last executing test programs: 1m24.472742309s ago: executing program 1 (id=184): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000f000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1m24.294455595s ago: executing program 1 (id=187): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120110019bde521023398a71d7d80102030109021200010509401909047b07002d51d598fc967f859d8dfe7ed831a621e6c224853e0cc5c150c18fc31b00a61c7747ecc20278565b8970130fc7ba6a8968e69221873bbd564769f54088cf1076b71f8c14ea1c13b2194468ce87054679d8"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x93774000) 1m22.169781928s ago: executing program 1 (id=208): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000efff0000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570"], 0xc8}}, 0x0) 1m21.9292793s ago: executing program 1 (id=212): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r1 = syz_clone(0xc000000, 0x0, 0x35, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1d0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000300)='./file0/file0/file0\x00', 0x1) r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, 0x0, 0x0, 0x0, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000200)=0x7) 1m21.472974308s ago: executing program 1 (id=217): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x28}], 0x1}, 0x0) syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001340)={0xf, {"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", 0x1000}}, 0x1006) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r6, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r4) close_range(r1, 0xffffffffffffffff, 0x2) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r3, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x100}}, './file0\x00'}) 1m20.848974061s ago: executing program 1 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000f0ff0000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570"], 0xc8}}, 0x0) 1m20.494310486s ago: executing program 32 (id=221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000f0ff0000000000000a20000000000a010400000500000000000500fffe0900010073797a30000000002c000000030a01020000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000000900010073797a30000000002c0004802800018008000100647570"], 0xc8}}, 0x0) 4.021730064s ago: executing program 2 (id=848): syz_clone3(&(0x7f0000000b40)={0x2000000, &(0x7f0000000880)=0xffffffffffffffff, 0x0, 0x0, {0x2e}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close_range(r0, 0xffffffffffffffff, 0x2) 3.674386157s ago: executing program 2 (id=851): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xe, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000ffe001"], 0xfdef) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) 3.348978536s ago: executing program 2 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000fff5001d0000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30000000002c000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0xa0}}, 0x0) 3.14073392s ago: executing program 2 (id=858): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7fff, 0x200200) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0xffffffff, 0x9, 0x1}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x1) open_by_handle_at(r1, &(0x7f00000000c0)=@raw={0xc, 0x97, {"7ed1786f8e748abf373731f6"}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x440000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r2, 0x20, 0x70bd26, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000081}, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x4, 0x3, 0x400, 0x4000}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000280)={0x0, 0x6, 0xe}) r3 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000340)={0x1, 0x9, 0x4, 0x10, 0x24e, {0x77359400}, {0x3, 0x1, 0x8, 0x2, 0xe8, 0x7, "a5360506"}, 0x6, 0x4, {0xffffffffffffffff}}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000400)={0x80000001, 0x2, 0x4, 0x2, 0x1, {r7, r8/1000+10000}, {0x7, 0x3, 0x9, 0xff, 0xe, 0x0, "6108e0a8"}, 0xa630, 0x4, {0xffffffffffffffff}, 0xe53}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) ioctl$VIDIOC_QUERYBUF(r3, 0xc0585609, &(0x7f0000000540)=@multiplanar_fd={0x5, 0x1, 0x4, 0x1, 0x0, {r4, r5/1000+10000}, {0x5, 0x1, 0x5f, 0x9, 0xa, 0x4, "09b4f17a"}, 0xb, 0x4, {&(0x7f0000000480)=[{0xffffffff, 0x5, {r6}, 0x1}, {0x8, 0x4, {r9}, 0x9}]}, 0x3, 0x0, r10}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r10, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x6}}, './file0\x00'}) ioctl$VIDIOC_QUERYBUF(r12, 0xc0585609, &(0x7f0000000680)=@multiplanar_overlay={0x3, 0x3, 0x4, 0xf002, 0xfff, {0x77359400}, {0x4, 0x2, 0x80, 0x3, 0x17, 0x16, "775f4514"}, 0x9, 0x3, {&(0x7f0000000600)=[{0x7, 0x1, {0x7}, 0xff}, {0xfffffffc, 0x6, {0xc}, 0x9}]}, 0xfffffe00, 0x0, r10}) ioctl$IOCTL_VMCI_SET_NOTIFY(r12, 0x7cb, &(0x7f0000000700)={0x6, 0x3, 0x101}) pipe2$9p(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRWALK(r13, &(0x7f0000000780)={0xf, 0x1f, 0x1, 0x91b}, 0xf) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f00000007c0)={{r10}, "7eeaeb7e716084d3755e29bd383f9793d931f9a7950b122e825f157a35463bd40fca113e8e109af3df0dca862c36686b6ed1f575bf2b52d87b2c3e36d1714655a85e998c5cf6d35bb767eccef4bde5f08c78083f71d51c3977aca0ef84877bd8b3977274c8c267937c72c07912d49af1b4f60cbcbc7dea8458e6fccb843c058ac9867509bcffd578ad7c339817e3c1b72d171a18b43caa316c3a1a57b91d56227737a728807b9a30b84bc1288b2d87a6dfc89c9cf1121227bef8111b64ea449546ab854d683839c15a83bad61a1e4e9a5d40dd7c7dd3c831f8c2db38221e0dd20b64674e0cb63fc54bed0776d94ba098115844a200c4ae6f1ba66d4a76053daf519a1875eb556716db316d6fb24612a79939fd1c8111df514081f8fbd15bef04fde00eacd8ba44e19fe467f622dc3da8e1ab34e7ff40f98951f73c3d78f79b493b1f7657d292716c8263f89e8e7098e1931dcce153f812394c103386e924b81c877c2d0701fbf0e47d73ce375d073cc5f9baaa1f10a9fb999dc677b99976f5a8c93c368b80bced48c13b6c25143292e29bd4b67f3267a22916556bca0c18274933d49f596b6ede4e1d6b44f5612addba6fbb505967968ee99a31014e7c84598be31009acbcd612c890591a3f43eebf965abe0aca6140006fe28e0d23ed406a47ef41cb6bdc8048cf6a49b7a37c6bd67a3477dc4d6a4b65626ea93f413273f1fe907845503434ea912bd01658d85e0a7b7e3f21249207cee0cbd88e7a072e12eb91ce77a991bbb7607e525a8e7af1fd592e538e4f80f38b6750682f954eac9ef5c08522017fb67da179bbec892179b067f2935afbf56cc3d9c8d28ee952d54016cc7f9c3d42d8cb879875cd6cc681b7924d8024c313142a734393ed037d98dc4b900bf93830ab9cdba7684ca3f001e16379beb1f6b7d394697500713e975b883b403461137505c3599102235f88f109b4c23b13102f88a856fabd5bc87cdc039052e230191ccf290b5b5bab142317750e81f0ccc62aa65b6aaf8c259f7c4879891ccfc7c7ca36b9adec16272506aef8985e09597fa787b1b40985a071c1d28d4db2dca05dc9047c1dae30d2cb6fba1ad1c62c143762465ba8893deb7a421cf45127048c895dcbc9296385afa89855c96f2c6e4bf57d5aecb023598a7cad88c308be96a19b06bfb8d65558df09e0ee44b04e052823c52e269847e606628f5e2801020a0845505d839f0a35414030657cd950c99b1e4f212a0b0890709fc7b586b5735c2dfd7e57f6c957aa8910dfba41bef7c4f2f8792a35eed2e3a6c59a8b4b1c82f0168488284016cc6e9e00ae2f3d1c590d16b40b873e0f6ac4880c84410d9031f043150c1f6c25c9c8f5b8d0b9a2fc4bfc0141c21868c7d2d215448a18bf3e4ab87c4d8217ef1ca51bb23ad20e2b145dd34ff92f6c60cf0357e1333d2ef82b6cfe63c5ee86d5ce204d7a029c9e8cfd09033507f358ed164fb07e4f50c945fee1d0d9d10d750fec02a47d2f6901b24e0f32cfeeca5d3bacb871a99ce9039cb8b1f7da2875c62956f9dbfd07e78303f7809be30ce76b2227809599127cd1ecd52893555d57b0c052695d3fdec099daa740232f9b4d1f3d4e7899af486f42500da8c8732dd90681a85e621feb91c40eb40902abaef009bf4732873fd7bc7db001441ac572aff6cbaea9be6dc73e4bf33eafdcec0cf04c0208e95b57f1d5ee46099bf54b588dd70fd68538304e8e3cd35b1155b3562a3692afb8b6cb7351ad053207443531ec5ef3102f1f7605466b7b38fdfbaf33201780641d175a49965a4a6b49bfe6c5fff2c6f1d226b7692547e3bb67800e934d96dcd08c7b16f7de9f2ededf391c52d61d634972fac4a266c5d7c7eeae97037769dfbe782743f978e38bce1ed7f99925830b27c2df96af4be19bfbc20a7782af277b33db9a4cbed975d1b5d420f9ad106389d057536108cc97a2b3013dcab8a4b359498f55d881fab4eb02abcdad8c661648a1d42841489e38b27c7cf3bdf187c5b7a502e9dfcc7354cdcd4aab9db26da9e0159f119020c6012efe076c3d8ba1d68f1295b021fc26674cf548b8223c6974ec0d3d2a9b875652c797d337139a79b7e31867f5d7f70414f147b83f5332ae2000ea5a41c7aa2e926bfcf6f93daf5b214cc5f3d5e411909288fe281480385c602e4dd3bc180879d376a3795f74f24d3d0230b65a333caa33d814abaa951bb2b9bca6998133e6b0819b79dbe17ade6a3fe4361c873f4eba250421806afb1a1b678585da2a621507a4f8e8a26dd1290585530e7fa413d4de440d08f925d0650985f59b80569de85c6673dab90a28ed05fe7ad981d6a2b1d112958384db0ed82db39f5bed0d844182ad03fb347abb77eaa2c200127dc52b4c3bf16374571b32b7b11cb08000f0c750774c4d682eb7851d8fd061aa39240df1b3d657915cca953b6128f870d48ee196010e8d197853705ca7c265a6ed730bcaa75f6f5f4764eda1fb60417a87e069bc13c9fb4963ed433b6d6732729a198428de94af17bb6ceda626cff684619d225c83d038db142071855e6917a82aadeef6c0dd1299c4b701c95c148868e6a9c1787e8fe96a5f01bf524569755d64f58593b5b3a3be1012673d5d4f1355928c86ba365e021d309e1c329ccca39d3474f86f510f41a88833d01ccb772535370d381bc2ff748808b91dfce5568216964d7c888b455314d55cff0a6847ecd445780977a8da84311cdf86410d7118833106fd250d7c21d22e13e0faf6c985e0a82d110de736b36eecd9cb5932e4f84bcdbeca3c222d216d62dcc8e8a76028b40c41f1a49466d8945c146e4994aab74d485589968203ba5ac604ba86a548968de73511447d24dc621c39ecb358a0632a5a5354be89e013a7e6165aec1c83074402badf8557dd9b1c54460dc3353964a7a55dc48aa97919f0fe518ae5716ba64244b20340be57b14aac5f30b8ac747b7d40deadd569c54729bd91afe05230c4b7240f2317ffb2aa9dfcc06e888a2343e939a41d18433486179d68fa7d60e99f5fb53cedcbe6f589a01c7b800d1ffc2d806873b86cf3d6ab1f1e246cd7b98cef044a7dfefd240521348fb4c63eef9f63741394332e7cca5aee2d36faedc7924b42e6460ea11df61e8fa35719664d044829f37c0b551af030d93e52e2504fce654ee8b51b31b0fde62b954fe1c66280e1fe57bd13033a17ebb3a2344221e9f098c5d28ad837997d3835163def5c48a65a135213814d35e198337e4ff09dcf0920631b21a4cc0ad749425e6b33eabd7e2e406810ac925cae6ef8e7ea826eeb2ea9383687f4c598369291436eae31a7d61194b54f7daaa02eb7f8ae9a012c19eeef035ea99bc09e650eab1601cd1d4885a25ed0a83802acaeca6509ea66955881a8a4875c00a1e87b109b370eed58e67892ca0ca433aea9f98e4e581d44dd21a76514292aeb37fbdd410b20de76b2402ee953f9cf10b3b0c7c43147f6f2248e03f4f601994f698c7ee88a8c4a6897ba6a2f7fb7deb660b15e9fa7c27374e5dd733a7f372c98cd558f7939925c4ec8a6d1e5fb9c643ea7770311bc8794594a0d4f5427776034bcddbe49079228764f930174c9cbd0afe5b3ba4f6749f638e525cd86034063206984e84f840d49a92381c855ed22e65ec6f92b44ab1e2754db4be5333a8259b540f93442cb0d55331719a37bf28ec01e76c953905896fdf453793e64f9cac794facf7d91d3319b4d5acc7c194957b36724a1b20cf5c171edeaa04fc9a519b02e8fdf48cb1eac16ad9bcfbc284d024be6a91a016b0eedc1f35fc38dbad77c10e5f1055a433bae88d6f1529d24a5f3d70055fc4207ff9dd0bfc8e204e60d631ce70f665a64c0f1b57e7c47d2ec2e9a1eb1929e139585f387c7c98159c9e5bca5aa9c553afebb22428193e10bf3a2f2ef988ca401af985dfe33085496d62f799a6262ac9837a0704ed348e971c468bcaa8fb18638ad773d8d163de2de445a10d971ccdcd24af3be625d86ea6ef77a7f4cb93a5ab4c18ed6f09af9f1e6173da33d170ec3df57dafa00edb75c2de38af7955def58e4e8e5004f761c07b2684e7d66f7b7f30188a796855a3df9d352b60c4c15c9db67b10f2322381d64ede0356bfb7f72fbeaf56b61f55cab68ce8f32b5c5438a3e4e40b2092e8499ca79f55ed5f7107fe0ad92af7c9cf29b35d5217026fabb851fbc53f2d5afb5f0e041a0834e8e989eba0bed1d006bed074d8463b7b69b1e94be30c06eaa584bd7fdef77738a9bc09a0daeafcd94e0dfad411324d68aef535396e38956d96720a33a471f1dcdde27936ae60dcf76d3b073373eeacfff894e132971ca7e976272624bdd67c5020b131c2f6ec23ac1a624d0a8125efb38c639232a7b790c6733473bf924ee2ea7181a0fcad3ed54ea25b941cad6e2b3a2e2e48f12d59bde6f544afb06b0555beb2c523baea1ec7b0d769f0a1d7c7b341e2c4cab724368d19dcf6a800b80d6931a2cb699b12becbe58cd46bae5b9db021bc9c1789e40951492b5d0a8909b08128c6b053dbe81194e083c459e3c466b841ef36ddad2710528ad70ef6cda99ceeb37baf48a03b190858d230a826cf98bf736b6b23a51c601ae8fee568d5617297c67e42bfddc8a4f6d8458f41a94263d7abe7145db9b78bc9d8f883fa33bfceaa0e76fe158aed91e37dfb05972415fec12f4cd3324d671e5aa9f369b93781d4b4dece799b46e8e32bc3415dfb934380c01e4b49db22fc5f4b6c18870a52a71f71ba0e3638e5e29379c4fe8c62946edc7e11e3fa4be10796b4b531d2e0dd7a0065b4d0444912749750c2c439c336cca1911057addd8735b192a0823b481e862d68c0e90f9297dbc362733fb5555ee02fa56dfd467104e73b9c3aef2c638a1fcf77f3f33d88558f51b90147f6c2cd5742600a7e95a5d22a766199d7f594d50a594e8ea16ab61dc5b189cad07aee93f2c50da384c84d0f2b4c0b3a8c6406e704d2ef6f3b628ae24473262a3eb99be5ce649df41ab6e6a4b1d3d589b09f1be9389851371cff125882e283839812375785c6c119aa2f5011501cbf3e795a039b4e2e23ba08d6ced2fc38ee6168d3de917dbd401e90b7b58e52efcdd1480ecdda9acac979ca44eaa60df938896a036b1b94e48810af336f972e78010046f8c0170660a94bf46d30ea51d49e21e0391654bc17006e59b176e02f1c80c6e9ea5e811d3901b1c19960d473695dad02df35c93475d0f5247b424a4f7c89e5b7b364f79dd31a26efae331e43cc7a4e96734910f84b0996124c2ea5af4d38be45e7b73dd2bcf112cf92409ff0e2273903d8977c9ccdab31536c11da4442cb66b1887b96916bf6b06eee636fcde731981ee8125274b4f4abfb52fc6efba5bc41774932a5a65f8d54a47e82ceb656b4595e1a82e04ff0ea306deaac4968e56d5a929edfe0f4648a4cc8f2cf8b2a5875916f1170d333fda19f153c7bdb431721dd56c1b940041573ce5150958e2349b8135089a8003e7266a09e17fea231d7c2211d64471ada3ef2ff1eb4ce5d2901e60c15de2cd605d79ff61f26aa97f8bc8e919ba960983970f5ced7f5085fc34adfd224e58da211dd474cfb9cbc6d33cec576340d21dce8b62fef3b5d6124edc93188721a57c3d41be50e113b8f4ab50871ac117750b3215e0fd9ea6b6ea33d00000ce8192e73ef63cd58c0ad2986418382b9744be71d9a058e8440f603edadb6c60b1c16d76bc646d9f3f6efe34a9b6a2210c472722221fcb8e7d983a87bc0b4a704484a0699e8065"}) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r14, &(0x7f0000001900)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001800)={0xc0, r2, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x14, 0x7, '/usr/sbin/cupsd\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6gretap0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'vlan1\x00'}, @NLBL_UNLABEL_A_SECCTX={0x2e, 0x7, 'system_u:object_r:netlabel_mgmt_exec_t:s0\x00'}]}, 0xc0}, 0x1, 0x0, 0x0, 0x15115d726696dd9}, 0x20040040) clock_gettime(0x0, &(0x7f0000002dc0)={0x0, 0x0}) recvmmsg(r10, &(0x7f0000002d40)=[{{&(0x7f0000001940)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000001b00)=[{&(0x7f00000019c0)}, {&(0x7f0000001a00)=""/244, 0xf4}], 0x2, &(0x7f0000001b40)=""/4096, 0x1000}, 0x8001}, {{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f0000002b40)=""/252, 0xfc}, {&(0x7f0000002c40)=""/159, 0x9f}], 0x2}, 0x3bf06c06}], 0x2, 0x1, &(0x7f0000002e00)={r15, r16+60000000}) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(0xffffffffffffffff, 0x80045700, &(0x7f0000002e40)) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000002e80)={0x0, 0x0, "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", "38ac15578bd9cde0b28a0b956d0a3012a041972145c39fa79e38298ebd869dfdf2d0ef302b0638064213df1085da55bd39ea2813472b2b641611e6b3b66bde4bc174fd57f1bf5dbb2398afd2791d8b11609d17f25795c92c0b572ca57041917b5ef635b7770965ed10d57bd28ec536d9f887056f91469bb7e34573b85aa120d49fd82c0ba6f8dabae4e517e4459ff61f5e1f250f8d0090c60c76d305519accb05ab954a203644058f2d566721c1ff00aff4c760fe8fad65877015cfe77e78e501b3d49f03db61586ea8927ce0e4f0450cd6143140c984895fe90d49e12b02940659dab6f20c118ad684d690ce82205b243ea2fda1a06610585293141b4864a0db05a79e7f65878784ac7c6884094ef4d390088fd69722dbbe78f242e35507aa16d2bcbd7fa7c6b725fccec691053022d9421a0af28a99ba698d4aec3bf29f34b824931757a40f0dab0144161839a362ab0579261686d0448864a078559d61bab9d3bbcb870e06873d801da2b8662e8f2270a80d250fde5d90d7bb64b53f980173d1ca038c65d75b4e3e4bc5877f8388ff59fb7be3e01faf27866ff16c3e4a66417f916337e57d51a2397e42891e665addca205e58da7537dec71e3d733d58a408547178ea017e384913554f605ff30b1d9f19685fbdde670cce9e165dd8f291d807b57adf58f0ba4dc3500d5fdb399031eb2fd61cb201bf4ac72925348f9108fab43a82729a6c8f049663cec2a9edd045f07a5a490653594adee27cd92c175b9093ae90a62b79b3ff9d07f77458183722e89cecb2304c9f242b69f5594c6b97dbef9d101565f1e6ce9b6711a3fd2e7456ddf9e3735bbda0d704021d11a2d5a6ed7c6af1d3b364eb6d391e0759089e8bbed345c027c0f8707ab028f97b22460dac2173aacd9880328edec8b3b26a8b7b902662fe864f1c18bc6ca9772c35644f903f3f6a87d9cbd1d8a283979334ff607022eec6ec84784e1724f3c54692262c4a311597deef39564536844729d6aae83c78ab7a8d53bcec6c904eeaf9725d4d08905fd3c7dd698cb56e4cd2705d3af873ca58be5ae8655181bb03b5270ca63f4bd725500c50c790dc913e4ae73380310db22539021ffff40f1a664b3d3b9eff841a8f7e25ba5ec201dd4bc361d9712431b4c4ef5a2aa4d99cfce6e91276fc1e90fd9f8ef8d3bb13140acc387779978fc68edd3ec08b765a4951bf725a18ae098a0e6c6948fad3324d537c861660a7a936e60c4189068f13545f7c015c50b2b56e6b90c577fe782e7d3976ba0eab452f4fb63c66256742f9bfc9baf4b651af4390334dca92854cb71a0082b1a0df981f45195545f1682e5446892ae924f4ffb9342bfe75c4f30ba5ce34c7bc3b7521489ce24e4aa7ad4cda2df09b4986b1d82ec9f68c37d054af0b2ab865c66a7cfb5c96f40c33b3e78c8113155fa910cac38c68153d9093d84a178afffd8cc39d5774097c358e2a81989667fadea1884fe788957f2b1f3a704849076469c6ab3046ac9ead82ef3c04216b809ff3a99c546b492bf73fa4485ae4f2acfd0a36b44c172e09b0c3ac310a8305ea4d3000b818829243f1015fd93d1a8ae0ad10722c47e8e3f9f458b57fac542e012fd045b23dcc483cd586b26d02ba8ea06c46e0697497e59dfb584305c48dac59e73edff66a33211eecd641dc274e018526db6ef1d4d5f6118a16b116402613cb1c1d94648676858ba00b390956438b8d648083e1c380ae9c89fc1636cd638665e72e32ee8182cd7a008d0be337dfcba8f6b45db4123d78552ce50276fc6d6b77c43f81fbcecc8b9bc66e941d8fb9653396ace2ee102b33af56ec2a151c16513c8ec5442ef9b9a1a52f04046d63d7ddccec41f8882338140130e9b862f76cb4d9464f6349087d5f3cee715abc9580d6c9cd7273f6d75cef1384a58a8cadac66ada0a221335a8b63053f00c00cf89b6f971888274448598044693a136fd92119a556f85dbdbb477d0e79627e7fce6e55fb5cf3321f3351fe0d01c4e0dd11ec577b97456967559328d33d7a5116c0e7a1b7261fb6599dfa09bfec2ba6dd4271876334a935779fde50048df36fbbf982737747a234051c3fad7b97f1944f8879a7eaf965ece4a488ef1a2d5f6414aefbe0cfeca13cee33b0d283a676b26326219f9553fb6abf6355cdab92f78787b3a3876bfa85e05193de0194f11c5ffc4bd40fee6e7fd1e7ddc95f5fadcca11d20c1e485f44b00c940425683e379abb1ba3e05de6835c8ba5041f20a8d78ca1d1202877d4f1cb9e034551443492235424916a3fc1976933eba53b50441153952c6c537669b2d65be9ace94df4abd3b51959ef35a75ca00672bc0eeff7f786483b812287e0f1d938e0467d61a81589e72a129fef5ff069f968a8c8df53cb60d3bc204894475cdf9b57e839cd996e9bb5b99c6c1eee726d7cedc303e0ac14c04d3e7cd622483a6c57d6083c8445d43631c001783a3478d6461c1546c82f24a5ea70a072a0431e9cf517c8a16ea72705528925b45c7fecca7972154cfcf69f842d9b137a6c670c2ed3f85597757c2540dc7bdd77ea3799eea66d82969b1a02a15b64fd751647ee26195688c55d95bb4037e70a727dbb43729824c1dbc6710ff5cd39185d6fc82c5f9eae7d8972eef9fefb68a8d7a5bacc11878accfe0dab1dd4fb4fbae5a3aa90c54a359fe031be06b3a557927f1b63bef5c6f783c73b3d34f2a9f29736bef9c6e42339f3fd22fe937eb6bf07cfb7ecd72569bfb53a4b49bec15340377f3cc7862fd66e36990129ac742aad828b239e6a7015430d188cbea66e6b3e7096dda770e6b10185c84a734d4bbddf4f162b92cd16480b4dd8241a6dbc3318a6612e09689ac97c3bf517e47d32770835182b1599b4114e4a56d5464c397160044026be7a51645912b04bbfb00c5955b38aadb6fa63a8d1dd55df55b320ff74a314eb645ad93f696759501a34479ae2ff7b25aca6bd7161e57a68338bfc8b26a5177148cf1156d331ea162edd36282f5311b3ae7ed755d30a5843a166727a36a01e964e18d22bc56be64e1f711d98b990b9cb8ba7ae4326cb94da0e891885b175dbdf6013ca89ca1dec0672d8f00d4cd2f41d4256518a285913a5f98b3450d6e77ea3a9b87529af10fa6ede6d12e6e5aa7640d330b91b7baa86de137d42a19601f9f4d675c659c22d5b0c38915b88c52ea53d394876596e0f75bf42f995863f02d7f71d6b06f68f88af813aa455e645b795c01e72620271451a49e34550ee9751ca5f87f5340cf98817f043e101f30ecc222e992cf63e275df25d5f7ffe4ad62bd6d2e8235139b00d619bb38ce4e000eddd49643ba1f555b0308974c01eb73b54a0bf43499bd53a0353218f38de86b0db02965d1248846b1f2de0b6b20ad13baabf78bfdd52d0ab6b80d568e243ed57ad8a562f3cbf3fad5c060150c1cc81952ea601bab1c105ccec292a964ec0ff9024f39722d3abee4ba6e35d1567a62925aa41bc49a1f4ff07b2cc029ef7869cf8ad8d3970ba3ffff6ad1ea58bb26962a1ca4e21d0997aefba5cdb45e5c6229934161c5cb2cb3bbddd896898412a3b4e20fbed9f031e6bb04c6b317452c1af548e0ebac4ce42d5c6acc9d4f83ffcf7951dc5f35c464e49d0390b4644f6576ffe71227468c9f80a78191215d697b24d4063a5aaca9e80ddf8c4f0a765aaaa3cde9aed5668a0fe6c5c8689327c0870bffc86611ce7b2fe051e314bc81507a63727ed5380b558f75aea1f90d9996ec8aa3e8af001c011ae77a2961c6aec91c20c6085c6577572238623ad004ad68888e1b8906c98efb1097c28a707ad2135985baf81115353a7772223ea46545cb593dae7a5a7953b6634297f2035bc113a4c8fd57c375ef03b20f6c80a5ff56d691071bc3d1744db5142e5056adcfb3e17a94b22f25a96d9c87fdca1ba4f36eacefd4cd40f0ff57d707d5506dbc990db713138882014182ff655a8940a60112bff8711853c0db2637c446c84d6a737b36651e2dc409405c68d0069c57bc0ea59c238f906ff6a174ade9051cca5751e4d67f33a126f09e2e41215d94c0739afea5f40317ce172e474d4a7f5fbe5360a6c215e5605b41c223a5a140177634c94ab5a5895cf79b7b208aa8d03547337801c7b70bcb90bad1f9bec07ed9fff8879c96c8f0de28b5b993f98c45d37310f9cfe626c69e2a66eb6fd2a52fed2d8d79122e2544f960421d0979c424c5d273e67e49594198ac2a83ef34eafb8949e4d1573c4451dcb7f3bb01ece8ef0a1338b345e4fadfec96ac86d74181081936271de4cffe42ae051985b508a8a84a88ee479cc388ffddcf802a718501c6ba0acbe26a542175b5e3262d161d1eb54b046d663af2286240a33ca46221ebc436232f54dc365cfb383a78eb5d65f08f024215605cf20e4d22d1d1cc7ca151a4d2e560e0e6078a2415a0e5da8e6027ec626b739ae02ab0e95c08a9b36b3b6a96da2c4ba2e4a6818f373caa7796989a3e53b82aa908a03ca5706f2ed207c00b5061d67880d18cfc8b11f5eb677bd1bca00b28fa6ee2374a96da8cfe2c4393e0521e4c0648ca56e2169ef44c25568fb30702f1da1ec98c9197b3cea84d6298ef72d6bed00d7d5ad3fd2a47ac4684fa1c5514fb1093aa736d0a5a391d7b1234154b19ea27e61bde631668f3603b71e7d9539299a0f9313e45a94abf1a5eb03c8adad6feee3402f601276a3848e3d0d4d799b8bd569d061f2d2edd89591530d82c8b45f0f3c44ccc09443612177a6986404c2ae3f2e33646cb1f1a5de3d677e563caaab745840d4cd6cb9e13c139938476b2028f7e6e97f92b12a626f268d9f3bab12d086c864ad8abd94d2cd3cffb3f7232d4449fb6d949b4bf53408d06e0669f36860fb6c0452c3fcd157700a38fe0c5182ab9285d6750b0adb2028409b89d3f51607ec3f914d64a6254e1ab45698e03400071acbd0ad03c4261d0c66fdb07dfda7d47bb24c46f15ee9f5f39d8c81b6924ba0a36e1d524569f8de519a5f55578f6450d82bd3a63643b231ff2a174ae79f8be3ae3f7dc32a4f130cfeec00e2717b6712002c31756834f198cdc23c8746150ad5ad56c8d5c3799d394bc2818cbc060e3ad9ebdc94a60f9d6c1446b0219b7369e7ea449a9479bf5ead2a8eebbfa8e69724201e7b32489791423e3a8ef209dae5388fee247964ca48b1e4e32cea54b30bcce71e8c2b96ee0f5dc441885e8a905b58a6ea788734aec7c89c135f1e6f3b86603996bfd3644fce9dc2bea6ce0e591889b7013c24379529ee7338d44e185a80d8b9a0e64e174c64e97ed1279e089a1bce419a423c5cf966afea50670d424ed6c4c1491539c6f738f1c585cf875362382a7e0c3d4f104864dbe213198d36bdb0b229b086ec1bf7885695c8577b205742f4f7c64f47"}) ioctl$BTRFS_IOC_INO_LOOKUP(r12, 0xd0009412, &(0x7f0000003e80)={r17}) 2.912587867s ago: executing program 2 (id=860): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x0) read$FUSE(r1, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff05490047bcf2c67fad3bb06d774e5a4fa7ca61e2afcbca238f96fd828c1bec5ca4078222155e00c8dcb447c2076bc2202f63893b2ca2fa84f3ad2b3606191d74107a1b8cbdb438648fae98f424d0d0fb4d7286747dd6eaf6e520ddcb7e15994145e219dc7355934c7ce2e8593147959edfc3f03cb4a4a2271dfcb032cefd39a1fcf0d4cd348f074eb249dd2f6d6ae26e5f4de85a5a23df8d26bf4be868993c3cd0d944abd81a8034bed1271dff3e9dda8c0e0b63933ea9eb58fd", @ANYRESHEX=r2, @ANYBLOB="a3994ee450e8f62b1eba444a867a33c7c8dba12e390615a6779e5424c55b38fb2a3e95d7f109212c2f12d88d9cce068f559b50d011159237be9f570a99a3b99dcd4af37f914459e181d5b8ca4547d9ef35f563bce6cda1eccf"], 0x0) (async) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff05490047bcf2c67fad3bb06d774e5a4fa7ca61e2afcbca238f96fd828c1bec5ca4078222155e00c8dcb447c2076bc2202f63893b2ca2fa84f3ad2b3606191d74107a1b8cbdb438648fae98f424d0d0fb4d7286747dd6eaf6e520ddcb7e15994145e219dc7355934c7ce2e8593147959edfc3f03cb4a4a2271dfcb032cefd39a1fcf0d4cd348f074eb249dd2f6d6ae26e5f4de85a5a23df8d26bf4be868993c3cd0d944abd81a8034bed1271dff3e9dda8c0e0b63933ea9eb58fd", @ANYRESHEX=r2, @ANYBLOB="a3994ee450e8f62b1eba444a867a33c7c8dba12e390615a6779e5424c55b38fb2a3e95d7f109212c2f12d88d9cce068f559b50d011159237be9f570a99a3b99dcd4af37f914459e181d5b8ca4547d9ef35f563bce6cda1eccf"], 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r0, 0x8982, &(0x7f0000000100)) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="0076b1d47cfcb7012ed203d0fe75b4032d99"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="0076b1d47cfcb7012ed203d0fe75b4032d99"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x2, 0x0) (async) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00000000fffffffffffffff0", 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000440)={0x100040000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r5], 0x1}, 0x58) (async) syz_clone3(&(0x7f0000000440)={0x100040000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, &(0x7f0000000180)=[r5], 0x1}, 0x58) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000003080300000700000000000000000008050003003a0000000c00048008000140ffffffff"], 0x28}, 0x1, 0x0, 0x0, 0x200c8}, 0x80) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 2.193338859s ago: executing program 3 (id=867): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080), 0x0, 0x240) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f00000004c0)=0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000080)='\x00'/10, 0xfcf5, 0x0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x10062, 0x0, 0x0) fadvise64(r0, 0x94, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x2010, r0, 0x2000) 2.057165456s ago: executing program 0 (id=868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000f4ff001d0000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30000000002c000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0xa0}}, 0x0) 1.992824445s ago: executing program 3 (id=869): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) fadvise64(r0, 0x96, 0x6e, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) fadvise64(r0, 0x96, 0x6e, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) 1.836246058s ago: executing program 2 (id=871): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0xc000, 0x0, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x0, 0x30, 0x7, {0x7, 0x9, "05b8f76bbc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000200)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) close(0x3) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000140)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0, 0x0) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r7 = open(&(0x7f00000000c0)='./file1\x00', 0x800, 0x81) ioctl$PPPIOCSFLAGS1(r7, 0x40047459, &(0x7f0000000180)=0x1002040) accept4(r5, &(0x7f0000000000)=@caif, &(0x7f0000000080)=0x80, 0x80800) sendfile(r0, r0, 0x0, 0x7ffff000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 1.784670708s ago: executing program 0 (id=872): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30002400002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 1.621415564s ago: executing program 3 (id=874): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x400000}, {}, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x2, 0x0, 0x1}) 1.556758312s ago: executing program 0 (id=875): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='projid_map\x00') write$FUSE_STATFS(r0, 0x0, 0x0) r1 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name, &(0x7f00000000c0)=0x10, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x8}}, './file0\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0x4, 0x0, &(0x7f0000000680)) (async) mount(&(0x7f0000000180)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='ceph\x00', 0x200004, 0x0) 1.507050306s ago: executing program 0 (id=876): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYBLOB="0800000d000111"], 0xfdef) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000003000001"], 0xfdef) 1.501885119s ago: executing program 4 (id=877): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa4}, 0x1, 0x0, 0x0, 0x851}, 0x4008000) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000a80100000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000"/74], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 1.448465396s ago: executing program 3 (id=878): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000380)={{@local, 0x2}, @hyper, 0x0, 0x3, 0x7fff, 0xffffffffffffffff, 0x40000000, 0x6, 0x6}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@local, 0xe43f}, @host, 0x4, 0x0, 0x5c, 0x4, 0xee, 0x80000000}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, 0x0, 0x0) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x4000011, 0x0) 1.376591386s ago: executing program 4 (id=879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x26004801}, 0xc854) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x1ff, 0x1, 0x0, 0x2000, &(0x7f0000ff3000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x0, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) lseek(r3, 0xf9ff100000000000, 0x3) ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f0000002000/0x4000)=nil) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2008040) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$HIDIOCINITREPORT(r3, 0x4805, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="0f07b8010000000f01d90f23fec7442400166f0000c744240221300000c7442406000000000f011424410f01c40f2015c46359487f6f0936660f3881660066baf80cb804723581ef66bafc0cb80b140000ef470f30", 0x55}], 0x1, 0x6c, 0x0, 0x0) syz_clone(0x20008000, &(0x7f00000013c0)="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", 0x1000, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)="d6bf92840e53bb1fca5a9f3ce8c1fea7b3c581b8316b6d35e27df1e87ab0c9c4b9c89c4e1a04") ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.325211887s ago: executing program 3 (id=880): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000f5ff001d0000000900010073797a30000000000900020073797a320000000020000000080a05000000000000000000020000000900010073797a30000000002c000000080a01010000000000000000020000000900020073797a32000000000900010073797a3000"], 0xa0}}, 0x0) 1.224618299s ago: executing program 0 (id=881): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) ioctl$UFFDIO_WAKE(r2, 0x8010aa02, &(0x7f0000000040)={&(0x7f00009cb000/0x1000)=nil, 0x1000}) 1.198348551s ago: executing program 3 (id=882): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4000004, 0x32, 0xffffffffffffffff, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000400)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xffc, 0x3a, '\x94l\\\xec\xd1\xcb\x9a}\x89\x15<\xd6\xfa\xe4[\xe4\xb6}\xe6\xd7\xbf\x04\xab7\x1f\xde\xb5\x83>\fG\\x00A\x8a\x88\xd5\b\x0f\x05\xd7,\xaf6\xff;\xe5\x9b\\\ar\xfc\a\x9eT\x97\x85\xa6s\xa4t\x83 nvC\xe9N\x83\xc9U\x9b<(\xb2\xa2O\x8e\xa3\xb6\x8e\xa8\xbf\xe9\r\x9b\xd6\r\xc6\xde\xca-\x8c\xec \x87Y\xb0\x00W\t\xc6\xe67e\x9d_2Y\xa4\xe5F\xd7\xdf\x9c\x8bJ\xddgz\xcb7\x92\x13:\t.\xbb\x002\xb7\x0f\xcbKy\xccsE_\x05\x98KR/\x94\xa1\x8c\"\x87RU\xa3W\xfbx?\v\xd8\xfd;\vc\x85\x9c\x04XN\x17\x1e\x85\xd2}A\xa9\xfb\xa7L\"\xbb2\x9d\xcf\xe9\xad\xc7\xa6q\x92{\xc7\x91\xc8\xdf\t\x99R\ai\x99l\xd8\x05ug\xabf{\x9d\x1b\xe7\xb6J;X=Y:M\xc1z,\xd1\xc1\xbf=\x99y\xa7KDwV@Q\xfa\xb2Q!f\"J\x1c\xdcn\x86\x87~c\xa8[\xc8\x015$\x89e\xd1\"\x86JC\x8d\x14', 0x3a, '/ded\x14bus+usb/00#/00#\x00', 0x3a, './file0'}, 0x145) syz_usb_connect(0x3, 0x3da, &(0x7f0000000600)={{0x12, 0x1, 0x250, 0x9e, 0x77, 0x53, 0xff, 0x4e6, 0x7, 0x1fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c8, 0x3, 0x5, 0xab, 0x60, 0x2, [{{0x9, 0x4, 0x16, 0xe0, 0x1, 0x34, 0x8e, 0x33, 0x9, [@hid_hid={0x9, 0x21, 0x1000, 0xb, 0x1, {0x22, 0x4d4}}], [{{0x9, 0x5, 0x6, 0x0, 0x8, 0xd, 0xc0, 0xd1, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x8}, @generic={0x8f, 0x11, "e3031f613eca245d21ad8822d70f3e8d21013c8839f4abed0981d48a9e74e7cd7f07913c505681faf9a3180a1810c29eef46eaec3b2f20b52a4b0a2483b225f9e05056acc63ad556fd6cd0f50e897b215d2d08f325f76abd7d8252185922d8dbe37b2ca17bb49adda8feb312717beeea52f11db71624d90896934d36864aaa247ff35f9552cabb9267e162e0f2"}]}}]}}, {{0x9, 0x4, 0x77, 0x3, 0x1, 0x19, 0x98, 0x92, 0x1d, [], [{{0x9, 0x5, 0x0, 0x0, 0x8, 0x9, 0x6, 0x5, [@generic={0x9, 0x11, "6aee262f7025a4"}, @generic={0xe7, 0x22, "55d5a2021be8097e602bfd7daa0c5fe327e91555ff448f2ce1ece1a2fb69559ffda4daed78c629f0cecd0db27693e2da6cb148f7535a74de95aec0cf4b59c624d120343411b867650463c682b0cb827b790ccb3fb65ce72c8d9018b8eeac2b3b58938be992460d3e3523fec1fbe709c178a177e8efba6b79792f28c64188bf8faf0f91ffe6e8c47e4f023f0f73afc1bb17b2a0a4b14425f543e5406beed54d2c352b2467fee641aa944cea97272439912c90b87b80dd9077eb1e7aeb140d9db564406ce156beda7c1d21034bd7fcbbd092b1027a77e7d57b844249f87e92b0369a4bb5bb8e"}]}}]}}, {{0x9, 0x4, 0xc6, 0x0, 0xc, 0xba, 0x31, 0xa3, 0xf8, [@hid_hid={0x9, 0x21, 0x2b22, 0x1, 0x1, {0x22, 0x23e}}, @uac_as={[@format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x8, 0x6d6, 0x2, "1bac407c62"}, @as_header={0x7, 0x24, 0x1, 0x8, 0xf7, 0x1}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x7, 0xb, 0x6, "c8"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xfa, 0x1, 0xf, 0x8, "0db193", "4f248e"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x16, 0x2, 0x5, 0x5, "ce5c3347277f"}]}], [{{0x9, 0x5, 0x4, 0x0, 0x40, 0x9, 0x7, 0x59, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x7f}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x2, 0x2, 0x4e, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xa8, 0x9}]}}, {{0x9, 0x5, 0xf, 0x0, 0x20, 0x80, 0xdf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x1}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xc8, 0x16, 0x14}}, {{0x9, 0x5, 0x4, 0x0, 0x410, 0x2, 0xfc, 0x0, [@generic={0x61, 0x6, "e31fe94e66e0f68a2a529e6fabbfe63e2f0c40e46e74f99a8f2c7ea1eda424042105ced28923fb66d2f3b34819281d797460ebd1167b469edb7bdc7fd27a8463b21861837f542d2747458dbb8d24ccfbbe3fcb7d0b7e09e69991b0595869f7"}]}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x0, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xca40}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0x5}]}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xc6, 0x2, 0x68}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x7, 0x7f, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x45, 0xfff7}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x1}]}}, {{0x9, 0x5, 0x2, 0x1, 0x20, 0xd, 0x9, 0x6, [@generic={0x7d, 0x24, "91d52d146f9e325c35581f66b22ff983a9bc2c592a9f6a89d282b6d33a5451ac3c71cd4f220e72351a0ce2e8483961e1f84c6619e1b930ab3b56c83eb684511b9def085b59226e5f6e602b0ca3e23452c68910806a7be977b74dac46751b5f4612f27001a31ab46f8a829c0f77f719ebe33b3206d32b446e57df88"}, @generic={0x36, 0x23, "fc93c5e50400c9c6ee867db64040953611b005005862bfb19b532de76be42a8c2328e790abcb863f7879d807013938062f35f1d8"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x400, 0x1, 0x0, 0xfe}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0xff, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x8000}]}}, {{0x9, 0x5, 0x2, 0x3, 0x200, 0x8, 0xff}}]}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x310, 0x4, 0xb0, 0xa1, 0x10, 0x4}, 0x5, &(0x7f00000001c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x40a}}, {0x4a, &(0x7f0000000280)=@string={0x4a, 0x3, "589368d34a4b6d05087e643bf7a78a1c1782ff7704d6c40304334fab2b1932e68c737c8a37bebf8b315372dc48a8ad1f58634bdb05f08f3986d870b8388056ef63a23cbcebebf769"}}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x145c99, 0x0) r1 = dup2(r0, r0) ioctl$KVM_RUN(r1, 0xae80, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101097, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x9800) openat(r2, &(0x7f0000000140)='./file0\x00', 0x800, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2340, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r6) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r6, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$sock_int(r7, 0x1, 0x2c, &(0x7f0000000080)=0x3, 0x4) umount2(&(0x7f00000003c0)='./file0\x00', 0x0) userfaultfd(0x801) 963.240451ms ago: executing program 4 (id=883): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000080)={0x4}, 0x8) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x2005c080) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x1, 0x7, 0x5, 0xa326, 0x1, 0x1ff]}, &(0x7f0000000100)=0x10) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) sendmsg$inet(r3, &(0x7f0000000340)={0x0, 0x7ffcb000, &(0x7f0000000300)=[{&(0x7f00000000c0)='6', 0x18000}], 0x8}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r2, 0x2000) 836.592297ms ago: executing program 4 (id=884): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30004000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 764.537442ms ago: executing program 4 (id=885): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000980)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc02000000000000000001a8000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fe8000000000000000000000000000007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) 643.26665ms ago: executing program 4 (id=886): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x64342, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xc5, 0xaa, 0x6d, 0x8, 0xccd, 0x38, 0x9903, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x84, 0xdc, 0x6a}}]}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r2 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80800) connect$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 0s ago: executing program 0 (id=887): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000240), 0x140, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0xa, 0x0, 0x0, 0x0, 0x180, 0x0, 0x0, {}, {}, {0x0, 0x0, 0x1000000}, {}, 0x0, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4, 0x80, 0x0, 0x0, 0x2, 0x0, 0x1}) kernel console output (not intermixed with test programs): mode [ 90.996023][ T5868] hsr_slave_1: entered promiscuous mode [ 91.002897][ T5868] debugfs: 'hsr0' already exists in 'hsr' [ 91.008720][ T5868] Cannot create hsr debugfs directory [ 91.079218][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.086725][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.112796][ T5869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.125420][ T5869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.132542][ T5869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.158885][ T5869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.188139][ T5867] hsr_slave_0: entered promiscuous mode [ 91.194630][ T5867] hsr_slave_1: entered promiscuous mode [ 91.200996][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 91.206760][ T5867] Cannot create hsr debugfs directory [ 91.361504][ T5869] hsr_slave_0: entered promiscuous mode [ 91.368062][ T5869] hsr_slave_1: entered promiscuous mode [ 91.374553][ T5869] debugfs: 'hsr0' already exists in 'hsr' [ 91.380301][ T5869] Cannot create hsr debugfs directory [ 91.734212][ T5866] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.748053][ T5866] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.774203][ T5866] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.801114][ T5866] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.861673][ T5868] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.878450][ T5868] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.900178][ T5868] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.924850][ T5868] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.986128][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.013786][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.047108][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.059390][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.154728][ T5869] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.172669][ T5869] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.185812][ T5869] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.211180][ T5869] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.281963][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.334589][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.350098][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.357458][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.383997][ T5868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.396561][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.403702][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.460606][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.494283][ T5868] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.529725][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.536974][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.547739][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.554911][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.578782][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.611675][ T5869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.634543][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.641758][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.678621][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.685963][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.736157][ T5869] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.800507][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.807884][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.830465][ T3510] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.837632][ T3510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.965216][ T5187] Bluetooth: hci3: command tx timeout [ 92.970820][ T5187] Bluetooth: hci2: command tx timeout [ 92.971524][ T5876] Bluetooth: hci1: command tx timeout [ 93.041055][ T51] Bluetooth: hci0: command tx timeout [ 93.206586][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.358382][ T5866] veth0_vlan: entered promiscuous mode [ 93.416641][ T5866] veth1_vlan: entered promiscuous mode [ 93.496174][ T5868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.539813][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.570327][ T5866] veth0_macvtap: entered promiscuous mode [ 93.591261][ T5866] veth1_macvtap: entered promiscuous mode [ 93.620419][ T5869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.644194][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.662541][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.705853][ T1096] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.717136][ T1115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.746544][ T1115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.755695][ T1115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.773233][ T5868] veth0_vlan: entered promiscuous mode [ 93.823033][ T5867] veth0_vlan: entered promiscuous mode [ 93.829651][ T5868] veth1_vlan: entered promiscuous mode [ 93.844868][ T5869] veth0_vlan: entered promiscuous mode [ 93.864944][ T5867] veth1_vlan: entered promiscuous mode [ 93.879497][ T5869] veth1_vlan: entered promiscuous mode [ 93.983904][ T5867] veth0_macvtap: entered promiscuous mode [ 94.010249][ T5867] veth1_macvtap: entered promiscuous mode [ 94.022383][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.030427][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.037755][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.046004][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.059727][ T5868] veth0_macvtap: entered promiscuous mode [ 94.084224][ T5869] veth0_macvtap: entered promiscuous mode [ 94.116600][ T5869] veth1_macvtap: entered promiscuous mode [ 94.125652][ T5868] veth1_macvtap: entered promiscuous mode [ 94.132731][ T1096] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.142215][ T1096] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.161880][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.170997][ T1096] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.179794][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.194231][ T1096] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.221655][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.248399][ T5868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.259419][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.307002][ T1096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.328347][ T5866] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.361630][ T1096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.374260][ T1096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.411835][ T5869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.434065][ T5961] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.449630][ T1096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.473929][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.491849][ T1115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.500075][ T1115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.539715][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.549086][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.560570][ T5961] ======================================================= [ 94.560570][ T5961] WARNING: The mand mount option has been deprecated and [ 94.560570][ T5961] and is ignored by this kernel. Remove the mand [ 94.560570][ T5961] option from the mount to silence this warning. [ 94.560570][ T5961] ======================================================= [ 94.606748][ T5961] XFS (rnullb0): Invalid superblock magic number [ 94.610601][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.755113][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.774574][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.871558][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.895772][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.918253][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.947577][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.000394][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.025215][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.041324][ T51] Bluetooth: hci2: command tx timeout [ 95.041821][ T5876] Bluetooth: hci3: command tx timeout [ 95.046777][ T51] Bluetooth: hci1: command tx timeout [ 95.091315][ T5971] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.123068][ T5876] Bluetooth: hci0: command tx timeout [ 95.184799][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.203716][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.216449][ T5975] syz.1.6 uses obsolete (PF_INET,SOCK_PACKET) [ 96.138049][ T5995] XFS (rnullb0): Invalid superblock magic number [ 96.241805][ T6004] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13'. [ 96.505911][ T6007] bad cache= option: none[()bvتr [ 96.505911][ T6007] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 96.505911][ T6007] [ 96.552710][ T6007] CIFS: VFS: bad cache= option: none[()bvتr [ 96.552710][ T6007] ٟ 9;^d!/7u\ݴMDҏeYo P50eB>KX/TJ*)J()ՀKf5&Lqq2WhWd0 [ 96.951396][ T5969] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.121189][ T5876] Bluetooth: hci1: command tx timeout [ 97.121238][ T5187] Bluetooth: hci2: command tx timeout [ 97.126842][ T5876] Bluetooth: hci3: command tx timeout [ 97.137806][ T5969] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.151494][ T983] cfg80211: failed to load regulatory.db [ 97.180772][ T5969] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 97.204290][ T5876] Bluetooth: hci0: command tx timeout [ 97.219656][ T5969] usb 1-1: config 1 has no interface number 1 [ 97.244134][ T5969] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 97.305032][ T5969] usb 1-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x6C, changing to 0xC [ 97.352092][ T5969] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xC has an invalid bInterval 0, changing to 10 [ 97.389283][ T5969] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0xC has invalid maxpacket 161, setting to 64 [ 97.446268][ T5969] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.486736][ T5969] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.506279][ T5969] usb 1-1: Product: syz [ 97.523390][ T5969] usb 1-1: Manufacturer: syz [ 97.528106][ T5969] usb 1-1: SerialNumber: syz [ 97.809107][ T6054] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 97.903942][ T6035] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 97.933954][ T6035] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 98.008470][ T6060] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 98.040053][ T5969] usb 1-1: USB disconnect, device number 2 [ 98.044870][ T6035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 98.054789][ T6061] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 98.086144][ T6035] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 98.206635][ T6035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 98.231964][ T6035] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 98.265024][ T5870] udevd[5870]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.314692][ T6035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 98.325055][ T6035] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 98.529916][ T6072] FAULT_INJECTION: forcing a failure. [ 98.529916][ T6072] name failslab, interval 1, probability 0, space 0, times 0 [ 98.546509][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.2.32 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 98.546539][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.546561][ T6072] Call Trace: [ 98.546570][ T6072] [ 98.546579][ T6072] dump_stack_lvl+0x189/0x250 [ 98.546624][ T6072] ? __pfx____ratelimit+0x10/0x10 [ 98.546657][ T6072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 98.546690][ T6072] ? __pfx__printk+0x10/0x10 [ 98.546724][ T6072] ? __pfx___might_resched+0x10/0x10 [ 98.546752][ T6072] ? fs_reclaim_acquire+0x7d/0x100 [ 98.546785][ T6072] should_fail_ex+0x414/0x560 [ 98.546820][ T6072] should_failslab+0xa8/0x100 [ 98.546846][ T6072] kmem_cache_alloc_noprof+0x73/0x3c0 [ 98.546868][ T6072] ? getname_kernel+0x5a/0x2f0 [ 98.546905][ T6072] getname_kernel+0x5a/0x2f0 [ 98.546940][ T6072] kern_path+0x1d/0x50 [ 98.546960][ T6072] lookup_bdev+0xc0/0x280 [ 98.546993][ T6072] ? __pfx_lookup_bdev+0x10/0x10 [ 98.547026][ T6072] ? get_tree_mtd+0x4db/0x730 [ 98.547060][ T6072] get_tree_bdev_flags+0xb5/0x4d0 [ 98.547087][ T6072] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 98.547114][ T6072] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 98.547154][ T6072] vfs_get_tree+0x8f/0x2b0 [ 98.547184][ T6072] do_new_mount+0x2a2/0x9e0 [ 98.547218][ T6072] ? ns_capable+0x8a/0xf0 [ 98.547245][ T6072] ? __pfx_do_new_mount+0x10/0x10 [ 98.547273][ T6072] ? path_mount+0x61c/0xfe0 [ 98.547299][ T6072] ? user_path_at+0x44/0x60 [ 98.547331][ T6072] __se_sys_mount+0x317/0x410 [ 98.547376][ T6072] ? __pfx___se_sys_mount+0x10/0x10 [ 98.547404][ T6072] ? rcu_is_watching+0x15/0xb0 [ 98.547455][ T6072] ? do_syscall_64+0xbe/0x3b0 [ 98.547478][ T6072] ? __x64_sys_mount+0x20/0xc0 [ 98.547510][ T6072] do_syscall_64+0xfa/0x3b0 [ 98.547534][ T6072] ? lockdep_hardirqs_on+0x9c/0x150 [ 98.547566][ T6072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.547587][ T6072] ? clear_bhb_loop+0x60/0xb0 [ 98.547614][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.547636][ T6072] RIP: 0033:0x7f484f58ebe9 [ 98.547667][ T6072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.547686][ T6072] RSP: 002b:00007f4850336038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.547709][ T6072] RAX: ffffffffffffffda RBX: 00007f484f7b5fa0 RCX: 00007f484f58ebe9 [ 98.547725][ T6072] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000000 [ 98.547740][ T6072] RBP: 00007f4850336090 R08: 0000000000000000 R09: 0000000000000000 [ 98.547754][ T6072] R10: 000000000000c400 R11: 0000000000000246 R12: 0000000000000002 [ 98.547767][ T6072] R13: 00007f484f7b6038 R14: 00007f484f7b5fa0 R15: 00007ffe07e453e8 [ 98.547801][ T6072] [ 98.547885][ T6072] /dev/rnullb0: Can't lookup blockdev [ 99.799499][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 99.846951][ T6109] exFAT-fs (rnullb0): invalid boot record signature [ 99.860811][ T6107] netlink: 28 bytes leftover after parsing attributes in process `syz.3.44'. [ 99.884175][ T6109] exFAT-fs (rnullb0): failed to read boot sector [ 99.890565][ T6109] exFAT-fs (rnullb0): failed to recognize exfat type [ 99.957875][ T6116] /dev/rnullb0: Can't open blockdev [ 99.959047][ T6115] /dev/rnullb0: Can't open blockdev [ 100.307037][ T6133] FAULT_INJECTION: forcing a failure. [ 100.307037][ T6133] name failslab, interval 1, probability 0, space 0, times 0 [ 100.347771][ T6133] CPU: 0 UID: 0 PID: 6133 Comm: syz.0.51 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 100.347804][ T6133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.347817][ T6133] Call Trace: [ 100.347826][ T6133] [ 100.347835][ T6133] dump_stack_lvl+0x189/0x250 [ 100.347873][ T6133] ? __pfx____ratelimit+0x10/0x10 [ 100.347906][ T6133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.347938][ T6133] ? __pfx__printk+0x10/0x10 [ 100.347974][ T6133] ? __pfx___might_resched+0x10/0x10 [ 100.347999][ T6133] ? fs_reclaim_acquire+0x7d/0x100 [ 100.348029][ T6133] should_fail_ex+0x414/0x560 [ 100.348065][ T6133] should_failslab+0xa8/0x100 [ 100.348092][ T6133] __kmalloc_noprof+0xcb/0x4f0 [ 100.348112][ T6133] ? security_sb_alloc+0x48/0x330 [ 100.348155][ T6133] security_sb_alloc+0x48/0x330 [ 100.348188][ T6133] alloc_super+0x20c/0x970 [ 100.348213][ T6133] ? __pfx_super_s_dev_test+0x10/0x10 [ 100.348238][ T6133] sget_fc+0x329/0xa40 [ 100.348261][ T6133] ? __pfx_super_s_dev_set+0x10/0x10 [ 100.348286][ T6133] get_tree_bdev_flags+0x203/0x4d0 [ 100.348313][ T6133] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 100.348340][ T6133] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 100.348380][ T6133] vfs_get_tree+0x8f/0x2b0 [ 100.348410][ T6133] do_new_mount+0x2a2/0x9e0 [ 100.348444][ T6133] ? ns_capable+0x8a/0xf0 [ 100.348469][ T6133] ? __pfx_do_new_mount+0x10/0x10 [ 100.348496][ T6133] ? path_mount+0x61c/0xfe0 [ 100.348522][ T6133] ? user_path_at+0x44/0x60 [ 100.348553][ T6133] __se_sys_mount+0x317/0x410 [ 100.348589][ T6133] ? __pfx___se_sys_mount+0x10/0x10 [ 100.348624][ T6133] ? do_syscall_64+0xbe/0x3b0 [ 100.348641][ T6133] ? __x64_sys_mount+0x20/0xc0 [ 100.348672][ T6133] do_syscall_64+0xfa/0x3b0 [ 100.348690][ T6133] ? lockdep_hardirqs_on+0x9c/0x150 [ 100.348722][ T6133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.348743][ T6133] ? clear_bhb_loop+0x60/0xb0 [ 100.348770][ T6133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.348790][ T6133] RIP: 0033:0x7fcc6a38ebe9 [ 100.348809][ T6133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.348827][ T6133] RSP: 002b:00007fcc6b19d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 100.348849][ T6133] RAX: ffffffffffffffda RBX: 00007fcc6a5b5fa0 RCX: 00007fcc6a38ebe9 [ 100.348865][ T6133] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000000 [ 100.348879][ T6133] RBP: 00007fcc6b19d090 R08: 0000000000000000 R09: 0000000000000000 [ 100.348894][ T6133] R10: 000000000000c400 R11: 0000000000000246 R12: 0000000000000002 [ 100.348907][ T6133] R13: 00007fcc6a5b6038 R14: 00007fcc6a5b5fa0 R15: 00007fffa8635c08 [ 100.348940][ T6133] [ 101.183457][ T6158] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 6158 comm: syz.2.61) [ 101.227786][ T30] audit: type=1800 audit(1754563056.594:2): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.61" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=8688 res=0 errno=0 [ 101.324404][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 101.356286][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 101.619749][ T6170] warning: `syz.2.64' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.881744][ T983] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.956000][ T6182] fuse: Unknown parameter '0x0000000000000004fd' [ 102.074966][ T983] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 102.086294][ T5936] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.109736][ T983] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 102.127048][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.146456][ T983] usb 1-1: config 0 descriptor?? [ 102.160288][ T983] pwc: Askey VC010 type 2 USB webcam detected. [ 102.282519][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.311191][ T5936] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.331141][ T5936] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 102.342497][ T5936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.355176][ T5936] usb 3-1: config 0 descriptor?? [ 102.420277][ T6174] lo speed is unknown, defaulting to 1000 [ 102.427047][ T6174] lo speed is unknown, defaulting to 1000 [ 102.437281][ T6174] lo speed is unknown, defaulting to 1000 [ 102.453343][ T6174] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.488967][ T6174] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 102.775157][ T6174] lo speed is unknown, defaulting to 1000 [ 102.823089][ T6174] lo speed is unknown, defaulting to 1000 [ 102.851925][ T6174] lo speed is unknown, defaulting to 1000 [ 102.879973][ T5936] stadia 0003:18D1:9400.0001: unknown main item tag 0x0 [ 102.887488][ T6174] lo speed is unknown, defaulting to 1000 [ 102.949563][ T5936] stadia 0003:18D1:9400.0001: unknown main item tag 0x0 [ 102.959733][ T5936] stadia 0003:18D1:9400.0001: unknown main item tag 0x0 [ 102.980856][ T5936] stadia 0003:18D1:9400.0001: unknown main item tag 0x0 [ 102.987916][ T5936] stadia 0003:18D1:9400.0001: unknown main item tag 0x0 [ 102.996308][ T6192] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 103.003256][ T6192] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 103.030844][ T6192] vhci_hcd vhci_hcd.0: Device attached [ 103.032554][ T5936] stadia 0003:18D1:9400.0001: hidraw0: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 103.061768][ T6179] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.114373][ T5936] stadia 0003:18D1:9400.0001: no inputs found [ 103.145861][ T5936] stadia 0003:18D1:9400.0001: force feedback init failed [ 103.206440][ T6204] vhci_hcd: connection closed [ 103.209053][ T13] vhci_hcd: stop threads [ 103.233484][ T13] vhci_hcd: release socket [ 103.239666][ T13] vhci_hcd: disconnect device [ 103.246705][ T983] pwc: send_video_command error -71 [ 103.266319][ T983] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 103.288129][ T983] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 103.294460][ T5969] usb 34-1: enqueue for inactive port 0 [ 103.329304][ T983] usb 1-1: USB disconnect, device number 3 [ 103.444880][ T5915] usb 3-1: USB disconnect, device number 2 [ 103.825159][ T5969] usb usb34-port1: attempt power cycle [ 103.924613][ T6219] /dev/rnullb0: Can't open blockdev [ 103.961152][ T6222] /dev/rnullb0: Can't open blockdev [ 103.995872][ T6222] nfs: Unknown parameter '/dev/rnullb0' [ 104.260310][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'. [ 104.297025][ T6235] netlink: 28 bytes leftover after parsing attributes in process `syz.0.76'. [ 104.342968][ T6240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 104.432207][ T5969] usb usb34-port1: unable to enumerate USB device [ 104.538413][ T6245] FAULT_INJECTION: forcing a failure. [ 104.538413][ T6245] name failslab, interval 1, probability 0, space 0, times 0 [ 104.627129][ T6245] CPU: 1 UID: 0 PID: 6245 Comm: syz.0.78 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 104.627160][ T6245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.627173][ T6245] Call Trace: [ 104.627182][ T6245] [ 104.627191][ T6245] dump_stack_lvl+0x189/0x250 [ 104.627228][ T6245] ? __pfx____ratelimit+0x10/0x10 [ 104.627261][ T6245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.627293][ T6245] ? __pfx__printk+0x10/0x10 [ 104.627335][ T6245] ? __pfx___might_resched+0x10/0x10 [ 104.627362][ T6245] ? fs_reclaim_acquire+0x7d/0x100 [ 104.627394][ T6245] should_fail_ex+0x414/0x560 [ 104.627428][ T6245] should_failslab+0xa8/0x100 [ 104.627463][ T6245] __kmalloc_noprof+0xcb/0x4f0 [ 104.627485][ T6245] ? __list_lru_init+0xba/0x5c0 [ 104.627519][ T6245] __list_lru_init+0xba/0x5c0 [ 104.627545][ T6245] ? __raw_spin_lock_init+0x45/0x100 [ 104.627586][ T6245] alloc_super+0x7cb/0x970 [ 104.627613][ T6245] ? __pfx_super_s_dev_test+0x10/0x10 [ 104.627639][ T6245] sget_fc+0x329/0xa40 [ 104.627665][ T6245] ? __pfx_super_s_dev_set+0x10/0x10 [ 104.627694][ T6245] get_tree_bdev_flags+0x203/0x4d0 [ 104.627722][ T6245] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 104.627749][ T6245] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 104.627789][ T6245] vfs_get_tree+0x8f/0x2b0 [ 104.627819][ T6245] do_new_mount+0x2a2/0x9e0 [ 104.627853][ T6245] ? ns_capable+0x8a/0xf0 [ 104.627880][ T6245] ? __pfx_do_new_mount+0x10/0x10 [ 104.627908][ T6245] ? path_mount+0x61c/0xfe0 [ 104.627934][ T6245] ? user_path_at+0x44/0x60 [ 104.627966][ T6245] __se_sys_mount+0x317/0x410 [ 104.628003][ T6245] ? __pfx___se_sys_mount+0x10/0x10 [ 104.628040][ T6245] ? do_syscall_64+0xbe/0x3b0 [ 104.628058][ T6245] ? __x64_sys_mount+0x20/0xc0 [ 104.628090][ T6245] do_syscall_64+0xfa/0x3b0 [ 104.628108][ T6245] ? lockdep_hardirqs_on+0x9c/0x150 [ 104.628139][ T6245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.628161][ T6245] ? clear_bhb_loop+0x60/0xb0 [ 104.628188][ T6245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.628208][ T6245] RIP: 0033:0x7fcc6a38ebe9 [ 104.628227][ T6245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.628245][ T6245] RSP: 002b:00007fcc6b19d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.628267][ T6245] RAX: ffffffffffffffda RBX: 00007fcc6a5b5fa0 RCX: 00007fcc6a38ebe9 [ 104.628283][ T6245] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000000 [ 104.628298][ T6245] RBP: 00007fcc6b19d090 R08: 0000000000000000 R09: 0000000000000000 [ 104.628311][ T6245] R10: 000000000000c400 R11: 0000000000000246 R12: 0000000000000002 [ 104.628323][ T6245] R13: 00007fcc6a5b6038 R14: 00007fcc6a5b5fa0 R15: 00007fffa8635c08 [ 104.628356][ T6245] [ 105.112084][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.83'. [ 105.539433][ T6285] omfs: Invalid superblock (0) [ 105.682744][ T6289] netlink: 'syz.0.90': attribute type 6 has an invalid length. [ 105.709931][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 105.745680][ T6292] netlink: 28 bytes leftover after parsing attributes in process `syz.1.91'. [ 105.909400][ T6300] FAULT_INJECTION: forcing a failure. [ 105.909400][ T6300] name failslab, interval 1, probability 0, space 0, times 0 [ 105.931492][ T983] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 105.933202][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.1.93 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 105.933237][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.933251][ T6300] Call Trace: [ 105.933262][ T6300] [ 105.933272][ T6300] dump_stack_lvl+0x189/0x250 [ 105.933315][ T6300] ? __pfx____ratelimit+0x10/0x10 [ 105.933362][ T6300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.933398][ T6300] ? __pfx__printk+0x10/0x10 [ 105.933439][ T6300] ? __pfx___might_resched+0x10/0x10 [ 105.933465][ T6300] ? fs_reclaim_acquire+0x7d/0x100 [ 105.933498][ T6300] should_fail_ex+0x414/0x560 [ 105.933536][ T6300] should_failslab+0xa8/0x100 [ 105.933566][ T6300] __kmalloc_noprof+0xcb/0x4f0 [ 105.933588][ T6300] ? __list_lru_init+0xba/0x5c0 [ 105.933625][ T6300] __list_lru_init+0xba/0x5c0 [ 105.933667][ T6300] alloc_super+0x819/0x970 [ 105.933696][ T6300] ? __pfx_super_s_dev_test+0x10/0x10 [ 105.933724][ T6300] sget_fc+0x329/0xa40 [ 105.933754][ T6300] ? __pfx_super_s_dev_set+0x10/0x10 [ 105.933785][ T6300] get_tree_bdev_flags+0x203/0x4d0 [ 105.933815][ T6300] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 105.933846][ T6300] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 105.933888][ T6300] vfs_get_tree+0x8f/0x2b0 [ 105.933922][ T6300] do_new_mount+0x2a2/0x9e0 [ 105.933959][ T6300] ? ns_capable+0x8a/0xf0 [ 105.933988][ T6300] ? __pfx_do_new_mount+0x10/0x10 [ 105.934020][ T6300] ? path_mount+0x61c/0xfe0 [ 105.934048][ T6300] ? user_path_at+0x44/0x60 [ 105.934084][ T6300] __se_sys_mount+0x317/0x410 [ 105.934125][ T6300] ? __pfx___se_sys_mount+0x10/0x10 [ 105.934166][ T6300] ? do_syscall_64+0xbe/0x3b0 [ 105.934185][ T6300] ? __x64_sys_mount+0x20/0xc0 [ 105.934221][ T6300] do_syscall_64+0xfa/0x3b0 [ 105.934240][ T6300] ? lockdep_hardirqs_on+0x9c/0x150 [ 105.934274][ T6300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.934297][ T6300] ? clear_bhb_loop+0x60/0xb0 [ 105.934339][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.934363][ T6300] RIP: 0033:0x7f676258ebe9 [ 105.934384][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.934403][ T6300] RSP: 002b:00007f67633a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 105.934429][ T6300] RAX: ffffffffffffffda RBX: 00007f67627b5fa0 RCX: 00007f676258ebe9 [ 105.934447][ T6300] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000000 [ 105.934464][ T6300] RBP: 00007f67633a2090 R08: 0000000000000000 R09: 0000000000000000 [ 105.934479][ T6300] R10: 000000000000c400 R11: 0000000000000246 R12: 0000000000000002 [ 105.934493][ T6300] R13: 00007f67627b6038 R14: 00007f67627b5fa0 R15: 00007ffe416c7438 [ 105.934530][ T6300] [ 106.605837][ T983] usb 4-1: config 0 has an invalid interface number: 227 but max is 0 [ 106.614282][ T983] usb 4-1: config 0 has no interface number 0 [ 106.620452][ T983] usb 4-1: config 0 interface 227 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 106.671535][ T983] usb 4-1: config 0 interface 227 altsetting 7 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 106.681640][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.705059][ T983] usb 4-1: config 0 interface 227 has no altsetting 0 [ 106.735955][ T983] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=58.dd [ 106.746426][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.773596][ T983] usb 4-1: Product: syz [ 106.777833][ T983] usb 4-1: Manufacturer: syz [ 106.788265][ T983] usb 4-1: SerialNumber: syz [ 106.798623][ T983] usb 4-1: config 0 descriptor?? [ 106.809550][ T6274] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.825991][ T6274] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 106.840835][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 106.856488][ T983] usbtouchscreen 4-1:0.227: probe with driver usbtouchscreen failed with error -71 [ 106.882106][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 106.898816][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.918561][ T10] usb 1-1: Product: syz [ 106.925737][ T10] usb 1-1: Manufacturer: syz [ 106.952112][ T10] usb 1-1: SerialNumber: syz [ 106.977032][ T10] usb 1-1: config 0 descriptor?? [ 106.993673][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 107.010000][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.104'. [ 107.019633][ T6329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.104'. [ 107.080916][ T983] usb 4-1: USB disconnect, device number 2 [ 107.310829][ T10] gspca_sonixj: reg_r err -71 [ 107.315741][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 107.367429][ T10] usb 1-1: USB disconnect, device number 4 [ 107.368658][ T6343] /dev/rnullb0: Can't open blockdev [ 107.582462][ T6348] /dev/rnullb0: Can't open blockdev [ 108.135591][ T6361] process 'syz.2.115' launched './file1' with NULL argv: empty string added [ 108.700381][ T6379] vxfs: WRONG superblock magic 00000000 at 1 [ 108.721139][ T6379] vxfs: WRONG superblock magic 00000000 at 8 [ 108.727280][ T6379] vxfs: can't find superblock. [ 109.088128][ T6396] FAULT_INJECTION: forcing a failure. [ 109.088128][ T6396] name failslab, interval 1, probability 0, space 0, times 0 [ 109.101346][ T6396] CPU: 1 UID: 0 PID: 6396 Comm: syz.1.130 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 109.101371][ T6396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.101381][ T6396] Call Trace: [ 109.101388][ T6396] [ 109.101395][ T6396] dump_stack_lvl+0x189/0x250 [ 109.101425][ T6396] ? __pfx____ratelimit+0x10/0x10 [ 109.101451][ T6396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.101476][ T6396] ? __pfx__printk+0x10/0x10 [ 109.101507][ T6396] ? __pfx___might_resched+0x10/0x10 [ 109.101527][ T6396] ? fs_reclaim_acquire+0x7d/0x100 [ 109.101552][ T6396] should_fail_ex+0x414/0x560 [ 109.101591][ T6396] should_failslab+0xa8/0x100 [ 109.101614][ T6396] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 109.101633][ T6396] ? __d_alloc+0x36/0x7a0 [ 109.101653][ T6396] __d_alloc+0x36/0x7a0 [ 109.101673][ T6396] d_alloc_pseudo+0x21/0xc0 [ 109.101690][ T6396] alloc_file_pseudo_noaccount+0xcd/0x2c0 [ 109.101723][ T6396] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 109.101765][ T6396] bdev_file_open_by_dev+0x181/0x240 [ 109.101792][ T6396] setup_bdev_super+0x5a/0x5b0 [ 109.101817][ T6396] get_tree_bdev_flags+0x366/0x4d0 [ 109.101841][ T6396] ? __pfx_cramfs_blkdev_fill_super+0x10/0x10 [ 109.101865][ T6396] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 109.101902][ T6396] vfs_get_tree+0x8f/0x2b0 [ 109.101932][ T6396] do_new_mount+0x2a2/0x9e0 [ 109.101975][ T6396] ? ns_capable+0x8a/0xf0 [ 109.102002][ T6396] ? __pfx_do_new_mount+0x10/0x10 [ 109.102029][ T6396] ? path_mount+0x61c/0xfe0 [ 109.102055][ T6396] ? user_path_at+0x44/0x60 [ 109.102088][ T6396] __se_sys_mount+0x317/0x410 [ 109.102125][ T6396] ? __pfx___se_sys_mount+0x10/0x10 [ 109.102161][ T6396] ? do_syscall_64+0xbe/0x3b0 [ 109.102178][ T6396] ? __x64_sys_mount+0x20/0xc0 [ 109.102208][ T6396] do_syscall_64+0xfa/0x3b0 [ 109.102226][ T6396] ? lockdep_hardirqs_on+0x9c/0x150 [ 109.102256][ T6396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.102276][ T6396] ? clear_bhb_loop+0x60/0xb0 [ 109.102303][ T6396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.102322][ T6396] RIP: 0033:0x7f676258ebe9 [ 109.102341][ T6396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.102359][ T6396] RSP: 002b:00007f67633a2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 109.102381][ T6396] RAX: ffffffffffffffda RBX: 00007f67627b5fa0 RCX: 00007f676258ebe9 [ 109.102396][ T6396] RDX: 0000200000000400 RSI: 0000200000000040 RDI: 0000200000000000 [ 109.102412][ T6396] RBP: 00007f67633a2090 R08: 0000000000000000 R09: 0000000000000000 [ 109.102425][ T6396] R10: 000000000000c400 R11: 0000000000000246 R12: 0000000000000002 [ 109.102438][ T6396] R13: 00007f67627b6038 R14: 00007f67627b5fa0 R15: 00007ffe416c7438 [ 109.102471][ T6396] [ 109.102483][ T6396] /dev/rnullb0: Can't open blockdev [ 110.203441][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 110.250899][ T6419] netlink: 28 bytes leftover after parsing attributes in process `syz.0.139'. [ 110.394559][ T6424] /dev/rnullb0: Can't open blockdev [ 111.401229][ T5935] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.409258][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 111.419450][ T6454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'. [ 111.488685][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.3.152'. [ 111.540772][ T5935] usb 1-1: device descriptor read/64, error -71 [ 111.581600][ T5936] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 111.742918][ T5936] usb 3-1: Using ep0 maxpacket: 8 [ 111.770827][ T5936] usb 3-1: config 1 has an invalid descriptor of length 33, skipping remainder of the config [ 111.785762][ T5936] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 111.795388][ T5935] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 111.810261][ T5936] usb 3-1: New USB device found, idVendor=05ac, idProduct=0273, bcdDevice= 0.40 [ 111.823959][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.840185][ T5936] usb 3-1: Product: syz [ 111.851891][ T5936] usb 3-1: Manufacturer: syz [ 111.856740][ T5936] usb 3-1: SerialNumber: syz [ 111.950835][ T5935] usb 1-1: device descriptor read/64, error -71 [ 112.007900][ T6477] netlink: 56 bytes leftover after parsing attributes in process `syz.3.160'. [ 112.072279][ T5935] usb usb1-port1: attempt power cycle [ 112.163742][ T5936] usb 3-1: USB disconnect, device number 3 [ 112.460777][ T5935] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 112.496561][ T5935] usb 1-1: device descriptor read/8, error -71 [ 112.760851][ T5935] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 112.806532][ T5935] usb 1-1: device descriptor read/8, error -71 [ 112.872654][ T5915] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 112.927594][ T5935] usb usb1-port1: unable to enumerate USB device [ 112.977455][ T6490] misc userio: No port type given on /dev/userio [ 112.987045][ T6491] misc userio: The device must be registered before sending interrupts [ 113.032923][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.052856][ T5915] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.080724][ T5915] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 113.100558][ T5915] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.138115][ T5915] usb 2-1: config 0 descriptor?? [ 113.563068][ T5915] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 113.581857][ T5915] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 113.598344][ T5915] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input7 [ 113.617131][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.665182][ T5915] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 113.770904][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 113.802293][ T5915] usb 2-1: USB disconnect, device number 2 [ 113.810552][ T10] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 113.841067][ T10] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 113.864090][ T10] usb 4-1: config 0 has no interface number 0 [ 113.887976][ T10] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 113.907990][ T10] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 113.920556][ T10] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 113.939283][ T10] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 113.949188][ T10] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 113.958853][ T10] usb 4-1: Product: syz [ 113.963518][ T10] usb 4-1: Manufacturer: syz [ 113.979666][ T10] usb 4-1: config 0 descriptor?? [ 113.986571][ T6496] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 114.266751][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'. [ 114.277095][ T6513] netlink: 28 bytes leftover after parsing attributes in process `syz.0.173'. [ 114.623452][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.21/input/input8 [ 114.816954][ T6496] capability: warning: `syz.3.166' uses deprecated v2 capabilities in a way that may be insecure [ 114.879566][ T6496] Falling back ldisc for ttyS3. [ 114.906159][ T5935] usb 4-1: USB disconnect, device number 3 [ 114.906301][ C0] keyspan_remote 4-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 115.293964][ T6530] sp0: Synchronizing with TNC [ 116.273238][ T5935] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 116.295569][ T6557] veth1_macvtap: entered allmulticast mode [ 116.377436][ T6559] sp0: Synchronizing with TNC [ 116.443332][ T5935] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 116.475968][ T5935] usb 2-1: config 5 has no interface number 0 [ 116.505667][ T5935] usb 2-1: config 5 interface 123 has no altsetting 0 [ 116.531242][ T5935] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 116.544472][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'. [ 116.553721][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.562152][ T5935] usb 2-1: Product: syz [ 116.566689][ T5935] usb 2-1: Manufacturer: syz [ 116.580779][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz.0.193'. [ 116.590043][ T5935] usb 2-1: SerialNumber: syz [ 116.604315][ T6564] netlink: 12 bytes leftover after parsing attributes in process `syz.3.194'. [ 117.033990][ T6571] Mount JFS Failure: -22 [ 117.125058][ T5935] comedi comedi5: Wrong number of endpoints [ 117.140801][ T5935] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 117.190459][ T5935] usb 2-1: USB disconnect, device number 3 [ 117.254624][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.726678][ T6590] hpfs: Bad magic ... probably not HPFS [ 117.825910][ T6599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.205'. [ 117.839258][ T6595] netlink: 44 bytes leftover after parsing attributes in process `syz.0.205'. [ 117.858602][ T6599] netlink: 44 bytes leftover after parsing attributes in process `syz.0.205'. [ 118.070583][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.208'. [ 118.079697][ T6604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.208'. [ 118.097884][ T6605] hpfs: Bad magic ... probably not HPFS [ 118.454836][ T6613] sp0: Synchronizing with TNC [ 119.474606][ T64] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.574228][ T64] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.700128][ T64] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.827659][ T6649] /dev/rnullb0: Can't open blockdev [ 119.878058][ T64] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.929604][ T6651] netlink: 12 bytes leftover after parsing attributes in process `syz.2.227'. [ 120.087318][ T6654] /dev/rnullb0: Can't open blockdev [ 120.262445][ T64] bridge_slave_1: left allmulticast mode [ 120.262508][ T64] bridge_slave_1: left promiscuous mode [ 120.263546][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.337971][ T64] bridge_slave_0: left allmulticast mode [ 120.370421][ T64] bridge_slave_0: left promiscuous mode [ 120.393478][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.578042][ T5187] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.591872][ T5187] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.599909][ T5187] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.611580][ T5187] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.619901][ T5187] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 120.654414][ T5876] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 120.664962][ T5876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 120.680528][ T5876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 120.696602][ T5876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 120.706607][ T5876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 121.536415][ T30] audit: type=1326 audit(1754563076.914:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6699 comm="syz.2.238" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f484f58ebe9 code=0x0 [ 121.625544][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.646174][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.658002][ T64] bond0 (unregistering): Released all slaves [ 121.683492][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.698939][ T6677] bond0: (slave rose0): Enslaving as an active interface with an up link [ 121.705453][ T6703] netlink: 596 bytes leftover after parsing attributes in process `syz.2.238'. [ 121.728526][ T6701] netlink: 'syz.2.238': attribute type 29 has an invalid length. [ 121.746810][ T6702] netlink: 'syz.2.238': attribute type 29 has an invalid length. [ 121.837650][ T6703] netlink: 'syz.2.238': attribute type 29 has an invalid length. [ 121.981546][ T6668] lo speed is unknown, defaulting to 1000 [ 122.154171][ T6707] sp0: Synchronizing with TNC [ 122.299551][ T64] hsr_slave_0: left promiscuous mode [ 122.307356][ T64] hsr_slave_1: left promiscuous mode [ 122.347761][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.374635][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.404708][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.412423][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.458955][ T64] veth1_macvtap: left promiscuous mode [ 122.489975][ T64] veth0_macvtap: left promiscuous mode [ 122.508811][ T64] veth1_vlan: left promiscuous mode [ 122.523222][ T64] veth0_vlan: left promiscuous mode [ 122.800907][ T5876] Bluetooth: hci1: command tx timeout [ 122.939649][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 122.959522][ T6746] netlink: 28 bytes leftover after parsing attributes in process `syz.2.248'. [ 123.602728][ T64] team0 (unregistering): Port device team_slave_1 removed [ 123.648880][ T64] team0 (unregistering): Port device team_slave_0 removed [ 123.964789][ T5922] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.144301][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 124.199077][ T5922] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 124.250881][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 124.351932][ T5922] usb 3-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 124.427987][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.476385][ T5922] usb 3-1: Product: syz [ 124.503236][ T5922] usb 3-1: Manufacturer: syz [ 124.509496][ T5922] usb 3-1: SerialNumber: syz [ 124.531994][ T5922] usb 3-1: config 0 descriptor?? [ 124.675914][ T6668] chnl_net:caif_netlink_parms(): no params data found [ 124.883567][ T5876] Bluetooth: hci1: command tx timeout [ 124.899884][ T5922] usb 3-1: Found UVC 34.00 device syz (8086:0b5b) [ 124.909565][ T5922] usb 3-1: No valid video chain found. [ 124.927478][ T5922] usb 3-1: USB disconnect, device number 4 [ 125.019584][ T6668] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.028717][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.036270][ T6668] bridge_slave_0: entered allmulticast mode [ 125.055189][ T6788] fuse: Bad value for 'rootmode' [ 125.062945][ T6668] bridge_slave_0: entered promiscuous mode [ 125.081073][ T6668] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.089223][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.097052][ T6668] bridge_slave_1: entered allmulticast mode [ 125.105656][ T6668] bridge_slave_1: entered promiscuous mode [ 125.164902][ T6771] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.191192][ T6771] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 125.269287][ T6668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.334448][ T6668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.479509][ T6668] team0: Port device team_slave_0 added [ 125.508477][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.259'. [ 125.510220][ T6668] team0: Port device team_slave_1 added [ 125.694590][ T6803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.261'. [ 125.710376][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 125.767073][ T6812] /dev/rnullb0: Can't open blockdev [ 125.771880][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.771900][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.771930][ T6668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.774044][ T6668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.774060][ T6668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.774090][ T6668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.983438][ T6668] hsr_slave_0: entered promiscuous mode [ 125.999336][ T6668] hsr_slave_1: entered promiscuous mode [ 126.071309][ T6822] syzkaller1: entered promiscuous mode [ 126.077052][ T6822] syzkaller1: entered allmulticast mode [ 126.221679][ T983] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.382098][ T983] usb 4-1: Using ep0 maxpacket: 16 [ 126.398054][ T983] usb 4-1: config 0 has an invalid interface number: 149 but max is 0 [ 126.427780][ T983] usb 4-1: config 0 has no interface number 0 [ 126.448971][ T983] usb 4-1: config 0 interface 149 altsetting 0 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 126.467207][ T983] usb 4-1: config 0 interface 149 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 126.486281][ T983] usb 4-1: New USB device found, idVendor=06f8, idProduct=0001, bcdDevice=7d.3b [ 126.498864][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.520947][ T983] usb 4-1: Product: syz [ 126.527624][ T983] usb 4-1: Manufacturer: syz [ 126.533904][ T983] usb 4-1: SerialNumber: syz [ 126.578421][ T983] usb 4-1: config 0 descriptor?? [ 126.589287][ T6668] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 126.649524][ T6668] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 126.687272][ T6668] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 126.716375][ T6668] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 126.804885][ T983] usb 4-1: USB disconnect, device number 4 [ 126.943808][ T6668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.013290][ T6668] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.037178][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.044418][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.074571][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.082269][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.270345][ T6858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 127.526517][ T6866] /dev/rnullb0: Can't open blockdev [ 127.747831][ T30] audit: type=1804 audit(1754563083.124:4): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.276" name="/newroot/70/file1" dev="fuse" ino=1 res=1 errno=0 [ 127.778688][ T30] audit: type=1800 audit(1754563083.124:5): pid=6875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.276" name="/" dev="fuse" ino=1 res=0 errno=0 [ 127.800904][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 127.909497][ T6668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.969006][ T10] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 127.982820][ T10] usb 4-1: config 0 has no interface number 0 [ 127.989068][ T10] usb 4-1: too many endpoints for config 0 interface 2 altsetting 0: 129, using maximum allowed: 30 [ 128.007918][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.040763][ T10] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.050597][ T10] usb 4-1: config 0 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 128.105724][ T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 128.127524][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.167004][ T10] usb 4-1: config 0 descriptor?? [ 128.476959][ T10] usbhid 4-1:0.2: can't add hid device: -71 [ 128.496392][ T10] usbhid 4-1:0.2: probe with driver usbhid failed with error -71 [ 128.538218][ T6888] sp0: Synchronizing with TNC [ 128.556798][ T10] usb 4-1: USB disconnect, device number 5 [ 128.804575][ T6668] veth0_vlan: entered promiscuous mode [ 128.839001][ T6668] veth1_vlan: entered promiscuous mode [ 128.964946][ T6668] veth0_macvtap: entered promiscuous mode [ 129.018101][ T6668] veth1_macvtap: entered promiscuous mode [ 129.113504][ T6916] misc userio: Begin command sent, but we're already running [ 129.118452][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.146752][ T6668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.210073][ T64] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.235950][ T64] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.253876][ T64] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.280501][ T1115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.446153][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'. [ 129.495161][ T6927] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'. [ 129.602603][ T3463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.610489][ T3463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.678915][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.721625][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.409524][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.0.293'. [ 130.952151][ T6968] /dev/rnullb0: Can't open blockdev [ 130.957054][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 130.995382][ T6971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.300'. [ 131.660930][ T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 131.747549][ T7005] syzkaller1: left promiscuous mode [ 131.790710][ T7005] syzkaller1: left allmulticast mode [ 131.846485][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 131.856155][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.888464][ T10] usb 1-1: config 0 descriptor?? [ 132.065491][ T7015] syz.4.310: attempt to access beyond end of device [ 132.065491][ T7015] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 132.116767][ T7015] hpfs: hpfs_map_sector(): read error [ 132.573699][ T7033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.315'. [ 132.665218][ T10] ath6kl: Failed to submit usb control message: -71 [ 132.680738][ T10] ath6kl: unable to send the bmi data to the device: -71 [ 132.691433][ T10] ath6kl: Unable to send get target info: -71 [ 132.727150][ T10] ath6kl: Failed to init ath6kl core: -71 [ 132.757155][ T10] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 132.831616][ T10] usb 1-1: USB disconnect, device number 9 [ 133.593726][ T7072] fuse: Bad value for 'fd' [ 133.728103][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.3.328'. [ 134.387337][ T7088] /dev/rnullb0: Can't open blockdev [ 134.428014][ T7088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.475963][ T7088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.630836][ T5861] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 134.791257][ T5861] usb 3-1: Using ep0 maxpacket: 8 [ 134.840803][ T5861] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 134.870839][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.896634][ T5861] usb 3-1: Product: syz [ 134.915559][ T5861] usb 3-1: Manufacturer: syz [ 134.940399][ T5861] usb 3-1: SerialNumber: syz [ 135.189228][ T5861] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 135.229714][ T5861] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 135.273533][ T5861] mxuport 3-1:254.0: probe with driver mxuport failed with error -71 [ 135.333575][ T5861] usb 3-1: USB disconnect, device number 5 [ 135.960897][ T7115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.338'. [ 136.379530][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.342'. [ 136.417688][ T7134] /dev/rnullb0: Can't open blockdev [ 136.423130][ T7130] /dev/rnullb0: Can't open blockdev [ 136.440142][ T7130] netlink: 20 bytes leftover after parsing attributes in process `syz.4.342'. [ 136.462211][ T7134] /dev/rnullb0: Can't open blockdev [ 136.468215][ T7134] /dev/rnullb0: Can't open blockdev [ 136.478534][ T7135] /dev/rnullb0: Can't open blockdev [ 136.571560][ T7134] /dev/rnullb0: Can't open blockdev [ 136.579733][ T7134] /dev/rnullb0: Can't open blockdev [ 136.593588][ T7134] /dev/rnullb0: Can't open blockdev [ 136.631589][ T7134] /dev/rnullb0: Can't open blockdev [ 136.654972][ T7134] /dev/rnullb0: Can't open blockdev [ 136.667984][ T7134] /dev/rnullb0: Can't open blockdev [ 136.693192][ T7134] /dev/rnullb0: Can't open blockdev [ 136.711590][ T7134] /dev/rnullb0: Can't open blockdev [ 136.730214][ T7134] /dev/rnullb0: Can't open blockdev [ 136.746579][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.4.347'. [ 136.758693][ T7134] /dev/rnullb0: Can't open blockdev [ 136.766739][ T7134] /dev/rnullb0: Can't open blockdev [ 136.773563][ T7134] /dev/rnullb0: Can't open blockdev [ 136.779644][ T7134] /dev/rnullb0: Can't open blockdev [ 136.787799][ T7134] /dev/rnullb0: Can't open blockdev [ 136.794615][ T7134] /dev/rnullb0: Can't open blockdev [ 136.819808][ T7134] /dev/rnullb0: Can't open blockdev [ 136.827456][ T7134] /dev/rnullb0: Can't open blockdev [ 136.834758][ T7134] /dev/rnullb0: Can't open blockdev [ 136.842942][ T7134] /dev/rnullb0: Can't open blockdev [ 136.849117][ T7134] /dev/rnullb0: Can't open blockdev [ 136.857678][ T7134] /dev/rnullb0: Can't open blockdev [ 136.865746][ T7134] /dev/rnullb0: Can't open blockdev [ 136.892884][ T7134] /dev/rnullb0: Can't open blockdev [ 136.941541][ T7134] /dev/rnullb0: Can't open blockdev [ 136.991310][ T7134] /dev/rnullb0: Can't open blockdev [ 137.012500][ T7134] /dev/rnullb0: Can't open blockdev [ 137.021549][ T7134] /dev/rnullb0: Can't open blockdev [ 137.047598][ T7134] /dev/rnullb0: Can't open blockdev [ 137.057081][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.4.349'. [ 137.071483][ T7134] /dev/rnullb0: Can't open blockdev [ 137.087743][ T7134] /dev/rnullb0: Can't open blockdev [ 137.907792][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 137.953951][ T7179] /dev/rnullb0: Can't open blockdev [ 138.093498][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.110365][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.127629][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 138.651181][ T5861] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 138.728190][ T7211] tmpfs: Bad value for 'nr_blocks' [ 139.023027][ T7224] /dev/rnullb0: Can't open blockdev [ 139.265040][ T7234] program syz.4.375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.354008][ T7237] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 139.674669][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.380'. [ 139.699352][ T7246] /dev/rnullb0: Can't open blockdev [ 139.706444][ T7249] netlink: 28 bytes leftover after parsing attributes in process `syz.3.380'. [ 139.914847][ T7258] fuse: Unknown parameter '00000000000000000000004' [ 140.270965][ T983] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 140.394188][ T5922] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 140.521113][ T983] usb 1-1: Using ep0 maxpacket: 8 [ 140.563343][ T5922] usb 5-1: Using ep0 maxpacket: 32 [ 140.569421][ T983] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.582694][ T5922] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 140.612476][ T5922] usb 5-1: config 0 has no interface number 0 [ 140.619692][ T983] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.632396][ T5922] usb 5-1: config 0 interface 184 has no altsetting 0 [ 140.655737][ T5922] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 140.682113][ T983] usb 1-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 140.683069][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.710803][ T983] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.739742][ T5922] usb 5-1: Product: syz [ 140.744771][ T5922] usb 5-1: Manufacturer: syz [ 140.754146][ T983] usb 1-1: config 0 descriptor?? [ 140.760702][ T5922] usb 5-1: SerialNumber: syz [ 140.804320][ T5922] usb 5-1: config 0 descriptor?? [ 140.836379][ T5922] smsc75xx v1.0.0 [ 141.206801][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.234515][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.264106][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.291355][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.318875][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.332859][ T7288] comedi: valid board names for 8255 driver are: [ 141.347086][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.358057][ T7288] 8255 [ 141.370743][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.390790][ T7288] comedi: valid board names for vmk80xx driver are: [ 141.397876][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.417924][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.438079][ T983] nti 0003:0757:0A00.0003: unknown main item tag 0x0 [ 141.448915][ T7288] vmk80xx [ 141.452226][ T7288] comedi: valid board names for usbduxsigma driver are: [ 141.459415][ T7288] usbduxsigma [ 141.463103][ T7288] comedi: valid board names for usbduxfast driver are: [ 141.497004][ T7288] usbduxfast [ 141.501574][ T7288] comedi: valid board names for usbdux driver are: [ 141.516645][ T7288] usbdux [ 141.519780][ T7288] comedi: valid board names for ni6501 driver are: [ 141.527502][ T7288] ni6501 [ 141.530597][ T7288] comedi: valid board names for dt9812 driver are: [ 141.544536][ T983] nti 0003:0757:0A00.0003: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.0-1/input0 [ 141.545505][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 141.621167][ T7288] dt9812 [ 141.624285][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 141.666202][ T7288] comedi: valid board names for ni_labpc_cs driver are: [ 141.684434][ T5922] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 141.702258][ T5936] usb 1-1: USB disconnect, device number 10 [ 141.711273][ T5922] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -71 [ 141.725729][ T7292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.391'. [ 141.736065][ T7288] ni_labpc_cs [ 141.739572][ T7288] comedi: valid board names for ni_daq_700 driver are: [ 141.753760][ T5922] usb 5-1: USB disconnect, device number 2 [ 141.765093][ T7288] ni_daq_700 [ 141.768618][ T7288] comedi: valid board names for labpc_pci driver are: [ 141.779857][ T7288] labpc_pci [ 141.783762][ T7288] comedi: valid board names for adl_pci9118 driver are: [ 141.789638][ T7290] fido_id[7290]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 141.825041][ T7288] pci9118dg [ 141.841384][ T7288] pci9118hg [ 141.847896][ T7288] pci9118hr [ 141.857389][ T7288] comedi: valid board names for 8255_pci driver are: [ 141.867514][ T7288] 8255_pci [ 141.874900][ T7288] comedi: valid board names for s526 driver are: [ 141.890175][ T7288] s526 [ 141.910831][ T7288] comedi: valid board names for multiq3 driver are: [ 141.937947][ T7288] multiq3 [ 141.945153][ T7288] comedi: valid board names for pcmuio driver are: [ 141.960768][ T7288] pcmuio48 [ 141.964045][ T7288] pcmuio96 [ 141.974339][ T7288] comedi: valid board names for pcmmio driver are: [ 142.003508][ T7288] pcmmio [ 142.006684][ T7288] comedi: valid board names for pcmda12 driver are: [ 142.028453][ T7288] pcmda12 [ 142.040976][ T7288] comedi: valid board names for pcmad driver are: [ 142.081405][ T7288] pcmad12 [ 142.084501][ T7288] pcmad16 [ 142.087543][ T7288] comedi: valid board names for ni_labpc driver are: [ 142.114790][ T7288] lab-pc-1200 [ 142.118232][ T7288] lab-pc-1200ai [ 142.140758][ T7288] lab-pc+ [ 142.143861][ T7288] comedi: valid board names for atmio16 driver are: [ 142.190771][ T7288] atmio16 [ 142.193858][ T7288] atmio16d [ 142.197084][ T7288] comedi: valid board names for ni_at_ao driver are: [ 142.250033][ T7288] at-ao-6 [ 142.260688][ T7288] at-ao-10 [ 142.264036][ T7288] comedi: valid board names for ni_at_a2150 driver are: [ 142.273699][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 142.306463][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.4.394'. [ 142.315507][ T7288] ni_at_a2150 [ 142.315538][ T7288] comedi: valid board names for adq12b driver are: [ 142.315560][ T7288] adq12b [ 142.315569][ T7288] comedi: valid board names for mpc624 driver are: [ 142.315579][ T7288] mpc624 [ 142.315588][ T7288] comedi: valid board names for c6xdigio driver are: [ 142.315599][ T7288] c6xdigio [ 142.315608][ T7288] comedi: valid board names for aio_iiro_16 driver are: [ 142.315619][ T7288] aio_iiro_16 [ 142.315628][ T7288] comedi: valid board names for aio_aio12_8 driver are: [ 142.315640][ T7288] aio_aio12_8 [ 142.315648][ T7288] aio_ai12_8 [ 142.315657][ T7288] aio_ao12_4 [ 142.315666][ T7288] comedi: valid board names for fl512 driver are: [ 142.315677][ T7288] fl512 [ 142.315686][ T7288] comedi: valid board names for dmm32at driver are: [ 142.315696][ T7288] dmm32at [ 142.315705][ T7288] comedi: valid board names for dt282x driver are: [ 142.315716][ T7288] dt2821 [ 142.315725][ T7288] dt2821-f [ 142.315732][ T7288] dt2821-g [ 142.315741][ T7288] dt2823 [ 142.315750][ T7288] dt2824-pgh [ 142.315759][ T7288] dt2824-pgl [ 142.315768][ T7288] dt2825 [ 142.315777][ T7288] dt2827 [ 142.315786][ T7288] dt2828 [ 142.315795][ T7288] dt2829 [ 142.315802][ T7288] dt21-ez [ 142.315812][ T7288] dt23-ez [ 142.315820][ T7288] dt24-ez [ 142.315829][ T7288] dt24-ez-pgl [ 142.315838][ T7288] comedi: valid board names for dt2817 driver are: [ 142.315849][ T7288] dt2817 [ 142.315857][ T7288] comedi: valid board names for dt2815 driver are: [ 142.315868][ T7288] dt2815 [ 142.315877][ T7288] comedi: valid board names for dt2814 driver are: [ 142.315887][ T7288] dt2814 [ 142.315896][ T7288] comedi: valid board names for dt2811 driver are: [ 142.315906][ T7288] dt2811-pgh [ 142.315915][ T7288] dt2811-pgl [ 142.315924][ T7288] comedi: valid board names for dt2801 driver are: [ 142.315935][ T7288] dt2801 [ 142.315944][ T7288] comedi: valid board names for das6402 driver are: [ 142.315955][ T7288] das6402-12 [ 142.315964][ T7288] das6402-16 [ 142.315972][ T7288] comedi: valid board names for das1800 driver are: [ 142.315984][ T7288] das-1701st [ 142.315993][ T7288] das-1701st-da [ 142.316002][ T7288] das-1702st [ 142.316011][ T7288] das-1702st-da [ 142.316020][ T7288] das-1702hr [ 142.316028][ T7288] das-1702hr-da [ 142.316037][ T7288] das-1701ao [ 142.316046][ T7288] das-1702ao [ 142.316055][ T7288] das-1801st [ 142.316064][ T7288] das-1801st-da [ 142.316073][ T7288] das-1802st [ 142.316082][ T7288] das-1802st-da [ 142.316091][ T7288] das-1802hr [ 142.316100][ T7288] das-1802hr-da [ 142.316109][ T7288] das-1801hc [ 142.316117][ T7288] das-1802hc [ 142.316125][ T7288] das-1801ao [ 142.316133][ T7288] das-1802ao [ 142.472981][ T7301] /dev/rnullb0: Can't open blockdev [ 142.503491][ T7288] comedi: valid board names for das800 driver are: [ 142.646357][ T7288] das-800 [ 142.649447][ T7288] cio-das800 [ 142.670728][ T7288] das-801 [ 142.673811][ T7288] cio-das801 [ 142.677164][ T7288] das-802 [ 142.680209][ T7288] cio-das802 [ 142.700780][ T7288] cio-das802/16 [ 142.704383][ T7288] comedi: valid board names for isa-das08 driver are: [ 142.760726][ T7288] isa-das08 [ 142.770710][ T7288] das08-pgm [ 142.780340][ T7288] das08-pgh [ 142.784661][ T7288] das08-pgl [ 142.787891][ T7288] das08-aoh [ 142.801552][ T7288] das08-aol [ 142.804792][ T7288] das08-aom [ 142.821462][ T7288] das08/jr-ao [ 142.826826][ T7288] das08jr-16-ao [ 142.832990][ T7288] pc104-das08 [ 142.836410][ T7288] das08jr/16 [ 142.839716][ T7288] comedi: valid board names for das16m1 driver are: [ 142.890713][ T7288] das16m1 [ 142.893800][ T7288] comedi: valid board names for dac02 driver are: [ 142.900235][ T7288] dac02 [ 142.931092][ T7288] comedi: valid board names for rti802 driver are: [ 142.953132][ T7288] rti802 [ 142.956128][ T7288] comedi: valid board names for rti800 driver are: [ 142.993923][ T7288] rti800 [ 142.996923][ T7288] rti815 [ 142.999901][ T7288] comedi: valid board names for pcm3724 driver are: [ 143.029086][ T7288] pcm3724 [ 143.045277][ T7288] comedi: valid board names for pcl818 driver are: [ 143.074059][ T7288] pcl818l [ 143.077142][ T7288] pcl818h [ 143.080206][ T7288] pcl818hd [ 143.106336][ T7288] pcl818hg [ 143.109602][ T7288] pcl818 [ 143.116830][ T7288] pcl718 [ 143.120004][ T7288] pcm3718 [ 143.140923][ T7288] comedi: valid board names for pcl816 driver are: [ 143.147590][ T7288] pcl816 [ 143.150558][ T7288] pcl814b [ 143.190794][ T7288] comedi: valid board names for pcl812 driver are: [ 143.197369][ T7288] pcl812 [ 143.200338][ T7288] pcl812pg [ 143.229423][ T7288] acl8112pg [ 143.239539][ T7288] acl8112dg [ 143.248952][ T7288] acl8112hg [ 143.269482][ T7288] a821pgl [ 143.279329][ T7288] a821pglnda [ 143.289835][ T7288] a821pgh [ 143.311375][ T7288] a822pgl [ 143.316079][ T7288] a822pgh [ 143.319234][ T7288] a823pgl [ 143.346540][ T7288] a823pgh [ 143.349721][ T7288] pcl813 [ 143.356400][ T7329] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 143.359863][ T7288] pcl813b [ 143.364603][ T7329] netlink: 500 bytes leftover after parsing attributes in process `syz.4.399'. [ 143.391209][ T7288] acl8113 [ 143.400477][ T7288] iso813 [ 143.410967][ T7288] acl8216 [ 143.414043][ T7288] a826pg [ 143.417007][ T7288] comedi: valid board names for pcl730 driver are: [ 143.480731][ T7288] pcl730 [ 143.483828][ T7288] iso730 [ 143.486794][ T7288] acl7130 [ 143.489837][ T7288] pcm3730 [ 143.510822][ T7288] pcl725 [ 143.513823][ T7288] p8r8dio [ 143.516879][ T7288] acl7225b [ 143.520018][ T7288] p16r16dio [ 143.544219][ T7288] pcl733 [ 143.550468][ T7288] pcl734 [ 143.555829][ T7288] opmm-1616-xt [ 143.559343][ T7288] pearl-mm-p [ 143.582285][ T7288] ir104-pbf [ 143.585636][ T7288] comedi: valid board names for pcl726 driver are: [ 143.612986][ T7288] pcl726 [ 143.619170][ T7288] pcl727 [ 143.624595][ T7288] pcl728 [ 143.627576][ T7288] acl6126 [ 143.650935][ T7288] acl6128 [ 143.654057][ T7288] comedi: valid board names for pcl724 driver are: [ 143.660577][ T7288] pcl724 [ 143.701743][ T7288] pcl722 [ 143.704745][ T7288] pcl731 [ 143.707717][ T7288] acl7122 [ 143.730755][ T7288] acl7124 [ 143.733871][ T7288] pet48dio [ 143.737095][ T7288] pcmio48 [ 143.740134][ T7288] onyx-mm-dio [ 143.751494][ T7288] comedi: valid board names for pcl711 driver are: [ 143.777841][ T7340] /dev/rnullb0: Can't open blockdev [ 143.790815][ T7288] pcl711 [ 143.793866][ T7288] pcl711b [ 143.796922][ T7288] acl8112hg [ 143.800139][ T7288] acl8112dg [ 143.814313][ T7288] comedi: valid board names for amplc_pc263 driver are: [ 143.847732][ T7288] pc263 [ 143.850933][ T7288] comedi: valid board names for amplc_pc236 driver are: [ 143.869729][ T7288] pc36at [ 143.880937][ T7288] comedi: valid board names for amplc_dio200 driver are: [ 143.898207][ T7288] pc212e [ 143.911011][ T7288] pc214e [ 143.914002][ T7288] pc215e [ 143.930253][ T7288] pc218e [ 143.948020][ T7288] pc272e [ 143.960748][ T7288] comedi: valid board names for comedi_parport driver are: [ 143.978195][ T7288] comedi_parport [ 143.990699][ T7288] comedi: valid board names for comedi_test driver are: [ 144.001732][ T7288] comedi_test [ 144.005154][ T7288] comedi: valid board names for comedi_bond driver are: [ 144.022680][ T7288] comedi_bond [ 144.226934][ T7344] netlink: 12 bytes leftover after parsing attributes in process `syz.2.405'. [ 144.598684][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'. [ 144.614189][ T7358] netlink: 28 bytes leftover after parsing attributes in process `syz.3.410'. [ 145.149811][ T7370] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 146.853114][ T7347] netlink: 19 bytes leftover after parsing attributes in process `syz.4.406'. [ 146.953443][ T7367] sp0: Synchronizing with TNC [ 147.168958][ T7389] netlink: 348 bytes leftover after parsing attributes in process `syz.0.422'. [ 147.394457][ T7402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.425'. [ 147.640840][ T5936] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 147.852564][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.866511][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 147.891180][ T5936] usb 4-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 147.900290][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.948815][ T5936] usb 4-1: config 0 descriptor?? [ 147.963665][ T7403] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.115714][ T7425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 148.427242][ T5936] hid_parser_main: 60 callbacks suppressed [ 148.427268][ T5936] hid-rmi 0003:0461:4E72.0004: unknown main item tag 0x0 [ 148.480754][ T5936] hid-rmi 0003:0461:4E72.0004: unknown main item tag 0x0 [ 148.487952][ T5936] hid-rmi 0003:0461:4E72.0004: unknown main item tag 0x0 [ 148.513088][ T7437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.436'. [ 148.540751][ T5936] hid-rmi 0003:0461:4E72.0004: unknown main item tag 0x0 [ 148.547861][ T5936] hid-rmi 0003:0461:4E72.0004: unknown main item tag 0x0 [ 148.571372][ T5936] hid-rmi 0003:0461:4E72.0004: hidraw0: USB HID v0.00 Device [HID 0461:4e72] on usb-dummy_hcd.3-1/input0 [ 149.036796][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.441'. [ 149.056610][ T7450] netlink: 28 bytes leftover after parsing attributes in process `syz.0.441'. [ 149.123944][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 149.203571][ T7452] trusted_key: encrypted_key: insufficient parameters specified [ 149.221567][ T7452] Zero length message leads to an empty skb [ 149.366474][ T5935] usb 4-1: USB disconnect, device number 7 [ 149.470757][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 149.479352][ T10] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 149.508635][ T10] usb 5-1: config 0 has no interface number 0 [ 149.530207][ T10] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 149.548457][ T10] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 149.560439][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.580684][ T10] usb 5-1: Product: syz [ 149.611774][ T10] usb 5-1: Manufacturer: syz [ 149.616439][ T10] usb 5-1: SerialNumber: syz [ 149.648302][ T10] usb 5-1: config 0 descriptor?? [ 149.668762][ T10] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 149.689847][ T10] em28xx 5-1:0.132: Video interface 132 found: [ 149.833841][ T7465] /dev/rnullb0: Can't open blockdev [ 149.840112][ T7464] /dev/rnullb0: Can't open blockdev [ 150.009617][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 150.073508][ T10] em28xx 5-1:0.132: unknown em28xx chip ID (39) [ 150.287555][ T7447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.296925][ T7447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.859554][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 150.869131][ T7491] netlink: 28 bytes leftover after parsing attributes in process `syz.3.458'. [ 151.200238][ T10] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 151.210413][ T7497] /dev/rnullb0: Can't open blockdev [ 151.231380][ T10] em28xx 5-1:0.132: board has no eeprom [ 151.305942][ T10] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 151.319382][ T7501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 151.335979][ T10] em28xx 5-1:0.132: analog set to bulk mode. [ 151.374262][ T5922] em28xx 5-1:0.132: Registering V4L2 extension [ 151.567194][ T5922] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 151.616984][ T5922] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 151.627540][ T5922] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 151.656274][ T5922] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 151.800830][ T5922] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 151.856234][ T5922] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 151.922112][ T5922] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 151.996854][ T5969] usb 5-1: USB disconnect, device number 3 [ 152.033475][ T5922] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-19) [ 152.069274][ T5969] em28xx 5-1:0.132: Disconnecting em28xx [ 152.438172][ T5922] em28xx 5-1:0.132: Config register raw data: 0xffffffed [ 152.484061][ T5922] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 152.538735][ T7527] syz.2.471: attempt to access beyond end of device [ 152.538735][ T7527] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 152.573755][ T5922] em28xx 5-1:0.132: No AC97 audio processor [ 152.619908][ T7527] MINIX-fs: unable to read superblock [ 152.649133][ T5922] usb 5-1: Decoder not found [ 152.659215][ T7530] netlink: 12 bytes leftover after parsing attributes in process `syz.4.473'. [ 152.683638][ T7526] syz.2.471: attempt to access beyond end of device [ 152.683638][ T7526] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 152.711660][ T5922] em28xx 5-1:0.132: failed to create media graph [ 152.740789][ T7526] MINIX-fs: unable to read superblock [ 152.764711][ T7536] /dev/rnullb0: Can't open blockdev [ 152.764717][ T5922] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 152.797089][ T5922] em28xx 5-1:0.132: Remote control support is not available for this card. [ 152.845370][ T5969] em28xx 5-1:0.132: Closing input extension [ 152.927383][ T5969] em28xx 5-1:0.132: Freeing device [ 153.358066][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 153.377500][ T7558] netlink: 28 bytes leftover after parsing attributes in process `syz.0.480'. [ 153.383687][ T7559] sctp: [Deprecated]: syz.2.479 (pid 7559) Use of int in max_burst socket option deprecated. [ 153.383687][ T7559] Use struct sctp_assoc_value instead [ 153.461813][ T5969] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 153.640810][ T5969] usb 5-1: Using ep0 maxpacket: 32 [ 153.650037][ T5969] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 153.660168][ T5969] usb 5-1: config 0 has no interface number 0 [ 153.688155][ T5969] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.709422][ T5969] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.716309][ T7569] netlink: 12 bytes leftover after parsing attributes in process `syz.0.483'. [ 153.734479][ T5915] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 153.748313][ T5969] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 153.762461][ T5969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.785745][ T5969] usb 5-1: config 0 descriptor?? [ 153.913816][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.931742][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 153.969770][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 154.019179][ T5915] usb 3-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 154.030917][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.039010][ T5915] usb 3-1: Product: syz [ 154.052312][ T5915] usb 3-1: Manufacturer: syz [ 154.066193][ T5915] usb 3-1: SerialNumber: syz [ 154.082479][ T5915] usb 3-1: config 0 descriptor?? [ 154.089827][ T7556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 154.217853][ T7541] netlink: 200 bytes leftover after parsing attributes in process `syz.4.475'. [ 154.220987][ T5936] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 154.230146][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.475'. [ 154.315607][ T5915] powermate: unknown product id 0240 [ 154.321427][ T5915] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 154.356824][ T5915] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 154.460888][ T5969] uclogic 0003:28BD:0094.0005: pen parameters not found [ 154.492425][ T5969] uclogic 0003:28BD:0094.0005: interface is invalid, ignoring [ 154.526921][ T7556] netlink: 168 bytes leftover after parsing attributes in process `syz.2.479'. [ 154.563363][ T5969] usb 5-1: USB disconnect, device number 4 [ 154.586740][ T5936] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 154.624414][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.680867][ T5936] usb 1-1: config 0 has no interface number 0 [ 154.687038][ T5936] usb 1-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 154.770858][ T5936] usb 1-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 154.798618][ T7556] /dev/rnullb0: Can't open blockdev [ 154.806227][ C0] powermate: config urb returned -71 [ 154.812149][ C0] powermate: config urb returned -71 [ 154.817944][ C0] powermate: config urb returned -71 [ 154.820980][ T5936] usb 1-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 154.831411][ T5915] usb 3-1: USB disconnect, device number 6 [ 154.832516][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 154.867855][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.899203][ T5936] usb 1-1: Product: syz [ 154.911198][ T5936] usb 1-1: Manufacturer: syz [ 154.918229][ T5936] usb 1-1: SerialNumber: syz [ 154.931947][ T5936] usb 1-1: config 0 descriptor?? [ 155.848680][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 155.899763][ T7617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.489'. [ 155.928182][ T5936] usbtouchscreen 1-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 155.985302][ T5936] usb 1-1: USB disconnect, device number 11 [ 156.227704][ T7626] /dev/rnullb0: Can't open blockdev [ 157.071532][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.3.499'. [ 157.902032][ T7674] nfs4: Unknown parameter '{.^(')%' [ 158.202013][ T7684] netlink: 72 bytes leftover after parsing attributes in process `syz.3.508'. [ 158.621956][ T7701] netlink: 12 bytes leftover after parsing attributes in process `syz.2.512'. [ 158.788844][ T7704] capability: warning: `syz.4.514' uses 32-bit capabilities (legacy support in use) [ 159.506415][ T7731] overlay: ./file0 is not a directory [ 160.342398][ T7756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.525'. [ 160.389920][ T7759] /dev/rnullb0: Can't open blockdev [ 160.748092][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.529'. [ 160.764093][ T7770] netlink: 28 bytes leftover after parsing attributes in process `syz.2.529'. [ 161.009786][ T7777] /dev/rnullb0: Can't open blockdev [ 161.351612][ T5861] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 161.522492][ T5861] usb 3-1: Using ep0 maxpacket: 16 [ 161.538841][ T5861] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 161.562649][ T5861] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 161.575711][ T5861] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.590187][ T5861] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.598621][ T5861] usb 3-1: Manufacturer: 덼졯寽몝㰃೎⭳決♟㤽ị芛淏鸱秇농ꈪ㕹ః넊샲ቚ嫒컥蠩隇碊㜕䁖圴柶鲢擞貀澚ᖿ░퐖 [ 161.650826][ T5861] usb 3-1: SerialNumber: ш [ 161.943726][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.968300][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.989706][ T5969] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 162.034599][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.059254][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.075080][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.087501][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.147533][ T5969] usb 5-1: device descriptor read/64, error -71 [ 162.156933][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.188111][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.213972][ T7781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.255732][ T7781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.321722][ T5861] cdc_ncm 3-1:1.0: bind() failure [ 162.343414][ T5861] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 162.350269][ T5861] cdc_ncm 3-1:1.1: bind() failure [ 162.401008][ T5861] usb 3-1: USB disconnect, device number 7 [ 162.412396][ T5969] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 162.561610][ T5969] usb 5-1: device descriptor read/64, error -71 [ 162.691320][ T5969] usb usb5-port1: attempt power cycle [ 162.826308][ T7819] /dev/rnullb0: Can't open blockdev [ 163.050713][ T5969] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 163.092822][ T5969] usb 5-1: device descriptor read/8, error -71 [ 163.351060][ T5969] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 163.391600][ T5969] usb 5-1: device descriptor read/8, error -71 [ 163.511136][ T5969] usb usb5-port1: unable to enumerate USB device [ 163.576535][ T7838] tipc: Enabling of bearer rejected, failed to enable media [ 163.799689][ T7838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.542'. [ 163.867422][ T7842] mmap: syz.3.543 (7842) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.918592][ T7840] netlink: 36 bytes leftover after parsing attributes in process `syz.0.542'. [ 163.954393][ T7840] netlink: 28 bytes leftover after parsing attributes in process `syz.0.542'. [ 164.240731][ T5936] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 164.371361][ T5936] usb 4-1: device descriptor read/64, error -71 [ 164.620850][ T5936] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 164.760734][ T5936] usb 4-1: device descriptor read/64, error -71 [ 164.878528][ T5936] usb usb4-port1: attempt power cycle [ 165.250835][ T5936] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 165.271570][ T5936] usb 4-1: device descriptor read/8, error -71 [ 165.520921][ T5936] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 165.564971][ T5936] usb 4-1: device descriptor read/8, error -71 [ 165.693634][ T5936] usb usb4-port1: unable to enumerate USB device [ 165.850583][ T7878] netlink: 12 bytes leftover after parsing attributes in process `syz.0.555'. [ 166.297342][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.561'. [ 166.307892][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.0.561'. [ 166.408830][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.4.562'. [ 166.502392][ T7899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.564'. [ 166.684562][ T7908] /dev/rnullb0: Can't open blockdev [ 166.869231][ T7914] tipc: Enabling of bearer rejected, failed to enable media [ 167.107734][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 167.137571][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.0.571'. [ 167.617575][ T7935] netlink: 'syz.3.578': attribute type 5 has an invalid length. [ 167.647192][ T7935] /dev/rnullb0: Can't open blockdev [ 167.669043][ T7935] netlink: 'syz.3.578': attribute type 5 has an invalid length. [ 167.984556][ T7948] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 167.993797][ T7948] comedi comedi3: 8255: I/O port conflict (0x7,4) [ 168.184950][ T7954] /dev/rnullb0: Can't open blockdev [ 168.207635][ T7954] fuse: blksize only supported for fuseblk [ 168.315204][ T7958] syz.3.588: attempt to access beyond end of device [ 168.315204][ T7958] loop3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 168.339606][ T7958] syz.3.588: attempt to access beyond end of device [ 168.339606][ T7958] loop3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 168.357645][ T7958] Mount JFS Failure: -5 [ 168.363344][ T7958] jfs_mount failed w/return code = -5 [ 168.809925][ T7979] /dev/rnullb0: Can't open blockdev [ 168.877558][ T7982] trusted_key: syz.4.597 sent an empty control message without MSG_MORE. [ 168.896824][ T7982] /dev/rnullb0: Can't open blockdev [ 169.015006][ T7984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.053078][ T7984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.252779][ T5969] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 169.413634][ T5969] usb 5-1: device descriptor read/64, error -71 [ 169.518581][ T7994] __nla_validate_parse: 7 callbacks suppressed [ 169.518601][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 169.551236][ T7994] netlink: 28 bytes leftover after parsing attributes in process `syz.0.602'. [ 169.631832][ T7998] /dev/rnullb0: Can't open blockdev [ 169.670754][ T5969] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 169.811834][ T5969] usb 5-1: device descriptor read/64, error -71 [ 169.921160][ T5969] usb usb5-port1: attempt power cycle [ 170.021817][ T5936] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 170.184557][ T5936] usb 1-1: Using ep0 maxpacket: 32 [ 170.217593][ T5936] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 170.232506][ T5936] usb 1-1: config 0 has no interface number 0 [ 170.249998][ T5936] usb 1-1: config 0 interface 89 has no altsetting 0 [ 170.261637][ T5969] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 170.281711][ T5936] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 170.301320][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.306101][ T5969] usb 5-1: device descriptor read/8, error -71 [ 170.309451][ T5936] usb 1-1: Product: syz [ 170.309472][ T5936] usb 1-1: Manufacturer: syz [ 170.309490][ T5936] usb 1-1: SerialNumber: syz [ 170.346114][ T5936] usb 1-1: config 0 descriptor?? [ 170.359204][ T5936] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 170.389889][ T5936] em28xx 1-1:0.89: Video interface 89 found: bulk [ 170.570879][ T5969] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 170.603177][ T5969] usb 5-1: device descriptor read/8, error -71 [ 170.729740][ T5969] usb usb5-port1: unable to enumerate USB device [ 170.972955][ T5936] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 171.045626][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 171.061022][ T8027] netlink: 28 bytes leftover after parsing attributes in process `syz.2.615'. [ 171.247502][ T8034] comedi comedi0: aio_aio12_8: I/O port conflict (0x2,32) [ 171.262138][ T8034] /dev/rnullb0: Can't open blockdev [ 171.324640][ T5935] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 171.498165][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 171.517987][ T5935] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 171.543520][ T5935] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 171.562684][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.581415][ T5935] usb 4-1: Product: syz [ 171.585880][ T5935] usb 4-1: Manufacturer: syz [ 171.590565][ T5935] usb 4-1: SerialNumber: syz [ 171.999512][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 172.025640][ T8053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.625'. [ 172.346253][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.2.627'. [ 172.414953][ T30] audit: type=1326 audit(1754563127.794:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8061 comm="syz.4.629" exe="/root/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7ff50c78ebe9 code=0x0 [ 172.469900][ T5936] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 172.480053][ T5936] em28xx 1-1:0.89: board has no eeprom [ 172.541697][ T5936] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 172.556622][ T5936] em28xx 1-1:0.89: analog set to bulk mode. [ 172.571576][ T983] em28xx 1-1:0.89: Registering V4L2 extension [ 172.761273][ T983] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 172.789413][ T983] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 172.816294][ T983] em28xx 1-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 172.861181][ T983] em28xx 1-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 172.903641][ T5935] usb 4-1: USB disconnect, device number 12 [ 172.916750][ T983] em28xx 1-1:0.89: Config register raw data: 0xfffffffb [ 172.926335][ T983] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 172.938754][ T983] em28xx 1-1:0.89: No AC97 audio processor [ 173.022231][ T983] usb 1-1: Decoder not found [ 173.026885][ T983] em28xx 1-1:0.89: failed to create media graph [ 173.060748][ T983] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 173.077129][ T5915] usb 1-1: USB disconnect, device number 12 [ 173.086492][ T5915] em28xx 1-1:0.89: Disconnecting em28xx [ 173.104294][ T983] em28xx 1-1:0.89: Registering snapshot button... [ 173.172566][ T983] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input14 [ 173.243275][ T983] em28xx 1-1:0.89: Remote control support is not available for this card. [ 173.295995][ T5915] em28xx 1-1:0.89: Closing input extension [ 173.325821][ T5915] em28xx 1-1:0.89: Deregistering snapshot button [ 173.391059][ T5973] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 173.401024][ T8087] tipc: Enabling of bearer rejected, failed to enable media [ 173.423837][ T5915] em28xx 1-1:0.89: Freeing device [ 173.594131][ T5973] usb 3-1: Using ep0 maxpacket: 8 [ 173.609152][ T5973] usb 3-1: config 32 interface 0 altsetting 0 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 173.626681][ T5973] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.650875][ T5973] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 173.659969][ T5973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.708828][ T8102] /dev/rnullb0: Can't open blockdev [ 173.970753][ T5973] usb 3-1: string descriptor 0 read error: -71 [ 173.981938][ T5973] hub 3-1:32.0: bad descriptor, ignoring hub [ 174.010716][ T5973] hub 3-1:32.0: probe with driver hub failed with error -5 [ 174.102706][ T5973] usb 3-1: USB disconnect, device number 8 [ 174.120943][ T8087] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 174.167869][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.181927][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.193771][ T8113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.209825][ T8113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.583144][ T8123] /dev/rnullb0: Can't open blockdev [ 174.597792][ T8125] /dev/rnullb0: Can't open blockdev [ 174.656690][ T8127] netlink: 260 bytes leftover after parsing attributes in process `syz.2.651'. [ 175.145340][ T8141] tipc: Enabling of bearer rejected, failed to enable media [ 176.050956][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.4.657'. [ 176.600570][ T8175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.668'. [ 176.614945][ T8172] /dev/rnullb0: Can't open blockdev [ 176.738896][ T8178] tipc: Enabling of bearer rejected, failed to enable media [ 176.844838][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'. [ 176.857147][ T8185] netlink: 28 bytes leftover after parsing attributes in process `syz.3.672'. [ 177.294506][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 177.316103][ T8201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.678'. [ 177.523766][ T8205] syz.3.680: attempt to access beyond end of device [ 177.523766][ T8205] loop3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 177.580863][ T8205] XFS (loop3): SB validate failed with error -5. [ 177.775681][ T8218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'. [ 177.822703][ T8218] netlink: 28 bytes leftover after parsing attributes in process `syz.2.682'. [ 177.878411][ T8222] mmap: syz.4.683 (8222): VmData 37478400 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 178.148512][ T8229] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 178.156615][ T8229] /dev/rnullb0: Can't open blockdev [ 178.476850][ T8236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.843088][ T8240] 9pnet_virtio: no channels available for device 127.0.0.1 [ 178.926541][ T5936] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 179.090843][ T5936] usb 1-1: device descriptor read/64, error -71 [ 179.204883][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 179.342359][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.697'. [ 179.350791][ T5936] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 179.370834][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 179.383351][ T5915] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 179.410846][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.449478][ T5915] usb 4-1: config 0 descriptor?? [ 179.469743][ T5915] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 179.490744][ T5936] usb 1-1: device descriptor read/64, error -71 [ 179.602056][ T5936] usb usb1-port1: attempt power cycle [ 179.765191][ T8261] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 179.942480][ T8265] /dev/rnullb0: Can't open blockdev [ 179.950971][ T5936] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 179.967504][ T8265] __nla_validate_parse: 2 callbacks suppressed [ 179.967524][ T8265] netlink: 4 bytes leftover after parsing attributes in process `syz.4.702'. [ 179.981790][ T5936] usb 1-1: device descriptor read/8, error -71 [ 180.071004][ T8270] 9pnet_fd: Insufficient options for proto=fd [ 180.079582][ T8270] /dev/rnullb0: Can't open blockdev [ 180.230884][ T5936] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 180.254079][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.707'. [ 180.265289][ T8276] netlink: 28 bytes leftover after parsing attributes in process `syz.4.707'. [ 180.271556][ T5936] usb 1-1: device descriptor read/8, error -71 [ 180.382165][ T5936] usb usb1-port1: unable to enumerate USB device [ 180.522199][ T5936] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 180.681112][ T5936] usb 3-1: Using ep0 maxpacket: 16 [ 180.689055][ T5936] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.700148][ T5936] usb 3-1: config 2 has an invalid interface number: 89 but max is 0 [ 180.708380][ T5936] usb 3-1: config 2 has no interface number 0 [ 180.717980][ T5936] usb 3-1: config 2 interface 89 has no altsetting 0 [ 180.729697][ T5936] usb 3-1: New USB device found, idVendor=f9ba, idProduct=96f2, bcdDevice=98.56 [ 180.742453][ T5936] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.750529][ T5936] usb 3-1: Product: syz [ 180.755949][ T5936] usb 3-1: Manufacturer: syz [ 180.760830][ T5936] usb 3-1: SerialNumber: syz [ 180.835208][ T8290] /dev/rnullb0: Can't open blockdev [ 181.031062][ T8293] /dev/rnullb0: Can't open blockdev [ 181.148472][ T5936] usb-storage 3-1:2.89: USB Mass Storage device detected [ 181.227903][ T5936] usb 3-1: USB disconnect, device number 9 [ 181.329203][ T8301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 181.338501][ T8301] netlink: 28 bytes leftover after parsing attributes in process `syz.4.717'. [ 181.517113][ T8308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.720'. [ 181.987597][ T5915] gspca_sonixj: reg_w1 err -71 [ 181.992964][ T5915] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 182.037133][ T5915] usb 4-1: USB disconnect, device number 13 [ 182.146268][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 182.157243][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.2.727'. [ 182.198037][ T8331] /dev/rnullb0: Can't open blockdev [ 182.837686][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.739'. [ 182.867322][ T8354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.739'. [ 183.405623][ T5936] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 183.614391][ T5936] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.626761][ T5936] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.643292][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.662199][ T5915] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 183.664133][ T5936] usb 4-1: config 0 descriptor?? [ 183.694141][ T5936] pwc: Askey VC010 type 2 USB webcam detected. [ 183.874064][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.893499][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 183.923385][ T5915] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 183.938517][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.963718][ T5915] usb 1-1: config 0 descriptor?? [ 184.090487][ T5936] pwc: recv_control_msg error -32 req 02 val 2b00 [ 184.108895][ T5936] pwc: recv_control_msg error -32 req 02 val 2700 [ 184.330309][ T5936] pwc: recv_control_msg error -32 req 04 val 1000 [ 184.477608][ T5915] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 184.499808][ T5936] pwc: recv_control_msg error -71 req 04 val 1300 [ 184.508608][ T8411] virtio-fs: tag not found [ 184.529151][ T5936] pwc: recv_control_msg error -71 req 04 val 1400 [ 184.554897][ T8413] raw_sendmsg: syz.4.755 forgot to set AF_INET. Fix it! [ 184.562367][ T5936] pwc: recv_control_msg error -71 req 02 val 2000 [ 184.592988][ T5936] pwc: recv_control_msg error -71 req 02 val 2100 [ 184.614607][ T5936] pwc: recv_control_msg error -71 req 04 val 1500 [ 184.636400][ T5936] pwc: recv_control_msg error -71 req 02 val 2500 [ 184.664014][ T5936] pwc: recv_control_msg error -71 req 02 val 2400 [ 184.683292][ T5922] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 184.696101][ T5936] pwc: recv_control_msg error -71 req 02 val 2600 [ 184.726501][ T5936] pwc: recv_control_msg error -71 req 02 val 2900 [ 184.751793][ T5936] pwc: recv_control_msg error -71 req 02 val 2800 [ 184.782114][ T5922] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz1] on syz0 [ 184.785699][ T5936] pwc: recv_control_msg error -71 req 04 val 1100 [ 184.860838][ T5936] pwc: recv_control_msg error -71 req 04 val 1200 [ 184.902157][ T5936] pwc: Registered as video103. [ 184.949764][ T5936] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 185.018893][ T5936] usb 4-1: USB disconnect, device number 14 [ 185.610796][ T5936] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 185.695559][ T8443] __nla_validate_parse: 1 callbacks suppressed [ 185.695602][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.765'. [ 185.722355][ T8443] netlink: 28 bytes leftover after parsing attributes in process `syz.2.765'. [ 185.786585][ T5936] usb 4-1: unable to get BOS descriptor or descriptor too short [ 185.818220][ T5936] usb 4-1: config 16 has an invalid interface number: 195 but max is 0 [ 185.830994][ T5936] usb 4-1: config 16 has an invalid descriptor of length 177, skipping remainder of the config [ 185.853269][ T5936] usb 4-1: config 16 has no interface number 0 [ 185.859693][ T5936] usb 4-1: config 16 interface 195 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.884367][ T5936] usb 4-1: config 16 interface 195 has no altsetting 0 [ 185.905649][ T5936] usb 4-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 185.923684][ T5936] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.941457][ T5936] usb 4-1: Product: syz [ 185.945786][ T5936] usb 4-1: Manufacturer: syz [ 185.950513][ T5936] usb 4-1: SerialNumber: syz [ 186.297160][ T5936] usb 4-1: bad CDC descriptors [ 186.340154][ T5936] usb 4-1: USB disconnect, device number 15 [ 186.694613][ T5915] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 186.714885][ T5915] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 186.753007][ T5915] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71 [ 186.798606][ T5915] usb 1-1: USB disconnect, device number 17 [ 186.879277][ T8463] /dev/rnullb0: Can't open blockdev [ 186.936968][ T8466] /dev/rnullb0: Can't open blockdev [ 187.180031][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 187.249107][ T8472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.775'. [ 187.549185][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.780'. [ 187.782457][ T8495] /dev/rnullb0: Can't open blockdev [ 187.843572][ T8499] fuse: Bad value for 'fd' [ 188.104210][ T5915] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 188.247963][ T8505] /dev/rnullb0: Can't open blockdev [ 188.283096][ T5915] usb 3-1: unable to get BOS descriptor or descriptor too short [ 188.303024][ T5915] usb 3-1: config 16 has an invalid interface number: 195 but max is 0 [ 188.321131][ T5915] usb 3-1: config 16 has no interface number 0 [ 188.337942][ T5915] usb 3-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 188.369368][ T5915] usb 3-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 188.389050][ T5915] usb 3-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11 [ 188.412592][ T5915] usb 3-1: config 16 interface 195 has no altsetting 0 [ 188.453766][ T5915] usb 3-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 188.473277][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.504755][ T5915] usb 3-1: Product: syz [ 188.518134][ T5915] usb 3-1: Manufacturer: syz [ 188.537067][ T5915] usb 3-1: SerialNumber: syz [ 188.555234][ T8499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.581332][ T8499] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 188.824120][ T8493] /dev/rnullb0: Can't open blockdev [ 188.857620][ T5915] usb 3-1: bad CDC descriptors [ 188.942218][ T5915] usb 3-1: USB disconnect, device number 10 [ 189.068291][ T8528] syz.0.792: attempt to access beyond end of device [ 189.068291][ T8528] loop0: rw=0, sector=16, nr_sectors = 1 limit=0 [ 189.132916][ T8528] qnx6: unable to read the first superblock [ 189.139476][ T8528] syz.0.792: attempt to access beyond end of device [ 189.139476][ T8528] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 189.180896][ T8529] bridge0: port 3(syz_tun) entered blocking state [ 189.256203][ T8528] qnx6: unable to read the first superblock [ 189.278486][ T8528] qnx6: unable to read the first superblock [ 189.310355][ T8532] /dev/rnullb0: Can't open blockdev [ 189.339833][ T8529] bridge0: port 3(syz_tun) entered disabled state [ 189.373256][ T8529] syz_tun: entered allmulticast mode [ 189.445848][ T8529] syz_tun: entered promiscuous mode [ 189.466798][ T8529] bridge0: port 3(syz_tun) entered blocking state [ 189.473660][ T8529] bridge0: port 3(syz_tun) entered forwarding state [ 189.680793][ T5915] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 189.802656][ T8543] /dev/rnullb0: Can't open blockdev [ 189.870710][ T5915] usb 4-1: device descriptor read/64, error -71 [ 189.947118][ T8549] /dev/rnullb0: Can't open blockdev [ 190.121516][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 190.166915][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 190.211131][ T8556] netlink: 28 bytes leftover after parsing attributes in process `syz.0.799'. [ 190.323275][ T5915] usb 4-1: device descriptor read/64, error -71 [ 190.397964][ T8571] /dev/rnullb0: Can't open blockdev [ 190.457097][ T8571] /dev/rnullb0: Can't open blockdev [ 190.463880][ T5915] usb usb4-port1: attempt power cycle [ 190.493243][ T8571] /dev/rnullb0: Can't open blockdev [ 190.514269][ T8571] /dev/rnullb0: Can't open blockdev [ 190.530466][ T8571] /dev/rnullb0: Can't open blockdev [ 190.548645][ T8571] /dev/rnullb0: Can't open blockdev [ 190.600111][ T8577] /dev/rnullb0: Can't open blockdev [ 190.609984][ T8571] /dev/rnullb0: Can't open blockdev [ 190.639238][ T8571] /dev/rnullb0: Can't open blockdev [ 190.654175][ T8571] /dev/rnullb0: Can't open blockdev [ 190.694446][ T8571] /dev/rnullb0: Can't open blockdev [ 190.715015][ T8571] /dev/rnullb0: Can't open blockdev [ 190.732060][ T8571] /dev/rnullb0: Can't open blockdev [ 190.748126][ T8571] /dev/rnullb0: Can't open blockdev [ 190.758648][ T8571] /dev/rnullb0: Can't open blockdev [ 190.771776][ T8571] /dev/rnullb0: Can't open blockdev [ 190.781992][ T8571] /dev/rnullb0: Can't open blockdev [ 190.790129][ T8571] /dev/rnullb0: Can't open blockdev [ 190.801763][ T8571] /dev/rnullb0: Can't open blockdev [ 190.809381][ T8571] /dev/rnullb0: Can't open blockdev [ 190.817216][ T8582] /dev/rnullb0: Can't open blockdev [ 190.827202][ T8571] /dev/rnullb0: Can't open blockdev [ 190.841788][ T8571] /dev/rnullb0: Can't open blockdev [ 190.852047][ T8571] /dev/rnullb0: Can't open blockdev [ 190.854735][ T5915] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 190.867350][ T8571] /dev/rnullb0: Can't open blockdev [ 190.881601][ T8571] /dev/rnullb0: Can't open blockdev [ 190.888786][ T8571] /dev/rnullb0: Can't open blockdev [ 190.901728][ T8571] /dev/rnullb0: Can't open blockdev [ 190.901768][ T5915] usb 4-1: device descriptor read/8, error -71 [ 190.912007][ T8571] /dev/rnullb0: Can't open blockdev [ 190.929981][ T8571] /dev/rnullb0: Can't open blockdev [ 190.936562][ T8571] /dev/rnullb0: Can't open blockdev [ 190.959284][ T8571] /dev/rnullb0: Can't open blockdev [ 190.970205][ T8571] /dev/rnullb0: Can't open blockdev [ 190.989153][ T8571] /dev/rnullb0: Can't open blockdev [ 191.001814][ T8571] /dev/rnullb0: Can't open blockdev [ 191.180773][ T5915] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 191.218654][ T8589] fuse: Bad value for 'fd' [ 191.250938][ T5915] usb 4-1: device descriptor read/8, error -71 [ 191.363588][ T5915] usb usb4-port1: unable to enumerate USB device [ 191.561850][ T8603] /dev/rnullb0: Can't open blockdev [ 191.812916][ T5936] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 191.963877][ T5936] usb 1-1: device descriptor read/64, error -71 [ 192.221552][ T5936] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 192.371296][ T5936] usb 1-1: device descriptor read/64, error -71 [ 192.482744][ T5936] usb usb1-port1: attempt power cycle [ 192.503267][ T8622] netlink: 12 bytes leftover after parsing attributes in process `syz.2.815'. [ 192.758165][ T8628] fuse: Bad value for 'fd' [ 192.852468][ T5936] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 192.901069][ T5936] usb 1-1: device descriptor read/8, error -71 [ 193.043923][ T8635] /dev/rnullb0: Can't open blockdev [ 193.140760][ T5936] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 193.195094][ T5936] usb 1-1: device descriptor read/8, error -71 [ 193.311776][ T5936] usb usb1-port1: unable to enumerate USB device [ 193.750206][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.823'. [ 194.100848][ T8666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.826'. [ 194.187094][ T8668] fuse: Bad value for 'fd' [ 194.760256][ T8688] syz.0.835: attempt to access beyond end of device [ 194.760256][ T8688] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 194.781011][ T8688] XFS (nbd0): SB validate failed with error -5. [ 195.054044][ T8709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 195.525087][ T8716] fuse: Bad value for 'fd' [ 195.781289][ T5922] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 195.967137][ T5922] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.013473][ T5922] usb 5-1: config 16 has an invalid interface number: 195 but max is 0 [ 196.060700][ T5922] usb 5-1: config 16 has no interface number 0 [ 196.066965][ T5922] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0xC has invalid maxpacket 1023 [ 196.108848][ T5922] usb 5-1: config 16 interface 195 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1024 [ 196.122370][ T5922] usb 5-1: config 16 interface 195 altsetting 128 endpoint 0xB has an invalid bInterval 251, changing to 11 [ 196.138003][ T5922] usb 5-1: config 16 interface 195 has no altsetting 0 [ 196.148247][ T5922] usb 5-1: New USB device found, idVendor=0421, idProduct=044d, bcdDevice=e6.ce [ 196.153754][ T8738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'. [ 196.167043][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.186863][ T5922] usb 5-1: Product: syz [ 196.200713][ T5922] usb 5-1: Manufacturer: syz [ 196.214103][ T5922] usb 5-1: SerialNumber: syz [ 196.237518][ T8716] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 196.260838][ T8716] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 196.531992][ T8716] /dev/rnullb0: Can't open blockdev [ 196.572696][ T5922] usb 5-1: bad CDC descriptors [ 196.644823][ T5922] usb 5-1: USB disconnect, device number 13 [ 197.011146][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.857'. [ 197.092808][ T8779] tipc: Started in network mode [ 197.098341][ T8779] tipc: Node identity d6cb9534034f, cluster identity 4711 [ 197.121514][ T8779] tipc: Enabled bearer , priority 0 [ 197.139488][ T8779] syzkaller0: MTU too low for tipc bearer [ 197.160742][ T8779] tipc: Disabling bearer [ 197.346414][ T8792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.415839][ T8792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.591932][ T5915] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 197.771465][ T5915] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 197.808904][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.824367][ T5915] usb 3-1: Product: syz [ 197.828594][ T5915] usb 3-1: Manufacturer: syz [ 197.876097][ T5915] usb 3-1: SerialNumber: syz [ 197.898361][ T5915] usb 3-1: config 0 descriptor?? [ 198.175165][ T5915] usb-storage 3-1:0.0: USB Mass Storage device detected [ 198.342772][ T5915] usb 3-1: USB disconnect, device number 11 [ 198.357002][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz.4.870'. [ 198.568297][ T8837] ceph: Path missing in source [ 198.719294][ T8843] /dev/rnullb0: Can't open blockdev [ 198.726631][ T5915] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 198.882768][ T5915] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 198.907611][ T5915] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 198.945406][ T5915] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 198.979799][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.006522][ T5915] usb 3-1: config 0 descriptor?? [ 199.310875][ T5969] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 199.452069][ T5915] kovaplus 0003:1E7D:2D50.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.2-1/input0 [ 199.470156][ T5969] usb 4-1: device descriptor read/64, error -71 [ 199.526486][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.534916][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.832117][ T983] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 199.906696][ T983] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 200.150098][ T5936] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 200.380162][ T5936] usb 5-1: Using ep0 maxpacket: 8 [ 200.471947][ T5936] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 200.504994][ T5936] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.539831][ T5936] usb 5-1: Product: syz [ 200.560747][ T5936] usb 5-1: Manufacturer: syz [ 200.579527][ T5936] usb 5-1: SerialNumber: syz [ 200.602494][ T5936] usb 5-1: config 0 descriptor?? [ 200.632876][ T5936] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 200.673233][ T5936] dvb-usb: bulk message failed: -22 (2/0) [ 200.679237][ T5936] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.729808][ T5936] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 200.758119][ T5936] usb 5-1: media controller created [ 200.809577][ T5936] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 200.901462][ T5936] dvb-usb: bulk message failed: -22 (1/0) [ 200.907311][ T5936] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 200.939876][ T8829] netlink: 92 bytes leftover after parsing attributes in process `syz.2.871'. [ 200.960539][ T5936] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 200.993379][ T5936] dvb-usb: schedule remote query interval to 50 msecs. [ 201.008150][ T5936] dvb-usb: bulk message failed: -22 (2/0) [ 201.022089][ T5936] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 201.062349][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.079008][ T5861] dvb-usb: error while querying for an remote control event. [ 201.170765][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.176770][ T5861] dvb-usb: error while querying for an remote control event. [ 201.240805][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.250228][ T5861] dvb-usb: error while querying for an remote control event. [ 201.320743][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.326626][ T5861] dvb-usb: error while querying for an remote control event. [ 201.400700][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.406752][ T5861] dvb-usb: error while querying for an remote control event. [ 201.470750][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.483299][ T5861] dvb-usb: error while querying for an remote control event. [ 201.550694][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.562315][ T5861] dvb-usb: error while querying for an remote control event. [ 201.630764][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.637998][ T5861] dvb-usb: error while querying for an remote control event. [ 201.710824][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.720018][ T5861] dvb-usb: error while querying for an remote control event. [ 201.790683][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.803203][ T5861] dvb-usb: error while querying for an remote control event. [ 201.870704][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.883819][ T5861] dvb-usb: error while querying for an remote control event. [ 201.960720][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 201.966738][ T5861] dvb-usb: error while querying for an remote control event. [ 202.103860][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 202.122103][ T5861] dvb-usb: error while querying for an remote control event. [ 202.200725][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 202.216789][ T5861] dvb-usb: error while querying for an remote control event. [ 202.300713][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 202.313805][ T5861] dvb-usb: error while querying for an remote control event. [ 202.390685][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 202.398820][ T5861] dvb-usb: error while querying for an remote control event. [ 202.470722][ T5861] dvb-usb: bulk message failed: -22 (1/0) [ 202.483276][ T5861] dvb-usb: error while querying for an remote control event. [ 202.543129][ T5861] usb 5-1: USB disconnect, device number 14 [ 213.954795][ T5187] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.963947][ T5187] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.972208][ T5187] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.980416][ T5187] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.988878][ T5187] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.014100][ T5876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.021682][ T5876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.030252][ T5876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.041099][ T5876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.048983][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.790760][ T1306] ================================================================== [ 215.799071][ T1306] BUG: KASAN: slab-use-after-free in handle_tx+0x1ec/0x610 [ 215.806766][ T1306] Read of size 8 at addr ffff88805b2f0020 by task aoe_tx0/1306 [ 215.814347][ T1306] [ 215.816708][ T1306] CPU: 0 UID: 0 PID: 1306 Comm: aoe_tx0 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 215.816736][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 215.816750][ T1306] Call Trace: [ 215.816758][ T1306] [ 215.816766][ T1306] dump_stack_lvl+0x189/0x250 [ 215.816800][ T1306] ? __virt_addr_valid+0x1c8/0x5c0 [ 215.816819][ T1306] ? rcu_is_watching+0x15/0xb0 [ 215.816844][ T1306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.816871][ T1306] ? rcu_is_watching+0x15/0xb0 [ 215.816895][ T1306] ? lock_release+0x4b/0x3e0 [ 215.816916][ T1306] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 215.816942][ T1306] ? __virt_addr_valid+0x1c8/0x5c0 [ 215.816958][ T1306] ? __virt_addr_valid+0x4a5/0x5c0 [ 215.816975][ T1306] print_report+0xca/0x240 [ 215.816994][ T1306] ? handle_tx+0x1ec/0x610 [ 215.817019][ T1306] kasan_report+0x118/0x150 [ 215.817042][ T1306] ? handle_tx+0x1ec/0x610 [ 215.817070][ T1306] handle_tx+0x1ec/0x610 [ 215.817102][ T1306] dev_hard_start_xmit+0x2d7/0x830 [ 215.817132][ T1306] __dev_queue_xmit+0x1b8d/0x3b50 [ 215.817157][ T1306] ? __dev_queue_xmit+0x27b/0x3b50 [ 215.817185][ T1306] ? rcu_is_watching+0x15/0xb0 [ 215.817212][ T1306] ? trace_sched_exit_tp+0x36/0x110 [ 215.817235][ T1306] ? __pfx___dev_queue_xmit+0x10/0x10 [ 215.817264][ T1306] ? do_raw_spin_lock+0x121/0x290 [ 215.817330][ T1306] ? do_raw_spin_unlock+0x122/0x240 [ 215.817365][ T1306] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 215.817400][ T1306] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.817428][ T1306] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.817461][ T1306] tx+0x6b/0x190 [ 215.817486][ T1306] ? __pfx_tx+0x10/0x10 [ 215.817510][ T1306] kthread+0x1cd/0x3e0 [ 215.817537][ T1306] ? __pfx_kthread+0x10/0x10 [ 215.817559][ T1306] ? __pfx_default_wake_function+0x10/0x10 [ 215.817583][ T1306] ? __kthread_parkme+0x7b/0x200 [ 215.817612][ T1306] ? __kthread_parkme+0x1a1/0x200 [ 215.817645][ T1306] kthread+0x711/0x8a0 [ 215.817665][ T1306] ? __pfx_kthread+0x10/0x10 [ 215.817686][ T1306] ? __pfx_kthread+0x10/0x10 [ 215.817706][ T1306] ? _raw_spin_unlock_irq+0x23/0x50 [ 215.817733][ T1306] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.817763][ T1306] ? __pfx_kthread+0x10/0x10 [ 215.817781][ T1306] ret_from_fork+0x3f9/0x770 [ 215.817811][ T1306] ? __pfx_ret_from_fork+0x10/0x10 [ 215.817841][ T1306] ? __switch_to_asm+0x39/0x70 [ 215.817861][ T1306] ? __switch_to_asm+0x33/0x70 [ 215.817880][ T1306] ? __pfx_kthread+0x10/0x10 [ 215.817899][ T1306] ret_from_fork_asm+0x1a/0x30 [ 215.817928][ T1306] [ 215.817935][ T1306] [ 216.064552][ T5876] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 216.065324][ T1306] Allocated by task 6888: [ 216.065341][ T1306] kasan_save_track+0x3e/0x80 [ 216.074799][ T5876] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 216.076668][ T1306] __kasan_kmalloc+0x93/0xb0 [ 216.083206][ T5876] Bluetooth: hci4: command tx timeout [ 216.088361][ T1306] __kmalloc_cache_noprof+0x230/0x3d0 [ 216.099763][ T5876] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 216.103834][ T1306] alloc_tty_struct+0xa6/0x780 [ 216.103871][ T1306] tty_init_dev+0x59/0x4d0 [ 216.103898][ T1306] tty_open+0x5ab/0xd10 [ 216.103918][ T1306] chrdev_open+0x4cc/0x5e0 [ 216.118124][ T5876] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 216.120044][ T1306] do_dentry_open+0x953/0x13f0 [ 216.126161][ T5876] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 216.128791][ T1306] vfs_open+0x3b/0x340 [ 216.151586][ T1306] path_openat+0x2ee5/0x3830 [ 216.156296][ T1306] do_filp_open+0x1fa/0x410 [ 216.160848][ T1306] do_sys_openat2+0x121/0x1c0 [ 216.165560][ T1306] __x64_sys_openat+0x138/0x170 [ 216.170423][ T1306] do_syscall_64+0xfa/0x3b0 [ 216.175029][ T1306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.181014][ T1306] [ 216.183345][ T1306] Freed by task 5935: [ 216.187315][ T1306] kasan_save_track+0x3e/0x80 [ 216.192023][ T1306] kasan_save_free_info+0x46/0x50 [ 216.197063][ T1306] __kasan_slab_free+0x5b/0x80 [ 216.201823][ T1306] kfree+0x18e/0x440 [ 216.205712][ T1306] process_scheduled_works+0xade/0x17b0 [ 216.211352][ T1306] worker_thread+0x8a0/0xda0 [ 216.216029][ T1306] kthread+0x711/0x8a0 [ 216.220092][ T1306] ret_from_fork+0x3f9/0x770 [ 216.224683][ T1306] ret_from_fork_asm+0x1a/0x30 [ 216.229532][ T1306] [ 216.231916][ T1306] Last potentially related work creation: [ 216.237715][ T1306] kasan_save_stack+0x3e/0x60 [ 216.242411][ T1306] kasan_record_aux_stack+0xbd/0xd0 [ 216.247626][ T1306] insert_work+0x3d/0x330 [ 216.251998][ T1306] __queue_work+0xcd2/0xfb0 [ 216.256606][ T1306] queue_work_on+0x181/0x270 [ 216.261212][ T1306] tty_release_struct+0xb8/0xd0 [ 216.266166][ T1306] tty_release+0xcb0/0x1640 [ 216.271003][ T1306] __fput+0x449/0xa70 [ 216.275011][ T1306] task_work_run+0x1d1/0x260 [ 216.279608][ T1306] do_exit+0x6b5/0x2300 [ 216.283944][ T1306] do_group_exit+0x21c/0x2d0 [ 216.288543][ T1306] get_signal+0x1286/0x1340 [ 216.293068][ T1306] arch_do_signal_or_restart+0x9a/0x750 [ 216.298627][ T1306] exit_to_user_mode_loop+0x75/0x110 [ 216.303933][ T1306] do_syscall_64+0x2bd/0x3b0 [ 216.308597][ T1306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.314502][ T1306] [ 216.316854][ T1306] The buggy address belongs to the object at ffff88805b2f0000 [ 216.316854][ T1306] which belongs to the cache kmalloc-cg-2k of size 2048 [ 216.331258][ T1306] The buggy address is located 32 bytes inside of [ 216.331258][ T1306] freed 2048-byte region [ffff88805b2f0000, ffff88805b2f0800) [ 216.345079][ T1306] [ 216.347408][ T1306] The buggy address belongs to the physical page: [ 216.353844][ T1306] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b2f0 [ 216.362724][ T1306] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 216.371221][ T1306] memcg:ffff888033e13c81 [ 216.375479][ T1306] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 216.383138][ T1306] page_type: f5(slab) [ 216.387129][ T1306] raw: 00fff00000000040 ffff88801a84b3c0 ffffea0000d0d400 dead000000000002 [ 216.395727][ T1306] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888033e13c81 [ 216.404333][ T1306] head: 00fff00000000040 ffff88801a84b3c0 ffffea0000d0d400 dead000000000002 [ 216.413017][ T1306] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888033e13c81 [ 216.421696][ T1306] head: 00fff00000000003 ffffea00016cbc01 00000000ffffffff 00000000ffffffff [ 216.430472][ T1306] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 216.439142][ T1306] page dumped because: kasan: bad access detected [ 216.445566][ T1306] page_owner tracks the page as allocated [ 216.451285][ T1306] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5866, tgid 5866 (syz-executor), ts 91705835804, free_ts 30624878081 [ 216.472657][ T1306] post_alloc_hook+0x240/0x2a0 [ 216.477428][ T1306] get_page_from_freelist+0x21e4/0x22c0 [ 216.483009][ T1306] __alloc_frozen_pages_noprof+0x181/0x370 [ 216.488819][ T1306] alloc_pages_mpol+0x232/0x4a0 [ 216.493850][ T1306] allocate_slab+0x8a/0x370 [ 216.498465][ T1306] ___slab_alloc+0xbeb/0x1410 [ 216.503242][ T1306] __kmalloc_node_track_caller_noprof+0x2f8/0x4e0 [ 216.509683][ T1306] kmemdup_noprof+0x2b/0x70 [ 216.514213][ T1306] neigh_sysctl_register+0x9f/0xa80 [ 216.519545][ T1306] addrconf_sysctl_register+0xb3/0x1c0 [ 216.525288][ T1306] ipv6_add_dev+0xd46/0x1370 [ 216.529906][ T1306] addrconf_notify+0x794/0x1010 [ 216.534855][ T1306] notifier_call_chain+0x1b6/0x3e0 [ 216.539979][ T1306] register_netdevice+0x1608/0x1ae0 [ 216.545272][ T1306] nsim_create+0xae8/0xf10 [ 216.549689][ T1306] __nsim_dev_port_add+0x6b6/0xb10 [ 216.554819][ T1306] page last free pid 1 tgid 1 stack trace: [ 216.560737][ T1306] __free_frozen_pages+0xbc4/0xd30 [ 216.565985][ T1306] free_contig_range+0x1bd/0x4a0 [ 216.570934][ T1306] destroy_args+0x69/0x660 [ 216.575359][ T1306] debug_vm_pgtable+0x39f/0x3b0 [ 216.580209][ T1306] do_one_initcall+0x233/0x820 [ 216.584976][ T1306] do_initcall_level+0x104/0x190 [ 216.589949][ T1306] do_initcalls+0x59/0xa0 [ 216.594382][ T1306] kernel_init_freeable+0x334/0x4b0 [ 216.599676][ T1306] kernel_init+0x1d/0x1d0 [ 216.604023][ T1306] ret_from_fork+0x3f9/0x770 [ 216.608638][ T1306] ret_from_fork_asm+0x1a/0x30 [ 216.613403][ T1306] [ 216.615738][ T1306] Memory state around the buggy address: [ 216.621536][ T1306] ffff88805b2eff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.629594][ T1306] ffff88805b2eff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 216.637674][ T1306] >ffff88805b2f0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.645731][ T1306] ^ [ 216.650967][ T1306] ffff88805b2f0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.659048][ T1306] ffff88805b2f0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 216.667212][ T1306] ================================================================== [ 216.675994][ T1306] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 216.683481][ T1306] CPU: 0 UID: 0 PID: 1306 Comm: aoe_tx0 Not tainted 6.16.0-next-20250807-syzkaller #0 PREEMPT(full) [ 216.694442][ T1306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 216.704503][ T1306] Call Trace: [ 216.707792][ T1306] [ 216.710733][ T1306] dump_stack_lvl+0x99/0x250 [ 216.715473][ T1306] ? __asan_memcpy+0x40/0x70 [ 216.720660][ T1306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.725910][ T1306] ? __pfx__printk+0x10/0x10 [ 216.730537][ T1306] vpanic+0x281/0x750 [ 216.734531][ T1306] ? __pfx_vpanic+0x10/0x10 [ 216.739045][ T1306] ? irqentry_exit+0x74/0x90 [ 216.743739][ T1306] panic+0xb9/0xc0 [ 216.747483][ T1306] ? __pfx_panic+0x10/0x10 [ 216.751903][ T1306] ? _raw_spin_unlock_irqrestore+0xa8/0x110 [ 216.757814][ T1306] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.763727][ T1306] ? is_module_address+0x17/0xf0 [ 216.768696][ T1306] ? handle_tx+0x1ec/0x610 [ 216.773150][ T1306] check_panic_on_warn+0x89/0xb0 [ 216.778106][ T1306] ? handle_tx+0x1ec/0x610 [ 216.782624][ T1306] end_report+0x78/0x160 [ 216.786871][ T1306] kasan_report+0x129/0x150 [ 216.791382][ T1306] ? handle_tx+0x1ec/0x610 [ 216.795813][ T1306] handle_tx+0x1ec/0x610 [ 216.800168][ T1306] dev_hard_start_xmit+0x2d7/0x830 [ 216.805301][ T1306] __dev_queue_xmit+0x1b8d/0x3b50 [ 216.810560][ T1306] ? __dev_queue_xmit+0x27b/0x3b50 [ 216.815893][ T1306] ? rcu_is_watching+0x15/0xb0 [ 216.820681][ T1306] ? trace_sched_exit_tp+0x36/0x110 [ 216.825985][ T1306] ? __pfx___dev_queue_xmit+0x10/0x10 [ 216.831373][ T1306] ? do_raw_spin_lock+0x121/0x290 [ 216.836446][ T1306] ? do_raw_spin_unlock+0x122/0x240 [ 216.841715][ T1306] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.847626][ T1306] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.852836][ T1306] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.858149][ T1306] tx+0x6b/0x190 [ 216.861717][ T1306] ? __pfx_tx+0x10/0x10 [ 216.865922][ T1306] kthread+0x1cd/0x3e0 [ 216.870008][ T1306] ? __pfx_kthread+0x10/0x10 [ 216.874703][ T1306] ? __pfx_default_wake_function+0x10/0x10 [ 216.880626][ T1306] ? __kthread_parkme+0x7b/0x200 [ 216.885627][ T1306] ? __kthread_parkme+0x1a1/0x200 [ 216.890671][ T1306] kthread+0x711/0x8a0 [ 216.894846][ T1306] ? __pfx_kthread+0x10/0x10 [ 216.899537][ T1306] ? __pfx_kthread+0x10/0x10 [ 216.904129][ T1306] ? _raw_spin_unlock_irq+0x23/0x50 [ 216.909338][ T1306] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.914630][ T1306] ? __pfx_kthread+0x10/0x10 [ 216.919257][ T1306] ret_from_fork+0x3f9/0x770 [ 216.923870][ T1306] ? __pfx_ret_from_fork+0x10/0x10 [ 216.929022][ T1306] ? __switch_to_asm+0x39/0x70 [ 216.933787][ T1306] ? __switch_to_asm+0x33/0x70 [ 216.938563][ T1306] ? __pfx_kthread+0x10/0x10 [ 216.943175][ T1306] ret_from_fork_asm+0x1a/0x30 [ 216.948143][ T1306] [ 216.951453][ T1306] Kernel Offset: disabled [ 216.955780][ T1306] Rebooting in 86400 seconds..