ T24] usb 5-1: config 8 interface 59 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 42 [ 226.594974][ T24] usb 5-1: config 8 interface 59 has no altsetting 0 [ 226.606596][ T24] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 226.615737][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.624002][ T24] usb 5-1: Product: syz [ 226.628282][ T24] usb 5-1: Manufacturer: syz [ 226.632915][ T24] usb 5-1: SerialNumber: syz [ 226.861932][ T24] usb 5-1: USB disconnect, device number 18 [ 226.970041][ T37] wlan1: Creating new IBSS network, BSSID 06:76:fc:42:2b:2f [ 227.152866][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.670'. [ 227.665057][ T8385] /dev/rnullb0: Can't open blockdev [ 228.328175][ T5861] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 228.436010][ T10] usb 4-1: USB disconnect, device number 18 [ 228.498285][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 228.505769][ T5861] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.516740][ T5861] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 228.532777][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 228.544167][ T5861] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.559150][ T5861] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 228.570752][ T5861] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 228.579543][ T5861] usb 5-1: Manufacturer: syz [ 228.593434][ T5861] usb 5-1: config 0 descriptor?? [ 228.658432][ T24] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 228.701377][ T5861] usb 2-1: USB disconnect, device number 38 [ 228.822351][ T24] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 228.835790][ T8402] /dev/rnullb0: Can't open blockdev [ 228.844107][ T24] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 228.858631][ T24] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 228.868699][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.892404][ T8398] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 228.905975][ T24] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.340371][ T24] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 229.508203][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 229.534149][ T24] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 229.543649][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.556614][ T24] usb 2-1: Product: syz [ 229.562505][ T24] usb 2-1: Manufacturer: syz [ 229.567802][ T24] usb 2-1: SerialNumber: syz [ 229.577527][ T24] usb 2-1: config 0 descriptor?? [ 229.749872][ T9] usb 3-1: USB disconnect, device number 30 [ 229.796217][ T24] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 229.982464][ T8413] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 229.990218][ T8413] /dev/rnullb0: Can't open blockdev [ 230.456684][ T8425] /dev/rnullb0: Can't open blockdev [ 231.127829][ T10] usb 5-1: USB disconnect, device number 19 [ 231.310813][ T8453] wg2: entered promiscuous mode [ 231.315818][ T8453] wg2: entered allmulticast mode [ 231.324900][ T8453] /dev/rnullb0: Can't open blockdev [ 231.615588][ T24] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 231.636312][ T24] usb 2-1: USB disconnect, device number 39 [ 232.235018][ T8457] usb usb8: usbfs: process 8457 (syz.1.694) did not claim interface 0 before use [ 232.245123][ T8456] usb usb8: usbfs: process 8456 (syz.1.694) did not claim interface 0 before use [ 232.262209][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.694'. [ 232.666045][ T8461] /dev/rnullb0: Can't open blockdev [ 233.168355][ T8445] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 233.168448][ T5853] Bluetooth: hci2: command 0x0c1a tx timeout [ 234.104963][ T8445] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 234.113407][ T8445] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 234.196078][ T8477] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 234.205552][ T8477] netlink: 'syz.2.698': attribute type 1 has an invalid length. [ 234.231115][ T8477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.234530][ T8478] netlink: 596 bytes leftover after parsing attributes in process `syz.3.699'. [ 234.249538][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 234.262651][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 234.280303][ T8480] /dev/rnullb0: Can't open blockdev [ 234.388184][ T24] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 234.481923][ T8485] /dev/rnullb0: Can't open blockdev [ 234.541235][ T24] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.573760][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 234.600491][ T24] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 511 [ 234.630944][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 234.643094][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.674542][ T24] usb 2-1: Product: 뚜ଢꕷΊ⨧䖤敉푠裯ꧢ䶾许♨笛䂟栦즓늗䶃ᵇᙪ塱嫢篷㬆ƀᶃ此ࡼ付鑶䂛鄖墬峦癡薏틍뎫㰊㜡ᛨ⹾˙琪賑耕섧뉘⻣밞厺╾餅ᖃ둸猌ﴖ⪸넷쁸쫣∻앱밺瞉博뒜ᐂ葽ⳁ㜲踨ꡚ䖓렇輢蛿ꄎ籝᳟쓆쉂憣@炚젯✨ᠻ캇쩼ｼꛯ⦉碿픬嚄죝鄳⛜賜譚⣭➕䔎⻞럸 [ 234.838142][ T24] usb 2-1: Manufacturer: 兦邆朷૗ㅔ凑㈬൹讟茎㢶쁉ﳜ协羍㹍욉뫯痶릵洣辿゜џ४笋壼꼄Ꮈ㤸뜇ぽ噾ꆖ푘젃阃䓤텵编ⵃ芯躒숬ᖍ累̱ᐍ횢ᦨ媿孆퐡〫焔䯺빔䵽㼎萰훦恓缀㭗䆡㩨筬஻쵐趖［㪼뙜 [ 234.915551][ T24] usb 2-1: SerialNumber: 侲함摅鰜멤䇍娿輁绒禿ᕥ踯扗셂맼慖栎듇╞녂뉝䉛‛൪裲릞笿蟤锼謰昮ロ၈᭽﹐㗈⚛ⲟ漞䲃秊鑩䦫伦洬䈕欽ꊑ䡈ᐉꂗ闒ꗖｖ릓胉Ћ쟊㒼㈝笲魉ꨢ봨ቡ먢惻鰷괤虍Ᵽ㧬ವ [ 235.179412][ T24] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 235.202500][ T24] cdc_ncm 2-1:1.0: bind() failure [ 235.232470][ T24] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 235.253286][ T24] cdc_ncm 2-1:1.1: bind() failure [ 235.259290][ T5853] Bluetooth: hci3: command 0x0c1a tx timeout [ 235.382947][ T8474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.435190][ T8474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 235.501667][ T8513] i2c i2c-0: Invalid block write size 254 [ 235.532625][ T8513] /dev/sg0: Can't lookup blockdev [ 236.138582][ T5853] Bluetooth: hci1: command 0x0c1a tx timeout [ 236.338967][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 236.478181][ T24] usb 4-1: device descriptor read/64, error -71 [ 236.730136][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 236.850510][ T8536] input: syz1 as /devices/virtual/input/input14 [ 236.898305][ T24] usb 4-1: device descriptor read/64, error -71 [ 237.010156][ T24] usb usb4-port1: attempt power cycle [ 237.204703][ T5972] usb 2-1: USB disconnect, device number 40 [ 237.301550][ T8542] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 237.349748][ T8542] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 237.358400][ T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 237.369385][ T8542] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 237.400502][ T24] usb 4-1: device descriptor read/8, error -71 [ 237.454634][ T8542] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 237.624311][ T8548] /dev/rnullb0: Can't open blockdev [ 237.638375][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 237.659615][ T24] usb 4-1: device descriptor read/8, error -71 [ 237.779952][ T24] usb usb4-port1: unable to enumerate USB device [ 237.870454][ T8558] /dev/rnullb0: Can't open blockdev [ 237.938345][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 238.016113][ T8564] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 238.058131][ T24] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 238.103591][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 238.115037][ T10] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 238.125440][ T10] usb 3-1: Product: syz [ 238.130217][ T10] usb 3-1: SerialNumber: syz [ 238.143561][ T10] usb 3-1: config 0 descriptor?? [ 238.169781][ T8566] /dev/rnullb0: Can't open blockdev [ 238.218858][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 238.226538][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.247166][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.273760][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.286742][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.298156][ T24] usb 5-1: Product: syz [ 238.302378][ T24] usb 5-1: Manufacturer: syz [ 238.317328][ T24] usb 5-1: SerialNumber: syz [ 238.360439][ T8552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.408899][ T8552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.542056][ T8555] syz.4.720: attempt to access beyond end of device [ 238.542056][ T8555] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 238.595495][ T10] usb 3-1: USB disconnect, device number 31 [ 238.848642][ T24] usb 5-1: 0:2 : does not exist [ 238.860080][ T24] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 238.887665][ T24] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 238.900920][ T24] usb 5-1: 5:0: cannot get min/max values for control 4 (id 5) [ 238.913956][ T24] usb 5-1: 5:0: cannot get min/max values for control 8 (id 5) [ 238.954403][ T24] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 238.969335][ T24] usb 5-1: USB disconnect, device number 20 [ 239.258786][ T8572] kvm: emulating exchange as write [ 239.270018][ T8572] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.726'. [ 239.271137][ T5853] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 239.628648][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 239.788993][ T10] usb 3-1: device descriptor read/64, error -71 [ 240.058537][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 240.188368][ T10] usb 3-1: device descriptor read/64, error -71 [ 240.298731][ T10] usb usb3-port1: attempt power cycle [ 240.319968][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.732'. [ 240.330153][ T8592] netlink: 16 bytes leftover after parsing attributes in process `syz.4.732'. [ 240.342477][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.732'. [ 240.370664][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.4.732'. [ 240.437055][ T8592] /dev/rnullb0: Can't open blockdev [ 240.625921][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.668680][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 240.677632][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.695941][ T10] usb 3-1: device descriptor read/8, error -71 [ 240.741434][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.768794][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.798823][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.819904][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.848280][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 240.872384][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.926270][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.942553][ T8606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.957099][ T8606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.965766][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 241.001317][ T10] usb 3-1: device descriptor read/8, error -71 [ 241.083029][ T9] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 241.102686][ T9] usb 4-1: config 0 has no interface number 0 [ 241.113563][ T9] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 241.128503][ T10] usb usb3-port1: unable to enumerate USB device [ 241.138013][ T9] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 241.170744][ T9] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 241.189471][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.208967][ T9] usb 4-1: Product: syz [ 241.217635][ T9] usb 4-1: Manufacturer: syz [ 241.228020][ T9] usb 4-1: SerialNumber: syz [ 241.243571][ T9] usb 4-1: config 0 descriptor?? [ 241.265205][ T8607] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 241.278712][ T9] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 241.309699][ T9] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 241.503059][ T8607] ./cgroup: Can't lookup blockdev [ 241.524691][ T8632] netlink: 'syz.4.743': attribute type 1 has an invalid length. [ 241.706042][ T9] usb 4-1: USB disconnect, device number 23 [ 241.726623][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 241.750278][ T9] cyberjack 4-1:0.69: device disconnected [ 241.854048][ T8634] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 241.874681][ T5853] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 241.941280][ T5853] Bluetooth: hci1: unexpected event for opcode 0x2010 [ 241.983716][ T8639] netlink: 52 bytes leftover after parsing attributes in process `syz.4.745'. [ 242.494867][ T30] audit: type=1804 audit(1753795376.415:435): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.750" name="/newroot/176/bus/file0" dev="overlay" ino=951 res=1 errno=0 [ 242.758181][ T24] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 242.912733][ T24] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 242.922711][ T24] usb 2-1: config 0 has no interface number 0 [ 242.931980][ T24] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 242.942738][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.952753][ T24] usb 2-1: Product: syz [ 242.956971][ T24] usb 2-1: Manufacturer: syz [ 242.962090][ T24] usb 2-1: SerialNumber: syz [ 242.971563][ T24] usb 2-1: config 0 descriptor?? [ 242.994791][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 243.041951][ T8663] overlayfs: missing 'lowerdir' [ 243.114051][ T8665] /dev/rnullb0: Can't open blockdev [ 243.168210][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 243.193009][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.214240][ T9] usb 3-1: config 4 has an invalid interface number: 75 but max is 0 [ 243.225919][ T9] usb 3-1: config 4 has no interface number 0 [ 243.235307][ T9] usb 3-1: config 4 interface 75 has no altsetting 0 [ 243.245213][ T9] usb 3-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=31.1c [ 243.255535][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.265345][ T9] usb 3-1: Product: syz [ 243.274905][ T9] usb 3-1: Manufacturer: syz [ 243.282003][ T9] usb 3-1: SerialNumber: syz [ 243.399347][ T24] usb 2-1: Firmware: major: 225, minor: 107, hardware type: RZUSB (3) [ 243.502200][ T8656] /dev/rnullb0: Can't open blockdev [ 243.514256][ T8656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.539990][ T8656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.636227][ T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 243.668631][ T24] usb 2-1: failed to fetch extended address, random address set [ 243.676592][ T9] gspca_m5602: Failed to find a sensor [ 243.676610][ T9] ALi m5602 3-1:4.75: ALi m5602 webcam failed [ 243.693922][ T9] usb 3-1: USB disconnect, device number 36 [ 243.806734][ T24] usb 2-1: USB disconnect, device number 41 [ 244.020655][ T8683] /dev/rnullb0: Can't open blockdev [ 244.096427][ T8686] /dev/rnullb0: Can't open blockdev [ 244.107632][ T8687] /dev/rnullb0: Can't open blockdev [ 244.136152][ T8689] /dev/rnullb0: Can't open blockdev [ 244.264127][ T8692] /dev/rnullb0: Can't open blockdev [ 244.312602][ T1216] IPVS: starting estimator thread 0... [ 244.390067][ T8698] /dev/rnullb0: Can't open blockdev [ 244.430097][ T8696] IPVS: using max 31 ests per chain, 74400 per kthread [ 244.574554][ T8711] /dev/rnullb0: Can't open blockdev [ 244.629042][ T8714] /dev/rnullb0: Can't open blockdev [ 244.805681][ T8724] /dev/rnullb0: Can't open blockdev [ 244.959729][ T1216] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 244.983626][ T8736] 9pnet_virtio: no channels available for device 127.0.0.1 [ 245.148209][ T1216] usb 5-1: Using ep0 maxpacket: 8 [ 245.155023][ T8743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 245.157702][ T1216] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 245.178520][ T1216] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.193275][ T1216] usb 5-1: Product: syz [ 245.197569][ T1216] usb 5-1: Manufacturer: syz [ 245.202387][ T1216] usb 5-1: SerialNumber: syz [ 245.208201][ T10] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 245.217374][ T1216] usb 5-1: config 0 descriptor?? [ 245.235420][ T1216] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 245.358041][ T10] usb 3-1: device descriptor read/64, error -71 [ 245.418088][ T5861] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 245.568222][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 245.575196][ T5861] usb 2-1: config 0 has an invalid interface number: 111 but max is 0 [ 245.584435][ T5861] usb 2-1: config 0 has no interface number 0 [ 245.593045][ T5861] usb 2-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 245.599577][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 245.602697][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.618216][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 245.618261][ T5861] usb 2-1: Product: syz [ 245.630852][ T5861] usb 2-1: Manufacturer: syz [ 245.635534][ T5861] usb 2-1: SerialNumber: syz [ 245.643599][ T5861] usb 2-1: config 0 descriptor?? [ 245.738248][ T10] usb 3-1: device descriptor read/64, error -71 [ 245.748165][ T9] usb 4-1: device descriptor read/64, error -71 [ 245.808078][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 245.848594][ T10] usb usb3-port1: attempt power cycle [ 245.880238][ T8745] /dev/rnullb0: Can't open blockdev [ 245.965130][ T5897] usb 2-1: USB disconnect, device number 42 [ 245.988261][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 246.158059][ T9] usb 4-1: device descriptor read/64, error -71 [ 246.198215][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 246.218818][ T10] usb 3-1: device descriptor read/8, error -71 [ 246.280228][ T9] usb usb4-port1: attempt power cycle [ 246.488131][ T10] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 246.529615][ T10] usb 3-1: device descriptor read/8, error -71 [ 246.590568][ T8774] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 246.597132][ T8774] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 246.611058][ T8774] vhci_hcd vhci_hcd.0: Device attached [ 246.622119][ T8774] overlayfs: conflicting options: userxattr,redirect_dir=on [ 246.636671][ T8775] usbip_core: unknown command [ 246.643994][ T8775] vhci_hcd: unknown pdu 2147483648 [ 246.651293][ T10] usb usb3-port1: unable to enumerate USB device [ 246.652434][ T8775] usbip_core: unknown command [ 246.662691][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 246.671125][ T7151] vhci_hcd: stop threads [ 246.676119][ T7151] vhci_hcd: release socket [ 246.683364][ T7151] vhci_hcd: disconnect device [ 246.698830][ T9] usb 4-1: device descriptor read/8, error -71 [ 246.938244][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 246.968745][ T9] usb 4-1: device descriptor read/8, error -71 [ 247.078942][ T9] usb usb4-port1: unable to enumerate USB device [ 247.306229][ T9] usb 5-1: USB disconnect, device number 21 [ 247.995085][ T8791] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 248.005834][ T8791] /dev/rnullb0: Can't open blockdev [ 248.588213][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.793'. [ 248.600102][ T8815] netlink: 16 bytes leftover after parsing attributes in process `syz.4.793'. [ 248.668090][ T1216] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 248.695951][ T8819] /dev/rnullb0: Can't open blockdev [ 248.808403][ T8822] /dev/rnullb0: Can't open blockdev [ 248.820709][ T1216] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 248.831060][ T1216] usb 3-1: config 0 interface 0 has no altsetting 0 [ 248.840556][ T1216] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.849805][ T5861] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 248.858388][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.866621][ T1216] usb 3-1: Product: syz [ 248.872203][ T1216] usb 3-1: Manufacturer: syz [ 248.877402][ T1216] usb 3-1: SerialNumber: syz [ 248.889749][ T1216] usb 3-1: config 0 descriptor?? [ 248.904472][ T1216] usb 3-1: selecting invalid altsetting 0 [ 248.998072][ T5861] usb 5-1: device descriptor read/64, error -71 [ 249.158787][ T9] usb 3-1: USB disconnect, device number 41 [ 249.268505][ T5861] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 249.422163][ T8838] netlink: 4 bytes leftover after parsing attributes in process `syz.2.798'. [ 249.431374][ T5861] usb 5-1: device descriptor read/64, error -71 [ 249.552194][ T5861] usb usb5-port1: attempt power cycle [ 249.806682][ T8847] /dev/rnullb0: Can't open blockdev [ 249.908043][ T5861] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 249.940534][ T5861] usb 5-1: device descriptor read/8, error -71 [ 250.198208][ T5861] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 250.218811][ T5861] usb 5-1: device descriptor read/8, error -71 [ 250.282404][ T8861] /dev/rnullb0: Can't open blockdev [ 250.348542][ T5861] usb usb5-port1: unable to enumerate USB device [ 250.438092][ T1216] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 250.639311][ T1216] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 250.672110][ T1216] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.698506][ T1216] usb 3-1: Product: syz [ 250.703448][ T1216] usb 3-1: Manufacturer: syz [ 250.728049][ T1216] usb 3-1: SerialNumber: syz [ 250.749178][ T1216] usb 3-1: config 0 descriptor?? [ 250.797523][ T1216] ch341 3-1:0.0: ch341-uart converter detected [ 251.402346][ T5861] usb 2-1: new full-speed USB device number 43 using dummy_hcd [ 251.580232][ T5861] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 251.597898][ T5861] usb 2-1: config 8 has no interface number 0 [ 251.610681][ T5861] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 251.641015][ T5861] usb 2-1: config 8 interface 177 has no altsetting 0 [ 251.672856][ T5861] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 251.700202][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.732769][ T8869] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 251.888283][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 252.050971][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 252.058486][ T1216] usb 3-1: failed to send control message: -110 [ 252.059856][ T10] usb 4-1: config 5 has an invalid interface number: 168 but max is 0 [ 252.072168][ T1216] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 252.074222][ T10] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 252.105060][ T10] usb 4-1: config 5 has no interface number 0 [ 252.113687][ T10] usb 4-1: config 5 interface 168 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 252.136264][ T10] usb 4-1: config 5 interface 168 altsetting 7 endpoint 0x8B has invalid wMaxPacketSize 0 [ 252.153251][ T10] usb 4-1: config 5 interface 168 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.153973][ C1] ir_toy 2-1:8.177: out urb status: -71 [ 252.166953][ T10] usb 4-1: config 5 interface 168 has no altsetting 0 [ 252.188407][ T10] usb 4-1: New USB device found, idVendor=04cc, idProduct=2533, bcdDevice=fc.58 [ 252.197706][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.207983][ T10] usb 4-1: Product: syz [ 252.213528][ T10] usb 4-1: Manufacturer: syz [ 252.218351][ T10] usb 4-1: SerialNumber: syz [ 252.343861][ T8892] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 252.351624][ T8892] /dev/rnullb0: Can't open blockdev [ 252.443794][ T10] pn533_usb 4-1:5.168: NFC: Could not find bulk-in or bulk-out endpoint [ 252.466074][ T10] usb 4-1: USB disconnect, device number 28 [ 252.590072][ T8895] /dev/rnullb0: Can't open blockdev [ 252.596693][ T8894] delete_channel: no stack [ 252.704515][ T5861] ir_toy 2-1:8.177: could not write reset command: -110 [ 252.718586][ T5861] ir_toy 2-1:8.177: probe with driver ir_toy failed with error -110 [ 253.010153][ T5861] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 253.082118][ T5972] usb 3-1: USB disconnect, device number 42 [ 253.096820][ T5972] ch341 3-1:0.0: device disconnected [ 253.148542][ T5861] usb 5-1: device descriptor read/64, error -71 [ 253.260343][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 253.418489][ T10] usb 4-1: device descriptor read/64, error -71 [ 253.568310][ T5861] usb 5-1: new low-speed USB device number 27 using dummy_hcd [ 253.678122][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 253.718329][ T5861] usb 5-1: device descriptor read/64, error -71 [ 253.828344][ T10] usb 4-1: device descriptor read/64, error -71 [ 253.856795][ T5861] usb usb5-port1: attempt power cycle [ 253.952480][ T10] usb usb4-port1: attempt power cycle [ 254.172664][ T9] usb 2-1: USB disconnect, device number 43 [ 254.228062][ T5861] usb 5-1: new low-speed USB device number 28 using dummy_hcd [ 254.271400][ T5861] usb 5-1: device descriptor read/8, error -71 [ 254.308096][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 254.323818][ T8904] syz.2.816 (8904): drop_caches: 2 [ 254.340037][ T10] usb 4-1: device descriptor read/8, error -71 [ 254.518195][ T5861] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 254.541105][ T5861] usb 5-1: device descriptor read/8, error -71 [ 254.548040][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 254.578070][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 254.599239][ T10] usb 4-1: device descriptor read/8, error -71 [ 254.678085][ T5861] usb usb5-port1: unable to enumerate USB device [ 254.698062][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 254.713076][ T10] usb usb4-port1: unable to enumerate USB device [ 254.731193][ T9] usb 2-1: config 0 has an invalid interface number: 202 but max is 0 [ 254.740846][ T9] usb 2-1: config 0 has no interface number 0 [ 254.759524][ T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 254.775620][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.784258][ T9] usb 2-1: Product: syz [ 254.791679][ T9] usb 2-1: Manufacturer: syz [ 254.796625][ T9] usb 2-1: SerialNumber: syz [ 254.805530][ T9] usb 2-1: config 0 descriptor?? [ 254.822823][ T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 255.021883][ T8921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.033989][ T8921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.085142][ T8907] Bluetooth: MGMT ver 1.23 [ 255.116905][ T9] usb 2-1: USB disconnect, device number 44 [ 255.117216][ T13] usb 2-1: Failed to submit usb control message: -71 [ 255.138264][ T13] usb 2-1: unable to send the bmi data to the device: -71 [ 255.145439][ T13] usb 2-1: unable to get target info from device [ 255.152123][ T13] usb 2-1: could not get target info (-71) [ 255.161752][ T13] usb 2-1: could not probe fw (-71) [ 255.565959][ T8924] /dev/rnullb0: Can't open blockdev [ 255.611404][ T8927] /dev/rnullb0: Can't open blockdev [ 255.623316][ T8927] vcan0: entered allmulticast mode [ 255.705542][ T8930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.822'. [ 255.718589][ T8931] netlink: 16 bytes leftover after parsing attributes in process `syz.1.823'. [ 255.874301][ T8933] ieee802154 phy0 wpan0: encryption failed: -126 [ 255.892626][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.901253][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.208085][ T5861] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 256.333275][ T8954] netlink: 16 bytes leftover after parsing attributes in process `syz.1.832'. [ 256.350629][ T8954] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 256.357723][ T8954] /dev/rnullb0: Can't open blockdev [ 256.365912][ T8955] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 256.370435][ T5861] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.373521][ T8955] /dev/rnullb0: Can't open blockdev [ 256.391034][ T5861] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 256.410589][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.434459][ T5861] usb 3-1: config 0 descriptor?? [ 256.450671][ T5861] pwc: Askey VC010 type 2 USB webcam detected. [ 257.001076][ T8966] syzkaller1: entered promiscuous mode [ 257.006802][ T8966] syzkaller1: entered allmulticast mode [ 257.052903][ T1117] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 257.203259][ T8968] futex_wake_op: syz.3.837 tries to shift op by -1; fix this program [ 257.543182][ T8975] /dev/rnullb0: Can't open blockdev [ 257.978169][ T1216] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 258.034942][ T8983] netlink: 'syz.1.842': attribute type 1 has an invalid length. [ 258.045538][ T8983] netlink: 224 bytes leftover after parsing attributes in process `syz.1.842'. [ 258.074074][ T8989] syz.3.844: attempt to access beyond end of device [ 258.074074][ T8989] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 258.089290][ T8989] EXT4-fs (nbd3): unable to read superblock [ 258.140080][ T1216] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.149155][ T1216] usb 5-1: config 0 has no interface number 0 [ 258.155345][ T1216] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 258.171324][ T1216] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.203429][ T1216] usb 5-1: config 0 descriptor?? [ 258.215934][ T1216] usb 5-1: selecting invalid altsetting 1 [ 258.225959][ T1216] dvb_ttusb_budget: ttusb_init_controller: error [ 258.233711][ T1216] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 258.309649][ T1216] DVB: Unable to find symbol cx22700_attach() [ 258.358059][ T5897] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 258.366109][ T1216] DVB: Unable to find symbol tda10046_attach() [ 258.373339][ T1216] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 258.508165][ T5897] usb 4-1: device descriptor read/64, error -71 [ 258.748256][ T5897] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 258.908110][ T5897] usb 4-1: device descriptor read/64, error -71 [ 258.925410][ T5861] pwc: recv_control_msg error -71 req 02 val 2c00 [ 258.932754][ T5861] pwc: recv_control_msg error -71 req 04 val 1000 [ 258.945207][ T5861] pwc: recv_control_msg error -71 req 04 val 1300 [ 258.976046][ T5861] pwc: recv_control_msg error -71 req 04 val 1400 [ 259.010344][ T5861] pwc: recv_control_msg error -71 req 02 val 2000 [ 259.020637][ T5897] usb usb4-port1: attempt power cycle [ 259.027232][ T5861] pwc: recv_control_msg error -71 req 02 val 2100 [ 259.042404][ T5861] pwc: recv_control_msg error -71 req 04 val 1500 [ 259.049477][ T5861] pwc: recv_control_msg error -71 req 02 val 2500 [ 259.057275][ T5861] pwc: recv_control_msg error -71 req 02 val 2400 [ 259.069789][ T5861] pwc: recv_control_msg error -71 req 02 val 2600 [ 259.077339][ T5861] pwc: recv_control_msg error -71 req 02 val 2900 [ 259.087457][ T5861] pwc: recv_control_msg error -71 req 02 val 2800 [ 259.095063][ T5861] pwc: recv_control_msg error -71 req 04 val 1100 [ 259.108517][ T9002] loop2: detected capacity change from 0 to 7 [ 259.112944][ T5861] pwc: recv_control_msg error -71 req 04 val 1200 [ 259.144990][ T6210] Dev loop2: unable to read RDB block 7 [ 259.150855][ T5861] pwc: Registered as video103. [ 259.162042][ T6210] loop2: unable to read partition table [ 259.184173][ T5861] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 259.198940][ T6210] loop2: partition table beyond EOD, truncated [ 259.215777][ T5861] usb 3-1: USB disconnect, device number 43 [ 259.242997][ T9002] Dev loop2: unable to read RDB block 7 [ 259.259563][ T9002] loop2: unable to read partition table [ 259.272215][ T9002] loop2: partition table beyond EOD, truncated [ 259.301144][ T9002] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 259.383964][ T5897] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 259.444053][ T5897] usb 4-1: device descriptor read/8, error -71 [ 259.699291][ T5897] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 259.731820][ T5897] usb 4-1: device descriptor read/8, error -71 [ 259.850329][ T5897] usb usb4-port1: unable to enumerate USB device [ 260.015135][ T9012] /dev/rnullb0: Can't open blockdev [ 260.401563][ T5972] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 260.469383][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 260.560065][ T5972] usb 3-1: Using ep0 maxpacket: 16 [ 260.571909][ T5972] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 260.582111][ T5972] usb 3-1: config 0 has no interface number 0 [ 260.596592][ T5972] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.621244][ T5972] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.641475][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 260.651636][ T5972] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 260.683433][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 260.712060][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.729411][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 260.749015][ T5972] usb 3-1: config 0 descriptor?? [ 260.763457][ T1216] usb 5-1: USB disconnect, device number 30 [ 260.765865][ T10] usb 2-1: can't read configurations, error -61 [ 260.914009][ T9020] /dev/rnullb0: Can't open blockdev [ 260.921131][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 261.108370][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 261.126436][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.147393][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 261.173988][ T10] usb 2-1: can't read configurations, error -61 [ 261.188876][ T10] usb usb2-port1: attempt power cycle [ 261.370897][ T5972] uclogic 0003:28BD:0071.000A: pen parameters not found [ 261.408367][ T5972] uclogic 0003:28BD:0071.000A: interface is invalid, ignoring [ 261.454817][ T5972] usb 3-1: USB disconnect, device number 44 [ 261.484391][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 261.561652][ T10] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 261.593210][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 261.657247][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.675227][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 261.707310][ T10] usb 2-1: can't read configurations, error -61 [ 261.860062][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 261.870870][ T5972] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 261.915734][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 261.936468][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 261.961202][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 261.979739][ T10] usb 2-1: can't read configurations, error -61 [ 261.995288][ T10] usb usb2-port1: unable to enumerate USB device [ 262.040226][ T5972] usb 3-1: Using ep0 maxpacket: 8 [ 262.058492][ T5972] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 262.080232][ T5972] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 262.110630][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.137497][ T5972] usb 3-1: config 0 descriptor?? [ 262.374509][ T5972] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 262.400264][ T9044] overlayfs: missing 'lowerdir' [ 262.568067][ T5861] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 262.718051][ T5972] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 262.750433][ T5861] usb 5-1: Using ep0 maxpacket: 16 [ 262.762385][ T5861] usb 5-1: config 5 has an invalid interface number: 178 but max is 3 [ 262.773905][ T5861] usb 5-1: config 5 has an invalid interface number: 178 but max is 3 [ 262.785947][ T5861] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 262.795975][ T5861] usb 5-1: config 5 has an invalid interface number: 174 but max is 3 [ 262.806748][ T5861] usb 5-1: config 5 has an invalid interface number: 88 but max is 3 [ 262.817317][ T5861] usb 5-1: config 5 has an invalid interface number: 206 but max is 3 [ 262.827604][ T5861] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 262.837677][ T5861] usb 5-1: config 5 has no interface number 0 [ 262.845747][ T5861] usb 5-1: config 5 has no interface number 1 [ 262.853175][ T5861] usb 5-1: config 5 has no interface number 2 [ 262.862798][ T5861] usb 5-1: config 5 has no interface number 3 [ 262.871042][ T5861] usb 5-1: config 5 interface 178 altsetting 129 has an invalid descriptor for endpoint zero, skipping [ 262.875447][ T5972] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 262.884369][ T5861] usb 5-1: config 5 interface 178 altsetting 129 has 4 endpoint descriptors, different from the interface descriptor's value: 9 [ 262.916888][ T1216] usb 3-1: USB disconnect, device number 45 [ 262.930967][ T5972] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 262.946999][ T5861] usb 5-1: too many endpoints for config 5 interface 178 altsetting 184: 204, using maximum allowed: 30 [ 262.948999][ T5972] usb 4-1: config 1 has no interface number 1 [ 262.971619][ T5861] usb 5-1: config 5 interface 178 altsetting 184 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 262.986701][ T5972] usb 4-1: too many endpoints for config 1 interface 2 altsetting 0: 228, using maximum allowed: 30 [ 262.988930][ T5861] usb 5-1: config 5 interface 178 altsetting 184 endpoint 0x5 has an invalid bInterval 159, changing to 11 [ 263.010374][ T5861] usb 5-1: config 5 interface 178 altsetting 184 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 263.020113][ T5972] usb 4-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 228 [ 263.024153][ T5861] usb 5-1: config 5 interface 178 altsetting 184 has an endpoint descriptor with address 0x19, changing to 0x9 [ 263.051292][ T5861] usb 5-1: config 5 interface 178 altsetting 184 has a duplicate endpoint with address 0x9, skipping [ 263.062951][ T5861] usb 5-1: config 5 interface 178 altsetting 184 has a duplicate endpoint with address 0x9, skipping [ 263.074171][ T5972] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 263.077300][ T5861] usb 5-1: config 5 interface 178 altsetting 184 has 6 endpoint descriptors, different from the interface descriptor's value: 204 [ 263.085344][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.105797][ T5972] usb 4-1: Product: שּׂ杆씮㏵曍靺엃䔬氆뿴톻놭❮繡뢧쫕飪㝳贠ꬢﶆὮ鑔ំ࣑ﲞ느貯֏ඡ㸔懷㖋ے苰梺⼆槹쭐牍凮틭퍛駥麩ᕒƣ斎랈宁槓쨝앵ꎟ掲ꈃ⛟ܷ暽豟ᠸ랱䕐ⳙ롧婇鞗ຕ᳊罥엘㽐ꀲ㘐ᗃꎤ婅쐈鏭逼 [ 263.118047][ T5861] usb 5-1: config 5 interface 174 altsetting 5 has a duplicate endpoint with address 0x1, skipping [ 263.135581][ T5972] usb 4-1: Manufacturer: 밊ྼ㄃睛罥酵㍘複䃆켗隣죀㝌蠐ଆ涞充হ䆧厃썴⢠˘펏ᩃꙪ烲狮ᨻ풠ƃ䣐棐톀ﴏ기辩ᵀ胷餮ɇ本莇ᐳ嚔뫤㸍狼ﶙ몙ﵘ┦⑒렀ቸ㣒艅돇ꛫ茗馭웻任晬腴ષ릱﨓娵暖⸃㭨达籜 [ 263.171968][ T5972] usb 4-1: SerialNumber: ࠖ [ 263.181897][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 263.200732][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 263.211853][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 263.227398][ T5861] usb 5-1: config 5 interface 88 altsetting 3 endpoint 0x2 has invalid wMaxPacketSize 0 [ 263.240269][ T5861] usb 5-1: config 5 interface 88 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 263.250422][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has a duplicate endpoint with address 0xF, skipping [ 263.261786][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 263.273148][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 263.284511][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 263.296124][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has a duplicate endpoint with address 0x9, skipping [ 263.310634][ T5861] usb 5-1: config 5 interface 88 altsetting 3 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 263.321849][ T5861] usb 5-1: config 5 interface 88 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 263.332762][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 263.343762][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 263.354932][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has a duplicate endpoint with address 0x2, skipping [ 263.365933][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 263.376913][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has a duplicate endpoint with address 0xE, skipping [ 263.390538][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has a duplicate endpoint with address 0xB, skipping [ 263.404214][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has a duplicate endpoint with address 0x1, skipping [ 263.417589][ T5861] usb 5-1: config 5 interface 206 altsetting 12 endpoint 0x8 has invalid maxpacket 1300, setting to 64 [ 263.443629][ T5861] usb 5-1: config 5 interface 206 altsetting 12 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 263.506707][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has a duplicate endpoint with address 0x4, skipping [ 263.527257][ T5861] usb 5-1: config 5 interface 206 altsetting 12 has a duplicate endpoint with address 0xF, skipping [ 263.543238][ T5861] usb 5-1: config 5 interface 178 has no altsetting 0 [ 263.553437][ T5861] usb 5-1: config 5 interface 178 has no altsetting 1 [ 263.562701][ T5861] usb 5-1: config 5 interface 174 has no altsetting 0 [ 263.577911][ T5861] usb 5-1: config 5 interface 88 has no altsetting 0 [ 263.624675][ T5861] usb 5-1: config 5 interface 206 has no altsetting 0 [ 263.648476][ T5861] usb 5-1: Dual-Role OTG device on HNP port [ 263.655174][ T5861] usb 5-1: New USB device found, idVendor=19d2, idProduct=0317, bcdDevice=9e.cc [ 263.667704][ T5861] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.683113][ T5861] usb 5-1: Product: ⹇噭ꉑ立ݾ昗㑾ꮸ䎶خ땉筲獗둳䟍랁ﱝಿᗼ伪示ᕜਮ跥㿝벋啓⋊灰Ɣ鐴흞낲喡毱翇⭞ᗋ썎槢梫䘦⊈㵴鸭Ґꛓ蟎ˢ䗸倧闙暊꒙ᭋﯓ㚽큒㽉됵標禆懫綴᫘篸貇㙶ꕕ鄼䋟ꜜ内鯠흃䧰럎釳誝렡㾟愵ᛯᙄ⌯男࢟얔뽚 [ 263.730107][ T5861] usb 5-1: Manufacturer: ࠄ [ 263.766742][ T5861] usb 5-1: SerialNumber: ᥠ靡嶟둆⚰鑢子᱒闈ܯ骐פּ蠿⨶뢽ᢑ桮仨㢄შ먤黶靐ᆓ⡑牨萩畽顙ᱽᐑ活뜩৘퐙泒 [ 263.936222][ T9067] /dev/rnullb0: Can't open blockdev [ 264.072142][ T9071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.081225][ T9071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.343752][ T5861] option 5-1:5.178: GSM modem (1-port) converter detected [ 264.445469][ T9078] /dev/rnullb0: Can't open blockdev [ 264.473786][ T5861] usb 5-1: USB disconnect, device number 31 [ 264.513324][ T5861] option 5-1:5.178: device disconnected [ 264.908101][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 265.073534][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 265.079015][ T5861] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 265.098083][ T24] usb 2-1: config 0 has an invalid interface number: 9 but max is 1 [ 265.113347][ T24] usb 2-1: config 0 has an invalid interface number: 9 but max is 1 [ 265.140677][ T24] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 265.174536][ T24] usb 2-1: config 0 has no interface number 0 [ 265.190320][ T24] usb 2-1: config 0 interface 9 has no altsetting 0 [ 265.220988][ T24] usb 2-1: config 0 interface 9 has no altsetting 1 [ 265.231735][ T24] usb 2-1: New USB device found, idVendor=1199, idProduct=6891, bcdDevice=89.a0 [ 265.253666][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.262092][ T5861] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.276233][ T5861] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.290412][ T24] usb 2-1: Product: syz [ 265.294641][ T24] usb 2-1: Manufacturer: syz [ 265.312024][ T24] usb 2-1: SerialNumber: syz [ 265.317021][ T5861] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 265.331802][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 265.347006][ T5861] usb 3-1: SerialNumber: syz [ 265.357767][ T24] usb 2-1: config 0 descriptor?? [ 265.592409][ T9080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.870'. [ 265.604904][ T9080] /dev/rnullb0: Can't open blockdev [ 265.629145][ T24] usb 2-1: selecting invalid altsetting 1 [ 265.648085][ T24] sierra 2-1:0.9: Sierra USB modem converter detected [ 265.684359][ T24] usb 2-1: Sierra USB modem converter now attached to ttyUSB0 [ 265.695077][ T9090] /dev/rnullb0: Can't open blockdev [ 265.726153][ T24] usb 2-1: USB disconnect, device number 49 [ 265.771638][ T24] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 265.798773][ T24] sierra 2-1:0.9: device disconnected [ 265.814146][ T5861] usb 3-1: 0:2 : does not exist [ 265.883561][ T5861] usb 3-1: USB disconnect, device number 46 [ 266.020140][ T9092] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=842018864 (1684037728 ns) > initial count (1616936164 ns). Using initial count to start timer. [ 266.333747][ T5972] usb 4-1: USB disconnect, device number 37 [ 266.399644][ T6210] udevd[6210]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 266.544985][ T9104] loop2: detected capacity change from 0 to 7 [ 266.569691][ T9104] Dev loop2: unable to read RDB block 7 [ 266.575733][ T9104] loop2: unable to read partition table [ 266.582502][ T9104] loop2: partition table beyond EOD, truncated [ 266.602826][ T9104] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 266.883752][ T5853] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 267.160420][ T9115] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 267.160420][ T9115] The task syz.1.880 (9115) triggered the difference, watch for misbehavior. [ 267.233719][ T9115] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 267.253692][ T9115] /dev/rnullb0: Can't open blockdev [ 267.799138][ T9122] /dev/rnullb0: Can't open blockdev [ 268.210073][ T9139] loop2: detected capacity change from 0 to 7 [ 268.248580][ T9139] Dev loop2: unable to read RDB block 7 [ 268.254230][ T9139] loop2: unable to read partition table [ 268.288754][ T9139] loop2: partition table beyond EOD, truncated [ 268.308558][ T9139] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 268.547084][ T9147] netlink: 'syz.4.889': attribute type 10 has an invalid length. [ 268.585536][ T9147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.640961][ T9148] netlink: 'syz.4.889': attribute type 10 has an invalid length. [ 268.663399][ T9147] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 268.691687][ T9148] netlink: 40 bytes leftover after parsing attributes in process `syz.4.889'. [ 268.692543][ T9152] /dev/rnullb0: Can't open blockdev [ 268.738491][ T9148] batadv0: entered promiscuous mode [ 268.779150][ T9148] batadv0: entered allmulticast mode [ 268.821091][ T9148] bond0: (slave batadv0): Releasing backup interface [ 268.869541][ T9148] bridge0: port 3(batadv0) entered blocking state [ 268.898316][ T9148] bridge0: port 3(batadv0) entered disabled state [ 269.091577][ T9157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.892'. [ 269.240898][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 269.251158][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 269.306528][ T9166] /dev/rnullb0: Can't open blockdev [ 270.253447][ T9190] netlink: 'syz.3.901': attribute type 1 has an invalid length. [ 270.292561][ T9190] netlink: 'syz.3.901': attribute type 2 has an invalid length. [ 270.310614][ T9191] /dev/rnullb0: Can't open blockdev [ 271.456415][ T9211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.906'. [ 271.508112][ T9211] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 272.116522][ T9234] /dev/rnullb0: Can't open blockdev [ 272.158486][ T5861] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 272.228680][ T24] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 272.338087][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 272.349632][ T5861] usb 3-1: config 0 has too many interfaces: 65, using maximum allowed: 32 [ 272.359352][ T5861] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 65 [ 272.369487][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.380774][ T5861] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.390956][ T5861] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 272.400168][ T5861] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.408615][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 272.419403][ T24] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 272.431296][ T5861] usb 3-1: config 0 descriptor?? [ 272.436539][ T5897] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 272.448055][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 272.482787][ T24] usb 5-1: Product: syz [ 272.487102][ T24] usb 5-1: Manufacturer: syz [ 272.492852][ T24] usb 5-1: SerialNumber: syz [ 272.516548][ T24] usb 5-1: config 0 descriptor?? [ 272.533112][ T24] gspca_main: sq905-2.14.0 probing 2770:9120 [ 272.638113][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 272.646918][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.658527][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.668646][ T5897] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 272.677731][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.692000][ T5897] usb 2-1: config 0 descriptor?? [ 272.871388][ T5861] holtek 0003:1241:5015.000B: hidraw0: USB HID vff.ff Device [HID 1241:5015] on usb-dummy_hcd.2-1/input0 [ 272.882967][ T5861] holtek 0003:1241:5015.000B: no inputs found [ 272.944097][ T24] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 272.960437][ T24] sq905 5-1:0.0: probe with driver sq905 failed with error -71 [ 272.979459][ T24] usb 5-1: USB disconnect, device number 32 [ 273.064961][ T9224] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 273.071542][ T9224] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 273.080041][ T9224] vhci_hcd vhci_hcd.0: Device attached [ 273.086412][ T9251] usbip_core: unknown command [ 273.091411][ T9251] vhci_hcd: unknown pdu 0 [ 273.095853][ T9251] usbip_core: unknown command [ 273.103425][ T5904] usb 3-1: USB disconnect, device number 47 [ 273.108085][ T1117] vhci_hcd: stop threads [ 273.125219][ T1117] vhci_hcd: release socket [ 273.133614][ T5897] ft260 0003:0403:6030.000C: unknown main item tag 0x7 [ 273.146833][ T1117] vhci_hcd: disconnect device [ 273.317857][ T5897] ft260 0003:0403:6030.000C: chip code: 6424 8183 [ 273.502598][ T9254] /dev/rnullb0: Can't open blockdev [ 273.525100][ T5897] ft260 0003:0403:6030.000C: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 273.643952][ T5853] Bluetooth: hci2: unexpected event for opcode 0x0c38 [ 273.667202][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.921'. [ 273.726495][ T5897] ft260 0003:0403:6030.000C: failed to retrieve status: -32, no wakeup [ 273.736405][ T5897] ft260 0003:0403:6030.000C: failed to retrieve status: -32 [ 273.812281][ T9266] /dev/rnullb0: Can't open blockdev [ 273.821406][ T9267] /dev/rnullb0: Can't open blockdev [ 273.902752][ T9264] /dev/rnullb0: Can't open blockdev [ 274.020430][ T5904] usb 2-1: USB disconnect, device number 50 [ 274.044120][ T9276] /dev/rnullb0: Can't open blockdev [ 274.081310][ T9280] /dev/sg0: Can't lookup blockdev [ 274.183719][ T9282] /dev/rnullb0: Can't open blockdev [ 274.318744][ T5897] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 274.482287][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.498042][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.510898][ T5897] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 274.520531][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.536557][ T5897] usb 4-1: config 0 descriptor?? [ 274.573372][ T5897] usbhid 4-1:0.0: can't add hid device: -22 [ 274.585436][ T5897] usbhid 4-1:0.0: probe with driver usbhid failed with error -22 [ 274.765517][ T24] usb 4-1: USB disconnect, device number 38 [ 274.879724][ T5897] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 275.050207][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 275.060207][ T5897] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 275.068865][ T5897] usb 2-1: config 0 has no interface number 0 [ 275.083360][ T5897] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 275.119581][ T5897] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 275.147504][ T5897] usb 2-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 275.157226][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.177008][ T5897] usb 2-1: Product: syz [ 275.193996][ T5897] usb 2-1: Manufacturer: syz [ 275.207470][ T5897] usb 2-1: SerialNumber: syz [ 275.224054][ T5897] usb 2-1: config 0 descriptor?? [ 275.238977][ T9293] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 275.262315][ T9293] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 275.306767][ T5897] plusb 2-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 4a:1c:67:59:db:fb [ 275.390866][ T9299] netlink: 12 bytes leftover after parsing attributes in process `syz.3.936'. [ 275.488067][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 275.675878][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 275.710554][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.751580][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 275.784450][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 275.805220][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 275.836176][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 275.861985][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 275.872656][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 275.891978][ T10] usb 5-1: Manufacturer: syz [ 275.907267][ T24] usb 2-1: USB disconnect, device number 51 [ 275.924974][ T10] usb 5-1: config 0 descriptor?? [ 275.929966][ T24] plusb 2-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.1-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 276.069309][ T5897] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 276.235784][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.259477][ T5897] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 276.273080][ T5897] usb 3-1: config 0 has no interface number 0 [ 276.288037][ T5897] usb 3-1: config 0 interface 182 has no altsetting 0 [ 276.291831][ T10] rc_core: IR keymap rc-hauppauge not found [ 276.302705][ T5897] usb 3-1: string descriptor 0 read error: -22 [ 276.305587][ T10] Registered IR keymap rc-empty [ 276.315373][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.315800][ T5897] usb 3-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=f9.97 [ 276.338436][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.338519][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.365310][ T5897] usb 3-1: config 0 descriptor?? [ 276.383610][ T5897] ems_usb 3-1:0.182 (unnamed net_device) (uninitialized): couldn't initialize controller: -22 [ 276.387587][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 276.412958][ T5897] ems_usb 3-1:0.182: probe with driver ems_usb failed with error -22 [ 276.441914][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input17 [ 276.478672][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.519865][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.547798][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.580421][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.618411][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.648218][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.662079][ T9337] /dev/rnullb0: Can't open blockdev [ 276.672052][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.700557][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.748991][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.788246][ T10] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 276.823185][ T10] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 276.854640][ T10] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 276.911244][ T10] usb 5-1: USB disconnect, device number 33 [ 276.967244][ T9350] loop2: detected capacity change from 0 to 7 [ 277.000575][ T9350] Dev loop2: unable to read RDB block 7 [ 277.007647][ T9355] /dev/rnullb0: Can't open blockdev [ 277.026108][ T9350] loop2: unable to read partition table [ 277.056012][ T9350] loop2: partition table beyond EOD, truncated [ 277.090738][ T9350] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 277.281789][ T9362] /dev/rnullb0: Can't open blockdev [ 277.399554][ T9370] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 277.505256][ T9376] /dev/rnullb0: Can't open blockdev [ 277.558501][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 277.633322][ T9379] /dev/rnullb0: Can't open blockdev [ 277.706991][ T9382] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(71) [ 277.713651][ T9382] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 277.724028][ T9382] vhci_hcd vhci_hcd.0: Device attached [ 277.730495][ T9384] usbip_core: unknown command [ 277.735602][ T9384] vhci_hcd: unknown pdu 0 [ 277.740142][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 277.742857][ T9384] usbip_core: unknown command [ 277.746970][ T10] usb 5-1: too many configurations: 129, using maximum allowed: 8 [ 277.753236][ T1000] vhci_hcd: stop threads [ 277.762576][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.766714][ T1000] vhci_hcd: release socket [ 277.774856][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.777398][ T1000] vhci_hcd: disconnect device [ 277.790188][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.804035][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.816538][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.829618][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.841023][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.852719][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.867258][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=ce.6f [ 277.877294][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.885405][ T10] usb 5-1: Product: syz [ 277.889763][ T10] usb 5-1: Manufacturer: syz [ 277.894417][ T10] usb 5-1: SerialNumber: syz [ 277.906593][ T10] usb 5-1: config 0 descriptor?? [ 277.916200][ T10] quatech2 5-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 278.299401][ T10] usb 5-1: qt2_attach - failed to power on unit: -71 [ 278.318336][ T10] quatech2 5-1:0.0: probe with driver quatech2 failed with error -71 [ 278.344714][ T10] usb 5-1: USB disconnect, device number 34 [ 278.638190][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 278.789252][ T5897] usb 3-1: USB disconnect, device number 48 [ 278.800368][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 278.842834][ T24] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 278.860966][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.888728][ T24] usb 4-1: config 0 descriptor?? [ 278.902712][ T24] hso 4-1:0.0: Can't find BULK IN endpoint [ 279.092894][ T9401] loop2: detected capacity change from 0 to 7 [ 279.116283][ T9401] Dev loop2: unable to read RDB block 7 [ 279.148116][ T9401] loop2: unable to read partition table [ 279.161288][ T10] usb 4-1: USB disconnect, device number 39 [ 279.180262][ T9401] loop2: partition table beyond EOD, truncated [ 279.197721][ T9401] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 279.320094][ T9410] /dev/rnullb0: Can't open blockdev [ 279.391587][ T9415] /dev/rnullb0: Can't open blockdev [ 279.514451][ T9408] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 279.528422][ T9408] /dev/rnullb0: Can't open blockdev [ 279.587003][ T9424] /dev/rnullb0: Can't open blockdev [ 279.649490][ T9427] netlink: 80 bytes leftover after parsing attributes in process `syz.4.966'. [ 279.938075][ T24] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 280.022048][ T9441] loop2: detected capacity change from 0 to 7 [ 280.033670][ T6210] Dev loop2: unable to read RDB block 7 [ 280.040750][ T6210] loop2: unable to read partition table [ 280.046757][ T6210] loop2: partition table beyond EOD, truncated [ 280.057025][ T9441] Dev loop2: unable to read RDB block 7 [ 280.068763][ T9441] loop2: unable to read partition table [ 280.074903][ T9441] loop2: partition table beyond EOD, truncated [ 280.088023][ T9441] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 280.146525][ T24] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 280.188063][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.228686][ T24] usb 3-1: config 0 descriptor?? [ 280.364520][ T9447] /dev/rnullb0: Can't open blockdev [ 280.458101][ T24] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 280.556108][ T5972] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 280.765093][ T5972] usb 5-1: config 2 has an invalid interface number: 138 but max is 0 [ 280.778128][ T5972] usb 5-1: config 2 has no interface number 0 [ 280.794829][ T5972] usb 5-1: config 2 interface 138 has no altsetting 0 [ 280.811873][ T5972] usb 5-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice=d2.84 [ 280.825580][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.845737][ T5972] usb 5-1: Product: syz [ 280.853738][ T5972] usb 5-1: Manufacturer: syz [ 280.869944][ T5972] usb 5-1: SerialNumber: syz [ 280.937682][ T9462] /dev/rnullb0: Can't open blockdev [ 281.084328][ T9448] program syz.4.972 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 281.160515][ T9448] cgroup: subsys name conflicts with all [ 281.174223][ T9448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.183481][ T9448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.307612][ T5972] usb 5-1: USB disconnect, device number 35 [ 281.678155][ T5897] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 281.850704][ T5897] usb 4-1: Using ep0 maxpacket: 8 [ 281.866212][ T5897] usb 4-1: config index 0 descriptor too short (expected 19730, got 18) [ 281.875395][ T5897] usb 4-1: config 0 has too many interfaces: 54, using maximum allowed: 32 [ 281.896388][ T5897] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 54 [ 281.935580][ T5897] usb 4-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=c4.6d [ 281.950902][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.975840][ T5897] usb 4-1: Product: syz [ 282.002714][ T5897] usb 4-1: Manufacturer: syz [ 282.023432][ T5897] usb 4-1: SerialNumber: syz [ 282.160381][ T5897] usb 4-1: config 0 descriptor?? [ 282.191644][ T5897] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 282.381338][ T9481] ./cgroup: Can't lookup blockdev [ 282.461742][ T5897] gspca_sn9c2028: read1 error -71 [ 282.472449][ T9486] loop2: detected capacity change from 0 to 7 [ 282.488340][ T5897] gspca_sn9c2028: read1 error -71 [ 282.497712][ T9486] Dev loop2: unable to read RDB block 7 [ 282.504138][ T5897] gspca_sn9c2028: read1 error -71 [ 282.512566][ T9486] loop2: unable to read partition table [ 282.527280][ T5897] sn9c2028 4-1:0.0: probe with driver sn9c2028 failed with error -71 [ 282.536949][ T9486] loop2: partition table beyond EOD, truncated [ 282.563103][ T9486] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 282.578564][ T5897] usb 4-1: USB disconnect, device number 40 [ 282.681609][ T24] [drm:udl_init] *ERROR* Selecting channel failed [ 282.731710][ T24] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 282.742123][ T24] [drm] Initialized udl on minor 2 [ 282.752932][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 282.770851][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 282.782119][ T5861] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 282.795835][ T5861] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 282.803803][ T24] usb 3-1: USB disconnect, device number 49 [ 282.810787][ T5219] Dev loop2: unable to read RDB block 7 [ 282.823576][ T5219] loop2: unable to read partition table [ 282.840873][ T5219] loop2: partition table beyond EOD, truncated [ 282.848553][ T5904] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 282.869134][ T5937] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 283.018127][ T5937] usb 2-1: device descriptor read/64, error -71 [ 283.030179][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.058029][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.067829][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 283.098059][ T5904] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 283.107284][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.132566][ T5904] usb 5-1: config 0 descriptor?? [ 283.260548][ T5937] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 283.398094][ T5937] usb 2-1: device descriptor read/64, error -71 [ 283.518323][ T5937] usb usb2-port1: attempt power cycle [ 283.568085][ T5972] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 283.585618][ T5904] plantronics 0003:047F:FFFF.000D: reserved main item tag 0xd [ 283.606551][ T5219] Dev loop2: unable to read RDB block 7 [ 283.614166][ T5904] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 283.616565][ T5219] loop2: unable to read partition table [ 283.636173][ T5219] loop2: partition table beyond EOD, truncated [ 283.718014][ T5972] usb 4-1: device descriptor read/64, error -71 [ 283.854087][ T5219] Dev loop2: unable to read RDB block 7 [ 283.858117][ T5937] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 283.864030][ T5219] loop2: unable to read partition table [ 283.885516][ T5219] loop2: partition table beyond EOD, truncated [ 283.887080][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.988'. [ 283.904778][ T5904] usb 5-1: USB disconnect, device number 36 [ 283.909768][ T5937] usb 2-1: device descriptor read/8, error -71 [ 283.969381][ T5972] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 283.995041][ T5219] Dev loop2: unable to read RDB block 7 [ 283.998833][ T9513] tipc: New replicast peer: 255.255.255.255 [ 284.002670][ T5219] loop2: unable to read partition table [ 284.013574][ T5219] loop2: partition table beyond EOD, truncated [ 284.033622][ T9513] tipc: Enabled bearer , priority 10 [ 284.081674][ T9516] tipc: Enabling of bearer rejected, already enabled [ 284.097535][ T9517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.990'. [ 284.117390][ T9517] tipc: Disabling bearer [ 284.129781][ T5972] usb 4-1: device descriptor read/64, error -71 [ 284.158109][ T5937] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 284.178924][ T5937] usb 2-1: device descriptor read/8, error -71 [ 284.248466][ T5972] usb usb4-port1: attempt power cycle [ 284.288318][ T5937] usb usb2-port1: unable to enumerate USB device [ 284.358042][ T24] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 284.507154][ T9524] netlink: 92 bytes leftover after parsing attributes in process `syz.4.992'. [ 284.508874][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 284.582718][ T9513] netlink: 36 bytes leftover after parsing attributes in process `syz.2.990'. [ 284.593935][ T5972] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 284.633624][ T5972] usb 4-1: device descriptor read/8, error -71 [ 284.859698][ T9535] netlink: 176 bytes leftover after parsing attributes in process `syz.4.995'. [ 284.888236][ T5972] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 284.909034][ T5972] usb 4-1: device descriptor read/8, error -71 [ 285.021641][ T5972] usb usb4-port1: unable to enumerate USB device [ 285.824077][ T9549] loop2: detected capacity change from 0 to 7 [ 285.840889][ T9549] Dev loop2: unable to read RDB block 7 [ 285.846574][ T9549] loop2: unable to read partition table [ 285.854034][ T9549] loop2: partition table beyond EOD, truncated [ 285.862309][ T9549] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 285.910333][ T5972] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 286.081550][ T5972] usb 2-1: unable to get BOS descriptor or descriptor too short [ 286.099593][ T5972] usb 2-1: not running at top speed; connect to a high speed hub [ 286.116880][ T5972] usb 2-1: config 1 has an invalid descriptor of length 129, skipping remainder of the config [ 286.140760][ T5972] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 286.678186][ T5904] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 286.838188][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 286.853352][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.879412][ T5904] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 286.908004][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.927644][ T5904] usb 4-1: config 0 descriptor?? [ 286.955364][ T9562] CUSE: info not properly terminated [ 287.033567][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 287.055286][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 287.203982][ T24] usb 3-1: can't read configurations, error -71 [ 287.441313][ T5904] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 287.831085][ T9559] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 287.860830][ T5897] usb 4-1: USB disconnect, device number 45 [ 287.976707][ T3478] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 288.193090][ T9568] binder: 9566:9568 ioctl c0306201 200000000080 returned -22 [ 288.370408][ T9572] openvswitch: netlink: Flow key attribute not present in set flow. [ 288.415865][ T9572] /dev/rnullb0: Can't open blockdev [ 288.530697][ T9574] loop2: detected capacity change from 0 to 7 [ 288.548343][ T9574] Dev loop2: unable to read RDB block 7 [ 288.553976][ T9574] loop2: unable to read partition table [ 288.580440][ T9574] loop2: partition table beyond EOD, truncated [ 288.586775][ T9574] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 288.796396][ T9584] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 288.861751][ T5972] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.883969][ T5972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.928599][ T5972] usb 2-1: can't set config #1, error -71 [ 288.962492][ T5972] usb 2-1: USB disconnect, device number 56 [ 289.157401][ T9583] /dev/rnullb0: Can't open blockdev [ 289.568462][ T24] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 289.718160][ T24] usb 4-1: device descriptor read/64, error -71 [ 289.958524][ T24] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 290.098083][ T24] usb 4-1: device descriptor read/64, error -71 [ 290.210571][ T24] usb usb4-port1: attempt power cycle [ 290.218080][ T5897] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 290.228803][ T9609] Invalid ELF header magic: != ELF [ 290.271918][ T9609] qrtr: Invalid version 19 [ 290.378464][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 290.385397][ T5897] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 290.395535][ T5897] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.412192][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.419634][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1020'. [ 290.422095][ T5897] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.444074][ T5897] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.460279][ T5897] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 290.469699][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.547858][ T9616] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 290.548333][ T24] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 290.554524][ T9616] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 290.557491][ T9616] vhci_hcd vhci_hcd.0: Device attached [ 290.577030][ T9617] vhci_hcd: cannot find the pending unlink 3 [ 290.586804][ T24] usb 4-1: device descriptor read/8, error -71 [ 290.687339][ T5897] usb 2-1: GET_CAPABILITIES returned 0 [ 290.693002][ T5897] usbtmc 2-1:16.0: can't read capabilities [ 290.738267][ T5904] vhci_hcd: vhci_device speed not set [ 290.760235][ T9617] vhci_hcd: connection closed [ 290.761009][ T13] vhci_hcd: stop threads [ 290.770525][ T13] vhci_hcd: release socket [ 290.776033][ T13] vhci_hcd: disconnect device [ 290.808225][ T5904] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 290.816563][ T5904] usb 41-1: enqueue for inactive port 0 [ 290.828420][ T24] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 290.848850][ T24] usb 4-1: device descriptor read/8, error -71 [ 290.888417][ T5904] vhci_hcd: vhci_device speed not set [ 290.958498][ T24] usb usb4-port1: unable to enumerate USB device [ 291.096962][ T9625] /dev/rnullb0: Can't open blockdev [ 291.455729][ T5972] usb 2-1: USB disconnect, device number 57 [ 291.728056][ T10] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 291.890214][ T10] usb 5-1: config index 0 descriptor too short (expected 69, got 36) [ 291.898577][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.911708][ T10] usb 5-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 291.920884][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.928982][ T10] usb 5-1: Product: syz [ 291.933180][ T10] usb 5-1: Manufacturer: syz [ 291.937794][ T10] usb 5-1: SerialNumber: syz [ 291.945804][ T10] usb 5-1: config 0 descriptor?? [ 291.954552][ T10] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 292.591114][ T9649] /dev/rnullb0: Can't open blockdev [ 292.810204][ T10] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 292.863400][ T10] gspca_pac7302 5-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 292.890988][ T10] usb 5-1: USB disconnect, device number 37 [ 293.240594][ T9660] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 293.247269][ T9660] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 293.259490][ T9660] vhci_hcd vhci_hcd.0: Device attached [ 293.438116][ T24] vhci_hcd: vhci_device speed not set [ 293.508067][ T24] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 294.079530][ T9676] kvm: kvm [9675]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0xac03ffff0003 [ 294.113267][ T9676] kvm: kvm [9675]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0xac03ffff0003 [ 294.139993][ T9676] kvm: kvm [9675]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0xac03ffff0003 [ 294.155999][ T9676] kvm_intel: kvm [9675]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0xac03ffff0003 [ 294.812940][ T9698] /dev/sg0: Can't lookup blockdev [ 294.920048][ T9705] loop2: detected capacity change from 0 to 7 [ 294.927821][ T9705] Dev loop2: unable to read RDB block 7 [ 294.934521][ T9705] loop2: unable to read partition table [ 294.941715][ T9705] loop2: partition table beyond EOD, truncated [ 294.951270][ T9705] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 295.070011][ T9711] /dev/rnullb0: Can't open blockdev [ 295.273599][ T9717] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1048'. [ 295.284914][ T9717] /dev/rnullb0: Can't open blockdev [ 295.398224][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 295.555517][ T10] usb 5-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 16 [ 295.578252][ T10] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 295.591862][ T10] usb 5-1: config 1 interface 0 has no altsetting 0 [ 295.601879][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 295.612385][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.620792][ T10] usb 5-1: Product: syz [ 295.625088][ T10] usb 5-1: Manufacturer: ࠐ [ 295.630728][ T10] usb 5-1: SerialNumber: syz [ 295.642696][ T9713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 295.752987][ T9732] /dev/rnullb0: Can't open blockdev [ 295.776838][ T9734] /dev/rnullb0: Can't open blockdev [ 295.823956][ T9736] loop2: detected capacity change from 0 to 7 [ 295.833948][ T6030] Dev loop2: unable to read RDB block 7 [ 295.839754][ T6030] loop2: unable to read partition table [ 295.845889][ T6030] loop2: partition table beyond EOD, truncated [ 295.856984][ T9736] Dev loop2: unable to read RDB block 7 [ 295.871015][ T9736] loop2: unable to read partition table [ 295.877113][ T9736] loop2: partition table beyond EOD, truncated [ 295.891607][ T9736] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 295.897454][ T10] usb 5-1: USB disconnect, device number 38 [ 295.918478][ T9740] sg_write: process 743 (syz.1.1055) changed security contexts after opening file descriptor, this is not allowed. [ 296.249261][ T9661] vhci_hcd: connection reset by peer [ 296.254972][ T3478] vhci_hcd: stop threads [ 296.264272][ T3478] vhci_hcd: release socket [ 296.273670][ T3478] vhci_hcd: disconnect device [ 297.082184][ T9771] /dev/rnullb0: Can't open blockdev [ 297.099211][ T9772] /dev/rnullb0: Can't open blockdev [ 297.302815][ T9782] loop2: detected capacity change from 0 to 7 [ 297.314641][ T6210] Dev loop2: unable to read RDB block 7 [ 297.321895][ T9784] /dev/rnullb0: Can't open blockdev [ 297.332520][ T6210] loop2: unable to read partition table [ 297.348511][ T6210] loop2: partition table beyond EOD, truncated [ 297.370647][ T9782] Dev loop2: unable to read RDB block 7 [ 297.376309][ T9782] loop2: unable to read partition table [ 297.404158][ T9782] loop2: partition table beyond EOD, truncated [ 297.417643][ T9782] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 297.473368][ T5219] Dev loop2: unable to read RDB block 7 [ 297.479588][ T5219] loop2: unable to read partition table [ 297.485498][ T5219] loop2: partition table beyond EOD, truncated [ 297.560704][ T30] audit: type=1326 audit(1753795431.475:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9787 comm="syz.2.1067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a3838e9a9 code=0x0 [ 297.777497][ T9794] Malformed UNC in devname [ 297.777497][ T9794] [ 297.785087][ T9794] CIFS: VFS: Malformed UNC in devname [ 297.871169][ T5897] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 298.031889][ T5897] usb 3-1: not running at top speed; connect to a high speed hub [ 298.068702][ T5897] usb 3-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 298.091273][ T9800] /dev/rnullb0: Can't open blockdev [ 298.097323][ T9801] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000021: 0000 [#1] SMP KASAN PTI [ 298.098587][ T5897] usb 3-1: config 1 interface 0 altsetting 16 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.109254][ T9801] KASAN: null-ptr-deref in range [0x0000000000000108-0x000000000000010f] [ 298.109290][ T9801] CPU: 0 UID: 0 PID: 9801 Comm: syz.3.1072 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 298.109314][ T9801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 298.109328][ T9801] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 298.109351][ T9801] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 46 b3 f9 49 8b 1f 31 ff 48 89 [ 298.109368][ T9801] RSP: 0018:ffffc90003bc7c00 EFLAGS: 00010206 [ 298.109387][ T9801] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 298.109400][ T9801] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 298.109413][ T9801] RBP: ffffc90003bc7d60 R08: ffff888059032c1f R09: 1ffff1100b206583 [ 298.157369][ T5897] usb 3-1: config 1 interface 0 has no altsetting 0 [ 298.157556][ T9801] R10: dffffc0000000000 R11: ffffffff887009c0 R12: 0000000000000001 [ 298.222016][ T9801] R13: ffffc90003bc7e00 R14: dffffc0000000000 R15: 0000000000000108 [ 298.227885][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.230005][ T9801] FS: 00007f2c983ee6c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 298.240516][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.247987][ T9801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.248006][ T9801] CR2: 00007f2c983edf98 CR3: 0000000052b26000 CR4: 00000000003526f0 [ 298.248024][ T9801] DR0: 0000000000000000 DR1: 0000000000000004 DR2: 0000000000000000 [ 298.248036][ T9801] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 298.248049][ T9801] Call Trace: [ 298.248058][ T9801] [ 298.248074][ T9801] ? __pfx_bcsp_recv+0x10/0x10 [ 298.248096][ T9801] ? rcu_read_lock_any_held+0xb3/0x120 [ 298.248125][ T9801] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 298.248150][ T9801] ? tty_audit_push+0x7c/0x250 [ 298.262025][ T5897] usb 3-1: Product: syz [ 298.262853][ T9801] hci_uart_tty_receive+0x191/0x220 [ 298.271412][ T5897] usb 3-1: Manufacturer: 檪免锢⛜웦뵪붡ﴄ㼗탊盨₡쿂뷾郱幈샶呜푇啂ࡾᢛ莜ꀅ搓蛆バṩ㺥첊酇뢹ꙗ꼝棟ஞ冻㧾㴋鵬䴬閴̽ᾟ撶륁Ꮨ꒎ꇩ혰梷諐꯿轘䐕ᆊ糛♗ﻡ농콵㋇釃際ꚮ巒鞛䢴㘼ᩜ琕賈谢⠧渣뽃귔呿觧㇡數꟰﯂⍏㰺瞟뫖伕枴ⓙ朹珫诙䃧㮁 [ 298.278813][ T9801] ? __pfx_hci_uart_tty_receive+0x10/0x10 [ 298.278852][ T9801] tiocsti+0x239/0x2c0 [ 298.278873][ T9801] ? __pfx_tiocsti+0x10/0x10 [ 298.278889][ T9801] ? __fget_files+0x2a/0x420 [ 298.278917][ T9801] ? __fget_files+0x3a0/0x420 [ 298.278946][ T9801] ? __fget_files+0x2a/0x420 [ 298.278975][ T9801] tty_ioctl+0x626/0xde0 [ 298.288969][ T5897] usb 3-1: SerialNumber: syz [ 298.290266][ T9801] ? __pfx_tty_ioctl+0x10/0x10 [ 298.312250][ T9790] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 298.314260][ T9801] __se_sys_ioctl+0xf9/0x170 [ 298.408722][ T9801] do_syscall_64+0xfa/0x3b0 [ 298.408767][ T9801] ? lockdep_hardirqs_on+0x9c/0x150 [ 298.408797][ T9801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.408819][ T9801] ? clear_bhb_loop+0x60/0xb0 [ 298.408843][ T9801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.408863][ T9801] RIP: 0033:0x7f2c9758e9a9 [ 298.408894][ T9801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.408913][ T9801] RSP: 002b:00007f2c983ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 298.408937][ T9801] RAX: ffffffffffffffda RBX: 00007f2c977b6080 RCX: 00007f2c9758e9a9 [ 298.408953][ T9801] RDX: 0000200000000180 RSI: 0000000000005412 RDI: 0000000000000004 [ 298.408968][ T9801] RBP: 00007f2c97610d69 R08: 0000000000000000 R09: 0000000000000000 [ 298.408981][ T9801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.408994][ T9801] R13: 0000000000000001 R14: 00007f2c977b6080 R15: 00007ffe1c1ac808 [ 298.409017][ T9801] [ 298.409025][ T9801] Modules linked in: [ 298.409666][ T9801] ---[ end trace 0000000000000000 ]--- [ 298.430636][ T9801] RIP: 0010:bcsp_recv+0x13d/0x1740 [ 298.430669][ T9801] Code: 89 4c 24 40 48 89 54 24 28 48 c1 ea 03 48 89 54 24 68 48 89 5c 24 20 48 c1 eb 03 48 89 5c 24 60 4c 89 7c 24 38 48 8b 44 24 58 <42> 80 3c 30 00 74 08 4c 89 ff e8 14 46 b3 f9 49 8b 1f 31 ff 48 89 [ 298.430689][ T9801] RSP: 0018:ffffc90003bc7c00 EFLAGS: 00010206 [ 298.430710][ T9801] RAX: 0000000000000021 RBX: 0000000000000030 RCX: 000000000000002f [ 298.430724][ T9801] RDX: 000000000000002f RSI: 0000000000000001 RDI: 0000000000000000 [ 298.430737][ T9801] RBP: ffffc90003bc7d60 R08: ffff888059032c1f R09: 1ffff1100b206583 [ 298.430753][ T9801] R10: dffffc0000000000 R11: ffffffff887009c0 R12: 0000000000000001 [ 298.430769][ T9801] R13: ffffc90003bc7e00 R14: dffffc0000000000 R15: 0000000000000108 [ 298.430785][ T9801] FS: 00007f2c983ee6c0(0000) GS:ffff8881257ab000(0000) knlGS:0000000000000000 [ 298.430803][ T9801] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.430818][ T9801] CR2: 00007f6e0fd802d8 CR3: 0000000052b26000 CR4: 00000000003526f0 [ 298.430838][ T9801] DR0: 0000000000000000 DR1: 0000000000000004 DR2: 0000000000000000 [ 298.430851][ T9801] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 298.430867][ T9801] Kernel panic - not syncing: Fatal exception [ 298.431163][ T9801] Kernel Offset: disabled