last executing test programs: 3m43.151521142s ago: executing program 0 (id=592): madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0) r0 = syz_clone(0x9000000, &(0x7f0000000000)="b5afc9a9570cf8edf295ad1ce1cbbe0fecb49b1859a6e866e34c3f27631404e2dc6b6269b50f92ff74d7ccd79bc507fe3d2b5ab75513bc2c396a8aad62a4ea4b98f6aca3fde73abdf30ac07e5349ace6e27d7b3154c6b5c31ffd40663c04d9784c68449263e03bd146963a0142684d49f20bb8b82401d6679fa6ca7af0e0fd2ef8f6f591015b67d4b09dbe9d19f867102ad86435e874f3214cbba7d2d1ad721d226ecae20fa5bdcb2216c085ba9b8e", 0xaf, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)="07caf894b4edd6d54cb2a5e1993469ccd07c238b16c0fcd339b7fc184bc87adca5e7e9fb0594818ba2c8f92d1a5f31bd3e62f90899dd2f3cc33ca3385ba8d20abb95629860c7909ddf0b623b4c803ff30605a822bd67e51736fab8505692eb66bbef5561970c5b4717e49fb5a4078a2c3b65fcdfad6a3f1ea26e68c00107ebd31add92c40e34c285e2e9d4f6bed33a88ad786d35601aef4bf74ba63f76f9c1b79decec99731f18a3c202ccdadbadf404c2cfcc7904408d223d019590459fca41") ptrace$poke(0x5, r0, &(0x7f0000000200), 0xf38) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000280), 0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x7f}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000340)={r3, 0x4, 0x8, 0x2}, 0x10) r4 = syz_open_procfs$namespace(r0, &(0x7f0000000380)='ns/pid_for_children\x00') ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f00000003c0)=0xee5) ptrace$ARCH_GET_CPUID(0x1e, r0, 0x0, 0x1011) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000440)=@req={0x28, &(0x7f0000000400)={'bond_slave_0\x00', @ifru_flags=0x4000}}) syz_emit_vhci(&(0x7f0000000480)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x74}, "7e5f201317a06f4c97c2d7497c384adb161a0c46b6da7d749dbb8304c7dcbe92377d8e33942f0e76759b82b4ad924e4f4807c6c0fcbe147f8a5d4e0539453f32795026ae71814743f8926112ad51dee39898ea9aa89fdb2873616b24da626464aa95277c35a4ac77fd5253ef030cc6ece90fd5fd"}, 0x78) ioctl$NS_GET_USERNS(r4, 0xb701, 0x0) syz_emit_vhci(&(0x7f0000000500)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) r5 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000600)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x6, 0x0, 0x8, {0x77359400}, {0x77359400}, {0x4}, 0x1, @canfd={{0x4}, 0x23, 0x2, 0x0, 0x0, "11cf78dcc6d0d69c2ce421a6ad2692227356c2725904abde0ebf46dafcb8fe896a512c4363eb443178f5754bc98418d3860d7bebbfc70380f7eddf4f98ef2992"}}, 0x80}, 0x1, 0x0, 0x0, 0x20000840}, 0x40000000) r6 = accept4(r2, &(0x7f0000000640)=@x25, &(0x7f00000006c0)=0x80, 0x80800) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000700)={0x1, 0x0, 0x40, 0x40, 0xffffffffffffffff}) close_range(r2, r7, 0x2) sendmsg$can_bcm(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x6, 0x4b0, 0xff80000, {}, {0x77359400}, {0x2, 0x1, 0x1}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x1e, 0x2, 0x0, 0x0, "b538e1bee14e3ac828b2de617b03fdc457ffc47a945bbc5278460ec7a30c7e0dcfef5b9bf0b4db6fdd9e7c7a6f14ee91e16866487eaeba9b1b55b2690a26f3b5"}}, 0x80}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000084) listen(r2, 0x7fff) syz_init_net_socket$ax25(0x3, 0x2, 0xce) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000900)={'syztnl0\x00', &(0x7f0000000880)={'syztnl1\x00', r1, 0x4, 0x6, 0x3, 0xfff, 0x21, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0x10, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000009c0)={'erspan0\x00', &(0x7f0000000940)={'ip_vti0\x00', r1, 0x1, 0x40, 0x171b1cab, 0xfffffff8, {{0x17, 0x4, 0x3, 0x20, 0x5c, 0x68, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @multicast2, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x1c, 0x6b, 0x1, 0xd, [{@multicast2, 0xfff}, {@multicast2, 0x1565}, {@empty, 0x3}]}, @rr={0x7, 0xf, 0xdf, [@remote, @empty, @local]}, @ssrr={0x89, 0x7, 0x51, [@dev={0xac, 0x14, 0x14, 0x20}]}, @cipso={0x86, 0x12, 0x3, [{0x2, 0xc, "9347dad2955fb6c088a5"}]}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000c40)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000c00)={&(0x7f0000000a00)={0x1c4, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x4}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x4}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x40000}, 0x24000) 3m42.786386425s ago: executing program 0 (id=596): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48045}, 0x40) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0), 0x303001, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000000) write$midi(r3, &(0x7f0000000340)="5a97f700834d720972c0819944c11243e4e0abe1584a441e09a35a58c0908ce8e594913a5745f990b4f5f5c0523e6e1761b3215146af", 0x36) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f0000000380), 0x8) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x3, 0x5) ioctl$FIDEDUPERANGE(r5, 0xc0189436, &(0x7f0000000400)={0x4, 0x1000, 0x2, 0x0, 0x0, [{{r3}, 0x9}, {{r3}, 0x90f7}]}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r1, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040002}, 0x42000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, 0x0, 0x800, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x35}, @void, @val={0xc, 0x99, {0x3d5, 0x4}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x40040) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000006c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000940)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000900)={&(0x7f0000000700)={0x1d0, r6, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x3c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a5d5731}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x38}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46611341}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdc}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0xb8, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xff}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x354ba9db}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66ec4aec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x42}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x375e6572}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x362be4a6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dba3138}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x477feee5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17861509}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7120a82b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1ab3c99c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc8ac5a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47bbd953}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e47dcb1}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x78, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x657db69a}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15cb7d3c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x52609d79}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f176109}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66099b35}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6a9e0571}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x31}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x36b6cc38}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37773004}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb}]}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x80}, 0x4) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r0) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x64, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x3}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x6}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004084}, 0x20000000) 3m42.677113461s ago: executing program 0 (id=597): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x6, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x73bc80, 0x0) mknodat$loop(r1, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000280)='./file1\x00') r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r3, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) 3m42.491026929s ago: executing program 0 (id=598): r0 = socket$netlink(0x10, 0x3, 0x0) brk(0x8) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00^\x00\r'], 0x28}], 0x1}, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000100)={{0x2, 0x4e23, @multicast2}, {0x6, @remote}, 0x52, {0x2, 0x4e24, @broadcast}, 'caif0\x00'}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01"]) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = userfaultfd(0x800) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x15) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendto$inet(r8, &(0x7f00000008c0)="8932edfc10e7b081ee9bd108ca26209b23", 0x11, 0x64008084, 0x0, 0x0) sendmsg$nl_generic(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="e000000010009def29bd7000fcdbdf2502000000c90028800400a0801e108813e26f5e64b8dde63e7e568233732f65d65ea9d6861078446939505f72e565658ac621b3c382d690b127282170f3d39b7dfe82e0392316ad499bb51601a6dd0fa575ff02b507f689ef878cd209223dc3d58fcce4197cdd86e6e0bccaf37a5803dcda106bfa6789ac2f5da32871969b2393a6a1c8a3216810b92e2118d6a80ec909b9fbd227e19e13795a0d632ec03ae094b6e2676152b09de57bec1c2eadd4d4848382327b85a2cb31eb2417abd935e50200f2f4c96b8f33c7aa00000000000000"], 0xe0}, 0x1, 0x0, 0x0, 0x40050}, 0x20044010) sendto$packet(r5, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r6}, 0x14) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x282}) 3m41.336692528s ago: executing program 0 (id=607): ioprio_set$pid(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, 0xffffffffffffffff, 0x0) sendfile(r0, r1, 0x0, 0x7) 3m41.089111383s ago: executing program 0 (id=610): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060300000000000000000003000008040007800908020073797a310000000005000400fe000000050005000200000005000100060000000d0003006c6973743a73657400000000"], 0x4c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9cceba4701fb65ec7dcdc97606d2f3a00818e9ab4111d7b26527f59ad44e03dc9e9b0939b4eaa9b65f02e042a043676ce4ddbb7929f3b97effb05b245ac39a200b6c2859ad0870c5a0fa1c15362c22638a3f638a", @ANYRES16=r1, @ANYBLOB="290027bd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="0500350006000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9cceba4701fb65ec7dcdc97606d2f3a00818e9ab4111d7b26527f59ad44e03dc9e9b0939b4eaa9b65f02e042a043676ce4ddbb7929f3b97effb05b245ac39a200b6c2859ad0870c5a0fa1c15362c22638a3f638a", @ANYRES16=r1, @ANYBLOB="290027bd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="0500350006000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) (async) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c, 0x5, 0x0, {0x0, 0x0, 0x2000000000000}}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x30, 0x36, 0x33, 0x31, 0x33, 0x38, 0x30], 0x2d, [0x64, 0x33, 0x0, 0x30], 0x2d, [0x32, 0x33, 0x37, 0x36], 0x2d, [0x62, 0x30, 0x31, 0x32], 0x2d, [0x39, 0x35, 0x62, 0x0, 0x62, 0x31, 0x35, 0x62]}}}], 0x6b}}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x190}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x190}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) userfaultfd(0x80001) (async) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r9, @ANYBLOB="01002c1eb802dd5c9d5501cc530cbebd7000fedbdf25180000000e0001006e65746465767369006e65747673696d300000080003000300000008000b000b00000000120001000000060011000400000008000b000700"/97], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40400c0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r9, @ANYBLOB="01002c1eb802dd5c9d5501cc530cbebd7000fedbdf25180000000e0001006e65746465767369006e65747673696d300000080003000300000008000b000b00000000120001000000060011000400000008000b000700"/97], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40400c0) syz_io_uring_setup(0x2bd2, &(0x7f0000000280)={0x0, 0x71d7, 0x200, 0x3, 0x1d0}, &(0x7f0000000000), &(0x7f00000000c0)) (async) r10 = syz_io_uring_setup(0x2bd2, &(0x7f0000000280)={0x0, 0x71d7, 0x200, 0x3, 0x1d0}, &(0x7f0000000000), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000864000/0x4000)=nil, 0x4000, 0x4, 0x80010, r10, 0x8000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 3m26.072596655s ago: executing program 32 (id=610): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060300000000000000000003000008040007800908020073797a310000000005000400fe000000050005000200000005000100060000000d0003006c6973743a73657400000000"], 0x4c}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9cceba4701fb65ec7dcdc97606d2f3a00818e9ab4111d7b26527f59ad44e03dc9e9b0939b4eaa9b65f02e042a043676ce4ddbb7929f3b97effb05b245ac39a200b6c2859ad0870c5a0fa1c15362c22638a3f638a", @ANYRES16=r1, @ANYBLOB="290027bd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="0500350006000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="9cceba4701fb65ec7dcdc97606d2f3a00818e9ab4111d7b26527f59ad44e03dc9e9b0939b4eaa9b65f02e042a043676ce4ddbb7929f3b97effb05b245ac39a200b6c2859ad0870c5a0fa1c15362c22638a3f638a", @ANYRES16=r1, @ANYBLOB="290027bd7000ffdbdf250f00000008000300", @ANYRES32=r2, @ANYBLOB="0500350006000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0), 0x0) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) (async) write$FUSE_BMAP(r6, &(0x7f0000000080)={0x18, 0x0, 0x0, {0x4}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c, 0x5, 0x0, {0x0, 0x0, 0x2000000000000}}, 0x8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x800, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@aname={'aname', 0x3d, 'wfdno'}}], [{@fsuuid={'fsuuid', 0x3d, {[0x38, 0x30, 0x36, 0x33, 0x31, 0x33, 0x38, 0x30], 0x2d, [0x64, 0x33, 0x0, 0x30], 0x2d, [0x32, 0x33, 0x37, 0x36], 0x2d, [0x62, 0x30, 0x31, 0x32], 0x2d, [0x39, 0x35, 0x62, 0x0, 0x62, 0x31, 0x35, 0x62]}}}], 0x6b}}) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r7, &(0x7f00000029c0)={0x2020}, 0x2020) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x190}) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, 0x0, 0x190}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) userfaultfd(0x80001) (async) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000000000/0xc00000)=nil, 0xc00000}, 0x3}) close(0x3) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r9, @ANYBLOB="01002c1eb802dd5c9d5501cc530cbebd7000fedbdf25180000000e0001006e65746465767369006e65747673696d300000080003000300000008000b000b00000000120001000000060011000400000008000b000700"/97], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40400c0) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r9, @ANYBLOB="01002c1eb802dd5c9d5501cc530cbebd7000fedbdf25180000000e0001006e65746465767369006e65747673696d300000080003000300000008000b000b00000000120001000000060011000400000008000b000700"/97], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x40400c0) syz_io_uring_setup(0x2bd2, &(0x7f0000000280)={0x0, 0x71d7, 0x200, 0x3, 0x1d0}, &(0x7f0000000000), &(0x7f00000000c0)) (async) r10 = syz_io_uring_setup(0x2bd2, &(0x7f0000000280)={0x0, 0x71d7, 0x200, 0x3, 0x1d0}, &(0x7f0000000000), &(0x7f00000000c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000864000/0x4000)=nil, 0x4000, 0x4, 0x80010, r10, 0x8000000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.123817415s ago: executing program 4 (id=2204): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x68200, 0x0) (async) r1 = socket$igmp(0x2, 0x3, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x14) (async) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) (async) chdir(&(0x7f0000000080)='./file0\x00') mount$nfs(&(0x7f00000001c0)='>/.4\x8e\xc5\x16+\xec\xf6\bP\xca.v%\x05k\xa9\xcb\x00.\xa1\x82\xb5F\x03\xb8\x04\xd6%\x91-a\xb2\xd5\x00\xe5\xa5V8\x16sd@F\r\xb2Y\x8b!r~\xc1\x02\xee,\x93\a\xa2{}h\xaa\xc1e\xc0\x8e\xf4;\x7f\x90\\\'\xc3\r\x9a\x8d\x1d\x86\xff\x03\x973hr\xa3\"w\xf2\xea\xff\xb2\xe3\x9c\x81-\x92\x85\xa4\xf8\'\xc7\x11\xf4\x19\xa0\x1c\x03\x14\xc4P\\\x95h\xb5\x9b\xa3\x1fG5+\x84\xc3(\'\tCA6^)\xa73\xa4|\x04\x84\x03\xadQ\xd1\xf8\xea8\\\x97{F4\xdc\x99)b\xdb.\x9b\xfd2e{#\x8d\xaa\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0) (async) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000000)={{0x0, 0x989680}}, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) (async) getsockopt$inet_int(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)) r4 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x40000000}, 0xc) (async) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f00000000c0)='$+\x00', &(0x7f0000000180)='\x00', 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) dup(r5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8e82bf41babb45d8, r5, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r0, 0xc4514000) 1.049828763s ago: executing program 3 (id=2205): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) clock_gettime(0x7, &(0x7f00000000c0)) clock_gettime(0x0, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x429202, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) write(r0, &(0x7f0000000000)="fb196d", 0x3) 1.001537321s ago: executing program 4 (id=2206): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000000)={0x3a}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000000, 0x12, r0, 0xc9560000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x3, 0x4) 960.26057ms ago: executing program 3 (id=2208): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024f01c173a49b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$setregset(0x4205, r0, 0x1, &(0x7f0000000380)={&(0x7f0000000480)="f62611ea80d4ffee0646fcbd7df0b9db92702397a47d70db8c0a7446d7d7e9a08b482294c994333b694d606fce4ea5be9f1c841f792edc5548b6d53f1b1708db242761ec69731aaaf2c48c73c0f75e0c1f8c1ae7740a92a64ea417fe54ea14310c9745c3d1144f398c0f39b092316ef69c9380e41d4a29f70b0c9147ca10500fd8d94a05fc1919175694533afc4486a41d85dde7aba6d3563af94631f88b6112919740db4baf2aafb90a2bb0b929ab060a371d1f768b542c", 0xb8}) 905.44399ms ago: executing program 4 (id=2209): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000000)=0x3, 0x4) 904.875992ms ago: executing program 2 (id=2210): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) r2 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') preadv(r3, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x2, 0x5) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) copy_file_range(r4, 0x0, r4, 0x0, 0x7, 0x0) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) (async) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) (async) socket$inet6(0x10, 0x2, 0x4) (async) sendto$inet6(r2, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00') (async) preadv(r3, &(0x7f0000011480)=[{&(0x7f00000000c0)=""/186, 0xba}], 0x1, 0x2, 0x5) (async) openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) copy_file_range(r4, 0x0, r4, 0x0, 0x7, 0x0) (async) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) (async) 854.473362ms ago: executing program 4 (id=2211): ioprio_set$pid(0x1, 0x0, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$vsock_stream(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) flistxattr(r1, &(0x7f0000000280)=""/110, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89a1}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x48802) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000004000000a2"]) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f0000000380)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r4 = accept4$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e, 0x800) getsockopt(r4, 0xe, 0x7, &(0x7f00000001c0)=""/76, &(0x7f0000000240)=0x4c) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x7) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r6) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r5, 0x7dfff000) 827.05484ms ago: executing program 1 (id=2212): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000000c0)=0x2, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r2, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, 0x0, &(0x7f00000001c0)) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e5f, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff}, 0x1c) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000002c0)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'lo\x00', 0x5}, 0x18) sendmmsg$inet(r3, &(0x7f0000000640)=[{{&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000400)="1b3e10d1303a344a12fd07a6b63d0cbfbcaa4c7f67a50f36fda63bdd1fe747fe32503fa678e0053d861a4f04408d8524b44ec7752ba8754ade38dea1eeb3b79c89dcaaab52a54d13db4a9b1b08dfa9f802c1cfc96a0c1fb0d85fb4196319d540c4a74cc7ab08235c7991ea7a9947a171aec51479e2babcd7e0ba7a1a05db9bc00f7522e7cb432faa4489bca005a2440c17d9bc19fb0dcd27ee9089252f5a94810f2ba357d2945a9a627732715a3a0a0ccfebabd0fda63d2addbcfc744f66487d2ec7e45bb1d1c753a224fd1fe6a62f31a7fdc1a4b2f177bf7ca0a717f16cd837d76d8293e4702943c951df992297b46b53c31920", 0xf4}, {&(0x7f0000000300)="885c711fbce409dd5b", 0x9}, {&(0x7f0000000500)="4df3510c", 0x4}, {&(0x7f0000000540)="c523215b86a030e5de52e4acaa6734bf2f5d4d1e885738b64610ef734413be0bdd9428286327a072d793c67319335559ecf77ba01276824e038fb715acaf3b76163865604dca9af8b1310cb598b233d45c25a1e776d95517a2c11cf064b008adab57fbcb3494ddf5341eb23b043f51c6528595f8d9d68804046677bca8ec9968dadb6cdb5cedac351f44bb700db1625252289d18ebaa7a13ca770935ffe9282e01928b", 0xa3}], 0x4}}], 0x1, 0x801) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r8, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000100)={r3, r7, 0x1, 0x0, 0x0, 0x9, 0x1, 0x81, 0x9, 0x6, 0x1, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000200)=0xc, 0x4) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x100000000) r9 = dup2(r4, r4) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x5) r10 = syz_open_dev$vcsa(&(0x7f0000000040), 0x0, 0x2240) lseek(r10, 0x0, 0x0) 684.948607ms ago: executing program 3 (id=2213): read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) fstat(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000020c0)=0x0) setresuid(r0, r2, r4) (async) setuid(r0) (async) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000002100), 0x2, 0x0) fstat(r5, &(0x7f0000002140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$6lowpan_enable(r5, &(0x7f00000021c0)='0', 0x1) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sync_file_range(r8, 0x5, 0xeda, 0x0) (async) socket$netlink(0x10, 0x3, 0x12) (async) r9 = socket(0x11, 0x4, 0x4) r10 = syz_open_dev$video(&(0x7f0000002200), 0x0, 0x400) ioctl$VIDIOC_G_INPUT(r10, 0x80045626, &(0x7f0000002240)) (async) bind$netlink(r8, &(0x7f0000002280)={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f00000022c0)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@local}}, &(0x7f00000023c0)=0xe8) setreuid(r12, r0) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000002880)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002840)={&(0x7f0000002440)={{0x14}, [@NFT_MSG_DELRULE={0x120, 0x8, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_USERDATA={0xec, 0x7, 0x1, 0x0, "8d8da8ce0402d923d853a1d1f3921aa52c72a83f757726e6e4b78d08147363abc2b5262daa0899a92338c71c2d9b5d42245b4cffb8b70eb7c1865dc6a7e9e5f225801dcfdd8fcca2af00e616c654bbfa43a4225ffea451f2ac1bd7d16416082211c536805be8ffdf922270fb155288325cfc32bc26df501ce42bd3859848737a33d77c3a35cec3c481cebf90c4da9ef39e611fbe339cffe052d73e53d31b3bdf7d80d788aac99241294d23889f8ad29c04f9e302f06f26abc4a08591152eb7a7abf7cf72f474739fb40b09dc5dc69844319895ed4f17483377c0a2aacd450b7ee6202605e591eba4"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x1fc, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_USERDATA={0xdf, 0x8, "9d7a4857b1399e06884f791382fd7393733b05216db3e146680918d7917852aa8608fad19342c7014f8fd02b57baf3adef61e6c6b48acd9988d38cbcfbecdd823a79e76fa4bce897add350094bfcf5089d4a19463354db5bcfa5d2cbe3f38152e35a3325beda1e352112cbd75b168c4f3a126631ff351f3f0fa75274afdab9401292fa2476751429d0ad43831821c13733db0445f0e8d5d7ea598c14090b55305d84dfca1c3aa1e9cf2d5f4da0f972fb06c3f7f180c2417fd744884c12264bc068af6204f470d0de9dc7ccda0589183530f2d93bec88bb8f1f58d8"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_USERDATA={0xcf, 0x8, "51925d8e3a7c8c81c85606ed22ff390cf747d3e2dc04a35f596d8f1753453c911519ed889d7a1bb91186de25e698d21ae5ec9f7e8d5bfcbc06d0bd4d1cc2ab873cc688a4d38504743f196494bacc27478056bd65e89fd863203b5ac61ed7a019502a79ee5e968aa1a024b5e8c36cf6bfaa2ecbf421e0dc771422ebd26d282518dc9fe312eb33759ba492e7bab5bd4e3c0d6d0aeff6fea1e42026256da72fa91d5d6272909f7669223000a112598b3b33876eb336ec44cf7af748e56fdf9d3c6752621aaabe1b381eccbc55"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x201}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x32}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x9}, @NFT_OBJECT_SYNPROXY=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3ec}}, 0x9040) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f00000028c0)=@sg0, r2, &(0x7f0000002900)={0xfffffffffffffffa, 0x62e, 0x1}) (async) sendfile(r5, r8, &(0x7f0000002940)=0x5, 0xffffffffffffffff) (async) r13 = syz_genetlink_get_family_id$team(&(0x7f00000029c0), r9) sendmsg$TEAM_CMD_NOOP(r9, &(0x7f0000002c00)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002a00)={0x1c0, r13, 0x20, 0x70bd25, 0x25dfdbfb, {}, [{{0x8, 0x1, r11}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xe9d8}}}]}}, {{0x8, 0x1, r11}, {0xec, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20004004}, 0x40804) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000002c40)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$TUNATTACHFILTER(r14, 0x401054d5, &(0x7f0000002cc0)={0x5, &(0x7f0000002c80)=[{0x7, 0x6, 0x6, 0xfffffffa}, {0x4, 0x0, 0x6, 0x101}, {0x6, 0x45, 0x0, 0x6}, {0xfff2, 0x70, 0x35}, {0x1, 0x4, 0x1, 0x7}]}) (async) write$ppp(r14, &(0x7f0000002d00)="1597bd8246b996a7340fcaa025bb0db56112f0c74a7a3d9f92746428cba36540ad5027efc34d58d7f8df4812a688287d9c6a985288f9d56f554889e0c8e264ae6d5521126339abac9b6d25c82a41f0543bd54ce85d5b8dcd188fb3d9f32b03d51fc2664d50e0c61181320d2f11e8143f62875039693325f077cd2032c5ae34cb4d8d4a16c83d95795b2a781b07a706d8809c5db56c5b94fa0fc378f2c0438f6455ebbff3941d36b8de622683190bcd43cdf5efb1a0a8ebf7c102a2cfae46a0d5f4a815e75d0379a063f72b2efbe39d873980a966d0f7fcc599b3438eca8b22b4c926b0e10f0c5936fcb737b440fe380ede1925dc", 0xf4) (async) r15 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002e00), 0x10000, 0x0) ioctl$sock_SIOCSIFBR(r15, 0x8941, &(0x7f0000002e40)=@generic={0x1, 0x9, 0x7}) (async) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002f00)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast2}}, &(0x7f0000003000)=0xe8) r17 = getgid() setxattr$system_posix_acl(&(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0)='system.posix_acl_default\x00', &(0x7f0000003080)={{}, {0x1, 0x4}, [{0x2, 0x2, r16}, {0x2, 0x4, r2}, {0x2, 0x5, r6}, {0x2, 0x0, r6}, {0x2, 0x4, r4}, {0x2, 0x4, r6}, {0x2, 0x7, r0}, {}, {0x2, 0x1, r0}], {0x4, 0x6}, [{0x8, 0x1, r17}, {0x8, 0x1}, {0x8, 0x6, r1}, {0x8, 0x0, r7}, {0x8, 0x2, 0xee01}, {0x8, 0x0, r1}, {0x8, 0x5, r3}, {0x8, 0x0, r7}], {}, {0x20, 0x1}}, 0xac, 0x1) 684.554019ms ago: executing program 2 (id=2214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="78000000000101040000000000000000020000002400018014000180080001000000000008000200e00000020c000280050001000000001f240002801400018008000100e000000208000200e00000020c00028005000100000000000800074000000000140005800e000100736e6d705f74726170"], 0x78}}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='binder\x00', 0x40c000, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000805, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000180)={r4, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x4}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000380)={r4, 0x80, 0x1, 0x6, 0xc, 0x4, 0x3, 0x4, {r5, @in={{0x2, 0x4e21, @private=0xa010102}}, 0x4, 0x70ec, 0x2, 0x7, 0x5}}, &(0x7f00000001c0)=0xb0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000200)) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './cgroup', [{0x20, 'binder\x00'}, {0x20, '#$$#.\\#'}, {0x20, ',:[[%\xe0\\\xdb\xab.*$\x85,-,\'\''}, {0x20, 'tls\x00'}, {0x20, 'tls\x00'}, {0x20, 'tls\x00'}], 0xa, "4e2bb3fa772e2401b6bfc65776c4f7f65c6b337c0efdfdccb156b92f1de9889af628e5a19d89e373d0d762e3e8931b5da1c95a64c1ce9b6941da72cf08038b83a4a18f613a05fe8bcb40e8917b0470ddcdf5254a5c709e0e787d4097aa631098667c520c026e8d8c"}, 0xb6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) writev(r6, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close_range(r1, r6, 0x0) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='./cgroup\x00') 681.757078ms ago: executing program 4 (id=2215): ioprio_set$pid(0x1, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) close(r1) (async, rerun: 64) r2 = socket$inet6(0xa, 0x5, 0x0) (async, rerun: 64) syz_usb_connect(0x2, 0x63, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xe, 0x24, 0xb4, 0x20, 0x20df, 0x1, 0x976d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x51, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x7b, 0x0, 0x0, 0x76, 0xa9, 0x87, 0x0, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7c21, 0x10, 0x1}, {0x6, 0x24, 0x1a, 0x40}, [@call_mgmt={0x5, 0x24, 0x1, 0x0, 0x9}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x79c, 0x2}, {0x6, 0x24, 0x1a, 0x800, 0x32}}]}}]}}]}}, 0x0) r3 = getpid() syz_pidfd_open(r3, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r4, 0x0) (async) timer_settime(0x0, 0x0, 0x0, 0x0) listen(r1, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 648.116035ms ago: executing program 1 (id=2216): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x3000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000497000/0x2000)=nil, 0x2000, 0x1000000, 0x12, r2, 0x80000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) (async) mmap(&(0x7f0000692000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x0, 0x52, 0x10000}) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) write$UHID_INPUT(r2, &(0x7f0000001180)={0x8, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd700050c20000890000000c001a"], 0x20}, 0x1, 0x0, 0x0, 0x20040010}, 0x8000) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x10400, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r9 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r9, &(0x7f0000000080)=@hci={0x1f, 0x4, 0x3}, 0x80) 643.845305ms ago: executing program 3 (id=2217): mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='vxfs\x00', 0x20080c4, 0x0) 465.468584ms ago: executing program 2 (id=2218): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) read(r0, &(0x7f00000001c0)=""/157, 0x9d) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x5, 0x900}) 459.814008ms ago: executing program 1 (id=2219): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSBRK(r0, 0x5409, 0xfd) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6(0xa, 0x3, 0x9) io_setup(0x8, &(0x7f0000000100)) setsockopt$inet6_mreq(r1, 0x29, 0x24, &(0x7f00000008c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x14) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) recvfrom$inet(r2, 0x0, 0x0, 0x2000, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r3 = socket(0x2b, 0x5, 0x0) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10) r4 = memfd_create(&(0x7f0000001600)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe8\x12#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85d\xe1B\x9f\xc1Q\xee\xcc\xbd\x8b)\x14\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r8, @ANYBLOB="01002cbd7000fcdbdf25150000000c002b80080001000200000005003c000100000008002a00040000010c000600020000fbff00005f"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x10) r12 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_linger(r12, 0x1, 0xd, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000125bd7000fbdbdf25050000000c00060002000000000000000c00060000000000000000000c000600020000000200000008000300", @ANYRES32=r10, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="08000300", @ANYRES8, @ANYRESOCT=r0, @ANYRES32=r14, @ANYRESDEC=r12], 0x70}, 0x1, 0x0, 0x0, 0x20004011}, 0x40800) 184.074462ms ago: executing program 3 (id=2227): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000000300)="b63c2cb4cfcd5a043c9fb7806d41ca502c5ab29b843ee4f299b668e526c9f795f4abb6c790e5dee22cd860757740a5bd5aa16b1f3b8019a867f42c5fb51125e1b21360bf7c3ff64694be0801ea1f4b535500b292fb8284d5a1cf817e995136fddb1472caa19889d9d58eb73069942ec5b2b024b60c229929abe2a08fcf5772cf28e1ba87fbdf01da148e7af96641ac3835e35fad7a8110e32b38c3391a580c00b73b0d00d3e4bd5a9c2b4647c6c53d49f62f9ec8e0f92ea9abdd69fa5d49b698532b", 0xc2) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x17) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000140)={0x5, 0x40, [0x1, 0x9, 0x7f, 0x80], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, &(0x7f0000000140)={0x5, 0x40, [0x1, 0x9, 0x7f, 0x80], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) dup(r1) (async) r4 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r4, 0x1000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r4, 0x1000) sendto$inet(r4, &(0x7f00000002c0)="a872b43164f2c57e04d15cc7fd44bd0acb1211f8e674f28f33f50dad857c6ff85d6584e721e95de8a8d787db6369fbaee7de", 0x32, 0x80, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x13e}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x83}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xb00}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004804}, 0x4814) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r5, 0xb10, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xffffffb2, 0x43}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4044855) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000980)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000980)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000e40), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r10, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f00000000c0)=ANY=[@ANYRES64=r6], 0x1c}, 0x1, 0x0, 0x0, 0x91}, 0x10) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r12 = dup(r11) write$6lowpan_enable(r12, &(0x7f0000000000)='0', 0xfffffd2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) 0s ago: executing program 4 (id=2228): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x80) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000)=0x1, 0x0) (async) futex(&(0x7f000000cffc)=0x2, 0xa, 0x0, 0x0, 0x0, 0x1000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x36) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6a}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004000}, 0x20044000) (async) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000040)=0x371, 0x4) kernel console output (not intermixed with test programs): 301.279200][ T5880] keyspan 5-1:0.133: device disconnected [ 301.328815][ T30] audit: type=1804 audit(1750666137.157:79): pid=10832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1534" name="/newroot/369/bus/bus" dev="overlay" ino=1997 res=1 errno=0 [ 301.330724][T10832] Invalid ELF header magic: != ELF [ 301.433829][T10834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1535'. [ 301.501506][T10836] vim2m vim2m.0: vidioc_s_fmt queue busy [ 301.513251][T10836] /dev/rnullb0: Can't open blockdev [ 301.783034][T10843] /dev/rnullb0: Can't open blockdev [ 301.918834][T10847] /dev/rnullb0: Can't open blockdev [ 301.938181][T10849] /dev/rnullb0: Can't open blockdev [ 302.023705][T10851] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1542'. [ 302.195843][T10859] /dev/rnullb0: Can't open blockdev [ 302.326883][T10864] /dev/rnullb0: Can't open blockdev [ 302.626162][T10877] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 302.633123][T10877] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 302.705473][ T5919] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 302.895112][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 302.916524][ T5919] usb 2-1: config 0 has no interfaces? [ 302.946161][ T5919] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 302.965062][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.973179][ T5919] usb 2-1: Product: syz [ 303.015224][ T5919] usb 2-1: Manufacturer: syz [ 303.019881][ T5919] usb 2-1: SerialNumber: syz [ 303.047553][ T5919] usb 2-1: config 0 descriptor?? [ 303.368428][ T5880] usb 2-1: USB disconnect, device number 86 [ 303.485093][T10902] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 303.491651][T10902] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 303.570830][T10902] vhci_hcd vhci_hcd.0: Device attached [ 303.592076][T10904] vhci_hcd: connection closed [ 303.593605][ T49] vhci_hcd: stop threads [ 303.613607][ T49] vhci_hcd: release socket [ 303.628637][ T49] vhci_hcd: disconnect device [ 303.897470][T10913] FAT-fs (rnullb0): bogus number of reserved sectors [ 303.904221][T10913] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 304.473816][T10931] FAT-fs (rnullb0): bogus number of reserved sectors [ 304.481979][T10931] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 304.710878][T10939] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1565'. [ 304.734877][T10941] /dev/rnullb0: Can't open blockdev [ 304.830306][T10948] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.865570][T10948] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.889865][T10948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 305.065213][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 305.205163][ T9] usb 5-1: device descriptor read/64, error -71 [ 305.260218][T10958] Mount JFS Failure: -22 [ 305.268234][T10958] jfs_mount failed w/return code = -22 [ 305.445127][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 305.549662][T10967] /dev/rnullb0: Can't open blockdev [ 305.595308][ T9] usb 5-1: device descriptor read/64, error -71 [ 305.706201][ T9] usb usb5-port1: attempt power cycle [ 306.055449][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 306.096600][ T9] usb 5-1: device descriptor read/8, error -71 [ 306.241778][T10984] FAT-fs (rnullb0): bogus number of reserved sectors [ 306.248754][T10984] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 306.346871][ T9] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 306.375699][ T9] usb 5-1: device descriptor read/8, error -71 [ 306.485460][ T9] usb usb5-port1: unable to enumerate USB device [ 307.951028][T10999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1583'. [ 308.401246][T11013] omfs: Invalid superblock (0) [ 308.492929][T11015] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1590'. [ 309.252829][ T5836] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 309.759467][T11063] /dev/rnullb0: Can't open blockdev [ 310.018840][T11076] hfs: can't find a HFS filesystem on dev rnullb0 [ 310.026210][T11076] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1609'. [ 310.195105][ T5919] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 310.277958][T11082] rose0: entered allmulticast mode [ 310.355867][ T5919] usb 5-1: Using ep0 maxpacket: 32 [ 310.370694][ T5919] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 310.404719][ T5919] usb 5-1: config 0 interface 0 has no altsetting 0 [ 310.405911][T11084] hfs: can't find a HFS filesystem on dev rnullb0 [ 310.425864][ T5919] usb 5-1: New USB device found, idVendor=056a, idProduct=00f6, bcdDevice= 0.00 [ 310.445110][ T5919] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.482564][ T5919] usb 5-1: config 0 descriptor?? [ 310.840435][T11096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 311.099427][T11072] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 311.113514][T11072] cramfs: wrong magic [ 311.123445][ T5919] usbhid 5-1:0.0: can't add hid device: -71 [ 311.133779][ T5919] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 311.162268][ T5919] usb 5-1: USB disconnect, device number 58 [ 311.395081][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 311.450298][T11132] dns_resolver: Unsupported content type (49) [ 311.533700][T11136] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 311.547715][T11136] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 311.567700][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 311.600814][ T9] usb 2-1: config 0 has no interfaces? [ 311.612228][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 311.626538][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.634565][ T9] usb 2-1: Product: syz [ 311.639095][ T9] usb 2-1: Manufacturer: syz [ 311.643718][ T9] usb 2-1: SerialNumber: syz [ 311.681109][ T9] usb 2-1: config 0 descriptor?? [ 311.798870][T11146] hfs: can't find a HFS filesystem on dev rnullb0 [ 311.879546][T11150] binder: 11149:11150 ioctl c0306201 200000000480 returned -14 [ 311.966413][ T9] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 311.975582][ T5880] usb 2-1: USB disconnect, device number 87 [ 312.187051][ T9] usb 5-1: config 0 has an invalid interface number: 153 but max is 0 [ 312.195421][ T9] usb 5-1: config 0 has no interface number 0 [ 312.205285][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=b4.98 [ 312.224733][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.275737][ T9] usb 5-1: config 0 descriptor?? [ 312.286905][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 312.497402][T11160] NILFS (rnullb0): couldn't find nilfs on the device [ 312.700874][ T9] gspca_vc032x: reg_w err -71 [ 312.706720][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.712053][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.727444][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.740819][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.751276][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.759616][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.765449][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.776720][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.787971][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.793428][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.798890][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.804308][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.824554][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.830311][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.835749][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.842262][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.850609][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.856708][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.862104][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 312.872760][ T9] gspca_vc032x: Unknown sensor... [ 312.880618][ T9] vc032x 5-1:0.153: probe with driver vc032x failed with error -22 [ 312.893948][ T9] usb 5-1: USB disconnect, device number 59 [ 312.938759][T11172] syzkaller1: entered promiscuous mode [ 312.944642][T11172] syzkaller1: entered allmulticast mode [ 312.952837][T11172] Mount JFS Failure: -22 [ 312.958463][T11172] jfs_mount failed w/return code = -22 [ 312.985427][ T92] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 313.043718][T11176] exFAT-fs (rnullb0): invalid boot record signature [ 313.056929][T11176] exFAT-fs (rnullb0): failed to read boot sector [ 313.063325][T11176] exFAT-fs (rnullb0): failed to recognize exfat type [ 313.121609][T11178] NILFS (rnullb0): couldn't find nilfs on the device [ 313.134015][T11180] FAT-fs (rnullb0): bogus number of reserved sectors [ 313.148117][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 313.153422][T11180] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 313.162453][ T92] usb 3-1: unable to get BOS descriptor or descriptor too short [ 313.174503][ T92] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 313.184907][ T92] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 313.197742][ T92] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.210159][ T92] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 313.220090][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.231962][ T92] usb 3-1: Product: syz [ 313.236220][ T92] usb 3-1: Manufacturer: syz [ 313.241244][ T92] usb 3-1: SerialNumber: syz [ 313.330340][T11184] /dev/rnullb0: Can't open blockdev [ 313.385119][ T5888] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 313.497296][T11170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.511365][T11170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.535452][ T5888] usb 2-1: Using ep0 maxpacket: 8 [ 313.545384][ T5888] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 313.556062][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.575111][ T43] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 313.585854][ T5888] usb 2-1: config 0 descriptor?? [ 313.657801][ T92] usb 3-1: 0:2 : does not exist [ 313.677873][ T92] usb 3-1: USB disconnect, device number 95 [ 313.712081][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 313.728102][ T43] usb 4-1: device descriptor read/64, error -71 [ 313.805090][ T5924] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 313.975117][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 313.983254][ T5924] usb 5-1: Using ep0 maxpacket: 8 [ 313.990009][ T5924] usb 5-1: config 0 has no interfaces? [ 313.997869][ T5924] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 314.007214][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.015295][ T5924] usb 5-1: Product: syz [ 314.019521][ T5924] usb 5-1: Manufacturer: syz [ 314.024162][ T5924] usb 5-1: SerialNumber: syz [ 314.031453][ T5924] usb 5-1: config 0 descriptor?? [ 314.131522][ T43] usb 4-1: device descriptor read/64, error -71 [ 314.206378][ T5888] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 314.225318][ T5888] asix 2-1:0.0: probe with driver asix failed with error -61 [ 314.246075][ T43] usb usb4-port1: attempt power cycle [ 314.279988][ T92] usb 5-1: USB disconnect, device number 60 [ 314.615076][ T43] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 314.655834][ T43] usb 4-1: device descriptor read/8, error -71 [ 314.806899][T11213] /dev/rnullb0: Can't open blockdev [ 314.911949][T11220] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 314.920513][ T43] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 314.938010][ T43] usb 4-1: device descriptor read/8, error -71 [ 314.960617][T11219] /dev/sg0: Can't lookup blockdev [ 315.051323][T11226] block nbd2: not configured, cannot reconfigure [ 315.055386][ T43] usb usb4-port1: unable to enumerate USB device [ 315.206279][T11234] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 315.215846][T11234] /dev/rnullb0: Can't open blockdev [ 315.320826][T11236] /dev/rnullb0: Can't open blockdev [ 315.410890][T11238] /dev/rnullb0: Can't open blockdev [ 315.775866][ T92] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 315.945429][ T92] usb 3-1: Using ep0 maxpacket: 8 [ 315.958212][ T92] usb 3-1: config 0 has no interfaces? [ 315.967359][ T92] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 315.976618][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.984640][ T92] usb 3-1: Product: syz [ 315.989832][ T92] usb 3-1: Manufacturer: syz [ 315.994464][ T92] usb 3-1: SerialNumber: syz [ 316.003180][ T92] usb 3-1: config 0 descriptor?? [ 316.136992][ T92] usb 2-1: USB disconnect, device number 88 [ 316.285181][ T24] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 316.296523][ T5880] usb 3-1: USB disconnect, device number 96 [ 316.455650][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 316.475812][ T24] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 316.483928][ T24] usb 5-1: config 0 has no interface number 0 [ 316.499836][T11251] omfs: Invalid superblock (0) [ 316.528404][ T24] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 316.545045][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.558687][ T24] usb 5-1: Product: syz [ 316.567361][ T24] usb 5-1: Manufacturer: syz [ 316.582591][ T24] usb 5-1: SerialNumber: syz [ 316.596843][ T24] usb 5-1: config 0 descriptor?? [ 316.611486][ T24] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 316.832711][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 316.865418][ T24] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 317.059009][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.070455][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.235442][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 317.245641][ T43] usb 5-1: USB disconnect, device number 61 [ 317.258637][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 317.286176][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 317.309917][ T43] quatech2 5-1:0.51: device disconnected [ 317.356000][T11277] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 317.363028][T11277] cramfs: wrong magic [ 317.425202][ T5919] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 317.672431][ T5919] usb 4-1: Using ep0 maxpacket: 32 [ 317.680093][T11288] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1677'. [ 317.713956][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.725238][ T5919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.735195][ T5919] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 317.754199][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.765773][ T5919] usb 4-1: config 0 descriptor?? [ 317.774754][ T5919] hub 4-1:0.0: USB hub found [ 317.972631][ T5919] hub 4-1:0.0: 1 port detected [ 317.998663][T11298] gfs2: not a GFS2 filesystem [ 318.017809][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1679'. [ 318.079072][T11302] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 318.089412][T11302] UDF-fs: Scanning with blocksize 4096 failed [ 318.201902][T11272] FAT-fs (rnullb0): bogus number of reserved sectors [ 318.220837][T11272] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 318.240724][T11273] FAT-fs (rnullb0): bogus number of reserved sectors [ 318.251090][T11311] syz.2.1684: attempt to access beyond end of device [ 318.251090][T11311] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 318.266773][T11273] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 318.273992][T11311] exFAT-fs (nbd2): unable to read boot sector [ 318.281565][ T5919] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 318.288377][T11311] exFAT-fs (nbd2): failed to read boot sector [ 318.296911][T11311] exFAT-fs (nbd2): failed to recognize exfat type [ 318.304565][ T5919] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 318.328339][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 318.334340][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 318.387049][ T5919] usb 4-1: USB disconnect, device number 90 [ 318.631894][T11315] Mount JFS Failure: -22 [ 318.636291][T11315] jfs_mount failed w/return code = -22 [ 318.840412][T11322] omfs: Invalid superblock (0) [ 318.947584][T11326] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1690'. [ 319.307934][T11341] devpts: Bad value for 'max' [ 319.367414][T11345] loop2: detected capacity change from 0 to 7 [ 319.398729][T11345] Dev loop2: unable to read RDB block 7 [ 319.404481][T11345] loop2: unable to read partition table [ 319.410989][T11345] loop2: partition table beyond EOD, truncated [ 319.417487][T11345] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 319.425485][ T5919] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 319.451290][T11345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 319.589617][ T5919] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.615237][ T5836] Bluetooth: hci2: Malformed LE Event: 0x02 [ 319.633260][ C0] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.634183][T11354] Can't find a SQUASHFS superblock on rnullb0 [ 319.642608][ C0] Buffer I/O error on dev loop2, logical block 1, async page read [ 319.642672][ C0] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.642695][ C0] Buffer I/O error on dev loop2, logical block 2, async page read [ 319.642744][ C0] I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.642767][ C0] Buffer I/O error on dev loop2, logical block 3, async page read [ 319.642815][ C0] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.642838][ C0] Buffer I/O error on dev loop2, logical block 4, async page read [ 319.642887][ C0] I/O error, dev loop2, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.716878][ C0] Buffer I/O error on dev loop2, logical block 5, async page read [ 319.724762][ C0] I/O error, dev loop2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.733967][ C0] Buffer I/O error on dev loop2, logical block 6, async page read [ 319.743654][ T5919] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 319.765827][ C1] I/O error, dev loop2, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.767393][ T5919] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.775030][ C1] Buffer I/O error on dev loop2, logical block 1, async page read [ 319.775096][ C1] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.775122][ C1] Buffer I/O error on dev loop2, logical block 2, async page read [ 319.776432][ C1] I/O error, dev loop2, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.784418][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.792215][ C1] Buffer I/O error on dev loop2, logical block 3, async page read [ 319.834230][ C1] I/O error, dev loop2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 319.843421][ C1] Buffer I/O error on dev loop2, logical block 4, async page read [ 319.871236][ T5202] ldm_validate_partition_table(): Disk read failed. [ 319.881491][ T5919] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 319.889451][ T5919] usb 3-1: invalid MIDI out EP 0 [ 319.909318][ T5202] Dev loop2: unable to read RDB block 0 [ 319.944694][ T5202] loop2: unable to read partition table [ 319.977683][ T5202] loop2: partition table beyond EOD, truncated [ 320.080338][T11333] vivid-000: ================= START STATUS ================= [ 320.101270][T11333] vivid-000: Radio HW Seek Mode: Bounded [ 320.108584][ T5919] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 320.138471][ T6396] udevd[6396]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.156480][T11333] vivid-000: Radio Programmable HW Seek: false [ 320.162690][T11333] vivid-000: RDS Rx I/O Mode: Block I/O [ 320.227912][T11333] vivid-000: Generate RBDS Instead of RDS: false [ 320.257141][T11333] vivid-000: RDS Reception: false [ 320.274788][T11333] vivid-000: RDS Program Type: 0 inactive [ 320.308435][T11333] vivid-000: RDS PS Name: inactive [ 320.314675][T11333] vivid-000: RDS Radio Text: inactive [ 320.324833][T11333] vivid-000: RDS Traffic Announcement: false inactive [ 320.332104][T11333] vivid-000: RDS Traffic Program: false inactive [ 320.343021][T11333] vivid-000: RDS Music: false inactive [ 320.349828][T11333] vivid-000: ================== END STATUS ================== [ 320.387961][ T5924] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 320.422313][T11372] afs: Unknown parameter 'dyn$idʂ2]8"N'n' [ 320.546202][ T5924] usb 2-1: Using ep0 maxpacket: 32 [ 320.558768][ T5924] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 320.568482][ T5924] usb 2-1: config 0 has no interface number 0 [ 320.586617][ T5924] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 320.595994][ T5924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.604003][ T5924] usb 2-1: Product: syz [ 320.615386][ T5924] usb 2-1: Manufacturer: syz [ 320.622415][ T5924] usb 2-1: SerialNumber: syz [ 320.640111][ T5924] usb 2-1: config 0 descriptor?? [ 320.651921][ T5924] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 320.851676][ T5924] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 320.881816][ T5924] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 321.052959][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 91 [ 321.102389][T11381] tmpfs: Bad value for 'mpol' [ 321.332286][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 321.338767][ T92] usb 2-1: USB disconnect, device number 89 [ 321.350366][ T92] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 321.355311][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1710'. [ 321.381315][ T92] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 321.406409][ T92] quatech2 2-1:0.51: device disconnected [ 321.414784][T11391] NILFS (rnullb0): couldn't find nilfs on the device [ 321.417834][T11393] netlink: 'syz.4.1709': attribute type 10 has an invalid length. [ 321.460961][T11393] team0: Device ipvlan1 failed to register rx_handler [ 321.480512][T11395] NILFS (rnullb0): couldn't find nilfs on the device [ 321.483465][T11393] /dev/rnullb0: Can't open blockdev [ 321.604830][T11401] (syz.4.1714,11401,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 321.618110][T11401] (syz.4.1714,11401,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 321.737071][T11400] omfs: Invalid superblock (0) [ 321.790509][T11404] Can't find a SQUASHFS superblock on rnullb0 [ 321.815184][ T5919] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 321.981438][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 322.000961][ T5919] usb 4-1: config 0 interface 0 has no altsetting 0 [ 322.019431][T11409] /dev/nullb0: Can't open blockdev [ 322.027867][ T5919] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 322.045086][ T5919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.066080][ T5919] usb 4-1: config 0 descriptor?? [ 322.233211][T11414] /dev/rnullb0: Can't open blockdev [ 322.253850][T11413] /dev/rnullb0: Can't open blockdev [ 322.325212][ T5924] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 322.476112][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 322.483869][ T5924] usb 5-1: config 196 has too many interfaces: 103, using maximum allowed: 32 [ 322.501743][ T5924] usb 5-1: config 196 has 1 interface, different from the descriptor's value: 103 [ 322.512241][ T5924] usb 5-1: config 196 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 322.522408][ T5924] usb 5-1: config 196 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 322.532510][ T5924] usb 5-1: config 196 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.550180][ T5924] usb 5-1: config 196 interface 0 has no altsetting 0 [ 322.559240][ T5924] usb 5-1: config 196 has too many interfaces: 103, using maximum allowed: 32 [ 322.585192][ T5924] usb 5-1: config 196 has 1 interface, different from the descriptor's value: 103 [ 322.594503][ T5924] usb 5-1: config 196 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 322.615028][ T5924] usb 5-1: config 196 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 322.635016][ T5924] usb 5-1: config 196 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.648459][ T5924] usb 5-1: config 196 interface 0 has no altsetting 0 [ 322.660790][ T5924] usb 5-1: config 196 has too many interfaces: 103, using maximum allowed: 32 [ 322.670111][ T5924] usb 5-1: config 196 has 1 interface, different from the descriptor's value: 103 [ 322.680193][T11397] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 322.688275][T11397] cramfs: wrong magic [ 322.692578][ T5924] usb 5-1: config 196 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 322.704385][ T5919] usbhid 4-1:0.0: can't add hid device: -71 [ 322.708296][ T5924] usb 5-1: config 196 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 322.720893][ T5924] usb 5-1: config 196 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.722719][ T5919] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 322.734258][ T5924] usb 5-1: config 196 interface 0 has no altsetting 0 [ 322.736748][ T5924] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 322.760748][ T5924] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.773185][ T5924] usb 5-1: Product: syz [ 322.777644][ T5924] usb 5-1: Manufacturer: syz [ 322.782331][ T5924] usb 5-1: SerialNumber: syz [ 322.784339][ T5919] usb 4-1: USB disconnect, device number 91 [ 322.859299][T11422] FAT-fs (rnullb0): bogus number of reserved sectors [ 322.868876][T11422] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 323.031163][ T5924] usblp 5-1:196.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 323.059779][ T5924] usb 5-1: USB disconnect, device number 62 [ 323.060029][T11429] fuse: Bad value for 'user_id' [ 323.071442][T11429] fuse: Bad value for 'user_id' [ 323.078104][ T5924] usblp0: removed [ 323.195172][ T43] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 323.218085][T11434] syz.2.1727 (11434): /proc/11433/oom_adj is deprecated, please use /proc/11433/oom_score_adj instead. [ 323.242842][T11396] Process accounting resumed [ 323.355326][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 323.367325][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 323.385157][ T43] usb 2-1: config 5 has an invalid interface number: 163 but max is 0 [ 323.402384][ T43] usb 2-1: config 5 has no interface number 0 [ 323.419120][ T43] usb 2-1: config 5 interface 163 has no altsetting 0 [ 323.438955][ T43] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=e2.c9 [ 323.455520][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.463618][ T43] usb 2-1: Product: syz [ 323.477852][ T43] usb 2-1: Manufacturer: syz [ 323.482479][ T43] usb 2-1: SerialNumber: syz [ 323.722862][ T43] adutux 2-1:5.163: interrupt endpoints not found [ 323.749749][ T43] usb 2-1: USB disconnect, device number 90 [ 324.059674][T11455] MTD: Couldn't look up './file2': -15 [ 324.065472][T11455] ./file2: Can't lookup blockdev [ 324.386248][T11464] vivid-000: ================= START STATUS ================= [ 324.397665][T11464] vivid-000: Test Pattern: 75% Colorbar [ 324.415019][T11464] vivid-000: Fill Percentage of Frame: 100 [ 324.420959][T11464] vivid-000: Horizontal Movement: Move Right [ 324.435012][T11464] vivid-000: Vertical Movement: No Movement [ 324.444477][T11464] vivid-000: OSD Text Mode: All [ 324.449627][ T9] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 324.450497][T11464] vivid-000: Show Border: false [ 324.462164][T11464] vivid-000: Show Square: false [ 324.467478][T11464] vivid-000: Sensor Flipped Horizontally: false [ 324.473803][T11464] vivid-000: Sensor Flipped Vertically: false [ 324.480800][T11464] vivid-000: Insert SAV Code in Image: false [ 324.495755][T11464] vivid-000: Insert EAV Code in Image: false [ 324.502289][T11464] vivid-000: Insert Video Guard Band: false [ 324.515027][T11464] vivid-000: Reduced Framerate: false [ 324.520446][T11464] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 324.528785][T11464] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 324.536809][ T43] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 324.546238][T11464] vivid-000: Enable Capture Cropping: true [ 324.552084][T11464] vivid-000: Enable Capture Composing: true [ 324.558522][T11464] vivid-000: Enable Capture Scaler: true [ 324.564227][T11464] vivid-000: Timestamp Source: End of Frame [ 324.570474][T11464] vivid-000: Colorspace: Rec. 709 [ 324.578337][T11464] vivid-000: Transfer Function: sRGB [ 324.583672][T11464] vivid-000: Y'CbCr Encoding: Default [ 324.591497][T11464] vivid-000: HSV Encoding: Hue 0-179 [ 324.597198][T11464] vivid-000: Quantization: Default [ 324.605751][T11464] vivid-000: Apply Alpha To Red Only: false [ 324.611693][T11464] vivid-000: Standard Aspect Ratio: 4x3 [ 324.615268][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 324.627723][ T9] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.635045][T11464] vivid-000: DV Timings Signal Mode: Current DV Timings [ 324.649090][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 324.650607][T11464] vivid-000: DV Timings: 640x480p59 inactive [ 324.662434][T11464] vivid-000: DV Timings Aspect Ratio: 14x9 [ 324.671350][T11464] vivid-000: Maximum EDID Blocks: 256 [ 324.677443][ T9] usb 5-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 324.686686][T11464] vivid-000: Limited RGB Range (16-235): true [ 324.692863][ T9] usb 5-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 324.702676][T11464] vivid-000: Rx RGB Quantization Range: Automatic [ 324.709319][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 324.710040][ T9] usb 5-1: Product: syz [ 324.716810][ T43] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 324.722380][T11464] vivid-000: Power Present: [ 324.728405][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.735830][ T9] usb 5-1: config 0 descriptor?? [ 324.746572][T11464] 0x00000001 [ 324.749848][T11464] tpg source WxH: 1280x720 (Y'CbCr) [ 324.763745][T11464] tpg field: 1 [ 324.768409][ T43] usb 2-1: config 0 descriptor?? [ 324.773581][T11464] tpg crop: (0,0)/1280x720 [ 324.781921][T11464] tpg compose: (0,0)/1280x720 [ 324.802971][T11464] tpg colorspace: 3 [ 324.807165][T11464] tpg transfer function: 2/0 [ 324.812790][T11464] tpg Y'CbCr encoding: 0/0 [ 324.821293][T11464] tpg quantization: 0/0 [ 324.826560][T11464] tpg RGB range: 0/1 [ 324.830498][T11464] vivid-000: ================== END STATUS ================== [ 324.981914][ T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 324.992125][ T43] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 325.009506][ T43] asix 2-1:0.0: probe with driver asix failed with error -32 [ 325.188698][T11477] /dev/rnullb0: Can't open blockdev [ 325.237508][ T9] waterforce 0003:1044:7A4D.0014: unknown main item tag 0x0 [ 325.275755][ T9] waterforce 0003:1044:7A4D.0014: unknown main item tag 0x0 [ 325.288601][ T9] waterforce 0003:1044:7A4D.0014: unknown main item tag 0x0 [ 325.298389][ T9] waterforce 0003:1044:7A4D.0014: unknown main item tag 0x0 [ 325.310062][ T9] waterforce 0003:1044:7A4D.0014: unknown main item tag 0x0 [ 325.331371][ T9] waterforce 0003:1044:7A4D.0014: hidraw0: USB HID v0.05 Device [syz] on usb-dummy_hcd.4-1/input0 [ 325.387673][T11482] /dev/rnullb0: Can't open blockdev [ 325.397845][T11482] Scaler: ================= START STATUS ================= [ 325.406670][T11482] Scaler: ================== END STATUS ================== [ 325.415479][ T9] waterforce 0003:1044:7A4D.0014: fw version request failed with -38 [ 325.472119][ T9] usb 5-1: USB disconnect, device number 63 [ 325.620109][T11484] fido_id[11484]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 326.053739][ T5924] usb 2-1: USB disconnect, device number 91 [ 326.296248][T11499] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.568246][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.600976][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.648654][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.678044][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.696243][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.719671][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.763571][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.827376][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.854284][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.876051][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.888859][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.918577][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.938830][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.949547][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.966083][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 326.982372][T11516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.991798][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.006198][T11516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.016375][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.045157][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.053828][ T5919] IPVS: starting estimator thread 0... [ 327.062423][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.081953][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.109680][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.119909][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.140212][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.155113][T11523] IPVS: using max 28 ests per chain, 67200 per kthread [ 327.173600][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.189205][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.223996][T11503] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 327.245816][T11526] ./cgroup: Can't lookup blockdev [ 327.480176][ T8964] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 327.576490][T11538] vxfs: WRONG superblock magic 00000000 at 1 [ 327.605177][T11538] vxfs: WRONG superblock magic 00000000 at 8 [ 327.611221][T11538] vxfs: can't find superblock. [ 327.635451][T11538] nfsd: Unknown parameter 'nfs_export' [ 328.235367][ T43] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 328.320464][T11556] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 328.330557][T11556] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 328.415730][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 328.425497][ T43] usb 5-1: config 1 has an invalid descriptor of length 214, skipping remainder of the config [ 328.445454][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 328.456548][ T43] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.489562][ T43] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 328.501325][ T43] usb 5-1: New USB device strings: Mfr=13, Product=0, SerialNumber=0 [ 328.510771][ T43] usb 5-1: Manufacturer: syz [ 328.695317][T11571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.781558][T11548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.809609][T11573] vxfs: WRONG superblock magic 00000000 at 1 [ 328.825484][T11573] vxfs: WRONG superblock magic 00000000 at 8 [ 328.831532][T11573] vxfs: can't find superblock. [ 328.836860][T11548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.233964][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.248675][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.265661][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.281646][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.392218][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 329.512226][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.525932][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.547946][T11590] /dev/rnullb0: Can't open blockdev [ 329.760800][ T5919] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 329.888796][T11609] /dev/rnullb0: Can't open blockdev [ 329.907306][ T5919] usb 4-1: device descriptor read/64, error -71 [ 330.010165][T11611] /dev/rnullb0: Can't open blockdev [ 330.038701][T11616] /dev/rnullb0: Can't open blockdev [ 330.145218][ T5919] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 330.285207][ T5919] usb 4-1: device descriptor read/64, error -71 [ 330.331321][T11628] /dev/rnullb0: Can't open blockdev [ 330.332826][T11626] /dev/rnullb0: Can't open blockdev [ 330.393301][T11624] /dev/rnullb0: Can't open blockdev [ 330.416523][ T5919] usb usb4-port1: attempt power cycle [ 330.598609][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.623197][T11637] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 330.629754][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.699799][T11638] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.785106][ T5919] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 330.805852][ T5919] usb 4-1: device descriptor read/8, error -71 [ 330.860189][T11634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.873958][T11634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.885349][ T5924] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 330.893883][T11634] /dev/rnullb0: Can't open blockdev [ 330.949878][ T43] hub 5-1:1.0: bad descriptor, ignoring hub [ 330.965482][ T43] hub 5-1:1.0: probe with driver hub failed with error -5 [ 330.972974][ T43] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 331.025381][ T5924] usb 2-1: device descriptor read/64, error -71 [ 331.032319][ T43] usb 5-1: USB disconnect, device number 64 [ 331.045966][ T5919] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 331.087822][ T5919] usb 4-1: device descriptor read/8, error -71 [ 331.195575][ T5919] usb usb4-port1: unable to enumerate USB device [ 331.275101][ T5924] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 331.425227][ T5924] usb 2-1: device descriptor read/64, error -71 [ 331.457887][T11640] /dev/rnullb0: Can't open blockdev [ 331.470219][T11640] /dev/rnullb0: Can't open blockdev [ 331.545648][ T5924] usb usb2-port1: attempt power cycle [ 331.629796][T11652] program syz.4.1798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.681996][T11656] program syz.4.1798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.707934][T11656] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 331.734804][T11656] /dev/rnullb0: Can't open blockdev [ 331.902580][T11666] /dev/rnullb0: Can't open blockdev [ 331.908106][ T5924] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 331.929458][ T5924] usb 2-1: device descriptor read/8, error -71 [ 332.003648][T11672] /dev/rnullb0: Can't open blockdev [ 332.116840][T11678] syz.4.1808: attempt to access beyond end of device [ 332.116840][T11678] md0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 332.131772][T11678] syz.4.1808: attempt to access beyond end of device [ 332.131772][T11678] md0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 332.161442][T11678] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 332.181786][T11681] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 332.191120][ T5924] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 332.201204][T11681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1809'. [ 332.210594][T11678] syz.4.1808: attempt to access beyond end of device [ 332.210594][T11678] md0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 332.215911][T11681] /dev/rnullb0: Can't open blockdev [ 332.236664][ T5924] usb 2-1: device descriptor read/8, error -71 [ 332.244458][T11678] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 332.265824][T11678] syz.4.1808: attempt to access beyond end of device [ 332.265824][T11678] md0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 332.302999][T11678] syz.4.1808: attempt to access beyond end of device [ 332.302999][T11678] md0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 332.311408][T11686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.319701][T11678] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 332.332879][T11686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.343016][T11678] syz.4.1808: attempt to access beyond end of device [ 332.343016][T11678] md0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 332.357487][ T5924] usb usb2-port1: unable to enumerate USB device [ 332.364323][T11678] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 332.379770][T11678] syz.4.1808: attempt to access beyond end of device [ 332.379770][T11678] md0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 332.407083][T11678] syz.4.1808: attempt to access beyond end of device [ 332.407083][T11678] md0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 332.429699][T11678] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 332.440418][T11678] syz.4.1808: attempt to access beyond end of device [ 332.440418][T11678] md0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 332.457398][T11678] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 332.468536][T11678] syz.4.1808: attempt to access beyond end of device [ 332.468536][T11678] md0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 332.484180][T11678] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 332.498053][T11678] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 332.512148][T11678] UDF-fs: warning (device md0): udf_fill_super: No partition found (1) [ 332.689832][T11699] /dev/rnullb0: Can't open blockdev [ 332.745242][ T5919] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 332.769162][T11703] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 332.784170][T11703] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.792996][T11703] bond0: (slave team0): Enslaving as an active interface with an up link [ 332.909308][ T5919] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 332.926469][ T5919] usb 4-1: config 0 has no interface number 0 [ 332.932619][ T5919] usb 4-1: config 0 interface 41 has no altsetting 0 [ 332.958292][ T5919] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 332.975155][ T5924] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 332.975634][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.005037][ T5919] usb 4-1: Product: syz [ 333.009227][ T5919] usb 4-1: Manufacturer: syz [ 333.025518][ T5919] usb 4-1: SerialNumber: syz [ 333.032298][ T5919] usb 4-1: config 0 descriptor?? [ 333.125176][ T5924] usb 5-1: device descriptor read/64, error -71 [ 333.366658][T11705] /dev/nullb0: Can't open blockdev [ 333.375181][ T5924] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 333.505261][ T5924] usb 5-1: device descriptor read/64, error -71 [ 333.529272][ T5919] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 333.565368][ T5919] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 333.594855][ T5919] usb 4-1: USB disconnect, device number 96 [ 333.625551][ T5924] usb usb5-port1: attempt power cycle [ 334.235065][ T5924] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 334.272316][ T5924] usb 5-1: device descriptor read/8, error -71 [ 334.498237][T11719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.507112][T11719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.519110][ T5924] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 334.545702][ T5924] usb 5-1: device descriptor read/8, error -71 [ 334.655554][ T5924] usb usb5-port1: unable to enumerate USB device [ 334.865105][ T5919] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 335.028700][ T5919] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 335.038105][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.046276][ T5919] usb 2-1: Product: syz [ 335.050973][ T5919] usb 2-1: Manufacturer: syz [ 335.055666][ T5919] usb 2-1: SerialNumber: syz [ 335.066403][ T5919] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 335.087545][ T5880] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 335.193307][T11729] FAT-fs (rnullb0): bogus number of reserved sectors [ 335.200360][T11729] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 335.258681][T11733] omfs: Invalid superblock (0) [ 335.837803][T11744] FAT-fs (rnullb0): bogus number of reserved sectors [ 335.844542][T11744] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 335.893416][T11738] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 335.910772][T11738] cramfs: wrong magic [ 336.005847][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.028169][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.043933][T11753] netlink: 'syz.4.1831': attribute type 21 has an invalid length. [ 336.064367][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.068959][T11753] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1831'. [ 336.073722][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.100351][T11749] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.108993][ T5880] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 336.115475][T11749] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.129966][ T5880] ath9k_htc: Failed to initialize the device [ 336.181062][ T5880] usb 2-1: ath9k_htc: USB layer deinitialized [ 336.445054][ T5924] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 336.597750][ T5924] usb 4-1: not running at top speed; connect to a high speed hub [ 336.606703][ T5924] usb 4-1: config 182 has an invalid interface number: 222 but max is 0 [ 336.616125][ T5924] usb 4-1: config 182 contains an unexpected descriptor of type 0x1, skipping [ 336.628429][ T5924] usb 4-1: config 182 has no interface number 0 [ 336.634809][ T5924] usb 4-1: config 182 interface 222 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 336.652011][ T5924] usb 4-1: config 182 interface 222 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 336.666718][ T24] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 336.674559][ T5924] usb 4-1: config 182 interface 222 altsetting 15 endpoint 0x7 has invalid maxpacket 41308, setting to 64 [ 336.677932][T11768] Can't find a SQUASHFS superblock on rnullb0 [ 336.686979][ T5924] usb 4-1: config 182 interface 222 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 336.703990][T11769] Can't find a SQUASHFS superblock on rnullb0 [ 336.710755][ T5924] usb 4-1: config 182 interface 222 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 336.723425][ T5924] usb 4-1: config 182 interface 222 altsetting 15 endpoint 0xD has invalid maxpacket 1024, setting to 1023 [ 336.736842][ T5924] usb 4-1: config 182 interface 222 altsetting 15 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 336.750123][ T5924] usb 4-1: config 182 interface 222 has no altsetting 0 [ 336.875344][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 336.882337][ T24] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 336.890834][ T24] usb 5-1: config 0 has no interface number 0 [ 336.897924][ T24] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.909646][ T24] usb 5-1: config 0 interface 85 has no altsetting 0 [ 336.918917][ T24] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 336.928163][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.936240][ T24] usb 5-1: Product: syz [ 336.940605][ T24] usb 5-1: Manufacturer: syz [ 336.945274][ T24] usb 5-1: SerialNumber: syz [ 336.952375][ T24] usb 5-1: config 0 descriptor?? [ 337.065191][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 337.176796][T11761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.185676][T11761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.237762][ T24] appletouch 5-1:0.85: Failed to read mode from device. [ 337.246468][ T24] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 337.262228][ T24] usb 5-1: USB disconnect, device number 69 [ 337.656219][ T24] usb 2-1: USB disconnect, device number 96 [ 337.707602][T11780] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 337.715808][T11780] VFS: Can't find a romfs filesystem on dev rnullb0. [ 337.715808][T11780] [ 337.738490][T11782] : renamed from bond_slave_0 (while UP) [ 337.965346][T11800] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 337.974520][T11800] overlayfs: missing 'lowerdir' [ 337.977806][T11796] fuse: root generation should be zero [ 337.987100][T11785] gfs2: not a GFS2 filesystem [ 337.993074][T11800] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 338.005748][T11800] overlayfs: missing 'lowerdir' [ 338.011548][T11800] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 338.025977][T11800] overlayfs: missing 'lowerdir' [ 338.278237][T11813] 9pnet_fd: Insufficient options for proto=fd [ 338.337160][T11819] Can't find a SQUASHFS superblock on rnullb0 [ 338.375184][ T24] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 338.545258][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 338.556587][ T24] usb 5-1: config 0 has no interfaces? [ 338.565478][ T24] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 338.585150][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.593194][ T24] usb 5-1: Product: syz [ 338.600040][ T24] usb 5-1: Manufacturer: syz [ 338.604758][ T24] usb 5-1: SerialNumber: syz [ 338.623147][ T24] usb 5-1: config 0 descriptor?? [ 338.655893][ T92] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 338.819566][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 338.831175][ T92] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 338.842000][ T92] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 338.852433][ T92] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 338.871121][ T92] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 338.882401][ T92] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 338.895640][ T92] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 338.904700][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.937946][ T43] usb 5-1: USB disconnect, device number 70 [ 339.121288][ T92] usb 2-1: GET_CAPABILITIES returned 0 [ 339.131456][ T92] usbtmc 2-1:16.0: can't read capabilities [ 339.206993][ T5924] usb 4-1: New USB device found, idVendor=04b4, idProduct=2830, bcdDevice=1d.d8 [ 339.244844][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.256353][ T5924] usb 4-1: Product: 蚂륗쉥ࡾﭷ츞慭༗ሚҏ툎ꍅ콡㼘ք쀈놟긃붔乙ꂨ挖뫈ᅓĔᦕ쿌ᦏ∽郛ہꜦᜐᲊ쇅ꈝ」邔긾蚗鳛拱非渾꠳臰㉅姊ꤽ杌㕾蠊퉧ⵝ⛮㱔先榺딦鐣ᒌ献ᒒ㿆 [ 339.277912][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.289991][ T5924] usb 4-1: can't set config #182, error -71 [ 339.299415][ T5924] usb 4-1: USB disconnect, device number 97 [ 339.322719][T11821] usb 2-1: usbtmc_ioctl_clear_in_halt returned -32 [ 339.327640][T11840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.340395][T11840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.473127][ T5919] usb 2-1: USB disconnect, device number 97 [ 339.495301][ T30] audit: type=1804 audit(1750666175.317:80): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1858" name="/newroot/443/file1" dev="fuse" ino=1 res=1 errno=0 [ 339.520087][ T30] audit: type=1800 audit(1750666175.327:81): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1858" name="/" dev="fuse" ino=1 res=0 errno=0 [ 339.542523][T11844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.553108][T11844] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.562504][ T30] audit: type=1800 audit(1750666175.327:82): pid=11842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1858" name="/" dev="fuse" ino=1 res=0 errno=0 [ 339.600298][T11847] binder: 11846:11847 ioctl c018620b 200000000100 returned -14 [ 339.651527][T11849] FAULT_INJECTION: forcing a failure. [ 339.651527][T11849] name failslab, interval 1, probability 0, space 0, times 0 [ 339.664888][T11849] CPU: 1 UID: 0 PID: 11849 Comm: syz.3.1861 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 339.664916][T11849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 339.664929][T11849] Call Trace: [ 339.664937][T11849] [ 339.664946][T11849] dump_stack_lvl+0x189/0x250 [ 339.664979][T11849] ? __pfx____ratelimit+0x10/0x10 [ 339.665012][T11849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.665036][T11849] ? __pfx__printk+0x10/0x10 [ 339.665062][T11849] ? __pfx___might_resched+0x10/0x10 [ 339.665086][T11849] ? fs_reclaim_acquire+0x7d/0x100 [ 339.665121][T11849] should_fail_ex+0x414/0x560 [ 339.665152][T11849] should_failslab+0xa8/0x100 [ 339.665181][T11849] __kmalloc_noprof+0xcb/0x4f0 [ 339.665219][T11849] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 339.665254][T11849] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 339.665299][T11849] genl_family_rcv_msg_doit+0xb8/0x300 [ 339.665332][T11849] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 339.665370][T11849] ? rcu_is_watching+0x15/0xb0 [ 339.665393][T11849] ? apparmor_capable+0x137/0x1b0 [ 339.665418][T11849] ? bpf_lsm_capable+0x9/0x20 [ 339.665438][T11849] ? security_capable+0x7e/0x2e0 [ 339.665461][T11849] genl_rcv_msg+0x60e/0x790 [ 339.665493][T11849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.665518][T11849] ? __pfx_nfc_genl_activate_target+0x10/0x10 [ 339.665558][T11849] netlink_rcv_skb+0x208/0x470 [ 339.665580][T11849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 339.665606][T11849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 339.665644][T11849] ? down_read+0x1ad/0x2e0 [ 339.665665][T11849] genl_rcv+0x28/0x40 [ 339.665688][T11849] netlink_unicast+0x75b/0x8d0 [ 339.665717][T11849] netlink_sendmsg+0x805/0xb30 [ 339.665747][T11849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.665772][T11849] ? aa_sock_msg_perm+0x94/0x160 [ 339.665792][T11849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 339.665817][T11849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 339.665839][T11849] __sock_sendmsg+0x21c/0x270 [ 339.665859][T11849] ____sys_sendmsg+0x505/0x830 [ 339.665887][T11849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 339.665918][T11849] ? import_iovec+0x74/0xa0 [ 339.665939][T11849] ___sys_sendmsg+0x21f/0x2a0 [ 339.665963][T11849] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.666020][T11849] ? __fget_files+0x2a/0x420 [ 339.666045][T11849] ? __fget_files+0x3a0/0x420 [ 339.666080][T11849] __x64_sys_sendmsg+0x19b/0x260 [ 339.666105][T11849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 339.666137][T11849] ? __pfx_ksys_write+0x10/0x10 [ 339.666158][T11849] ? rcu_is_watching+0x15/0xb0 [ 339.666182][T11849] ? do_syscall_64+0xbe/0x3b0 [ 339.666203][T11849] do_syscall_64+0xfa/0x3b0 [ 339.666218][T11849] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.666243][T11849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.666261][T11849] ? clear_bhb_loop+0x60/0xb0 [ 339.666282][T11849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.666298][T11849] RIP: 0033:0x7f2c8e78e929 [ 339.666314][T11849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.666329][T11849] RSP: 002b:00007f2c8f6ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.666353][T11849] RAX: ffffffffffffffda RBX: 00007f2c8e9b5fa0 RCX: 00007f2c8e78e929 [ 339.666366][T11849] RDX: 0000000020000000 RSI: 0000200000000b40 RDI: 0000000000000005 [ 339.666376][T11849] RBP: 00007f2c8f6ad090 R08: 0000000000000000 R09: 0000000000000000 [ 339.666387][T11849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.666397][T11849] R13: 0000000000000000 R14: 00007f2c8e9b5fa0 R15: 00007ffddc21ca38 [ 339.666424][T11849] [ 340.015470][ C1] vkms_vblank_simulate: vblank timer overrun [ 340.124828][T11861] /dev/rnullb0: Can't open blockdev [ 340.194378][T11865] program syz.4.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.204528][T11867] program syz.4.1865 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 340.435344][ T5880] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 340.605416][ T5919] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 340.613149][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 340.645998][ T5880] usb 4-1: config 31 has an invalid interface number: 65 but max is 1 [ 340.654247][ T5880] usb 4-1: config 31 has an invalid interface number: 63 but max is 1 [ 340.663503][T11888] FAULT_INJECTION: forcing a failure. [ 340.663503][T11888] name failslab, interval 1, probability 0, space 0, times 0 [ 340.669624][ T5880] usb 4-1: config 31 contains an unexpected descriptor of type 0x1, skipping [ 340.681109][T11888] CPU: 1 UID: 0 PID: 11888 Comm: syz.4.1872 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 340.681136][T11888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.681149][T11888] Call Trace: [ 340.681156][T11888] [ 340.681165][T11888] dump_stack_lvl+0x189/0x250 [ 340.681194][T11888] ? __pfx____ratelimit+0x10/0x10 [ 340.681225][T11888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.681247][T11888] ? __pfx__printk+0x10/0x10 [ 340.681274][T11888] ? __pfx___might_resched+0x10/0x10 [ 340.681296][T11888] ? fs_reclaim_acquire+0x7d/0x100 [ 340.681328][T11888] should_fail_ex+0x414/0x560 [ 340.681358][T11888] should_failslab+0xa8/0x100 [ 340.681385][T11888] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 340.681409][T11888] ? __alloc_skb+0x112/0x2d0 [ 340.681437][T11888] __alloc_skb+0x112/0x2d0 [ 340.681463][T11888] netlink_ack+0x146/0xa50 [ 340.681485][T11888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.681540][T11888] netlink_rcv_skb+0x28c/0x470 [ 340.681564][T11888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 340.681594][T11888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 340.681634][T11888] ? down_read+0x1ad/0x2e0 [ 340.681657][T11888] genl_rcv+0x28/0x40 [ 340.681682][T11888] netlink_unicast+0x75b/0x8d0 [ 340.681714][T11888] netlink_sendmsg+0x805/0xb30 [ 340.681747][T11888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.681774][T11888] ? aa_sock_msg_perm+0x94/0x160 [ 340.681797][T11888] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 340.681826][T11888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 340.681851][T11888] __sock_sendmsg+0x21c/0x270 [ 340.681873][T11888] ____sys_sendmsg+0x505/0x830 [ 340.681906][T11888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 340.681941][T11888] ? import_iovec+0x74/0xa0 [ 340.681966][T11888] ___sys_sendmsg+0x21f/0x2a0 [ 340.681993][T11888] ? __pfx____sys_sendmsg+0x10/0x10 [ 340.682057][T11888] ? __fget_files+0x2a/0x420 [ 340.682084][T11888] ? __fget_files+0x3a0/0x420 [ 340.682123][T11888] __x64_sys_sendmsg+0x19b/0x260 [ 340.682151][T11888] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 340.682186][T11888] ? __pfx_ksys_write+0x10/0x10 [ 340.682209][T11888] ? rcu_is_watching+0x15/0xb0 [ 340.682237][T11888] ? do_syscall_64+0xbe/0x3b0 [ 340.682258][T11888] do_syscall_64+0xfa/0x3b0 [ 340.682275][T11888] ? lockdep_hardirqs_on+0x9c/0x150 [ 340.682303][T11888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.682322][T11888] ? clear_bhb_loop+0x60/0xb0 [ 340.682346][T11888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.682365][T11888] RIP: 0033:0x7fad6bb8e929 [ 340.682382][T11888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.682398][T11888] RSP: 002b:00007fad6cace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 340.682419][T11888] RAX: ffffffffffffffda RBX: 00007fad6bdb5fa0 RCX: 00007fad6bb8e929 [ 340.682432][T11888] RDX: 0000000020000000 RSI: 0000200000000b40 RDI: 0000000000000005 [ 340.682445][T11888] RBP: 00007fad6cace090 R08: 0000000000000000 R09: 0000000000000000 [ 340.682458][T11888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.682468][T11888] R13: 0000000000000000 R14: 00007fad6bdb5fa0 R15: 00007ffdfc2c3da8 [ 340.682498][T11888] [ 340.983178][ T5880] usb 4-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 341.010793][ T5880] usb 4-1: config 31 has no interface number 0 [ 341.017043][ T5880] usb 4-1: config 31 has no interface number 1 [ 341.023275][ T5880] usb 4-1: config 31 interface 65 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 341.033386][ T5880] usb 4-1: config 31 interface 65 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 341.044480][ T5880] usb 4-1: config 31 interface 65 altsetting 9 has a duplicate endpoint with address 0x85, skipping [ 341.055803][ T5880] usb 4-1: config 31 interface 65 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 341.066646][ T5880] usb 4-1: config 31 interface 65 altsetting 9 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 341.077778][ T5880] usb 4-1: config 31 interface 65 altsetting 9 has a duplicate endpoint with address 0x8, skipping [ 341.088861][ T5880] usb 4-1: config 31 interface 65 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 341.101431][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 341.101544][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.122547][ T5880] usb 4-1: config 31 interface 63 altsetting 2 endpoint 0x84 has invalid maxpacket 1024, setting to 64 [ 341.133694][ T5919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 341.143421][ T5919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.156317][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 341.167238][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 341.178070][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has a duplicate endpoint with address 0x3, skipping [ 341.201838][ T5919] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 341.211335][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.220598][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 341.235097][ T5919] usb 2-1: Product: syz [ 341.239308][ T5919] usb 2-1: Manufacturer: syz [ 341.243921][ T5919] usb 2-1: SerialNumber: syz [ 341.249595][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 341.263172][ T5919] usb 2-1: config 0 descriptor?? [ 341.268225][ T5880] usb 4-1: config 31 interface 63 altsetting 2 bulk endpoint 0x9 has invalid maxpacket 32 [ 341.278572][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has a duplicate endpoint with address 0x9, skipping [ 341.289871][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 341.307711][ T5880] usb 4-1: config 31 interface 63 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 341.318723][ T5880] usb 4-1: config 31 interface 65 has no altsetting 0 [ 341.325554][ T5880] usb 4-1: config 31 interface 63 has no altsetting 0 [ 341.341499][ T5880] usb 4-1: New USB device found, idVendor=0421, idProduct=04f0, bcdDevice=4b.be [ 341.360904][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.370884][ T5880] usb 4-1: Product: 坫栥䵖輷⾳㴀秈ᮜ῕㣄穒骐埱ᛒ꼍⌯ᄼ [ 341.381617][ T5880] usb 4-1: Manufacturer: ᑹ㍆㭖卉짡瘃鱹㏙䕗鲂됧贞ⳅズ捹逯專঵ᦞٲ᭶掳⇛뗡眻댝筎쎎倾◮Ᏽ畕ꏋ㉣淓痐㙸ﳮ졾語닂뀳셇 [ 341.399359][ T5880] usb 4-1: SerialNumber: Ъ [ 341.410039][T11868] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 341.430271][T11901] loop4: detected capacity change from 0 to 7 [ 341.448315][T11901] Dev loop4: unable to read RDB block 7 [ 341.464353][T11901] loop4: unable to read partition table [ 341.480109][T11901] loop4: partition table beyond EOD, truncated [ 341.487239][T11901] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 341.508246][T11901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.522252][T11901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.118498][T11906] syz.4.1875 (11906) used greatest stack depth: 16880 bytes left [ 342.201601][ T30] audit: type=1326 audit(1750666178.027:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.2.1877" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993e58e929 code=0x0 [ 342.279338][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.307605][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.360829][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.379558][ T5919] usb 2-1: USB disconnect, device number 98 [ 342.404386][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.443997][T11918] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 342.454288][T11918] /dev/rnullb0: Can't open blockdev [ 342.475638][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.488275][ T6396] udevd[6396]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 342.524029][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.559855][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.608772][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.642966][T11868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.689050][T11868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.769275][T11928] Can't find a SQUASHFS superblock on rnullb0 [ 342.792237][T11932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.834399][ T5880] usb 4-1: bad CDC descriptors [ 342.853289][T11932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.911783][ T5880] usb 4-1: USB disconnect, device number 98 [ 343.325089][ T5919] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 343.481295][ T5919] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.518505][ T5919] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 343.531496][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.556047][ T5919] usb 2-1: config 0 descriptor?? [ 343.578483][ T5919] pwc: Askey VC010 type 2 USB webcam detected. [ 343.982907][ T5919] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.585798][ T43] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 344.795391][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 344.806984][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.823060][ T43] usb 4-1: no configurations [ 344.828122][ T43] usb 4-1: can't read configurations, error -22 [ 344.850148][ T5919] pwc: recv_control_msg error -71 req 02 val 2c00 [ 344.881995][ T5919] pwc: recv_control_msg error -71 req 04 val 1000 [ 344.908690][ T5919] pwc: recv_control_msg error -71 req 04 val 1300 [ 344.926405][ T5919] pwc: recv_control_msg error -71 req 04 val 1400 [ 344.936790][ T5919] pwc: recv_control_msg error -71 req 02 val 2000 [ 344.943684][ T5919] pwc: recv_control_msg error -71 req 02 val 2100 [ 344.962528][ T5919] pwc: recv_control_msg error -71 req 04 val 1500 [ 344.975095][ T43] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 345.010479][ T5919] pwc: recv_control_msg error -71 req 02 val 2500 [ 345.018185][ T5919] pwc: recv_control_msg error -71 req 02 val 2400 [ 345.027547][ T5919] pwc: recv_control_msg error -71 req 02 val 2600 [ 345.034775][ T5919] pwc: recv_control_msg error -71 req 02 val 2900 [ 345.075570][ T5919] pwc: recv_control_msg error -71 req 02 val 2800 [ 345.093605][ T5919] pwc: recv_control_msg error -71 req 04 val 1100 [ 345.112631][ T5919] pwc: recv_control_msg error -71 req 04 val 1200 [ 345.125219][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 345.141693][ T5919] pwc: Registered as video103. [ 345.145968][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.151735][ T5919] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 345.173728][ T43] usb 4-1: no configurations [ 345.189721][ T43] usb 4-1: can't read configurations, error -22 [ 345.237489][ T43] usb usb4-port1: attempt power cycle [ 345.260150][ T5919] usb 2-1: USB disconnect, device number 99 [ 345.588337][ T43] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 345.625629][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 345.637707][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.652639][ T43] usb 4-1: no configurations [ 345.663803][ T43] usb 4-1: can't read configurations, error -22 [ 345.815192][ T43] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 345.835233][ T5888] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 345.855823][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 345.863190][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 345.876407][ T43] usb 4-1: no configurations [ 345.888292][ T43] usb 4-1: can't read configurations, error -22 [ 345.910236][ T43] usb usb4-port1: unable to enumerate USB device [ 346.009845][ T5888] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 346.019085][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.035054][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.051532][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.078503][T11994] /dev/rnullb0: Can't open blockdev [ 346.149041][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.158485][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.178668][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.195522][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.204419][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.214672][T11998] /dev/rnullb0: Can't open blockdev [ 346.229163][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.243289][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.263075][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.274529][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.286217][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.296052][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.307058][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.325857][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.334877][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.345961][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.365543][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.374645][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.385675][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.397188][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.411566][T12004] /dev/rnullb0: Can't open blockdev [ 346.423489][ T5888] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.445079][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.459082][ T5888] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 346.479138][ T5888] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 346.489250][ T5888] usb 2-1: Product: syz [ 346.493558][ T5888] usb 2-1: Manufacturer: syz [ 346.498269][ T5888] usb 2-1: SerialNumber: syz [ 346.513762][ T5888] usb 2-1: config 0 descriptor?? [ 346.567153][ T5888] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 346.742013][T12010] /dev/rnullb0: Can't open blockdev [ 346.864672][T12012] /dev/rnullb0: Can't open blockdev [ 347.374441][T12026] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.386719][T12026] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.455901][T12031] /dev/rnullb0: Can't open blockdev [ 347.875085][ T5919] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 348.040143][ T5919] usb 4-1: Using ep0 maxpacket: 16 [ 348.069813][ T5919] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.091008][ T5919] usb 4-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 348.115517][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.123546][ T5919] usb 4-1: Product: syz [ 348.129583][T12048] /dev/rnullb0: Can't open blockdev [ 348.177590][ T5919] usb 4-1: Manufacturer: syz [ 348.182235][ T5919] usb 4-1: SerialNumber: syz [ 348.199906][ T5919] usb 4-1: config 0 descriptor?? [ 348.431925][T12035] /dev/rnullb0: Can't open blockdev [ 348.467973][T12035] loop2: detected capacity change from 0 to 7 [ 348.595363][T12035] Dev loop2: unable to read RDB block 7 [ 348.618871][T12035] loop2: unable to read partition table [ 348.643838][T12035] loop2: partition table beyond EOD, truncated [ 348.673267][T12035] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 348.745913][ T5202] Dev loop2: unable to read RDB block 7 [ 348.773789][ T5202] loop2: unable to read partition table [ 348.784099][ T5202] loop2: partition table beyond EOD, truncated [ 348.804656][ T5919] usb 4-1: USB disconnect, device number 103 [ 348.819985][ T92] usb 2-1: USB disconnect, device number 100 [ 348.861727][ T92] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 349.030049][T12060] /dev/rnullb0: Can't open blockdev [ 349.360881][T12067] /dev/rnullb0: Can't open blockdev [ 349.482892][T12070] bio_check_eod: 2 callbacks suppressed [ 349.482911][T12070] syz.4.1932: attempt to access beyond end of device [ 349.482911][T12070] md0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 349.501393][T12071] sp0: Synchronizing with TNC [ 349.533291][T12070] syz.4.1932: attempt to access beyond end of device [ 349.533291][T12070] md0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 349.543266][T12071] misc userio: Invalid payload size [ 349.568297][T12070] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 349.587571][T12070] syz.4.1932: attempt to access beyond end of device [ 349.587571][T12070] md0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 349.607746][T12070] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 349.629709][T12070] UDF-fs: warning (device md0): udf_load_vrs: No anchor found [ 349.658821][T12070] UDF-fs: Scanning with blocksize 512 failed [ 349.669726][T12071] /dev/rnullb0: Can't open blockdev [ 349.731218][T12070] syz.4.1932: attempt to access beyond end of device [ 349.731218][T12070] md0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 349.806805][T12070] syz.4.1932: attempt to access beyond end of device [ 349.806805][T12070] md0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 349.819754][T12070] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 349.830332][T12070] syz.4.1932: attempt to access beyond end of device [ 349.830332][T12070] md0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 349.843456][T12070] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 349.852930][T12070] UDF-fs: warning (device md0): udf_load_vrs: No anchor found [ 349.861140][T12070] UDF-fs: Scanning with blocksize 1024 failed [ 349.869087][T12070] syz.4.1932: attempt to access beyond end of device [ 349.869087][T12070] md0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 349.895214][T12070] syz.4.1932: attempt to access beyond end of device [ 349.895214][T12070] md0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 349.944754][T12070] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 349.995449][ T5924] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 350.004343][T12070] syz.4.1932: attempt to access beyond end of device [ 350.004343][T12070] md0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 350.034681][T12070] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 350.061772][T12070] UDF-fs: warning (device md0): udf_load_vrs: No anchor found [ 350.069335][T12070] UDF-fs: Scanning with blocksize 2048 failed [ 350.077718][T12070] syz.4.1932: attempt to access beyond end of device [ 350.077718][T12070] md0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 350.095621][T12070] UDF-fs: error (device md0): udf_read_tagged: read failed, block=256, location=256 [ 350.135293][T12070] UDF-fs: error (device md0): udf_read_tagged: read failed, block=512, location=512 [ 350.157970][T12070] UDF-fs: warning (device md0): udf_load_vrs: No anchor found [ 350.179162][ T5924] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 350.187774][T12070] UDF-fs: Scanning with blocksize 4096 failed [ 350.187867][ T5924] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 350.202871][T12070] UDF-fs: warning (device md0): udf_fill_super: No partition found (1) [ 350.203603][ T5924] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 350.231454][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 350.248659][ T5924] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 350.263483][ T5924] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 350.279292][ T5924] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 350.290582][ T5924] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.307311][ T5924] usb 4-1: config 0 descriptor?? [ 350.313359][T12075] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 350.506124][T12081] /dev/rnullb0: Can't open blockdev [ 350.539840][ T5924] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 104 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 350.573011][ T5924] usb 4-1: USB disconnect, device number 104 [ 350.591511][ T5832] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 350.594423][ T5924] usblp0: removed [ 351.068050][T12093] No control pipe specified [ 351.213046][T12088] openvswitch: netlink: IP tunnel dst address not specified [ 351.465163][ T5888] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 351.627988][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.640761][ T5888] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 351.670343][ T5888] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 351.694098][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.696879][ T5832] Bluetooth: hci3: command 0x0405 tx timeout [ 351.718424][ T5888] usb 5-1: config 0 descriptor?? [ 351.763944][T12111] Can't find a SQUASHFS superblock on rnullb0 [ 351.831884][T12114] exFAT-fs (rnullb0): invalid boot record signature [ 351.852111][T12114] exFAT-fs (rnullb0): failed to read boot sector [ 351.878955][T12114] exFAT-fs (rnullb0): failed to recognize exfat type [ 352.024154][ T5888] Bluetooth: Can't get state to change to load ram patch err [ 352.044295][ T5888] Bluetooth: Loading patch file failed [ 352.058622][ T5888] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 352.077377][ T5888] usb 5-1: USB disconnect, device number 71 [ 352.663279][T12128] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_tx_wq": -EINTR [ 352.702823][T12130] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_cmd_wq": -EINTR [ 352.841283][T12145] omfs: Invalid superblock (0) [ 353.039531][T12150] omfs: Invalid superblock (0) [ 353.212649][T12156] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 353.230143][T12156] /dev/rnullb0: Can't open blockdev [ 353.351493][T12159] /dev/rnullb0: Can't open blockdev [ 353.768250][ T5888] usb 2-1: new full-speed USB device number 101 using dummy_hcd [ 353.775586][ T5836] Bluetooth: hci3: command 0x0405 tx timeout [ 353.914358][T12177] sock: sock_set_timeout: `syz.3.1964' (pid 12177) tries to set negative timeout [ 353.992120][ T5888] usb 2-1: unable to get BOS descriptor or descriptor too short [ 354.022788][ T5888] usb 2-1: not running at top speed; connect to a high speed hub [ 354.043300][ T5888] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 354.055070][ T5888] usb 2-1: config 1 has no interface number 0 [ 354.061204][ T5888] usb 2-1: config 1 interface 138 has no altsetting 0 [ 354.070285][T12181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1965'. [ 354.077977][ T5888] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 354.088544][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.105200][ T5888] usb 2-1: Product: syz [ 354.109503][ T5888] usb 2-1: Manufacturer: syz [ 354.114141][ T5888] usb 2-1: SerialNumber: syz [ 354.163344][T12181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.185820][T12181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.224800][T12183] NILFS (md0): device size too small [ 354.360618][T12185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.371150][ T5888] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 354.379178][ T5888] usb 2-1: MIDIStreaming interface descriptor not found [ 354.417514][T12185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.430731][ T5888] usb 2-1: USB disconnect, device number 101 [ 354.590390][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1951'. [ 355.241406][T12206] /dev/rnullb0: Can't open blockdev [ 355.557211][T12213] /dev/rnullb0: Can't open blockdev [ 355.704206][T12215] /dev/rnullb0: Can't open blockdev [ 356.086049][T12234] Mount JFS Failure: -22 [ 356.090358][T12234] jfs_mount failed w/return code = -22 [ 356.272684][T12245] netlink: 'syz.2.1985': attribute type 29 has an invalid length. [ 356.485217][ T5919] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 356.578726][ T92] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 356.592817][T12259] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1989'. [ 356.625090][ T5919] usb 4-1: device descriptor read/64, error -71 [ 356.667800][T12261] netlink: 'syz.4.1990': attribute type 4 has an invalid length. [ 356.739098][ T92] usb 2-1: config 0 has an invalid interface number: 57 but max is 0 [ 356.760602][ T92] usb 2-1: config 0 has no interface number 0 [ 356.769323][ T92] usb 2-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63 [ 356.782604][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.797383][ T92] usb 2-1: config 0 descriptor?? [ 356.808791][ T92] gspca_main: mr97310a-2.14.0 probing 093a:010f [ 356.816661][ T92] gspca_mr97310a: reg write [21] error -22 [ 356.822555][ T92] mr97310a 2-1:0.57: probe with driver mr97310a failed with error -22 [ 356.875119][ T5919] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 357.005096][ T5919] usb 4-1: device descriptor read/64, error -71 [ 357.017978][ T5880] usb 2-1: USB disconnect, device number 102 [ 357.116378][ T5919] usb usb4-port1: attempt power cycle [ 357.147064][ T92] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 357.285077][ T92] usb 5-1: device descriptor read/64, error -71 [ 357.466829][ T5919] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 357.495765][ T5919] usb 4-1: device descriptor read/8, error -71 [ 357.535405][ T92] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 357.675304][ T92] usb 5-1: device descriptor read/64, error -71 [ 357.735157][ T5919] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 357.768373][ T5919] usb 4-1: device descriptor read/8, error -71 [ 357.795363][ T92] usb usb5-port1: attempt power cycle [ 357.875465][ T5919] usb usb4-port1: unable to enumerate USB device [ 358.135360][ T92] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 358.168271][ T92] usb 5-1: device descriptor read/8, error -71 [ 358.345644][ T5836] Bluetooth: hci5: command 0x1003 tx timeout [ 358.352224][ T5832] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 358.415095][ T92] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 358.435739][ T92] usb 5-1: device descriptor read/8, error -71 [ 358.500314][T12278] usb usb9: usbfs: process 12278 (syz.2.1997) did not claim interface 0 before use [ 358.551268][ T92] usb usb5-port1: unable to enumerate USB device [ 358.600356][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 358.646009][T12281] /dev/rnullb0: Can't open blockdev [ 358.736087][T12287] FAT-fs (rnullb0): bogus number of reserved sectors [ 358.743677][T12287] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 358.892364][ T30] audit: type=1326 audit(1750666194.717:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.2.2003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993e58e929 code=0x0 [ 358.980426][ T30] audit: type=1326 audit(1750666194.807:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12297 comm="syz.2.2003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f993e58e929 code=0x0 [ 359.637092][T12321] netlink: 288 bytes leftover after parsing attributes in process `syz.3.2008'. [ 360.273765][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'. [ 360.282967][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2012'. [ 360.477703][ T5880] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 360.624559][T12350] hfs: can't find a HFS filesystem on dev rnullb0 [ 360.651891][ T5880] usb 4-1: device descriptor read/64, error -71 [ 360.915083][ T5880] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 361.095082][ T5880] usb 4-1: device descriptor read/64, error -71 [ 361.130174][T12363] Can't find a SQUASHFS superblock on rnullb0 [ 361.205481][ T5880] usb usb4-port1: attempt power cycle [ 361.558131][ T5880] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 361.585911][ T5880] usb 4-1: device descriptor read/8, error -71 [ 361.825199][ T5880] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 361.876060][ T5880] usb 4-1: device descriptor read/8, error -71 [ 361.926693][T12391] /dev/rnullb0: Can't open blockdev [ 361.995685][ T5880] usb usb4-port1: unable to enumerate USB device [ 362.202701][T12408] /dev/rnullb0: Can't open blockdev [ 362.375930][T12411] /dev/rnullb0: Can't open blockdev [ 363.028577][T12416] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 363.240821][T12425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 363.478844][T12433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 364.265247][ T5880] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 364.426870][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 364.449008][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 364.470155][ T5880] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 364.490124][ T5880] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.517496][ T5880] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.547956][ T5880] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.586174][ T5880] usb 5-1: config 0 descriptor?? [ 364.842407][T12460] /dev/rnullb0: Can't open blockdev [ 364.918327][T12466] /dev/rnullb0: Can't open blockdev [ 364.985552][T12470] /dev/rnullb0: Can't open blockdev [ 365.003036][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003069][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003096][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003121][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003146][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003171][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003196][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003221][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003246][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003270][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003294][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003318][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003343][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003368][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.003399][ T5880] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 365.004239][ T5880] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 365.033851][ T5880] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 365.169184][T12476] syzkaller1: entered promiscuous mode [ 365.223519][T12476] syzkaller1: entered allmulticast mode [ 365.284545][ T5880] usb 5-1: USB disconnect, device number 76 [ 365.430159][T12484] vxcan1 speed is unknown, defaulting to 1000 [ 365.762906][T12496] NILFS (rnullb0): couldn't find nilfs on the device [ 365.780431][T12497] NILFS (rnullb0): couldn't find nilfs on the device [ 365.904678][T12500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.924471][T12500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.241052][T12516] syz.3.2069 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 366.315504][ T5880] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 366.503600][T12522] /dev/rnullb0: Can't open blockdev [ 366.512387][T12523] /dev/rnullb0: Can't open blockdev [ 366.526817][ T5880] usb 5-1: config 1 interface 0 has no altsetting 0 [ 366.537539][ T5880] usb 5-1: New USB device found, idVendor=1e71, idProduct=200d, bcdDevice= 0.40 [ 366.549976][T12520] input: syz1 as /devices/virtual/input/input30 [ 366.560769][ T5880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.569709][ T5880] usb 5-1: Product: ֍폼뾚ⱻ꫙鳒봷떍뀬ᝲ灁﹛垓袽獇呭Ⱟȼ솏溗紻곥灩莚滼䞴ﾱꖆꁈ婶넓柚陇ﭯ٪洒籗 [ 366.605711][ T5880] usb 5-1: Manufacturer: Ј [ 366.610339][ T5880] usb 5-1: SerialNumber: Р [ 366.836426][T12508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 366.848133][T12508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.992853][ T5880] usbhid 5-1:1.0: can't add hid device: -71 [ 367.014758][ T5880] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 367.039966][ T5880] usb 5-1: USB disconnect, device number 77 [ 367.415126][ T5919] usb 4-1: new low-speed USB device number 113 using dummy_hcd [ 367.630109][ T5919] usb 4-1: config 1 interface 0 altsetting 213 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 367.648948][T12541] FAULT_INJECTION: forcing a failure. [ 367.648948][T12541] name failslab, interval 1, probability 0, space 0, times 0 [ 367.665153][ T5919] usb 4-1: config 1 interface 0 has no altsetting 0 [ 367.723502][T12541] CPU: 0 UID: 0 PID: 12541 Comm: syz.4.2077 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 367.723529][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.723548][T12541] Call Trace: [ 367.723556][T12541] [ 367.723565][T12541] dump_stack_lvl+0x189/0x250 [ 367.723593][T12541] ? __pfx____ratelimit+0x10/0x10 [ 367.723624][T12541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.723646][T12541] ? __pfx__printk+0x10/0x10 [ 367.723686][T12541] ? __pfx___might_resched+0x10/0x10 [ 367.723713][T12541] should_fail_ex+0x414/0x560 [ 367.723741][T12541] should_failslab+0xa8/0x100 [ 367.723767][T12541] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 367.723791][T12541] ? __alloc_skb+0x112/0x2d0 [ 367.723816][T12541] __alloc_skb+0x112/0x2d0 [ 367.723841][T12541] netlink_sendmsg+0x5c6/0xb30 [ 367.723874][T12541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.723900][T12541] ? aa_sock_msg_perm+0x94/0x160 [ 367.723921][T12541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.723949][T12541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.723973][T12541] __sock_sendmsg+0x21c/0x270 [ 367.723993][T12541] ____sys_sendmsg+0x505/0x830 [ 367.724022][T12541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.724062][T12541] ? import_iovec+0x74/0xa0 [ 367.724101][T12541] ___sys_sendmsg+0x21f/0x2a0 [ 367.724131][T12541] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.724196][T12541] ? __fget_files+0x2a/0x420 [ 367.724225][T12541] ? __fget_files+0x3a0/0x420 [ 367.724265][T12541] __x64_sys_sendmsg+0x19b/0x260 [ 367.724295][T12541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.724332][T12541] ? __pfx_ksys_write+0x10/0x10 [ 367.724365][T12541] ? do_syscall_64+0xbe/0x3b0 [ 367.724388][T12541] do_syscall_64+0xfa/0x3b0 [ 367.724406][T12541] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.724436][T12541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.724457][T12541] ? clear_bhb_loop+0x60/0xb0 [ 367.724480][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.724504][T12541] RIP: 0033:0x7fad6bb8e929 [ 367.724522][T12541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.724539][T12541] RSP: 002b:00007fad6cace038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.724560][T12541] RAX: ffffffffffffffda RBX: 00007fad6bdb5fa0 RCX: 00007fad6bb8e929 [ 367.724575][T12541] RDX: 0000000020000000 RSI: 0000200000000b40 RDI: 0000000000000005 [ 367.724589][T12541] RBP: 00007fad6cace090 R08: 0000000000000000 R09: 0000000000000000 [ 367.724602][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.724613][T12541] R13: 0000000000000000 R14: 00007fad6bdb5fa0 R15: 00007ffdfc2c3da8 [ 367.724645][T12541] [ 368.267049][ T5836] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 368.283681][ T5836] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 368.293026][ T5836] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 368.302749][ T5836] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 368.313864][ T5836] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 368.582413][T12544] vxcan1 speed is unknown, defaulting to 1000 [ 368.640328][ T5924] usb 3-1: USB disconnect, device number 97 [ 368.793129][T12553] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2081'. [ 368.868336][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.033991][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.257232][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.336026][T12565] /dev/rnullb0: Can't open blockdev [ 369.437845][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.892457][ T49] bridge_slave_1: left allmulticast mode [ 369.922763][ T49] bridge_slave_1: left promiscuous mode [ 369.952526][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.005831][ T49] bridge_slave_0: left allmulticast mode [ 370.029412][ T49] bridge_slave_0: left promiscuous mode [ 370.036368][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.143912][ T5919] usb 4-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.40 [ 370.156568][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.187724][ T5919] usb 4-1: can't set config #1, error -71 [ 370.216747][ T5919] usb 4-1: USB disconnect, device number 113 [ 370.417654][ T5836] Bluetooth: hci5: command tx timeout [ 370.455031][ T5888] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 370.608352][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 370.616902][ T5888] usb 5-1: config 0 has no interfaces? [ 370.629146][ T5888] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 370.648294][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.662684][ T5888] usb 5-1: Product: syz [ 370.667634][ T5888] usb 5-1: Manufacturer: syz [ 370.683618][ T5888] usb 5-1: SerialNumber: syz [ 370.695534][ T5888] usb 5-1: config 0 descriptor?? [ 370.874665][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 370.886919][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 370.898481][ T49] bond0 (unregistering): (slave team0): Releasing backup interface [ 370.927050][ T49] bond0 (unregistering): Released all slaves [ 370.966976][ T5880] usb 5-1: USB disconnect, device number 78 [ 371.057775][T12544] chnl_net:caif_netlink_parms(): no params data found [ 371.182382][T12595] hfs: can't find a HFS filesystem on dev rnullb0 [ 371.395170][ T92] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 371.546743][ T92] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.575067][ T92] usb 2-1: config 0 has no interface number 0 [ 371.581229][ T92] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.608321][T12544] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.617976][ T92] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.648561][ T92] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 371.670876][T12544] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.685526][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.705413][T12544] bridge_slave_0: entered allmulticast mode [ 371.723461][ T92] usb 2-1: config 0 descriptor?? [ 371.733540][T12544] bridge_slave_0: entered promiscuous mode [ 371.789629][T12544] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.807161][T12544] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.841034][T12544] bridge_slave_1: entered allmulticast mode [ 371.861174][T12544] bridge_slave_1: entered promiscuous mode [ 372.042623][T12544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.089934][T12544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.209043][T12544] team0: Port device team_slave_0 added [ 372.219614][T12544] team0: Port device team_slave_1 added [ 372.369835][T12596] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2093'. [ 372.404518][T12590] qnx4: no qnx4 filesystem (no root dir). [ 372.479133][ T92] usbhid 2-1:0.1: can't add hid device: -71 [ 372.495487][ T5836] Bluetooth: hci5: command tx timeout [ 372.515086][ T92] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 372.568510][ T92] usb 2-1: USB disconnect, device number 103 [ 372.620480][T12544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.647130][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.679378][T12544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.713117][T12544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.726363][T12544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.755737][T12544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.772595][ T49] hsr_slave_0: left promiscuous mode [ 372.778711][ T49] hsr_slave_1: left promiscuous mode [ 372.784831][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.799355][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.868169][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.875792][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.901950][ T49] veth1_macvtap: left promiscuous mode [ 372.915337][ T49] veth0_macvtap: left promiscuous mode [ 372.921062][ T49] veth1_vlan: left promiscuous mode [ 372.930322][ T49] veth0_vlan: left promiscuous mode [ 373.185645][T12639] overlayfs: failed to resolve './file1': -2 [ 373.236776][T12639] 9pnet: Could not find request transport: xen [ 373.287058][T12639] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 373.294312][T12639] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 373.536750][ T49] team0 (unregistering): Port device team_slave_1 removed [ 373.577886][ T49] team0 (unregistering): Port device team_slave_0 removed [ 373.784547][ T8974] smc: removing ib device syz2 [ 374.240744][T12655] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2103'. [ 374.259682][ T24] vxcan1 speed is unknown, defaulting to 1000 [ 374.282467][ T24] syz2: Port: 1 Link DOWN [ 374.302041][T12641] dvmrp0: entered allmulticast mode [ 374.450324][T12544] hsr_slave_0: entered promiscuous mode [ 374.463600][T12544] hsr_slave_1: entered promiscuous mode [ 374.471447][T12544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.482919][T12544] Cannot create hsr debugfs directory [ 374.575201][ T5836] Bluetooth: hci5: command tx timeout [ 374.645981][T12661] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 374.652815][T12661] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 374.703347][ T5888] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 374.875041][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 374.905085][ T5888] usb 5-1: config 0 has no interfaces? [ 374.926030][ T5888] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 374.955931][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.012291][ T5888] usb 5-1: Product: syz [ 375.025502][ T5888] usb 5-1: Manufacturer: syz [ 375.030161][ T5888] usb 5-1: SerialNumber: syz [ 375.078821][ T5888] usb 5-1: config 0 descriptor?? [ 375.235350][ T5919] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 375.393707][ T5880] usb 5-1: USB disconnect, device number 79 [ 375.416422][ T5919] usb 2-1: Using ep0 maxpacket: 16 [ 375.447251][ T5919] usb 2-1: config 1 has an invalid interface number: 4 but max is 2 [ 375.476969][ T5919] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 375.508583][ T5919] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 375.541301][ T5919] usb 2-1: config 1 has no interface number 1 [ 375.548144][ T5919] usb 2-1: too many endpoints for config 1 interface 4 altsetting 0: 102, using maximum allowed: 30 [ 375.566297][ T5919] usb 2-1: config 1 interface 4 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 102 [ 375.602336][ T5919] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 375.658660][ T5919] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.53 [ 375.677841][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.687526][ T5919] usb 2-1: Product: syz [ 375.691751][ T5919] usb 2-1: Manufacturer: syz [ 375.702938][ T5919] usb 2-1: SerialNumber: syz [ 375.943689][ T5919] usb 2-1: 0:2 : does not exist [ 376.006709][ T5919] usb 2-1: USB disconnect, device number 104 [ 376.067662][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 376.228995][T12702] overlay: ./file0 is not a directory [ 376.245901][ T49] IPVS: stop unused estimator thread 0... [ 376.282836][T12544] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 376.323498][T12544] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 376.358899][T12544] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 376.403032][T12544] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 376.449230][T12712] hfs: can't find a HFS filesystem on dev rnullb0 [ 376.655305][ T5836] Bluetooth: hci5: command tx timeout [ 376.723988][T12544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.742854][T12729] hfs: can't find a HFS filesystem on dev rnullb0 [ 376.841243][T12544] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.847981][ T5880] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 376.888283][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.895477][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.917879][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.925115][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.975236][ T5880] usb 2-1: device descriptor read/64, error -71 [ 377.220200][T12735] bio_check_eod: 2 callbacks suppressed [ 377.220216][T12735] syz.3.2116: attempt to access beyond end of device [ 377.220216][T12735] md0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 377.225380][ T5880] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 377.409033][ T5880] usb 2-1: device descriptor read/64, error -71 [ 377.415940][ T5919] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 377.458376][T12544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.537240][ T5880] usb usb2-port1: attempt power cycle [ 377.576353][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 377.592656][ T5919] usb 5-1: config 0 has no interfaces? [ 377.604155][ T5919] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 377.619044][T12544] veth0_vlan: entered promiscuous mode [ 377.634845][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.653538][ T5919] usb 5-1: Product: syz [ 377.660152][T12544] veth1_vlan: entered promiscuous mode [ 377.665796][ T5919] usb 5-1: Manufacturer: syz [ 377.678169][ T5919] usb 5-1: SerialNumber: syz [ 377.694318][ T5919] usb 5-1: config 0 descriptor?? [ 377.747603][T12544] veth0_macvtap: entered promiscuous mode [ 377.780358][T12544] veth1_macvtap: entered promiscuous mode [ 377.810616][T12544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.833064][T12544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.845534][T12544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.854832][T12544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.866732][T12544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.875653][T12544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.899518][ T5880] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 377.940828][ T5880] usb 2-1: device descriptor read/8, error -71 [ 378.008644][ T5924] usb 5-1: USB disconnect, device number 80 [ 378.050585][ T8964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.068096][ T8964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.101018][ T8964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.110021][ T8964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.195152][ T5880] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 378.225787][ T5880] usb 2-1: device descriptor read/8, error -71 [ 378.346139][ T5880] usb usb2-port1: unable to enumerate USB device [ 378.462926][T12784] vxfs: WRONG superblock magic 00000000 at 1 [ 378.471754][T12784] vxfs: WRONG superblock magic 00000000 at 8 [ 378.479904][T12784] vxfs: can't find superblock. [ 378.492281][T12784] netlink: 'syz.2.2122': attribute type 10 has an invalid length. [ 378.500695][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.500788][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.565495][T12784] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2122'. [ 378.652400][T12784] team0: Port device geneve0 added [ 379.069853][T12802] /dev/sg0: Can't lookup blockdev [ 379.207744][T12807] /dev/rnullb0: Can't open blockdev [ 379.285531][ T5924] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 379.449012][ T5924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.465105][ T5924] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 379.474276][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.526334][ T5924] usb 5-1: config 0 descriptor?? [ 379.537597][ T5924] pwc: Askey VC010 type 2 USB webcam detected. [ 379.938818][ T5924] pwc: recv_control_msg error -32 req 02 val 2b00 [ 380.006449][ T5880] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 380.008013][T12814] vcan0: entered allmulticast mode [ 380.032290][T12814] syz.3.2131: attempt to access beyond end of device [ 380.032290][T12814] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 380.049050][T12814] EXT4-fs (nbd3): unable to read superblock [ 380.157532][ T5924] pwc: recv_control_msg error -71 req 02 val 2c00 [ 380.180590][ T5924] pwc: recv_control_msg error -71 req 04 val 1000 [ 380.195519][ T5924] pwc: recv_control_msg error -71 req 04 val 1300 [ 380.196086][ T5880] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.205442][ T5924] pwc: recv_control_msg error -71 req 04 val 1400 [ 380.216884][ T5880] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 380.229485][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.239757][ T5924] pwc: recv_control_msg error -71 req 02 val 2000 [ 380.253316][ T5880] usb 2-1: config 0 descriptor?? [ 380.255452][ T5924] pwc: recv_control_msg error -71 req 02 val 2100 [ 380.275494][ T5924] pwc: recv_control_msg error -71 req 04 val 1500 [ 380.282416][ T5924] pwc: recv_control_msg error -71 req 02 val 2500 [ 380.294464][ T5924] pwc: recv_control_msg error -71 req 02 val 2400 [ 380.301461][ T5924] pwc: recv_control_msg error -71 req 02 val 2600 [ 380.312732][ T5924] pwc: recv_control_msg error -71 req 02 val 2900 [ 380.322112][ T5924] pwc: recv_control_msg error -71 req 02 val 2800 [ 380.332929][ T5924] pwc: recv_control_msg error -71 req 04 val 1100 [ 380.339950][ T5924] pwc: recv_control_msg error -71 req 04 val 1200 [ 380.353512][ T5924] pwc: Registered as video103. [ 380.367331][ T5924] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 380.388115][ T5924] usb 5-1: USB disconnect, device number 81 [ 380.405086][ T92] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 380.595534][ T92] usb 4-1: Using ep0 maxpacket: 8 [ 380.604853][ T92] usb 4-1: config 0 has no interfaces? [ 380.617801][ T92] usb 4-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 380.635916][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.644287][ T92] usb 4-1: Product: syz [ 380.649712][ T92] usb 4-1: Manufacturer: syz [ 380.654766][ T92] usb 4-1: SerialNumber: syz [ 380.679364][ T92] usb 4-1: config 0 descriptor?? [ 380.696244][ T5880] koneplus 0003:1E7D:2E22.0016: hidraw0: USB HID vff.fe Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 380.871955][ T5880] koneplus 0003:1E7D:2E22.0016: couldn't init struct koneplus_device [ 380.887171][ T5880] koneplus 0003:1E7D:2E22.0016: couldn't install mouse [ 380.945932][ T5880] koneplus 0003:1E7D:2E22.0016: probe with driver koneplus failed with error -71 [ 380.977071][ T5880] usb 2-1: USB disconnect, device number 109 [ 381.070452][ T5919] usb 4-1: USB disconnect, device number 114 [ 381.238618][T12835] program syz.4.2138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 381.454882][T12839] dlm: Unknown command passed to DLM device : 0 [ 381.454882][T12839] [ 381.975257][ T43] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 382.152680][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 382.161400][ T43] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 382.177150][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.193685][ T43] usb 2-1: config 0 has no interface number 0 [ 382.206764][ T43] usb 2-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 382.233227][ T43] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 382.243980][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.275041][ T43] usb 2-1: Product: syz [ 382.284553][ T43] usb 2-1: Manufacturer: syz [ 382.295085][ T43] usb 2-1: SerialNumber: syz [ 382.306105][ T43] usb 2-1: config 0 descriptor?? [ 382.318538][ T43] usb-storage 2-1:0.231: USB Mass Storage device detected [ 382.495740][ T92] usb 3-1: new full-speed USB device number 98 using dummy_hcd [ 382.518966][ T10] usb 2-1: USB disconnect, device number 110 [ 382.597874][ T5919] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 382.646694][ T92] usb 3-1: config 1 interface 0 altsetting 253 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 382.660062][ T5880] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 382.667939][ T92] usb 3-1: config 1 interface 0 has no altsetting 0 [ 382.678001][ T92] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 382.687650][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.696434][ T92] usb 3-1: Product: syz [ 382.700620][ T92] usb 3-1: Manufacturer: syz [ 382.705363][ T92] usb 3-1: SerialNumber: syz [ 382.755095][ T5919] usb 5-1: Using ep0 maxpacket: 8 [ 382.761748][ T5919] usb 5-1: config 0 has an invalid interface number: 100 but max is 0 [ 382.770163][ T5919] usb 5-1: config 0 has no interface number 0 [ 382.776602][ T5919] usb 5-1: config 0 interface 100 has no altsetting 0 [ 382.785382][ T5919] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 382.794465][ T5919] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.802537][ T5919] usb 5-1: Product: syz [ 382.806847][ T5919] usb 5-1: Manufacturer: syz [ 382.811581][ T5919] usb 5-1: SerialNumber: syz [ 382.819840][ T5919] usb 5-1: config 0 descriptor?? [ 382.830838][ T5880] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 382.841511][ T5919] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 382.847795][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 382.856360][ T5880] usb 4-1: Product: syz [ 382.860600][ T5880] usb 4-1: SerialNumber: syz [ 382.870437][ T5880] usb 4-1: config 0 descriptor?? [ 382.877621][ T5880] hso 4-1:0.0: Not our interface [ 383.082800][T12890] FAT-fs (rnullb0): bogus number of reserved sectors [ 383.092091][T12890] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 383.106026][ T5880] usb 4-1: USB disconnect, device number 115 [ 383.150050][T12898] Can't find a SQUASHFS superblock on rnullb0 [ 383.299956][T12904] virtio-fs: tag not found [ 383.751267][ T5836] Bluetooth: hci3: unexpected event for opcode 0x200f [ 383.839047][T12875] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2149'. [ 383.849048][T12875] x_tables: ip_tables: udp match: only valid for protocol 17 [ 384.045165][ T5924] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 384.205144][ T5924] usb 2-1: Using ep0 maxpacket: 16 [ 384.217322][ T5924] usb 2-1: config 0 has an invalid interface number: 225 but max is 0 [ 384.235951][ T5924] usb 2-1: config 0 has no interface number 0 [ 384.242085][ T5924] usb 2-1: New USB device found, idVendor=05ac, idProduct=1202, bcdDevice=72.0c [ 384.260454][ T5924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.271103][ T5924] apple-mfi-fastcharge 2-1: config 0 descriptor?? [ 384.287144][ T5924] usb-storage 2-1:0.225: USB Mass Storage device detected [ 384.323285][ T5924] usb-storage 2-1:0.225: Quirks match for vid 05ac pid 1202: 10 [ 384.501145][ T5924] apple-mfi-fastcharge 2-1: USB disconnect, device number 111 [ 384.696603][ T5880] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 384.855127][ T5880] usb 4-1: Using ep0 maxpacket: 32 [ 384.862070][ T5880] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 384.874764][ T5880] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 384.884015][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 384.892715][ T5880] usb 4-1: Product: syz [ 384.901863][ T5880] usb 4-1: Manufacturer: syz [ 384.906839][ T5880] usb 4-1: SerialNumber: syz [ 384.914202][ T5880] usb 4-1: config 0 descriptor?? [ 384.923635][T12935] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 385.203967][ T5880] usb 4-1: USB disconnect, device number 116 [ 385.230884][ T92] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 98 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 385.262731][ T92] usb 3-1: USB disconnect, device number 98 [ 385.310415][ T92] usblp1: removed [ 385.415121][ T5888] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 385.578821][ T5888] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 385.595031][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.615033][ T5888] usb 2-1: Product: syz [ 385.619643][ T5888] usb 2-1: Manufacturer: syz [ 385.624812][ T5888] usb 2-1: SerialNumber: syz [ 385.648211][ T5888] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 385.693705][ T5924] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 385.955182][ T5919] gspca_sonixj: i2c_w8 err -71 [ 385.968202][ T24] usb 2-1: USB disconnect, device number 112 [ 385.995109][ T5919] sonixj 5-1:0.100: probe with driver sonixj failed with error -71 [ 385.997320][ T5919] usb 5-1: USB disconnect, device number 82 [ 386.019149][ T92] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 386.155312][ T92] usb 3-1: device descriptor read/64, error -71 [ 386.395218][ T92] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 386.526035][ T92] usb 3-1: device descriptor read/64, error -71 [ 386.560823][ T30] audit: type=1804 audit(1750666222.387:86): pid=12990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2180" name="/newroot/345/bus/file0" dev="overlay" ino=1881 res=1 errno=0 [ 386.561028][T12990] evm: overlay not supported [ 386.614693][T12993] program syz.1.2182 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.645469][ T92] usb usb3-port1: attempt power cycle [ 386.665060][ T5888] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 386.735244][ T5924] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 386.743212][ T5924] ath9k_htc: Failed to initialize the device [ 386.760714][ T24] usb 2-1: ath9k_htc: USB layer deinitialized [ 386.821059][T13000] fuse: Bad value for 'group_id' [ 386.828755][T13000] fuse: Bad value for 'group_id' [ 386.833559][ T5888] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 386.843071][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.851217][ T5888] usb 4-1: Product: syz [ 386.855666][ T5888] usb 4-1: Manufacturer: syz [ 386.860339][ T5888] usb 4-1: SerialNumber: syz [ 386.867352][T13000] exFAT-fs (rnullb0): invalid boot record signature [ 386.869219][ T5888] usb 4-1: config 0 descriptor?? [ 386.881973][T13000] exFAT-fs (rnullb0): failed to read boot sector [ 386.883031][ T5888] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 386.890303][T13000] exFAT-fs (rnullb0): failed to recognize exfat type [ 386.985369][ T92] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 387.004109][T13004] FAT-fs (rnullb0): bogus number of reserved sectors [ 387.011742][T13004] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 387.020204][ T92] usb 3-1: device descriptor read/8, error -71 [ 387.217882][T13008] Can't find a SQUASHFS superblock on rnullb0 [ 387.265173][ T92] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 387.280796][T13010] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 387.288301][T13010] cramfs: wrong magic [ 387.299438][ T92] usb 3-1: device descriptor read/8, error -71 [ 387.309866][ T5888] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 387.425434][ T92] usb usb3-port1: unable to enumerate USB device [ 387.540082][ T5888] usb 4-1: USB disconnect, device number 117 [ 388.347769][T13035] /dev/sg0: Can't lookup blockdev [ 388.803919][T13045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 389.001559][T13060] gfs2: not a GFS2 filesystem [ 389.198494][T13074] program syz.4.2211 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 389.441343][T13093] netlink: 'syz.1.2216': attribute type 11 has an invalid length. [ 389.836726][T13118] loop8: detected capacity change from 0 to 7 [ 389.853781][T13118] Dev loop8: unable to read RDB block 7 [ 389.861409][T13118] loop8: unable to read partition table [ 389.867575][T13118] loop8: partition table beyond EOD, truncated [ 389.890859][T13118] loop_reread_partitions: partition scan of loop8 (被x) failed (rc=-5) [ 390.012430][T13120] ------------[ cut here ]------------ [ 390.020354][T13120] WARNING: CPU: 0 PID: 13120 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 390.030592][T13120] Modules linked in: [ 390.034723][T13120] CPU: 0 UID: 0 PID: 13120 Comm: syz.3.2227 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 390.047557][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.057947][T13120] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 390.064210][T13120] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 8e dc f6 90 0f 0b 90 eb e1 e8 57 8e dc f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 390.084170][T13120] RSP: 0018:ffffc9000333eff0 EFLAGS: 00010293 [ 390.090742][T13120] RAX: ffffffff8ae3fec9 RBX: ffff888033638000 RCX: ffff888059f51e00 [ 390.099048][T13120] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 390.107319][T13120] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae3f9e3 [ 390.115369][T13120] R10: dffffc0000000000 R11: ffffed10066c7031 R12: 1ffff110066c700a [ 390.123372][T13120] R13: ffff888024830e40 R14: 0000000000000001 R15: ffffffff8ae3f9e3 [ 390.131426][T13120] FS: 00007f2c8f6ad6c0(0000) GS:ffff888125a1c000(0000) knlGS:0000000000000000 [ 390.140416][T13120] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 390.147124][T13120] CR2: 0000200000b0b000 CR3: 0000000032142000 CR4: 00000000003526f0 [ 390.155461][T13120] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 390.163460][T13120] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 390.171793][T13120] Call Trace: [ 390.175556][T13120] [ 390.178525][T13120] rate_control_rate_init_all_links+0x109/0x1a0 [ 390.184823][T13120] sta_apply_auth_flags+0x1c2/0x400 [ 390.190137][T13120] sta_apply_parameters+0xe4b/0x15b0 [ 390.195518][T13120] ieee80211_add_station+0x424/0x6a0 [ 390.200853][T13120] rdev_add_station+0x108/0x290 [ 390.205789][T13120] nl80211_new_station+0x1723/0x1b40 [ 390.211128][T13120] ? __pfx_nl80211_new_station+0x10/0x10 [ 390.216837][T13120] ? netdev_run_todo+0xe1d/0xea0 [ 390.221841][T13120] ? nl80211_pre_doit+0x4f1/0x930 [ 390.226968][T13120] genl_family_rcv_msg_doit+0x215/0x300 [ 390.232573][T13120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.238759][T13120] ? bpf_lsm_capable+0x9/0x20 [ 390.243470][T13120] ? security_capable+0x7e/0x2e0 [ 390.248510][T13120] genl_rcv_msg+0x60e/0x790 [ 390.253294][T13120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.258856][T13120] ? ref_tracker_free+0x63a/0x7d0 [ 390.263927][T13120] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 390.269415][T13120] ? __pfx_nl80211_new_station+0x10/0x10 [ 390.275132][T13120] ? __pfx_nl80211_post_doit+0x10/0x10 [ 390.280653][T13120] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.286146][T13120] netlink_rcv_skb+0x208/0x470 [ 390.290948][T13120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.296076][T13120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.301416][T13120] ? down_read+0x1ad/0x2e0 [ 390.305948][T13120] genl_rcv+0x28/0x40 [ 390.309971][T13120] netlink_unicast+0x75b/0x8d0 [ 390.314791][T13120] netlink_sendmsg+0x805/0xb30 [ 390.319664][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.325082][T13120] ? aa_sock_msg_perm+0x94/0x160 [ 390.330088][T13120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.335704][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.341028][T13120] __sock_sendmsg+0x21c/0x270 [ 390.345985][T13120] ____sys_sendmsg+0x505/0x830 [ 390.350795][T13120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.356372][T13120] ? import_iovec+0x74/0xa0 [ 390.360915][T13120] ___sys_sendmsg+0x21f/0x2a0 [ 390.365865][T13120] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.371136][T13120] ? __fget_files+0x2a/0x420 [ 390.375940][T13120] ? __fget_files+0x3a0/0x420 [ 390.380676][T13120] __x64_sys_sendmsg+0x19b/0x260 [ 390.385707][T13120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.391211][T13120] ? rcu_is_watching+0x15/0xb0 [ 390.396061][T13120] ? do_syscall_64+0xbe/0x3b0 [ 390.400776][T13120] do_syscall_64+0xfa/0x3b0 [ 390.405424][T13120] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.410671][T13120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.417031][T13120] ? clear_bhb_loop+0x60/0xb0 [ 390.421753][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.427941][T13120] RIP: 0033:0x7f2c8e78e929 [ 390.432469][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.452216][T13120] RSP: 002b:00007f2c8f6ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.461001][T13120] RAX: ffffffffffffffda RBX: 00007f2c8e9b5fa0 RCX: 00007f2c8e78e929 [ 390.469415][T13120] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000009 [ 390.477512][T13120] RBP: 00007f2c8e810b39 R08: 0000000000000000 R09: 0000000000000000 [ 390.485556][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.493555][T13120] R13: 0000000000000000 R14: 00007f2c8e9b5fa0 R15: 00007ffddc21ca38 [ 390.501904][T13120] [ 390.505052][T13120] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 390.512369][T13120] CPU: 0 UID: 0 PID: 13120 Comm: syz.3.2227 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 390.524468][T13120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.534568][T13120] Call Trace: [ 390.537871][T13120] [ 390.540820][T13120] dump_stack_lvl+0x99/0x250 [ 390.545451][T13120] ? __asan_memcpy+0x40/0x70 [ 390.550079][T13120] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.555337][T13120] ? __pfx__printk+0x10/0x10 [ 390.559995][T13120] panic+0x2db/0x790 [ 390.563926][T13120] ? __pfx_panic+0x10/0x10 [ 390.568386][T13120] __warn+0x31b/0x4b0 [ 390.572394][T13120] ? rate_control_rate_init+0x64a/0x6e0 [ 390.577973][T13120] ? rate_control_rate_init+0x64a/0x6e0 [ 390.583534][T13120] report_bug+0x2be/0x4f0 [ 390.587892][T13120] ? rate_control_rate_init+0x64a/0x6e0 [ 390.593450][T13120] ? rate_control_rate_init+0x64a/0x6e0 [ 390.599016][T13120] ? rate_control_rate_init+0x64c/0x6e0 [ 390.604568][T13120] handle_bug+0x84/0x160 [ 390.608821][T13120] exc_invalid_op+0x1a/0x50 [ 390.613337][T13120] asm_exc_invalid_op+0x1a/0x20 [ 390.618200][T13120] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 390.624373][T13120] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 62 8e dc f6 90 0f 0b 90 eb e1 e8 57 8e dc f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 390.644005][T13120] RSP: 0018:ffffc9000333eff0 EFLAGS: 00010293 [ 390.650098][T13120] RAX: ffffffff8ae3fec9 RBX: ffff888033638000 RCX: ffff888059f51e00 [ 390.658092][T13120] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 390.666096][T13120] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae3f9e3 [ 390.674106][T13120] R10: dffffc0000000000 R11: ffffed10066c7031 R12: 1ffff110066c700a [ 390.682085][T13120] R13: ffff888024830e40 R14: 0000000000000001 R15: ffffffff8ae3f9e3 [ 390.690078][T13120] ? rate_control_rate_init+0x163/0x6e0 [ 390.695646][T13120] ? rate_control_rate_init+0x163/0x6e0 [ 390.701205][T13120] ? rate_control_rate_init+0x649/0x6e0 [ 390.706789][T13120] rate_control_rate_init_all_links+0x109/0x1a0 [ 390.713053][T13120] sta_apply_auth_flags+0x1c2/0x400 [ 390.718275][T13120] sta_apply_parameters+0xe4b/0x15b0 [ 390.723578][T13120] ieee80211_add_station+0x424/0x6a0 [ 390.728893][T13120] rdev_add_station+0x108/0x290 [ 390.733755][T13120] nl80211_new_station+0x1723/0x1b40 [ 390.739053][T13120] ? __pfx_nl80211_new_station+0x10/0x10 [ 390.744705][T13120] ? netdev_run_todo+0xe1d/0xea0 [ 390.749692][T13120] ? nl80211_pre_doit+0x4f1/0x930 [ 390.754737][T13120] genl_family_rcv_msg_doit+0x215/0x300 [ 390.760332][T13120] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 390.766426][T13120] ? bpf_lsm_capable+0x9/0x20 [ 390.771119][T13120] ? security_capable+0x7e/0x2e0 [ 390.776082][T13120] genl_rcv_msg+0x60e/0x790 [ 390.780617][T13120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.785662][T13120] ? ref_tracker_free+0x63a/0x7d0 [ 390.790715][T13120] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 390.796116][T13120] ? __pfx_nl80211_new_station+0x10/0x10 [ 390.801751][T13120] ? __pfx_nl80211_post_doit+0x10/0x10 [ 390.807221][T13120] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.812614][T13120] netlink_rcv_skb+0x208/0x470 [ 390.817394][T13120] ? __pfx_genl_rcv_msg+0x10/0x10 [ 390.822434][T13120] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.827739][T13120] ? down_read+0x1ad/0x2e0 [ 390.832178][T13120] genl_rcv+0x28/0x40 [ 390.836184][T13120] netlink_unicast+0x75b/0x8d0 [ 390.840970][T13120] netlink_sendmsg+0x805/0xb30 [ 390.845770][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.851064][T13120] ? aa_sock_msg_perm+0x94/0x160 [ 390.856005][T13120] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.861314][T13120] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.866610][T13120] __sock_sendmsg+0x21c/0x270 [ 390.871305][T13120] ____sys_sendmsg+0x505/0x830 [ 390.876084][T13120] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.881381][T13120] ? import_iovec+0x74/0xa0 [ 390.885887][T13120] ___sys_sendmsg+0x21f/0x2a0 [ 390.890575][T13120] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.895814][T13120] ? __fget_files+0x2a/0x420 [ 390.900422][T13120] ? __fget_files+0x3a0/0x420 [ 390.905120][T13120] __x64_sys_sendmsg+0x19b/0x260 [ 390.910083][T13120] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.915560][T13120] ? rcu_is_watching+0x15/0xb0 [ 390.920334][T13120] ? do_syscall_64+0xbe/0x3b0 [ 390.925026][T13120] do_syscall_64+0xfa/0x3b0 [ 390.929541][T13120] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.934758][T13120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.940836][T13120] ? clear_bhb_loop+0x60/0xb0 [ 390.945527][T13120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.951422][T13120] RIP: 0033:0x7f2c8e78e929 [ 390.955855][T13120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.975466][T13120] RSP: 002b:00007f2c8f6ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.983892][T13120] RAX: ffffffffffffffda RBX: 00007f2c8e9b5fa0 RCX: 00007f2c8e78e929 [ 390.991871][T13120] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000009 [ 390.999845][T13120] RBP: 00007f2c8e810b39 R08: 0000000000000000 R09: 0000000000000000 [ 391.007818][T13120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.015790][T13120] R13: 0000000000000000 R14: 00007f2c8e9b5fa0 R15: 00007ffddc21ca38 [ 391.023776][T13120] [ 391.027208][T13120] Kernel Offset: disabled [ 391.031551][T13120] Rebooting in 86400 seconds..