last executing test programs: 9m53.497474166s ago: executing program 2 (id=7): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_usb_connect(0x5, 0x3f, &(0x7f0000000480)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io$rtl8150(r5, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x20, 0x11, 0x5, "974fe2667b"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000800)={0x0, 0x17}, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x20, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0xf7}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0xf8}, 0x0}) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_GET_WIPHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="59bbfeffffff000000090000000000000000", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) (async) listen(r0, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f0000000840)) (async, rerun: 32) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) (async, rerun: 32) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r9, 0xc0884113, &(0x7f0000000240)={0x1, 0x20, 0x9, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x9, 0xfffffffb, 0x1}) (async) ioctl$SNDRV_PCM_IOCTL_FORWARD(r9, 0x40084149, &(0x7f0000000340)=0x6) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x28, r3, 0x20, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffffe, 0x42}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x48800}, 0x4004000) (async) listen(r1, 0x4) (async) r10 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) (async, rerun: 32) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000100)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0) (rerun: 32) preadv(r10, &(0x7f0000000480)=[{&(0x7f0000000280)=""/212, 0xd4}], 0x1, 0xffeffbfb, 0xc) 9m53.323640774s ago: executing program 2 (id=9): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) fadvise64(r0, 0x92, 0x5, 0x2) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) read(r1, &(0x7f00000001c0)=""/93, 0x5d) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000240)={0x2, 0x4}, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x22052, r0, 0xa471a000) 9m48.707714824s ago: executing program 0 (id=44): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x882, 0x0) getpeername$tipc(r1, 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000140)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000140)=0x3ff, 0x4) sendmsg$inet6(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="3600000006000000000000000000000005000000000000000300000000000000f9db0d400000000000002f6465762f726e756c6c62300000"], 0x36) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x48, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0xc300, 0x2, 0x1, 0x0, {0x4, 0x1000, 0x0, 0x8a, 0x0, 0x1, 0x1, 0x1}, 0x1, 0xee000000, 0x1b}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) bind$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x41}, 0x3}}, 0x10) listen(r4, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x28}}, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r10, 0x80284504, &(0x7f0000000040)=""/185) write$UHID_INPUT(r9, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$tipc(r8, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x0) 9m47.751657909s ago: executing program 2 (id=56): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119edabebbb1, 0x20011, r0, 0xe28d3000) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0x8000000, 0x4000, 0xeeee0000, 0x8080000], 0x7, 0x20, 0x6}) 9m47.578485589s ago: executing program 2 (id=58): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1000012, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a30"], 0xd4}}, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async, rerun: 32) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) (async, rerun: 32) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000580)='./file0/file0\x00', 0x0, 0x111016, 0x0) (async) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') (rerun: 32) pread64(r2, &(0x7f00000000c0)=""/144, 0x90, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x28, r4, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TX_RATES={0xc, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_60GHZ={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000801}, 0x10) ioctl$MON_IOCX_GETX(r2, 0x4018920a, &(0x7f00000000c0)={&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000040)=""/85, 0x55}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m47.411267191s ago: executing program 2 (id=59): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$unix(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee01, r1}}}], 0x20, 0x1053}, 0xc4) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0xd) accept(r0, 0x0, &(0x7f00000001c0)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ad060000", 0x4) sendmmsg$inet(r4, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002a40)="0d5ebfd6dfe98a01b2fb5b0eb19a417353a0833d961a98422333bb10a75289c4353c82666dbc1db13e21381283bf8a01be70deccac2c9bce8a8ea365f060b795", 0x40}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB='@', @ANYBLOB="6c09790c3e71d64fb8294a8c4306a84f64e8e7ed39607bebb8a1af292577fac1d3363079c0c946aab163ff9d2973281770c0910ad47e090eb8da55d9e2c708c0a47d60f6ef9b7b3b7e428549bcaa0d3a2b905e58e72e47532a2bbe79f677a937ce4540f5047767a4b86848ddc8808f215fafcc6166d8f725a12b496ae769ed66f55caed99a9f92f1ea05980d41470845943cc369558e6457f32aa47375f42ba463d41578578df9"], 0x40}}], 0x1, 0x715076165a76ad26) recvmmsg(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/120, 0x78}], 0x1}, 0x5}], 0x1, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffc, @local, 0x4}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000000080), 0x10000000000000f3, 0x114a, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4800, &(0x7f0000000000)=ANY=[@ANYBLOB="a7"]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000308000a40000000000900020073797a31000000000900010073797a30000000000e0005400000000c080003400100000808000740000000310800064000000000300000000c0a01010000000000000000070000000900020073797a3204e2000380140000001000010000001900000000000084000a00"/204], 0xcc}}, 0x0) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x21) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r8, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000156000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000140)="65660fc736b9230200000f320fc5b0040040000f0f10970fe8fa6466baf80cb82cf59b88ef66bafc0cb000eec4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bafc0c66ba004066ef66b8296c", 0x69}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m47.228155416s ago: executing program 2 (id=60): r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x0) close$binfmt(r0) unlink(&(0x7f00000002c0)='.\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r1, 0xc646b000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x7}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000800)=""/49}, {&(0x7f00000009c0)=""/222}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe5}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m46.919323583s ago: executing program 32 (id=60): r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x8, 0x0) close$binfmt(r0) unlink(&(0x7f00000002c0)='.\x00') r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf411119ed8bebbbd, 0x20011, r1, 0xc646b000) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x14, 0x0, 0x7}, 0x14}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000240)={0x0, 0x2}, 0x8) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e3}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000ac0)=[{&(0x7f00000004c0)=""/203, 0xcb}, {&(0x7f0000000140), 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f0000000800)=""/49}, {&(0x7f00000009c0)=""/222}], 0x6, &(0x7f0000000640)=""/123, 0xfffffffffffffe63, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe5}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m45.583516301s ago: executing program 0 (id=63): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4, 0x20011, r0, 0xd6baf000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="c8628037bfcf242687fca823731b8df5a2444c97391c5a5425d4dc9e57c191065b28bdddbb0df0aa3ddded5229fb44978b7e7d6bffdfed0498a0217c58477b1fec79254368c456f03cee511ebf7838e66ba73cf2f776cc699b980b25fa4ff108d38ac58f75b91e0d245bf51393cf25340b3fbc35027ab0be4760353dde4e4046d44642e0cd7b5a658a46d5645577ebf8014fba98235021f6e356a8fc8e905ae39edc90ffcd4ab7e10e0d976cdd601fc46ec5003d20a6cbfbe9101833dc7b8256bd5cd619baf55791be5548e76e16e48d39e27602cbc7c5e6598216f68fc5dc5761707c67a965d97395ee75c081", 0xed}, {&(0x7f0000000100)="8557080f60e81827470983740a686c3aa02eb046a62ea694653ebe1c89ee9bfd71a539cb4dec52ed61d211bcdc37b8a6973c47cfbc90aa04986da68bb92e5ded5325753471d50940d2b03e74e733f8c0fc0c28a26e774060e44252713b3c8a12ea99906f4bc5d7597b5e203f4eb6514d2debdff439454b164d92776afb066528b432e56ec492948bccec127ecf032a3eb28e4d1b7eef3de2afbfa460849170f2f9", 0xa1}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000001c0)="b0ce8605481cf16529d997404430d6b7aa8012a8466d62bcb8634f935f6607eb9458001d8ba66f", 0x27}, {&(0x7f0000000200)="e27653c6951a0d91992b5c631e052d5a3ff2521f477d733d9470eece184a8b76f33ed46e8e84cdbc7af7a953b4f405da9a6e271ac7513c", 0x37}], 0x5, 0xfffffffa, 0x3, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3) mremap(&(0x7f000085f000/0x1000)=nil, 0x1000, 0x13000, 0x4, &(0x7f0000018000/0x13000)=nil) 9m45.481141851s ago: executing program 0 (id=64): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) (async) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc401020301090212"], 0x0) (async) syz_open_procfs(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x54, r7, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r3) sendmsg$TIPC_NL_BEARER_ENABLE(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r9, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000202010200000000000000000a0000003c0002802c00018014000300fc0000000000000000000000000000001400040000000000000000000000ffffffffffff0c00028005000100"], 0x50}}, 0x0) (async) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0xfffffffffffffffc, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 9m44.244200254s ago: executing program 0 (id=67): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r0, 0x4a58c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x5b) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x20000002}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}, @NFT_MSG_NEWTABLE={0x18c, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_USERDATA={0x4d, 0x6, "94163589f0ef878d80171bbed91cada71d2544141aa1de944654c2070982b1277bf5a2b5cb2a54fb4654cdd9f39d0d3228800f286c1fecbe719556024c282f44cbb94f7621d1e3f61c"}, @NFTA_TABLE_USERDATA={0x101, 0x6, "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"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_USERDATA={0x16, 0x6, "f1de8f7ddc9a7f37d1c48d7daace42aad278"}]}], {0x14, 0x10}}, 0x29c}}, 0x0) openat$cgroup(r1, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) statx(r1, &(0x7f0000005b40)='./file0\x00', 0x4000, 0x7ff, 0x0) getdents64(r1, &(0x7f0000000240)=""/131, 0x83) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r3 = getpid() syz_pidfd_open(r3, 0x0) process_madvise(r1, 0x0, 0x0, 0x18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4211, r4, 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003040)={'wlan0\x00'}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x1, 0x100, 0x9b02}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, 0x0, 0x10) ioctl$DRM_IOCTL_GET_STATS(0xffffffffffffffff, 0x80f86406, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9m43.743703803s ago: executing program 0 (id=69): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendfile(r0, r0, 0x0, 0x7ffff000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000002000/0x4000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000004000/0x3000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000006000/0x4000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000003000/0x4000)=nil, &(0x7f0000004000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002500)=' ', 0x1}, 0x68) inotify_init() r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x73}}, 0x10) ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x2, 0x5002) socket$can_bcm(0x1d, 0x2, 0x2) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0400c90001"], 0x7) 9m43.373838595s ago: executing program 0 (id=72): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001280)={{r0}}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000080)=0x28b, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 9m43.108750778s ago: executing program 33 (id=72): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000001280)={{r0}}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000080)=0x28b, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 8m18.923348929s ago: executing program 5 (id=536): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x60a00, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x20010, r0, 0x6a7ed000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000007e00), 0xffffffffffffffff) (async) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x10) (async) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r1 = getpid() ptrace$poke(0x4, r1, &(0x7f0000000000), 0xa) 8m18.63737139s ago: executing program 5 (id=539): ptrace(0x10, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x29) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='gfs2\x00', 0x2002833, 0x0) 8m18.515095385s ago: executing program 5 (id=541): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x28011, r0, 0x0) sendfile(r0, r0, &(0x7f0000001000)=0x7fffffff, 0x7ffff000) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) (async) timer_create(0x0, &(0x7f00000001c0)={0x0, 0xd, 0x1, @thr={&(0x7f00000000c0)="05f0d1fa2e019ca05146d6bb01af4473f0b6df1b2a8a1a07685bc9fd827882868791b9d5e7e2484771f98176af3c29d08f20a7b7bdb512b534b4451b1ac3472bb72ab97af2010484d73ee2c3916fe9be28111381702934cb1c27fdd48b4c5f1ff041706300b2779126952c3189bb851954888076ee2ccb815eec70c1072672f2e4add166d1bed140cbf0ba975da48a1f475e87b1d2d37ae2cb3193f5af79f29fb2c46eea1d4aba703de895c14ba8548dfa4dfc9556116deb2b99a813ddf00855359daba36ea66d66ac6f93dd123d96256034d36551bc51d45cc8ccde3a892e8fd21390ac62c49f4f564153a10902ab435cd8ec73c38133", &(0x7f0000001180)="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"}}, &(0x7f0000000200)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000480)={0xf62, r0, 0x1}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) syz_fuse_handle_req(r7, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64) syz_fuse_handle_req(r7, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x100000000, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x42, 0x0) (async) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000002180)={0x2ca4, r4, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "45f2b08224b218e7bc"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x1}, @NL80211_ATTR_FILS_ERP_RRK={0x80, 0xfc, "47a189205f8725068670baf040a072e3d42e6ead31e776ec8c916f00df5e1e2eafd68ddbd373ab7593ba855b1e30fa093745769667ce278fa70dbbbeaa780efdd7daa730c8a466986578f5dca70f1ee79b884563f69b1e15b79fad2629f1e61696e9eff912c0f11abe66e9bc14c2b99a0ba0a6a3ec0c02d8b4d19655"}, @NL80211_ATTR_FILS_ERP_REALM={0x72, 0xfa, "d942b0fb9daaaf31db30435e4b4ba16d2bd5d644effe35dbd834af3509ea6b3fc055e671ea13325d50d9b6c7b71bf46e77eb5adb3a63cbadcc0dec984d211d73362ea4770fb813a7caad08a37f5cde29c06e5d2984b86166d88ded3712dd1a9d69bc05a5038f1d567fe82f28a701"}, @NL80211_ATTR_FILS_ERP_REALM={0xda, 0xfa, "8729a0405ab2c45d4e52b6bed28661eb858adb7b11a99e080a012df66c60ab390ca28b7c2338db3d479946c7e0eb3c583b06b7713780cc8310a257c1a4f4dedda610398e1edaa863117fcb224209771a8c285cc86fc575c2ea795c889b2bb2b056b9272f5719be0eb15d5a7e58f995a43bcc169503d9b067aeac938d0e75479be9d10ed849a03a37510bff5df14c92fa23948e68519941f78353b500bc14718a085796dffcbf7894cf10158f9a32a26269959b9d40401c8466f32a7edaed6e78a5d65d1bded818a6347ca616fee777cb51b2b31db593"}, @NL80211_ATTR_FILS_ERP_REALM={0xe5, 0xfa, "eff6a7139cd87bb84b2acbe8e374357e248c321f161cdf2f05f2ee5e6ac8166f5b4d379a30e868fc6dea93057118325fa2bb0d62183ce0e284bf3f9a46d8ec355ce1d9b7584be050db1176e08b8387fe8c122ef77b5485b603135e262b06db2695ce2d6ba6db1344a2b7249077c054c708fcc8217aa4552c3ea1ff5b7cf83b55ff74071706155a43fbddb0573e311be5a9fab3d8b6dc2ae12097ba30f1858cc82c89e00c91c75e8695e237cf955e832068e2e9f2117d8c943367d03440895175f4591ab98acaa24927fc124ff45a2d5d3185b8d7236ed08cbca4ce977c6a995af3"}, @NL80211_ATTR_FILS_ERP_RRK={0x38, 0xfc, "48c46932039bfddc1978edae5f92633c47d8f39bd1413f1d4cb9ebf479a406834a736a29f6bf62b8ba23a0f244bd4b0a56e98f88"}, @NL80211_ATTR_FILS_ERP_REALM={0x58, 0xfa, "fad0221e4cf7b863b427f849d608d7c441bf21ae6246b8d624b24b206586aa4afc9748c6e3e9acf070588dbb644c23640059e8706cf3abfee3b4f63c69ad486dea3bb2b0dcba5e43f04a700346a444e39a7330fb"}], @NL80211_ATTR_IE={0x22a, 0x2a, [@cf={0x4, 0x6, {0x7, 0x7f, 0xc1, 0x1}}, @ht={0x2d, 0x1a, {0x2000, 0x3, 0x7, 0x0, {0x7, 0x7, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}, 0x6, 0x6, 0x3}}, @perr={0x84, 0xe2, {0xb, 0xe, [{{0x0, 0x1}, @device_b, 0x4e3b, @value=@device_b, 0x2e}, {{}, @device_b, 0x4, @void, 0x9}, {{0x0, 0x1}, @device_b, 0x7fff, @value, 0x3a}, {{}, @device_a, 0x8, @void, 0xc}, {{0x0, 0x1}, @broadcast, 0x7, @value=@device_b, 0x1}, {{}, @broadcast, 0x5f, @void, 0x34}, {{0x0, 0x1}, @device_a, 0xb8, @value=@broadcast, 0xa}, {{}, @broadcast, 0x8, @void, 0x8}, {{0x0, 0x1}, @device_a, 0x7fff, @value=@broadcast, 0x1b}, {{0x0, 0x1}, @device_b, 0x7, @value=@broadcast, 0x24}, {{}, @device_b, 0x7, @void, 0xa}, {{0x0, 0x1}, @broadcast, 0x8, @value=@device_b, 0x38}, {{}, @device_b, 0x5, @void, 0x38}, {{}, @device_b, 0x4, @void, 0x9}]}}, @measure_req={0x26, 0xbf, {0x8, 0x36, 0x0, "3c298eeebff3fd2ee3368cc33cbbeceabb2cbebf60aba505819f167b3494c7d1eb144c1a5945653f334ef3cd79b19a14be356fedb9476c762eb69267b30470e2b07c96d1f604560777d394fa866d4e696ce0e8ace4f9a1c3c0a4080d61b7d45aed02afa12a84d48ac88eccd072934cc9345357182cbf0c26e5123570863b6cef7ec574096a00ab4a8f5668dc0d50d040cc420ece5fe0011d4cd23bcca4c3289fc7476f75772b998c41f17a41523ce307601b96c3300cf8b66a6ee576"}}, @preq={0x82, 0x57, {{0x0, 0x0, 0x1, 0x0, 0x1}, 0x80, 0x8, 0xfffffff9, @device_a, 0x5dc09d4b, @value=@device_b, 0x4, 0x5be, 0x5, [{{0x0, 0x0, 0x1}, @broadcast, 0x7}, {{0x1}, @device_b, 0x7f5}, {{0x0, 0x0, 0x1}, @device_a, 0xfff}, {{}, @device_b, 0x8}, {{0x1}, @device_a, 0x7}]}}, @ibss={0x6, 0x2, 0x1000}]}, @NL80211_ATTR_IE={0x173, 0x2a, [@random_vendor={0xdd, 0xdd, "8a3390f2cda7ea405c773094fe99079486636064ee77adb1f890446a456311252424710b340215b41d8c5a0ac4ee05ba3c6943199c4cc3f4ab81579d499e5f54a9296b164a21ac0424fe0708ed246cd45870f2b7074b32c8653229de7ce289ff40f0ae05170de124b6aefbb734ef8685ac848e17d4be32ef00a73e7b852fcf1518f7c4af83f6eeafd8d8273d6073490c04fa1ccbc528c2befe79a927f68b978eaf6e9d612240fcac7c5db0532b320dc8387c867dd947b35a022aa0e0bade53817974ec8fe47fe2a5ecf22421eea78fb92679a345ba2ed50c04ef2ca610"}, @erp={0x2a, 0x1, {0x1}}, @preq={0x82, 0x88, {{0x1, 0x1, 0x1}, 0x5, 0x8, 0x4, @device_a, 0x4000000, @void, 0x9ec, 0x1, 0xa, [{{0x1, 0x0, 0x1}, @device_b}, {{0x1}, @broadcast, 0x7fffffff}, {{0x1}, @broadcast, 0x1}, {{}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @device_a, 0x4}, {{0x1}, @device_b, 0xffff8cdd}, {{}, @device_a, 0x1}, {{0x1, 0x0, 0x1}, @device_a, 0xb}, {{}, @device_a, 0x752}, {{0x1}, @broadcast, 0x7f}]}}, @challenge={0x10, 0x1, 0x5d}]}, @NL80211_ATTR_IE={0x49, 0x2a, [@ssid={0x0, 0x6, @default_ibss_ssid}, @erp={0x2a, 0x1, {0x1, 0x1}}, @challenge={0x10, 0x1, 0x98}, @cf={0x4, 0x6, {0x6, 0xc, 0x3}}, @link_id={0x65, 0x12, {@random="5717b2b800d2"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x8, @void, @val=0x40, @val="0c80e74885e3bd5d6b42897dcd1d47b2"}}, @dsss={0x3, 0x1, 0x18411abff1675ac4}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_USERNAME={0x5, 0xf9, "da"}, @NL80211_ATTR_FILS_ERP_REALM={0x94, 0xfa, "ac28b48d385437b96d1ef5bba529b693fb68080150b830406aee7aed8cb7e0a2580b2879e8cb1a312e614b8f095d1276a885a594ba3a5033063685237f47e1f2e0e701ad7ce9b7252c48c9589e6d8a994190a718725593ee161ceb000ec7cc1be3691bd96031b481b9b450bd13f7b22cb144cf88e826e986cf83e111fb281a805c3d6534b63f0f0f3a847e45ce391ff0"}, @NL80211_ATTR_FILS_ERP_RRK={0x8c, 0xfc, "e073f02190c8dabb25259983e265562855000cb3c96e46d08978ca43d8c483dc612b73563f38c1d71d77146b29e48819db54283471d89026a590b6e85caed4090054c04e421df110d1c97fa3ce84204883a2a6a171612fcc5d7bb3a21ff187a1966fc59cbc2f80d7ac1dc8a0303140f6e7d7de0036a9a2dd44600696028358f4d68ed08f9ffa6bef"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "e9ec4d"}, @NL80211_ATTR_FILS_ERP_USERNAME={0xc, 0xf9, "e60cc823eca615f0"}], @NL80211_ATTR_IE={0x2e8, 0x2a, [@random={0x1, 0xb7, "1651784452895afacb74f89083acea5709da707fa52662bf7e3f9b4cb70284e7171dc0e96070213f814b316097ab5955b0261ab2bb2399895d7d6b34bc91e07d7e1167310638c6bfaed46cb5be160ecd953d22b97a3e79c26451318eebb68a7d93fcb1d8f21dd7e7a23d96430eab7ee1eff96528c7ca86d0726d6ac0662e754fb25376f587ffa5e2c42a609caa5921c1b51ccd300358eab333d146ebc80e260c670a9aad9b7c2403264be52ce926fb7d30f95eacd48638"}, @random={0x3, 0x3b, "9ea25fe8baa1352416c57b12d19452261f6cb4643df43517e862a2afacda0f7e195f8bc67d41355a3627efb5c53c2dc89ed6017e569882e9c1c128"}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x96, 0x9, @broadcast, 0x222f09f2, @value=@device_b, 0x7, 0x10, @broadcast, 0x1}}, @gcr_ga={0xbd, 0x6, @broadcast}, @perr={0x84, 0x108, {0x7, 0x10, [{{}, @device_b, 0x0, @void, 0x7}, {{}, @device_b, 0x80000001, @void, 0x3}, {{}, @broadcast, 0x4, @void, 0x5}, {{0x0, 0x1}, @device_a, 0x48e7, @value, 0x42}, {{0x0, 0x1}, @device_b, 0xd19, @value=@device_b, 0x37}, {{0x0, 0x1}, @broadcast, 0x1, @value, 0xc}, {{0x0, 0x1}, @device_b, 0x5be6905a, @value=@broadcast, 0x33}, {{0x0, 0x1}, @device_b, 0x9, @value=@broadcast, 0x5}, {{}, @broadcast, 0x6, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0x7, @value=@broadcast, 0x17}, {{0x0, 0x1}, @broadcast, 0x6, @value=@broadcast, 0x16}, {{}, @device_b, 0x6, @void, 0x3a}, {{0x0, 0x1}, @device_b, 0x8, @value, 0x3d}, {{}, @device_b, 0x97b, @void, 0x3a}, {{0x0, 0x1}, @broadcast, 0x101, @value=@broadcast, 0x1}, {{}, @device_b, 0x8, @void, 0xe}]}}, @random={0x3, 0x98, "204afa8716cd6527cc077564041557cb3ba275a37ae61a93104c38161d9f31e1cff025067f35052d57374276a0e517335956ade5b2356fddcde07e4028bf74789569d3e8dd2215247ea7462f4303091ee1ada1b36ca93a46206fa7a613e63c54907e2a2ead7b4c0baec135e66e66ec0e97256d197f4280f1fa125bb5c432104e7f9d805e7fedcb07790ce65b19427956f2fb75bb44255dbd"}, @mesh_id={0x72, 0x6}, @mesh_chsw={0x76, 0x6, {0x8, 0x0, 0x9, 0x9}}, @erp={0x2a, 0x1}, @gcr_ga={0xbd, 0x6, @device_b}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1b, 0xfc, "f105833e9ebbb1ac681bb9d41b1dddfe119ac774bc3dad"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x2}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}, @NL80211_ATTR_FILS_ERP_RRK={0xeb, 0xfc, "60eeb3f9ed794446eab508a2a176971e7ac705df77959b90cc1321a604935a37bd73c82a7f7d7e280e21102ecdfaa2a6589c78d41e116eec6cad5f9a264659ab122a1f834b2e0e6cbbbb70124d8d04f1a98e68a531a3630e00984ff595d3874efcc044e82f7885705c122f252f64f54b8bfaebed90e062ac4362ffecb09d9f4781d96d4eacbae044d3f515e54677701a6016856335ae75bc154e4481a04dadbeda146dbfb087b7b73463772d33f5eb59947ee33f43c7e161283e64b190420081066acf5ecfdce7476b8f0ac72f69f2756540ae5e9589bcd2ba08adf162e532c341348a1cbea09e"}, @NL80211_ATTR_FILS_ERP_REALM={0x1004, 0xfa, "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"}]]}, 0x2ca4}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000000) r9 = socket$pppoe(0x18, 0x1, 0x0) write(r9, &(0x7f0000000400)="26ddfdeb719979f587c53944de14f5c6eaf6a8559c74e02a90cb60d2d3ee8b07d16ad7cbd7b23f8433e250a4149c26950e64867d5948258cbab3355a941fdfbe2bc6f86f5b2c1e43eb1e4177ba23775de7ee25a0d3ed08bc0b190f62ada881626746abbf5181febc5ca99c6ae8bf8eb3", 0x70) (async, rerun: 64) clock_gettime(0x0, &(0x7f0000000240)) (async, rerun: 64) timer_create(0x0, &(0x7f0000000340)={0x0, 0x4, 0x3, @thr={&(0x7f0000000280)="412b750823ce4337ab0a9f971654539f32ff8a55c33eb5", &(0x7f00000002c0)="7254fa7ac76c66c3062c8164cb537dd30c194e71a3b833f16d79ce9de067e20e7bc9baf21544ca95bb932cac99f70c5457ef9a27985e80c3811399d570a90fa9250fd4b0d497f59b97a8c539d40a4cb9351c109304e383a0f3"}}, &(0x7f0000000380)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r10, 0x1, &(0x7f00000003c0)={{r1, r2+10000000}, {r11, r12+60000000}}, &(0x7f0000000040)) 8m18.422869253s ago: executing program 5 (id=542): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x7ffffffe}], 0xdeadbeef, 0x8, 0x1}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendto$inet(r5, 0x0, 0x0, 0x44088881, 0x0, 0x0) ftruncate(r6, 0x1) sendfile(r5, r6, 0x0, 0x7ffff004) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) (async) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) (async) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x7ffffffe}], 0xdeadbeef, 0x8, 0x1}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) (async) sendto$inet(r5, 0x0, 0x0, 0x44088881, 0x0, 0x0) (async) ftruncate(r6, 0x1) (async) sendfile(r5, r6, 0x0, 0x7ffff004) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) (async) 8m17.871524186s ago: executing program 5 (id=550): r0 = syz_open_dev$vim2m(&(0x7f0000001340), 0x5, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0x1, @pix_mp={0x0, 0x0, 0x38414762, 0x8, 0x0, [{0x0, 0x8}]}}) fsync(r0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x2000) r3 = openat2(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x20a01, 0x60, 0x13}, 0x18) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, &(0x7f00000001c0)='\x9a\xd1:*.--\x00') madvise(&(0x7f000009e000/0x3000)=nil, 0x3000, 0x9) preadv(r1, &(0x7f0000000080)=[{&(0x7f0000000280)=""/212, 0xfffffed3}], 0x1, 0xffeffffb, 0x1007) 8m17.77751861s ago: executing program 5 (id=553): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendfile(r0, r0, 0x0, 0x7ffff000) 8m10.987664104s ago: executing program 3 (id=592): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) mkdir(&(0x7f0000000540)='./file0\x00', 0x108) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 8m10.942508181s ago: executing program 3 (id=593): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x800) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7fff, 0x6576, 0xd}) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) write$tun(r4, &(0x7f0000000040)={@val={0x0, 0x6003}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfffffe32, 0x64, 0x0, 0x3, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0xfffffffffffffc55, 0x0, @gue={{0x1, 0x0, 0x0, 0x9, 0x0, @void}}}}}}}}, 0x32) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000100)=0x1, 0xffffffffffffffdf) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @empty}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) (async) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000), 0x4) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e24, 0x7b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, 0x1c) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 8m10.775681007s ago: executing program 3 (id=594): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0xd}) (async) r1 = socket(0x1e, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f00000000c0)) connect$tipc(r1, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={0x14, r6, 0x813, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x4004080) (async) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) (async) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000140), 0x88980, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x22052, r7, 0x5708e000) 8m10.491438475s ago: executing program 3 (id=595): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0xc0600, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = syz_open_procfs(r1, &(0x7f0000000040)='stat\x00') ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000200)={'\x00', 0x9, 0x7f, 0x0, 0x5, 0xd, r1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$9p_unix(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x2a05004, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xd0, r3, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x114}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4d3b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x79}}]}, 0xd0}}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x12, r0, 0xa4717000) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000080), 0x400400, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x200000000000003, 0x6, 0x8000000000000002, 0x0, 0x7, 0xb, 0x651, 0x3, 0x8000009657, 0x1, 0x7fffffff, 0x0, 0x10, 0x9, 0x7ffffffffffffe, 0xccb, 0x2, 0x200, 0x94d6, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80a, 0x0, 0xfffffffffffffffa, 0x5, 0x2000000000004}) ioctl$PTP_PIN_GETFUNC2(r5, 0xc0603d0f, &(0x7f0000000180)={'\x00', 0x0, 0x1, 0x7e}) r6 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), r6) write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r4) 8m10.473768474s ago: executing program 3 (id=596): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x60a00, 0x0) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000080)) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000340)={0x3, 0x0, 0x1, 0x0, 0x7fffffff}) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0x57783000) syz_open_procfs(0x0, &(0x7f00000002c0)='net/psched\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) (async) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000480)={0x2020}, 0x2020) (async, rerun: 32) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (rerun: 32) 8m10.214815614s ago: executing program 3 (id=597): kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x101, 0x9, 0x7, 0x0, 0x0, 0x5}, 0xc) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 8m10.108876341s ago: executing program 34 (id=597): kexec_load(0xf5, 0x0, &(0x7f0000000b80), 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000180)={0x20, 0x101, 0x9, 0x7, 0x0, 0x0, 0x5}, 0xc) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x200000, 0x0) 8m2.132643668s ago: executing program 35 (id=553): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x145342, 0x0) sendfile(r1, r0, 0x0, 0x7fffefff) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) sendfile(r0, r0, 0x0, 0x7ffff000) 4.905244416s ago: executing program 7 (id=3396): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000300)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000640)={'#! ', './file0'}, 0xb) 4.707181794s ago: executing program 7 (id=3400): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x3) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)='w', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)="fd4fccdcedb9e6c4881ecb8dbc1d984b8e3649871c4d8bf1e541", 0x1a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000540)="163654dcac7c", 0x6}], 0x1}}], 0x3, 0x1) shutdown(r0, 0x1) 4.623395159s ago: executing program 7 (id=3402): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="3b00000000000004000100400000000000"]) 4.517313827s ago: executing program 7 (id=3403): r0 = syz_usb_connect(0x3, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.383720297s ago: executing program 7 (id=3425): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e056c3920"], 0x8) getpid() r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.30135793s ago: executing program 7 (id=3428): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0xffffffff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) lseek(r2, 0x401, 0x0) 703.189708ms ago: executing program 4 (id=3443): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0xfffffffffffffffe) ioctl$NBD_DO_IT(r0, 0xab03) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) 625.388726ms ago: executing program 6 (id=3445): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x401, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x8, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fef, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 543.278115ms ago: executing program 4 (id=3447): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x81, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x5, 0x801) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000200)={0x800000000000a, 0x0, 0x1, r2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 515.019011ms ago: executing program 1 (id=3448): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000be0000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) r3 = eventfd2(0x8, 0x1) write$eventfd(r3, &(0x7f0000000040)=0x6, 0x8) 483.00597ms ago: executing program 6 (id=3449): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x0, 0xdddd0000, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x7}, {0xd000, 0x2, 0x3, 0x9, 0x8, 0x3, 0x7f, 0x8, 0x5, 0xf, 0x3, 0xca}, {0xeeee0000, 0xe6e50002, 0xb, 0x0, 0xa, 0x7, 0x2, 0x1, 0xc, 0x0, 0x9, 0x5}, {0x7f778000, 0x0, 0x8, 0xfc, 0x3, 0x46, 0x2, 0xd, 0x6, 0x3, 0x0, 0x1}, {0x100000, 0x10000, 0x9, 0x1, 0x3, 0x9, 0x9, 0x8, 0x5, 0x4, 0x9, 0x4b}, {0x2, 0xd000, 0x0, 0x46, 0x3, 0x6e, 0x1, 0xff, 0x4, 0x80, 0x1, 0xfc}, {0x6000, 0x4000, 0xf, 0x9d, 0x3, 0x6, 0x0, 0xc, 0x5, 0x7, 0x0, 0xf8}, {0xffff1000, 0x8000000, 0xd, 0x5, 0x3, 0x3, 0x2, 0x9, 0x54, 0xc, 0x2, 0x7}, {0xeeef0000, 0x5}, {0x5000, 0x9}, 0x40010000, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc7]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000780)=ANY=[@ANYBLOB="0100000000000000000800"]) 443.087553ms ago: executing program 4 (id=3450): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000540)="f30fc7340f20d3f08271daf0f20f59874ccbbaf80c66b824030b8166efbafc0cb80800eff30f00960000ba4000ec26dc5c2d0f00170f380a85b300", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 359.652104ms ago: executing program 1 (id=3451): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xce, 0x0, 0x7}]}) 359.392266ms ago: executing program 1 (id=3452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x62002, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) 300.052188ms ago: executing program 6 (id=3453): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r0, &(0x7f0000000040)=""/15, 0xf, 0xfb87) 265.965671ms ago: executing program 6 (id=3454): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x5, 0xb}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x49, 0x9, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 191.577873ms ago: executing program 1 (id=3455): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 191.31653ms ago: executing program 4 (id=3456): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0xc}, @ptr={0x66646185, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 182.516774ms ago: executing program 6 (id=3457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f00000001c0)={0x1, 0x80a0000, 0x4, 0x1, 0xc95}) 171.69103ms ago: executing program 4 (id=3458): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036800e0ff643f0200475400f6a13bb1000000080088a84803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 71.594052ms ago: executing program 1 (id=3459): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000be0000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) r3 = eventfd2(0x8, 0x1) write$eventfd(r3, &(0x7f0000000040)=0x6, 0x8) 68.461886ms ago: executing program 4 (id=3460): ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0x10, 0x0, 0x2, 0x2080, 0x6ae0}) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) write$FUSE_BMAP(r2, &(0x7f0000000180)={0x18, 0x0, 0x0, {0xf}}, 0x18) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000140)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) 62.508489ms ago: executing program 6 (id=3461): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40}) ioctl$UI_DEV_CREATE(r0, 0x5501) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 0s ago: executing program 1 (id=3462): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000000)=[@increfs], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): kdev [ 482.796028][T15711] /dev/rnullb0: Can't open blockdev [ 483.494827][T15728] /dev/rnullb0: Can't open blockdev [ 483.520827][T15728] /dev/rnullb0: Can't open blockdev [ 483.546155][T15728] /dev/rnullb0: Can't open blockdev [ 483.591696][T15728] /dev/rnullb0: Can't open blockdev [ 483.605247][T15728] /dev/rnullb0: Can't open blockdev [ 483.610942][T15728] /dev/rnullb0: Can't open blockdev [ 483.621037][T15728] /dev/rnullb0: Can't open blockdev [ 483.628288][T15728] /dev/rnullb0: Can't open blockdev [ 483.634119][T15728] /dev/rnullb0: Can't open blockdev [ 483.639842][T15728] /dev/rnullb0: Can't open blockdev [ 483.647310][T15728] /dev/rnullb0: Can't open blockdev [ 483.654120][T15728] /dev/rnullb0: Can't open blockdev [ 483.659907][T15728] /dev/rnullb0: Can't open blockdev [ 483.666022][T15728] /dev/rnullb0: Can't open blockdev [ 483.676427][T15728] /dev/rnullb0: Can't open blockdev [ 483.686476][T15728] /dev/rnullb0: Can't open blockdev [ 483.692648][T15728] /dev/rnullb0: Can't open blockdev [ 483.698518][T15728] /dev/rnullb0: Can't open blockdev [ 483.706424][T15728] /dev/rnullb0: Can't open blockdev [ 483.712525][T15728] /dev/rnullb0: Can't open blockdev [ 483.718727][T15728] /dev/rnullb0: Can't open blockdev [ 483.727402][T15728] /dev/rnullb0: Can't open blockdev [ 483.736614][T15728] /dev/rnullb0: Can't open blockdev [ 483.743189][T15728] /dev/rnullb0: Can't open blockdev [ 483.749076][T15728] /dev/rnullb0: Can't open blockdev [ 483.755080][T15728] /dev/rnullb0: Can't open blockdev [ 483.760823][T15728] /dev/rnullb0: Can't open blockdev [ 483.767967][T15728] /dev/rnullb0: Can't open blockdev [ 483.775044][T15728] /dev/rnullb0: Can't open blockdev [ 483.780757][T15728] /dev/rnullb0: Can't open blockdev [ 483.822136][T15728] /dev/rnullb0: Can't open blockdev [ 483.827837][T15728] /dev/rnullb0: Can't open blockdev [ 483.861993][T15728] /dev/rnullb0: Can't open blockdev [ 483.867840][T15728] /dev/rnullb0: Can't open blockdev [ 483.881916][T15728] /dev/rnullb0: Can't open blockdev [ 483.900748][T15728] /dev/rnullb0: Can't open blockdev [ 483.929261][T15728] /dev/rnullb0: Can't open blockdev [ 483.943814][T15728] /dev/rnullb0: Can't open blockdev [ 483.956369][T15728] /dev/rnullb0: Can't open blockdev [ 483.974154][T15728] /dev/rnullb0: Can't open blockdev [ 483.989713][T15728] /dev/rnullb0: Can't open blockdev [ 484.008556][T15728] /dev/rnullb0: Can't open blockdev [ 484.038755][T15728] /dev/rnullb0: Can't open blockdev [ 484.045272][T15728] /dev/rnullb0: Can't open blockdev [ 484.051033][T15728] /dev/rnullb0: Can't open blockdev [ 484.060541][T15728] /dev/rnullb0: Can't open blockdev [ 484.069828][T15728] /dev/rnullb0: Can't open blockdev [ 484.084226][T15728] /dev/rnullb0: Can't open blockdev [ 484.089963][T15728] /dev/rnullb0: Can't open blockdev [ 484.096038][T15728] /dev/rnullb0: Can't open blockdev [ 484.103195][T15728] /dev/rnullb0: Can't open blockdev [ 484.108818][T15728] /dev/rnullb0: Can't open blockdev [ 484.117161][T15728] /dev/rnullb0: Can't open blockdev [ 484.125505][T15728] /dev/rnullb0: Can't open blockdev [ 484.135028][T15728] /dev/rnullb0: Can't open blockdev [ 484.140656][T15728] /dev/rnullb0: Can't open blockdev [ 484.150773][T15728] /dev/rnullb0: Can't open blockdev [ 484.156531][T15728] /dev/rnullb0: Can't open blockdev [ 484.165228][T15728] /dev/rnullb0: Can't open blockdev [ 484.170948][T15728] /dev/rnullb0: Can't open blockdev [ 484.177014][T15728] /dev/rnullb0: Can't open blockdev [ 484.184312][T15728] /dev/rnullb0: Can't open blockdev [ 484.190525][T15728] /dev/rnullb0: Can't open blockdev [ 484.196287][T15728] /dev/rnullb0: Can't open blockdev [ 484.203685][T15728] /dev/rnullb0: Can't open blockdev [ 484.791413][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 484.962880][ T10] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 484.978471][ T10] usb 2-1: config 0 has no interface number 0 [ 484.986845][ T10] usb 2-1: config 0 interface 85 altsetting 151 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.000113][ T10] usb 2-1: config 0 interface 85 altsetting 151 endpoint 0x81 has invalid wMaxPacketSize 0 [ 485.010517][ T10] usb 2-1: config 0 interface 85 has no altsetting 0 [ 485.019049][ T10] usb 2-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 485.033018][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.051782][ T10] usb 2-1: config 0 descriptor?? [ 485.062013][T15792] netlink: 'syz.6.2604': attribute type 6 has an invalid length. [ 485.069796][T15792] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.2604'. [ 485.419082][T15808] netlink: 796 bytes leftover after parsing attributes in process `syz.1.2606'. [ 485.428750][T15806] /dev/rnullb0: Can't open blockdev [ 485.518940][ T10] usbhid 2-1:0.85: can't add hid device: -71 [ 485.528475][ T10] usbhid 2-1:0.85: probe with driver usbhid failed with error -71 [ 485.538848][ T10] usb 2-1: USB disconnect, device number 7 [ 485.743796][T15832] /dev/rnullb0: Can't open blockdev [ 485.891427][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 485.997664][T15840] /dev/rnullb0: Can't open blockdev [ 486.054096][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 486.080483][ T10] usb 2-1: config 0 has an invalid interface number: 146 but max is 0 [ 486.102400][ T10] usb 2-1: config 0 has no interface number 0 [ 486.108541][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 486.157467][T15849] cgroup: release_agent respecified [ 486.165840][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 486.181374][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 486.201851][ T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 486.212312][ T10] usb 2-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 486.224118][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 486.241698][ T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 486.253279][ T10] usb 2-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 29793, setting to 1024 [ 486.484485][ T10] usb 2-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 486.495223][ T10] usb 2-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 486.510752][ T10] usb 2-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 486.546423][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.558255][ T10] usb 2-1: Product: syz [ 486.565675][ T10] usb 2-1: Manufacturer: syz [ 486.572024][ T10] usb 2-1: SerialNumber: syz [ 486.577052][T15856] /dev/rnullb0: Can't open blockdev [ 486.578723][ T10] usb 2-1: config 0 descriptor?? [ 486.589239][T15815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 486.589638][T15859] /dev/rnullb0: Can't open blockdev [ 486.605900][T15815] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 486.614922][ T10] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 486.624545][ T10] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 486.638981][ T10] scsi host1: microtekX6 [ 486.649871][T15870] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 486.820245][ T5926] usb 2-1: USB disconnect, device number 8 [ 487.147477][ T30] audit: type=1800 audit(1756813247.135:96): pid=15900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.2624" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 487.227884][T15903] ./cgroup: Can't lookup blockdev [ 487.572938][T15917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2630'. [ 487.662869][T15926] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 487.673743][T15926] SQUASHFS error: Failed to read block 0x0: -5 [ 487.680477][T15926] unable to read squashfs_super_block [ 487.811402][ T30] audit: type=1326 audit(1756813247.795:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15934 comm="syz.1.2635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f0f5a985ba7 code=0x0 [ 487.958681][T15941] /dev/rnullb0: Can't open blockdev [ 501.533692][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.540020][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.854180][ T2911] bridge_slave_1: left allmulticast mode [ 506.859864][ T2911] bridge_slave_1: left promiscuous mode [ 506.865891][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.874061][ T2911] bridge_slave_0: left allmulticast mode [ 506.879696][ T2911] bridge_slave_0: left promiscuous mode [ 506.885743][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.046596][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 507.083235][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 507.132843][ T2911] bond0 (unregistering): Released all slaves [ 507.198728][ T2911] tipc: Left network mode [ 507.600964][ T2911] hsr_slave_0: left promiscuous mode [ 507.608184][ T2911] hsr_slave_1: left promiscuous mode [ 507.614048][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 507.621554][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 507.629517][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 507.639011][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.650811][ T2911] veth1_macvtap: left promiscuous mode [ 507.656482][ T2911] veth0_macvtap: left promiscuous mode [ 507.662087][ T2911] veth1_vlan: left promiscuous mode [ 507.667670][ T2911] veth0_vlan: left promiscuous mode [ 507.768932][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 507.784978][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 508.104882][ T2911] IPVS: stop unused estimator thread 0... [ 542.826374][T15972] overlay: filesystem on ./bus is read-only [ 542.854837][T15974] syzkaller1: entered promiscuous mode [ 542.877582][T15974] syzkaller1: entered allmulticast mode [ 542.994796][T15989] /dev/rnullb0: Can't open blockdev [ 543.164514][T15994] loop6: detected capacity change from 0 to 7 [ 543.188704][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.197920][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.219770][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.228979][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.240202][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.249405][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.268985][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.278366][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.288718][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.297913][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.315241][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.324449][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.336930][T15994] ldm_validate_partition_table(): Disk read failed. [ 543.344209][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.353468][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.390389][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.399594][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.414186][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.423374][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.434096][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 543.443297][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 543.456259][T15994] Dev loop6: unable to read RDB block 0 [ 543.470332][T15994] loop6: unable to read partition table [ 543.487384][T15994] loop6: partition table beyond EOD, truncated [ 543.515146][T15994] loop_reread_partitions: partition scan of loop6 (被x() failed (rc=-5) [ 543.724405][T16007] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 543.914594][T16026] /dev/rnullb0: Can't open blockdev [ 543.973899][T16024] 9p: Unknown parameter 'permit_directio' [ 544.050529][ T5860] Bluetooth: hci3: unexpected event for opcode 0x080e [ 544.170886][T16037] wlan1 speed is unknown, defaulting to 1000 [ 544.259313][T16058] netlink: 'syz.6.2660': attribute type 2 has an invalid length. [ 544.399699][T16037] wlan1 speed is unknown, defaulting to 1000 [ 544.659246][T16098] tipc: Enabled bearer , priority 0 [ 544.670880][T16097] tipc: Resetting bearer [ 544.757805][T16097] tipc: Disabling bearer [ 545.841450][ T24] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 545.991551][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 545.997963][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.008164][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 546.017439][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.030555][ T24] usb 5-1: config 0 descriptor?? [ 546.039627][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 546.101425][ T5904] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 546.261565][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 546.268077][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 546.278407][ T5904] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 546.287998][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.297596][ T5904] usb 2-1: config 0 descriptor?? [ 546.707117][ T5904] kye 0003:0458:501A.000F: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 546.718604][ T5904] kye 0003:0458:501A.000F: unknown main item tag 0x0 [ 546.725428][ T5904] kye 0003:0458:501A.000F: unknown main item tag 0x0 [ 546.732263][ T5904] kye 0003:0458:501A.000F: unknown main item tag 0x0 [ 546.738989][ T5904] kye 0003:0458:501A.000F: unknown main item tag 0x0 [ 546.745770][ T5904] kye 0003:0458:501A.000F: unknown main item tag 0x0 [ 546.752568][ T5904] kye 0003:0458:501A.000F: unknown main item tag 0x0 [ 546.759295][ T5904] kye 0003:0458:501A.000F: unknown main item tag 0x0 [ 546.768727][ T5904] kye 0003:0458:501A.000F: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 546.779670][ T5904] kye 0003:0458:501A.000F: tablet-enabling feature report not found [ 546.788864][ T5904] kye 0003:0458:501A.000F: tablet enabling failed [ 546.844495][T16144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.853396][T16144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.944079][T16149] /dev/rnullb0: Can't open blockdev [ 546.950037][ T10] usb 2-1: USB disconnect, device number 9 [ 547.582878][ T24] gspca_vc032x: reg_w err -110 [ 547.587802][ T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -110 [ 547.731595][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 547.881671][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 547.887972][ T10] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 547.896250][ T10] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 547.906515][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 547.915864][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.284681][ T24] usb 5-1: USB disconnect, device number 112 [ 550.510085][T16243] /dev/rnullb0: Can't open blockdev [ 550.552689][T16247] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2686'. [ 550.661762][ T24] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 550.843059][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 550.855255][ T24] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 247, using maximum allowed: 30 [ 550.866537][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 550.880073][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 247 [ 550.897508][ T24] usb 5-1: config 1 interface 1 has no altsetting 1 [ 550.906749][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 550.921186][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 550.929610][ T24] usb 5-1: Product: syz [ 550.935420][ T24] usb 5-1: Manufacturer: syz [ 550.940096][ T24] usb 5-1: SerialNumber: syz [ 550.956829][ T24] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 550.966307][ T24] cdc_ncm 5-1:1.1: bind() failure [ 551.009783][ T7833] usb 2-1: USB disconnect, device number 10 [ 551.156662][T16233] /dev/rnullb0: Can't open blockdev [ 551.163042][ T10] usb 5-1: USB disconnect, device number 113 [ 551.638897][T16282] /dev/rnullb0: Can't open blockdev [ 551.887827][T16299] netlink: 22 bytes leftover after parsing attributes in process `syz.6.2693'. [ 552.102711][ T7833] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 552.140157][T16309] MTD: Couldn't look up '/dev/sg0': -15 [ 552.261395][ T7833] usb 5-1: Using ep0 maxpacket: 16 [ 552.277434][ T7833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.289412][ T7833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.299621][ T7833] usb 5-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 552.309644][ T7833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.321975][ T7833] usb 5-1: config 0 descriptor?? [ 552.427698][T16325] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 552.434943][T16325] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 552.443771][T16325] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 552.450648][T16325] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 552.458822][T16325] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 552.467031][T16325] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 552.473866][T16325] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 552.493569][T16330] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 552.586119][T16335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 552.726789][T16354] /dev/rnullb0: Can't open blockdev [ 552.934631][ T7833] usb 5-1: language id specifier not provided by device, defaulting to English [ 553.081447][ T5904] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 553.135096][ T7833] letsketch 0003:6161:4D15.0010: Device info: ᣍ [ 553.234200][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 553.244497][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 553.254361][ T5904] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 553.263750][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 553.271836][ T5904] usb 2-1: SerialNumber: syz [ 553.337055][ T7833] letsketch 0003:6161:4D15.0010: Device info: ఁ [ 553.481552][T16363] /dev/rnullb0: Can't open blockdev [ 553.494299][ T5904] usb 2-1: 0:2 : does not exist [ 553.511558][ T5904] usb 2-1: USB disconnect, device number 11 [ 553.534967][T16141] udevd[16141]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 553.552349][ T7833] letsketch 0003:6161:4D15.0010: Device info: 篶꩗ [ 553.813329][ T7833] usb 5-1: Max retries (5) exceeded reading string descriptor 1 [ 553.821175][ T7833] letsketch 0003:6161:4D15.0010: probe with driver letsketch failed with error -71 [ 553.839171][ T7833] usb 5-1: USB disconnect, device number 114 [ 554.577353][T16434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.592830][T16434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.652963][T16448] delete_channel: no stack [ 554.657759][T16448] delete_channel: no stack [ 554.811456][ T5860] Bluetooth: hci3: command 0x0405 tx timeout [ 555.291392][ T10] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 555.471449][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 555.479726][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 555.489567][ T10] usb 5-1: config 9 has an invalid interface number: 78 but max is 0 [ 555.499550][ T10] usb 5-1: config 9 has no interface number 0 [ 555.505907][ T10] usb 5-1: config 9 interface 78 altsetting 6 endpoint 0x2 has an invalid bInterval 250, changing to 11 [ 555.518638][ T10] usb 5-1: config 9 interface 78 has no altsetting 0 [ 555.527957][ T10] usb 5-1: New USB device found, idVendor=07fa, idProduct=0846, bcdDevice=86.84 [ 555.539543][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.547831][ T10] usb 5-1: Product: syz [ 555.556850][ T10] usb 5-1: Manufacturer: syz [ 555.561650][ T10] usb 5-1: SerialNumber: syz [ 555.808418][ T10] HFC-S_USB 5-1:9.78: probe with driver HFC-S_USB failed with error -5 [ 555.826725][ T10] usb 5-1: USB disconnect, device number 115 [ 556.353081][T16492] /dev/rnullb0: Can't open blockdev [ 556.467834][T16498] /dev/rnullb0: Can't open blockdev [ 556.882118][ T10] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 557.033917][ T10] usb 5-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.045035][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 557.051774][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 557.060817][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.071993][ T10] usb 5-1: config 0 descriptor?? [ 557.335098][T16514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 557.386044][T16514] kvm: pic: non byte read [ 557.390759][T16514] kvm: pic: level sensitive irq not supported [ 557.390869][T16514] kvm: pic: non byte read [ 557.403917][T16514] kvm: pic: level sensitive irq not supported [ 557.404036][T16514] kvm: pic: non byte read [ 557.415291][T16514] kvm: pic: level sensitive irq not supported [ 557.415371][T16514] kvm: pic: non byte read [ 557.429113][T16514] kvm: pic: level sensitive irq not supported [ 557.429234][T16514] kvm: pic: non byte read [ 557.489830][ T10] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 557.501422][ T10] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 557.522681][ T10] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 557.549865][ T10] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 557.559069][ T10] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 557.568208][T16518] /dev/rnullb0: Can't open blockdev [ 557.576223][ T10] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 557.584971][ T10] microsoft 0003:045E:00F9.0011: unknown main item tag 0x0 [ 557.602097][ T10] microsoft 0003:045E:00F9.0011: hidraw0: USB HID v0.00 Device [HID 045e:00f9] on usb-dummy_hcd.4-1/input0 [ 557.614098][ T10] microsoft 0003:045E:00F9.0011: no inputs found [ 557.627832][ T10] microsoft 0003:045E:00F9.0011: could not initialize ff, continuing anyway [ 557.785891][T16529] /dev/rnullb0: Can't open blockdev [ 557.794354][T16529] cgroup2: Unknown parameter 'defcontext' [ 558.459826][T16556] netlink: 'syz.6.2735': attribute type 21 has an invalid length. [ 558.468255][T16556] netlink: 168 bytes leftover after parsing attributes in process `syz.6.2735'. [ 558.482497][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 558.661512][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 558.667883][ T10] usb 2-1: config 0 has an invalid interface number: 196 but max is 0 [ 558.676152][ T10] usb 2-1: config 0 has no interface number 0 [ 558.682483][ T10] usb 2-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 558.692525][ T10] usb 2-1: config 0 interface 196 has no altsetting 0 [ 558.701090][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 558.710303][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.719604][ T10] usb 2-1: Product: syz [ 558.723847][ T10] usb 2-1: Manufacturer: syz [ 558.728447][ T10] usb 2-1: SerialNumber: syz [ 558.735385][ T10] usb 2-1: config 0 descriptor?? [ 558.740846][T16543] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 559.355742][ T10] ipheth 2-1:0.196: ipheth_enable_ncm: usb_control_msg: 0 [ 559.367738][ T10] ipheth 2-1:0.196: Apple iPhone USB Ethernet device attached [ 559.511043][ T10] usb 5-1: USB disconnect, device number 116 [ 559.768864][ C1] ipheth 2-1:0.196: ipheth_rcvbulk_callback: callback retval: -22 [ 559.978695][ T5904] usb 2-1: USB disconnect, device number 12 [ 560.081842][ T5904] ipheth 2-1:0.196: Apple iPhone USB Ethernet now disconnected [ 560.091986][ T10] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 560.251386][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 560.258637][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 560.273201][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 560.284805][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 560.294355][ T10] usb 5-1: config 1 has no interface number 0 [ 560.301075][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 560.314442][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 560.327810][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 560.338721][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.353936][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 560.544386][T16679] /dev/rnullb0: Can't open blockdev [ 560.558404][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 560.598689][T16684] block nbd1: Attempted send on invalid socket [ 560.608596][T16684] blk_print_req_error: 10 callbacks suppressed [ 560.608616][T16684] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 560.625561][T16684] XFS (nbd1): SB validate failed with error -5. [ 560.656982][T16686] block nbd1: Attempted send on invalid socket [ 560.669342][T16686] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 560.679651][T16686] XFS (nbd1): SB validate failed with error -5. [ 561.611591][ T10] snd_usb_pod 5-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 561.784085][T16715] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 561.791186][T16715] /dev/rnullb0: Can't open blockdev [ 561.799393][T16715] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.097633][T16726] /dev/rnullb0: Can't open blockdev [ 562.731560][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 562.736093][T16684] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 562.858316][ T10] usb 5-1: USB disconnect, device number 117 [ 562.866239][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 562.974224][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.982241][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.588581][T16684] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 563.596239][T16684] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 563.602348][T16684] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 563.851709][ T5904] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 564.011553][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 564.022168][ T5904] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 564.032141][ T5904] usb 5-1: config 0 has no interface number 0 [ 564.038320][ T5904] usb 5-1: config 0 interface 184 has no altsetting 0 [ 564.047836][ T5904] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 564.057307][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.065488][ T5904] usb 5-1: Product: syz [ 564.070437][ T5904] usb 5-1: Manufacturer: syz [ 564.075155][ T5904] usb 5-1: SerialNumber: syz [ 564.085743][ T5904] usb 5-1: config 0 descriptor?? [ 564.093863][ T5904] smsc75xx v1.0.0 [ 564.388002][T16805] /dev/rnullb0: Can't open blockdev [ 564.417060][T16805] /dev/rnullb0: Can't open blockdev [ 564.499562][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 564.522232][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 564.544293][ T5904] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 564.566228][ T5904] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 564.725700][T16827] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2765'. [ 564.735611][ T24] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 564.799603][T16831] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 564.812790][ T5865] Bluetooth: hci2: command 0x0c1a tx timeout [ 564.821256][T16831] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2765'. [ 564.895543][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 564.913281][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 564.924479][ T24] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 564.933957][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.944706][ T24] usb 2-1: config 0 descriptor?? [ 564.950496][T16811] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 565.363176][ T24] glorious 0003:22D4:1503.0012: item fetching failed at offset 6/7 [ 565.371708][ T24] glorious 0003:22D4:1503.0012: probe with driver glorious failed with error -22 [ 565.562152][T16811] /dev/rnullb0: Can't open blockdev [ 565.568302][ T5918] usb 2-1: USB disconnect, device number 13 [ 565.611671][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 566.164307][T16876] /dev/rnullb0: Can't open blockdev [ 566.217280][ T24] usb 5-1: USB disconnect, device number 118 [ 566.248503][T16890] /dev/rnullb0: Can't open blockdev [ 566.452273][ T5918] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 566.615845][ T5918] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 566.626759][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 566.639926][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 566.652617][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 566.665205][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.695872][ T5918] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.707991][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.738257][ T5918] usb 2-1: config 0 descriptor?? [ 566.750981][T16879] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 566.755806][T16920] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2777'. [ 566.772434][T16920] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 566.779564][T16920] /dev/rnullb0: Can't open blockdev [ 567.188745][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.196730][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.205646][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.213551][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.221209][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.230348][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.238888][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.248042][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.257405][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.267971][ T5918] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 567.283540][ T5918] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 567.610003][ T5954] usb 2-1: USB disconnect, device number 14 [ 567.649348][ T30] audit: type=1326 audit(1756846095.631:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16944 comm="syz.7.2779" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b87f8ebe9 code=0xffff0000 [ 567.691416][ T5865] Bluetooth: hci3: command 0x0405 tx timeout [ 567.800636][T16952] /dev/rnullb0: Can't open blockdev [ 568.008689][T16964] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2783'. [ 568.099508][T16965] netlink: 'syz.4.2783': attribute type 3 has an invalid length. [ 568.111732][T16965] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2783'. [ 568.551557][ T5918] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 568.932851][ T5918] usb 2-1: config 202 has no interfaces? [ 568.940428][ T5918] usb 2-1: New USB device found, idVendor=07ca, idProduct=815a, bcdDevice=b8.28 [ 568.951039][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.979222][ T5918] usb 2-1: Product: syz [ 568.993972][ T5918] usb 2-1: Manufacturer: syz [ 568.998695][ T5918] usb 2-1: SerialNumber: syz [ 569.005427][T16976] /dev/rnullb0: Can't open blockdev [ 569.017427][T16976] /dev/rnullb0: Can't open blockdev [ 569.235090][T16971] /dev/rnullb0: Can't open blockdev [ 569.263571][ T5918] usb 2-1: USB disconnect, device number 15 [ 569.368274][T17004] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 569.377233][T17004] /dev/rnullb0: Can't open blockdev [ 570.221484][ T5954] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 570.385010][ T5954] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 570.395767][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.406441][ T5954] usb 2-1: Product: syz [ 570.410723][ T5954] usb 2-1: Manufacturer: syz [ 570.420601][ T5954] usb 2-1: SerialNumber: syz [ 570.489061][ T5918] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 570.642186][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 570.648844][ T5918] usb 5-1: config 0 has an invalid interface number: 151 but max is 1 [ 570.658238][ T5918] usb 5-1: config 0 has no interface number 1 [ 570.664685][ T5918] usb 5-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 570.677055][ T5918] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 570.692262][ T5918] usb 5-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 570.703946][ T5918] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 570.714261][ T5918] usb 5-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 570.727537][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 570.739784][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 570.752386][ T5918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 570.768671][ T5918] usb 5-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 570.777991][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.787371][ T5918] usb 5-1: Product: syz [ 570.791666][ T5918] usb 5-1: Manufacturer: syz [ 570.796280][ T5918] usb 5-1: SerialNumber: syz [ 570.804950][ T5918] usb 5-1: config 0 descriptor?? [ 570.810729][T17011] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 570.824217][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.836141][ T5918] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 570.861092][ T5954] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 570.907676][ T5918] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 570.911440][ T5954] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 570.958382][ T5954] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 571.008668][ T5954] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 571.042096][ T5954] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 571.109678][ T5954] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 571.136628][ T5954] usb 2-1: USB disconnect, device number 16 [ 571.174039][T17100] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 571.186999][T17100] /dev/rnullb0: Can't open blockdev [ 571.595764][T17108] tipc: Started in network mode [ 571.600673][T17108] tipc: Node identity 4, cluster identity 4711 [ 571.606904][T17108] tipc: Node number set to 4 [ 571.641449][ T5954] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 571.677112][T17111] netlink: 'syz.7.2807': attribute type 10 has an invalid length. [ 571.691192][T17111] veth0_vlan: left promiscuous mode [ 571.698138][T17111] veth0_vlan: entered promiscuous mode [ 571.706846][T17111] team0: Device veth0_vlan failed to register rx_handler [ 571.791525][ T5954] usb 2-1: Using ep0 maxpacket: 8 [ 571.798159][ T5954] usb 2-1: config 0 interface 0 altsetting 218 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 571.811071][ T5954] usb 2-1: config 0 interface 0 altsetting 218 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 571.825066][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 571.831787][ T5954] usb 2-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 571.840855][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.851098][ T5954] usb 2-1: config 0 descriptor?? [ 572.059059][T17131] /dev/rnullb0: Can't open blockdev [ 572.263834][ T5954] hid_parser_main: 1 callbacks suppressed [ 572.263859][ T5954] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 572.297137][ T5954] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 572.311461][ T5954] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 572.328843][ T5954] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 572.349105][ T5954] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 572.371655][ T5954] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 572.378946][ T5954] redragon 0003:0C45:760B.0014: unknown main item tag 0x0 [ 572.401597][ T5954] redragon 0003:0C45:760B.0014: hidraw0: USB HID v0.00 Device [HID 0c45:760b] on usb-dummy_hcd.1-1/input0 [ 572.645228][ T5954] usb 5-1: USB disconnect, device number 119 [ 572.719215][ T10] usb 2-1: USB disconnect, device number 17 [ 572.802699][ T2911] Bluetooth: hci0: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 573.026452][T17218] syzkaller1: entered promiscuous mode [ 573.032440][T17218] syzkaller1: entered allmulticast mode [ 573.040236][T17218] /dev/rnullb0: Can't open blockdev [ 573.769331][T17236] nbd: must specify a size in bytes for the device [ 573.903024][ T5918] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 574.062881][ T5918] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 574.070942][ T5918] usb 2-1: config 0 has no interface number 0 [ 574.077131][ T5918] usb 2-1: too many endpoints for config 0 interface 1 altsetting 233: 128, using maximum allowed: 30 [ 574.088159][ T5918] usb 2-1: config 0 interface 1 altsetting 233 has 0 endpoint descriptors, different from the interface descriptor's value: 128 [ 574.101657][ T5918] usb 2-1: config 0 interface 1 has no altsetting 0 [ 574.110027][ T5918] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 574.119269][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.127540][ T5918] usb 2-1: Product: syz [ 574.131818][ T5918] usb 2-1: Manufacturer: syz [ 574.136428][ T5918] usb 2-1: SerialNumber: syz [ 574.141496][ T5954] usb 5-1: new low-speed USB device number 120 using dummy_hcd [ 574.144805][ T5918] usb 2-1: config 0 descriptor?? [ 574.303863][ T5954] usb 5-1: unable to get BOS descriptor or descriptor too short [ 574.312577][ T5954] usb 5-1: config 0 has no interfaces? [ 574.320734][ T5954] usb 5-1: language id specifier not provided by device, defaulting to English [ 574.337589][ T5954] usb 5-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.40 [ 574.346721][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.356370][ T5954] usb 5-1: config 0 descriptor?? [ 574.358253][ T5918] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 574.375782][ T5918] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 574.386757][ T5918] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 574.396175][ T5918] usb 2-1: media controller created [ 574.410438][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.566301][T17249] befs: (nullb0): invalid magic header [ 574.634854][ T5918] usb 5-1: USB disconnect, device number 120 [ 574.811380][ T5865] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 574.811557][ T5860] Bluetooth: hci0: command 0x1003 tx timeout [ 575.232779][T17291] /dev/rnullb0: Can't open blockdev [ 575.335443][T17295] IPVS: sync thread started: state = MASTER, mcast_ifn = wlan0, syncid = 2, id = 0 [ 575.678913][T17301] /dev/rnullb0: Can't open blockdev [ 576.505208][T17333] /dev/rnullb0: Can't open blockdev [ 576.682574][T17348] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 576.746979][ T10] usb 2-1: USB disconnect, device number 18 [ 576.816467][T17370] /dev/rnullb0: Can't open blockdev [ 576.879125][T17377] afs: Unknown parameter '18446744073709551615' [ 576.897597][T17377] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 576.904156][T17377] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 576.913323][T17377] vhci_hcd vhci_hcd.0: Device attached [ 576.924095][T17378] vhci_hcd: connection closed [ 576.924614][T11447] vhci_hcd: stop threads [ 576.937116][T11447] vhci_hcd: release socket [ 576.941893][T11447] vhci_hcd: disconnect device [ 577.096899][T17385] IPVS: length: 106 != 24 [ 577.559658][T17400] comedi comedi4: bad chanlist[0]=0x00000101 chan=257 range length=2 [ 579.659213][ T30] audit: type=1326 audit(1756846107.641:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17432 comm="syz.7.2861" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b87f8ebe9 code=0x0 [ 580.811413][ T10] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 580.961507][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 580.969473][ T10] usb 5-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 580.984918][ T10] usb 5-1: New USB device found, idVendor=9e88, idProduct=9e8f, bcdDevice=9b.e4 [ 580.994234][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.003614][ T10] usb 5-1: Product: syz [ 581.008213][ T10] usb 5-1: Manufacturer: syz [ 581.013021][ T10] usb 5-1: SerialNumber: syz [ 581.222630][T17451] /dev/rnullb0: Can't open blockdev [ 581.230043][T17443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.242730][T17443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.257628][ T10] ftdi_sio 5-1:64.0: Ignoring interface reserved for JTAG [ 581.277727][ T10] usb 5-1: USB disconnect, device number 121 [ 581.730619][T17473] /dev/rnullb0: Can't open blockdev [ 581.900130][T17490] /dev/rnullb0: Can't open blockdev [ 581.930471][T17492] /dev/rnullb0: Can't open blockdev [ 582.040154][T17498] Invalid/unusable pipe [ 582.081634][ T10] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 582.242981][ T10] usb 5-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x2B, changing to 0xB [ 582.254909][ T10] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 162, changing to 11 [ 582.266768][ T10] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 49264, setting to 1024 [ 582.283536][ T10] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 582.294595][ T10] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 582.303438][ T10] usb 5-1: Manufacturer: syz [ 582.308195][ T10] usb 5-1: SerialNumber: syz [ 583.191415][ T24] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 583.374820][ T24] usb 2-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 583.383943][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.392199][ T24] usb 2-1: Product: syz [ 583.396391][ T24] usb 2-1: Manufacturer: syz [ 583.401007][ T24] usb 2-1: SerialNumber: syz [ 583.413295][ T24] usb 2-1: config 0 descriptor?? [ 583.422729][ T24] gspca_main: sq930x-2.14.0 probing 2770:930c [ 584.027483][T17523] /dev/rnullb0: Can't open blockdev [ 584.032899][ T24] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 584.051430][ T24] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 584.067474][ T24] usb 2-1: USB disconnect, device number 19 [ 584.271243][T17534] /dev/rnullb0: Can't open blockdev [ 584.349163][T17536] /dev/rnullb0: Can't open blockdev [ 584.498108][ T1164] Bluetooth: hci0: Frame reassembly failed (-84) [ 585.024560][T17551] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 585.194799][T17555] syzkaller1: entered promiscuous mode [ 585.200423][T17555] syzkaller1: entered allmulticast mode [ 585.379013][ T10] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 585.397962][ T10] usb 5-1: USB disconnect, device number 122 [ 586.280732][T17584] /dev/rnullb0: Can't open blockdev [ 586.551152][T17599] /dev/rnullb0: Can't open blockdev [ 586.571643][ T5860] Bluetooth: hci0: command 0x1003 tx timeout [ 586.575424][ T5865] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 586.648849][T17610] syzkaller0: entered promiscuous mode [ 586.656432][T17610] syzkaller0: entered allmulticast mode [ 586.669114][T17610] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 586.679874][T17610] /dev/rnullb0: Can't open blockdev [ 586.871411][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 587.032804][ T10] usb 2-1: config 0 has an invalid interface number: 3 but max is 0 [ 587.044192][ T10] usb 2-1: config 0 has no interface number 0 [ 587.067708][ T10] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 587.079093][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.097276][ T10] usb 2-1: Product: syz [ 587.107329][ T10] usb 2-1: Manufacturer: syz [ 587.116484][ T10] usb 2-1: SerialNumber: syz [ 587.121468][ T7833] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 587.142948][ T10] usb 2-1: config 0 descriptor?? [ 587.283168][ T7833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.358424][ T7833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.373259][ T10] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 587.381486][ T7833] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 587.390574][ T7833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.400230][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 587.410126][ T10] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 587.421429][ T7833] usb 5-1: config 0 descriptor?? [ 587.426667][ T10] usb 2-1: media controller created [ 587.453009][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.539139][ T10] DVB: Unable to find symbol dib7000p_attach() [ 587.548616][ T10] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 587.671742][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 587.677888][ T10] Registered IR keymap rc-empty [ 587.707921][ T10] dvb-usb: could not initialize remote control. [ 587.714912][ T10] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 587.797661][ T10] usb 2-1: USB disconnect, device number 20 [ 587.881453][ T10] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 588.192009][T17667] /dev/rnullb0: Can't open blockdev [ 588.785855][T17677] /dev/rnullb0: Can't open blockdev [ 589.042531][T17689] netlink: 'syz.7.2906': attribute type 12 has an invalid length. [ 589.054436][T17689] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2906'. [ 589.336122][T17701] netlink: 72 bytes leftover after parsing attributes in process `syz.7.2909'. [ 589.347825][T17706] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2910'. [ 589.368029][T17707] tipc: Resetting bearer [ 589.411232][T17707] tipc: Disabling bearer [ 589.622967][T17715] /dev/rnullb0: Can't open blockdev [ 589.763614][T17719] /dev/rnullb0: Can't open blockdev [ 589.983704][T17725] netlink: 'syz.7.2916': attribute type 46 has an invalid length. [ 590.003602][T17725] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2916'. [ 590.022352][ T24] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 590.040094][T17725] fuse: Bad value for 'user_id' [ 590.059689][T17725] fuse: Bad value for 'user_id' [ 590.064850][T17729] netlink: 'syz.6.2917': attribute type 21 has an invalid length. [ 590.090911][T17729] netlink: 'syz.6.2917': attribute type 30 has an invalid length. [ 590.202678][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 590.213318][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 590.224388][ T24] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 590.234761][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.249901][ T24] usb 2-1: config 0 descriptor?? [ 590.430889][ T7833] usbhid 5-1:0.0: can't add hid device: -71 [ 590.453904][ T7833] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 590.467643][ T7833] usb 5-1: USB disconnect, device number 123 [ 590.467722][ T24] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 590.670714][ T24] usb 2-1: USB disconnect, device number 21 [ 591.215929][T17768] /dev/rnullb0: Can't open blockdev [ 592.731375][ T24] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 592.881446][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 592.918391][ T24] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 592.929510][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.932735][T17807] /dev/rnullb0: Can't open blockdev [ 592.938772][ T24] usb 2-1: Product: syz [ 592.948685][ T24] usb 2-1: Manufacturer: syz [ 592.953604][ T24] usb 2-1: SerialNumber: syz [ 592.963901][ T24] usb 2-1: config 0 descriptor?? [ 592.984757][ T24] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 593.007847][ T24] usb 2-1: Detected FT232H [ 593.017779][T17812] /dev/rnullb0: Can't open blockdev [ 593.180516][ T24] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 593.444553][T17837] fuse: Bad value for 'group_id' [ 593.449948][T17837] fuse: Bad value for 'group_id' [ 593.604259][ T24] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 593.819793][ T5865] Bluetooth: hci3: Malformed Event: 0x2f [ 593.825351][ T10] usb 2-1: USB disconnect, device number 22 [ 593.839617][ T10] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 593.857356][ T10] ftdi_sio 2-1:0.0: device disconnected [ 594.456412][T17873] /dev/rnullb0: Can't open blockdev [ 594.570691][T17880] wlan1 speed is unknown, defaulting to 1000 [ 594.791917][T17892] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 594.803459][T17880] wlan1 speed is unknown, defaulting to 1000 [ 595.031027][T17901] /dev/rnullb0: Can't open blockdev [ 595.111003][T17908] /dev/rnullb0: Can't open blockdev [ 595.553951][ T10] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 595.731393][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 595.749899][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 595.771391][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.803501][ T10] usb 2-1: config 0 descriptor?? [ 595.815099][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 595.968344][T17979] /dev/rnullb0: Can't open blockdev [ 595.991043][T17979] /dev/rnullb0: Can't open blockdev [ 596.051399][ T10] gspca_nw80x: reg_w err -71 [ 596.061444][ T10] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 596.089958][ T10] usb 2-1: USB disconnect, device number 23 [ 596.813866][T18028] /dev/rnullb0: Can't open blockdev [ 596.871354][T18033] /dev/rnullb0: Can't open blockdev [ 597.201396][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 597.362700][ T10] usb 2-1: config index 0 descriptor too short (expected 75, got 72) [ 597.382618][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 597.395326][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.412897][ T10] usb 2-1: Product: syz [ 597.420627][ T10] usb 2-1: Manufacturer: syz [ 597.426026][ T10] usb 2-1: SerialNumber: syz [ 597.442780][ T10] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 597.465081][ T5918] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 597.553176][T18071] netlink: 'syz.6.2970': attribute type 1 has an invalid length. [ 597.561080][T18071] netlink: 'syz.6.2970': attribute type 2 has an invalid length. [ 597.675610][ C0] usb 2-1: ath9k_htc: invalid pkt_len (bf53) [ 597.742375][ T10] usb 2-1: USB disconnect, device number 24 [ 597.919665][T18100] /dev/rnullb0: Can't open blockdev [ 598.228477][T18120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.240558][T18120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.451387][ T5904] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 598.502728][ T5918] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 598.519652][ T5918] ath9k_htc: Failed to initialize the device [ 598.528218][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 598.551615][T18130] /dev/rnullb0: Can't open blockdev [ 598.601382][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 598.612067][ T5904] usb 5-1: config 0 has an invalid interface number: 146 but max is 0 [ 598.628076][ T5904] usb 5-1: config 0 has no interface number 0 [ 598.634704][ T5904] usb 5-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 598.646438][ T5904] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 598.660025][ T5904] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 598.673026][ T5904] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 598.684178][ T5904] usb 5-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 598.699800][ T5904] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.713039][ T5904] usb 5-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 598.723286][ T5904] usb 5-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 598.734159][ T5904] usb 5-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 598.740040][T18145] /dev/rnullb0: Can't open blockdev [ 598.757204][ T5904] usb 5-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 598.766762][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.775102][ T5904] usb 5-1: Product: syz [ 598.779425][ T5904] usb 5-1: Manufacturer: syz [ 598.784455][ T5904] usb 5-1: SerialNumber: syz [ 598.807804][ T5904] usb 5-1: config 0 descriptor?? [ 598.814971][T18121] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 598.829627][ T5904] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 598.841065][ T5904] microtek usb (rev 0.4.3): couldn't find an output bulk endpoint. Bailing out. [ 598.853196][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 599.001498][ T10] usb 2-1: device descriptor read/64, error -71 [ 599.031278][ T981] usb 5-1: USB disconnect, device number 124 [ 599.251599][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 599.391606][ T10] usb 2-1: device descriptor read/64, error -71 [ 599.521664][ T10] usb usb2-port1: attempt power cycle [ 599.585602][T18161] /dev/rnullb0: Can't open blockdev [ 599.593958][T18161] "syz.4.2984" (18161) uses obsolete ecb(arc4) skcipher [ 599.871550][ T10] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 599.909067][ T10] usb 2-1: device descriptor read/8, error -71 [ 599.918602][T18179] comedi comedi1: pcl726: I/O port conflict (0x3,16) [ 599.926160][T18179] comedi comedi1: pcl726: I/O port conflict (0x3,16) [ 600.025997][T18195] /dev/rnullb0: Can't open blockdev [ 600.070621][T18199] rtc_cmos 00:00: Alarms can be up to one day in the future [ 600.161460][ T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 600.192026][ T10] usb 2-1: device descriptor read/8, error -71 [ 600.303603][ T10] usb usb2-port1: unable to enumerate USB device [ 601.154522][T18242] I/O error, dev loop1, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 601.166554][T18242] qnx4: unable to read the superblock [ 601.176577][T18242] overlay: ./file0 is not a directory [ 601.201658][ T5904] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 601.352481][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 601.359086][ T5904] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 601.373925][ T5904] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 601.383016][ T5904] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 601.392396][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 601.402657][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 601.413598][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 601.423684][ T5904] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 601.435058][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 601.448507][ T5904] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 601.466481][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.477543][ T5904] usb 5-1: config 0 descriptor?? [ 601.686622][ T5904] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 125 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 601.941395][ T5918] usb 5-1: USB disconnect, device number 125 [ 601.954135][ T5918] usblp0: removed [ 602.325971][T18279] /dev/rnullb0: Can't open blockdev [ 602.406925][T18283] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 602.418441][T18283] qnx6: wrong signature (magic) in superblock #1. [ 602.424991][T18283] qnx6: unable to read the first superblock [ 602.533316][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.541698][T18293] /dev/rnullb0: Can't open blockdev [ 602.556290][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.565392][T18293] /dev/rnullb0: Can't open blockdev [ 602.571045][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.583741][T18293] /dev/rnullb0: Can't open blockdev [ 602.601775][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.609075][T18293] /dev/rnullb0: Can't open blockdev [ 602.615399][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.622914][T18293] /dev/rnullb0: Can't open blockdev [ 602.628651][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.646963][T18293] /dev/rnullb0: Can't open blockdev [ 602.663963][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.671011][T18293] /dev/rnullb0: Can't open blockdev [ 602.678261][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.686144][T18293] /dev/rnullb0: Can't open blockdev [ 602.694149][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.701192][T18293] /dev/rnullb0: Can't open blockdev [ 602.708213][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.727353][T18293] /dev/rnullb0: Can't open blockdev [ 602.733617][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.740670][T18293] /dev/rnullb0: Can't open blockdev [ 602.747548][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.754829][T18293] /dev/rnullb0: Can't open blockdev [ 602.760528][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.768794][T18293] /dev/rnullb0: Can't open blockdev [ 602.774907][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.782343][T18293] /dev/rnullb0: Can't open blockdev [ 602.788058][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.796056][T18293] /dev/rnullb0: Can't open blockdev [ 602.802096][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.809158][T18293] /dev/rnullb0: Can't open blockdev [ 602.878143][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.894554][T18293] /dev/rnullb0: Can't open blockdev [ 602.900694][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.909502][T18293] /dev/rnullb0: Can't open blockdev [ 602.915405][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.922769][T18293] /dev/rnullb0: Can't open blockdev [ 602.928512][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.943519][T18293] /dev/rnullb0: Can't open blockdev [ 602.956213][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 602.978431][T18293] /dev/rnullb0: Can't open blockdev [ 603.021745][T18309] /dev/rnullb0: Can't open blockdev [ 603.039768][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.070985][T18311] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (das16m1) [ 603.096431][T18293] /dev/rnullb0: Can't open blockdev [ 603.132728][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.152252][T18293] /dev/rnullb0: Can't open blockdev [ 603.154644][T18317] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 603.157926][T18313] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3015'. [ 603.183059][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.193965][T18293] /dev/rnullb0: Can't open blockdev [ 603.199714][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.212152][T18293] /dev/rnullb0: Can't open blockdev [ 603.239984][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.248642][T18293] /dev/rnullb0: Can't open blockdev [ 603.255604][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.266498][T18293] /dev/rnullb0: Can't open blockdev [ 603.272357][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.279518][T18293] /dev/rnullb0: Can't open blockdev [ 603.287072][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.296061][T18293] /dev/rnullb0: Can't open blockdev [ 603.302090][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.309733][T18293] /dev/rnullb0: Can't open blockdev [ 603.315634][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.322855][T18293] /dev/rnullb0: Can't open blockdev [ 603.328534][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.336147][T18293] /dev/rnullb0: Can't open blockdev [ 603.341975][T18293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 603.349111][T18293] /dev/rnullb0: Can't open blockdev [ 603.694420][T18349] sctp: [Deprecated]: syz.4.3025 (pid 18349) Use of int in maxseg socket option. [ 603.694420][T18349] Use struct sctp_assoc_value instead [ 603.780127][T18366] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 603.841366][ T5904] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 604.022960][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.034602][ T5904] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 604.044372][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.054447][ T5904] usb 2-1: config 0 descriptor?? [ 604.066097][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 604.146630][T18386] /dev/rnullb0: Can't open blockdev [ 604.464417][ T5904] pwc: recv_control_msg error -32 req 02 val 2b00 [ 604.471880][ T5904] pwc: recv_control_msg error -32 req 02 val 2700 [ 604.492067][ T5904] pwc: recv_control_msg error -32 req 02 val 2c00 [ 604.499210][ T5904] pwc: recv_control_msg error -32 req 04 val 1000 [ 604.506396][ T5904] pwc: recv_control_msg error -32 req 04 val 1300 [ 604.513724][ T5904] pwc: recv_control_msg error -32 req 04 val 1400 [ 604.520965][ T5904] pwc: recv_control_msg error -32 req 02 val 2000 [ 604.533207][ T5904] pwc: recv_control_msg error -32 req 02 val 2100 [ 604.541447][ T5904] pwc: recv_control_msg error -32 req 04 val 1500 [ 604.548722][ T5904] pwc: recv_control_msg error -32 req 02 val 2500 [ 604.556284][ T5904] pwc: recv_control_msg error -32 req 02 val 2400 [ 604.563770][ T5904] pwc: recv_control_msg error -32 req 02 val 2600 [ 604.571118][ T5904] pwc: recv_control_msg error -32 req 02 val 2900 [ 604.578677][ T5904] pwc: recv_control_msg error -32 req 02 val 2800 [ 604.586418][ T5904] pwc: recv_control_msg error -32 req 04 val 1100 [ 604.596877][ T5904] pwc: Registered as video103. [ 604.611108][ T5904] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input35 [ 604.806087][ T10] usb 2-1: USB disconnect, device number 29 [ 605.100978][T18430] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 605.347737][T18454] comedi comedi0: pcm3724: I/O port conflict (0xee,16) [ 605.357470][T18454] comedi comedi0: comedi_config --init_data is deprecated [ 605.367969][T18454] /dev/rnullb0: Can't open blockdev [ 605.432340][ T5918] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 605.591372][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 605.604553][ T5918] usb 5-1: config 1 has an invalid interface number: 105 but max is 0 [ 605.623783][ T5918] usb 5-1: config 1 has no interface number 0 [ 605.629925][ T5918] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 605.660339][ T5918] usb 5-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 605.670711][ T5918] usb 5-1: config 1 interface 105 has no altsetting 0 [ 605.683555][ T5918] usb 5-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 605.701397][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.709454][ T5918] usb 5-1: Product: syz [ 605.713749][ T5918] usb 5-1: Manufacturer: syz [ 605.718365][ T5918] usb 5-1: SerialNumber: syz [ 605.743479][T18441] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 605.750772][T18441] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 606.071125][T18473] /dev/rnullb0: Can't open blockdev [ 606.081551][ T5918] aqc111 5-1:1.105: probe with driver aqc111 failed with error -71 [ 606.093211][ T5918] usb 5-1: USB disconnect, device number 126 [ 606.279753][ T5865] Bluetooth: hci2: unexpected event for opcode 0x0002 [ 606.291053][T18480] PKCS8: Unsupported PKCS#8 version [ 606.327087][T18482] netlink: 'syz.1.3049': attribute type 83 has an invalid length. [ 607.568635][T18515] /dev/rnullb0: Can't open blockdev [ 607.575804][T18515] /dev/rnullb0: Can't open blockdev [ 607.629060][ T30] audit: type=1800 audit(1756846135.611:100): pid=18518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3055" name="bus" dev="tmpfs" ino=1218 res=0 errno=0 [ 607.879962][T18529] netlink: 'syz.4.3058': attribute type 6 has an invalid length. [ 607.995058][T18533] kvm: pic: non byte write [ 608.078333][T18538] tmpfs: Bad value for 'mpol' [ 608.088539][T18538] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3061'. [ 608.098067][T18538] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.3061'. [ 608.107337][T18538] netlink: 680 bytes leftover after parsing attributes in process `syz.4.3061'. [ 608.186239][T18547] /dev/rnullb0: Can't open blockdev [ 608.363631][T18564] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3067'. [ 608.403550][T18565] /dev/rnullb0: Can't open blockdev [ 608.451743][T18564] block nbd4: NBD_DISCONNECT [ 608.456418][T18564] block nbd4: Send disconnect failed -22 [ 608.462441][T18564] block nbd4: Send disconnect failed -22 [ 608.470927][T18564] /dev/rnullb0: Can't open blockdev [ 608.477840][T18563] block nbd4: Disconnected due to user request. [ 608.484782][T18563] block nbd4: shutting down sockets [ 608.518482][T18570] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3068'. [ 609.582181][ T5865] bt_err_ratelimited: 55 callbacks suppressed [ 609.582202][ T5865] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 610.267571][T18601] fuse: Unknown parameter 'f' [ 610.302343][T18609] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 610.309442][T18609] /dev/rnullb0: Can't open blockdev [ 611.137999][T18613] /dev/rnullb0: Can't open blockdev [ 611.257660][T18624] /dev/rnullb0: Can't open blockdev [ 611.308797][T18630] openvswitch: netlink: Key 24 has unexpected len 2 expected 4 [ 611.350352][ T30] audit: type=1326 audit(1756846139.331:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18631 comm="syz.6.3084" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f951238ebe9 code=0x0 [ 611.965472][T18636] /dev/rnullb0: Can't open blockdev [ 612.218329][T18644] /dev/rnullb0: Can't open blockdev [ 612.361771][T18657] /dev/rnullb0: Can't open blockdev [ 612.374844][T18657] /dev/rnullb0: Can't open blockdev [ 612.385420][T18657] /dev/rnullb0: Can't open blockdev [ 612.392243][T18657] /dev/rnullb0: Can't open blockdev [ 612.397979][T18657] /dev/rnullb0: Can't open blockdev [ 612.404126][T18657] /dev/rnullb0: Can't open blockdev [ 612.409762][T18657] /dev/rnullb0: Can't open blockdev [ 612.415956][T18657] /dev/rnullb0: Can't open blockdev [ 612.422974][T18657] /dev/rnullb0: Can't open blockdev [ 612.428846][T18657] /dev/rnullb0: Can't open blockdev [ 612.434892][T18657] /dev/rnullb0: Can't open blockdev [ 612.440764][T18657] /dev/rnullb0: Can't open blockdev [ 612.447097][T18657] /dev/rnullb0: Can't open blockdev [ 612.454672][T18657] /dev/rnullb0: Can't open blockdev [ 612.462232][T18657] /dev/rnullb0: Can't open blockdev [ 612.468089][T18657] /dev/rnullb0: Can't open blockdev [ 612.474341][T18657] /dev/rnullb0: Can't open blockdev [ 612.480168][T18657] /dev/rnullb0: Can't open blockdev [ 612.486434][T18657] /dev/rnullb0: Can't open blockdev [ 612.492598][T18657] /dev/rnullb0: Can't open blockdev [ 612.498325][T18657] /dev/rnullb0: Can't open blockdev [ 612.504727][T18657] /dev/rnullb0: Can't open blockdev [ 612.510429][T18657] /dev/rnullb0: Can't open blockdev [ 612.516575][T18657] /dev/rnullb0: Can't open blockdev [ 612.524449][T18657] /dev/rnullb0: Can't open blockdev [ 612.530312][T18657] /dev/rnullb0: Can't open blockdev [ 612.536661][T18657] /dev/rnullb0: Can't open blockdev [ 612.544108][T18657] /dev/rnullb0: Can't open blockdev [ 612.549875][T18657] /dev/rnullb0: Can't open blockdev [ 612.556476][T18657] /dev/rnullb0: Can't open blockdev [ 612.566354][T18657] /dev/rnullb0: Can't open blockdev [ 612.572614][T18657] /dev/rnullb0: Can't open blockdev [ 612.578465][T18657] /dev/rnullb0: Can't open blockdev [ 612.585727][T18657] /dev/rnullb0: Can't open blockdev [ 612.592127][T18657] /dev/rnullb0: Can't open blockdev [ 612.597858][T18657] /dev/rnullb0: Can't open blockdev [ 612.605175][T18657] /dev/rnullb0: Can't open blockdev [ 612.610901][T18657] /dev/rnullb0: Can't open blockdev [ 612.617554][T18657] /dev/rnullb0: Can't open blockdev [ 612.624669][T18657] /dev/rnullb0: Can't open blockdev [ 612.631246][T18657] /dev/rnullb0: Can't open blockdev [ 612.637335][T18657] /dev/rnullb0: Can't open blockdev [ 612.643751][T18657] /dev/rnullb0: Can't open blockdev [ 612.649461][T18657] /dev/rnullb0: Can't open blockdev [ 612.656550][T18657] /dev/rnullb0: Can't open blockdev [ 612.662549][T18657] /dev/rnullb0: Can't open blockdev [ 612.668448][T18657] /dev/rnullb0: Can't open blockdev [ 612.675156][T18657] /dev/rnullb0: Can't open blockdev [ 612.680994][T18657] /dev/rnullb0: Can't open blockdev [ 612.687217][T18657] /dev/rnullb0: Can't open blockdev [ 612.693962][T18657] /dev/rnullb0: Can't open blockdev [ 612.699681][T18657] /dev/rnullb0: Can't open blockdev [ 612.706122][T18657] /dev/rnullb0: Can't open blockdev [ 612.712032][T18657] /dev/rnullb0: Can't open blockdev [ 612.717881][T18657] /dev/rnullb0: Can't open blockdev [ 612.724103][T18657] /dev/rnullb0: Can't open blockdev [ 612.730572][T18657] /dev/rnullb0: Can't open blockdev [ 612.739369][T18657] /dev/rnullb0: Can't open blockdev [ 612.746624][T18657] /dev/rnullb0: Can't open blockdev [ 612.752607][T18657] /dev/rnullb0: Can't open blockdev [ 612.758446][T18657] /dev/rnullb0: Can't open blockdev [ 612.764736][T18657] /dev/rnullb0: Can't open blockdev [ 612.770526][T18657] /dev/rnullb0: Can't open blockdev [ 612.777164][T18657] /dev/rnullb0: Can't open blockdev [ 612.783384][T18657] /dev/rnullb0: Can't open blockdev [ 612.831062][T18669] /dev/rnullb0: Can't open blockdev [ 612.958266][T18675] tipc: Enabled bearer , priority 2 [ 613.205685][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88804c284000: rx timeout, send abort [ 613.214624][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88804c284000: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 613.303979][T18678] /dev/rnullb0: Can't open blockdev [ 613.372325][T18684] rtc_cmos 00:00: Alarms can be up to one day in the future [ 614.321530][T18702] I/O error, dev loop4, sector 128 op 0x0:(READ) flags 0x1800 phys_seg 1 prio class 2 [ 614.331167][T18702] gfs2: error -5 reading superblock [ 614.561445][ T5904] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 614.733688][ T5904] usb 2-1: config 0 has an invalid interface number: 156 but max is 0 [ 614.741968][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 614.752614][ T5904] usb 2-1: config 0 has no interface number 0 [ 614.758742][ T5904] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 614.775245][ T5904] usb 2-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 614.790421][ T5904] usb 2-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 614.807334][ T5904] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 614.819523][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.831146][ T5904] usb 2-1: config 0 descriptor?? [ 614.848393][ T5904] gspca_main: spca561-2.14.0 probing abcd:cdee [ 615.055937][ T5904] spca561 2-1:0.156: probe with driver spca561 failed with error -22 [ 615.075429][ T5904] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 615.084960][ T5904] usb 2-1: MIDIStreaming interface descriptor not found [ 615.146489][ T5904] usb 2-1: USB disconnect, device number 30 [ 615.893034][T18760] cgroup: noprefix used incorrectly [ 615.905564][T18760] netlink: 388 bytes leftover after parsing attributes in process `syz.6.3109'. [ 615.916142][ T30] audit: type=1800 audit(1756846143.901:102): pid=18760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3109" name="bus" dev="overlay" ino=2972 res=0 errno=0 [ 616.187402][T18766] orangefs: client-core tried to read wrong size [ 616.443758][ T5918] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 616.565659][T18782] netlink: 104 bytes leftover after parsing attributes in process `syz.7.3114'. [ 616.611627][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 616.642065][ T5918] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 616.650558][ T5918] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 616.661112][ T5918] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 616.670608][ T5918] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 616.680183][ T5918] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 616.704880][ T5918] usb 5-1: config 0 has no interface number 0 [ 616.711098][ T5918] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 616.740159][ T5918] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 616.756170][ T5918] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 616.768484][ T5918] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 616.784087][ T5918] usb 5-1: config 0 interface 125 has no altsetting 0 [ 616.790935][ T5918] usb 5-1: config 0 interface 125 has no altsetting 2 [ 616.804739][ T5918] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 616.829482][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.843549][ T5918] usb 5-1: Product: syz [ 616.847804][ T5918] usb 5-1: Manufacturer: syz [ 616.854452][ T5918] usb 5-1: SerialNumber: syz [ 616.862205][ T5918] usb 5-1: config 0 descriptor?? [ 616.898916][ T5918] usb 5-1: selecting invalid altsetting 2 [ 617.271642][T18820] ./cgroup: Can't lookup blockdev [ 617.362652][T18828] fuse: Bad value for 'fd' [ 617.425776][T18834] /dev/rnullb0: Can't open blockdev [ 617.464798][ C0] usb 5-1: async_complete: urb error -71 [ 617.470573][ C0] usb 5-1: async_complete: urb error -71 [ 617.476415][ C0] usb 5-1: async_complete: urb error -71 [ 617.488827][ T5918] get_1284_register: usb error -71 [ 617.494058][ T5918] uss720 5-1:0.125: probe with driver uss720 failed with error -71 [ 617.506530][ T5918] usb 5-1: USB disconnect, device number 127 [ 617.529126][T18848] netlink: 'syz.1.3127': attribute type 2 has an invalid length. [ 618.012058][T18854] /dev/rnullb0: Can't open blockdev [ 618.057171][T18856] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 618.486633][T18865] /dev/rnullb0: Can't open blockdev [ 618.577480][T18873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.588254][T18873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.598402][T18873] /dev/rnullb0: Can't open blockdev [ 618.805335][ T5954] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 618.976613][ T5954] usb 5-1: Using ep0 maxpacket: 16 [ 618.984840][ T5954] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 618.994880][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.002931][ T5954] usb 5-1: Product: syz [ 619.007174][ T5954] usb 5-1: Manufacturer: syz [ 619.011798][ T5954] usb 5-1: SerialNumber: syz [ 619.018430][ T5954] usb 5-1: config 0 descriptor?? [ 619.026730][ T5954] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 619.035214][ T5954] usb 5-1: Detected FT232B [ 619.226997][ T5954] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 619.234420][ T5954] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 619.243507][ T5954] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 619.254783][ T5954] usb 5-1: USB disconnect, device number 2 [ 619.263407][ T5954] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 619.273991][ T5954] ftdi_sio 5-1:0.0: device disconnected [ 619.652694][ T5904] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 619.822854][T18902] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 619.832434][T18902] block device autoloading is deprecated and will be removed. [ 619.836172][ T5904] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 619.851980][ T5904] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 619.862624][ T5904] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 619.873414][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 619.881428][ T5904] usb 2-1: SerialNumber: syz [ 620.097680][T18896] bridge0: entered allmulticast mode [ 620.109975][ T5904] usb 2-1: 0:2 : does not exist [ 620.115015][ T5904] usb 2-1: unit 5: unexpected type 0x03 [ 620.125825][ T5904] usb 2-1: unit 255 not found! [ 620.146177][ T5904] usb 2-1: USB disconnect, device number 31 [ 620.174588][T17089] udevd[17089]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 620.285519][T18945] /dev/rnullb0: Can't open blockdev [ 620.286546][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 620.461298][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 620.470633][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.478766][ T10] usb 5-1: Product: syz [ 620.483069][ T10] usb 5-1: Manufacturer: syz [ 620.487690][ T10] usb 5-1: SerialNumber: syz [ 620.891078][ T7833] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 621.022034][ T7833] usb 2-1: device descriptor read/64, error -71 [ 621.264006][ T7833] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 621.313963][T18976] ./cgroup: Can't lookup blockdev [ 621.335357][T18920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3139'. [ 621.358631][ T10] cdc_ncm 5-1:1.0: bind() failure [ 621.360296][T18979] /dev/rnullb0: Can't open blockdev [ 621.367811][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 621.380332][ T10] cdc_ncm 5-1:1.1: bind() failure [ 621.389764][ T10] usb 5-1: USB disconnect, device number 3 [ 621.404811][ T7833] usb 2-1: device descriptor read/64, error -71 [ 621.516101][ T7833] usb usb2-port1: attempt power cycle [ 621.858147][ T7833] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 621.880612][ T7833] usb 2-1: device descriptor read/8, error -71 [ 621.887947][T18990] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3148'. [ 621.907070][T18990] 9p: Unknown parameter 'rfdR0xffffffffffffffff' [ 622.052275][T18997] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.061281][T18998] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 622.070946][T18998] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 622.130269][ T7833] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 622.152308][ T7833] usb 2-1: device descriptor read/8, error -71 [ 622.236555][T19014] autofs: Unknown parameter '۪8WCR7Z:KmF ɏ{XpFv' [ 622.272684][ T7833] usb usb2-port1: unable to enumerate USB device [ 622.329223][T19020] netlink: 168 bytes leftover after parsing attributes in process `syz.7.3152'. [ 622.330309][T19021] /dev/rnullb0: Can't open blockdev [ 622.366993][T19023] /dev/rnullb0: Can't open blockdev [ 622.486140][T19040] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 622.493274][T19040] /dev/rnullb0: Can't open blockdev [ 622.523088][ T5918] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 622.684163][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 622.690595][ T5918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 622.702224][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 622.716404][ T5918] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 622.725523][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.733645][ T5918] usb 5-1: Product: syz [ 622.737943][ T5918] usb 5-1: Manufacturer: syz [ 622.742558][ T5918] usb 5-1: SerialNumber: syz [ 622.750296][ T5918] usb 5-1: config 0 descriptor?? [ 622.757497][ T5918] streamzap 5-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 622.959155][T19008] mmap: syz.4.3150 (19008): VmData 37597184 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 622.985423][ T5904] usb 5-1: USB disconnect, device number 4 [ 623.086301][T19065] vivid-000: disconnect [ 623.128286][T19064] vivid-000: reconnect [ 623.213271][T19073] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 623.220688][T19073] /dev/rnullb0: Can't open blockdev [ 623.253840][T19075] overlayfs: missing 'lowerdir' [ 623.335215][T19081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3166'. [ 623.474376][T19090] binder_alloc: binder_alloc_mmap_handler: 19089 200000ffd000-200001000000 already mapped failed -16 [ 623.486869][T19090] binder_alloc: binder_alloc_mmap_handler: 19089 200000ffd000-200001000000 already mapped failed -16 [ 623.498210][T19090] binder_alloc: binder_alloc_mmap_handler: 19089 200000ffd000-200001000000 already mapped failed -16 [ 623.509447][T19090] binder_alloc: binder_alloc_mmap_handler: 19089 200000ffd000-200001000000 already mapped failed -16 [ 623.527897][T19090] binder_alloc: binder_alloc_mmap_handler: 19089 200000ffd000-200001000000 already mapped failed -16 [ 623.541559][T19090] binder_alloc: binder_alloc_mmap_handler: 19089 200000ffd000-200001000000 already mapped failed -16 [ 623.554252][ T30] audit: type=1326 audit(1756846380.493:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19089 comm="syz.6.3167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f951238ebe9 code=0x7fc00000 [ 624.216503][T19103] overlayfs: missing 'workdir' [ 624.233455][T19108] syzkaller1: entered promiscuous mode [ 624.259815][T19108] syzkaller1: entered allmulticast mode [ 624.469739][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.315681][T19136] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.679050][T19157] /dev/rnullb0: Can't open blockdev [ 626.280098][ T5954] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 626.430393][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 626.438221][ T5954] usb 5-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 626.447323][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.455352][ T5954] usb 5-1: Product: syz [ 626.459505][ T5954] usb 5-1: Manufacturer: syz [ 626.464193][ T5954] usb 5-1: SerialNumber: syz [ 626.470895][ T5954] usb 5-1: config 0 descriptor?? [ 627.201452][ T5954] peak_usb 5-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 627.530207][ T5954] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -71 [ 627.546985][ T5954] usb 5-1: USB disconnect, device number 5 [ 627.967680][T19223] /dev/rnullb0: Can't open blockdev [ 627.979685][T19225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3191'. [ 628.236645][T19249] /dev/rnullb0: Can't open blockdev [ 628.269462][T19251] /dev/rnullb0: Can't open blockdev [ 628.518914][T19265] erofs (device nullb0): cannot find valid erofs superblock [ 628.592045][T19272] devpts: Unknown parameter 'uid' [ 628.645170][ T5904] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 628.657506][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3204'. [ 628.673126][T19275] bond0: (slave bond_slave_0): Releasing backup interface [ 628.806181][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 628.812974][ T5904] usb 5-1: unable to get BOS descriptor or descriptor too short [ 628.823180][ T5904] usb 5-1: config 17 has an invalid interface number: 8 but max is 1 [ 628.833091][ T5904] usb 5-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 628.843970][ T5904] usb 5-1: config 17 has no interface number 0 [ 628.850883][ T5904] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 144, changing to 7 [ 628.862926][ T5904] usb 5-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 57893, setting to 1024 [ 628.874200][ T5904] usb 5-1: config 17 interface 8 has no altsetting 0 [ 628.882671][ T5904] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 628.892882][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.902583][ T5904] usb 5-1: Product: syz [ 628.907084][ T5904] usb 5-1: Manufacturer: syz [ 628.911788][ T5904] usb 5-1: SerialNumber: syz [ 628.980903][T19300] /dev/rnullb0: Can't open blockdev [ 628.986299][T19299] /dev/rnullb0: Can't open blockdev [ 629.339662][ T7833] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 629.492404][ T7833] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 629.502520][ T7833] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.515991][ T7833] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 629.525211][ T7833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.737723][ T7833] usb 2-1: usb_control_msg returned -32 [ 629.743515][ T7833] usbtmc 2-1:16.0: can't read capabilities [ 630.458222][ T5954] usb 2-1: USB disconnect, device number 36 [ 631.455666][ T5904] usb 5-1: selecting invalid altsetting 0 [ 631.461540][ T5904] usb 5-1: 8:6 : no UAC_FORMAT_TYPE desc [ 631.468302][ T5904] usb 5-1: selecting invalid altsetting 0 [ 631.489643][ T5904] usb 5-1: USB disconnect, device number 6 [ 631.946253][ T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 632.077134][ T10] usb 2-1: device descriptor read/64, error -71 [ 632.328639][ T10] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 632.459594][ T10] usb 2-1: device descriptor read/64, error -71 [ 632.580630][ T10] usb usb2-port1: attempt power cycle [ 632.848666][T19399] netlink: 'syz.7.3220': attribute type 11 has an invalid length. [ 632.857711][T19399] netlink: 244 bytes leftover after parsing attributes in process `syz.7.3220'. [ 632.923956][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 632.963385][ T10] usb 2-1: device descriptor read/8, error -71 [ 633.204077][ T10] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 633.234554][ T10] usb 2-1: device descriptor read/8, error -71 [ 633.355891][ T10] usb usb2-port1: unable to enumerate USB device [ 634.812510][T19419] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3223'. [ 634.826597][T19419] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3223'. [ 634.836549][T19420] netlink: 256 bytes leftover after parsing attributes in process `syz.6.3223'. [ 634.849487][T19420] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3223'. [ 635.125715][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 635.289665][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 635.300041][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 635.309203][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.318777][ T24] usb 2-1: config 0 descriptor?? [ 635.333382][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 635.732644][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 635.740607][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 635.783779][T19455] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3229'. [ 635.960658][ T5904] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 636.091281][ T5904] usb 5-1: device descriptor read/64, error -71 [ 636.332723][ T5904] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 636.463449][ T5904] usb 5-1: device descriptor read/64, error -71 [ 636.575786][ T5904] usb usb5-port1: attempt power cycle [ 636.673640][ T24] pwc: recv_control_msg error -71 req 04 val 1300 [ 636.684291][ T24] pwc: recv_control_msg error -71 req 04 val 1400 [ 636.693705][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 636.702619][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 636.711067][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 636.718249][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 636.726914][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 636.733742][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 636.742442][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 636.749262][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 636.756130][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 636.762870][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 636.770257][ T24] pwc: Registered as video103. [ 636.777588][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input37 [ 636.799158][ T24] usb 2-1: USB disconnect, device number 41 [ 636.916176][ T5904] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 636.936795][ T5904] usb 5-1: device descriptor read/8, error -71 [ 637.127313][ T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 637.177752][ T5904] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 637.198707][ T5904] usb 5-1: device descriptor read/8, error -71 [ 637.280852][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 637.290236][ T24] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 637.299145][ T24] usb 2-1: Product: syz [ 637.303413][ T24] usb 2-1: SerialNumber: syz [ 637.309690][ T24] usb 2-1: config 0 descriptor?? [ 637.318666][ T5904] usb usb5-port1: unable to enumerate USB device [ 637.519227][T19492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 637.520146][ T24] hso 2-1:0.0: Failed to find BULK IN ep [ 637.530284][T19492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 637.669965][ T24] usb 2-1: USB disconnect, device number 42 [ 637.765923][T19510] kvm: user requested TSC rate below hardware speed [ 637.776123][T19510] /dev/rnullb0: Can't open blockdev [ 638.275221][T19525] IPVS: set_ctl: invalid protocol: 135 100.1.1.0:20004 [ 638.575538][ T24] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 638.706316][ T24] usb 2-1: device descriptor read/64, error -71 [ 638.747827][T19534] /dev/rnullb0: Can't open blockdev [ 638.941349][T19551] /dev/rnullb0: Can't open blockdev [ 638.947702][ T24] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 639.078356][ T24] usb 2-1: device descriptor read/64, error -71 [ 639.091316][T19562] /dev/rnullb0: Can't open blockdev [ 639.190020][ T24] usb usb2-port1: attempt power cycle [ 639.533192][ T24] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 639.561857][ T24] usb 2-1: device descriptor read/8, error -71 [ 639.812744][ T24] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 639.843383][ T24] usb 2-1: device descriptor read/8, error -71 [ 639.956482][ T24] usb usb2-port1: unable to enumerate USB device [ 640.179327][T19575] rdma_rxe: rxe_newlink: failed to add wlan1 [ 640.191011][T19575] /dev/rnullb0: Can't open blockdev [ 641.202282][T19592] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3889405060 (497843847680 ns) > initial count (482886417536 ns). Using initial count to start timer. [ 642.070738][T19613] /dev/rnullb0: Can't open blockdev [ 642.677992][ T7833] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 642.840607][ T7833] usb 5-1: unable to get BOS descriptor or descriptor too short [ 642.850958][ T7833] usb 5-1: not running at top speed; connect to a high speed hub [ 642.860383][ T7833] usb 5-1: config 13 has an invalid interface number: 120 but max is 0 [ 642.871274][ T7833] usb 5-1: config 13 has no interface number 0 [ 642.884233][ T7833] usb 5-1: config 13 interface 120 has no altsetting 0 [ 642.901804][ T7833] usb 5-1: New USB device found, idVendor=1604, idProduct=8005, bcdDevice=a1.c9 [ 642.915470][ T7833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.933824][ T7833] usb 5-1: Product: syz [ 642.938042][ T7833] usb 5-1: Manufacturer: syz [ 642.949284][ T7833] usb 5-1: SerialNumber: syz [ 643.165109][T19647] /dev/rnullb0: Can't open blockdev [ 643.172426][T19647] /dev/rnullb0: Can't open blockdev [ 643.178162][T19647] /dev/rnullb0: Can't open blockdev [ 643.185447][T19647] /dev/rnullb0: Can't open blockdev [ 643.193033][T19647] /dev/rnullb0: Can't open blockdev [ 643.199278][T19647] /dev/rnullb0: Can't open blockdev [ 643.206123][T19647] /dev/rnullb0: Can't open blockdev [ 643.215016][T19647] /dev/rnullb0: Can't open blockdev [ 643.221643][T19647] /dev/rnullb0: Can't open blockdev [ 643.227618][T19647] /dev/rnullb0: Can't open blockdev [ 643.235453][T19647] /dev/rnullb0: Can't open blockdev [ 643.243165][T19647] /dev/rnullb0: Can't open blockdev [ 643.249689][T19647] /dev/rnullb0: Can't open blockdev [ 643.256910][T19647] /dev/rnullb0: Can't open blockdev [ 643.267126][T19647] /dev/rnullb0: Can't open blockdev [ 643.274004][T19647] /dev/rnullb0: Can't open blockdev [ 643.279922][T19647] /dev/rnullb0: Can't open blockdev [ 643.288187][T19647] /dev/rnullb0: Can't open blockdev [ 643.316348][T19647] /dev/rnullb0: Can't open blockdev [ 643.323499][T19647] /dev/rnullb0: Can't open blockdev [ 643.329712][T19647] /dev/rnullb0: Can't open blockdev [ 643.337112][T19647] /dev/rnullb0: Can't open blockdev [ 643.345127][T19647] /dev/rnullb0: Can't open blockdev [ 643.350952][T19647] /dev/rnullb0: Can't open blockdev [ 643.359299][T19647] /dev/rnullb0: Can't open blockdev [ 643.365387][T19647] /dev/rnullb0: Can't open blockdev [ 643.371177][T19647] /dev/rnullb0: Can't open blockdev [ 643.380650][T19647] /dev/rnullb0: Can't open blockdev [ 643.386799][T19647] /dev/rnullb0: Can't open blockdev [ 643.414236][T19647] /dev/rnullb0: Can't open blockdev [ 643.420125][T19647] /dev/rnullb0: Can't open blockdev [ 643.426425][T19647] /dev/rnullb0: Can't open blockdev [ 643.453667][T19647] /dev/rnullb0: Can't open blockdev [ 643.488776][ T7833] usb 5-1: USB disconnect, device number 11 [ 643.515785][T17082] udevd[17082]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:13.120/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.964633][ T5989] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 644.037997][T19695] /dev/rnullb0: Can't open blockdev [ 644.044171][T19695] sctp: [Deprecated]: syz.4.3266 (pid 19695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 644.044171][T19695] Use struct sctp_sack_info instead [ 644.115349][ T5989] usb 2-1: Using ep0 maxpacket: 8 [ 644.124544][ T5989] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 644.136113][ T5989] usb 2-1: config 179 has no interface number 0 [ 644.142493][ T5989] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 644.154537][ T5989] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 644.166493][ T5989] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 644.185926][ T5989] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 644.207298][ T5989] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 644.237858][ T5989] usb 2-1: config 179 interface 65 has no altsetting 0 [ 644.245258][ T5989] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 644.255603][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.279963][ T5989] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input38 [ 644.326659][ T5904] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 644.507404][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 644.521532][ T5904] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 644.531936][ T5904] usb 5-1: config 0 has no interface number 0 [ 644.559392][ T5904] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=e9.e9 [ 644.577750][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.587027][ T5904] usb 5-1: Product: syz [ 644.597749][ T5904] usb 5-1: Manufacturer: syz [ 644.606276][ T5904] usb 5-1: SerialNumber: syz [ 644.619646][ T5904] usb 5-1: config 0 descriptor?? [ 644.638437][ T5904] mcba_usb 5-1:0.29: Can't find endpoints [ 644.696464][T19713] binder: 19687:19713 ioctl 8138ae83 7f0f5b867aa0 returned -22 [ 644.977154][ T5904] usb 2-1: USB disconnect, device number 47 [ 644.983212][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 645.129592][T19737] netlink: 'syz.7.3270': attribute type 2 has an invalid length. [ 646.532810][T19765] block nbd1: Attempted send on invalid socket [ 646.539204][T19765] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 646.549088][T19765] MINIX-fs: unable to read superblock [ 647.100553][ T5904] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 647.125406][ T5954] usb 5-1: USB disconnect, device number 12 [ 647.272817][ T5904] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 647.280950][ T5904] usb 2-1: config 0 has no interface number 0 [ 647.287579][ T5904] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 647.303354][ T5904] usb 2-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 647.315968][ T5904] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 647.326361][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.335832][ T5904] usb 2-1: Product: syz [ 647.340025][ T5904] usb 2-1: Manufacturer: syz [ 647.344983][ T5904] usb 2-1: SerialNumber: syz [ 647.358068][ T5904] usb 2-1: config 0 descriptor?? [ 647.368303][ T5904] cypress_m8 2-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 647.643208][T19785] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3278'. [ 647.693072][T19770] block nbd1: Attempted send on invalid socket [ 647.701666][T19770] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 647.768834][ T5904] usb 2-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 647.805140][ T5904] usb 2-1: USB disconnect, device number 48 [ 647.820729][ T5904] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 647.832589][ T5904] cypress_m8 2-1:0.35: device disconnected [ 648.284983][T19815] overlayfs: failed to resolve './file0': -2 [ 648.311817][T19819] /dev/rnullb0: Can't open blockdev [ 648.317578][ T5904] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 648.375371][T19821] binder: 19820:19821 ioctl ae01 1f returned -22 [ 648.477039][ T5904] usb 5-1: device descriptor read/64, error -71 [ 648.729272][T19833] /dev/rnullb0: Can't open blockdev [ 648.849122][ T5904] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 649.019655][ T5904] usb 5-1: device descriptor read/64, error -71 [ 649.182588][ T5904] usb usb5-port1: attempt power cycle [ 649.488650][T19869] Invalid ELF header magic: != ELF [ 649.507350][T19869] Invalid ELF header magic: != ELF [ 649.542200][ T5904] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 649.588420][ T5904] usb 5-1: device descriptor read/8, error -71 [ 649.835497][ T5904] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 649.864245][ T5904] usb 5-1: device descriptor read/8, error -71 [ 649.882787][T19887] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3294'. [ 649.986293][ T5904] usb usb5-port1: unable to enumerate USB device [ 650.245554][ T5904] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 650.406627][ T5904] usb 2-1: Using ep0 maxpacket: 8 [ 650.416139][ T5904] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 650.439294][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.456718][ T5904] usb 2-1: Product: syz [ 650.468606][ T5904] usb 2-1: Manufacturer: syz [ 650.483640][ T5904] usb 2-1: SerialNumber: syz [ 650.495320][ T5904] usb 2-1: config 0 descriptor?? [ 650.719055][ T5904] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 652.030915][T19903] /dev/rnullb0: Can't open blockdev [ 652.317392][ T981] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 652.455912][ T981] usb 5-1: device descriptor read/64, error -71 [ 652.618920][ T5904] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 652.642318][ T5904] usb 2-1: USB disconnect, device number 49 [ 652.696918][ T981] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 652.832955][ T981] usb 5-1: device descriptor read/64, error -71 [ 652.959474][ T981] usb usb5-port1: attempt power cycle [ 653.014991][T19956] input: syz0 as /devices/virtual/input/input39 [ 653.185310][T19968] /dev/rnullb0: Can't open blockdev [ 653.302014][ T981] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 653.342784][ T981] usb 5-1: device descriptor read/8, error -71 [ 653.374658][T19973] /dev/rnullb0: Can't open blockdev [ 653.591700][ T981] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 653.621283][ T981] usb 5-1: device descriptor read/8, error -71 [ 653.736737][ T981] usb usb5-port1: unable to enumerate USB device [ 654.093234][ T5989] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 654.206930][T19999] /dev/sg0: Can't lookup blockdev [ 654.212340][T19999] /dev/sg0: Can't lookup blockdev [ 654.217923][T19999] /dev/sg0: Can't lookup blockdev [ 654.223279][T19999] /dev/sg0: Can't lookup blockdev [ 654.229672][T19999] /dev/sg0: Can't lookup blockdev [ 654.235254][T19999] /dev/sg0: Can't lookup blockdev [ 654.240582][T19999] /dev/sg0: Can't lookup blockdev [ 654.246471][T19999] /dev/sg0: Can't lookup blockdev [ 654.251785][T19999] /dev/sg0: Can't lookup blockdev [ 655.699027][T20046] /dev/rnullb0: Can't open blockdev [ 655.867475][T20059] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 656.036959][ T5865] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 656.081972][T20081] /dev/rnullb0: Can't open blockdev [ 656.583532][T20104] /dev/rnullb0: Can't open blockdev [ 656.736049][T20107] blktrace: Concurrent blktraces are not allowed on rnullb0 [ 657.292123][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 657.300677][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 657.308325][ T5860] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 657.316204][ T5860] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 657.324109][ T5860] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 657.361223][T20115] wlan1 speed is unknown, defaulting to 1000 [ 657.474101][T20115] wlan1 speed is unknown, defaulting to 1000 [ 657.879858][T20115] chnl_net:caif_netlink_parms(): no params data found [ 657.969729][ T5989] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 658.143346][ T5989] usb 2-1: Using ep0 maxpacket: 32 [ 658.160984][T20115] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.163873][ T5989] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 658.181252][T20115] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.184093][ T5989] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 658.188525][T20115] bridge_slave_0: entered allmulticast mode [ 658.208531][ T5989] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 658.229254][T20115] bridge_slave_0: entered promiscuous mode [ 658.242877][T20115] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.260296][T20115] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.269859][ T5989] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 658.288414][T20115] bridge_slave_1: entered allmulticast mode [ 658.296034][ T5989] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 658.307881][T20115] bridge_slave_1: entered promiscuous mode [ 658.334200][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.347577][ T5989] usb 2-1: Product: syz [ 658.354261][ T5989] usb 2-1: Manufacturer: syz [ 658.358904][ T5989] usb 2-1: SerialNumber: syz [ 658.360683][T11444] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.380949][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 658.392589][ T5989] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input40 [ 658.457340][T11444] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.480094][T20115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.535126][T20115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.570871][T11444] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.608300][ T5989] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 658.639493][ T5989] (id 0x00) [ 658.651285][T11444] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.739736][T20115] team0: Port device team_slave_0 added [ 658.748719][T20115] team0: Port device team_slave_1 added [ 658.774595][T20115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 658.781726][T20115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.855227][T20115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 658.875798][T20156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 658.881396][T20115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 658.884475][ T5989] rc_core: IR keymap rc-imon-pad not found [ 658.898282][T20115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 658.898692][T20156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 658.936562][ T5989] Registered IR keymap rc-empty [ 658.941821][ T5989] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 658.972169][T20115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 659.158376][T20115] hsr_slave_0: entered promiscuous mode [ 659.260262][T20115] hsr_slave_1: entered promiscuous mode [ 659.375554][ T5860] Bluetooth: hci0: command tx timeout [ 659.419486][ T5989] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 659.660074][T11444] bridge_slave_1: left allmulticast mode [ 659.680443][T11444] bridge_slave_1: left promiscuous mode [ 659.702292][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.734492][T11444] bridge_slave_0: left allmulticast mode [ 659.753207][T11444] bridge_slave_0: left promiscuous mode [ 659.766501][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.947896][ T7833] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 660.120813][ T7833] usb 5-1: Using ep0 maxpacket: 16 [ 660.162391][ T7833] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 660.211965][ T7833] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 660.251231][ T7833] usb 5-1: Product: syz [ 660.265574][ T7833] usb 5-1: Manufacturer: syz [ 660.295621][ T7833] usb 5-1: SerialNumber: syz [ 660.332078][ T7833] usb 5-1: config 0 descriptor?? [ 660.492144][T11444]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.559099][T20482] /dev/rnullb0: Can't open blockdev [ 660.587024][ T5918] usb 5-1: USB disconnect, device number 21 [ 660.658927][T11444]  (unregistering): Released all slaves [ 660.789933][T11444] tipc: Left network mode [ 660.832154][ T5989] imon:send_packet: packet tx failed (-71) [ 660.863701][ T5989] imon 2-1:155.0: remote input dev register failed [ 660.877830][ T5989] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 660.969153][ T5989] imon 2-1:155.0: unable to initialize intf0, err 0 [ 660.987604][ T5989] imon:imon_probe: failed to initialize context! [ 661.005321][ T5989] imon 2-1:155.0: unable to register, err -19 [ 661.022453][ T5989] usb 2-1: USB disconnect, device number 51 [ 661.377360][T20603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 661.424633][T20115] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 661.454448][T20115] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 661.468268][ T5860] Bluetooth: hci0: command tx timeout [ 661.478127][T20631] /dev/rnullb0: Can't open blockdev [ 661.492208][ T5989] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 661.518881][T11444] hsr_slave_0: left promiscuous mode [ 661.529858][T11444] hsr_slave_1: left promiscuous mode [ 661.540015][T11444] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 661.552512][T11444] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 661.560628][T11444] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 661.577365][T11444] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 661.598343][T11444] veth1_macvtap: left promiscuous mode [ 661.603909][T11444] veth0_macvtap: left promiscuous mode [ 661.613121][T11444] veth1_vlan: left promiscuous mode [ 661.694581][ T5989] usb 2-1: Using ep0 maxpacket: 32 [ 661.709075][ T5989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 661.733679][ T5989] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 661.765227][ T5989] usb 2-1: can't read configurations, error -61 [ 661.851132][T11444] team0 (unregistering): Port device team_slave_1 removed [ 661.864027][T11444] team0 (unregistering): Port device team_slave_0 removed [ 661.907002][ T5989] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 661.965258][T20115] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 661.974735][T20115] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 662.066530][ T5989] usb 2-1: Using ep0 maxpacket: 32 [ 662.078006][ T5989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 662.090369][ T5989] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 662.100671][ T5989] usb 2-1: can't read configurations, error -61 [ 662.107726][ T5989] usb usb2-port1: attempt power cycle [ 662.114155][T20115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.131687][T20115] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.145090][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.152260][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.166868][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.174117][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.175420][T20663] fuse: Unknown parameter '0x0000000000000005' [ 662.414750][T20115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 662.468781][ T5989] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 662.484909][T20681] 9pnet: p9_errstr2errno: server reported unknown error 18446744 [ 662.498458][ T5989] usb 2-1: Using ep0 maxpacket: 32 [ 662.505454][ T5989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 662.524343][ T5989] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 662.535312][ T5989] usb 2-1: can't read configurations, error -61 [ 662.705899][T20115] veth0_vlan: entered promiscuous mode [ 662.721377][T20115] veth1_vlan: entered promiscuous mode [ 662.749167][T20115] veth0_macvtap: entered promiscuous mode [ 662.765417][T20115] veth1_macvtap: entered promiscuous mode [ 662.782053][T20115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.795114][T20115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.811279][ T5989] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 662.976302][ T5989] usb 2-1: Using ep0 maxpacket: 32 [ 663.055303][ T5989] usb 2-1: unable to get BOS descriptor or descriptor too short [ 663.196693][ T5989] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 663.204639][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.215705][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.224944][ T5989] usb 2-1: can't read configurations, error -61 [ 663.233491][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.246961][ T5989] usb usb2-port1: unable to enumerate USB device [ 663.257076][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 663.297042][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.317329][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.345511][T13997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.355072][T13997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.552357][ T5860] Bluetooth: hci0: command tx timeout [ 663.841950][ T5865] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 663.851940][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 663.859344][ T5865] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 663.868732][ T5865] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 663.877797][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 663.918740][T20722] wlan1 speed is unknown, defaulting to 1000 [ 664.049753][T20722] wlan1 speed is unknown, defaulting to 1000 [ 664.347345][T20766] overlayfs: failed to resolve './bus': -2 [ 664.634141][T20722] chnl_net:caif_netlink_parms(): no params data found [ 664.851594][ T36] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.937391][T20722] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.944618][T20722] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.951152][T20937] 9p: Unknown parameter 'Vǎ 1 [ 666.985529][ T5860] Bluetooth: hci2: unexpected event for opcode 0x2039 [ 667.109134][ T36] hsr_slave_0: left promiscuous mode [ 667.136937][ T36] hsr_slave_1: left promiscuous mode [ 667.143049][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 667.151577][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 667.171643][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 667.179567][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.199401][ T36] veth1_macvtap: left promiscuous mode [ 667.205603][ T36] veth0_macvtap: left promiscuous mode [ 667.211610][ T36] veth1_vlan: left promiscuous mode [ 667.218056][ T36] veth0_vlan: left promiscuous mode [ 667.319322][ T36] team0 (unregistering): Port device team_slave_1 removed [ 667.339589][ T36] team0 (unregistering): Port device team_slave_0 removed [ 667.423438][T21217] wlan1 speed is unknown, defaulting to 1000 [ 667.448205][T20722] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 667.465408][T20722] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 667.479032][T20722] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 667.490404][T20722] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 667.613104][T20722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 667.631755][T20722] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.653494][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.660671][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.677703][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.684905][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 667.950592][T20722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 668.051445][ T5860] Bluetooth: hci4: command tx timeout [ 668.149694][T20722] veth0_vlan: entered promiscuous mode [ 668.170217][T20722] veth1_vlan: entered promiscuous mode [ 668.210208][T20722] veth0_macvtap: entered promiscuous mode [ 668.223796][T20722] veth1_macvtap: entered promiscuous mode [ 668.254391][T20722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.267898][T20722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.300783][T11444] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.324942][T11444] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.342463][T11444] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.368125][T11444] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.426940][ T5860] Bluetooth: hci0: unexpected cc 0x2039 length: 2 > 1 [ 668.444847][T11444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.464242][T11444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.486507][T11444] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 668.507396][T11444] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 668.946834][ T5860] Bluetooth: hci4: unexpected cc 0x2039 length: 2 > 1 [ 669.195818][T21390] block nbd4: shutting down sockets [ 669.468271][ T5860] Bluetooth: hci3: unexpected event for opcode 0x0c26 [ 669.757832][T21443] ------------[ cut here ]------------ [ 669.763414][T21443] UBSAN: shift-out-of-bounds in fs/9p/vfs_super.c:57:22 [ 669.773557][T21443] shift exponent 32 is too large for 32-bit type 'int' [ 669.781234][T21443] CPU: 1 UID: 0 PID: 21443 Comm: syz.4.3460 Not tainted syzkaller #0 PREEMPT(full) [ 669.781262][T21443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 669.781275][T21443] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 669.781284][T21443] [ 669.781293][T21443] dump_stack_lvl+0x189/0x250 [ 669.781332][T21443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 669.781363][T21443] ? __pfx__printk+0x10/0x10 [ 669.781395][T21443] ubsan_epilogue+0xa/0x40 [ 669.781416][T21443] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 669.781446][T21443] ? __pfx_v9fs_set_super+0x10/0x10 [ 669.781470][T21443] v9fs_get_tree+0x957/0xa90 [ 669.781493][T21443] ? __pfx_v9fs_get_tree+0x10/0x10 [ 669.781518][T21443] vfs_get_tree+0x8f/0x2b0 [ 669.781539][T21443] do_new_mount+0x2a2/0xa30 [ 669.781562][T21443] ? ns_capable+0x8a/0xf0 [ 669.781583][T21443] ? __pfx_do_new_mount+0x10/0x10 [ 669.781604][T21443] ? path_mount+0x61c/0xfe0 [ 669.781623][T21443] ? user_path_at+0x44/0x60 [ 669.781654][T21443] __se_sys_mount+0x317/0x410 [ 669.781677][T21443] ? __pfx___se_sys_mount+0x10/0x10 [ 669.781702][T21443] ? rcu_is_watching+0x15/0xb0 [ 669.781722][T21443] ? __x64_sys_mount+0x20/0xc0 [ 669.781746][T21443] do_syscall_64+0xfa/0xfa0 [ 669.781773][T21443] ? rcu_is_watching+0x15/0xb0 [ 669.781804][T21443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.781823][T21443] ? clear_bhb_loop+0x60/0xb0 [ 669.781846][T21443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.781865][T21443] RIP: 0033:0x7f258ad8ebe9 [ 669.781884][T21443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 669.781903][T21443] RSP: 002b:00007f258bbd3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 669.781924][T21443] RAX: ffffffffffffffda RBX: 00007f258afc5fa0 RCX: 00007f258ad8ebe9 [ 669.781940][T21443] RDX: 0000200000002340 RSI: 00002000000025c0 RDI: 0000000000000000 [ 669.781954][T21443] RBP: 00007f258ae11e19 R08: 0000200000000280 R09: 0000000000000000 [ 669.781967][T21443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.781979][T21443] R13: 00007f258afc6038 R14: 00007f258afc5fa0 R15: 00007fff88fa9648 [ 669.782002][T21443] [ 669.782010][T21443] ---[ end trace ]--- [ 670.016295][T21450] input: syz0 as /devices/virtual/input/input42 [ 670.039773][T21443] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 670.047051][T21443] CPU: 1 UID: 0 PID: 21443 Comm: syz.4.3460 Not tainted syzkaller #0 PREEMPT(full) [ 670.056447][T21443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 670.066514][T21443] Call Trace: [ 670.069807][T21443] [ 670.072738][T21443] dump_stack_lvl+0x99/0x250 [ 670.077344][T21443] ? __asan_memcpy+0x40/0x70 [ 670.081940][T21443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 670.087149][T21443] ? __pfx__printk+0x10/0x10 [ 670.091761][T21443] vpanic+0x281/0x750 [ 670.095861][T21443] ? __pfx_vpanic+0x10/0x10 [ 670.100414][T21443] panic+0xb9/0xc0 [ 670.104150][T21443] ? __pfx_panic+0x10/0x10 [ 670.108578][T21443] ? __pfx__printk+0x10/0x10 [ 670.113227][T21443] check_panic_on_warn+0x89/0xb0 [ 670.118182][T21443] __ubsan_handle_shift_out_of_bounds+0x386/0x410 [ 670.124612][T21443] ? __pfx_v9fs_set_super+0x10/0x10 [ 670.129823][T21443] v9fs_get_tree+0x957/0xa90 [ 670.134421][T21443] ? __pfx_v9fs_get_tree+0x10/0x10 [ 670.139545][T21443] vfs_get_tree+0x8f/0x2b0 [ 670.143970][T21443] do_new_mount+0x2a2/0xa30 [ 670.148487][T21443] ? ns_capable+0x8a/0xf0 [ 670.152822][T21443] ? __pfx_do_new_mount+0x10/0x10 [ 670.158120][T21443] ? path_mount+0x61c/0xfe0 [ 670.162661][T21443] ? user_path_at+0x44/0x60 [ 670.167183][T21443] __se_sys_mount+0x317/0x410 [ 670.171890][T21443] ? __pfx___se_sys_mount+0x10/0x10 [ 670.177098][T21443] ? rcu_is_watching+0x15/0xb0 [ 670.181871][T21443] ? __x64_sys_mount+0x20/0xc0 [ 670.186645][T21443] do_syscall_64+0xfa/0xfa0 [ 670.191162][T21443] ? rcu_is_watching+0x15/0xb0 [ 670.195936][T21443] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.202011][T21443] ? clear_bhb_loop+0x60/0xb0 [ 670.206700][T21443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.212596][T21443] RIP: 0033:0x7f258ad8ebe9 [ 670.217029][T21443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.236645][T21443] RSP: 002b:00007f258bbd3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 670.245074][T21443] RAX: ffffffffffffffda RBX: 00007f258afc5fa0 RCX: 00007f258ad8ebe9 [ 670.253050][T21443] RDX: 0000200000002340 RSI: 00002000000025c0 RDI: 0000000000000000 [ 670.261025][T21443] RBP: 00007f258ae11e19 R08: 0000200000000280 R09: 0000000000000000 [ 670.269002][T21443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.276988][T21443] R13: 00007f258afc6038 R14: 00007f258afc5fa0 R15: 00007fff88fa9648 [ 670.284973][T21443] [ 670.288360][T21443] Kernel Offset: disabled [ 670.292694][T21443] Rebooting in 86400 seconds..