last executing test programs: 6m24.597615162s ago: executing program 2 (id=1296): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x6, 0x1, 0x0, 0xfffffffffffffffc, 0x7f, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0xc9, 0x0, 0x4, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 6m24.420333662s ago: executing program 2 (id=1298): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000400)={0xf0f01b, 0x1}) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x30, @loopback, 0xd}, 0x1c) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f00000001c0)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0x0, {0x5, 0x7ff, 0x0, {0x2, 0x8000000, 0x6, 0x0, 0xffffffff, 0x3, 0x201, 0x2, 0x42, 0xc000, 0x0, 0x0, r5, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chmod(&(0x7f0000000080)='./file0\x00', 0x1) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000000)='wg1\x00', 0x4) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000400), 0x500, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000440)={0x2, "418a814ada2b7b5ddf6df93463b735c8394113315b0708dddb36a3de0f0aa92a"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000000)={0x80, "3e6b4a2960a542c56c7d013b5d4c1fd2e677add9b1d63e7297e5323ad70da172"}) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f020000390005", 0x7}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006a"], 0xfe33) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000800)="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", 0x160}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871b", 0x2d5}], 0x2}, 0x0) r8 = socket$kcm(0x2d, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000100)={r8}) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='jfs\x00', 0x0, 0x0) 6m24.283508462s ago: executing program 2 (id=1299): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7d21640006e8ac93, 0x12, r0, 0x5e31b000) (async, rerun: 64) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x200) (async, rerun: 64) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x1) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000180)={0x7fff, 0xfbba}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120140009c323f142a85b1f9896b70020301090212000100020000f7030000006999b4be"], 0x0) syz_usb_control_io(r2, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="007404000000043dc303"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r2, 0x0, 0x0) (rerun: 32) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r3 = socket(0x28, 0x5, 0x9) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) listen(r3, 0x0) r4 = socket(0x28, 0x5, 0x0) (async, rerun: 64) connect$vsock_stream(r3, &(0x7f00000001c0)={0x28, 0x0, 0x2711}, 0x10) (rerun: 64) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000280)={0x1, 0x5}, 0x8) (async) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 32) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r6, &(0x7f0000000080)='THAWED\x00', 0x7) (async) r7 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r7, 0xc02063a0, &(0x7f0000000240)=[0x0, 0x7c]) (async) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000240)={'vxcan1\x00', @local}) connect(r8, &(0x7f0000000080)=@l2={0x1f, 0xffff, @none, 0xc2af}, 0x80) 6m21.188404246s ago: executing program 2 (id=1314): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) write$tun(r0, &(0x7f0000000100)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x1, 0x0, 0x14}, @ipv4=@tcp={{0x6, 0x4, 0x0, 0x21, 0x5f, 0x64, 0x0, 0x4, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x30}, {[@timestamp={0x44, 0x4, 0x7c, 0x0, 0x7}]}}, {{0x4e21, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x9, 0x2, 0x1, 0x0, 0x34, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x6, "9eefb106"}]}}, {"6d7988aba938dec09e34b87f337e3600c6a28086e6eca7ea0fa1e798728a45cec7e02f"}}}}, 0x6d) 6m21.015928145s ago: executing program 2 (id=1315): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x10000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) writev(r3, &(0x7f0000000300)=[{&(0x7f00000000c0)='\b\r4V', 0x7e00}], 0x1) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000000)="5fa4ba", 0x3}], 0x1) r4 = open(&(0x7f0000000100)='.\x00', 0x0, 0x11a) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) fadvise64(r0, 0x3, 0x3, 0x5) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 6m20.791845253s ago: executing program 2 (id=1317): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) close(r0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000000000/0x2000)=nil, 0x3) 6m5.646956808s ago: executing program 32 (id=1317): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, r2, 0x1, 0x0, 0x3}) close(r0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) get_mempolicy(0x0, 0x0, 0x4, &(0x7f0000000000/0x2000)=nil, 0x3) 5m15.764674864s ago: executing program 0 (id=1741): mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='9p\x00', 0x80, 0x0) 5m15.752797243s ago: executing program 0 (id=1742): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000"]) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000540), &(0x7f0000000580)=0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)=ANY=[], 0xa) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 5m15.640962649s ago: executing program 0 (id=1743): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x2, 0x2) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b80)=ANY=[@ANYBLOB="dc010000100001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000004d42b000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020001c96000000000000000480001006469676573745f6e756c6c000000002c194ec4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c000400fdff4e244e230000ac1414aa00000000000000000000000014000e000a010100000002000000000000000000740003"], 0x1dc}}, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x0, 0x4, 0x9, 0x1}) ioctl$BLKROTATIONAL(r0, 0x127e, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount$fuseblk(&(0x7f0000002440), &(0x7f0000002480)='./file0\x00', &(0x7f0000000100), 0x8004, &(0x7f0000000600)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) 5m15.496258182s ago: executing program 0 (id=1744): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x3, 0x7, 0x0) (async) fadvise64(r0, 0x3, 0x7, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x20000b, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0x20000b, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc058565d, &(0x7f0000000240)={0x4, 0xa}) (async) ioctl$VIDIOC_REQBUFS(r1, 0xc058565d, &(0x7f0000000240)={0x4, 0xa}) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) unshare(0x60600) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) (async) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000180), 0x3, 0x6442) ioctl$VIDIOC_S_FBUF(r6, 0x4030560b, &(0x7f0000000200)={0x101, 0xa, &(0x7f00000002c0)="e0cdb066204a76ff50000000", {0x7fffffff, 0x40, 0x32435750, 0x1, 0x5, 0xa, 0x2, 0x80000001}}) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) getsockopt$inet_int(r2, 0x0, 0x16, 0x0, &(0x7f0000000080)) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000000)=0xfffffffb, 0x4) (async) setsockopt$inet6_udp_int(r7, 0x11, 0xa, &(0x7f0000000000)=0xfffffffb, 0x4) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000100)=0xe, 0x80000) setsockopt$bt_BT_CHANNEL_POLICY(r8, 0x112, 0xa, &(0x7f0000000140)=0x100, 0x4) 5m14.892351286s ago: executing program 0 (id=1747): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r2, 0x1000) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) mkdir(&(0x7f0000000300)='./file0\x00', 0x4) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_IOCTL(r7, &(0x7f00000000c0)={0x20, 0x0, 0x0, {0x5, 0x0, 0x5, 0x1}}, 0x20) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) mmap(&(0x7f0000923000/0x4000)=nil, 0x4000, 0x3000001, 0x12, r0, 0x45809000) 5m14.216259759s ago: executing program 0 (id=1755): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@overlay={0x1, 0x1, 0x4, 0x10000, 0x5, {}, {0x1, 0x2, 0x6, 0x80, 0x5, 0x3, "e5a5bed8"}, 0x747f, 0x3, {}, 0xf}) (async) llistxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=""/131, 0x83) 5m13.912497897s ago: executing program 33 (id=1755): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)=@overlay={0x1, 0x1, 0x4, 0x10000, 0x5, {}, {0x1, 0x2, 0x6, 0x80, 0x5, 0x3, "e5a5bed8"}, 0x747f, 0x3, {}, 0xf}) (async) llistxattr(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)=""/131, 0x83) 31.497434485s ago: executing program 4 (id=3815): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) (async) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) (async) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x4}, [{0x2, 0x2}], {0x4, 0x1}, [{0x8, 0x2}], {}, {0x20, 0x2}}, 0x34, 0x1) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r3, 0x4068aea3, &(0x7f0000000100)={0xdf, 0x0, 0x80000000}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r4 = socket$inet(0x2, 0x3, 0x2d) getsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@empty, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) setresuid(r5, r6, 0x0) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock(&(0x7f0000baa000/0x2000)=nil, 0x2000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 31.387837559s ago: executing program 4 (id=3816): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000000000000000c000180060006008035"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) r4 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000080), 0x4) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2e) read(r1, &(0x7f0000000100)=""/159, 0xfffffe5a) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x4000040) 27.804528639s ago: executing program 4 (id=3827): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000240)={0x0, 0x1, r0, 0x6}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000200000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f00000100000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 27.796539169s ago: executing program 4 (id=3828): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4018aee1, &(0x7f0000000000)={0x1, 0x0, [{0x865, 0x0, 0x5}]}) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') lseek(r3, 0x401, 0x2) syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x8918, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b29, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="010001000000000000001000015b097ead85847817353d2dbad05dd5", 0x1c, 0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='net/igmp6\x00') read$FUSE(r8, &(0x7f0000001180)={0x2020}, 0x2020) pread64(r8, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) readv(r7, &(0x7f0000000300)=[{&(0x7f0000000100)=""/41, 0x29}], 0x1) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x80, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000000)="e4971a1e5bd147b293f90ee89b84b1c3c1c0a28034781c3041139c0127485d32a097875340df5d4c9c53ddc6fa7ecbfeaaf0da9a1977f1214182683b7832bbd6552a5512b6536c4c9c20e0ffb0e229c953fb6f51b9927227357e43cbda1119a8ad7e3e4e49eb8d1fc65e9511b7954845f8f7f82e18f5fa5d636136130beb975093183a196375a5e2", 0x88}, {&(0x7f00000000c0)="03effa5e44754015b87135d7f2114db2aab1c57d3c9d41bf4025f5fd02266a25d5531dcba90b471228020fe25f466461d6f28ad9051988d4a2a7c39748c349ead4634dc74c57eb4fb72e808304306bafb8edb21c20699dc477cd1e3ed31e34ad5d1bedd1f6231abef56322abe914958548c90e33ce5c45c512413a", 0x7b}, {&(0x7f0000000200)="e3385d31e8d79392a9be98241718c073f23344c3e2d69b60ec80fa0b3bcd2ecb61da2ec2358e1a70f547865ebbba9bad7ec130141244cf8ec80149f0a08bca51b54934de9bd315cee8963275d39ef07d6e92683693fe989dca97dc565c1b6382b21fd4fafd84b897afce709c23dd1d3590809bcba523272e9330a7c15d4209dc4f1a5c9f20ac122b43e04644566251b9f921882c92d6d47c1133b28e021b5acfa3b36014ef61bfd056bd3167f1ff7dc391c6467ce792ab8479089f728d5ca2f9d6e4102fb18db5230a78201b6c0681188040a419c7af905b48dd858a8040a6e353ba5dd06715f62de455768ca29954952a", 0xf1}, {&(0x7f0000000400)="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", 0x929}], 0x4}}], 0x1, 0x4048884) mount(&(0x7f0000000300)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='efivarfs\x00', 0x200002, 0x0) 24.605483834s ago: executing program 4 (id=3838): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa380, 0x0) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x800000800, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f00000001c0)=0x3) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 24.460320678s ago: executing program 4 (id=3842): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) (async) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioprio_set$uid(0x3, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setns(0xffffffffffffffff, 0x2000000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0], 0x2}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x14d142, 0x0) sendfile(r2, r2, 0x0, 0x7ffff000) 23.484615321s ago: executing program 1 (id=3850): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x297f, 0x4) sendmmsg$inet6(r1, &(0x7f00000000c0), 0x0, 0x4008044) recvfrom(r1, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x12, r0, 0x28fd6000) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x10, 0x3e8, 0x300, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) 22.539349439s ago: executing program 1 (id=3855): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905", @ANYRES32], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 20.250184323s ago: executing program 1 (id=3871): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)={0x498d0bb79697d364, 0x140, 0x8}, 0x18) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB='\b\x00&'], 0x2c}}, 0x80) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x801) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc1004110, &(0x7f0000000040)={0x0, "8dd2356a9ebb85c49090d8e7251a8f47261a8f4797bf8ba7ff669b27d2af3ae0d402a46e4e967621c2c9fd4f42a31536849f6717859f6717c7862a799260eda3"}) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000240)={0xffff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x20a02, 0x0) pwritev(r8, &(0x7f0000001280)=[{0x0}, {0x0}, {&(0x7f0000001080)="2b97", 0x2}], 0x3, 0x0, 0xfffffffe) 18.648676235s ago: executing program 3 (id=3875): creat(&(0x7f0000001380)='./file0\x00', 0x12c) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000000, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xeb9a0000) (async) process_madvise(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1, 0x3, 0x0) (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8043, 0x0) 18.633511626s ago: executing program 3 (id=3876): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b4000000000480004"], 0x248}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="19a8216a07e3"}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec971212302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 18.540999944s ago: executing program 1 (id=3877): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000240)={0x0, 0x1, r0, 0x6}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000001100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f00000100000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 18.406069178s ago: executing program 1 (id=3879): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000c00)='/sys/kernel/hardlockup_count', 0x8000, 0x0) read$msr(r0, &(0x7f0000000c40)=""/4096, 0x1000) r1 = socket(0x18, 0xa, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000040)={0x0, 0xffe00000}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r2, 0xc, 0x30}, &(0x7f0000000240)=0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={r3, 0x0, &(0x7f0000000040)}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r7, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r13, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) read$FUSE(r7, &(0x7f00000005c0)={0x2020}, 0x2020) sendmsg$tipc(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x881}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x28, r12, 0x5, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x4004000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @empty, 0x4e23, 0x2, 'sed\x00', 0xe, 0x8, 0x2c}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x1, 0x7, 0x7fffffff, 0x4}}, 0x44) ioctl$KVM_RUN(r10, 0xae80, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r5, 0x80000001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x7d, &(0x7f0000000280)={r16, 0x20000a}, 0x8) 18.232493093s ago: executing program 5 (id=3881): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) fadvise64(r0, 0x3, 0x3, 0x5) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(r2, r2, 0xee00) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 18.229738467s ago: executing program 5 (id=3882): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x6, 0x1, 0x0, 0xfffffffffffffffc, 0x7f, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0xc9, 0x0, 0x4, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000000002000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 18.189284835s ago: executing program 3 (id=3883): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000008002, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x207) tee(r2, r0, 0x151, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000008002, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) sendfile(r1, r0, 0x0, 0x207) (async) tee(r2, r0, 0x151, 0x4) (async) 18.114799002s ago: executing program 3 (id=3884): creat(&(0x7f0000000140)='./file0\x00', 0x71) syz_usb_connect(0x0, 0x4f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ff5b34000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x2505, 0x220, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xb, 0x60, 0xe0, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x1, 0x0, 0x7, {0x9, 0x21, 0x101, 0xb, 0x1, {0x22, 0x84d}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x5f, 0x8}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x4, 0x5, 0x8, 0x10, 0x4}, 0x3a, &(0x7f00000001c0)={0x5, 0xf, 0x3a, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf, 0x8, 0x7}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x6, 0x4, 0x1}, @ssp_cap={0x10, 0x10, 0xa, 0x7f, 0x1, 0x0, 0xf00, 0x3, [0x30]}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0xe, 0xb, 0x98d}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1f, 0xa, 0x9}]}, 0x4, [{0x5f, &(0x7f0000000200)=@string={0x5f, 0x3, "84f70c325c3129151a2d424b4f2869f38337f91eb9d12766c9d3842e854b7f7c1a4ef6b0da058bfd804b2ebb4ea56a34d71b846d610a74b41e8c831bb5c1f2bbb0ce7aa88719f979cbf1b57003ff4a5347044ff8fefd8d484c1ca045b0"}}, {0xda, &(0x7f0000000280)=@string={0xda, 0x3, "6a9fa832f19213872b41d4c26e9a31758093bd6b26cf023831b3c8ea8f7c3fa6a561fc6d4953c534e8ed0a8dfb5332ff059ca9719ec373125cef260ad1251007905f2409cc2f87c6773cf85417af3de44aeb022b32bb6610f0f2d4fc746b4fc23e0c2f413c9184a7dcf53fa0eded79e20ac37ffcdfa7650eb30b5ddcf12a7913cbfbd2902e0fdb42c593f1b21a67c3e3171836dab140f40dcfc6fd8417e28035c4d76110f54842f07b82cf33069f1d6685f24d957e8c2c6cfaca95c2557a3a0f1623b5f5697a4b49eaa85f2f394795cafc425467bcdcaa53"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x140a}}]}) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 17.960627297s ago: executing program 5 (id=3885): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000000000000000000000002c000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 17.391814254s ago: executing program 5 (id=3886): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x80082102, &(0x7f0000000240)={0x0, 0x1, r0, 0x6}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000002000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f00000100000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 17.227711974s ago: executing program 5 (id=3887): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0x8004500f, &(0x7f00000001c0)) mq_open(&(0x7f0000000000)='[\\\\&-)\x00', 0x40, 0x180, &(0x7f0000000040)={0x8, 0x4}) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x2}], 0x2, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x10, 0x2, 0x3}, 0x18, 0x3) openat(r0, &(0x7f0000000140)='./file0\x00', 0x8002, 0x121) 16.920249501s ago: executing program 5 (id=3888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000440}, 0x4001) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x4000000) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x36}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xf8}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000084) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x5, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x15, 0x8001, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6d13ea3bc51c1357) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x2c}}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) write$tun(r7, &(0x7f0000000b80)={@val={0x0, 0x88c7}, @val={0x1, 0x80, 0x8, 0x4, 0x0, 0xfffb}, @ipv6=@generic={0xd, 0x6, "39d1ce", 0x11b8, 0x4, 0xff, @loopback, @empty, {[@srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x10, 0xa0a, [@loopback, @dev={0xfe, 0x80, '\x00', 0x29}, @dev={0xfe, 0x80, '\x00', 0x39}]}, @routing={0x67, 0xe, 0x0, 0x7, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x11}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x2b, 0x0, 0x2, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x3c, 0xa, '\x00', [@generic={0xde, 0x36, "2c7694563c7ec735e0cb72bb14b1e8869e6c0db33a3de62a89ed5c3f66f8c76bff6bf8dfe1cdbf7ee7e42c68bc89c1178f76a78448f2"}, @calipso={0x7, 0x18, {0x0, 0x4, 0xb5, 0x2, [0x3, 0x135]}}, @ra={0x5, 0x2, 0x8}]}, @routing={0x2b, 0x6, 0x0, 0x95, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @local}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x6, 0x10, 0xfff7, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty]}], "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"}}}, 0x11ee) recvmsg(r5, &(0x7f0000002040)={&(0x7f0000001d80)=@in, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/79, 0x4f}, {&(0x7f0000001e80)=""/72, 0x48}, {&(0x7f0000001f00)}], 0x3, &(0x7f0000001f80)=""/176, 0xb0}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000020c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x48084) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x40402}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x40, r3, 0x200, 0x0, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000002580)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x88, r9, 0x204, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x28, 0x140d, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x8004) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000002940)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002900)={&(0x7f00000027c0)={0x130, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0xf3, 0x19, "8be02c62afe4dbc447dab793150da4e89fd2c070ee156ecaae9843c1aded9f7b477199e830e4ddf3d95d288cdb910031882411cc94206ebde09ec9921c1ef2a29702190b81e91bb2a58b52b66fbb49422dacf55e0bd7b2c9648586580d38da9bf487780c278c419ab100e2583adcd4a93b2b92bc242e621be5693d43235dc49e22b17aeeaa243d51329e22f53e07f89aa229ab622e3b93e4147327c9f75241e18a5b9bf227998bc89c2c950bebd3512f7ffc6463be4a37e931f92794aff78cbe039b62e6888fd9c182f4c4bd3abbbf6799defb4ebec3e6c11089e2ae527e2dc1d340e9f8c79d02a479c23d696efba6"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x84) 16.294906946s ago: executing program 3 (id=3889): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x3}, 0x8) sendto$inet(r0, &(0x7f0000000100)="ab", 0x854d, 0x44, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/resume_offset', 0x0, 0x0) read$dsp(r1, &(0x7f0000000000)=""/110, 0x6e) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 16.17015273s ago: executing program 1 (id=3890): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b4000000000480004"], 0x248}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="19a8216a07e3"}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec972812302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 16.096573999s ago: executing program 3 (id=3891): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r1, &(0x7f0000004280)=[{{&(0x7f0000000000)=@isdn, 0x80, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=""/141, 0x8d}, 0x6}, {{0x0, 0x0, 0x0}, 0x13f}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000001fc0)=""/229, 0xe5}, {&(0x7f0000002100)=""/9, 0x9}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/108, 0x6c}, {&(0x7f0000002300)=""/20, 0x14}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x6}}], 0x4, 0x40002000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001480), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={0x3c, r3, 0x25, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x40}}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x4000810) 1.224785289s ago: executing program 34 (id=3888): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r2, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000440}, 0x4001) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x4000000) sendmsg$NFC_CMD_START_POLL(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0x40}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x36}, @NFC_ATTR_TM_PROTOCOLS={0x8, 0xe, 0xf8}, @NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x20}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4000084) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000380), r1) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r3, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x44, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}]}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x48, 0x5, 0x6, 0x0, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x15, 0x8001, @udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x6d13ea3bc51c1357) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x48, r3, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PID={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4880) sendmsg$IEEE802154_LIST_IFACE(r1, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x4c, r2, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x40000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000b00)={&(0x7f0000000a40), 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x2c, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x4}]}, 0x2c}}, 0x80) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000b40), 0x2, 0x0) write$tun(r7, &(0x7f0000000b80)={@val={0x0, 0x88c7}, @val={0x1, 0x80, 0x8, 0x4, 0x0, 0xfffb}, @ipv6=@generic={0xd, 0x6, "39d1ce", 0x11b8, 0x4, 0xff, @loopback, @empty, {[@srh={0x33, 0x6, 0x4, 0x3, 0x3, 0x10, 0xa0a, [@loopback, @dev={0xfe, 0x80, '\x00', 0x29}, @dev={0xfe, 0x80, '\x00', 0x39}]}, @routing={0x67, 0xe, 0x0, 0x7, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x11}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x2b, 0x0, 0x2, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x3c, 0xa, '\x00', [@generic={0xde, 0x36, "2c7694563c7ec735e0cb72bb14b1e8869e6c0db33a3de62a89ed5c3f66f8c76bff6bf8dfe1cdbf7ee7e42c68bc89c1178f76a78448f2"}, @calipso={0x7, 0x18, {0x0, 0x4, 0xb5, 0x2, [0x3, 0x135]}}, @ra={0x5, 0x2, 0x8}]}, @routing={0x2b, 0x6, 0x0, 0x95, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x43}, @ipv4={'\x00', '\xff\xff', @local}]}, @srh={0x3b, 0xc, 0x4, 0x6, 0x6, 0x10, 0xfff7, [@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty]}], "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"}}}, 0x11ee) recvmsg(r5, &(0x7f0000002040)={&(0x7f0000001d80)=@in, 0x80, &(0x7f0000001f40)=[{&(0x7f0000001e00)=""/79, 0x4f}, {&(0x7f0000001e80)=""/72, 0x48}, {&(0x7f0000001f00)}], 0x3, &(0x7f0000001f80)=""/176, 0xb0}, 0x40) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000020c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44044}, 0x48084) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x1c, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000002380)={&(0x7f00000022c0)={0x10, 0x0, 0x0, 0x40402}, 0xc, &(0x7f0000002340)={&(0x7f0000002300)={0x40, r3, 0x200, 0x0, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002400), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002440)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000002580)={&(0x7f00000023c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002540)={&(0x7f0000002480)={0x88, r9, 0x204, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x30}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x9}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xc}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x27}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x53}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}]}, 0x88}, 0x1, 0x0, 0x0, 0x40080c0}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r5, &(0x7f0000002680)={&(0x7f00000025c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002640)={&(0x7f0000002600)={0x28, 0x140d, 0x4, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0xc001}, 0x8004) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000002940)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002900)={&(0x7f00000027c0)={0x130, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_SE_APDU={0xf3, 0x19, "8be02c62afe4dbc447dab793150da4e89fd2c070ee156ecaae9843c1aded9f7b477199e830e4ddf3d95d288cdb910031882411cc94206ebde09ec9921c1ef2a29702190b81e91bb2a58b52b66fbb49422dacf55e0bd7b2c9648586580d38da9bf487780c278c419ab100e2583adcd4a93b2b92bc242e621be5693d43235dc49e22b17aeeaa243d51329e22f53e07f89aa229ab622e3b93e4147327c9f75241e18a5b9bf227998bc89c2c950bebd3512f7ffc6463be4a37e931f92794aff78cbe039b62e6888fd9c182f4c4bd3abbbf6799defb4ebec3e6c11089e2ae527e2dc1d340e9f8c79d02a479c23d696efba6"}, @NFC_ATTR_SE_INDEX={0x8}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x130}, 0x1, 0x0, 0x0, 0x1}, 0x84) 93.365644ms ago: executing program 35 (id=3890): openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b4000000000480004"], 0x248}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="19a8216a07e3"}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec972812302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 0s ago: executing program 36 (id=3891): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000080)=0x2, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4b, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x20080c4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r1, &(0x7f0000004280)=[{{&(0x7f0000000000)=@isdn, 0x80, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000001c00), 0x0, &(0x7f0000001c40)=""/141, 0x8d}, 0x6}, {{0x0, 0x0, 0x0}, 0x13f}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000001fc0)=""/229, 0xe5}, {&(0x7f0000002100)=""/9, 0x9}, {&(0x7f0000002180)=""/204, 0xcc}, {&(0x7f0000002280)=""/108, 0x6c}, {&(0x7f0000002300)=""/20, 0x14}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x6}}], 0x4, 0x40002000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000001480), r2) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000014c0)={0x3c, r3, 0x25, 0x70bd28, 0x25dfdbfe, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r3, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x40}}]}, 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x4000810) kernel console output (not intermixed with test programs): [ 574.709988][ T2155] usb 2-1: USB disconnect, device number 119 [ 574.721571][ T5931] usb 5-1: Cannot set autoneg [ 574.729282][ T5931] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 574.747852][ T5839] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 574.770008][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.776977][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.779647][ T5839] usb 6-1: config 0 has an invalid descriptor of length 182, skipping remainder of the config [ 574.783823][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.800261][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.806710][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.813038][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.819773][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.826497][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.829992][ T5839] usb 6-1: config 0 has no interface number 0 [ 574.833204][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.833690][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.852457][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.858784][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.866104][T16676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.874849][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.874877][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.875146][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.875165][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.875407][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.875427][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.875698][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.875715][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.875953][ C0] cdc_mbim 4-1:1.0: nonzero urb status received: -71 [ 574.875971][ C0] cdc_mbim 4-1:1.0: wdm_int_callback - 0 bytes [ 574.879640][ T5839] usb 6-1: too many endpoints for config 0 interface 41 altsetting 205: 248, using maximum allowed: 30 [ 574.894593][T16676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.929493][ T5839] usb 6-1: config 0 interface 41 altsetting 205 has 0 endpoint descriptors, different from the interface descriptor's value: 248 [ 574.935233][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.944541][ T5931] usb 5-1: USB disconnect, device number 68 [ 574.967218][ T5839] usb 6-1: config 0 interface 41 has no altsetting 0 [ 574.996777][ T5839] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 574.996806][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.996826][ T5839] usb 6-1: Product: syz [ 574.996841][ T5839] usb 6-1: Manufacturer: syz [ 574.996856][ T5839] usb 6-1: SerialNumber: syz [ 575.011976][ T5839] usb 6-1: config 0 descriptor?? [ 575.125703][T16698] Bluetooth: hci3: command 0x0406 tx timeout [ 575.712436][ T5839] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -22 [ 575.754669][ T5839] usb 6-1: USB disconnect, device number 35 [ 575.890829][ T1332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 575.956153][ T1332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 575.996640][ T1332] bond0 (unregistering): Released all slaves [ 576.066371][ T5926] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, 42:42:42:42:42:42 [ 576.143292][ T5926] usb 4-1: USB disconnect, device number 5 [ 576.189648][ T5926] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 576.318910][ T5926] wwan wwan0: port wwan0mbim0 disconnected [ 576.564467][T16796] syz.5.3217: attempt to access beyond end of device [ 576.564467][T16796] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 576.589824][T16796] hpfs: hpfs_map_sector(): read error [ 576.684829][T16803] omfs: Invalid superblock (0) [ 576.814080][T16805] zonefs (rnullb0) ERROR: Not a zoned block device [ 576.928222][T16813] vivid-000: ================= START STATUS ================= [ 576.962143][T16813] vivid-000: Interlaced VBI Format: false [ 576.989576][T16815] vcan0: entered promiscuous mode [ 577.011167][T16813] vivid-000: ================== END STATUS ================== [ 577.135284][T16818] overlayfs: missing 'lowerdir' [ 577.336119][ T1332] hsr_slave_0: left promiscuous mode [ 577.358769][ T1332] hsr_slave_1: left promiscuous mode [ 577.365086][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.372541][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.382441][ T1332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.383346][ T5926] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 577.395336][ T1332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.423463][ T5927] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 577.436834][ T1332] veth1_macvtap: left promiscuous mode [ 577.442584][ T1332] veth0_macvtap: left promiscuous mode [ 577.451682][ T1332] veth1_vlan: left promiscuous mode [ 577.460083][ T1332] >: left promiscuous mode [ 577.465338][ T43] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 577.558647][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 577.580976][ T5926] usb 4-1: config 0 has no interfaces? [ 577.593733][ T5927] usb 2-1: Using ep0 maxpacket: 16 [ 577.609235][ T5926] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 577.633955][ T43] usb 6-1: device descriptor read/64, error -71 [ 577.635206][ T5926] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.653461][ T5927] usb 2-1: config 128 has an invalid interface number: 216 but max is 1 [ 577.672347][ T5927] usb 2-1: config 128 has an invalid interface number: 191 but max is 1 [ 577.700424][ T5926] usb 4-1: config 0 descriptor?? [ 577.711294][ T5927] usb 2-1: config 128 has no interface number 0 [ 577.724443][ T5927] usb 2-1: config 128 has no interface number 1 [ 577.737741][ T5927] usb 2-1: config 128 interface 216 altsetting 6 endpoint 0xB has an invalid bInterval 253, changing to 11 [ 577.760068][ T5927] usb 2-1: config 128 interface 216 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 577.772947][ T5927] usb 2-1: config 128 interface 216 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 577.788945][ T5927] usb 2-1: config 128 interface 216 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 577.835747][ T5927] usb 2-1: config 128 interface 216 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 577.868428][ T5927] usb 2-1: config 128 interface 216 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 577.883255][ T43] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 577.891961][ T5927] usb 2-1: config 128 interface 191 altsetting 4 bulk endpoint 0xE has invalid maxpacket 32 [ 577.908649][ T5927] usb 2-1: config 128 interface 191 altsetting 4 has a duplicate endpoint with address 0xB, skipping [ 577.919937][ T5927] usb 2-1: config 128 interface 216 has no altsetting 0 [ 577.949255][ T5927] usb 2-1: config 128 interface 191 has no altsetting 0 [ 577.967117][ T10] usb 4-1: USB disconnect, device number 6 [ 577.983875][ T5927] usb 2-1: New USB device found, idVendor=0499, idProduct=5001, bcdDevice=60.11 [ 577.995215][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.019043][ T5927] usb 2-1: Product: é›çš“ì˜ç•èˆ·ã¯…ìŽ«é‚‹ç’±ä¸’é˜ƒâ¢¦à¶›ã¢ƒç¤›ï“šì¨‡á«‰ã††Ð˜à§¥ì…žâ¬ºéª—é¤ [ 578.036571][ T43] usb 6-1: device descriptor read/64, error -71 [ 578.037595][ T5927] usb 2-1: Manufacturer: ã°Š [ 578.051529][ T5927] usb 2-1: SerialNumber: è¡èƒ¿ïºŸå¶ˆî˜¥í¯ç¦€è½¿å£“å…’í”뙿隯垧幇ຶ憛䫖뤡跮é§ì¦’讹ꪌڋ圑íœìºˆã¦—撫仆ⱞḒ饩쮖ꂚ⠘ã£ê†€ë½¿è¾ªà½¡îˆ‰æ°¯ãžãµ–먣⚢邢æ—訜伥앦沟맬䦩ڊ紨퇭轲﷿ã´ê©î›ˆà±…ｼ劥횼䄓䔧,䤸쓵è¢ï¯ë°œà³‹éœ˜á¢‚䑘꧀鑿鈑걑é íƒ€ä¼è´‡æœ²è‹·åŽìŽ•à½Šä©˜ì¡²çºäºˆç—°ê²‰æ‚•î·‡ [ 578.053786][T16843] loop2: detected capacity change from 0 to 7 [ 578.083653][ C0] vkms_vblank_simulate: vblank timer overrun [ 578.127168][T12837] Dev loop2: unable to read RDB block 7 [ 578.132810][T12837] loop2: unable to read partition table [ 578.143486][ T43] usb usb6-port1: attempt power cycle [ 578.152601][T12837] loop2: partition table beyond EOD, truncated [ 578.184487][T16843] Dev loop2: unable to read RDB block 7 [ 578.190223][T16843] loop2: unable to read partition table [ 578.200763][T16843] loop2: partition table beyond EOD, truncated [ 578.227928][T16843] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 578.357445][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.373815][ T5927] snd-usb-audio 2-1:128.216: probe with driver snd-usb-audio failed with error -2 [ 578.426807][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 578.503373][ T43] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 578.533930][ T43] usb 6-1: device descriptor read/8, error -71 [ 578.536444][ T5927] snd-usb-audio 2-1:128.191: probe with driver snd-usb-audio failed with error -2 [ 578.603731][ T5927] usb 2-1: USB disconnect, device number 120 [ 578.690701][T12837] udevd[12837]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.191/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 578.773511][ T43] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 578.815200][ T43] usb 6-1: device descriptor read/8, error -71 [ 578.947325][ T43] usb usb6-port1: unable to enumerate USB device [ 578.993402][ T5927] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 579.147322][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 579.158688][ T5927] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 579.171330][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 579.194429][ T5927] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 579.204196][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.212256][ T5927] usb 4-1: Product: syz [ 579.217521][ T5927] usb 4-1: Manufacturer: syz [ 579.222355][ T5927] usb 4-1: SerialNumber: syz [ 579.234071][ T5927] usb 4-1: config 0 descriptor?? [ 579.248944][T16862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.256463][T16862] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 579.266903][ T5927] usb 4-1: ucan: probing device on interface #0 [ 579.353529][ T10] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 579.466447][ T5927] usb 4-1: ucan: could not read protocol version, ret=0 [ 579.478190][ T5927] usb 4-1: ucan: probe failed; try to update the device firmware [ 579.523435][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 579.539566][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.562720][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.574866][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 579.586056][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.600932][ T10] usb 2-1: config 0 descriptor?? [ 579.610648][ T10] hub 2-1:0.0: USB hub found [ 580.213848][ T1332] team0 (unregistering): Port device team_slave_1 removed [ 580.439621][ T1332] team0 (unregistering): Port device team_slave_0 removed [ 580.450858][T14181] smc: removing ib device syz2 [ 582.909334][ T10] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 582.938406][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 582.952235][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 583.054273][ T10] usb 2-1: USB disconnect, device number 121 [ 583.135917][T16884] sctp: [Deprecated]: syz.4.3238 (pid 16884) Use of struct sctp_assoc_value in delayed_ack socket option. [ 583.135917][T16884] Use struct sctp_sack_info instead [ 583.402773][T16894] binder: 16893:16894 ioctl c018620c 200000000140 returned -22 [ 583.453772][ T10] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 583.623935][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 583.637903][ T10] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 583.649332][ T10] usb 2-1: config 179 has no interface number 0 [ 583.656683][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 583.670211][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 583.682413][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 583.684948][T16898] Can't find a SQUASHFS superblock on rnullb0 [ 583.737192][ T10] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 583.753608][ T10] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 583.769954][ T10] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 583.782546][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 583.833459][T16886] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 584.030179][T16905] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3244'. [ 584.109637][ T1332] IPVS: stop unused estimator thread 0... [ 584.311719][ T10] usb 2-1: USB disconnect, device number 122 [ 584.311783][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 584.326130][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 584.476403][T16921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3247'. [ 584.632169][T16927] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3250'. [ 584.634526][ T10] usb 4-1: USB disconnect, device number 7 [ 584.753659][ T2155] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 584.903539][ T2155] usb 6-1: Invalid ep0 maxpacket: 32 [ 585.043433][ T2155] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 585.085302][T16942] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0) [ 585.206894][ T2155] usb 6-1: Invalid ep0 maxpacket: 32 [ 585.212676][ T2155] usb usb6-port1: attempt power cycle [ 585.365156][ T43] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 585.414563][T16957] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 585.422418][T16957] UDF-fs: Scanning with blocksize 4096 failed [ 585.423281][ T5878] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 585.498729][T16962] FAT-fs (rnullb0): bogus number of reserved sectors [ 585.505790][T16962] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 585.514333][ T43] usb 4-1: device descriptor read/64, error -71 [ 585.553382][ T2155] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 585.588076][ T2155] usb 6-1: Invalid ep0 maxpacket: 32 [ 585.597008][ T5878] usb 2-1: Using ep0 maxpacket: 32 [ 585.611365][ T5878] usb 2-1: config 58 has an invalid interface number: 91 but max is 3 [ 585.622480][ T5878] usb 2-1: config 58 contains an unexpected descriptor of type 0x2, skipping [ 585.632331][ T5878] usb 2-1: config 58 has an invalid descriptor of length 0, skipping remainder of the config [ 585.642891][ T5878] usb 2-1: config 58 has 1 interface, different from the descriptor's value: 4 [ 585.651950][ T5878] usb 2-1: config 58 has no interface number 0 [ 585.670702][ T5878] usb 2-1: config 58 interface 91 altsetting 8 endpoint 0xE has invalid maxpacket 536, setting to 64 [ 585.683704][ T5878] usb 2-1: config 58 interface 91 altsetting 8 bulk endpoint 0xF has invalid maxpacket 16 [ 585.694689][ T5878] usb 2-1: config 58 interface 91 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 585.705815][ T5878] usb 2-1: config 58 interface 91 altsetting 8 endpoint 0x3 has invalid wMaxPacketSize 0 [ 585.721624][ T5878] usb 2-1: config 58 interface 91 altsetting 8 has an endpoint descriptor with address 0x5F, changing to 0xF [ 585.733401][ T2155] usb 6-1: new low-speed USB device number 43 using dummy_hcd [ 585.741488][ T5878] usb 2-1: config 58 interface 91 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 585.752995][ T5878] usb 2-1: config 58 interface 91 altsetting 8 endpoint 0x8 has invalid maxpacket 512, setting to 64 [ 585.764411][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 585.772357][ T2155] usb 6-1: Invalid ep0 maxpacket: 32 [ 585.789749][ T5878] usb 2-1: config 58 interface 91 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 585.801441][ T2155] usb usb6-port1: unable to enumerate USB device [ 585.823204][ T5878] usb 2-1: config 58 interface 91 altsetting 8 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 585.834527][ T5878] usb 2-1: config 58 interface 91 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 585.845596][ T5878] usb 2-1: config 58 interface 91 altsetting 8 has 9 endpoint descriptors, different from the interface descriptor's value: 15 [ 585.862447][ T5878] usb 2-1: config 58 interface 91 has no altsetting 0 [ 585.879858][ T5878] usb 2-1: New USB device found, idVendor=0b05, idProduct=4202, bcdDevice=8c.ae [ 585.899220][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.910518][ T5878] usb 2-1: Product: à°Š [ 585.917794][ T5878] usb 2-1: Manufacturer: ꂀﮮ骜ȧ뛙⋜䩶剥虚寧࣫輜ß┅ᦶ㮕煘䮦ãƒìž¢æ®µé¡½î´ŸÆ–å¤ä¤‘쎭逮䘿郉砕쾩策ኆᢄ侮犲堜哛ì™â†·ì¼«ä®Œì±³æ‰ªá¡ Ð¾ë¦ˆë› ëšç¼³î¥žî£–á¹æŠë¾ªÛ—郞áºî¤ï¥Ÿçœ·ë§áº™â•»á…§å’®æ±„云塧훋é¹æ¤µè™²ìš§ì§¢ä¸°ïº¾êŸ—譮寬Π춉镔斂ᶎጥ堢⛌왑˵à¶ëžê¦–෋밄熻趨å£ç‘­ç¹¾å¤³ã›‚٪浶Ἵ [ 585.951315][ T43] usb 4-1: device descriptor read/64, error -71 [ 585.965522][ T5878] usb 2-1: SerialNumber: ဠ[ 585.978726][T16947] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 585.992595][T16947] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 586.075880][ T43] usb usb4-port1: attempt power cycle [ 586.082810][T16981] netlink: 14478 bytes leftover after parsing attributes in process `syz.4.3264'. [ 586.311366][T16990] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 586.323763][ T5878] usb 2-1: USB disconnect, device number 123 [ 586.413246][ T43] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 586.444151][ T43] usb 4-1: device descriptor read/8, error -71 [ 586.683456][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 586.713245][T17010] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 586.715521][ T43] usb 4-1: device descriptor read/8, error -71 [ 586.725531][T17010] qnx6: wrong signature (magic) in superblock #1. [ 586.737386][T17010] qnx6: unable to read the first superblock [ 586.836777][T17015] Mount JFS Failure: -22 [ 586.842384][T17015] jfs_mount failed w/return code = -22 [ 586.875533][ T43] usb usb4-port1: unable to enumerate USB device [ 586.896037][T17016] XFS (rnullb0): Invalid superblock magic number [ 586.927252][T17023] /dev/rnullb0: Can't open blockdev [ 587.591481][T17034] /dev/rnullb0: Can't open blockdev [ 587.601178][T17034] /dev/rnullb0: Can't open blockdev [ 587.618506][T17034] /dev/rnullb0: Can't open blockdev [ 587.632779][T17034] /dev/rnullb0: Can't open blockdev [ 587.646406][T17034] /dev/rnullb0: Can't open blockdev [ 587.658466][T17034] /dev/rnullb0: Can't open blockdev [ 587.677629][T17034] /dev/rnullb0: Can't open blockdev [ 587.694069][T17034] /dev/rnullb0: Can't open blockdev [ 587.703931][T17034] /dev/rnullb0: Can't open blockdev [ 587.718753][T17034] /dev/rnullb0: Can't open blockdev [ 587.725148][T17034] /dev/rnullb0: Can't open blockdev [ 587.731052][T17034] /dev/rnullb0: Can't open blockdev [ 587.737115][T17034] /dev/rnullb0: Can't open blockdev [ 587.742978][T17034] /dev/rnullb0: Can't open blockdev [ 587.751531][T17034] /dev/rnullb0: Can't open blockdev [ 587.769697][T17034] /dev/rnullb0: Can't open blockdev [ 587.784728][T17034] /dev/rnullb0: Can't open blockdev [ 587.800328][T17034] /dev/rnullb0: Can't open blockdev [ 587.816512][T17040] FAULT_INJECTION: forcing a failure. [ 587.816512][T17040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 587.821942][T17034] Mount JFS Failure: -22 [ 587.834778][T17040] CPU: 1 UID: 0 PID: 17040 Comm: syz.1.3278 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 587.834804][T17040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 587.834817][T17040] Call Trace: [ 587.834825][T17040] [ 587.834833][T17040] dump_stack_lvl+0x189/0x250 [ 587.834859][T17040] ? __pfx____ratelimit+0x10/0x10 [ 587.834888][T17040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.834910][T17040] ? __pfx__printk+0x10/0x10 [ 587.834930][T17040] ? __might_fault+0xb0/0x130 [ 587.834963][T17040] should_fail_ex+0x414/0x560 [ 587.834991][T17040] _copy_from_iter+0x1db/0x16f0 [ 587.835022][T17040] ? sock_alloc_send_pskb+0x875/0x990 [ 587.835053][T17040] ? __pfx__copy_from_iter+0x10/0x10 [ 587.835087][T17040] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 587.835117][T17040] skb_copy_datagram_from_iter+0xf5/0x720 [ 587.835150][T17040] ? skb_put+0x11b/0x210 [ 587.835175][T17040] tun_get_user+0x15c3/0x3ce0 [ 587.835231][T17040] ? aa_file_perm+0x11f/0xed0 [ 587.835254][T17040] ? __pfx_tun_get_user+0x10/0x10 [ 587.835283][T17040] ? aa_file_perm+0x11f/0xed0 [ 587.835303][T17040] ? aa_file_perm+0x3e7/0xed0 [ 587.835338][T17040] ? ref_tracker_alloc+0x318/0x460 [ 587.835362][T17040] ? __lock_acquire+0xab9/0xd20 [ 587.835390][T17040] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 587.835426][T17040] ? tun_get+0x1c/0x2f0 [ 587.835461][T17040] ? tun_get+0x1c/0x2f0 [ 587.835490][T17040] ? tun_get+0x1c/0x2f0 [ 587.835523][T17040] tun_chr_write_iter+0x113/0x200 [ 587.835567][T17040] vfs_write+0x54b/0xa90 [ 587.835596][T17040] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 587.835624][T17040] ? __pfx_vfs_write+0x10/0x10 [ 587.835658][T17040] ? __fget_files+0x2a/0x420 [ 587.835693][T17040] ksys_write+0x145/0x250 [ 587.835720][T17040] ? __pfx_ksys_write+0x10/0x10 [ 587.835741][T17040] ? rcu_is_watching+0x15/0xb0 [ 587.835767][T17040] ? do_syscall_64+0xbe/0x3b0 [ 587.835789][T17040] do_syscall_64+0xfa/0x3b0 [ 587.835805][T17040] ? lockdep_hardirqs_on+0x9c/0x150 [ 587.835832][T17040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.835851][T17040] ? clear_bhb_loop+0x60/0xb0 [ 587.835874][T17040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.835892][T17040] RIP: 0033:0x7ff01098e929 [ 587.835908][T17040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.835924][T17040] RSP: 002b:00007ff0117b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.835944][T17040] RAX: ffffffffffffffda RBX: 00007ff010bb5fa0 RCX: 00007ff01098e929 [ 587.835958][T17040] RDX: 000000000000fdef RSI: 00002000000005c0 RDI: 0000000000000003 [ 587.835970][T17040] RBP: 00007ff0117b7090 R08: 0000000000000000 R09: 0000000000000000 [ 587.835982][T17040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.835993][T17040] R13: 0000000000000000 R14: 00007ff010bb5fa0 R15: 00007ffdaef63d28 [ 587.836022][T17040] [ 587.836416][T17034] jfs_mount failed w/return code = -22 [ 587.875314][T17042] syz.4.3279: attempt to access beyond end of device [ 587.875314][T17042] loop4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 587.882725][T17034] Mount JFS Failure: -22 [ 587.886100][T17042] XFS (loop4): SB validate failed with error -5. [ 587.893581][T17034] jfs_mount failed w/return code = -22 [ 588.172763][T17034] Mount JFS Failure: -22 [ 588.177137][T17034] jfs_mount failed w/return code = -22 [ 588.183636][T17034] Mount JFS Failure: -22 [ 588.187927][T17034] jfs_mount failed w/return code = -22 [ 588.194368][T17034] Mount JFS Failure: -22 [ 588.198644][T17034] jfs_mount failed w/return code = -22 [ 588.205097][T17034] Mount JFS Failure: -22 [ 588.209382][T17034] jfs_mount failed w/return code = -22 [ 588.215707][T17034] Mount JFS Failure: -22 [ 588.219992][T17034] jfs_mount failed w/return code = -22 [ 588.226512][T17034] Mount JFS Failure: -22 [ 588.230805][T17034] jfs_mount failed w/return code = -22 [ 588.238012][T17034] Mount JFS Failure: -22 [ 588.242401][T17034] jfs_mount failed w/return code = -22 [ 588.248890][T17034] Mount JFS Failure: -22 [ 588.253235][T17034] jfs_mount failed w/return code = -22 [ 588.259617][T17034] Mount JFS Failure: -22 [ 588.262074][T17053] sctp: [Deprecated]: syz.3.3281 (pid 17053) Use of int in maxseg socket option. [ 588.262074][T17053] Use struct sctp_assoc_value instead [ 588.263959][T17034] jfs_mount failed w/return code = -22 [ 588.285058][T17034] Mount JFS Failure: -22 [ 588.289353][T17034] jfs_mount failed w/return code = -22 [ 588.296785][T17034] Mount JFS Failure: -22 [ 588.301069][T17034] jfs_mount failed w/return code = -22 [ 588.307617][T17034] Mount JFS Failure: -22 [ 588.311898][T17034] jfs_mount failed w/return code = -22 [ 588.318335][T17034] Mount JFS Failure: -22 [ 588.322608][T17034] jfs_mount failed w/return code = -22 [ 588.361858][T17049] batadv_slave_0: entered promiscuous mode [ 588.379384][T17050] batadv_slave_0: left promiscuous mode [ 588.783223][ T5878] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 588.875838][T17079] XFS (rnullb0): Invalid superblock magic number [ 588.940736][ T5878] usb 2-1: Using ep0 maxpacket: 8 [ 588.947752][ T5878] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 588.958649][ T5878] usb 2-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 588.971814][ T5878] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 588.989976][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.998213][ T43] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 589.015944][ T5878] usbtmc 2-1:16.0: bulk endpoints not found [ 589.163310][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 589.170800][ T43] usb 6-1: config index 0 descriptor too short (expected 59154, got 18) [ 589.179774][ T43] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 589.188196][ T43] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 589.199595][ T43] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 589.208715][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.217513][ T43] usb 6-1: Product: syz [ 589.221709][ T43] usb 6-1: Manufacturer: syz [ 589.226446][ T43] usb 6-1: SerialNumber: syz [ 589.233628][ T43] usb 6-1: config 0 descriptor?? [ 589.242777][ T43] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 589.584419][T17092] /dev/rnullb0: Can't open blockdev [ 590.420056][T17096] /dev/rnullb0: Can't open blockdev [ 590.519704][T17094] infiniband syz2: set active [ 590.527141][T17094] infiniband syz2: added team_slave_0 [ 590.535063][T17094] syz2: rxe_create_cq: returned err = -12 [ 590.540930][T17094] infiniband syz2: Couldn't create ib_mad CQ [ 590.551058][ T43] ssu100 6-1:0.0: probe with driver ssu100 failed with error -71 [ 590.559976][T17094] infiniband syz2: Couldn't open port 1 [ 590.575072][ T43] usb 6-1: USB disconnect, device number 44 [ 590.609492][T17094] RDS/IB: syz2: added [ 590.614943][T17094] smc: adding ib device syz2 with port count 1 [ 590.621175][T17094] smc: ib device syz2 port 1 has pnetid [ 591.416482][T17107] /dev/rnullb0: Can't open blockdev [ 591.538202][T17110] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.3296'. [ 591.557915][T17110] /dev/rnullb0: Can't open blockdev [ 591.603637][ T43] usb 2-1: USB disconnect, device number 124 [ 591.665951][T17112] /dev/rnullb0: Can't open blockdev [ 591.937540][T17127] /dev/rnullb0: Can't open blockdev [ 592.112787][T17138] /dev/rnullb0: Can't open blockdev [ 592.278076][T17140] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 592.465325][ T9] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 592.584607][ T5927] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 592.633199][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 592.645963][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 592.669378][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 592.685738][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice=f1.40 [ 592.695254][ T9] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 592.704724][ T9] usb 6-1: Product: syz [ 592.710352][T17165] loop2: detected capacity change from 0 to 7 [ 592.718957][T17165] Dev loop2: unable to read RDB block 7 [ 592.733566][ T9] usb 6-1: Manufacturer: syz [ 592.743247][ T5927] usb 5-1: device descriptor read/64, error -71 [ 592.749683][T17165] loop2: unable to read partition table [ 592.763404][T17165] loop2: partition table beyond EOD, truncated [ 592.775212][ T9] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 592.786505][T17165] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 592.983259][ T5927] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 593.036063][ T9] usb 6-1: USB disconnect, device number 45 [ 593.133202][ T5927] usb 5-1: device descriptor read/64, error -71 [ 593.263445][ T5927] usb usb5-port1: attempt power cycle [ 593.610070][ T5927] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 593.652936][ T5927] usb 5-1: device descriptor read/8, error -71 [ 593.678186][T17195] loop2: detected capacity change from 0 to 7 [ 593.687114][T12837] Dev loop2: unable to read RDB block 7 [ 593.692737][T12837] loop2: unable to read partition table [ 593.704809][T12837] loop2: partition table beyond EOD, truncated [ 593.714260][T17195] Dev loop2: unable to read RDB block 7 [ 593.719886][T17195] loop2: unable to read partition table [ 593.741748][T17195] loop2: partition table beyond EOD, truncated [ 593.757631][T17195] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 593.806088][T17197] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 593.895960][ T5927] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 593.934143][ T5927] usb 5-1: device descriptor read/8, error -71 [ 594.052101][T17214] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3332'. [ 594.067673][ T5927] usb usb5-port1: unable to enumerate USB device [ 594.074341][ T10] usb 2-1: new full-speed USB device number 125 using dummy_hcd [ 594.088397][T17214] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3332'. [ 594.098309][T17214] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3332'. [ 594.235957][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 594.250927][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 594.262165][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 594.275928][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 594.288969][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 594.298906][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.307141][ T10] usb 2-1: Product: syz [ 594.312737][ T10] usb 2-1: Manufacturer: syz [ 594.318247][T17224] loop2: detected capacity change from 0 to 7 [ 594.326076][ T10] usb 2-1: SerialNumber: syz [ 594.332271][T17224] Dev loop2: unable to read RDB block 7 [ 594.338159][T17224] loop2: unable to read partition table [ 594.346800][T17224] loop2: partition table beyond EOD, truncated [ 594.358429][T17224] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 594.565089][ T10] usb 2-1: 0:2 : does not exist [ 594.572431][ T10] usb 2-1: unit 6 not found! [ 594.589586][ T10] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 594.601715][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 594.626502][ T10] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 594.706156][ T10] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 594.730442][ T10] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 594.738976][T17233] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 594.759486][ T10] usb 2-1: USB disconnect, device number 125 [ 595.218954][ T30] audit: type=1800 audit(1750755547.049:2664): pid=17244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3343" name="/" dev="fuse" ino=1 res=0 errno=0 [ 595.458947][ T5878] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 595.623866][ T5878] usb 6-1: Using ep0 maxpacket: 32 [ 595.632968][T17265] Invalid source name [ 595.640861][ T5878] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 595.657622][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.670199][ T5878] usb 6-1: config 0 descriptor?? [ 595.689760][ T5878] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 595.713280][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 595.885579][ T5927] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 595.893386][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 595.901006][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 595.910736][ T10] usb 4-1: config 0 has no interface number 0 [ 595.920214][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 595.929567][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.937843][ T10] usb 4-1: Product: syz [ 595.942124][ T10] usb 4-1: Manufacturer: syz [ 595.946833][ T10] usb 4-1: SerialNumber: syz [ 595.955334][ T10] usb 4-1: config 0 descriptor?? [ 595.965049][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 596.053263][ T5927] usb 2-1: Using ep0 maxpacket: 8 [ 596.060862][ T5927] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 596.071314][ T5927] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 3 [ 596.085652][ T5927] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=f4.40 [ 596.093417][ T5878] gspca_nw80x: reg_r err -71 [ 596.099467][ T5878] nw80x 6-1:0.0: probe with driver nw80x failed with error -71 [ 596.100248][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.110904][ T5878] usb 6-1: USB disconnect, device number 46 [ 596.126598][ T5927] usb 2-1: Product: syz [ 596.130943][ T5927] usb 2-1: Manufacturer: syz [ 596.140707][ T5927] usb 2-1: SerialNumber: syz [ 596.167980][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 596.207873][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 596.412006][T17265] netlink: 'syz.1.3351': attribute type 10 has an invalid length. [ 596.429197][T17265] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.438091][T17265] team0: entered promiscuous mode [ 596.443291][T17265] team_slave_0: entered promiscuous mode [ 596.449144][T17265] team_slave_1: entered promiscuous mode [ 596.455630][T17265] bond0: (slave team0): Enslaving as an active interface with an up link [ 596.596740][ T5927] usb 2-1: interface 1 not found [ 596.610337][ T5927] usb 2-1: USB disconnect, device number 126 [ 596.637599][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 596.647736][ T980] usb 4-1: USB disconnect, device number 12 [ 596.659485][ T980] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 596.676719][ T980] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 596.692973][ T980] quatech2 4-1:0.51: device disconnected [ 617.436186][T17288] /dev/rnullb0: Can't open blockdev [ 617.586803][T17299] /dev/rnullb0: Can't open blockdev [ 617.623244][ T10] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 617.739741][T17305] /dev/rnullb0: Can't open blockdev [ 617.803720][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 617.815078][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9 [ 617.846989][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024 [ 617.880176][T17312] /dev/sg0: Can't lookup blockdev [ 617.891319][ T10] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 617.915534][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.945829][ T10] usb 6-1: Product: syz [ 617.954052][ T10] usb 6-1: Manufacturer: syz [ 617.961730][ T10] usb 6-1: SerialNumber: syz [ 617.985816][ T10] usb 6-1: config 0 descriptor?? [ 618.015209][ T10] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 618.174883][T17323] /dev/rnullb0: Can't open blockdev [ 618.310140][T17332] syz.4.3366: attempt to access beyond end of device [ 618.310140][T17332] loop4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 618.319249][ T10] usb 6-1: USB disconnect, device number 47 [ 618.342084][ T1341] usb 6-1: Failed to read usb control message: -71 [ 618.363399][T17332] EXT4-fs (loop4): unable to read superblock [ 618.376288][ T1341] usb 6-1: Unable to read the bmi data from the device: -71 [ 618.403764][T17334] syzkaller1: entered promiscuous mode [ 618.409284][T17334] syzkaller1: entered allmulticast mode [ 618.423202][ T1341] usb 6-1: unable to get target info from device [ 618.443368][ T1341] usb 6-1: could not get target info (-71) [ 618.449252][ T1341] usb 6-1: could not probe fw (-71) [ 618.513006][T17334] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3368'. [ 618.707037][T17350] /dev/rnullb0: Can't open blockdev [ 619.123625][ T10] usb 6-1: new full-speed USB device number 48 using dummy_hcd [ 619.315306][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 619.327361][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 619.343387][ T5839] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 619.383235][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 619.413228][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.432524][ T10] usb 6-1: config 0 descriptor?? [ 619.453868][T17354] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 619.467323][ T10] hub 6-1:0.0: USB hub found [ 619.558037][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 619.589893][ T5839] usb 4-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 619.620126][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.641678][ T5839] usb 4-1: config 0 descriptor?? [ 619.679514][ T10] hub 6-1:0.0: 2 ports detected [ 619.748079][T17375] NILFS (rnullb0): couldn't find nilfs on the device [ 619.897785][T17382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.910956][T17382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 619.988137][T17388] syz.1.3380: attempt to access beyond end of device [ 619.988137][T17388] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 619.997914][ T10] hub 6-1:0.0: set hub depth failed [ 620.004290][T17388] FAT-fs (loop1): unable to read boot sector [ 620.049594][ T10] usb 6-1: USB disconnect, device number 48 [ 620.129889][ T5839] input: HID 28bd:0933 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0933.002B/input/input69 [ 620.143374][T17393] netlink: 'syz.5.3381': attribute type 5 has an invalid length. [ 620.161493][T17393] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3381'. [ 620.185352][T17393] netlink: 'syz.5.3381': attribute type 1 has an invalid length. [ 620.187684][T17396] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3379'. [ 620.234957][T17393] dlm: no locking on control device [ 620.235985][T17396] Mount JFS Failure: -22 [ 620.250967][T17396] jfs_mount failed w/return code = -22 [ 620.254356][T17400] /dev/rnullb0: Can't open blockdev [ 620.295929][ T5839] uclogic 0003:28BD:0933.002B: input,hidraw0: USB HID vff.ff Mouse [HID 28bd:0933] on usb-dummy_hcd.3-1/input0 [ 620.329114][T17361] exFAT-fs (rnullb0): invalid boot record signature [ 620.355908][T17361] exFAT-fs (rnullb0): failed to read boot sector [ 620.374313][T17361] exFAT-fs (rnullb0): failed to recognize exfat type [ 620.718331][T17418] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3384'. [ 620.718410][T17418] bridge_slave_1: left allmulticast mode [ 620.718429][T17418] bridge_slave_1: left promiscuous mode [ 620.729790][T17418] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.790609][T17418] bridge_slave_0: left allmulticast mode [ 620.790658][T17418] bridge_slave_0: left promiscuous mode [ 620.790960][T17418] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.953375][ T5878] usb 4-1: USB disconnect, device number 13 [ 621.052392][T17419] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3376'. [ 621.494884][T17441] (syz.4.3389,17441,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 621.494914][T17441] (syz.4.3389,17441,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 621.510045][T17442] (syz.4.3389,17442,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 621.566859][T17442] (syz.4.3389,17442,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 621.718742][T17446] omfs: Invalid superblock (0) [ 621.726963][T17446] omfs: Invalid superblock (0) [ 621.727686][T17446] omfs: Invalid superblock (0) [ 621.736057][T17446] omfs: Invalid superblock (0) [ 621.736818][T17446] omfs: Invalid superblock (0) [ 621.737598][T17446] omfs: Invalid superblock (0) [ 621.741977][T17446] omfs: Invalid superblock (0) [ 621.742786][T17446] omfs: Invalid superblock (0) [ 621.752345][T17446] omfs: Invalid superblock (0) [ 621.755863][T17446] omfs: Invalid superblock (0) [ 621.756613][T17446] omfs: Invalid superblock (0) [ 621.757415][T17446] omfs: Invalid superblock (0) [ 621.764116][T17446] omfs: Invalid superblock (0) [ 621.764855][T17446] omfs: Invalid superblock (0) [ 621.765595][T17446] omfs: Invalid superblock (0) [ 621.766230][T17446] omfs: Invalid superblock (0) [ 621.766888][T17446] omfs: Invalid superblock (0) [ 621.767584][T17446] omfs: Invalid superblock (0) [ 621.768210][T17446] omfs: Invalid superblock (0) [ 621.768918][T17446] omfs: Invalid superblock (0) [ 621.769633][T17446] omfs: Invalid superblock (0) [ 621.770336][T17446] omfs: Invalid superblock (0) [ 621.771034][T17446] omfs: Invalid superblock (0) [ 621.771786][T17446] omfs: Invalid superblock (0) [ 621.772534][T17446] omfs: Invalid superblock (0) [ 621.789170][T17446] omfs: Invalid superblock (0) [ 621.789981][T17446] omfs: Invalid superblock (0) [ 621.792941][T17446] omfs: Invalid superblock (0) [ 621.796787][T17446] omfs: Invalid superblock (0) [ 621.802309][T17446] omfs: Invalid superblock (0) [ 621.806073][T17446] omfs: Invalid superblock (0) [ 621.812901][T17446] omfs: Invalid superblock (0) [ 621.945372][T17446] omfs: Invalid superblock (0) [ 621.946084][T17446] omfs: Invalid superblock (0) [ 621.960232][T17446] omfs: Invalid superblock (0) [ 621.961002][T17446] omfs: Invalid superblock (0) [ 621.961754][T17446] omfs: Invalid superblock (0) [ 621.962515][T17446] omfs: Invalid superblock (0) [ 621.963391][T17446] omfs: Invalid superblock (0) [ 621.964154][T17446] omfs: Invalid superblock (0) [ 621.964855][T17446] omfs: Invalid superblock (0) [ 621.965572][T17446] omfs: Invalid superblock (0) [ 621.966257][T17446] omfs: Invalid superblock (0) [ 621.967013][T17446] omfs: Invalid superblock (0) [ 622.016582][T17446] omfs: Invalid superblock (0) [ 622.017359][T17446] omfs: Invalid superblock (0) [ 622.018350][T17446] omfs: Invalid superblock (0) [ 622.019099][T17446] omfs: Invalid superblock (0) [ 622.019829][T17446] omfs: Invalid superblock (0) [ 622.020533][T17446] omfs: Invalid superblock (0) [ 622.021361][T17446] omfs: Invalid superblock (0) [ 622.024301][T17446] omfs: Invalid superblock (0) [ 622.063900][T17446] omfs: Invalid superblock (0) [ 622.064641][T17446] omfs: Invalid superblock (0) [ 622.065306][T17446] omfs: Invalid superblock (0) [ 622.066018][T17446] omfs: Invalid superblock (0) [ 622.066706][T17446] omfs: Invalid superblock (0) [ 622.067419][T17446] omfs: Invalid superblock (0) [ 622.068066][T17446] omfs: Invalid superblock (0) [ 622.068837][T17446] omfs: Invalid superblock (0) [ 622.069518][T17446] omfs: Invalid superblock (0) [ 622.070225][T17446] omfs: Invalid superblock (0) [ 622.119422][ T5839] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 622.122287][T17446] omfs: Invalid superblock (0) [ 622.134309][T17446] omfs: Invalid superblock (0) [ 622.141303][T17446] omfs: Invalid superblock (0) [ 622.285379][ T5839] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 622.285409][ T5839] usb 5-1: config 0 has no interface number 0 [ 622.287603][ T5839] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 622.287633][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.287655][ T5839] usb 5-1: Product: syz [ 622.287671][ T5839] usb 5-1: Manufacturer: syz [ 622.287687][ T5839] usb 5-1: SerialNumber: syz [ 622.290668][ T5839] usb 5-1: config 0 descriptor?? [ 622.366749][T17455] binder: 17453:17455 ioctl c0306201 200000000640 returned -22 [ 622.382195][T17455] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 622.382222][T17455] UDF-fs: Scanning with blocksize 4096 failed [ 622.514466][ T5839] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 622.517009][ T5839] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 622.517341][ T5839] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 622.517395][ T5839] usb 5-1: media controller created [ 622.572932][ T5839] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 622.733775][ T5878] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 622.775261][T17470] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.3397'. [ 622.783951][T17470] Mount JFS Failure: -22 [ 622.789225][T17470] jfs_mount failed w/return code = -22 [ 622.906001][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 622.936762][ T5878] usb 2-1: New USB device found, idVendor=044e, idProduct=121e, bcdDevice= 0.00 [ 622.955281][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.979779][ T5878] usb 2-1: config 0 descriptor?? [ 622.983796][ T5927] usb 5-1: USB disconnect, device number 73 [ 623.337716][T17483] program syz.3.3401 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 623.408713][ T5878] hid-alps 0003:044E:121E.002C: item fetching failed at offset 0/3 [ 623.439570][ T5878] hid-alps 0003:044E:121E.002C: parse failed [ 623.474066][ T5878] hid-alps 0003:044E:121E.002C: probe with driver hid-alps failed with error -22 [ 623.500939][ T5878] usb 2-1: USB disconnect, device number 127 [ 623.907571][ T5878] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 624.065274][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.077011][ T5878] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.087568][ T5878] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.100809][ T5878] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.109978][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.120714][ T5878] usb 2-1: config 0 descriptor?? [ 624.213195][ T2155] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 624.247747][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.254341][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.322799][T17494] loop2: detected capacity change from 0 to 7 [ 624.332556][T17494] Dev loop2: unable to read RDB block 7 [ 624.338248][T17494] loop2: unable to read partition table [ 624.344121][ T2155] usb 6-1: device descriptor read/64, error -71 [ 624.347202][T17494] loop2: partition table beyond EOD, truncated [ 624.356882][T17494] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 624.474915][T17500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3407'. [ 624.487920][T17500] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 624.495513][T17500] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 624.535314][ T5878] plantronics 0003:047F:FFFF.002D: unknown main item tag 0x0 [ 624.555792][ T5878] plantronics 0003:047F:FFFF.002D: No inputs registered, leaving [ 624.583335][ T2155] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 624.592393][ T5878] plantronics 0003:047F:FFFF.002D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 624.693221][ T5839] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 624.744594][ T2155] usb 6-1: device descriptor read/64, error -71 [ 624.843329][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 624.863413][ T5839] usb 5-1: config 1 interface 0 altsetting 127 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 624.876985][ T2155] usb usb6-port1: attempt power cycle [ 624.883768][ T5839] usb 5-1: config 1 interface 0 has no altsetting 0 [ 624.895480][ T5839] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40 [ 624.904958][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.913191][ T5839] usb 5-1: Product: 胱䠧ꯅ䄙᪼ᣀꀳ鋚緒蘬粚é¦â¸¡æš›ïŽ¼ë“šî¬çœ¸à°¨â½™ì¥…å¾î‘ˆâ€”ãµêŠ™æ£ºîŒ“ê»åŸî¶·êŽµà¯“뗛苧栫㗯ä½â˜§ê£ä§¬ä³‰ãª§â—ê¨ä¼šä®•â¸ˆëµ‰äŸ„탺墚쀿ꃂ匸ﴎè­ã¥¬ï•€ã¶™ä…½â–ƒâ‘“듺쯓㈋橊樾⬵㦰ﲯ便ã£ä¬›ëŽº [ 624.934895][T17514] binder: 17513:17514 unknown command 0 [ 624.940605][ T5839] usb 5-1: Manufacturer: ﬞ鮎꿵è¸ï–²ã¸žâ¥‚უĩ㾛串笨ﾻ掖äˆêƒšà±¬ç©«âˆ¸ì ƒæ«”轞㺉慧㨙ï³èµ„﹑쀔浑ﳱ臉妬奃ﴜ㘨çŽê˜‰ï¶†è¨¢â•„Ѥㅹ눟帜㭕㡺粩ïƒâ¼ìŠ°â‘⽰ᵬ蓵欦텑é€é¶ŸíŒ¢ä¨­ä€ë®æ¡¡á®½ì«–ᤒ업ꃥɋï»ç”°à´ƒè·ƒã‹–ꥉ룷䂂贳ꤲבֿï‚쯔峟쥆⭆컮ìŽé³šæ‘ŸéŽšï–¹èœ–éƒê­¿á•¤ê˜æžšì•å£”ë«áᓙ뀳ꄋ㞴袜ؓൃäŠì£·áŽ”劕梙㤹寠ퟎ트 [ 624.947948][T17514] binder: 17513:17514 ioctl c0306201 200000000540 returned -22 [ 624.978126][ C1] vkms_vblank_simulate: vblank timer overrun [ 624.992275][ T5839] usb 5-1: SerialNumber: ㊠[ 625.107510][T17520] loop2: detected capacity change from 0 to 7 [ 625.117326][T17389] Dev loop2: unable to read RDB block 7 [ 625.122955][T17389] loop2: unable to read partition table [ 625.129637][T17389] loop2: partition table beyond EOD, truncated [ 625.143565][T17520] Dev loop2: unable to read RDB block 7 [ 625.149218][T17520] loop2: unable to read partition table [ 625.158585][T17520] loop2: partition table beyond EOD, truncated [ 625.164883][T17520] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 625.243478][ T2155] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 625.268261][ T2155] usb 6-1: device descriptor read/8, error -71 [ 625.284609][ T5839] usbhid 5-1:1.0: can't add hid device: -71 [ 625.292120][ T5839] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 625.306942][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3416'. [ 625.318445][ T5839] usb 5-1: USB disconnect, device number 74 [ 625.319258][T17526] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3416'. [ 625.421652][T17529] overlay: Unknown parameter 'hash' [ 625.523294][ T2155] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 625.554311][ T2155] usb 6-1: device descriptor read/8, error -71 [ 625.664499][ T2155] usb usb6-port1: unable to enumerate USB device [ 625.664616][T17539] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.683385][T17539] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.692294][T17539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.700310][T17539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.029890][T17552] vxfs: WRONG superblock magic 00000000 at 1 [ 626.036427][T17552] vxfs: WRONG superblock magic 00000000 at 8 [ 626.042466][T17552] vxfs: can't find superblock. [ 626.050944][T17554] vxfs: WRONG superblock magic 00000000 at 1 [ 626.069371][T17554] vxfs: WRONG superblock magic 00000000 at 8 [ 626.075905][T17554] vxfs: can't find superblock. [ 626.147797][T17561] Mount JFS Failure: -22 [ 626.152110][T17561] jfs_mount failed w/return code = -22 [ 626.280149][T17570] vivid-001: disconnect [ 626.398141][ T30] audit: type=1326 audit(1750755578.229:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17566 comm="syz.3.3433" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f103318e929 code=0x7fc00000 [ 626.436980][T17573] vivid-001: reconnect [ 626.641902][ T2155] usb 2-1: USB disconnect, device number 2 [ 626.773349][ T5927] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 626.860184][T17594] /dev/rnullb0: Can't open blockdev [ 626.866385][T17595] /dev/rnullb0: Can't open blockdev [ 626.915108][ T5927] usb 4-1: device descriptor read/64, error -71 [ 627.153227][ T5927] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 627.303204][ T5927] usb 4-1: device descriptor read/64, error -71 [ 627.413577][ T5927] usb usb4-port1: attempt power cycle [ 627.487255][T17604] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 627.495029][T17604] /dev/rnullb0: Can't open blockdev [ 627.753187][ T5927] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 627.775214][ T5927] usb 4-1: device descriptor read/8, error -71 [ 628.034288][ T5927] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 628.073821][ T5927] usb 4-1: device descriptor read/8, error -71 [ 628.185899][ T5927] usb usb4-port1: unable to enumerate USB device [ 628.883680][T17593] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 628.890708][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 629.791535][T17593] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 629.808625][T17593] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 629.817149][T17593] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 629.824321][T17593] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 629.835958][T17593] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 629.841978][T17593] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 629.852373][T17593] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 629.969418][T17617] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3449'. [ 630.163492][ T5927] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 630.176573][T17628] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 630.313249][ T5927] usb 4-1: device descriptor read/64, error -71 [ 630.583292][ T5927] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 630.753916][ T5927] usb 4-1: device descriptor read/64, error -71 [ 630.874670][ T5927] usb usb4-port1: attempt power cycle [ 630.963464][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 631.228130][T17654] /dev/rnullb0: Can't open blockdev [ 631.245703][ T5927] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 631.304354][T17655] serio: Serial port ttynull [ 631.310186][ T5927] usb 4-1: device descriptor read/8, error -71 [ 631.349357][T17649] QAT: failed to copy from user cfg_data. [ 631.603510][ T5927] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 631.624211][T17666] netlink: 'syz.4.3462': attribute type 2 has an invalid length. [ 631.632506][T17666] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3462'. [ 631.654573][ T5927] usb 4-1: device descriptor read/8, error -71 [ 631.681788][T17666] binder_alloc: 17665: binder_alloc_buf, no vma [ 631.696319][T17666] binder: 17665:17666 ioctl c0306201 2000000007c0 returned -11 [ 631.787903][ T5927] usb usb4-port1: unable to enumerate USB device [ 631.843277][T16698] Bluetooth: hci3: command 0x0406 tx timeout [ 631.849590][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 632.355926][T17713] /dev/rnullb0: Can't open blockdev [ 632.413306][ T5839] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 632.586463][ T5839] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 632.629870][ T5839] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 632.677799][ T5839] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 632.699514][ T5839] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 632.731196][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.780939][T17702] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 632.981083][T17734] FAT-fs (rnullb0): bogus number of reserved sectors [ 632.988406][T17734] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 633.038152][T17702] omfs: Invalid superblock (0) [ 633.044021][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 633.259211][ T5839] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 633.297524][ T5839] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input70 [ 633.356715][ T5839] usb 2-1: USB disconnect, device number 3 [ 633.362660][ C1] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 633.400501][T17754] netlink: 'syz.3.3484': attribute type 7 has an invalid length. [ 633.505069][ T5927] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 633.703151][ T5927] usb 5-1: Using ep0 maxpacket: 16 [ 633.716708][ T5927] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 633.737089][ T5927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.766233][ T5927] usb 5-1: config 0 has no interface number 0 [ 633.815194][ T5927] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 633.833511][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.856013][ T5927] usb 5-1: Product: syz [ 633.860247][ T5927] usb 5-1: Manufacturer: syz [ 633.875199][ T5927] usb 5-1: SerialNumber: syz [ 633.895707][ T5927] usb 5-1: config 0 descriptor?? [ 633.905405][ T5927] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 633.922030][ T5927] usb 5-1: No valid video chain found. [ 633.923336][T16698] Bluetooth: hci3: command 0x0406 tx timeout [ 633.933825][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 634.206414][T17747] ALSA: seq fatal error: cannot create timer (-19) [ 634.322056][T17774] FAT-fs (rnullb0): bogus number of reserved sectors [ 634.345376][T17774] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 634.373835][ T5839] usb 5-1: USB disconnect, device number 75 [ 634.598997][T17798] tmpfs: Unknown parameter 'nos' [ 634.779692][T17805] Scaler: ================= START STATUS ================= [ 634.789548][T17805] Scaler: ================== END STATUS ================== [ 634.799230][T17805] /dev/rnullb0: Can't open blockdev [ 634.859219][T17812] /dev/rnullb0: Can't open blockdev [ 635.011882][T17821] syzkaller0: entered allmulticast mode [ 635.035533][T17820] syzkaller0: entered promiscuous mode [ 635.051540][T17817] /dev/rnullb0: Can't open blockdev [ 635.074590][T17820] syzkaller0 (unregistering): left promiscuous mode [ 635.082122][T17820] syzkaller0 (unregistering): left allmulticast mode [ 635.122061][T17821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 635.137108][T17821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.178060][T17827] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/rnullb0": -EINTR [ 635.233804][T17835] sit0: entered promiscuous mode [ 635.254335][T17835] netlink: 'syz.5.3504': attribute type 1 has an invalid length. [ 635.262292][T17835] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3504'. [ 635.343629][ T5927] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 635.529636][ T5927] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 635.553206][ T5927] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 635.573198][ T5927] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 635.593142][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.615622][T17822] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 635.626952][ T5927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 635.848736][ T2155] usb 5-1: USB disconnect, device number 76 [ 635.944350][ T5839] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 636.003654][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 636.042023][T17820] /dev/rnullb0: Can't open blockdev [ 636.116315][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 636.134064][ T5839] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 636.146345][ T5839] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 636.160853][ T5839] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 636.171376][ T5839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.185822][ T5839] usb 2-1: Product: syz [ 636.190278][ T5839] usb 2-1: Manufacturer: syz [ 636.196990][ T5839] usb 2-1: SerialNumber: syz [ 636.197618][T17861] /dev/rnullb0: Can't open blockdev [ 636.207928][ T5839] usb 2-1: config 0 descriptor?? [ 636.230588][T17847] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 636.238489][T17847] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 636.268297][ T5839] usb 2-1: ucan: probing device on interface #0 [ 636.468258][ T5839] usb 2-1: ucan: could not read protocol version, ret=0 [ 636.475837][ T5839] usb 2-1: ucan: probe failed; try to update the device firmware [ 636.618681][T17871] FAT-fs (rnullb0): bogus number of reserved sectors [ 636.625535][T17871] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 636.675320][T17873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3518'. [ 636.796043][ T5927] usb 2-1: USB disconnect, device number 4 [ 637.274342][T17903] vlan1: entered allmulticast mode [ 637.279562][T17903] veth0_vlan: entered allmulticast mode [ 637.302442][T17903] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 637.554314][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3528'. [ 637.585693][T17914] syz.3.3530: attempt to access beyond end of device [ 637.585693][T17914] md0: rw=0, sector=1, nr_sectors = 1 limit=0 [ 637.601633][T17914] qnx4: unable to read the superblock [ 637.781884][T17919] netlink: 'syz.3.3532': attribute type 29 has an invalid length. [ 637.800667][T17926] FAT-fs (rnullb0): bogus number of reserved sectors [ 637.807614][T17926] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 637.839107][T17919] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 637.853524][T17919] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 637.932666][T17933] hfs: can't find a HFS filesystem on dev rnullb0 [ 637.937222][T17929] syz.5.3535: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 637.998261][T17929] CPU: 1 UID: 0 PID: 17929 Comm: syz.5.3535 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 637.998286][T17929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 637.998296][T17929] Call Trace: [ 637.998303][T17929] [ 637.998311][T17929] dump_stack_lvl+0x189/0x250 [ 637.998335][T17929] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 637.998360][T17929] ? __pfx_dump_stack_lvl+0x10/0x10 [ 637.998377][T17929] ? __pfx__printk+0x10/0x10 [ 637.998394][T17929] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 637.998414][T17929] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 637.998440][T17929] warn_alloc+0x214/0x310 [ 637.998465][T17929] ? __pfx_warn_alloc+0x10/0x10 [ 637.998492][T17929] ? __get_vm_area_node+0x28f/0x300 [ 637.998511][T17929] ? kvm_set_memslot+0x4e2/0x1310 [ 637.998530][T17929] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 637.998586][T17929] ? kvm_set_memslot+0x3e/0x1310 [ 637.998604][T17929] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 637.998640][T17929] ? kvm_set_memslot+0x4e2/0x1310 [ 637.998657][T17929] __vmalloc_noprof+0xb1/0xf0 [ 637.998680][T17929] ? kvm_set_memslot+0x4e2/0x1310 [ 637.998701][T17929] kvm_set_memslot+0x4e2/0x1310 [ 637.998723][T17929] ? kvm_set_memory_region+0x775/0xc00 [ 637.998748][T17929] kvm_set_memory_region+0x9bb/0xc00 [ 637.998782][T17929] kvm_vm_ioctl_set_memory_region+0x6f/0xa0 [ 637.998805][T17929] kvm_vm_ioctl+0x957/0xc60 [ 637.998827][T17929] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 637.998850][T17929] ? do_vfs_ioctl+0x12ba/0x1990 [ 637.998876][T17929] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 637.998915][T17929] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 637.998946][T17929] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 637.998975][T17929] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 637.999002][T17929] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 637.999032][T17929] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 637.999075][T17929] ? __lock_acquire+0xab9/0xd20 [ 637.999116][T17929] ? __fget_files+0x2a/0x420 [ 637.999148][T17929] ? __fget_files+0x2a/0x420 [ 637.999175][T17929] ? __fget_files+0x3a0/0x420 [ 637.999200][T17929] ? __fget_files+0x2a/0x420 [ 637.999231][T17929] ? bpf_lsm_file_ioctl+0x9/0x20 [ 637.999251][T17929] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 637.999271][T17929] __se_sys_ioctl+0xf9/0x170 [ 637.999315][T17929] do_syscall_64+0xfa/0x3b0 [ 637.999334][T17929] ? lockdep_hardirqs_on+0x9c/0x150 [ 637.999364][T17929] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.999385][T17929] ? clear_bhb_loop+0x60/0xb0 [ 637.999409][T17929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.999428][T17929] RIP: 0033:0x7fca7fb8e929 [ 637.999446][T17929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 637.999464][T17929] RSP: 002b:00007fca7d9d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.999486][T17929] RAX: ffffffffffffffda RBX: 00007fca7fdb6080 RCX: 00007fca7fb8e929 [ 637.999501][T17929] RDX: 0000200000000080 RSI: 000000004020ae46 RDI: 0000000000000005 [ 637.999514][T17929] RBP: 00007fca7fc10b39 R08: 0000000000000000 R09: 0000000000000000 [ 637.999527][T17929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.999540][T17929] R13: 0000000000000000 R14: 00007fca7fdb6080 R15: 00007ffd618e62c8 [ 637.999584][T17929] [ 637.999601][T17929] Mem-Info: [ 638.084924][ T5844] Bluetooth: hci1: command 0x0c1a tx timeout [ 638.219191][T17929] active_anon:7100 inactive_anon:0 isolated_anon:0 [ 638.219191][T17929] active_file:17071 inactive_file:40063 isolated_file:0 [ 638.219191][T17929] unevictable:768 dirty:64 writeback:0 [ 638.219191][T17929] slab_reclaimable:9714 slab_unreclaimable:99815 [ 638.219191][T17929] mapped:25043 shmem:2028 pagetables:1616 [ 638.219191][T17929] sec_pagetables:0 bounce:0 [ 638.219191][T17929] kernel_misc_reclaimable:0 [ 638.219191][T17929] free:1314949 free_pcp:17429 free_cma:0 [ 638.391505][T17929] Node 0 active_anon:28400kB inactive_anon:0kB active_file:68112kB inactive_file:160052kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100100kB dirty:252kB writeback:0kB shmem:6576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11900kB pagetables:6216kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 638.428753][T17929] Node 1 active_anon:0kB inactive_anon:0kB active_file:172kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:172kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 638.466771][T17929] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 638.508347][T17929] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 638.510336][T17947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3541'. [ 638.517748][T17929] Node 0 DMA32 free:1341716kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28352kB inactive_anon:0kB active_file:68112kB inactive_file:158748kB unevictable:1536kB writepending:252kB present:3129332kB managed:2557524kB mlocked:0kB bounce:0kB free_pcp:54900kB local_pcp:32200kB free_cma:0kB [ 638.564634][T17929] lowmem_reserve[]: 0 0 1 1 1 [ 638.569593][T17929] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 638.601771][T17929] lowmem_reserve[]: 0 0 0 0 0 [ 638.606623][T17929] Node 1 Normal free:3902700kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:172kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17632kB local_pcp:9844kB free_cma:0kB [ 638.642857][T17929] lowmem_reserve[]: 0 0 0 0 0 [ 638.648470][T17929] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 638.666134][T17929] Node 0 DMA32: 1101*4kB (UME) 758*8kB (UME) 881*16kB (UME) 1577*32kB (UME) 780*64kB (UME) 216*128kB (UME) 99*256kB (UME) 33*512kB (UME) 14*1024kB (UME) 11*2048kB (UME) 271*4096kB (UM) = 1341716kB [ 638.689765][T17929] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 638.702779][T17949] FAT-fs (rnullb0): bogus number of reserved sectors [ 638.711360][T17949] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 638.738945][T17929] Node 1 Normal: 209*4kB (UME) 43*8kB (UME) 37*16kB (UE) 158*32kB (UME) 51*64kB (UME) 11*128kB (UME) 8*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 2*2048kB (ME) 947*4096kB (UM) = 3902700kB [ 638.772852][T17929] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.782984][T17929] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 638.801862][T17929] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 638.828391][T17929] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 638.850594][T17951] netlink: 'syz.4.3543': attribute type 13 has an invalid length. [ 638.850774][T17954] netlink: 'syz.3.3544': attribute type 10 has an invalid length. [ 638.858652][T17929] 59160 total pagecache pages [ 638.873298][T17951] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3543'. [ 638.883660][T17929] 0 pages in swap cache [ 638.887858][T17929] Free swap = 124996kB [ 638.892126][T17929] Total swap = 124996kB [ 638.896566][T17929] 2097051 pages RAM [ 638.900811][T17929] 0 pages HighMem/MovableOnly [ 638.908593][T17929] 425692 pages reserved [ 638.916261][T17929] 0 pages cma reserved [ 638.958493][T17954] team0: Port device geneve1 added [ 638.967810][T17951] : renamed from syz_tun (while UP) [ 639.017621][T17951] : refused to change device tx_queue_len [ 639.028778][T17951] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 639.153322][ T5927] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 639.168696][T17962] /dev/rnullb0: Can't open blockdev [ 639.230943][T17965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3546'. [ 639.263141][T17965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3546'. [ 639.283477][ T5927] usb 5-1: device descriptor read/64, error -71 [ 639.292685][T17965] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3546'. [ 639.523247][ T5927] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 639.613646][T17975] xfrm0: mtu less than device minimum [ 639.664233][ T5927] usb 5-1: device descriptor read/64, error -71 [ 639.673456][ T43] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 639.776934][ T5927] usb usb5-port1: attempt power cycle [ 639.866524][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 639.890741][ T43] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 639.906404][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.924767][ T43] usb 2-1: Product: syz [ 639.928994][ T43] usb 2-1: Manufacturer: syz [ 639.944753][ T43] usb 2-1: SerialNumber: syz [ 639.966297][ T43] usb 2-1: config 0 descriptor?? [ 640.123906][ T5927] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 640.153988][ T5927] usb 5-1: device descriptor read/8, error -71 [ 640.181289][T17972] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.3550'. [ 640.197056][T17972] /dev/rnullb0: Can't open blockdev [ 640.203653][ T43] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: failure sending bit rate [ 640.228285][ T43] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 640.255149][ T43] usb 2-1: USB disconnect, device number 5 [ 640.393366][ T5927] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 640.434218][ T5927] usb 5-1: device descriptor read/8, error -71 [ 640.537972][T17982] Invalid source name [ 640.542202][T17982] UBIFS error (pid: 17982): cannot open "/dev/sg0", error -22 [ 640.552845][ T5927] usb usb5-port1: unable to enumerate USB device [ 640.637947][T17986] /dev/rnullb0: Can't open blockdev [ 640.761507][T17992] x_tables: duplicate underflow at hook 1 [ 640.887738][T17996] loop2: detected capacity change from 0 to 7 [ 640.912690][T17996] Dev loop2: unable to read RDB block 7 [ 640.923593][T17996] loop2: unable to read partition table [ 640.929456][T17996] loop2: partition table beyond EOD, truncated [ 640.953136][T17996] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 641.143222][ T43] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 641.334111][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 641.341625][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 641.355497][ T43] usb 2-1: config 1 interface 0 has no altsetting 0 [ 641.367391][ T43] usb 2-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 641.380624][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.389130][ T43] usb 2-1: Product: syz [ 641.394127][ T43] usb 2-1: Manufacturer: syz [ 641.398855][ T43] usb 2-1: SerialNumber: syz [ 641.627420][T17995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3560'. [ 641.636616][T17995] nbd: must specify a device to reconfigure [ 641.660582][ T43] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input71 [ 641.674004][ T5187] bcm5974 2-1:1.0: could not read from device [ 641.709102][T18022] No control pipe specified [ 641.741159][ T43] usb 2-1: USB disconnect, device number 6 [ 641.753350][ T5839] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 641.753490][ T5187] bcm5974 2-1:1.0: could not read from device [ 641.804528][T18024] loop2: detected capacity change from 0 to 7 [ 641.812714][T18024] Dev loop2: unable to read RDB block 7 [ 641.834814][T18024] loop2: unable to read partition table [ 641.840820][T18024] loop2: partition table beyond EOD, truncated [ 641.852236][T18024] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 641.927492][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 641.960483][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.993033][ T5839] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 642.008849][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.021475][ T5839] usb 4-1: Product: syz [ 642.027569][ T5839] usb 4-1: Manufacturer: syz [ 642.032350][ T5839] usb 4-1: SerialNumber: syz [ 642.055229][ T5839] usb 4-1: config 0 descriptor?? [ 642.072481][ T5839] cypress_m8 4-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 642.082970][ T5839] nokiaca42v2 ttyUSB0: required endpoint is missing [ 642.218591][T18035] ptrace attach of "./syz-executor exec"[18036] was attempted by "./syz-executor exec"[18035] [ 642.273609][T18035] fuseblk: Bad value for 'user_id' [ 642.283221][T18035] fuseblk: Bad value for 'user_id' [ 642.425182][ T5931] libceph: connect (1)[c::]:6789 error -101 [ 642.453952][ T5931] libceph: mon0 (1)[c::]:6789 connect error [ 642.469342][T18048] ceph: No mds server is up or the cluster is laggy [ 642.519574][ T5931] usb 4-1: USB disconnect, device number 22 [ 642.548715][ T5931] cypress_m8 4-1:0.0: device disconnected [ 642.766070][T18066] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3582'. [ 642.842777][T18069] /dev/rnullb0: Can't open blockdev [ 643.062317][T18078] ptm ptm12: ldisc open failed (-12), clearing slot 12 [ 643.159095][ T5839] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 643.368033][T18092] random: crng reseeded on system resumption [ 643.517004][ T5839] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.533160][ T5839] usb 4-1: config 0 interface 0 altsetting 21 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 643.552729][ T5839] usb 4-1: config 0 interface 0 has no altsetting 0 [ 643.553554][T18095] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3590'. [ 643.559775][ T5839] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 643.580332][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.593468][T18095] Mount JFS Failure: -22 [ 643.597759][T18095] jfs_mount failed w/return code = -22 [ 643.615139][ T5839] usb 4-1: config 0 descriptor?? [ 643.633225][ T5931] usb 6-1: new low-speed USB device number 53 using dummy_hcd [ 643.763287][ T5931] usb 6-1: device descriptor read/64, error -71 [ 644.003402][ T5931] usb 6-1: new low-speed USB device number 54 using dummy_hcd [ 644.068549][ T5839] sony 0003:054C:024B.002E: hiddev0,hidraw0: USB HID v0.00 Device [HID 054c:024b] on usb-dummy_hcd.3-1/input0 [ 644.116287][ T5839] sony 0003:054C:024B.002E: failed to claim input [ 644.143469][ T5931] usb 6-1: device descriptor read/64, error -71 [ 644.248542][T18070] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3584'. [ 644.275271][T18070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.275309][ T5931] usb usb6-port1: attempt power cycle [ 644.295093][T18070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.337263][T18070] qnx6: unable to set blocksize [ 644.344709][ T10] usb 4-1: USB disconnect, device number 23 [ 644.425353][T18111] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 644.425353][T18112] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 644.425688][T18112] VFS: Can't find a romfs filesystem on dev rnullb0. [ 644.425688][T18112] [ 644.495884][T18111] VFS: Can't find a romfs filesystem on dev rnullb0. [ 644.495884][T18111] [ 644.633541][ T5931] usb 6-1: new low-speed USB device number 55 using dummy_hcd [ 644.663951][ T5931] usb 6-1: device descriptor read/8, error -71 [ 644.914435][ T5931] usb 6-1: new low-speed USB device number 56 using dummy_hcd [ 644.943814][ T5931] usb 6-1: device descriptor read/8, error -71 [ 645.064218][ T5931] usb usb6-port1: unable to enumerate USB device [ 645.237275][T18137] input: syz0 as /devices/virtual/input/input72 [ 645.301547][T18137] Mount JFS Failure: -22 [ 645.305495][T18142] /dev/rnullb0: Can't open blockdev [ 645.306609][T18137] jfs_mount failed w/return code = -22 [ 645.796769][T18170] exFAT-fs (rnullb0): invalid boot record signature [ 645.804615][T18170] exFAT-fs (rnullb0): failed to read boot sector [ 645.810976][T18170] exFAT-fs (rnullb0): failed to recognize exfat type [ 645.829142][T18170] exFAT-fs (rnullb0): invalid boot record signature [ 645.836133][T18170] exFAT-fs (rnullb0): failed to read boot sector [ 645.843996][T18170] exFAT-fs (rnullb0): failed to recognize exfat type [ 646.188926][T18186] NILFS (rnullb0): couldn't find nilfs on the device [ 646.400820][T18194] Mount JFS Failure: -22 [ 646.406039][T18194] jfs_mount failed w/return code = -22 [ 647.088887][T18212] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 647.927030][T18235] Option '²Ÿ¹' to dns_resolver key: bad/missing value [ 648.584862][T18242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 648.586312][T18245] qnx4: no qnx4 filesystem (no root dir). [ 648.878338][T18257] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 648.891600][T18259] vim2m vim2m.0: vidioc_s_fmt queue busy [ 648.898447][T18259] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 648.981981][T18262] omfs: Invalid superblock (0) [ 649.467476][T18279] NILFS (rnullb0): couldn't find nilfs on the device [ 649.554776][T18281] FAT-fs (rnullb0): bogus number of reserved sectors [ 649.561492][T18281] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 649.588627][T18284] FAT-fs (rnullb0): bogus number of reserved sectors [ 649.595939][T18284] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 649.656817][T18286] loop2: detected capacity change from 0 to 7 [ 649.704767][T18286] Dev loop2: unable to read RDB block 7 [ 649.715144][T18286] loop2: unable to read partition table [ 649.734900][T18286] loop2: partition table beyond EOD, truncated [ 649.748288][T18286] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 649.922774][T18299] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 649.932895][T18299] UDF-fs: Scanning with blocksize 4096 failed [ 650.527515][T18313] /dev/rnullb0: Can't open blockdev [ 651.157315][ T5839] IPVS: starting estimator thread 0... [ 651.242803][T18341] /dev/rnullb0: Can't open blockdev [ 651.253347][T18338] IPVS: using max 29 ests per chain, 69600 per kthread [ 651.770851][T18362] hsr0 speed is unknown, defaulting to 1000 [ 651.777292][T18362] hsr0 speed is unknown, defaulting to 1000 [ 651.784454][T18362] hsr0 speed is unknown, defaulting to 1000 [ 651.810824][T18362] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 651.877869][T18362] hsr0 speed is unknown, defaulting to 1000 [ 651.900909][T18362] hsr0 speed is unknown, defaulting to 1000 [ 651.911599][T18362] hsr0 speed is unknown, defaulting to 1000 [ 651.929930][T18362] hsr0 speed is unknown, defaulting to 1000 [ 652.009022][T18368] IPVS: set_ctl: invalid protocol: 47 100.1.1.1:20001 [ 652.039507][T18370] syz2: rxe_newlink: already configured on team_slave_0 [ 652.248369][T18380] omfs: Invalid superblock (0) [ 652.730800][T18390] vxfs: WRONG superblock magic 00000000 at 1 [ 652.740516][T18390] vxfs: WRONG superblock magic 00000000 at 8 [ 652.747166][T18390] vxfs: can't find superblock. [ 652.990738][T18397] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 653.023444][ T5839] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 653.173499][ T5839] usb 6-1: Using ep0 maxpacket: 16 [ 653.184346][ T5839] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 653.204776][ T5839] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 653.225510][ T5839] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 653.237600][ T5839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.246245][ T5839] usb 6-1: Product: syz [ 653.255037][ T5839] usb 6-1: Manufacturer: syz [ 653.273559][ T5839] usb 6-1: SerialNumber: syz [ 653.490816][ T5839] usb 6-1: 0:2 : does not exist [ 653.505701][ T5839] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 653.547354][ T5839] usb 6-1: USB disconnect, device number 57 [ 653.589909][T17289] udevd[17289]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 653.821544][T18397] orangefs_mount: mount request failed with -4 [ 654.079282][T18432] ./file0: Can't lookup blockdev [ 654.192631][ T980] IPVS: starting estimator thread 0... [ 654.284314][T18440] IPVS: using max 28 ests per chain, 67200 per kthread [ 654.473325][ T5839] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 654.633286][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 654.654925][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.690348][ T5839] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.721585][ T5839] usb 4-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00 [ 654.758005][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.786536][ T5839] usb 4-1: config 0 descriptor?? [ 655.000532][T18461] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 655.011284][T18461] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 655.064625][T18449] hsr0 speed is unknown, defaulting to 1000 [ 655.226184][ T5839] hid_mf 0003:0079:1801.002F: hidraw0: USB HID v0.00 Device [HID 0079:1801] on usb-dummy_hcd.3-1/input0 [ 655.239000][ T2155] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 655.265247][ T5839] hid_mf 0003:0079:1801.002F: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 655.414111][ T2155] usb 5-1: device descriptor read/64, error -71 [ 655.435104][T18450] hsr0 speed is unknown, defaulting to 1000 [ 655.518478][ T10] usb 4-1: USB disconnect, device number 24 [ 655.674839][ T2155] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 655.776736][T18470] syz.3.3715: attempt to access beyond end of device [ 655.776736][T18470] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 655.791412][T18470] exFAT-fs (nbd3): unable to read boot sector [ 655.798843][T18470] exFAT-fs (nbd3): failed to read boot sector [ 655.806562][T18470] exFAT-fs (nbd3): failed to recognize exfat type [ 655.823325][ T2155] usb 5-1: device descriptor read/64, error -71 [ 655.911403][T18472] hfs: can't find a HFS filesystem on dev rnullb0 [ 655.921077][T18472] hfs: can't find a HFS filesystem on dev rnullb0 [ 655.944749][ T2155] usb usb5-port1: attempt power cycle [ 656.255268][T18490] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 656.293320][ T2155] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 656.344465][ T2155] usb 5-1: device descriptor read/8, error -71 [ 656.445586][T18493] siw: device registration error -23 [ 656.586245][ T2155] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 656.623647][ T2155] usb 5-1: device descriptor read/8, error -71 [ 656.750951][ T2155] usb usb5-port1: unable to enumerate USB device [ 656.831444][T18504] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 656.853338][T18504] UDF-fs: Scanning with blocksize 4096 failed [ 657.120917][T18520] siw: device registration error -23 [ 657.138779][T18518] MTD: Couldn't look up '/dev/sg0': -15 [ 657.144968][T18518] /dev/sg0: Can't lookup blockdev [ 657.233320][ T2155] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 657.403175][ T2155] usb 2-1: Using ep0 maxpacket: 32 [ 657.418173][ T2155] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 657.434464][ T2155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.453426][ T2155] usb 2-1: Product: syz [ 657.461561][ T2155] usb 2-1: Manufacturer: syz [ 657.471071][ T2155] usb 2-1: SerialNumber: syz [ 657.488287][ T2155] usb 2-1: config 0 descriptor?? [ 658.166516][T18533] /dev/rnullb0: Can't open blockdev [ 658.322562][ T2155] airspy 2-1:0.0: usb_control_msg() failed -71 request 09 [ 658.345961][ T2155] airspy 2-1:0.0: Could not detect board [ 658.363849][ T2155] airspy 2-1:0.0: probe with driver airspy failed with error -71 [ 658.396385][ T2155] usb 2-1: USB disconnect, device number 7 [ 658.409190][T18536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3738'. [ 658.439757][T18536] FAT-fs (rnullb0): bogus number of reserved sectors [ 658.463519][T18536] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 658.700808][T18544] siw: device registration error -23 [ 658.895108][T18553] loop2: detected capacity change from 0 to 7 [ 658.933709][T18553] Dev loop2: unable to read RDB block 7 [ 658.940978][T18553] loop2: unable to read partition table [ 658.955533][T18553] loop2: partition table beyond EOD, truncated [ 658.972021][T18553] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 659.357260][T18562] RDS: rds_bind could not find a transport for 0:0:4::1, load rds_tcp or rds_rdma? [ 659.387717][T18562] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3746'. [ 659.425038][T18561] Mount JFS Failure: -22 [ 659.429353][T18561] jfs_mount failed w/return code = -22 [ 659.836079][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3744'. [ 659.859856][T18563] exFAT-fs (rnullb0): invalid boot record signature [ 659.875767][T18563] exFAT-fs (rnullb0): failed to read boot sector [ 659.890921][T18563] exFAT-fs (rnullb0): failed to recognize exfat type [ 660.333358][T18577] siw: device registration error -23 [ 660.511919][T18580] delete_channel: no stack [ 660.528817][T18580] delete_channel: no stack [ 660.813441][ T980] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 661.036745][ T980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 661.056016][ T980] usb 4-1: not running at top speed; connect to a high speed hub [ 661.073963][ T980] usb 4-1: config 7 has an invalid interface number: 106 but max is 0 [ 661.082207][ T980] usb 4-1: config 7 has no interface number 0 [ 661.103153][ T980] usb 4-1: config 7 interface 106 has no altsetting 0 [ 661.128419][ T980] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 661.151903][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.168118][ T2155] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 661.175086][ T980] usb 4-1: Product: syz [ 661.190364][ T980] usb 4-1: Manufacturer: syz [ 661.202651][ T980] usb 4-1: SerialNumber: syz [ 661.333273][ T2155] usb 6-1: Using ep0 maxpacket: 8 [ 661.352315][ T2155] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 661.372102][ T2155] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.393207][ T2155] usb 6-1: Product: syz [ 661.397505][ T2155] usb 6-1: Manufacturer: syz [ 661.402133][ T2155] usb 6-1: SerialNumber: syz [ 661.412098][ T2155] usb 6-1: config 0 descriptor?? [ 661.439968][T18580] Mount JFS Failure: -22 [ 661.444528][T18580] jfs_mount failed w/return code = -22 [ 661.475411][ T980] go7007 4-1:7.106: probe with driver go7007 failed with error -12 [ 661.497919][ T980] usb 4-1: USB disconnect, device number 25 [ 661.643244][ T2155] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 661.688497][T18587] loop2: detected capacity change from 0 to 7 [ 661.697849][T18587] Dev loop2: unable to read RDB block 7 [ 661.704029][T18587] loop2: unable to read partition table [ 661.710041][T18587] loop2: partition table beyond EOD, truncated [ 661.718089][T18587] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 661.964186][T18597] netlink: 1041 bytes leftover after parsing attributes in process `syz.4.3760'. [ 661.976135][T18597] Mount JFS Failure: -22 [ 661.980449][T18597] jfs_mount failed w/return code = -22 [ 662.042026][ T30] audit: type=1326 audit(1750755613.869:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.057122][T18603] siw: device registration error -23 [ 662.064237][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.066610][ T30] audit: type=1326 audit(1750755613.869:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.099032][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.112973][ T30] audit: type=1326 audit(1750755613.869:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.137984][ T30] audit: type=1326 audit(1750755613.869:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.162972][ T30] audit: type=1326 audit(1750755613.869:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.189877][ T30] audit: type=1326 audit(1750755613.869:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.212100][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.259575][ T30] audit: type=1326 audit(1750755613.869:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.281780][ C0] vkms_vblank_simulate: vblank timer overrun [ 662.294865][ T30] audit: type=1326 audit(1750755613.869:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.321540][ T30] audit: type=1326 audit(1750755613.869:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.347479][ T30] audit: type=1326 audit(1750755613.869:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18582 comm="syz.5.3756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca7fb8e929 code=0x50000 [ 662.376386][T18608] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3764'. [ 662.907054][ T2155] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 663.039353][T18614] loop2: detected capacity change from 0 to 7 [ 663.062484][T18614] Dev loop2: unable to read RDB block 7 [ 663.085240][T18614] loop2: unable to read partition table [ 663.110170][T18614] loop2: partition table beyond EOD, truncated [ 663.124471][T18614] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 663.672380][ T5931] usb 6-1: USB disconnect, device number 58 [ 663.749906][T18638] siw: device registration error -23 [ 663.806792][T18641] FAT-fs (rnullb0): bogus number of reserved sectors [ 663.817944][T18641] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 663.818783][T18644] /dev/rnullb0: Can't open blockdev [ 663.916411][ T2155] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 664.113157][ T2155] usb 4-1: Using ep0 maxpacket: 16 [ 664.133171][ T5931] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 664.176911][ T2155] usb 4-1: config 64 has an invalid interface number: 13 but max is 0 [ 664.185201][ T2155] usb 4-1: config 64 has no interface number 0 [ 664.191439][ T2155] usb 4-1: config 64 interface 13 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 664.312213][ T2155] usb 4-1: config 64 interface 13 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 664.314280][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 664.340021][ T2155] usb 4-1: New USB device found, idVendor=0e8d, idProduct=00a7, bcdDevice=b5.31 [ 664.349315][ T2155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.422823][ T2155] usb 4-1: Product: syz [ 664.427480][ T2155] usb 4-1: Manufacturer: syz [ 664.432107][ T2155] usb 4-1: SerialNumber: syz [ 664.463266][ T5931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.487042][ T5931] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 664.506540][ T2155] option 4-1:64.13: GSM modem (1-port) converter detected [ 664.535252][ T5931] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.576537][ T5931] usb 2-1: config 0 descriptor?? [ 664.706303][ T2155] usb 4-1: USB disconnect, device number 26 [ 664.718019][ T2155] option 4-1:64.13: device disconnected [ 665.016178][ T5931] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 665.023041][ T5931] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 665.041389][ T5931] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 665.048418][ T5931] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 665.059401][ T5931] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 665.074042][ T5931] arvo 0003:1E7D:30D4.0030: hidraw0: USB HID v0.05 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 665.113203][ T980] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 665.273167][ T980] usb 6-1: Using ep0 maxpacket: 8 [ 665.285571][ T980] usb 6-1: unable to get BOS descriptor or descriptor too short [ 665.294730][ T980] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 665.302949][ T980] usb 6-1: config 0 has no interface number 0 [ 665.319780][ T980] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 665.369272][ T980] usb 6-1: config 0 interface 122 altsetting 187 has an endpoint descriptor with address 0x95, changing to 0x85 [ 665.381588][ T980] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x85 has invalid maxpacket 19271, setting to 1024 [ 665.396468][ T980] usb 6-1: config 0 interface 122 altsetting 187 bulk endpoint 0x85 has invalid maxpacket 1024 [ 665.407341][ T980] usb 6-1: config 0 interface 122 altsetting 187 endpoint 0x6 has invalid wMaxPacketSize 0 [ 665.417826][ T980] usb 6-1: config 0 interface 122 altsetting 187 bulk endpoint 0x6 has invalid maxpacket 0 [ 665.434076][ T980] usb 6-1: config 0 interface 122 has no altsetting 0 [ 665.444332][ T980] usb 6-1: New USB device found, idVendor=04b8, idProduct=0521, bcdDevice=15.4a [ 665.454123][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.462931][ T980] usb 6-1: Product: syz [ 665.469704][ T980] usb 6-1: Manufacturer: о [ 665.474783][ T980] usb 6-1: SerialNumber: syz [ 665.495180][ T980] usb 6-1: config 0 descriptor?? [ 665.501246][T18664] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 665.508840][T18664] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 665.679941][T18684] vxfs: WRONG superblock magic 00000000 at 1 [ 665.687264][T18684] vxfs: WRONG superblock magic 00000000 at 8 [ 665.693434][T18684] vxfs: can't find superblock. [ 665.744073][ T980] pl2303 6-1:0.122: pl2303 converter detected [ 665.756030][ T980] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 665.769497][ T980] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 665.779314][ T980] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 665.793267][ T980] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 665.802934][ T980] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 665.812187][ T980] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0404]: -71 [ 665.812843][T18686] syz.4.3788: attempt to access beyond end of device [ 665.812843][T18686] nbd4: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 665.821300][ T980] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8484]: -71 [ 665.844129][ T980] pl2303 6-1:0.122: pl2303_vendor_read - failed to read [8383]: -71 [ 665.854606][ T980] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0000]: -71 [ 665.865141][ T980] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0001]: -71 [ 665.874055][ T980] pl2303 6-1:0.122: pl2303_vendor_write - failed to write [0002]: -71 [ 665.875480][T18686] SQUASHFS error: Failed to read block 0x0: -5 [ 665.886402][ T980] usb 6-1: pl2303 converter now attached to ttyUSB0 [ 665.909776][T18686] unable to read squashfs_super_block [ 665.919904][ T980] usb 6-1: USB disconnect, device number 59 [ 665.947866][ T980] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 665.957403][ T980] pl2303 6-1:0.122: device disconnected [ 666.427873][T18710] sp0: Synchronizing with TNC [ 666.446393][T18710] sp0: Found TNC [ 666.453020][T18709] [U] è` [ 666.505041][T18718] misc userio: No port type given on /dev/userio [ 666.514316][T18718] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 666.522007][T18718] UDF-fs: Scanning with blocksize 4096 failed [ 666.599205][T18722] FAT-fs (rnullb0): bogus number of reserved sectors [ 666.603885][T18720] siw: device registration error -23 [ 666.606243][T18722] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 666.736150][T18728] /dev/rnullb0: Can't open blockdev [ 666.899959][ T5931] usb 2-1: USB disconnect, device number 8 [ 666.940403][ T980] usb 6-1: new low-speed USB device number 60 using dummy_hcd [ 666.991385][T18735] loop2: detected capacity change from 0 to 7 [ 667.002307][T18735] Dev loop2: unable to read RDB block 7 [ 667.009931][T18735] loop2: unable to read partition table [ 667.017622][T18735] loop2: partition table beyond EOD, truncated [ 667.025227][T18735] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 667.079629][ T980] usb 6-1: device descriptor read/64, error -71 [ 667.182755][T18743] /dev/rnullb0: Can't open blockdev [ 667.234989][T18745] syz2: rxe_newlink: already configured on team_slave_0 [ 667.248220][T18745] /dev/rnullb0: Can't open blockdev [ 667.343181][ T980] usb 6-1: new low-speed USB device number 61 using dummy_hcd [ 667.353276][ T5931] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 667.383281][ T5839] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 667.493193][ T980] usb 6-1: device descriptor read/64, error -71 [ 667.514336][T18754] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 667.523617][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 667.535474][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 667.547071][ T5931] usb 2-1: can't read configurations, error -61 [ 667.553341][ T5839] usb 4-1: Using ep0 maxpacket: 32 [ 667.558252][ T5839] usb 4-1: config 0 has an invalid interface number: 113 but max is 0 [ 667.569948][ T5839] usb 4-1: config 0 has no interface number 0 [ 667.579411][ T5839] usb 4-1: New USB device found, idVendor=07c4, idProduct=a001, bcdDevice=c8.08 [ 667.588564][ T5839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.597270][ T5839] usb 4-1: Product: syz [ 667.601465][ T5839] usb 4-1: Manufacturer: syz [ 667.606119][ T5839] usb 4-1: SerialNumber: syz [ 667.612727][ T5839] usb 4-1: config 0 descriptor?? [ 667.613629][ T980] usb usb6-port1: attempt power cycle [ 667.627384][ T5839] ums-datafab 4-1:0.113: USB Mass Storage device detected [ 667.687515][ T5931] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 667.803587][ T5878] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 667.831703][ T5839] usb 4-1: USB disconnect, device number 27 [ 667.848166][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 667.858064][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 667.867297][ T5931] usb 2-1: can't read configurations, error -61 [ 667.874722][ T5931] usb usb2-port1: attempt power cycle [ 667.963247][ T980] usb 6-1: new low-speed USB device number 62 using dummy_hcd [ 667.975627][ T5878] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.983967][ T980] usb 6-1: device descriptor read/8, error -71 [ 667.985969][ T5878] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 668.001103][ T5878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.013004][ T5878] usb 5-1: config 0 descriptor?? [ 668.026616][ T5878] pwc: Askey VC010 type 2 USB webcam detected. [ 668.213197][ T5931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 668.223564][ T980] usb 6-1: new low-speed USB device number 63 using dummy_hcd [ 668.233920][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 668.242386][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 668.250688][ T5931] usb 2-1: can't read configurations, error -61 [ 668.257626][ T980] usb 6-1: device descriptor read/8, error -71 [ 668.373590][ T980] usb usb6-port1: unable to enumerate USB device [ 668.393204][ T5931] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 668.416774][ T5931] usb 2-1: Using ep0 maxpacket: 32 [ 668.425718][ T5878] pwc: recv_control_msg error -32 req 02 val 2b00 [ 668.434300][ T5878] pwc: recv_control_msg error -32 req 02 val 2700 [ 668.445200][ T5931] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 668.446243][ T5878] pwc: recv_control_msg error -32 req 02 val 2c00 [ 668.452812][ T5931] usb 2-1: can't read configurations, error -61 [ 668.463838][ T5931] usb usb2-port1: unable to enumerate USB device [ 668.475357][ T5878] pwc: recv_control_msg error -32 req 04 val 1000 [ 668.482777][ T5878] pwc: recv_control_msg error -32 req 04 val 1300 [ 668.494097][ T5878] pwc: recv_control_msg error -32 req 04 val 1400 [ 668.501439][ T5878] pwc: recv_control_msg error -32 req 02 val 2000 [ 668.510235][ T5878] pwc: recv_control_msg error -32 req 02 val 2100 [ 668.520191][ T5878] pwc: recv_control_msg error -32 req 04 val 1500 [ 668.544188][ T5878] pwc: recv_control_msg error -32 req 02 val 2500 [ 668.551219][ T5878] pwc: recv_control_msg error -32 req 02 val 2400 [ 668.560008][ T5878] pwc: recv_control_msg error -32 req 02 val 2600 [ 668.567854][ T5878] pwc: recv_control_msg error -32 req 02 val 2900 [ 668.577695][ T5878] pwc: recv_control_msg error -32 req 02 val 2800 [ 669.063190][ T5931] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 669.251062][ T5931] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 669.259807][ T5931] usb 4-1: config 0 has no interface number 0 [ 669.267668][ T5931] usb 4-1: config 0 interface 106 has no altsetting 0 [ 669.277475][ T5931] usb 4-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 669.286700][ T5931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.294938][ T5931] usb 4-1: Product: syz [ 669.299204][ T5931] usb 4-1: Manufacturer: syz [ 669.304003][ T5931] usb 4-1: SerialNumber: syz [ 669.312594][ T5931] usb 4-1: config 0 descriptor?? [ 669.548927][ T5931] usb 4-1: USB disconnect, device number 28 [ 669.636396][ T5878] pwc: recv_control_msg error -71 req 04 val 1200 [ 669.646745][ T5878] pwc: Registered as video103. [ 669.663346][ T5878] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input73 [ 669.716384][ T5878] usb 5-1: USB disconnect, device number 85 [ 670.044844][T18768] siw: device registration error -23 [ 670.073280][ T5927] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 670.147775][T18770] FAT-fs (rnullb0): bogus number of reserved sectors [ 670.164731][T18770] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 670.243500][ T5927] usb 6-1: not running at top speed; connect to a high speed hub [ 670.267481][ T5927] usb 6-1: config 3 has an invalid interface number: 174 but max is 0 [ 670.286138][ T5927] usb 6-1: config 3 has no interface number 0 [ 670.287770][T18776] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.298967][ T5927] usb 6-1: config 3 interface 174 altsetting 5 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 670.314284][T18775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 670.319880][ T5927] usb 6-1: config 3 interface 174 altsetting 5 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 670.385821][ T5927] usb 6-1: config 3 interface 174 altsetting 5 has a duplicate endpoint with address 0xD, skipping [ 670.406798][ T5927] usb 6-1: config 3 interface 174 altsetting 5 endpoint 0x86 has invalid maxpacket 23256, setting to 64 [ 670.428626][ T5927] usb 6-1: config 3 interface 174 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 670.455276][ T5927] usb 6-1: config 3 interface 174 altsetting 5 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 670.460132][T18782] /dev/rnullb0: Can't open blockdev [ 670.487341][ T5927] usb 6-1: config 3 interface 174 altsetting 5 has an endpoint descriptor with address 0x76, changing to 0x6 [ 670.520106][ T5927] usb 6-1: config 3 interface 174 altsetting 5 has a duplicate endpoint with address 0x6, skipping [ 670.551639][ T5927] usb 6-1: config 3 interface 174 altsetting 5 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 670.572467][ T5927] usb 6-1: config 3 interface 174 altsetting 5 has 12 endpoint descriptors, different from the interface descriptor's value: 10 [ 670.591935][ T5927] usb 6-1: config 3 interface 174 has no altsetting 0 [ 670.602798][ T5927] usb 6-1: New USB device found, idVendor=12d1, idProduct=9a6e, bcdDevice=e2.d9 [ 670.630860][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 670.659328][ T5927] usb 6-1: Product: syz [ 670.669434][ T5927] usb 6-1: Manufacturer: syz [ 670.674946][ T5927] usb 6-1: SerialNumber: syz [ 670.705846][T18766] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 670.873390][ T5931] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 671.003257][ T5931] usb 4-1: device descriptor read/64, error -71 [ 671.132182][ T5927] option 6-1:3.174: GSM modem (1-port) converter detected [ 671.142872][ T5927] usb 6-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 671.253417][ T5931] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 671.336145][T18766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.345233][T18766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.353553][ T2155] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 671.383157][ T5931] usb 4-1: device descriptor read/64, error -71 [ 671.493477][ T5931] usb usb4-port1: attempt power cycle [ 671.504640][ T2155] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.516305][ T2155] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 671.526364][ T2155] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 671.535595][ T2155] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 671.544952][ T2155] usb 5-1: Manufacturer: syz [ 671.551783][ T2155] usb 5-1: config 0 descriptor?? [ 671.833245][ T5931] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 671.856153][ T5931] usb 4-1: device descriptor read/8, error -71 [ 672.062978][T18797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 672.071873][T18797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 672.113868][ T5931] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 672.133998][ T5931] usb 4-1: device descriptor read/8, error -71 [ 672.245555][ T5931] usb usb4-port1: unable to enumerate USB device [ 672.723420][ T5844] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 672.723534][T16698] Bluetooth: hci2: command 0xfc11 tx timeout [ 673.106734][ T980] usb 6-1: USB disconnect, device number 64 [ 673.134526][ T980] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 673.152211][ T980] option 6-1:3.174: device disconnected [ 673.216475][T18802] siw: device registration error -23 [ 673.223966][T18802] /dev/rnullb0: Can't open blockdev [ 673.282257][T18804] /dev/rnullb0: Can't open blockdev [ 673.315723][T18807] virtio-fs: tag not found [ 673.843291][ T980] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 673.995440][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 674.005881][ T980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 674.024837][ T980] usb 4-1: config 1 has an invalid interface descriptor of length 3, skipping [ 674.042567][ T980] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 674.057769][ T980] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 674.068112][ T980] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 674.087909][ T980] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 674.098150][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 674.117979][ T980] usb 4-1: Product: syz [ 674.122320][ T980] usb 4-1: Manufacturer: syz [ 674.133180][ T980] usb 4-1: SerialNumber: syz [ 674.142310][T18816] Can't find a SQUASHFS superblock on rnullb0 [ 674.193963][ T5931] usb 5-1: USB disconnect, device number 86 [ 674.359994][T18809] netlink: 'syz.3.3833': attribute type 32 has an invalid length. [ 674.385991][T18827] siw: device registration error -23 [ 674.393363][T18809] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3833'. [ 674.415073][T18827] /dev/rnullb0: Can't open blockdev [ 674.450324][ T980] usb 4-1: 0:2 : does not exist [ 674.499383][ T980] usb 4-1: USB disconnect, device number 33 [ 674.558851][T17289] udevd[17289]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 675.003165][ T980] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 675.173366][ T980] usb 6-1: Using ep0 maxpacket: 16 [ 675.206705][ T980] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 675.223147][ T980] usb 6-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 675.231204][ T980] usb 6-1: Product: syz [ 675.253362][ T980] usb 6-1: SerialNumber: syz [ 675.276223][ T980] usb 6-1: config 0 descriptor?? [ 675.286817][ T980] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 675.314438][ T980] dvb_usb_af9015 6-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 675.333831][ T980] usb 6-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 675.340434][ T980] dvb_usb_af9035 6-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 675.508157][ T980] usb 6-1: USB disconnect, device number 65 [ 675.951757][T16698] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 675.963492][T16698] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 675.983313][T16698] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 675.993718][T16698] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 676.002998][T16698] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 676.363488][T18864] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 676.392208][T18864] VFS: Can't find a romfs filesystem on dev rnullb0. [ 676.392208][T18864] [ 676.512720][T12835] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.653321][ T5878] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 676.771906][T12835] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.825357][ T5878] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 676.841098][ T5878] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 676.866809][ T5878] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 676.913144][ T5878] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.953168][ T5878] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 676.983161][ T5878] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 677.005334][ T5878] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 677.005514][T12835] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.023144][ T5878] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 677.045610][ T5878] usb 2-1: Product: syz [ 677.054413][ T5878] usb 2-1: Manufacturer: syz [ 677.088715][T18877] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 677.119250][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 677.136747][ T5878] cdc_wdm 2-1:1.0: skipping garbage [ 677.156710][ T5878] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 677.173169][ T5878] cdc_wdm 2-1:1.0: Unknown control protocol [ 677.248042][T12835] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.294334][T18861] hsr0 speed is unknown, defaulting to 1000 [ 677.327079][ C1] wdm_int_callback: 5439 callbacks suppressed [ 677.327105][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.339844][ C1] wdm_int_callback: 5439 callbacks suppressed [ 677.339859][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.352349][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.358983][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.365578][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.372212][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.378754][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.385382][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.391733][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.398376][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.404778][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.411413][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.417758][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.424372][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.431356][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.438095][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.444386][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.451018][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.457340][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 677.463967][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 677.565567][T18895] /dev/rnullb0: Can't open blockdev [ 678.009139][ T5839] usb 2-1: USB disconnect, device number 13 [ 678.087166][ T5844] Bluetooth: hci2: command tx timeout [ 678.136840][T12835] bridge_slave_1: left allmulticast mode [ 678.142685][T12835] bridge_slave_1: left promiscuous mode [ 678.159293][T12835] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.182880][T12835] bridge_slave_0: left allmulticast mode [ 678.206864][T12835] bridge_slave_0: left promiscuous mode [ 678.221794][T12835] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.466889][T18933] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 678.476382][T18933] /dev/rnullb0: Can't open blockdev [ 678.676882][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3871'. [ 678.803332][ T5931] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 678.978269][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 678.990642][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 679.001380][ T5931] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 679.010655][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.028164][ T5931] usb 4-1: config 0 descriptor?? [ 679.446214][ T5931] usbhid 4-1:0.0: can't add hid device: -71 [ 679.452270][ T5931] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 679.465724][ T5931] usb 4-1: USB disconnect, device number 34 [ 679.991050][T12835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.046458][T12835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.056836][T18952] omfs: Invalid superblock (0) [ 680.104669][T12835] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 680.110046][T18957] loop2: detected capacity change from 0 to 7 [ 680.122668][T18957] Dev loop2: unable to read RDB block 7 [ 680.130485][T18957] loop2: unable to read partition table [ 680.136765][T18957] loop2: partition table beyond EOD, truncated [ 680.142968][T18957] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 680.163199][ T5844] Bluetooth: hci2: command tx timeout [ 680.175953][T12835] bond0 (unregistering): Released all slaves [ 680.371314][T18861] chnl_net:caif_netlink_parms(): no params data found [ 680.477829][T18969] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 680.497220][T18969] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 680.722848][T18984] loop2: detected capacity change from 0 to 7 [ 680.738219][T18984] Dev loop2: unable to read RDB block 7 [ 680.748426][T18984] loop2: unable to read partition table [ 680.759020][T18984] loop2: partition table beyond EOD, truncated [ 680.768714][T18984] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 681.113163][ T5839] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 681.159004][T18861] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.175962][T18861] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.189992][T18861] bridge_slave_0: entered allmulticast mode [ 681.229003][T18861] bridge_slave_0: entered promiscuous mode [ 681.293139][ T5839] usb 4-1: Using ep0 maxpacket: 16 [ 681.300435][ T5839] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 681.313860][ T5839] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 681.332667][T18861] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.333216][ T5839] usb 4-1: config 0 has no interface number 0 [ 681.353028][T18861] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.363202][ T5839] usb 4-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 681.383222][ T5839] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 681.402299][T18861] bridge_slave_1: entered allmulticast mode [ 681.420432][T18861] bridge_slave_1: entered promiscuous mode [ 681.437540][ T5839] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 681.463154][ T5839] usb 4-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 681.493129][ T5839] usb 4-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 681.534053][ T5839] usb 4-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 681.574283][ T5839] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 681.595093][ T5839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.616382][ T5839] usb 4-1: config 0 descriptor?? [ 681.622935][T18989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.660499][T12835] hsr_slave_0: left promiscuous mode [ 681.673772][T18989] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 681.691608][T12835] hsr_slave_1: left promiscuous mode [ 681.719437][ T5839] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 681.724793][T19007] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 681.739782][T19007] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 681.782166][T12835] veth1_macvtap: left promiscuous mode [ 681.822144][T12835] veth0_macvtap: left promiscuous mode [ 681.854001][T12835] veth1_vlan: left promiscuous mode [ 681.859326][T12835] veth0_vlan: left promiscuous mode [ 681.936595][T18989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.959127][T18989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 681.999217][ T9] usb 4-1: USB disconnect, device number 35 [ 682.243352][ T5844] Bluetooth: hci2: command tx timeout [ 682.631862][T19025] exFAT-fs (rnullb0): invalid boot record signature [ 682.663408][T19025] exFAT-fs (rnullb0): failed to read boot sector [ 682.671895][T19025] exFAT-fs (rnullb0): failed to recognize exfat type [ 684.323476][ T5844] Bluetooth: hci2: command tx timeout [ 684.418559][T12835] team0 (unregistering): Port device team_slave_1 removed [ 684.636007][T12835] team0 (unregistering): Port device team_slave_0 removed [ 684.644424][ T12] smc: removing ib device syz2 [ 685.688401][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.694873][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 698.098748][T16698] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 698.108707][T16698] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 698.122013][T16698] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 698.131918][T16698] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 698.140099][T16698] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 699.054576][ T1302] ================================================================== [ 699.062750][ T1302] BUG: KASAN: slab-use-after-free in handle_tx+0x1ec/0x610 [ 699.070006][ T1302] Read of size 8 at addr ffff88807d7d9020 by task aoe_tx0/1302 [ 699.077598][ T1302] [ 699.079955][ T1302] CPU: 1 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 699.080000][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.080021][ T1302] Call Trace: [ 699.080030][ T1302] [ 699.080038][ T1302] dump_stack_lvl+0x189/0x250 [ 699.080065][ T1302] ? rcu_is_watching+0x15/0xb0 [ 699.080087][ T1302] ? __kasan_check_byte+0x12/0x40 [ 699.080113][ T1302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.080134][ T1302] ? rcu_is_watching+0x15/0xb0 [ 699.080155][ T1302] ? lock_release+0x4b/0x3e0 [ 699.080175][ T1302] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 699.080204][ T1302] ? __virt_addr_valid+0x1c8/0x5c0 [ 699.080229][ T1302] ? __virt_addr_valid+0x4a5/0x5c0 [ 699.080254][ T1302] print_report+0xd2/0x2b0 [ 699.080280][ T1302] ? handle_tx+0x1ec/0x610 [ 699.080303][ T1302] kasan_report+0x118/0x150 [ 699.080334][ T1302] ? handle_tx+0x1ec/0x610 [ 699.080361][ T1302] handle_tx+0x1ec/0x610 [ 699.080391][ T1302] dev_hard_start_xmit+0x2d4/0x830 [ 699.080426][ T1302] __dev_queue_xmit+0x1adf/0x3a70 [ 699.080459][ T1302] ? __dev_queue_xmit+0x27e/0x3a70 [ 699.080487][ T1302] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 699.080524][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 699.080555][ T1302] ? do_raw_spin_lock+0x121/0x290 [ 699.080587][ T1302] ? do_raw_spin_unlock+0x122/0x240 [ 699.080619][ T1302] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 699.080652][ T1302] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.080697][ T1302] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.080728][ T1302] tx+0x6b/0x190 [ 699.080757][ T1302] ? __pfx_tx+0x10/0x10 [ 699.080785][ T1302] kthread+0x1d0/0x3e0 [ 699.080816][ T1302] ? __pfx_kthread+0x10/0x10 [ 699.080842][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 699.080863][ T1302] ? __kthread_parkme+0x7b/0x200 [ 699.080886][ T1302] ? __kthread_parkme+0x1a1/0x200 [ 699.080913][ T1302] kthread+0x70e/0x8a0 [ 699.080940][ T1302] ? __pfx_kthread+0x10/0x10 [ 699.080965][ T1302] ? __pfx_kthread+0x10/0x10 [ 699.080993][ T1302] ? _raw_spin_unlock_irq+0x23/0x50 [ 699.081020][ T1302] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.081048][ T1302] ? __pfx_kthread+0x10/0x10 [ 699.081075][ T1302] ret_from_fork+0x3fc/0x770 [ 699.081097][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 699.081119][ T1302] ? __switch_to_asm+0x39/0x70 [ 699.081145][ T1302] ? __switch_to_asm+0x33/0x70 [ 699.081169][ T1302] ? __pfx_kthread+0x10/0x10 [ 699.081196][ T1302] ret_from_fork_asm+0x1a/0x30 [ 699.081229][ T1302] [ 699.081236][ T1302] [ 699.323386][ T1302] Allocated by task 16603: [ 699.327803][ T1302] kasan_save_track+0x3e/0x80 [ 699.332489][ T1302] __kasan_kmalloc+0x93/0xb0 [ 699.337093][ T1302] __kmalloc_cache_noprof+0x230/0x3d0 [ 699.342495][ T1302] alloc_tty_struct+0xa6/0x780 [ 699.347269][ T1302] tty_init_dev+0x59/0x4d0 [ 699.351692][ T1302] tty_open+0x5ab/0xd10 [ 699.355861][ T1302] chrdev_open+0x4c9/0x5e0 [ 699.360296][ T1302] do_dentry_open+0xdf0/0x1970 [ 699.365067][ T1302] vfs_open+0x3b/0x340 [ 699.369145][ T1302] path_openat+0x2ee5/0x3830 [ 699.373746][ T1302] do_filp_open+0x1fa/0x410 [ 699.378265][ T1302] do_sys_openat2+0x121/0x1c0 [ 699.382956][ T1302] __x64_sys_openat+0x138/0x170 [ 699.387808][ T1302] do_syscall_64+0xfa/0x3b0 [ 699.392320][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.398212][ T1302] [ 699.400536][ T1302] Freed by task 5927: [ 699.404521][ T1302] kasan_save_track+0x3e/0x80 [ 699.409211][ T1302] kasan_save_free_info+0x46/0x50 [ 699.414245][ T1302] __kasan_slab_free+0x62/0x70 [ 699.419013][ T1302] kfree+0x18e/0x440 [ 699.422921][ T1302] process_scheduled_works+0xae1/0x17b0 [ 699.428470][ T1302] worker_thread+0x8a0/0xda0 [ 699.433068][ T1302] kthread+0x70e/0x8a0 [ 699.437168][ T1302] ret_from_fork+0x3fc/0x770 [ 699.441767][ T1302] ret_from_fork_asm+0x1a/0x30 [ 699.446579][ T1302] [ 699.448906][ T1302] Last potentially related work creation: [ 699.454619][ T1302] kasan_save_stack+0x3e/0x60 [ 699.459322][ T1302] kasan_record_aux_stack+0xbd/0xd0 [ 699.464534][ T1302] insert_work+0x3d/0x330 [ 699.468871][ T1302] __queue_work+0xcfc/0xfe0 [ 699.473381][ T1302] queue_work_on+0x181/0x270 [ 699.477979][ T1302] tty_release_struct+0xb8/0xd0 [ 699.482834][ T1302] tty_release+0xcb0/0x1640 [ 699.487338][ T1302] __fput+0x449/0xa70 [ 699.491324][ T1302] task_work_run+0x1d1/0x260 [ 699.495925][ T1302] do_exit+0x6b5/0x22e0 [ 699.500362][ T1302] do_group_exit+0x21c/0x2d0 [ 699.504965][ T1302] get_signal+0x1286/0x1340 [ 699.509493][ T1302] arch_do_signal_or_restart+0x9a/0x750 [ 699.515050][ T1302] exit_to_user_mode_loop+0x75/0x110 [ 699.520427][ T1302] do_syscall_64+0x2bd/0x3b0 [ 699.525020][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.530920][ T1302] [ 699.533248][ T1302] The buggy address belongs to the object at ffff88807d7d9000 [ 699.533248][ T1302] which belongs to the cache kmalloc-cg-2k of size 2048 [ 699.547577][ T1302] The buggy address is located 32 bytes inside of [ 699.547577][ T1302] freed 2048-byte region [ffff88807d7d9000, ffff88807d7d9800) [ 699.561386][ T1302] [ 699.563734][ T1302] The buggy address belongs to the physical page: [ 699.570152][ T1302] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7d7d8 [ 699.578925][ T1302] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 699.587427][ T1302] memcg:ffff888077f4c381 [ 699.591695][ T1302] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 699.599680][ T1302] page_type: f5(slab) [ 699.603672][ T1302] raw: 00fff00000000040 ffff88801a84b3c0 0000000000000000 dead000000000001 [ 699.612257][ T1302] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888077f4c381 [ 699.620932][ T1302] head: 00fff00000000040 ffff88801a84b3c0 0000000000000000 dead000000000001 [ 699.629605][ T1302] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888077f4c381 [ 699.638299][ T1302] head: 00fff00000000003 ffffea0001f5f601 00000000ffffffff 00000000ffffffff [ 699.646979][ T1302] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 699.655663][ T1302] page dumped because: kasan: bad access detected [ 699.662106][ T1302] page_owner tracks the page as allocated [ 699.667836][ T1302] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5845, tgid 5845 (syz-executor), ts 89603094048, free_ts 57466514120 [ 699.689208][ T1302] post_alloc_hook+0x240/0x2a0 [ 699.694075][ T1302] get_page_from_freelist+0x21e4/0x22c0 [ 699.699636][ T1302] __alloc_frozen_pages_noprof+0x181/0x370 [ 699.705456][ T1302] alloc_pages_mpol+0x232/0x4a0 [ 699.710407][ T1302] allocate_slab+0x8a/0x3b0 [ 699.714927][ T1302] ___slab_alloc+0xbfc/0x1480 [ 699.719611][ T1302] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 699.726045][ T1302] kmemdup_noprof+0x2b/0x70 [ 699.730560][ T1302] neigh_sysctl_register+0x9f/0xa80 [ 699.735763][ T1302] addrconf_sysctl_register+0xb3/0x1c0 [ 699.741238][ T1302] ipv6_add_dev+0xd46/0x1370 [ 699.745839][ T1302] addrconf_notify+0x794/0x1010 [ 699.750721][ T1302] notifier_call_chain+0x1b3/0x3e0 [ 699.755842][ T1302] register_netdevice+0x1608/0x1ae0 [ 699.761152][ T1302] register_netdev+0x40/0x60 [ 699.765758][ T1302] loopback_net_init+0x75/0x150 [ 699.770627][ T1302] page last free pid 5590 tgid 5590 stack trace: [ 699.776958][ T1302] __free_frozen_pages+0xc71/0xe70 [ 699.782080][ T1302] __put_partials+0x161/0x1c0 [ 699.786776][ T1302] put_cpu_partial+0x17c/0x250 [ 699.791580][ T1302] __slab_free+0x2f7/0x400 [ 699.796048][ T1302] qlist_free_all+0x97/0x140 [ 699.800657][ T1302] kasan_quarantine_reduce+0x148/0x160 [ 699.806164][ T1302] __kasan_slab_alloc+0x22/0x80 [ 699.811043][ T1302] __kmalloc_noprof+0x224/0x4f0 [ 699.815922][ T1302] tomoyo_realpath_from_path+0xe3/0x5d0 [ 699.821489][ T1302] tomoyo_path_number_perm+0x1e8/0x5a0 [ 699.826975][ T1302] security_file_ioctl+0xcb/0x2d0 [ 699.832017][ T1302] __se_sys_ioctl+0x47/0x170 [ 699.836625][ T1302] do_syscall_64+0xfa/0x3b0 [ 699.841146][ T1302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.847063][ T1302] [ 699.849503][ T1302] Memory state around the buggy address: [ 699.855176][ T1302] ffff88807d7d8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 699.863243][ T1302] ffff88807d7d8f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 699.871311][ T1302] >ffff88807d7d9000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 699.879390][ T1302] ^ [ 699.884502][ T1302] ffff88807d7d9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 699.892567][ T1302] ffff88807d7d9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 699.900634][ T1302] ================================================================== [ 699.908773][ T1302] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 699.915998][ T1302] CPU: 1 UID: 0 PID: 1302 Comm: aoe_tx0 Not tainted 6.16.0-rc3-syzkaller-00042-g78f4e737a53e #0 PREEMPT(full) [ 699.927760][ T1302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.937860][ T1302] Call Trace: [ 699.941194][ T1302] [ 699.944209][ T1302] dump_stack_lvl+0x99/0x250 [ 699.948838][ T1302] ? __asan_memcpy+0x40/0x70 [ 699.953452][ T1302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.958691][ T1302] ? __pfx__printk+0x10/0x10 [ 699.963345][ T1302] panic+0x2db/0x790 [ 699.967269][ T1302] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.972529][ T1302] ? __pfx_panic+0x10/0x10 [ 699.977085][ T1302] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 699.983043][ T1302] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 699.989002][ T1302] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 699.995394][ T1302] ? handle_tx+0x1ec/0x610 [ 699.999859][ T1302] check_panic_on_warn+0x89/0xb0 [ 700.004846][ T1302] ? handle_tx+0x1ec/0x610 [ 700.009302][ T1302] end_report+0x78/0x160 [ 700.013590][ T1302] kasan_report+0x129/0x150 [ 700.018132][ T1302] ? handle_tx+0x1ec/0x610 [ 700.022587][ T1302] handle_tx+0x1ec/0x610 [ 700.026880][ T1302] dev_hard_start_xmit+0x2d4/0x830 [ 700.032037][ T1302] __dev_queue_xmit+0x1adf/0x3a70 [ 700.037112][ T1302] ? __dev_queue_xmit+0x27e/0x3a70 [ 700.042264][ T1302] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 700.048542][ T1302] ? __pfx___dev_queue_xmit+0x10/0x10 [ 700.053943][ T1302] ? do_raw_spin_lock+0x121/0x290 [ 700.059001][ T1302] ? do_raw_spin_unlock+0x122/0x240 [ 700.064241][ T1302] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 700.070174][ T1302] ? _raw_spin_unlock_irq+0x23/0x50 [ 700.075412][ T1302] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.080656][ T1302] tx+0x6b/0x190 [ 700.084262][ T1302] ? __pfx_tx+0x10/0x10 [ 700.088533][ T1302] kthread+0x1d0/0x3e0 [ 700.092632][ T1302] ? __pfx_kthread+0x10/0x10 [ 700.097253][ T1302] ? __pfx_default_wake_function+0x10/0x10 [ 700.103084][ T1302] ? __kthread_parkme+0x7b/0x200 [ 700.108072][ T1302] ? __kthread_parkme+0x1a1/0x200 [ 700.113124][ T1302] kthread+0x70e/0x8a0 [ 700.117335][ T1302] ? __pfx_kthread+0x10/0x10 [ 700.121958][ T1302] ? __pfx_kthread+0x10/0x10 [ 700.126579][ T1302] ? _raw_spin_unlock_irq+0x23/0x50 [ 700.131807][ T1302] ? lockdep_hardirqs_on+0x9c/0x150 [ 700.137057][ T1302] ? __pfx_kthread+0x10/0x10 [ 700.141665][ T1302] ret_from_fork+0x3fc/0x770 [ 700.146265][ T1302] ? __pfx_ret_from_fork+0x10/0x10 [ 700.151391][ T1302] ? __switch_to_asm+0x39/0x70 [ 700.156168][ T1302] ? __switch_to_asm+0x33/0x70 [ 700.160963][ T1302] ? __pfx_kthread+0x10/0x10 [ 700.165567][ T1302] ret_from_fork_asm+0x1a/0x30 [ 700.170343][ T1302] [ 700.173684][ T1302] Kernel Offset: disabled [ 700.178016][ T1302] Rebooting in 86400 seconds..