last executing test programs: 29m44.980747695s ago: executing program 32 (id=658): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01004cd25601f3d6e9d919d5000000ffffdbdf654400000408000310ac900102ea070000009cb8535c10d639bf5fb2ec98cd2d713288d47004", @ANYRES32=r4, @ANYBLOB="0c00238005001e0001000000"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) setsockopt$RDS_GET_MR_FOR_DEST(r8, 0x114, 0x7, &(0x7f0000000240)={@isdn={0x22, 0xe, 0x90, 0xaf, 0x3}, {&(0x7f0000000400)=""/248, 0xf8}, &(0x7f00000001c0)}, 0xa0) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x30, 0x5, 0x0, {0x0, 0x2}}, 0x30) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) chmod(&(0x7f0000000140)='./file0\x00', 0x170) r9 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$P9_RREADLINK(r9, &(0x7f0000000080)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000200)) r10 = socket$inet(0x2, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x12, r11, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20037, 0x1) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) getsockname(r11, 0x0, &(0x7f00000005c0)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x13, r0, 0x0) r12 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r12, 0x2000) 21m41.731011169s ago: executing program 1 (id=4619): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000100)=[@cpuid={0x2, 0x18, {0x4, 0xfff}}, @cpuid={0x2, 0x18, {0x5, 0xfffffffc}}, @code={0x1, 0x5e, {"400f974c353a66ba4200b00cee3e6ee41266ba4000b833000000efc463e14271065af2411c00c744240000000000c74424022d800000c7442406000000000f011424c423595e0234c442ed03f9"}}, @uexit={0x0, 0x18, 0x3}, @uexit={0x0, 0x18, 0xc}, @uexit={0x0, 0x18, 0x6}, @uexit={0x0, 0x18, 0xa}, @uexit={0x0, 0x18, 0x3}], 0x106}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000000240)={[0x9, 0xd77, 0xc, 0x5, 0xfffffffeffffffff, 0x800, 0x5, 0x0, 0xda8, 0x137d, 0xffff, 0xffffffff80000001, 0x2, 0x6, 0x5, 0x8], 0x5000}) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 21m41.618608966s ago: executing program 1 (id=4620): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) r1 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000100)={0x2e, 0x3, 0x0, {0x5, 0xd, 0x0, '/dev/rnullb0\x00'}}, 0x2e) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) syz_clone3(&(0x7f0000000180)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)=0x0, {0x24}, &(0x7f0000000280)=""/251, 0xfb, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=[r1, r1, r1, r1], 0x4}, 0x58) sched_setscheduler(r3, 0x4, &(0x7f0000000240)=0x7) sendfile(r0, r0, 0x0, 0x7ffff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) (async) open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) (async) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') (async) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000100)={0x2e, 0x3, 0x0, {0x5, 0xd, 0x0, '/dev/rnullb0\x00'}}, 0x2e) (async) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000040)='./file0\x00') (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) (async) syz_clone3(&(0x7f0000000180)={0x10000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x24}, &(0x7f0000000280)=""/251, 0xfb, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=[r1, r1, r1, r1], 0x4}, 0x58) (async) sched_setscheduler(r3, 0x4, &(0x7f0000000240)=0x7) (async) sendfile(r0, r0, 0x0, 0x7ffff000) (async) 21m41.398870739s ago: executing program 1 (id=4623): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\"\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000ffffffff410000000e0001"], 0x34}}, 0x4c000) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, 0xffffffffffffffff, 0x1000) (async, rerun: 64) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async, rerun: 32) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) (async, rerun: 32) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) (async) r6 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r6, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) mkdir(&(0x7f0000000040)='./file2\x00', 0xc1) mkdir(&(0x7f0000000000)='./file2/file0\x00', 0x59) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000080)={[0xc]}, &(0x7f00000000c0), &(0x7f00000002c0)={r7, r8+60000000}, 0x8) (async, rerun: 32) rename(&(0x7f00000001c0)='.\x00', &(0x7f0000000240)='./file2/file0\x00') (async, rerun: 32) creat(&(0x7f0000000140)='./file0\x00', 0x71) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) 21m40.995853695s ago: executing program 1 (id=4628): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, @selector_unit={0x5}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xf, "8bf8ae"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x5, 0x0, "c80975f907"}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xff, {0x7, 0x25, 0x1, 0x81, 0xfe}}}}}}}]}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000240)={0x10000001}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000280)=0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r2}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xfffffffc, 0x46cb}}, './file1\x00'}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 21m40.637437147s ago: executing program 33 (id=4628): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f00000000c0)={{0x12, 0x1, 0x150, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0xe0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1}, [@input_terminal={0xc, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}, @selector_unit={0x5}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0xf, "8bf8ae"}, @processing_unit={0xc, 0x24, 0x7, 0x1, 0x5, 0x0, "c80975f907"}, @processing_unit={0x7, 0x24, 0x7, 0x1, 0x1}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x1, 0x0, 0x0, {0x7, 0x25, 0x1, 0x0, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0xff, {0x7, 0x25, 0x1, 0x81, 0xfe}}}}}}}]}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000240)={0x10000001}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r1, 0x1, 0xb, &(0x7f0000000280)=0x3, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000000c0)=@sg0, 0x0, &(0x7f0000000140)) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r2}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r4, {0xfffffffc, 0x46cb}}, './file1\x00'}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) 20m55.908041607s ago: executing program 34 (id=4790): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) capset(&(0x7f00000003c0)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000400)={0x8, 0x3, 0x3, 0x0, 0x754, 0x1ff}) r4 = dup(r3) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="820000000000000091000040"]) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f0000000280)=0xe8) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x10, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_client}, {@loose}, {@access_any}, {@afid={'afid', 0x3d, 0x7ff}}, {@cache_fscache}], [{@fsname={'fsname', 0x3d, 'omfs\x00'}}, {@uid_gt={'uid>', r5}}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '!$'}}, {@uid_gt={'uid>', r6}}, {@fsmagic={'fsmagic', 0x3d, 0x8}}]}}) 20m33.740859693s ago: executing program 35 (id=5012): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c", 0x2) write$dsp(0xffffffffffffffff, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc", 0x14) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd0000000041a9e50b00"}}) 18m44.407472442s ago: executing program 36 (id=5760): r0 = socket(0x28, 0x5, 0x0) sendto$packet(r0, &(0x7f0000000080)="67490baca7c21b7e443c130c9ecf0ac7096478bf13ac502a434904e3db1ce4bef4272af4c802ed6d2d208ac365a09babc2e79a3f9d0b1f160e6a", 0x3a, 0x4000, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0xc7) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'ip6_vti0\x00'}}, 0x1e) sendmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x200042, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f00000006c0)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000680)=['']}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x29, 0xa, 0x4, 0x0, 0x28, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x10, 0x4, 0x2}}) listen(r0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='gfs2\x00', 0x208002, 0x0) 16m54.911353589s ago: executing program 37 (id=6773): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x4014) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x7000000) capset(&(0x7f00000004c0)={0x20080522}, &(0x7f0000000500)={0x0, 0x2000, 0x0, 0x0, 0x0, 0x3cd}) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0x5e) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x8, 0x3, 0x8, 0xc6}, {0x85e, 0x3, 0x7, 0x83d}]}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000f80)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x0, 0x2, @in={0x2, 0x0, @broadcast}}}, 0x90) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendfile(r3, r3, 0x0, 0x7ffff000) socket$kcm(0x29, 0x7, 0x0) 13m6.938127138s ago: executing program 9 (id=8722): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x12, 0x40001008, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) r4 = syz_open_dev$swradio(&(0x7f00000002c0), 0x1, 0x2) pipe2(&(0x7f0000001440)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r5, 0x4, 0xfffffffffffff000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0xd0, 0x0, &(0x7f00000003c0)=[@exit_looper, @acquire_done={0x40106309, 0x1}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000240)={@flat=@binder={0x73622a85, 0x0, 0x2}, @ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/102, 0x66, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/191, 0xbf, 0x1, 0xd}}, &(0x7f0000000040)={0x0, 0x18, 0x40}}, 0x400}, @request_death={0x400c630e, 0x3}, @release, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@fd={0x66642a85, 0x0, r4}, @flat=@binder={0x73622a85, 0x100a, 0x3}, @fd={0x66642a85, 0x0, r5}}, &(0x7f0000000380)={0x0, 0x18, 0x30}}}, @clear_death={0x400c630f, 0x3}], 0x28, 0x0, &(0x7f00000004c0)="4659cd3084190b4f1936812a5d83a94b5ecdacdcd99a1f6ba1289913454e62383e50d96445cf234e"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 13m6.804742095s ago: executing program 9 (id=8726): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x3, 0x2, 0x1, 0x0, @irqchip={0x0, 0x8001}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x30, r1, 0x1, 0x0, 0x2, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000c1431002dbd7000fbdbdf25080001000000000008003d0005000000445008313f7698d69d6874c638fa"], 0x20}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) rt_sigaction(0x20, &(0x7f0000000180)={0x0, 0x5, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f00000001c0)) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x10000000, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000180)={0x1, 0x0, [{0x3, 0x2, 0x1, 0x0, @irqchip={0x0, 0x8001}}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)={0x30, r1, 0x1, 0x0, 0x2, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000c1431002dbd7000fbdbdf25080001000000000008003d0005000000445008313f7698d69d6874c638fa"], 0x20}, 0x1, 0x0, 0x0, 0x4004400}, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) rt_sigaction(0x20, &(0x7f0000000180)={0x0, 0x5, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f00000001c0)) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x10000000, 0x2) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r3, 0x7dfff000) (async) 13m6.651851419s ago: executing program 9 (id=8728): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x40010, r1, 0x53932000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0x40) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4000, 0x0, {0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x6000, 0x0, 0x0, r4, 0x801}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) write$FUSE_INIT(r2, &(0x7f0000000540)={0x50, 0x0, r3, {0x7, 0x29, 0xffffff81, 0x2a000b02, 0x2, 0x0, 0x6, 0x208}}, 0x50) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x1d0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) (async) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000003c0)={0x0, 0x0, 0x3, 0x82}) (async) r7 = syz_open_dev$vcsn(&(0x7f0000000140), 0x9, 0x450402) r8 = pidfd_getfd(0xffffffffffffffff, r7, 0x0) sendmsg$AUDIT_USER_TTY(r8, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="780000006404040029bd7000ffdbdf257dccf2000000000000003a23506fce241a16eb717b353b58b3740544f9007d3f62de2a5d6a6b7df0e70ed58eb36485534a3ad516b99f1c39712f776a47c10d540b0274ff7fec257d8174f6658949bdffb301ba4a6089ce41f9c2d8a50d1f4b243eca6f2b591383d5"], 0x78}, 0x1, 0x0, 0x0, 0xc000}, 0x20000001) 13m6.613248351s ago: executing program 9 (id=8729): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup2(r0, r0) (async) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000300)='0\x00', 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000e40)='./file0\x00', 0x1) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000640)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) (async) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f0000000bc0)=0xc) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x4f, 0x1, 0x0, 0x0, {}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=r6}]}, 0x1c}}, 0x0) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1d000000", @ANYRES16=r4, @ANYBLOB="01002cbd7000fbdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) (async) r10 = epoll_create(0x1) r11 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r8, r11, 0x7, r9, &(0x7f0000000180)={r10, r9}) r12 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r12, 0xae60) (async) ioctl$KVM_SET_GSI_ROUTING(r12, 0x4008ae6a, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000000000000000000000100000000000000000000000000000005000098"]) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r4, 0x300, 0x70bd27, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x80000) sendfile(r0, r0, 0x0, 0x7ffff000) 13m6.354767853s ago: executing program 9 (id=8733): bind$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) (async) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, 0x7, 0x4}, 0x20) (async, rerun: 32) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000140)) (rerun: 32) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$packet(0x11, 0x2, 0x300) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r4 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r4], 0x20}}, 0x40816) (async) write$tun(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbbbbbbbbbbbbb86dd6d00000000010000"], 0x4b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r5, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000000000/0x4000)=nil, 0x0}, 0x68) (async) setxattr$incfs_id(&(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100), &(0x7f00000001c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x80) (async) r6 = fanotify_init(0x8, 0x80000) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet(r7, &(0x7f0000003400)=[{{&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, 0x0, 0x0, &(0x7f0000003600)=ANY=[@ANYBLOB="18000000000000100000070000eb4304a4204404c7310000"], 0x18}}], 0x1, 0x0) (async) fanotify_mark(r6, 0x105, 0x4800003a, r0, 0x0) (async) close(r6) 13m6.028110948s ago: executing program 9 (id=8734): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x7f) 13m5.88629918s ago: executing program 38 (id=8734): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x3}, 0x90) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000000)=0x7f) 1m3.408466202s ago: executing program 3 (id=13446): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi5\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x2, 0x2}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) mmap(&(0x7f0000ff8000/0x6000)=nil, 0x6000, 0x3000002, 0x2010, r1, 0x33745000) 1m3.356095066s ago: executing program 3 (id=13447): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x20042400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r1) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) r2 = gettid() r3 = memfd_secret(0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000003c0)={0x9b7, 0xaa, 0x8, 0x2, 0x1000, 0x7, 0x2e, 0x5, 0x0}, &(0x7f0000000400)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000440)={r4, 0x49, "5ef34496a8ec32cde105bd2c5c59c1c63bf29351e0c744f267fa5dae261d4b8e05c18f04a1a9bb3da916c1c29eaeab6d6a88b6dce16cf1c5134eb61ec15caa243678988332cd74f0cd"}, &(0x7f00000004c0)=0x51) r5 = getpid() rt_tgsigqueueinfo(r5, r2, 0x5, &(0x7f0000000140)={0x2, 0xffffffff, 0x6}) r6 = syz_open_procfs(r5, &(0x7f0000000080)='net/rpc\x00') recvmmsg(r6, &(0x7f0000000340)=[{{&(0x7f00000000c0)=@ax25={{0x3, @bcast}, [@bcast, @bcast, @default, @default, @null, @remote, @null, @netrom]}, 0x80, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/80, 0x50}], 0x1, &(0x7f0000000280)=""/150, 0x96}, 0x2}], 0x1, 0x40000040, &(0x7f0000000380)={0x0, 0x3938700}) write(r0, &(0x7f0000000000)="fb196dec69a10b22", 0x8) 1m3.030633482s ago: executing program 3 (id=13449): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000500)='blkio.bfq.dequeue\x00', 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/140, 0x8c}], 0x1, 0x0, 0x0) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x1, @default, @bpq0, 0x2, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$vcsu(&(0x7f0000000000), 0x23, 0x10000) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r4) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="2ba52ebd7000fddbdf251b0000000600210061"], 0x1c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40c0) sendfile(r2, r2, 0x0, 0x7ffff000) ioctl$SNDCTL_FM_LOAD_INSTR(r4, 0x40285107) 1m2.71468058s ago: executing program 8 (id=13451): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x29, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x59, 0xa, 0x0, "05fcff410400001bf9585253b800c495f2000500"}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000000000000e80000000000000000ff"]) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008804"]) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000003700)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001340)="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", 0x200}], 0x1, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x20044881) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) fcntl$notify(r1, 0x402, 0x80000021) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e23, 0xea, @local, 0x6}, 0x1c) 1m2.546358181s ago: executing program 8 (id=13452): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x18}, 0x0) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (rerun: 64) listen(r1, 0x200) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10) (async) r2 = socket(0x22, 0x2, 0x4) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, 0x0, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000180)=@hci={0x1f, 0x401, 0x1}, 0x80, 0x0, 0x57, &(0x7f0000000100)=ANY=[@ANYRES64=r2], 0x10b8}, 0x20000000) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) (async, rerun: 64) read$FUSE(0xffffffffffffffff, &(0x7f00000006c0)={0x2020}, 0x2020) (rerun: 64) 1m1.708789114s ago: executing program 8 (id=13454): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) (async) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 1m0.231354112s ago: executing program 5 (id=13459): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) 1m0.179813282s ago: executing program 3 (id=13460): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, @empty, @loopback, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x0, 0x0, 0xff, 0x1000, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x8, 0xfffffffc}}) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000180006800400038006000100"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r3, 0x2000) socket(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, @empty, @loopback, 0x7800, 0x7800, 0xfffffffc, 0xdc64}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) (async) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'ip6_vti0\x00', r1, 0x0, 0x0, 0xff, 0x1000, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, 0x7, 0x8, 0xfffffffc}}) (async) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100ac14143208000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000180006800400038006000100"], 0x7c}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r3, 0x2000) (async) 59.900399399s ago: executing program 8 (id=13462): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) signalfd(r0, &(0x7f0000000100)={[0xcbf]}, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r0, &(0x7f0000000340)="89", 0x1, 0x2}]) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000000c0)={0x2, 0x5, 0x0, 0x0, 0x0, 0x3, "0990a7543c9f8e81defc6789010b2942", 0x9, 0x80, 0x7b, 0x2, 0xd, 0x51, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010011"], 0x1c}}, 0x800) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 59.9002316s ago: executing program 5 (id=13463): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x8000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) r1 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0xffff0f00, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x9c) getgid() 59.890013124s ago: executing program 5 (id=13464): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) 59.789894728s ago: executing program 8 (id=13465): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0xa4, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x13}}, {0x14, 0x4, @loopback}}}]}, @CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x8}}, {0x14, 0x4, @remote}}}]}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000012140100"], 0x58}, 0x1, 0x0, 0x0, 0x20004044}, 0x20000000) r5 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 59.723249783s ago: executing program 5 (id=13466): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) sendfile(r0, r0, 0x0, 0x7ffff000) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r2 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r2, 0xc054561d, &(0x7f00000000c0)={0x2, "68033f0a1a1589188b0966e30230fc161f233f0a441043fd1327a1eb26eac356"}) sendfile(0xffffffffffffffff, r1, &(0x7f0000000000)=0x3, 0x5) 59.617395009s ago: executing program 5 (id=13467): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) r1 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000b40)=0xe) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x0, 0x0, 0x80, 'syz0\x00', 0x8}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x8, 'syz1\x00', 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="10010000", @ANYRES16=r4, @ANYBLOB="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"], 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x8840) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000040)=0x1, 0x4) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000540)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = epoll_create1(0x80000) r8 = dup(r6) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="8200000000000000b4000040"]) close(r5) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000280)={0x7}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r7, &(0x7f0000000500)) ioctl$KVM_GET_PIT2(r10, 0x8070ae9f, &(0x7f00000001c0)) mmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0xc, 0x50, r8, 0xee26a000) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='qnx4\x00', 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 59.605164953s ago: executing program 3 (id=13468): openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x900, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket(0x10, 0x803, 0x0) syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x101400) socket$vsock_stream(0x28, 0x1, 0x0) socket(0xa, 0x3, 0x3a) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000240)={{0x0, 0x0, 0x70, 0x8000, 'syz0\x00', 0xffffffff}, 0x3, 0x20000000, 0x7, 0x0, 0x0, 0xfffffffc, 'syz0\x00', 0x0}) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000280)={0x8, 0x4}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) readv(r5, &(0x7f0000000640)=[{&(0x7f0000000100)=""/74, 0x4a}], 0x1) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x80, 0x2}}) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r4], 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='romfs\x00', 0x2241800, 0x0) 59.351823452s ago: executing program 8 (id=13471): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="b965fb7a93b452af5456b2d8f9919e27f9d02497d0f0974ab0c70c600309d946881f6809f0093679deb54ce90af47d00578f080e58a3d0361f4c083a014e6ee7b54921cc7339d616cbc1a9db98a64bf636a252ff9687820dd7be22aa2c621597582e6d6c93dd4ae7734c0e42ec3dafd295417a48342e129874c8b85fafa26f50f5c219875af5acdf9ce33aaa94d12d7fcb94ab2bc950760cbe8b66580aa6ada7977935d73654d52d0715b9cac18736edac774db642005352f5a2bd25780701fcba9a8238865e11479af4555afea06197d3d1", 0xd2}, {&(0x7f0000000140)="35e7dfe223c963fa67c617a8243702", 0xf}, {&(0x7f0000000180)="1c6498ef4da25edc57c199a70cf771d84238f5fa1444fa62b1e6475ce3c6177dacb8eea2d3c4ed1ecffd72d5de183d923a30e7c28d7d8a506a004ab5bab93e2d8bd30a2e8a6c1a678eb11a669a193fe36048276d1f671f6de93f4f52443b063d1f9cd00ca3863b2daa35d16a0ea8cbc21b7382153fffb2b756a9089c90911444625e6c8c1742d82b583683bab9be700bbff70fbb1ea587ff9fe3ada512e7f8a18c69adc348ca77d5283b7a1f", 0xac}, {&(0x7f0000000240)="2d54cb41020a67c54c278610591c549c4de674a674c5d19131c23f550d103d9ba9bab3e87463a248c6d59b8ce8106b75f7290d42ec006395c4336b1eca21a641f2098d35cc436f84413bf2fe32a7d082ec2519a64473cef8139f579b463f6f9e2ab6552cec841ab4de3f9fa1357cdadf41be7a6e53c9e11d5f8dbd873f2b30aaac442868f3b28de716545180061753868358ac9e05af716517b7adb78bb2590f253eadeb7f5dd3baf10b28f81e94bb", 0xaf}], 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x7, 0x115000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000380)=""/37) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000480)=[{{0x77359400}, 0x17, 0xffd0}, {{r2, r3/1000+10000}, 0x3, 0x2, 0x42}, {{0x0, 0x2710}, 0x5, 0x400, 0x1}, {{}, 0x16, 0x5, 0x1}, {{r4, r5/1000+10000}, 0x11, 0x4, 0x10000}, {{r6, r7/1000+10000}, 0x5, 0xfffd, 0xfffffffc}, {{0x77359400}, 0x12, 0x7, 0x1}], 0xa8) futex(&(0x7f0000000540), 0x4, 0x1, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x1) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/77, 0x4d}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/2, 0x2}], 0x5) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000c40)={0x0, &(0x7f0000000c00)=[&(0x7f00000008c0)="9c3822bcaf12b2a5cf05150594f9519a90911fb2e00a4dea776e4e76c7154e21e70d66dd312b0b5ae50f643a5534abfd33b2d9982109dafadc8858abadb432ff58f539aa89aad0cedd38a6eaa6553311e26360e6810dc7a68130f804f2d7cb92e6156e00c4e3945ddc6bee5da709397b2bb41c4e6809648a6668a104e83a079231ae937952405f0cab677f11f9467a2cc3e1d1e8a0f0fd0abc27bc15e0097718b40e6c1378fb20341430bed344a7eccff0d2482661c58a1d29ba7f98452d03522545d0e04c3fdf00269cb0183eff7f1b407399f5d226", &(0x7f00000009c0)="fdc3ee74573f7a4d38f76095168537f16165087c4b807d06c13276942b71e85866419839607f0cc0e9d1f82bd7d45b22252a1c62bc82b6c22052d69befb254da4cdff5475374c0ed5a723d126dc8d42aa29ef9230b3eb6159a9b4ef3867c8b60fc63ebbeaee14a03e3243eb0d9b792868fe268d0eb621d7eb6c8f39b94d2c9ed72f45d034becafed9ae1ba4d2428512ee07b6199251b0534d629ca0eacf2c5", &(0x7f0000000a80), &(0x7f0000000ac0)="7a5fd63985ba281831322ad3e9cb63dd65715fc0cfb09707b7fd99572a74fce3bbbe2589f5f570f61feac6badd7444a1e3ea0179a5a671046e7d7ba716ad993dbd62eb8c83fbe2e38f632d1a5e57416ad199a3c66cb809d5308dc1c78b379b5b074247a114eb0f2e3d52ebbb3d41fcdf48051ce9dcca464f0b09de1678b7290a39485d67d6cf7aa1fb1012555d8827e412000b0e044d98d6f060ce9fb96fe8958791ad702ca37826a59fac53c90d287fb3ad54b92b55572c950794f12ce0", &(0x7f0000000b80)="bc7906ed8bcdddad3cfd76499e52242a564c03fa5dbb6fb59d4d05c6e8955ac2fe56a17378064e39a2cf0377895755e57d410d4dc1c59b0ea0bf7d574277e74703139ab45b"]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r0) timer_create(0x6, &(0x7f0000001dc0)={0x0, 0x7, 0x0, @thr={&(0x7f0000000cc0)="9e2285707602379ca11bbebecf4c1033c9ff6f7a6a8906614be86a04bdb7d3b8e81608daeb05476ef6cbcf1e469148fc03483640bff868e2dcf441d9847e1687ca23198ab4db0d39fa7aa8d11d4b74f8fd1389fc54c66683203a9ce9bd5f16da2a1ba68e379505bf25ca92eda3b52a373845dcef508c78d616fd7eb7f76f67b1c8054666ffcab53d459d70413e6467f901e64b1ac06bdc648769f9f9a82c6be74b7eab7d81b63fc506a23e0e83ffd131ea401efc25358fcad7c2772129a41710851fa8780f67b8a214eeaef8bfdccc15d3d7b34a602f8d7039435e767a4eb59e5c9dafe8a8e173a566d439fad331ffcebf9137ee", &(0x7f0000000dc0)="7b96999d9dec4f82e2b25b742f8c06ed2d31c3072b9d451cb5dfe139033fbe9a2b89cb81961f58f5681667a0283a88167ccc0b251653dd7c31328f229cc20304377a98cab49a8223f6ba5bc418e7d8c6b0667c331eb5d5683ad4ac53190efbaafbf7ffb4571c15be2e5ff977b92f6d5934e4fec7504983fa1c78c6b69ea2701b2568ed3f29ea2e0e87c3daffb194f926bc0598dd88b6535276aaf8691931762d08082900dab13e1ead6c15eac215600f77e6429de2b123b366b345b2547bf822b150d85b00c6356712d23cf9446b94fc25f098777be60abe2ca9bef64c4cf0350d584f67b8bc213e907a698c0209a28cc495042a6f3f61e4937218638a3ab6858eafa2dd1dd84cf85b561bc38c94aaf23518e39e648681a944e008fde8a8925427cf00c67fb4f59a013320ee87c50559a9cb4848d8d897403c6b2a02548330a21c53a21a3a99716139e0443ef54486071745351c484b1a1700b421f42f7141409c459dbc74ef7f055cd8f632c48f1133479c12bd72266926f2f75e69f123b874bb80cc68cb0e0057b2058fce918aa7b7891c33bc5e6f7b760a8a0c113f708d610999fad9b60d3569da40ce11f3cd0d83670282d1d2f7fcb317ab809fe617dcc7939721de879f10398e90cfeb418c11fde1d61a6b48a37b5f9e4a1718e895f80dd23ced172f7356726ff4ae055c4b17a67252f5bfa8f62188379160b4a7c3757ff14bfefd24186bcdccdff0c3e10bf1f64b9551e1eba0d71e29459639bfb1ca3abd0ddb5ac08d2a98baca00b175f70f4bf73bbeafbf3f91c2afd50ad439e7f592cae20ea7be53264cde9908d9ebfd65a3478328db150ecb7030f9717b2d78c4029db1e2d30898cdfcca5b295180355f6f725f4dc85aba0b35e43e12fa72822a3cbc121ea9ddcb1cd13c5a9887a37a3a3440c7a6e2bca98b328942272c91948fde3122e6e857e0937231664e24f817363dc886cc198e8c756f3e8794e720ef78097b66b6daeee8b62b12102339ce547011ab915e71280a992cb155466d8db2a73665cf16445577b103237849c8ade1bcb5136a1976cd82c6cc1c685ec737d2791fae9b53d071e714cef54d7b22ca07d2ed6533e9e0af47ccd1811191453fd92ea34623f051a72108e9f0663fdba554aeef2a55845641cb4c574179c04cfe662d1da346a2766be07d213c19610cdedb74b927cf0d7ee62037babff7fd9214a183f452ea6045b3610726c64bbcfd10d76af91a81504759894212ddd25812f9128a863e7225cd7c50540d68052d99c077dcd307055bf681750b593c665cec0bd41c5788e2e2e17c2d0bc412ce801d70189ba623673f2f3372f79327525a7d963958d282654240080e91d24835ba58763122bfa58e242901570ea923717a155d86c92c9178fa2a8029614c314124d8f835693152998b74b3d0edbc8d2f8989383a43c54e0d44d08303eca00deb7a52944556e021316d25c86e9a2b7a76ec623aa7cf658487127080bf805b6250fcd3d150d61079618e39f42380a734077f28719e61812c176db4ca973dbc4cef7e1d97150da07099064b6c8c68b5b29cce09cf535a650526cd319752ed0399afbbde9e0598ce89a3cb4ce68b7f306c5d847bafda112707f5db11d48422fddcde84ce0a095d81c2fd22e40c0d1204e272da6680b50aa6b616ac1949a8c2eaf2454047ea717764dab0bef7ef479d3cbd844aae95351a3958063a47c7016ec1ef51a3dbb3f5a9ca31d02d9dfa144376105a2f2ddba16dded2c33702f41d284b03bbf91e8f98bb09f3385bb6d40b5ceb8e596db56c87139b543882e35447431f23dc5482a16f770c4b1a27d35cf9722b28a2d29a410d4ed246d80c5b0d7f99ac3c9dafbbb7abb87bf7e3f93b7a19ec32b0a9be8a8579873bdf90a5e3b0a626a4207ecf2c0a2d5375eb458e3b3790645924abb7b5f01134bb3bc3697732815b5e022ebf9910a241c099ee067c7863236f152bf5fab7cda8def17af5736def757097ac382ad05eca3c7d8b4c1ddc21dc63769d2a8234372701c865738dc4892f4e1d447fb842f46f3175c394933a816281e1f0d754e96d66c94f3bf67158f66e648779825a86002e35baa84d94d109134c9448649ded3e7ce83c579daaed4f22ac7b3df3f0a5b77475e42dbab977007665b25fa805f2acef43ecd519d7e4e0d06fb90f76ddce082e37039368b6554bda6b717e59eabbf941fa728e5b2fe1eecbbb60e2fb49cc63ccf3616b010db31c28bc1eb6b20d4280d749f4f10d7964dc661d73d581b7bfefaad9d56b0459b49e62b4d4aa0708664ef2a2833015123e233171449ffd4cfa46f156eda9e932e5cdacd5d4ef91f940e008c548ab5e863bf8bf86bf12fec74b8edd224080b3ea97ee96a97716d4aac832dff654eb3f17b419dd2853f4bac29841d7979aceb1e01a2d3ee1ebec4d4f0c9c5a755743f42be52885fb319cce765a823bef6d1a88ddfdd827dac10cf532359828362b96ba2218f306f02a18166ea74bbf3ee55e3ba9b8ff54041e55a474a5af5e2a8b9147046139ea69aaf2a792766910caf4aacd081e821c8df304be0c12e942873e3eda2fb7c40dcabd15590ddf65c373cb9f2b56442564dc16900fd6ea39429fb7986df62adc672b7717d542a5fd8acb814fa8e285c0c8f577e08aed3ed38bfe12574f58a0f8bd8591282ca977de5a3ebdaa03720bb14e5a13173a3e594919382ef905f7b17f7ae87384aa49a4f85cffa941e6d9a0272b702f7e9c8440d2c9bdb2e5636390be93b7284742ded71ca7ca3ce22676a7187302d30baaaad3ccfd135a0446e461768b4110ab855ef24d5df3645ebf6d8f09979b272697864302612d6a638ef5cc7248be87fa36c69000d4a6c178b39643f4577d8d559b4ba6ce4c88a458ec0033e74e71489e0ee66914e1d4ee20248185c3bacb59824691ffdc335f05eb1c25ff8ce6a307765e440c411efd308bd2ac39cb11a11321b2464b5c4dffcb684a18a666d1e01a0a80b48e5eaf26cd7151e4f6a141198b201cc7ee944176a09b268cc2552f8205edbe59f66d0a8e927a0da4a47b632e03eb13e8a2b9d9cccc19dae460d76caf3c0e6006a2253c7aa33007b813d93b989f2691ecc97b4250f1b7bb4bb607459e45b0355b73eaac9f29b73e1801f37267613050a92ccabe2bfb51f4649ad98ab8a1d057a5f1c523ebbd44362cb10d4c6030a2a4c53ffa12a59fc3e5fb664f8f57ad25eee2142125a1ad1d4d25e4631cc0d55ba4fef86ff62991018f67b0211daa724718338d7e65e6565538072d72c93a5d96ed1a83c38a3917e34b09a90bbfec6828f9a0133bcca17a8ec819fe2767a8affda894dd35774a93eaaeea9f40bb3bba2a8f59920b9b325e06120218fa6bef36bf7e2564ec893ab71476b21ee10aeb0b33b29330ff5f36216da3450edee32386c3fad14238f449cc6da9c569b24520445df8f24d652da46cf8701e09c5b4833f4ce54b3fe4c5f413112631947b05b3af746837ea5446c49f9a99400b7efdbc7ed09e742efee9bef67810df10be7904908ed9c88887097cd5fec40015e9339ecfdb0fb0ee0afd51e5c23be8ab2bf6bfe4dbeb49be9bf9bce6859c862291bfbed549a92eb5dedfd7871081dee3771b440818397c1aa03a330bb77837802324f0b51df1eb008b92c0eb9d3a997db9b3dae5e3f4df67e0b6ee97d750db1241a6e613ffae3ca3746836040984958b47e6eea2e6c33994b1db39c24681f2dff6bd489155753627de933f8b4b0646ea666cb48e45a5e73a45c1775adc96fb76d9ad646e52c5b26f645f65213d93a3d2f581ea99e5080613613525d49f19e3907a535842f7a3444f9a65f80db7101685daa5cf8dbf0173a9ef0a926664f51dd3d69591d3cc3b57cc2ccae75fc5265b963b0002aa3d2994e1398d7b38041db45a74ed7defa3767b816154d595afe224d8829870ad30e2b1d52b85a081ec7b4fc2e6c496e576c8b4c500ebeb73a2d0538e682f046e0aa51d19617d088ec62983d256df7d7458c16646d9cb3585001c12110bdbc6c10cc3e2b023764f0422c9eba7ca19e37c89a833da7a8655b17dd2b62aa298530c01e2c35ec8161554522e68f9a808bb4a47e5bca88bda6c3b52ae3114fca13090a98903b48dc5ea95c35334b8b3a1ca4a7c5f29aac57ed85ba6e53f0736c5158c67f3d9ed3c05d9f3ea5692ca3a9d31e84279e53b8babc90f8389b8244cb60e82d150354feacdc3ff1fba2810f0cadc8e0ce565603329c2a7dc1714feddc1a1c5865f6c562b62eb55030b353a795e87c5a40e6bcdd6825ae9e2ca87669f9531dae796c4e0af06c0cd06ceece98c06d7bc927b22969b2098b1a71e0fcbc89a740a4eaeb2080cc58b850ce3dcd18b24aed40c7ed31c031f74819ea539424b5a6f0b4e204aed4f56a033490032fc44a9aba2d1bdb2ecae755b11400a74179d89febf67d366cfd4366ddb4e04f448ea606d9db62f97a13ea09d26d63012e014ec10d383c3ff5ce2bee624b3892f5438ec574d81958a8e464db087cf5dd0ed6b8e86ad3f5cc70961b316afab82f881ae1cd9143ba4974d56730ae27780e2d9b0294017ab7b0e9717c46e10907569aee1954763f8087814e22a580f0665a48f7da4592133f320aa21ab849e3dd88eedab4230f48a39cfd1b5908429e9a6dd2abc64f76ccdab21cd03fb57f902c65a01baf8d7297e2be55f45a81378de1c54c68f5b9397be062511a12e86fda7c5f1e560596e4046a57bdfd3f42551ac687917d28dcfebfea1600da97f58799e53ffae30c8491282c9a2ac4125ec50166dd8b594b556db848392dd724ef6488c90cc5bdb346f75871c9867bbbfaa0faca1925c77eecf7842d348f81f462f634f590269bf91616995ea09d9281843e641c69a3a30feae64106445ad059552d350bb059b074f0a105573364290b764948162ad9a190229daf6ff0260646bc85c11e07a8ae26c7387fc67239a718300c0bfc18965501125f1edfbbc06d9cdc01c623b1d583047efd5815c9ee529f9062b847ddfc4b3c0ce97e763270bd68f836f7f7c7117c7ed4c39e6b3e7ac78cc0bda83baeaa7b8c87aa879b47bd02c09a73332062d44916ce9a07d2366583b63d56215bcc3cfa7011ef5a0b3fca642bf49285ce1a2f3755a5374fa696e368f03683a4326ba9e4362a331a946aa51b202f3f21f025765bb6c72e856a6192efe0a009e669c5b94f5503ebe243a25a42d4645b6f288731e8126c3dcf616ef4c1894c8ce08899b4ec42f9daf8ae0d7592fc84c8ce774c2dfe3dba07f21c251f32260a793ddc4d3a325060e72e3bc420a79fd92b29876aa97fb879fdf098ea1400001929e8c24c08f77f240f74afcc4065858a8b34aee16c252a75fa786778a03538a54907a332989e6b6f42e314866009840a9b2ae7cfe8ee18cd50a3c7fb17d7fe072fbf0625622400705f8b4f54afe71e6dc9c50ec69cb3c002c73b1f2c85efa8418ae99d796aae9ea8e1d939dce8704bf02123aa3aa6e11d8f5a92e6f84b237c6e833cf390b5e576dc6211f1b367232e7fd6a009e2875961a8b215d8ea6effac67ad10e73c9e7c04f0430ee7bb7ba5c8407a8635782bbee649085649f19f9985297f11e6ba046ac5112c17d562399cb700d67220737cb170d421f792d8c197e1b1962fabf2957943ab62502b4a0c34219a83423aa20aed7947c968e7b24fdca230c3f532bd32286cbffe2b25286c0872f64e1f78f8d8021d85cd5e154d6ec1e9c3eea7ae42946c0000b6f0ccb258f99a65da54b7fce30d8f1c64aa1688bf6b7fdd4"}}, &(0x7f0000001e00)=0x0) timer_settime(r8, 0x1, &(0x7f0000001e40)={{}, {0x77359400}}, 0x0) timer_getoverrun(r8) write$evdev(r0, &(0x7f0000001e80)=[{{0x77359400}, 0x17, 0x8, 0x5}, {{0x0, 0x2710}, 0x1, 0x4}, {{}, 0x1f, 0x80, 0x200}, {{0x0, 0xea60}, 0x0, 0x5, 0x5}, {{0x0, 0x2710}, 0x15, 0x1000, 0x9}, {{0x0, 0xea60}, 0x4, 0x3, 0x7ff}, {{}, 0x11, 0x7, 0x2}], 0xa8) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000001f80)={{r9, r10+60000000}}, &(0x7f0000001fc0)) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002000), 0x40000, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r11, 0x40184152, &(0x7f0000003200)={0x0, &(0x7f00000031c0)=[&(0x7f0000002040)="440fdaffc8c74a554849a7f5f8a29e9e5450fe6c6b93dd51afbe88e6b6b9ae06b56a29265e3cc40d2261802c325dbf48f040393b6a1e23f337e763aa06e47205f44aaf6da1bef3139f30e9705baa7fdf16", &(0x7f00000020c0)="a89bfa632bcfaad9ff24dee7142a25f08a759ca4603d0a7792f8714d2d804a1bae1240167de607f158e1331b382bbd99038ea84aea05ebab5cbed4fa3bb5b627ca056291da529c5ba21e0439961bdb126c8db682e06a8474f79e365957125093836ee7a245e2c7831e23dcd8b21f4421c00e953802b2b688a0bd137d23a115492edd1fb7836721e528615ec09b999dabefb5513d94b9dc9c7a0c13790595431cac2e3ae534c737118883d63e23d5eb1b66523b2d7a8f9bb740eaadb8a3dc00f86b680df6a65a0a254c", &(0x7f00000021c0)="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"], 0x3c8e}) unlink(&(0x7f0000003240)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000003280)={{0x6, 0x9}, 0x100, './file0\x00'}) nanosleep(&(0x7f00000033c0), 0x0) readv(r0, &(0x7f0000003740)=[{&(0x7f0000003400)=""/210, 0xd2}, {&(0x7f0000003500)=""/197, 0xc5}, {&(0x7f0000003600)=""/41, 0x29}, {&(0x7f0000003640)=""/1, 0x1}, {&(0x7f0000003680)=""/75, 0x4b}, {&(0x7f0000003700)=""/58, 0x3a}], 0x6) syz_emit_vhci(&(0x7f00000037c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x3, 0xc8, 0xa}}}, 0x7) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000003880)={@multicast2, @initdev, 0x0}, &(0x7f00000038c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003980)={'syztnl0\x00', &(0x7f0000003900)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x3, 0xfffffffa, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x1, 0x6, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000003b00)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003ac0)={&(0x7f00000039c0)={0xc8, r12, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 59.298760226s ago: executing program 5 (id=13473): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) signalfd(r0, &(0x7f0000000100)={[0xcbf]}, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r0, &(0x7f0000000340)="89", 0x1, 0x2}]) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000000c0)={0x2, 0x5, 0x0, 0x0, 0x0, 0x3, "0990a7543c9f8e81defc6789010b2942", 0x9, 0x80, 0x7b, 0x2, 0xd, 0x51, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010011"], 0x1c}}, 0x800) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"a2e3ad214fc752f91b5d090932f70e0dd038e7ff7fc6e5539b324c078b089b343807721a0890e0878f0e1ac6e7049b076d959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b32310d076d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e01000000138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12d3099dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f6dc7bcbf2a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509301815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827466cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d951061ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033095563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db87195358bfee2916580dacae008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2df086dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36ffffffff00000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817b97c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d00000f4ff000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1061}}, 0x1006) 58.182586776s ago: executing program 3 (id=13476): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c011}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 42.83574129s ago: executing program 39 (id=13471): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000040)="b965fb7a93b452af5456b2d8f9919e27f9d02497d0f0974ab0c70c600309d946881f6809f0093679deb54ce90af47d00578f080e58a3d0361f4c083a014e6ee7b54921cc7339d616cbc1a9db98a64bf636a252ff9687820dd7be22aa2c621597582e6d6c93dd4ae7734c0e42ec3dafd295417a48342e129874c8b85fafa26f50f5c219875af5acdf9ce33aaa94d12d7fcb94ab2bc950760cbe8b66580aa6ada7977935d73654d52d0715b9cac18736edac774db642005352f5a2bd25780701fcba9a8238865e11479af4555afea06197d3d1", 0xd2}, {&(0x7f0000000140)="35e7dfe223c963fa67c617a8243702", 0xf}, {&(0x7f0000000180)="1c6498ef4da25edc57c199a70cf771d84238f5fa1444fa62b1e6475ce3c6177dacb8eea2d3c4ed1ecffd72d5de183d923a30e7c28d7d8a506a004ab5bab93e2d8bd30a2e8a6c1a678eb11a669a193fe36048276d1f671f6de93f4f52443b063d1f9cd00ca3863b2daa35d16a0ea8cbc21b7382153fffb2b756a9089c90911444625e6c8c1742d82b583683bab9be700bbff70fbb1ea587ff9fe3ada512e7f8a18c69adc348ca77d5283b7a1f", 0xac}, {&(0x7f0000000240)="2d54cb41020a67c54c278610591c549c4de674a674c5d19131c23f550d103d9ba9bab3e87463a248c6d59b8ce8106b75f7290d42ec006395c4336b1eca21a641f2098d35cc436f84413bf2fe32a7d082ec2519a64473cef8139f579b463f6f9e2ab6552cec841ab4de3f9fa1357cdadf41be7a6e53c9e11d5f8dbd873f2b30aaac442868f3b28de716545180061753868358ac9e05af716517b7adb78bb2590f253eadeb7f5dd3baf10b28f81e94bb", 0xaf}], 0x4) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x7, 0x115000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000380)=""/37) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000440)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000480)=[{{0x77359400}, 0x17, 0xffd0}, {{r2, r3/1000+10000}, 0x3, 0x2, 0x42}, {{0x0, 0x2710}, 0x5, 0x400, 0x1}, {{}, 0x16, 0x5, 0x1}, {{r4, r5/1000+10000}, 0x11, 0x4, 0x10000}, {{r6, r7/1000+10000}, 0x5, 0xfffd, 0xfffffffc}, {{0x77359400}, 0x12, 0x7, 0x1}], 0xa8) futex(&(0x7f0000000540), 0x4, 0x1, &(0x7f0000000580)={0x77359400}, &(0x7f00000005c0), 0x1) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000600)=""/127, 0x7f}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f0000000740)=""/77, 0x4d}, {&(0x7f00000007c0)}, {&(0x7f0000000800)=""/2, 0x2}], 0x5) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000c40)={0x0, &(0x7f0000000c00)=[&(0x7f00000008c0)="9c3822bcaf12b2a5cf05150594f9519a90911fb2e00a4dea776e4e76c7154e21e70d66dd312b0b5ae50f643a5534abfd33b2d9982109dafadc8858abadb432ff58f539aa89aad0cedd38a6eaa6553311e26360e6810dc7a68130f804f2d7cb92e6156e00c4e3945ddc6bee5da709397b2bb41c4e6809648a6668a104e83a079231ae937952405f0cab677f11f9467a2cc3e1d1e8a0f0fd0abc27bc15e0097718b40e6c1378fb20341430bed344a7eccff0d2482661c58a1d29ba7f98452d03522545d0e04c3fdf00269cb0183eff7f1b407399f5d226", &(0x7f00000009c0)="fdc3ee74573f7a4d38f76095168537f16165087c4b807d06c13276942b71e85866419839607f0cc0e9d1f82bd7d45b22252a1c62bc82b6c22052d69befb254da4cdff5475374c0ed5a723d126dc8d42aa29ef9230b3eb6159a9b4ef3867c8b60fc63ebbeaee14a03e3243eb0d9b792868fe268d0eb621d7eb6c8f39b94d2c9ed72f45d034becafed9ae1ba4d2428512ee07b6199251b0534d629ca0eacf2c5", &(0x7f0000000a80), &(0x7f0000000ac0)="7a5fd63985ba281831322ad3e9cb63dd65715fc0cfb09707b7fd99572a74fce3bbbe2589f5f570f61feac6badd7444a1e3ea0179a5a671046e7d7ba716ad993dbd62eb8c83fbe2e38f632d1a5e57416ad199a3c66cb809d5308dc1c78b379b5b074247a114eb0f2e3d52ebbb3d41fcdf48051ce9dcca464f0b09de1678b7290a39485d67d6cf7aa1fb1012555d8827e412000b0e044d98d6f060ce9fb96fe8958791ad702ca37826a59fac53c90d287fb3ad54b92b55572c950794f12ce0", &(0x7f0000000b80)="bc7906ed8bcdddad3cfd76499e52242a564c03fa5dbb6fb59d4d05c6e8955ac2fe56a17378064e39a2cf0377895755e57d410d4dc1c59b0ea0bf7d574277e74703139ab45b"]}) syz_genetlink_get_family_id$devlink(&(0x7f0000000c80), r0) timer_create(0x6, &(0x7f0000001dc0)={0x0, 0x7, 0x0, @thr={&(0x7f0000000cc0)="9e2285707602379ca11bbebecf4c1033c9ff6f7a6a8906614be86a04bdb7d3b8e81608daeb05476ef6cbcf1e469148fc03483640bff868e2dcf441d9847e1687ca23198ab4db0d39fa7aa8d11d4b74f8fd1389fc54c66683203a9ce9bd5f16da2a1ba68e379505bf25ca92eda3b52a373845dcef508c78d616fd7eb7f76f67b1c8054666ffcab53d459d70413e6467f901e64b1ac06bdc648769f9f9a82c6be74b7eab7d81b63fc506a23e0e83ffd131ea401efc25358fcad7c2772129a41710851fa8780f67b8a214eeaef8bfdccc15d3d7b34a602f8d7039435e767a4eb59e5c9dafe8a8e173a566d439fad331ffcebf9137ee", &(0x7f0000000dc0)="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"}}, &(0x7f0000001e00)=0x0) timer_settime(r8, 0x1, &(0x7f0000001e40)={{}, {0x77359400}}, 0x0) timer_getoverrun(r8) write$evdev(r0, &(0x7f0000001e80)=[{{0x77359400}, 0x17, 0x8, 0x5}, {{0x0, 0x2710}, 0x1, 0x4}, {{}, 0x1f, 0x80, 0x200}, {{0x0, 0xea60}, 0x0, 0x5, 0x5}, {{0x0, 0x2710}, 0x15, 0x1000, 0x9}, {{0x0, 0xea60}, 0x4, 0x3, 0x7ff}, {{}, 0x11, 0x7, 0x2}], 0xa8) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) clock_gettime(0x0, &(0x7f0000001f40)={0x0, 0x0}) timerfd_settime(r0, 0x1, &(0x7f0000001f80)={{r9, r10+60000000}}, &(0x7f0000001fc0)) r11 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000002000), 0x40000, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r11, 0x40184152, &(0x7f0000003200)={0x0, &(0x7f00000031c0)=[&(0x7f0000002040)="440fdaffc8c74a554849a7f5f8a29e9e5450fe6c6b93dd51afbe88e6b6b9ae06b56a29265e3cc40d2261802c325dbf48f040393b6a1e23f337e763aa06e47205f44aaf6da1bef3139f30e9705baa7fdf16", &(0x7f00000020c0)="a89bfa632bcfaad9ff24dee7142a25f08a759ca4603d0a7792f8714d2d804a1bae1240167de607f158e1331b382bbd99038ea84aea05ebab5cbed4fa3bb5b627ca056291da529c5ba21e0439961bdb126c8db682e06a8474f79e365957125093836ee7a245e2c7831e23dcd8b21f4421c00e953802b2b688a0bd137d23a115492edd1fb7836721e528615ec09b999dabefb5513d94b9dc9c7a0c13790595431cac2e3ae534c737118883d63e23d5eb1b66523b2d7a8f9bb740eaadb8a3dc00f86b680df6a65a0a254c", &(0x7f00000021c0)="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"], 0x3c8e}) unlink(&(0x7f0000003240)='./file0\x00') ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000003280)={{0x6, 0x9}, 0x100, './file0\x00'}) nanosleep(&(0x7f00000033c0), 0x0) readv(r0, &(0x7f0000003740)=[{&(0x7f0000003400)=""/210, 0xd2}, {&(0x7f0000003500)=""/197, 0xc5}, {&(0x7f0000003600)=""/41, 0x29}, {&(0x7f0000003640)=""/1, 0x1}, {&(0x7f0000003680)=""/75, 0x4b}, {&(0x7f0000003700)=""/58, 0x3a}], 0x6) syz_emit_vhci(&(0x7f00000037c0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x3, 0xc8, 0xa}}}, 0x7) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), r0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000003880)={@multicast2, @initdev, 0x0}, &(0x7f00000038c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000003980)={'syztnl0\x00', &(0x7f0000003900)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x3, 0xfffffffa, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x7800, 0x1, 0x6, 0x7fffffff}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r11, &(0x7f0000003b00)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003ac0)={&(0x7f00000039c0)={0xc8, r12, 0x400, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 42.797533259s ago: executing program 40 (id=13473): r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0) signalfd(r0, &(0x7f0000000100)={[0xcbf]}, 0x8) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000780)=[&(0x7f0000000440)={0xfffffffe, 0x20011004, 0x4, 0x1, 0x4, r0, &(0x7f0000000340)="89", 0x1, 0x2}]) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f00000000c0)={0x2, 0x5, 0x0, 0x0, 0x0, 0x3, "0990a7543c9f8e81defc6789010b2942", 0x9, 0x80, 0x7b, 0x2, 0xd, 0x51, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010011"], 0x1c}}, 0x800) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) 42.098758615s ago: executing program 41 (id=13476): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c011}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) r4 = dup(r0) write$UHID_INPUT(r4, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 40.150553622s ago: executing program 1 (id=13500): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x10, 0x111, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x48010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000007000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x3, 0x0, 0x0, {0xa}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x300}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009f00)={0x6c, r3, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x3f, 0x29}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x209000, 0x0) 40.022950057s ago: executing program 1 (id=13510): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000000)=0xffffffff, 0x5000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = mq_open(&(0x7f0000000080)='/dev/rnullb0\x00', 0x2, 0x144, &(0x7f00000000c0)={0x4, 0x3128, 0x464, 0x1}) mq_timedreceive(r3, &(0x7f0000000240)=""/203, 0xcb, 0x1ff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x1405, 0x1, 0x70bd27, 0x25dfdbff, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 37.123097643s ago: executing program 6 (id=13541): r0 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f0000000340)) r2 = fsopen(&(0x7f0000000000)='ext2\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000200)='\x00\xa2\xe5\xf2\x9d\xd2\x98\x03\x95\x14uw\xbd\xe6\xf5J\x06\xc3k\x91\xaaU\xabG~X>\xfe\xc9\xcbH\xd7\fJ`\xab\xe9\a\xe7\xda\xc1PP[2 F\r;\xf3=p\x86Xz\xa5S!c\xe6\xcb\xd0\xc4#\xbc\xa3X\x8d\x8c\x0f\xfc/~H\xee\xb2\tJ\x8e:\xfa\xa0\xcd3\x8b&\xef\x03\xe6$\xbf\x00\x95U\xce\xb0\xb4\xac\x14\xaaX\x18t\xedNJ\'\x87\'g\x9ajn<\x13\xac\v \xc4\x05 \xf8\x1d\xc8\x80o\xcfdI\xe9\r\x1f\xb2\t@;`\x03\x9e\xb3\xe2>\x15\xb1:\xdf\x99\xc4\x13\x1f\x95d\xdb8\xc0j8\xf3\xa1:\xf9j\\K\xb9\xd5_\x85Y\xca]\ark>\xf0\x8c\xbd;\xfcP/;\'{t\x91\xc6@\x8c\x18X=\x95\xdc!:\x13]\xc1\xc2\xc2\xde\x80#\x19W\v\xe2\x8f\xbe\x939%.)\x15\x00\x00\x00\x00\x00\x00\xfc\xbd\x05\x0e\xb4\x1eL\xa3\xa7s\x0f\x16n\x17\xec\xa3\xe20\xa9t]\xab\xd3\x19\xa6\x03\xdf\xbb\xa0K\xfaI\xf0\xfe\x85\x8b\x0e,\xe1\x10\xb7\x92!\x9aB\xa6\x02\tQ\xff\x17\x06+}\xd1\b\x8b\x91A\xe2\x11\x92x\x1d\x1b\xd8G\x15\xa0Z\xbb\xc7\xc0g', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x10, r0, 0x78220000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) r6 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r6, 0x2}) mount(&(0x7f0000000140)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='msdos\x00', 0x208002, 0x0) fsopen(&(0x7f0000000100)='cifs\x00', 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, 0x0, &(0x7f0000000340)) (async) fsopen(&(0x7f0000000000)='ext2\x00', 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f00000000c0)='/dev/udmabuf\x00', &(0x7f0000000100)='ext2\x00', 0x0) (async) socket$inet(0xa, 0x801, 0x84) (async) listen(r3, 0x8) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000200)='\x00\xa2\xe5\xf2\x9d\xd2\x98\x03\x95\x14uw\xbd\xe6\xf5J\x06\xc3k\x91\xaaU\xabG~X>\xfe\xc9\xcbH\xd7\fJ`\xab\xe9\a\xe7\xda\xc1PP[2 F\r;\xf3=p\x86Xz\xa5S!c\xe6\xcb\xd0\xc4#\xbc\xa3X\x8d\x8c\x0f\xfc/~H\xee\xb2\tJ\x8e:\xfa\xa0\xcd3\x8b&\xef\x03\xe6$\xbf\x00\x95U\xce\xb0\xb4\xac\x14\xaaX\x18t\xedNJ\'\x87\'g\x9ajn<\x13\xac\v \xc4\x05 \xf8\x1d\xc8\x80o\xcfdI\xe9\r\x1f\xb2\t@;`\x03\x9e\xb3\xe2>\x15\xb1:\xdf\x99\xc4\x13\x1f\x95d\xdb8\xc0j8\xf3\xa1:\xf9j\\K\xb9\xd5_\x85Y\xca]\ark>\xf0\x8c\xbd;\xfcP/;\'{t\x91\xc6@\x8c\x18X=\x95\xdc!:\x13]\xc1\xc2\xc2\xde\x80#\x19W\v\xe2\x8f\xbe\x939%.)\x15\x00\x00\x00\x00\x00\x00\xfc\xbd\x05\x0e\xb4\x1eL\xa3\xa7s\x0f\x16n\x17\xec\xa3\xe20\xa9t]\xab\xd3\x19\xa6\x03\xdf\xbb\xa0K\xfaI\xf0\xfe\x85\x8b\x0e,\xe1\x10\xb7\x92!\x9aB\xa6\x02\tQ\xff\x17\x06+}\xd1\b\x8b\x91A\xe2\x11\x92x\x1d\x1b\xd8G\x15\xa0Z\xbb\xc7\xc0g', 0x0) (async) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_auto}]}) (async) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x6, 0x10, r0, 0x78220000) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000240)={0x0, 0x3, r6, 0x2}) (async) mount(&(0x7f0000000140)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000180)='msdos\x00', 0x208002, 0x0) (async) 36.876932202s ago: executing program 6 (id=13547): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 36.811411218s ago: executing program 6 (id=13550): ioprio_set$uid(0x3, 0x0, 0x0) 23.86053784s ago: executing program 42 (id=13510): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000000)=0xffffffff, 0x5000001) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000100)='wg1\x00', 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r3 = mq_open(&(0x7f0000000080)='/dev/rnullb0\x00', 0x2, 0x144, &(0x7f00000000c0)={0x4, 0x3128, 0x464, 0x1}) mq_timedreceive(r3, &(0x7f0000000240)=""/203, 0xcb, 0x1ff, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x1405, 0x1, 0x70bd27, 0x25dfdbff, "", [{{0x8}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 23.841919285s ago: executing program 6 (id=13555): sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x10, 0x111, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x48010) 23.770644446s ago: executing program 6 (id=13556): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg(r0, 0x0, 0x0, 0x8000) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000100)) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) r1 = add_key$keyring(&(0x7f0000000640), &(0x7f0000000680)={'syz', 0x2}, 0x0, 0x1000000, 0xfffffffffffffffc) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x9c) getgid() 23.604292548s ago: executing program 6 (id=13561): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x1000}}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000000904"], 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "a0742199e64971ad"}}}, 0x11) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x5, 0x2602) syz_emit_vhci(&(0x7f0000001080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xed}, "d43b5eae0b3f4212a2df33c0c3084b53ae97720f14e2f9c5f0601c44af400faadbfaf748c7d4a665758bad894f8a255757ab52cbe58a639a88321ba94d0052910967163a8bedf5b68f3219036972f10c3fda041a093491896d70c4130be12d034d20dfc77ea4d1e211cb31d871a73aaa0a3786fe83280388cecfcb76e992793cd3815e7a6c6dc7333729ab79de8adab6572f01d4be4e42dca33e13bbea6aa579e3fe24aabc9c507c2602fcfeb7b76ad58a930e0d00f9ae1d256a292107ef4177db42e85ebf0fe90eda42b9ee5d7a8447d0f9da1b23ac40db3d16165da71e1399678e99e7f0d93191328c84ff13"}, 0xf1) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x80000001]}, 0x8) readahead(r4, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)=""/98, 0x62}], 0x2, 0x7, 0x9) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001200)=[@text16={0x10, &(0x7f0000001180)="0fc7590036643e640fc71c66660f3881b20da367660f71e4610fc777002e0fc72836f082720000baf80c66b88481878766efbafc0cb80008ef65640fc79b00000f08", 0x42}], 0x1, 0x8, &(0x7f0000001240), 0x0) 9.775435249s ago: executing program 0 (id=13682): ioprio_set$uid(0x3, 0x0, 0x200000000000000) 9.748457952s ago: executing program 0 (id=13683): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x1c, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x8, 0x111, 0x0, 0x1, {0x4}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008840}, 0x48010) 9.716030043s ago: executing program 0 (id=13684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x4004551e, &(0x7f0000000200)={0x9204, 0x1, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b428bb192c9d06ea6ed04983fe82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b3990ded0b030001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f600"}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)=@usbdevfs_driver={0x243, 0x7fffffff, 0x0}) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4000001, 0x12, r0, 0x4ebef000) setreuid(0x0, 0xee00) 9.640132732s ago: executing program 0 (id=13685): openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000080)='./file1\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000440)={'#! ', './bus', [{0x20, 'overlay\x00'}, {0x20, 'fuse\x00'}, {}, {0x20, '\x92^!{^'}], 0xa, "6ec17173ff8f509c40220b473c9b126b6191b7a07a7cc996ccabeb682cf8d191d532abb8fa269d32abb4002d7a83055c97a02634ec7a"}, 0x55) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 9.593774383s ago: executing program 0 (id=13687): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x10, 0x111, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x48010) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000009f00)={0x6c, r2, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x38, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x7, 0x3, 0x3f, 0x29}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x6c}}, 0x20000014) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x209000, 0x0) 9.470228934s ago: executing program 0 (id=13691): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1b3040, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1b3040, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x1, 0x1, 0x4, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xc}}, @loopback, 0x1, 0x700, 0x0, 0x6}}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000200)=r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) bind$packet(r2, &(0x7f0000000200)={0x11, 0xf6, r4, 0x1, 0x55, 0x6, @multicast}, 0x14) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x1a9041, 0x0) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xff2e) (async) write$binfmt_aout(r6, &(0x7f0000000280)=ANY=[], 0xff2e) ioctl$TCSETS(r6, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x6, 0x1, "0062ff00000000000000ecffc386e90d362800"}) r7 = syz_open_pts(r6, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) dup3(r7, r6, 0x0) (async) r8 = dup3(r7, r6, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x12) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000000)=0x12) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x200000, 0x0) 7.132905678s ago: executing program 43 (id=13561): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x1000}}) setsockopt$inet_tcp_int(r2, 0x6, 0xc, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004b41460860163209ea80010203010902120001000000000904"], 0x0) syz_emit_vhci(&(0x7f00000001c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, "a0742199e64971ad"}}}, 0x11) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x5, 0x2602) syz_emit_vhci(&(0x7f0000001080)=@HCI_SCODATA_PKT={0x3, {0xc9, 0xed}, "d43b5eae0b3f4212a2df33c0c3084b53ae97720f14e2f9c5f0601c44af400faadbfaf748c7d4a665758bad894f8a255757ab52cbe58a639a88321ba94d0052910967163a8bedf5b68f3219036972f10c3fda041a093491896d70c4130be12d034d20dfc77ea4d1e211cb31d871a73aaa0a3786fe83280388cecfcb76e992793cd3815e7a6c6dc7333729ab79de8adab6572f01d4be4e42dca33e13bbea6aa579e3fe24aabc9c507c2602fcfeb7b76ad58a930e0d00f9ae1d256a292107ef4177db42e85ebf0fe90eda42b9ee5d7a8447d0f9da1b23ac40db3d16165da71e1399678e99e7f0d93191328c84ff13"}, 0xf1) r4 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x80000001]}, 0x8) readahead(r4, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000280)=""/98, 0x62}], 0x2, 0x7, 0x9) semctl$SETALL(0x0, 0x0, 0x11, 0x0) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000001200)=[@text16={0x10, &(0x7f0000001180)="0fc7590036643e640fc71c66660f3881b20da367660f71e4610fc777002e0fc72836f082720000baf80c66b88481878766efbafc0cb80008ef65640fc79b00000f08", 0x42}], 0x1, 0x8, &(0x7f0000001240), 0x0) 4.909872637s ago: executing program 7 (id=13718): r0 = semget(0x1, 0x2, 0x606) (fail_nth: 1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 4.780148349s ago: executing program 7 (id=13719): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20037, 0x1) 3.846890694s ago: executing program 7 (id=13722): openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.777865077s ago: executing program 7 (id=13724): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x20, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0xc, 0x111, 0x0, 0x1, {0x8, 0x5, 0x0, 0x1, [{0x4}]}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008840}, 0x48010) 3.697722558s ago: executing program 7 (id=13726): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) 3.638539893s ago: executing program 7 (id=13727): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) r4 = syz_clone(0x2000000, &(0x7f0000000080)="1c0473a53a84ec7022c7d4de980c8c140292a263eaab86b2516a4342a5cfc4bfde06672cef1901ef6890693a4e82a89de89a762a485367453752b6adfc2038e7f873bd1f23644d2f63705fad933c331808fe55b7fcdebf9d74c6c7fe1976f542a7986bbd713db24ccdb0cd97d580f0e3ae15cfa91a6cb89eb0700cb670213e99a244bd9f4cb17bf2f1cbfb6c55b31d63bbae79240c42a0086543", 0x9a, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)="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") symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000200)='./file0\x00') chmod(&(0x7f0000000100)='./file0\x00', 0x38c) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/icmp\x00') r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000080)={r8, @in6={{0xa, 0x4e23, 0xfffffff7, @remote, 0x4}}, [0xed40, 0x5, 0x100000001, 0x100, 0x5, 0x1, 0x5, 0x80, 0xfffffffffffffffc, 0x9, 0xd6be, 0x8, 0x1]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000001200)={r8, 0x20, &(0x7f00000011c0)=[@in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000001240)=0x10) 764.848083ms ago: executing program 2 (id=13749): openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x9ce80, 0x0) socket(0x2, 0x2, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000040)) (fail_nth: 4) 673.392939ms ago: executing program 2 (id=13751): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x9ce80, 0x0) socket(0x2, 0x2, 0x1) r0 = semget(0x1, 0x2, 0x606) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x57, &(0x7f0000000000)={&(0x7f0000000800)={0x28, 0x2d, 0xb, 0x70bd26, 0x4000, {0xb}, [@typed={0x14, 0x2, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x28}}, 0x8010) r1 = socket(0x2, 0x2, 0x1) bind$unix(r1, &(0x7f0000000000)=@abs, 0x6e) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r2, &(0x7f0000000680)=[{&(0x7f0000000880)=""/175, 0xaf}, {&(0x7f0000000280)=""/186, 0xba}], 0x2, 0x8, 0x2081) 667.123688ms ago: executing program 2 (id=13753): unshare(0x12000480) r0 = creat(&(0x7f0000001380)='./file0\x00', 0x44) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r1, &(0x7f0000000080)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xffffffff, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null]}, 0x40) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000040)) ioctl$BLKGETDISKSEQ(r0, 0x80081280, &(0x7f00000000c0)) 572.165495ms ago: executing program 2 (id=13754): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) (fail_nth: 7) 572.022702ms ago: executing program 2 (id=13755): r0 = semget(0x1, 0x2, 0x606) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)) 541.516483ms ago: executing program 2 (id=13756): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) 289.809973ms ago: executing program 4 (id=13760): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000007d00)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="180000006a001501f7bf2ce0039ec5665e2470"], 0x1c}], 0x1}, 0x200000c8) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xb0000005}) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000000)={0x8000200c}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r7 = creat(0x0, 0x4) prlimit64(0x0, 0x7, 0x0, 0x0) pipe2(0x0, 0x0) sendmsg$kcm(r7, &(0x7f00000001c0)={&(0x7f0000000000)=@l2={0x1f, 0xf4f2, @none, 0x9, 0x1}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000140)="3a27bce1b2fdd9ec2708815f666ded1b7e1b1415617e2ac1e95016de4209da60b9ec195b7ba8efcbb27d02c13ba1260bab51df6b03be04134086c3c2244193c4a4264421d7f59387abaa6d2587564f63909036c7d107a48cc608be200280324296d8add3b2eb1d10a45785ab6c043a0e10ee3fc7", 0x74}, {&(0x7f0000000080)="a552039772c8c43467fac870b227f9f6b0c16b9392b8437ff2c65d5d3a3aaf513438084957c4eb0836ec2d9129455d960a0b", 0x32}, {&(0x7f0000000240)="8bc80f97440c859920c979cd4265e0ffb26bc5a7e35645145eebc3c93c20a4ab3c29d06baba67d8b42fd3b29ce2fed99da7c18269b630bdb5f1a0d24c875166f1585d50f0880157c75ec24a9de5271a2d937f90af81945716a3c9f3cb082c06da17a96dd60c0b6f2fee7b5db5b75063d5d49fde7a8a78b3ee0a43e39fc15484d9bb18e83b60f818cc2e4697cca92c64a2a09aa16bcdbdc90a4adc23034d0f4435afb6689b85c32baeb042943523fbc884ce2ae5d7d83a4572615fd48b7ad9ded873ee6675c497c97", 0xc8}, {&(0x7f0000000340)="a9f78560ea4d4c2e5dc1e103a37e5c8e1eb3afee5c1cd4258e27359edb8f0100461e794fcb99a6d985b87271ad91d458f76bcbca7ccd8a262df6511c29bf0f05793af6865bfca042e24fdf29903ffd313b2ca075000301046ddc83c7a81b6210412a32da", 0x64}, {&(0x7f00000003c0)="17540b3a806422245127ee15f09acc76032d20430a0b586b8976768fbb4dc15885bb1040c87bca033104df8518bfc2b7d541ce010a52b4cc2004148cc549cabd45b5e890cacd6209146d5c1beb3081e2d1c4dea96a89", 0x56}, {&(0x7f0000001180)="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", 0x1000}], 0x6}, 0x1) fadvise64(r6, 0x1000, 0x1, 0x2) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000540), 0x200000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x832b4b7a082e2007, 0x12, r8, 0x4580b000) futex(&(0x7f000000cffc), 0x3, 0x0, 0x0, &(0x7f0000048000), 0x2) 160.205585ms ago: executing program 4 (id=13761): openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 150.204148ms ago: executing program 4 (id=13762): openat$rnullb(0xffffffffffffff9c, 0x0, 0x141342, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 102.12974ms ago: executing program 4 (id=13763): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, 0x0, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x10, 0x111, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x4}]}]}}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008840}, 0x48010) 71.335922ms ago: executing program 4 (id=13764): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) landlock_restrict_self(r0, 0x1) 0s ago: executing program 4 (id=13765): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20037, 0x1) close(r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) fcntl$setown(r3, 0x8, r2) kernel console output (not intermixed with test programs): : Port device C removed [ 1779.613875][ T9639] team0 (unregistering): Port device team_slave_1 removed [ 1779.659115][ T9639] team0 (unregistering): Port device C removed [ 1780.542636][T17319] /dev/rnullb0: Can't open blockdev [ 1780.573259][T17321] loop3: detected capacity change from 0 to 1 [ 1780.593407][T13450] Dev loop3: unable to read RDB block 1 [ 1780.599117][T13450] loop3: unable to read partition table [ 1780.605461][T13450] loop3: partition table beyond EOD, truncated [ 1780.612782][T17321] Dev loop3: unable to read RDB block 1 [ 1780.635880][T17321] loop3: unable to read partition table [ 1780.645590][T17321] loop3: partition table beyond EOD, truncated [ 1780.651798][T17321] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1780.674709][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1324.tmp-b7:3' failed: Read-only file system [ 1780.732505][T17323] netlink: 'syz.0.12946': attribute type 33 has an invalid length. [ 1780.740416][T17323] netlink: 160 bytes leftover after parsing attributes in process `syz.0.12946'. [ 1780.803685][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1324.tmp-b7:3' failed: Read-only file system [ 1780.812095][T17323] /dev/rnullb0: Can't open blockdev [ 1780.860004][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1324.tmp-b7:3' failed: Read-only file system [ 1780.888591][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.8.12947'. [ 1781.122944][ T9639] IPVS: stop unused estimator thread 0... [ 1781.294872][T17337] /dev/sg0: Can't lookup blockdev [ 1781.348194][T17340] /dev/rnullb0: Can't open blockdev [ 1781.520969][T17346] /dev/rnullb0: Can't open blockdev [ 1781.542708][T17345] binder: Bad value for 'max' [ 1781.769015][T17350] loop3: detected capacity change from 0 to 1 [ 1781.785892][T17350] Dev loop3: unable to read RDB block 1 [ 1781.796103][T17350] loop3: unable to read partition table [ 1781.804656][T17350] loop3: partition table beyond EOD, truncated [ 1781.811332][T17350] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1781.823967][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1326.tmp-b7:3' failed: Read-only file system [ 1781.858725][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1326.tmp-b7:3' failed: Read-only file system [ 1781.882460][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1326.tmp-b7:3' failed: Read-only file system [ 1781.931967][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1782.034984][ T1073] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1782.184748][T15977] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 1782.195324][ T1073] usb 9-1: Using ep0 maxpacket: 32 [ 1782.210035][ T1073] usb 9-1: config 12 has an invalid interface number: 160 but max is 0 [ 1782.222261][ T1073] usb 9-1: config 12 has no interface number 0 [ 1782.230043][ T1073] usb 9-1: config 12 interface 160 has no altsetting 0 [ 1782.245286][ T1073] usb 9-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice=81.dc [ 1782.256453][ T1073] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.266274][ T1073] usb 9-1: Product: syz [ 1782.270665][ T1073] usb 9-1: Manufacturer: syz [ 1782.275337][ T1073] usb 9-1: SerialNumber: syz [ 1782.347238][T15977] usb 4-1: config 0 has an invalid interface number: 179 but max is 0 [ 1782.355466][T15977] usb 4-1: config 0 has no interface number 0 [ 1782.380432][T15977] usb 4-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 1782.398328][T15977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1782.419707][T15977] usb 4-1: Product: syz [ 1782.424349][T15977] usb 4-1: Manufacturer: syz [ 1782.428965][T15977] usb 4-1: SerialNumber: syz [ 1782.444260][T15977] usb 4-1: config 0 descriptor?? [ 1782.464797][T15977] usb-storage 4-1:0.179: USB Mass Storage device detected [ 1782.479292][T15977] usb-storage 4-1:0.179: device ignored [ 1782.507409][ T1073] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:12.160/input/input170 [ 1782.531143][ T1073] usb 9-1: USB disconnect, device number 15 [ 1782.621722][T13450] udevd[13450]: setting mode of /dev/input/mouse1 to 020660 failed: Read-only file system [ 1782.653448][T17365] /dev/rnullb0: Can't open blockdev [ 1782.661630][T13450] udevd[13450]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: Read-only file system [ 1782.693175][T15977] usb 4-1: USB disconnect, device number 73 [ 1782.739494][T17368] /dev/rnullb0: Can't open blockdev [ 1782.759530][T13500] udevd[13500]: setting mode of /dev/input/event4 to 020660 failed: Read-only file system [ 1783.136197][ T1073] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1783.289480][ T1073] usb 6-1: device descriptor read/64, error -71 [ 1783.440123][T17389] netlink: 'syz.3.12970': attribute type 25 has an invalid length. [ 1783.450793][T17389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12970'. [ 1783.542304][ T1073] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1783.574348][ T9] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1783.691804][ T1073] usb 6-1: device descriptor read/64, error -71 [ 1783.723917][T29506] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 1783.736067][ T9] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.754690][ T9] usb 9-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.764560][ T9] usb 9-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1783.777676][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1783.784296][ T9] usb 9-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 1783.793355][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.803989][ T9] usb 9-1: config 0 descriptor?? [ 1783.809591][ T1073] usb usb6-port1: attempt power cycle [ 1783.863503][T29506] usb 4-1: device descriptor read/64, error -71 [ 1784.119480][T29506] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 1784.195203][ T1073] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1784.217254][ T1073] usb 6-1: device descriptor read/8, error -71 [ 1784.254408][T17383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1784.263181][T17383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1784.271116][T29506] usb 4-1: device descriptor read/64, error -71 [ 1784.389988][T29506] usb usb4-port1: attempt power cycle [ 1784.475254][ T1073] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1784.493494][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 1784.500581][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1784.515491][ T1073] usb 6-1: device descriptor read/8, error -71 [ 1784.530990][ T9] usb 9-1: USB disconnect, device number 16 [ 1784.654069][ T1073] usb usb6-port1: unable to enumerate USB device [ 1784.750107][T29506] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1784.782728][T29506] usb 4-1: device descriptor read/8, error -71 [ 1785.039662][T29506] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1785.076240][T29506] usb 4-1: device descriptor read/8, error -71 [ 1785.211563][T29506] usb usb4-port1: unable to enumerate USB device [ 1785.467818][T17407] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1785.474797][T17407] /dev/rnullb0: Can't open blockdev [ 1785.550991][T17411] syz.8.12978: attempt to access beyond end of device [ 1785.550991][T17411] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1785.568214][T17411] syz.8.12978: attempt to access beyond end of device [ 1785.568214][T17411] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1785.619936][T17413] /dev/rnullb0: Can't open blockdev [ 1785.849605][T17419] /dev/rnullb0: Can't open blockdev [ 1785.977327][T17426] binder: 17425:17426 unknown command 0 [ 1785.983421][T17426] binder: 17425:17426 ioctl c0306201 200000000780 returned -22 [ 1785.993075][T17426] /dev/rnullb0: Can't open blockdev [ 1786.070237][T17430] /dev/rnullb0: Can't open blockdev [ 1786.188698][T17435] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 1786.209984][T17435] overlayfs: overlapping lowerdir path [ 1786.339823][T17445] FAULT_INJECTION: forcing a failure. [ 1786.339823][T17445] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1786.354569][T17445] CPU: 0 UID: 0 PID: 17445 Comm: syz.8.12991 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1786.354594][T17445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1786.354606][T17445] Call Trace: [ 1786.354613][T17445] [ 1786.354621][T17445] dump_stack_lvl+0x189/0x250 [ 1786.354651][T17445] ? __pfx____ratelimit+0x10/0x10 [ 1786.354676][T17445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1786.354701][T17445] ? __pfx__printk+0x10/0x10 [ 1786.354726][T17445] ? __might_fault+0xb0/0x130 [ 1786.354766][T17445] should_fail_ex+0x414/0x560 [ 1786.354799][T17445] _copy_from_user+0x2d/0xb0 [ 1786.354826][T17445] ___sys_sendmsg+0x158/0x2a0 [ 1786.354846][T17445] ? __pfx____sys_sendmsg+0x10/0x10 [ 1786.354901][T17445] ? __fget_files+0x2a/0x420 [ 1786.354922][T17445] ? __fget_files+0x3a0/0x420 [ 1786.354951][T17445] __x64_sys_sendmsg+0x19b/0x260 [ 1786.354971][T17445] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1786.354997][T17445] ? __pfx_ksys_write+0x10/0x10 [ 1786.355020][T17445] ? do_syscall_64+0xbe/0x3b0 [ 1786.355048][T17445] do_syscall_64+0xfa/0x3b0 [ 1786.355071][T17445] ? lockdep_hardirqs_on+0x9c/0x150 [ 1786.355094][T17445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.355111][T17445] ? clear_bhb_loop+0x60/0xb0 [ 1786.355132][T17445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.355149][T17445] RIP: 0033:0x7f0ec818e929 [ 1786.355165][T17445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1786.355180][T17445] RSP: 002b:00007f0ec5ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1786.355198][T17445] RAX: ffffffffffffffda RBX: 00007f0ec83b5fa0 RCX: 00007f0ec818e929 [ 1786.355212][T17445] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1786.355224][T17445] RBP: 00007f0ec5ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.355235][T17445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.355246][T17445] R13: 0000000000000000 R14: 00007f0ec83b5fa0 R15: 00007ffcbbe9b778 [ 1786.355274][T17445] [ 1786.565362][ C0] vkms_vblank_simulate: vblank timer overrun [ 1786.666862][T17450] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12993'. [ 1786.677801][T17450] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 1786.701326][T17450] syzkaller0: ignored: set checksum disabled [ 1786.708925][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1786.755766][T17450] ./cgroup: Can't lookup blockdev [ 1787.080741][ T5911] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1787.170718][T17464] syz.5.12997: attempt to access beyond end of device [ 1787.170718][T17464] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1787.191752][T17464] syz.5.12997: attempt to access beyond end of device [ 1787.191752][T17464] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1787.241581][ T5911] usb 9-1: device descriptor read/64, error -71 [ 1787.550979][ T5911] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1787.732293][ T5911] usb 9-1: device descriptor read/64, error -71 [ 1787.813808][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1787.850362][ T5911] usb usb9-port1: attempt power cycle [ 1787.895863][T17470] /dev/rnullb0: Can't open blockdev [ 1787.974917][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1788.007521][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1788.117081][ T1073] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1788.213455][ T5911] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1788.235984][ T5911] usb 9-1: device descriptor read/8, error -71 [ 1788.277723][ T1073] usb 6-1: Using ep0 maxpacket: 16 [ 1788.285640][ T1073] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1788.294619][ T1073] usb 6-1: config 0 has no interface number 0 [ 1788.301510][ T1073] usb 6-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1788.312423][ T1073] usb 6-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1788.322175][ T1073] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1788.328845][ T1073] usb 6-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 1788.338435][ T1073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.348944][ T1073] usb 6-1: config 0 descriptor?? [ 1788.375425][ T5946] usb 4-1: new low-speed USB device number 78 using dummy_hcd [ 1788.502005][ T5911] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1788.523951][ T5911] usb 9-1: device descriptor read/8, error -71 [ 1788.537476][ T5946] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 1788.546118][ T5946] usb 4-1: config 0 has no interface number 0 [ 1788.552229][ T5946] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1788.563084][ T5946] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1788.574052][ T5946] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1788.585698][ T5946] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1788.596800][ T5946] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1788.607694][ T5946] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1788.620837][ T5946] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1788.629904][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.648559][ T5946] usb 4-1: config 0 descriptor?? [ 1788.654431][ T5911] usb usb9-port1: unable to enumerate USB device [ 1788.662485][T17477] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1788.669758][T17477] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 1788.682516][ T5946] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1788.794579][ T1073] hid_parser_main: 160 callbacks suppressed [ 1788.794597][ T1073] chicony 0003:04F2:0418.0066: unknown main item tag 0x0 [ 1788.807937][ T1073] chicony 0003:04F2:0418.0066: unknown main item tag 0x0 [ 1788.815099][ T1073] chicony 0003:04F2:0418.0066: unknown main item tag 0x0 [ 1788.822164][ T1073] chicony 0003:04F2:0418.0066: unknown main item tag 0x0 [ 1788.831175][ T1073] chicony 0003:04F2:0418.0066: hidraw0: USB HID v0.00 Device [HID 04f2:0418] on usb-dummy_hcd.5-1/input1 [ 1789.013070][T17472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1789.024792][T17472] tipc: Enabling of bearer rejected, media not registered [ 1789.036086][T17472] /dev/rnullb0: Can't open blockdev [ 1789.043648][ T5911] usb 6-1: USB disconnect, device number 61 [ 1789.622096][T17481] /dev/rnullb0: Can't open blockdev [ 1789.735150][T17486] @: renamed from vlan0 (while UP) [ 1789.751170][T17483] /dev/rnullb0: Can't open blockdev [ 1790.115653][T17502] syz.8.13009: attempt to access beyond end of device [ 1790.115653][T17502] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1790.128826][T17502] syz.8.13009: attempt to access beyond end of device [ 1790.128826][T17502] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1790.254962][ T1073] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1790.426298][ T1073] usb 6-1: Using ep0 maxpacket: 16 [ 1790.438103][ T1073] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1790.444735][ T1073] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 1790.454012][ T1073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.465242][ T1073] usb 6-1: config 0 descriptor?? [ 1790.920809][ T1073] magicmouse 0003:05AC:0265.0067: unknown main item tag 0x0 [ 1790.937564][ T1073] magicmouse 0003:05AC:0265.0067: unknown main item tag 0x0 [ 1790.949877][ T1073] magicmouse 0003:05AC:0265.0067: unknown main item tag 0x0 [ 1790.970316][ T1073] magicmouse 0003:05AC:0265.0067: unknown main item tag 0x0 [ 1790.978770][ T1073] magicmouse 0003:05AC:0265.0067: unknown main item tag 0x0 [ 1791.003392][ T1073] magicmouse 0003:05AC:0265.0067: unknown main item tag 0x0 [ 1791.015029][ T1073] magicmouse 0003:05AC:0265.0067: hidraw0: USB HID v0.05 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0 [ 1791.034449][ T1073] magicmouse 0003:05AC:0265.0067: magicmouse input not registered [ 1791.078962][ T1073] magicmouse 0003:05AC:0265.0067: probe with driver magicmouse failed with error -12 [ 1791.265493][ T5911] usb 6-1: USB disconnect, device number 62 [ 1791.300744][T17519] bridge0: port 1(bridge_slave_0) entered disabled state [ 1791.342494][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1791.349688][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1791.417839][ T5946] usb 4-1: USB disconnect, device number 78 [ 1791.429906][ T5946] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 1791.523087][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1791.536958][T17526] syzkaller1: entered promiscuous mode [ 1791.553160][T17526] syzkaller1: entered allmulticast mode [ 1791.564959][T17528] syz.3.13017: attempt to access beyond end of device [ 1791.564959][T17528] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1791.578347][T17528] syz.3.13017: attempt to access beyond end of device [ 1791.578347][T17528] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1791.707650][T17531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1791.727134][T17531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1791.869731][T17534] syz.5.13019: attempt to access beyond end of device [ 1791.869731][T17534] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1791.885296][T17534] syz.5.13019: attempt to access beyond end of device [ 1791.885296][T17534] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1791.954615][ T1073] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 1792.131120][ T1073] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1792.140702][ T1073] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.149419][ T1073] usb 9-1: Product: syz [ 1792.153702][ T1073] usb 9-1: Manufacturer: syz [ 1792.159628][ T1073] usb 9-1: SerialNumber: syz [ 1792.167874][ T1073] usb 9-1: config 0 descriptor?? [ 1792.240077][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1792.326503][T17541] netlink: 'syz.0.13022': attribute type 27 has an invalid length. [ 1792.394537][ T1073] dvb_usb_rtl28xxu 9-1:0.0: chip type detection failed -71 [ 1792.405620][ T1073] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1792.419558][T17544] /dev/rnullb0: Can't open blockdev [ 1792.425261][ T1073] usb 9-1: USB disconnect, device number 21 [ 1792.434894][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 1792.442478][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 1792.576502][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1792.589558][T17541] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1792.617724][T15977] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1792.694337][ T3560] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.706637][ T3560] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.716817][ T3560] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.726686][ T3560] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1792.777646][ T5890] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1792.799515][T15977] usb 4-1: Using ep0 maxpacket: 32 [ 1792.806313][T15977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1792.818658][T15977] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1792.828390][T15977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1792.836531][T15977] usb 4-1: Product: syz [ 1792.840694][T15977] usb 4-1: Manufacturer: syz [ 1792.845425][T15977] usb 4-1: SerialNumber: syz [ 1792.852040][T15977] usb 4-1: config 0 descriptor?? [ 1792.861091][T15977] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1792.948790][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 1792.966948][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1792.990083][ T5890] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1793.002942][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1793.010999][ T5890] usb 6-1: Product: syz [ 1793.020789][ T5890] usb 6-1: Manufacturer: syz [ 1793.029400][ T5890] usb 6-1: SerialNumber: syz [ 1793.042007][ T5890] usb 6-1: config 0 descriptor?? [ 1793.057994][ T5890] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1793.074532][ T5890] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 1793.511757][T15977] gspca_sunplus: reg_r err -32 [ 1793.576144][T17561] xfrm0: mtu less than device minimum [ 1793.637762][T17563] /dev/rnullb0: Can't open blockdev [ 1793.701280][ T5890] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1793.797804][T17570] syz.8.13031: attempt to access beyond end of device [ 1793.797804][T17570] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1793.814572][T17570] syz.8.13031: attempt to access beyond end of device [ 1793.814572][T17570] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1794.366449][ T5890] em28xx 6-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 1794.378353][ T5890] em28xx 6-1:0.0: board has no eeprom [ 1794.464578][T17574] /dev/rnullb0: Can't open blockdev [ 1794.485012][T17574] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1794.604660][T17546] pimreg: entered allmulticast mode [ 1794.613774][T28913] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1794.614159][T17546] pimreg: left allmulticast mode [ 1794.628828][T28913] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1794.637633][T28913] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1794.688209][T17578] /dev/rnullb0: Can't open blockdev [ 1794.723160][T15977] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 1794.765903][ T5890] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1794.773742][ T5890] em28xx 6-1:0.0: dvb set to bulk mode. [ 1794.791486][T15977] em28xx 6-1:0.0: Binding DVB extension [ 1794.807112][ T5890] usb 6-1: USB disconnect, device number 63 [ 1794.842013][ T5890] em28xx 6-1:0.0: Disconnecting em28xx [ 1794.888875][T15977] em28xx 6-1:0.0: Registering input extension [ 1794.897372][ T5890] em28xx 6-1:0.0: Closing input extension [ 1794.909911][ T5890] em28xx 6-1:0.0: Freeing device [ 1795.254520][T17583] /dev/rnullb0: Can't open blockdev [ 1795.299183][T17585] FAULT_INJECTION: forcing a failure. [ 1795.299183][T17585] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.317104][T17585] CPU: 0 UID: 0 PID: 17585 Comm: syz.5.13035 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1795.317121][T17585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1795.317130][T17585] Call Trace: [ 1795.317141][T17585] [ 1795.317146][T17585] dump_stack_lvl+0x189/0x250 [ 1795.317169][T17585] ? __pfx____ratelimit+0x10/0x10 [ 1795.317187][T17585] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1795.317205][T17585] ? __pfx__printk+0x10/0x10 [ 1795.317227][T17585] ? __pfx___might_resched+0x10/0x10 [ 1795.317247][T17585] should_fail_ex+0x414/0x560 [ 1795.317271][T17585] should_failslab+0xa8/0x100 [ 1795.317285][T17585] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1795.317305][T17585] ? __alloc_skb+0x112/0x2d0 [ 1795.317327][T17585] __alloc_skb+0x112/0x2d0 [ 1795.317347][T17585] netlink_dump+0x1ab/0xe90 [ 1795.317364][T17585] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1795.317385][T17585] ? __pfx___mutex_lock+0x10/0x10 [ 1795.317403][T17585] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1795.317421][T17585] ? __pfx_netlink_dump+0x10/0x10 [ 1795.317446][T17585] ? genl_start+0x581/0x6c0 [ 1795.317464][T17585] __netlink_dump_start+0x5cb/0x7e0 [ 1795.317486][T17585] genl_family_rcv_msg_dumpit+0x1e7/0x2c0 [ 1795.317502][T17585] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1795.317514][T17585] ? genl_get_cmd+0x7d9/0x910 [ 1795.317528][T17585] ? __pfx___mutex_lock+0x10/0x10 [ 1795.317545][T17585] ? __pfx_genl_start+0x10/0x10 [ 1795.317556][T17585] ? __pfx_genl_dumpit+0x10/0x10 [ 1795.317567][T17585] ? __pfx_genl_done+0x10/0x10 [ 1795.317589][T17585] genl_rcv_msg+0x5da/0x790 [ 1795.317606][T17585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1795.317617][T17585] ? __pfx_smc_pnet_dump_start+0x10/0x10 [ 1795.317629][T17585] ? __pfx_smc_pnet_dump+0x10/0x10 [ 1795.317651][T17585] netlink_rcv_skb+0x205/0x470 [ 1795.317668][T17585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1795.317682][T17585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1795.317710][T17585] ? down_read+0x1ad/0x2e0 [ 1795.317730][T17585] genl_rcv+0x28/0x40 [ 1795.317741][T17585] netlink_unicast+0x759/0x8e0 [ 1795.317763][T17585] netlink_sendmsg+0x805/0xb30 [ 1795.317787][T17585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1795.317807][T17585] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1795.317828][T17585] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1795.317843][T17585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1795.317861][T17585] __sock_sendmsg+0x219/0x270 [ 1795.317878][T17585] ____sys_sendmsg+0x505/0x830 [ 1795.317913][T17585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1795.317939][T17585] ? import_iovec+0x74/0xa0 [ 1795.317965][T17585] ___sys_sendmsg+0x21f/0x2a0 [ 1795.317985][T17585] ? __pfx____sys_sendmsg+0x10/0x10 [ 1795.318037][T17585] ? __fget_files+0x2a/0x420 [ 1795.318055][T17585] ? __fget_files+0x3a0/0x420 [ 1795.318077][T17585] __x64_sys_sendmsg+0x19b/0x260 [ 1795.318091][T17585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1795.318109][T17585] ? __pfx_ksys_write+0x10/0x10 [ 1795.318126][T17585] ? do_syscall_64+0xbe/0x3b0 [ 1795.318151][T17585] do_syscall_64+0xfa/0x3b0 [ 1795.318167][T17585] ? lockdep_hardirqs_on+0x9c/0x150 [ 1795.318183][T17585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.318196][T17585] ? clear_bhb_loop+0x60/0xb0 [ 1795.318211][T17585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1795.318224][T17585] RIP: 0033:0x7fb12a18e929 [ 1795.318235][T17585] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1795.318245][T17585] RSP: 002b:00007fb127ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1795.318258][T17585] RAX: ffffffffffffffda RBX: 00007fb12a3b5fa0 RCX: 00007fb12a18e929 [ 1795.318268][T17585] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1795.318276][T17585] RBP: 00007fb127ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1795.318284][T17585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1795.318292][T17585] R13: 0000000000000000 R14: 00007fb12a3b5fa0 R15: 00007ffd1bf25698 [ 1795.318311][T17585] [ 1795.728444][T17587] overlayfs: failed to resolve './file0': -2 [ 1796.105680][T17597] /dev/rnullb0: Can't open blockdev [ 1796.164181][T17600] syz.8.13041: attempt to access beyond end of device [ 1796.164181][T17600] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1796.182468][T17600] syz.8.13041: attempt to access beyond end of device [ 1796.182468][T17600] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1796.354440][ T5946] usb 4-1: USB disconnect, device number 79 [ 1796.398707][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1796.406540][T17602] cgroup: No subsys list or none specified [ 1796.420769][T17602] /dev/rnullb0: Can't open blockdev [ 1796.469371][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1796.484903][T17604] /dev/rnullb0: Can't open blockdev [ 1796.527097][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1796.554832][T17606] /dev/rnullb0: Can't open blockdev [ 1796.563852][T17608] /dev/rnullb0: Can't open blockdev [ 1796.605227][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1796.874319][T28913] Bluetooth: hci4: SCO packet for unknown connection handle 200 [ 1796.958653][T17629] /dev/rnullb0: Can't open blockdev [ 1797.126158][ T30] audit: type=1800 audit(6291405044.538:9287): pid=17636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13053" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1797.299306][ T5946] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1797.491242][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1797.566386][ T5946] usb 9-1: Using ep0 maxpacket: 8 [ 1797.573664][ T5946] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1797.586494][ T5946] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1797.609147][ T5946] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1797.617262][ T5946] usb 9-1: Product: syz [ 1797.624498][ T5946] usb 9-1: Manufacturer: syz [ 1797.629491][ T5946] usb 9-1: SerialNumber: syz [ 1797.662416][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1797.692352][T17643] syz.5.13056: attempt to access beyond end of device [ 1797.692352][T17643] nbd5: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1797.713995][T17643] syz.5.13056: attempt to access beyond end of device [ 1797.713995][T17643] nbd5: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1797.727738][T17645] FAULT_INJECTION: forcing a failure. [ 1797.727738][T17645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.742835][T17645] CPU: 1 UID: 0 PID: 17645 Comm: syz.3.13055 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1797.742861][T17645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1797.742873][T17645] Call Trace: [ 1797.742881][T17645] [ 1797.742901][T17645] dump_stack_lvl+0x189/0x250 [ 1797.742934][T17645] ? __pfx____ratelimit+0x10/0x10 [ 1797.743028][T17645] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1797.743056][T17645] ? __pfx__printk+0x10/0x10 [ 1797.743093][T17645] should_fail_ex+0x414/0x560 [ 1797.743127][T17645] _copy_to_user+0x31/0xb0 [ 1797.743156][T17645] simple_read_from_buffer+0xe1/0x170 [ 1797.743181][T17645] proc_fail_nth_read+0x1df/0x250 [ 1797.743209][T17645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1797.743237][T17645] ? rw_verify_area+0x2a6/0x4d0 [ 1797.743254][T17645] ? __lock_acquire+0xab9/0xd20 [ 1797.743272][T17645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1797.743309][T17645] vfs_read+0x200/0x980 [ 1797.743331][T17645] ? __pfx___mutex_lock+0x10/0x10 [ 1797.743355][T17645] ? __pfx_vfs_read+0x10/0x10 [ 1797.743373][T17645] ? __fget_files+0x2a/0x420 [ 1797.743397][T17645] ? __fget_files+0x3a0/0x420 [ 1797.743415][T17645] ? __fget_files+0x2a/0x420 [ 1797.743443][T17645] ksys_read+0x145/0x250 [ 1797.743463][T17645] ? __pfx_ksys_read+0x10/0x10 [ 1797.743477][T17645] ? rcu_is_watching+0x15/0xb0 [ 1797.743504][T17645] ? do_syscall_64+0xbe/0x3b0 [ 1797.743531][T17645] do_syscall_64+0xfa/0x3b0 [ 1797.743553][T17645] ? lockdep_hardirqs_on+0x9c/0x150 [ 1797.743576][T17645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.743593][T17645] ? clear_bhb_loop+0x60/0xb0 [ 1797.743631][T17645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.743663][T17645] RIP: 0033:0x7f732998d33c [ 1797.743678][T17645] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1797.743693][T17645] RSP: 002b:00007f732a88a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1797.743723][T17645] RAX: ffffffffffffffda RBX: 00007f7329bb5fa0 RCX: 00007f732998d33c [ 1797.743737][T17645] RDX: 000000000000000f RSI: 00007f732a88a0a0 RDI: 0000000000000003 [ 1797.743747][T17645] RBP: 00007f732a88a090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.743758][T17645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.743769][T17645] R13: 0000000000000000 R14: 00007f7329bb5fa0 R15: 00007ffd4e7733e8 [ 1797.743796][T17645] [ 1798.005051][ T5946] usb 9-1: Handspring Visor / Palm OS: No valid connect info available [ 1798.013344][ T5946] usb 9-1: Handspring Visor / Palm OS: port 0, is for Debugger use [ 1798.021708][ T5946] usb 9-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 1798.030394][ T5946] usb 9-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1798.073056][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1798.183460][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1798.247608][ T5946] visor 9-1:1.0: Handspring Visor / Palm OS converter detected [ 1798.257974][ T5946] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1798.272335][ T5946] usb 9-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1798.313162][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1798.368598][T29506] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 1798.431804][T17659] trusted_key: encrypted_key: keylen parameter is missing [ 1798.459051][T17632] /dev/rnullb0: Can't open blockdev [ 1798.469757][ T5890] usb 9-1: USB disconnect, device number 22 [ 1798.495040][ T5890] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1798.516089][ T5890] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1798.537465][ T5890] visor 9-1:1.0: device disconnected [ 1798.550463][T29506] usb 6-1: Using ep0 maxpacket: 32 [ 1798.568488][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1798.586395][T29506] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1798.602309][T29506] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.611729][T17665] program syz.3.13062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1798.623675][T29506] usb 6-1: config 0 descriptor?? [ 1798.849230][T29506] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1798.858472][T29506] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1798.868679][T29506] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1798.875869][T29506] usb 6-1: media controller created [ 1798.894606][T29506] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1799.200504][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1799.242753][T17672] syz.3.13065: attempt to access beyond end of device [ 1799.242753][T17672] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1799.276766][T17672] syz.3.13065: attempt to access beyond end of device [ 1799.276766][T17672] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1799.353772][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1799.373856][T17677] /dev/rnullb0: Can't open blockdev [ 1799.430038][T15977] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1799.441729][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1799.519371][T17649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1799.549411][T17649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1799.557791][T17682] pim6reg: entered allmulticast mode [ 1799.564467][T17682] /dev/rnullb0: Can't open blockdev [ 1799.629595][T15977] usb 9-1: Using ep0 maxpacket: 32 [ 1799.636273][T15977] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1799.651896][T15977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.676453][T15977] usb 9-1: config 0 descriptor?? [ 1799.701205][T15977] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1799.737831][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1799.865694][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1799.988472][T17697] fuseblk: Unknown parameter 'group_' [ 1800.014459][T29506] stb0899_attach: Driver disabled by Kconfig [ 1800.031382][T29506] az6027: no front-end attached [ 1800.031382][T29506] [ 1800.044614][T17697] /dev/rnullb0: Can't open blockdev [ 1800.073946][T29506] az6027: usb out operation failed. (-71) [ 1800.086632][T29506] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1800.099451][T29506] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input173 [ 1800.118987][T17670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.128198][T29506] dvb-usb: schedule remote query interval to 400 msecs. [ 1800.138798][T29506] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1800.148242][T17670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.169568][T17670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.188417][T29506] usb 6-1: USB disconnect, device number 64 [ 1800.201081][T17670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.257156][T29506] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1800.438717][T17702] /dev/rnullb0: Can't open blockdev [ 1800.439085][T17670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1800.459958][T17670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1800.469628][T17670] /dev/rnullb0: Can't open blockdev [ 1800.476539][T15977] gspca_vc032x: reg_w err -71 [ 1800.483221][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.497774][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.503250][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.522514][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.530333][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.535636][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.545388][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.552983][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.558673][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.566811][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.574222][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.579521][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.587650][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.594432][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.599733][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.605229][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.610524][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.620227][T15977] gspca_vc032x: I2c Bus Busy Wait 00 [ 1800.625782][T15977] gspca_vc032x: Unknown sensor... [ 1800.630911][T15977] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 1800.647346][T15977] usb 9-1: USB disconnect, device number 23 [ 1800.770415][T17711] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13079'. [ 1800.786555][T17712] netlink: 20 bytes leftover after parsing attributes in process `syz.5.13079'. [ 1800.796286][T17712] netlink: 'syz.5.13079': attribute type 28 has an invalid length. [ 1800.804443][T17711] netlink: 'syz.5.13079': attribute type 28 has an invalid length. [ 1801.072727][T17547] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 1801.080310][T17715] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13080'. [ 1801.093482][T17715] /dev/rnullb0: Can't open blockdev [ 1801.218413][T17720] netlink: 40 bytes leftover after parsing attributes in process `syz.8.13082'. [ 1801.256227][T17547] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1801.268311][T17547] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 35300, setting to 8 [ 1801.294438][T17547] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1801.301193][T17547] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1801.322302][T17547] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1801.343098][T17547] usb 6-1: config 0 descriptor?? [ 1801.351436][T17712] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1801.752578][T17733] /dev/rnullb0: Can't open blockdev [ 1801.802346][T17547] hid_parser_main: 1 callbacks suppressed [ 1801.802368][T17547] pantherlord 0003:0F30:0111.0068: unknown main item tag 0x0 [ 1801.832463][T17547] pantherlord 0003:0F30:0111.0068: unknown main item tag 0x0 [ 1801.850813][T17547] pantherlord 0003:0F30:0111.0068: unknown main item tag 0x0 [ 1801.872923][T17547] pantherlord 0003:0F30:0111.0068: unknown main item tag 0x0 [ 1801.881414][T17547] pantherlord 0003:0F30:0111.0068: unknown main item tag 0x0 [ 1801.890674][T17737] /dev/rnullb0: Can't open blockdev [ 1801.895996][T17547] pantherlord 0003:0F30:0111.0068: item fetching failed at offset 6/8 [ 1801.904960][T17547] pantherlord 0003:0F30:0111.0068: parse failed [ 1801.912663][T17547] pantherlord 0003:0F30:0111.0068: probe with driver pantherlord failed with error -22 [ 1802.078956][ T981] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1802.142946][T29506] usb 6-1: USB disconnect, device number 65 [ 1802.216231][ T5946] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1802.239923][ T981] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1802.250345][ T981] usb 9-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1802.263434][ T981] usb 9-1: config 2 interface 0 has no altsetting 0 [ 1802.272153][ T981] usb 9-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 1802.281509][ T981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.289495][ T981] usb 9-1: Product: syz [ 1802.293709][ T981] usb 9-1: Manufacturer: syz [ 1802.298305][ T981] usb 9-1: SerialNumber: syz [ 1802.389464][ T5946] usb 4-1: config 0 has an invalid interface number: 253 but max is 0 [ 1802.397699][ T5946] usb 4-1: config 0 has no interface number 0 [ 1802.403916][ T5946] usb 4-1: config 0 interface 253 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1802.416007][ T5946] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0018, bcdDevice=e4.3c [ 1802.425153][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.433199][ T5946] usb 4-1: Product: syz [ 1802.437379][ T5946] usb 4-1: Manufacturer: syz [ 1802.442093][ T5946] usb 4-1: SerialNumber: syz [ 1802.449837][ T5946] usb 4-1: config 0 descriptor?? [ 1802.456969][ T5946] kvaser_usb 4-1:0.253: error -ENODEV: Cannot get usb endpoint(s) [ 1802.594936][T17741] /dev/rnullb0: Can't open blockdev [ 1802.704474][ T5946] usb 4-1: USB disconnect, device number 80 [ 1802.739609][ T981] ims_pcu 9-1:2.0: Missing CDC union descriptor [ 1802.766303][ T981] ims_pcu 9-1:2.0: probe with driver ims_pcu failed with error -22 [ 1802.809504][ T981] usb 9-1: USB disconnect, device number 24 [ 1802.998129][T17750] /dev/rnullb0: Can't open blockdev [ 1803.493659][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1803.548463][T17758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13095'. [ 1803.639075][T17761] /dev/rnullb0: Can't open blockdev [ 1803.678973][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1327.tmp-b7:3' failed: Read-only file system [ 1804.304496][T17769] binder: BINDER_SET_CONTEXT_MGR already set [ 1804.312177][T17769] binder: 17768:17769 ioctl 4018620d 200000000100 returned -16 [ 1804.320237][T17769] binder: BINDER_SET_CONTEXT_MGR already set [ 1804.341849][T17769] binder: 17768:17769 ioctl 4018620d 200000000100 returned -16 [ 1804.517523][T17778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13101'. [ 1804.654559][T17783] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.13102'. [ 1804.682693][T17783] /dev/rnullb0: Can't open blockdev [ 1805.581933][T17791] devtmpfs: Bad value for 'huge' [ 1805.598393][T17790] loop3: detected capacity change from 0 to 1 [ 1805.613693][T17790] Dev loop3: unable to read RDB block 1 [ 1805.619454][T17790] loop3: unable to read partition table [ 1805.634781][T17790] loop3: partition table beyond EOD, truncated [ 1805.657588][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1328.tmp-b7:3' failed: Read-only file system [ 1805.669664][T17790] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1805.714305][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1328.tmp-b7:3' failed: Read-only file system [ 1805.752240][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1328.tmp-b7:3' failed: Read-only file system [ 1806.718058][T17797] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1806.726124][T17797] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1806.796707][T17807] syz.8.13110: attempt to access beyond end of device [ 1806.796707][T17807] nbd8: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1806.823465][T17807] syz.8.13110: attempt to access beyond end of device [ 1806.823465][T17807] nbd8: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1806.961130][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1329.tmp-b7:3' failed: Read-only file system [ 1806.988273][T17813] /dev/rnullb0: Can't open blockdev [ 1806.994661][ T5890] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1807.011890][T17818] /dev/rnullb0: Can't open blockdev [ 1807.085964][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1329.tmp-b7:3' failed: Read-only file system [ 1807.095837][T17821] kAFS: No cell specified [ 1807.121720][T17822] loop3: detected capacity change from 0 to 1 [ 1807.132991][T13450] Dev loop3: unable to read RDB block 1 [ 1807.139135][T13450] loop3: unable to read partition table [ 1807.145713][T13450] loop3: partition table beyond EOD, truncated [ 1807.152850][T17822] Dev loop3: unable to read RDB block 1 [ 1807.173749][T17822] loop3: unable to read partition table [ 1807.173909][ T5890] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1807.179919][T17822] loop3: partition table beyond EOD, truncated [ 1807.196493][T17822] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1807.206585][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.210156][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1330.tmp-b7:3' failed: Read-only file system [ 1807.237759][ T5890] usb 6-1: config 0 descriptor?? [ 1807.248720][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1330.tmp-b7:3' failed: Read-only file system [ 1807.260715][ T5890] cp210x 6-1:0.0: cp210x converter detected [ 1807.299950][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1330.tmp-b7:3' failed: Read-only file system [ 1807.373986][T17827] tmpfs: Bad value for 'mpol' [ 1807.504763][ T5890] usb 6-1: cp210x converter now attached to ttyUSB0 [ 1807.584730][T17834] /dev/rnullb0: Can't open blockdev [ 1807.699818][ T5946] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1807.861774][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1807.872877][ T5946] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1807.882710][ T5946] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1807.891861][ T5946] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1807.902127][ T5946] usb 4-1: config 0 descriptor?? [ 1808.140702][ T5946] usbhid 4-1:0.0: can't add hid device: -32 [ 1808.146937][ T5946] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 1808.551951][ T5890] usb 4-1: USB disconnect, device number 81 [ 1808.626118][T17845] /dev/rnullb0: Can't open blockdev [ 1808.681405][T17849] /dev/rnullb0: Can't open blockdev [ 1808.742518][T17851] loop3: detected capacity change from 0 to 1 [ 1808.753288][T13450] Dev loop3: unable to read RDB block 1 [ 1808.760289][T13450] loop3: unable to read partition table [ 1808.766099][T13450] loop3: partition table beyond EOD, truncated [ 1808.776024][T17851] Dev loop3: unable to read RDB block 1 [ 1808.782462][T17851] loop3: unable to read partition table [ 1808.788270][T17851] loop3: partition table beyond EOD, truncated [ 1808.800576][T17851] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1808.881698][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1333.tmp-b7:3' failed: Read-only file system [ 1808.896963][T28913] Bluetooth: hci4: command 0x0405 tx timeout [ 1808.897531][ T725] Bluetooth: hci5: command 0x0c1a tx timeout [ 1809.058928][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1333.tmp-b7:3' failed: Read-only file system [ 1809.131014][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1333.tmp-b7:3' failed: Read-only file system [ 1809.201720][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1333.tmp-b7:3' failed: Read-only file system [ 1809.250625][T17864] /dev/rnullb0: Can't open blockdev [ 1809.275537][T17864] /dev/rnullb0: Can't open blockdev [ 1809.332866][T17866] /dev/rnullb0: Can't open blockdev [ 1809.343673][T17866] /dev/rnullb0: Can't open blockdev [ 1809.413533][T17871] /dev/rnullb0: Can't open blockdev [ 1809.552737][ T981] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1809.576724][T17878] loop3: detected capacity change from 0 to 1 [ 1809.586038][T17876] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1809.592870][T13450] Dev loop3: unable to read RDB block 1 [ 1809.594703][T17876] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1809.602540][T13450] loop3: unable to read partition table [ 1809.617017][T13450] loop3: partition table beyond EOD, truncated [ 1809.627909][T17878] Dev loop3: unable to read RDB block 1 [ 1809.648096][T17878] loop3: unable to read partition table [ 1809.653988][T17878] loop3: partition table beyond EOD, truncated [ 1809.667297][T17878] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1809.674386][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1334.tmp-b7:3' failed: Read-only file system [ 1809.707528][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1334.tmp-b7:3' failed: Read-only file system [ 1809.736665][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1334.tmp-b7:3' failed: Read-only file system [ 1809.752508][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 1809.765694][ T981] usb 4-1: config 73 has too many interfaces: 109, using maximum allowed: 32 [ 1809.794195][ T981] usb 4-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config [ 1809.816324][ T981] usb 4-1: config 73 has 1 interface, different from the descriptor's value: 109 [ 1809.825941][ T981] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 1809.856740][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.976034][T29506] usb 6-1: USB disconnect, device number 66 [ 1809.993277][T29506] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1810.002810][T29506] cp210x 6-1:0.0: device disconnected [ 1810.101346][T17863] 9p filesystem being mounted at /206/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1810.140279][ T981] usb 4-1: string descriptor 0 read error: -71 [ 1810.149721][ T30] audit: type=1800 audit(6291405056.719:9288): pid=17863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.13129" name="/" dev="9p" ino=2 res=0 errno=0 [ 1810.160734][ T981] uvcvideo 4-1:73.0: probe with driver uvcvideo failed with error -22 [ 1810.195965][T17888] /dev/rnullb0: Can't open blockdev [ 1810.218703][ T981] usb 4-1: USB disconnect, device number 82 [ 1810.363626][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1335.tmp-b7:3' failed: Read-only file system [ 1810.515070][T17894] kvm: pic: non byte write [ 1810.555131][T17898] /dev/rnullb0: Can't open blockdev [ 1810.670194][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1335.tmp-b7:3' failed: Read-only file system [ 1810.731213][T17903] tipc: Started in network mode [ 1810.736263][T17903] tipc: Node identity 000000000000003a0000000000000001, cluster identity 4711 [ 1810.745265][T17903] tipc: Enabling of bearer rejected, failed to enable media [ 1810.852280][T17900] mkiss: ax0: crc mode is auto. [ 1810.883683][T17909] loop3: detected capacity change from 0 to 1 [ 1810.900503][T17909] Dev loop3: unable to read RDB block 1 [ 1810.906299][T17909] loop3: unable to read partition table [ 1810.919896][T17909] loop3: partition table beyond EOD, truncated [ 1810.938317][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1336.tmp-b7:3' failed: Read-only file system [ 1810.950565][T17909] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1811.109634][ T981] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1811.283461][ T981] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 1811.291714][ T981] usb 4-1: config 0 has no interface number 0 [ 1811.303955][ T981] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72 [ 1811.313445][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1811.321447][ T981] usb 4-1: Product: syz [ 1811.334696][ T981] usb 4-1: Manufacturer: syz [ 1811.344925][ T981] usb 4-1: SerialNumber: syz [ 1811.363115][ T981] usb 4-1: config 0 descriptor?? [ 1811.396399][T17919] fuse: Bad value for 'fd' [ 1811.477797][T17923] /dev/rnullb0: Can't open blockdev [ 1811.633259][ T981] usb 4-1: selecting invalid altsetting 1 [ 1811.642599][ T981] comedi comedi5: could not switch to alternate setting 1 [ 1811.662683][ T981] usbduxfast 4-1:0.4: driver 'usbduxfast' failed to auto-configure device. [ 1811.684968][ T981] usb 4-1: USB disconnect, device number 83 [ 1811.794372][T28913] Bluetooth: hci5: command 0x0c1a tx timeout [ 1811.801388][ T725] Bluetooth: hci4: command 0x0405 tx timeout [ 1812.096437][T17936] loop3: detected capacity change from 0 to 1 [ 1812.103363][T17936] Dev loop3: unable to read RDB block 1 [ 1812.110007][T17936] loop3: unable to read partition table [ 1812.115977][T17936] loop3: partition table beyond EOD, truncated [ 1812.122153][T17936] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1812.247516][T17938] 9p filesystem being mounted at /187/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1812.347124][T17943] /dev/rnullb0: Can't open blockdev [ 1812.531351][T15977] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1812.555837][T17953] /dev/rnullb0: Can't open blockdev [ 1812.684619][T17949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1812.693493][T15977] usb 9-1: Using ep0 maxpacket: 8 [ 1812.699932][T17949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1812.708182][T15977] usb 9-1: config 0 has an invalid interface number: 52 but max is 0 [ 1812.718628][T15977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.731996][T15977] usb 9-1: config 0 has no interface number 0 [ 1812.739451][T15977] usb 9-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1812.751863][T15977] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1812.762927][T14888] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1812.770587][T15977] usb 9-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1812.781984][T15977] usb 9-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1812.795153][T15977] usb 9-1: config 0 interface 52 has no altsetting 0 [ 1812.802487][T15977] usb 9-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 1812.811598][T15977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.823278][T15977] usb 9-1: config 0 descriptor?? [ 1812.863053][ T5890] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1813.033808][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 1813.050101][T15977] input: USB Synaptics Device 06cb:0007 (Stick) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.52/input/input174 [ 1813.273122][T17938] ceph: Path missing in source [ 1813.287592][T15977] usb 9-1: USB disconnect, device number 25 [ 1813.358269][T17961] binder_alloc: binder_alloc_mmap_handler: 17959 200000ffc000-200001000000 already mapped failed -16 [ 1813.381832][T17961] binder: BINDER_SET_CONTEXT_MGR already set [ 1813.392626][T17961] binder: 17959:17961 ioctl 4018620d 200000000040 returned -16 [ 1813.400648][T17960] binder: 17959:17960 ioctl c0306201 200000000240 returned -11 [ 1813.447531][T17961] /dev/rnullb0: Can't open blockdev [ 1813.457664][T17964] /dev/rnullb0: Can't open blockdev [ 1814.119660][ T5890] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1814.131710][ T5890] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1814.139959][ T5890] usb 6-1: can't read configurations, error -71 [ 1814.309811][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1339.tmp-b7:3' failed: Read-only file system [ 1814.414201][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1339.tmp-b7:3' failed: Read-only file system [ 1814.438236][T17986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13167'. [ 1814.455666][T17985] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13167'. [ 1814.544900][T17989] /dev/rnullb0: Can't open blockdev [ 1814.568298][T13450] udevd[13450]: symlink '../../loop6' '/dev/disk/by-diskseq/1303.tmp-b7:6' failed: Read-only file system [ 1814.733461][T22955] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 1814.919065][T22955] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1814.931770][T22955] usb 4-1: not running at top speed; connect to a high speed hub [ 1814.942998][T22955] usb 4-1: config 3 has an invalid interface number: 93 but max is 1 [ 1814.947081][ T30] audit: type=1326 audit(6291405061.209:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17999 comm="syz.5.13172" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb12a18e929 code=0x0 [ 1814.957815][T22955] usb 4-1: config 3 has an invalid interface number: 29 but max is 1 [ 1814.989578][T22955] usb 4-1: config 3 has no interface number 0 [ 1814.995743][T22955] usb 4-1: config 3 has no interface number 1 [ 1815.007025][T22955] usb 4-1: config 3 interface 29 has no altsetting 0 [ 1815.018948][T22955] usb 4-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=5c.5c [ 1815.033871][T22955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.042814][T22955] usb 4-1: Product: syz [ 1815.052871][T22955] usb 4-1: Manufacturer: syz [ 1815.059491][T22955] usb 4-1: SerialNumber: syz [ 1815.171651][T29506] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1815.287132][T17985] /dev/rnullb0: Can't open blockdev [ 1815.310626][T29506] usb 9-1: device descriptor read/64, error -71 [ 1815.330606][T22955] usb 4-1: USB disconnect, device number 85 [ 1815.567041][T29506] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1815.706021][T29506] usb 9-1: device descriptor read/64, error -71 [ 1815.823792][T29506] usb usb9-port1: attempt power cycle [ 1815.876343][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1339.tmp-b7:3' failed: Read-only file system [ 1815.966483][T18011] loop3: detected capacity change from 0 to 1 [ 1815.977808][T18011] Dev loop3: unable to read RDB block 1 [ 1815.983404][T18011] loop3: unable to read partition table [ 1815.990457][T18011] loop3: partition table beyond EOD, truncated [ 1816.005314][T18011] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1816.016798][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1340.tmp-b7:3' failed: Read-only file system [ 1816.042435][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1340.tmp-b7:3' failed: Read-only file system [ 1816.070727][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1340.tmp-b7:3' failed: Read-only file system [ 1816.097800][T18013] 8021q: VLANs not supported on sit0 [ 1816.107273][T18013] /dev/rnullb0: Can't open blockdev [ 1816.149651][ T5946] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1816.187029][T29506] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1816.205930][T18018] nfs: Unknown parameter ' ' [ 1816.212287][T29506] usb 9-1: device descriptor read/8, error -71 [ 1816.219465][T18018] /dev/rnullb0: Can't open blockdev [ 1816.269600][T18020] /dev/rnullb0: Can't open blockdev [ 1816.276152][T18020] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13180'. [ 1816.315524][ T5946] usb 4-1: Using ep0 maxpacket: 16 [ 1816.327335][ T5946] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1816.348556][ T5946] usb 4-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3 [ 1816.356566][ T5946] usb 4-1: Product: syz [ 1816.362816][ T5946] usb 4-1: Manufacturer: syz [ 1816.367429][ T5946] usb 4-1: SerialNumber: syz [ 1816.390326][ T5946] usb 4-1: config 0 descriptor?? [ 1816.397671][ T5946] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 1816.489802][T29506] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1816.519027][T29506] usb 9-1: device descriptor read/8, error -71 [ 1816.536627][T18031] /dev/rnullb0: Can't open blockdev [ 1816.592217][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13183'. [ 1816.602710][T18033] /dev/rnullb0: Can't open blockdev [ 1816.616804][T18007] /dev/rnullb0: Can't open blockdev [ 1816.623546][T22955] usb 4-1: USB disconnect, device number 86 [ 1816.638178][T29506] usb usb9-port1: unable to enumerate USB device [ 1816.718560][T18037] /dev/rnullb0: Can't open blockdev [ 1816.768016][T18039] loop3: detected capacity change from 0 to 1 [ 1816.778206][T18039] Dev loop3: unable to read RDB block 1 [ 1816.783771][T18039] loop3: unable to read partition table [ 1816.789926][T18039] loop3: partition table beyond EOD, truncated [ 1816.797985][T18039] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1816.804371][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1342.tmp-b7:3' failed: Read-only file system [ 1816.837280][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1342.tmp-b7:3' failed: Read-only file system [ 1816.860031][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1342.tmp-b7:3' failed: Read-only file system [ 1817.170491][ T5946] usb 6-1: new low-speed USB device number 69 using dummy_hcd [ 1817.354922][ T5946] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1817.372952][ T5946] usb 6-1: config 0 has no interface number 0 [ 1817.381199][ T5946] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1817.398682][ T5946] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1817.412031][ T5946] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1817.422267][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.461967][ T5946] usb 6-1: config 0 descriptor?? [ 1817.480078][T18043] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1817.513996][ T5946] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1817.748220][ T5946] usb 6-1: USB disconnect, device number 69 [ 1817.898810][T18064] /dev/rnullb0: Can't open blockdev [ 1818.164564][ T981] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 1818.194606][T18068] loop3: detected capacity change from 0 to 1 [ 1818.202895][T13450] Dev loop3: unable to read RDB block 1 [ 1818.208861][T13450] loop3: unable to read partition table [ 1818.214700][T13450] loop3: partition table beyond EOD, truncated [ 1818.227728][T18068] Dev loop3: unable to read RDB block 1 [ 1818.233450][T18068] loop3: unable to read partition table [ 1818.240406][T18068] loop3: partition table beyond EOD, truncated [ 1818.246619][T18068] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1818.257122][T18070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13197'. [ 1818.267924][T18070] /dev/rnullb0: Can't open blockdev [ 1818.320669][T18073] /dev/rnullb0: Can't open blockdev [ 1818.347681][ T981] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 1818.367506][ T981] usb 4-1: config 0 has no interface number 0 [ 1818.375561][ T981] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 10 [ 1818.396726][ T981] usb 4-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1818.409758][ T981] usb 4-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1818.423227][ T981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.432678][ T981] usb 4-1: Product: syz [ 1818.437462][ T981] usb 4-1: Manufacturer: syz [ 1818.442090][ T981] usb 4-1: SerialNumber: syz [ 1818.449486][ T981] usb 4-1: config 0 descriptor?? [ 1818.459145][ T981] cypress_m8 4-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1818.511209][T18082] syzkaller1: entered promiscuous mode [ 1818.516747][T18082] syzkaller1: entered allmulticast mode [ 1818.652701][T18090] /dev/rnullb0: Can't open blockdev [ 1818.691011][ T981] usb 4-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1818.709084][T18093] /dev/rnullb0: Can't open blockdev [ 1818.778410][ T981] usb 4-1: USB disconnect, device number 87 [ 1818.817125][ T981] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1818.853204][ T981] cypress_m8 4-1:0.35: device disconnected [ 1818.920568][T18098] /dev/rnullb0: Can't open blockdev [ 1818.934538][T18101] /dev/rnullb0: Can't open blockdev [ 1818.936642][T18102] loop3: detected capacity change from 0 to 1 [ 1818.947533][T13450] Dev loop3: unable to read RDB block 1 [ 1818.953122][T13450] loop3: unable to read partition table [ 1818.966627][T13450] loop3: partition table beyond EOD, truncated [ 1818.989709][T18102] Dev loop3: unable to read RDB block 1 [ 1818.995305][T18102] loop3: unable to read partition table [ 1819.002401][T18102] loop3: partition table beyond EOD, truncated [ 1819.008636][T18102] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1819.120600][T18105] /dev/rnullb0: Can't open blockdev [ 1819.144816][T18110] /dev/rnullb0: Can't open blockdev [ 1819.552995][T18138] loop3: detected capacity change from 0 to 1 [ 1819.560969][T18138] Dev loop3: unable to read RDB block 1 [ 1819.575685][T18138] loop3: unable to read partition table [ 1819.588077][T18138] loop3: partition table beyond EOD, truncated [ 1819.600463][T18138] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1819.632733][ T5223] Dev loop3: unable to read RDB block 1 [ 1819.638738][ T5223] loop3: unable to read partition table [ 1819.655703][ T5223] loop3: partition table beyond EOD, truncated [ 1819.716679][T18144] loop3: detected capacity change from 1 to 0 [ 1819.732902][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1348.tmp-b7:3' failed: Read-only file system [ 1819.766628][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1348.tmp-b7:3' failed: Read-only file system [ 1819.845799][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1348.tmp-b7:3' failed: Read-only file system [ 1819.877698][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1348.tmp-b7:3' failed: Read-only file system [ 1819.910418][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1348.tmp-b7:3' failed: Read-only file system [ 1819.923056][T18156] binder_alloc: binder_alloc_mmap_handler: 18151 200000ffd000-200001000000 already mapped failed -16 [ 1819.937986][T18154] binder_alloc: 18151: binder_alloc_buf, no vma [ 1819.947027][T18152] binder_alloc: 18151: binder_alloc_buf, no vma [ 1819.947779][T18154] /dev/rnullb0: Can't open blockdev [ 1819.992452][T14888] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1820.009695][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1349.tmp-b7:3' failed: Read-only file system [ 1820.038809][T18158] /dev/rnullb0: Can't open blockdev [ 1820.083380][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1349.tmp-b7:3' failed: Read-only file system [ 1820.151187][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1349.tmp-b7:3' failed: Read-only file system [ 1820.185108][ T981] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1820.197097][T14888] usb 9-1: config 0 has an invalid descriptor of length 205, skipping remainder of the config [ 1820.207860][T14888] usb 9-1: config 0 has no interfaces? [ 1820.219980][T14888] usb 9-1: New USB device found, idVendor=0f11, idProduct=0101, bcdDevice=61.d7 [ 1820.232783][T14888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1820.242933][T14888] usb 9-1: Product: syz [ 1820.247205][T14888] usb 9-1: Manufacturer: syz [ 1820.252697][T14888] usb 9-1: SerialNumber: syz [ 1820.267365][T14888] usb 9-1: config 0 descriptor?? [ 1820.340521][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1349.tmp-b7:3' failed: Read-only file system [ 1820.375684][T18167] /dev/rnullb0: Can't open blockdev [ 1820.377639][ T981] usb 6-1: Using ep0 maxpacket: 16 [ 1820.387721][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1820.399439][ T981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1820.409850][ T981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1820.431759][ T981] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1820.448316][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1349.tmp-b7:3' failed: Read-only file system [ 1820.459844][ T981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1820.463311][ T981] usb 6-1: config 0 descriptor?? [ 1820.498478][T18146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.507638][T18146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.522316][ T5946] usb 9-1: USB disconnect, device number 30 [ 1820.779233][T18172] loop3: detected capacity change from 0 to 1 [ 1820.793322][T13450] Dev loop3: unable to read RDB block 1 [ 1820.802290][T13450] loop3: unable to read partition table [ 1820.809547][T13450] loop3: partition table beyond EOD, truncated [ 1820.821724][T18172] Dev loop3: unable to read RDB block 1 [ 1820.827494][T18172] loop3: unable to read partition table [ 1820.833371][T18172] loop3: partition table beyond EOD, truncated [ 1820.841054][T18172] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1820.879478][T18175] netlink: 'syz.0.13233': attribute type 4 has an invalid length. [ 1820.933845][T18175] /dev/rnullb0: Can't open blockdev [ 1821.125547][T18183] openvswitch: netlink: VXLAN extension message has 16 unknown bytes. [ 1821.135051][T18155] netlink: 'syz.5.13226': attribute type 2 has an invalid length. [ 1821.143842][T18155] netlink: 244 bytes leftover after parsing attributes in process `syz.5.13226'. [ 1821.169168][T18183] /dev/rnullb0: Can't open blockdev [ 1821.315599][ T981] usbhid 6-1:0.0: can't add hid device: -71 [ 1821.328737][ T981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1821.377097][ T981] usb 6-1: USB disconnect, device number 70 [ 1821.617375][T22955] usb 9-1: new low-speed USB device number 31 using dummy_hcd [ 1821.696122][T18200] /dev/rnullb0: Can't open blockdev [ 1821.778618][T18202] loop3: detected capacity change from 0 to 1 [ 1821.793237][T18202] Dev loop3: unable to read RDB block 1 [ 1821.810822][T18202] loop3: unable to read partition table [ 1821.817245][T18202] loop3: partition table beyond EOD, truncated [ 1821.824911][T22955] usb 9-1: config 153 has an invalid interface number: 165 but max is 3 [ 1821.833962][T22955] usb 9-1: config 153 has an invalid interface number: 117 but max is 3 [ 1821.846500][T18202] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1821.863117][T22955] usb 9-1: config 153 has an invalid interface number: 58 but max is 3 [ 1821.906840][T22955] usb 9-1: config 153 has no interface number 0 [ 1821.927127][T22955] usb 9-1: config 153 has no interface number 2 [ 1821.933394][T22955] usb 9-1: config 153 has no interface number 3 [ 1821.969931][T22955] usb 9-1: config 153 interface 165 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 8 [ 1821.982335][T22955] usb 9-1: config 153 interface 117 altsetting 6 endpoint 0x8 has invalid maxpacket 512, setting to 8 [ 1822.029688][T22955] usb 9-1: config 153 interface 117 altsetting 6 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 1822.076785][T22955] usb 9-1: config 153 interface 1 altsetting 127 has an endpoint descriptor with address 0x75, changing to 0x5 [ 1822.076959][T18212] binder: BINDER_SET_CONTEXT_MGR already set [ 1822.095514][T22955] usb 9-1: config 153 interface 1 altsetting 127 endpoint 0x5 has an invalid bInterval 0, changing to 4 [ 1822.151341][T22955] usb 9-1: config 153 interface 1 altsetting 127 endpoint 0x5 has invalid maxpacket 1023, setting to 0 [ 1822.166199][T22955] usb 9-1: config 153 interface 1 altsetting 127 endpoint 0x4 has invalid maxpacket 1023, setting to 8 [ 1822.175585][T18217] qnx4: no qnx4 filesystem (no root dir). [ 1822.186260][T22955] usb 9-1: config 153 interface 58 altsetting 0 has a duplicate endpoint with address 0x7, skipping [ 1822.200352][T18212] binder: 18211:18212 ioctl 4018620d 200000000100 returned -16 [ 1822.208015][T22955] usb 9-1: config 153 interface 165 has no altsetting 0 [ 1822.214965][T22955] usb 9-1: config 153 interface 117 has no altsetting 0 [ 1822.239425][T22955] usb 9-1: config 153 interface 1 has no altsetting 0 [ 1822.329493][ T30] audit: type=1326 audit(6291405068.113:9290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18221 comm="syz.5.13248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb12a18e929 code=0x0 [ 1822.508511][T18231] syz.0.13249: attempt to access beyond end of device [ 1822.508511][T18231] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1822.553475][T18231] hpfs: hpfs_map_sector(): read error [ 1822.898471][T18237] /dev/rnullb0: Can't open blockdev [ 1822.953587][T14888] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1823.018263][T18239] loop3: detected capacity change from 0 to 1 [ 1823.028279][T18239] Dev loop3: unable to read RDB block 1 [ 1823.040520][T18239] loop3: unable to read partition table [ 1823.046321][T18239] loop3: partition table beyond EOD, truncated [ 1823.078794][T18239] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1823.103105][T14888] usb 4-1: device descriptor read/64, error -71 [ 1823.370200][T14888] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1823.395525][T18245] /dev/rnullb0: Can't open blockdev [ 1823.509417][T14888] usb 4-1: device descriptor read/64, error -71 [ 1823.627110][T14888] usb usb4-port1: attempt power cycle [ 1823.990248][T14888] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 1824.012212][T14888] usb 4-1: device descriptor read/8, error -71 [ 1824.268094][T14888] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1824.290703][T14888] usb 4-1: device descriptor read/8, error -71 [ 1824.408350][T14888] usb usb4-port1: unable to enumerate USB device [ 1824.598296][T22955] usb 9-1: New USB device found, idVendor=0711, idProduct=0179, bcdDevice=50.cf [ 1824.609014][T22955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.626899][T22955] usb 9-1: can't set config #153, error -71 [ 1824.651721][T22955] usb 9-1: USB disconnect, device number 31 [ 1824.720384][T18263] /dev/rnullb0: Can't open blockdev [ 1824.727721][T14888] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1824.790179][T18266] /dev/rnullb0: Can't open blockdev [ 1824.909617][T14888] usb 6-1: Using ep0 maxpacket: 16 [ 1824.925373][T14888] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1824.935600][T14888] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1824.951623][T14888] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1824.961577][T14888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1824.970515][T14888] usb 6-1: Product: syz [ 1824.975717][T14888] usb 6-1: Manufacturer: syz [ 1824.980348][T14888] usb 6-1: SerialNumber: syz [ 1825.283547][T22955] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1825.418394][T14888] usb 6-1: 0:2 : does not exist [ 1825.454646][T22955] usb 9-1: Using ep0 maxpacket: 16 [ 1825.461231][T22955] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1825.480303][T22955] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1825.489512][T22955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1825.497804][T22955] usb 9-1: Product: syz [ 1825.502134][T22955] usb 9-1: Manufacturer: syz [ 1825.506738][T22955] usb 9-1: SerialNumber: syz [ 1825.514055][T22955] usb 9-1: config 0 descriptor?? [ 1825.523075][T22955] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1825.532429][T22955] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 1825.684244][T13448] udevd[13448]: symlink '../../loop3' '/dev/disk/by-diskseq/1355.tmp-b7:3' failed: Read-only file system [ 1825.773735][T13448] udevd[13448]: symlink '../../loop3' '/dev/disk/by-diskseq/1355.tmp-b7:3' failed: Read-only file system [ 1825.822922][T18281] /dev/rnullb0: Can't open blockdev [ 1825.823388][T13448] udevd[13448]: symlink '../../loop3' '/dev/disk/by-diskseq/1355.tmp-b7:3' failed: Read-only file system [ 1825.928991][T13448] udevd[13448]: symlink '../../loop3' '/dev/disk/by-diskseq/1355.tmp-b7:3' failed: Read-only file system [ 1825.959949][T22955] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1825.988299][T18283] loop3: detected capacity change from 0 to 1 [ 1825.995515][T18283] Dev loop3: unable to read RDB block 1 [ 1826.002011][T18283] loop3: unable to read partition table [ 1826.007858][T18283] loop3: partition table beyond EOD, truncated [ 1826.018386][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1356.tmp-b7:3' failed: Read-only file system [ 1826.021613][T18283] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1826.057869][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1356.tmp-b7:3' failed: Read-only file system [ 1826.088286][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1356.tmp-b7:3' failed: Read-only file system [ 1826.099632][T14888] usb 6-1: USB disconnect, device number 71 [ 1826.228936][T18273] /dev/rnullb0: Can't open blockdev [ 1826.246983][T22955] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1826.255965][T22955] em28xx 9-1:0.0: board has no eeprom [ 1826.281564][T13448] udevd[13448]: symlink '../../loop3' '/dev/disk/by-diskseq/1357.tmp-b7:3' failed: Read-only file system [ 1826.363334][T22955] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1826.373855][T22955] em28xx 9-1:0.0: dvb set to bulk mode. [ 1826.381880][T14888] em28xx 9-1:0.0: Binding DVB extension [ 1826.402335][T22955] usb 9-1: USB disconnect, device number 32 [ 1826.432402][T22955] em28xx 9-1:0.0: Disconnecting em28xx [ 1826.473492][T14888] em28xx 9-1:0.0: Registering input extension [ 1826.479858][T22955] em28xx 9-1:0.0: Closing input extension [ 1826.496047][T22955] em28xx 9-1:0.0: Freeing device [ 1827.027801][T18302] /dev/rnullb0: Can't open blockdev [ 1827.583045][T18306] loop3: detected capacity change from 0 to 1 [ 1827.598635][ T5223] Dev loop3: unable to read RDB block 1 [ 1827.609255][ T5223] loop3: unable to read partition table [ 1827.636220][ T5223] loop3: partition table beyond EOD, truncated [ 1827.662556][T18306] Dev loop3: unable to read RDB block 1 [ 1827.673754][T18306] loop3: unable to read partition table [ 1827.679743][T18306] loop3: partition table beyond EOD, truncated [ 1827.686090][T18306] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1827.712515][ T5223] Dev loop3: unable to read RDB block 1 [ 1827.718111][ T5223] loop3: unable to read partition table [ 1827.755977][ T5223] loop3: partition table beyond EOD, truncated [ 1827.819933][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1358.tmp-b7:3' failed: Read-only file system [ 1827.867324][T18314] /dev/rnullb0: Can't open blockdev [ 1827.906137][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1358.tmp-b7:3' failed: Read-only file system [ 1828.399527][T18338] loop3: detected capacity change from 0 to 1 [ 1828.428018][T18338] Dev loop3: unable to read RDB block 1 [ 1828.453006][T18338] loop3: unable to read partition table [ 1828.459340][T18338] loop3: partition table beyond EOD, truncated [ 1828.476456][T18338] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1828.542035][T18340] smb3: Unknown parameter 'nocase1' [ 1828.808011][T18354] /dev/rnullb0: Can't open blockdev [ 1828.985634][T18360] /dev/rnullb0: Can't open blockdev [ 1829.016182][T18364] /dev/rnullb0: Can't open blockdev [ 1829.116935][T18368] /dev/rnullb0: Can't open blockdev [ 1829.388321][T15977] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1829.560913][T15977] usb 9-1: config 0 has an invalid interface number: 117 but max is 0 [ 1829.569266][T15977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1829.582869][T15977] usb 9-1: config 0 has no interface number 0 [ 1829.588968][T15977] usb 9-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1829.599459][T15977] usb 9-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1829.615441][T15977] usb 9-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1829.626109][T15977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.634155][T15977] usb 9-1: Product: syz [ 1829.638455][T15977] usb 9-1: Manufacturer: syz [ 1829.643115][T15977] usb 9-1: SerialNumber: syz [ 1829.650975][T15977] usb 9-1: config 0 descriptor?? [ 1829.866205][T18389] /dev/rnullb0: Can't open blockdev [ 1830.319327][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.329507][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.339131][T18367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.348492][T18367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1830.357756][T18367] /dev/rnullb0: Can't open blockdev [ 1830.367837][T22955] usb 9-1: USB disconnect, device number 33 [ 1830.477117][ T725] Bluetooth: hci5: ACL packet for unknown connection handle 201 [ 1830.874047][T15977] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 1831.015072][T15977] usb 6-1: device descriptor read/64, error -71 [ 1831.020846][T18409] netlink: 228 bytes leftover after parsing attributes in process `syz.8.13311'. [ 1831.175172][T22955] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1831.269582][T15977] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1831.325495][T22955] usb 4-1: device descriptor read/64, error -71 [ 1831.408525][T15977] usb 6-1: device descriptor read/64, error -71 [ 1831.423965][T14888] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1831.526418][T15977] usb usb6-port1: attempt power cycle [ 1831.579793][T22955] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1831.590571][T14888] usb 9-1: Using ep0 maxpacket: 16 [ 1831.597041][T14888] usb 9-1: config 1 has an invalid descriptor of length 75, skipping remainder of the config [ 1831.608046][T14888] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1831.619590][T14888] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1831.628740][T14888] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1831.636945][T14888] usb 9-1: Product: syz [ 1831.641121][T14888] usb 9-1: Manufacturer: syz [ 1831.645788][T14888] usb 9-1: SerialNumber: syz [ 1831.730356][T22955] usb 4-1: device descriptor read/64, error -71 [ 1831.847127][T22955] usb usb4-port1: attempt power cycle [ 1831.889661][T15977] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1831.932507][T15977] usb 6-1: device descriptor read/8, error -71 [ 1832.048529][T14888] usb 9-1: 0:2 : does not exist [ 1832.059844][T14888] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1832.079066][T14888] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1832.091111][T14888] usb 9-1: 5:0: cannot get min/max values for control 4 (id 5) [ 1832.102631][T14888] usb 9-1: 5:0: cannot get min/max values for control 8 (id 5) [ 1832.121595][T14888] usb 9-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1832.133208][T14888] usb 9-1: USB disconnect, device number 34 [ 1832.153720][T13450] udevd[13450]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1832.203149][T15977] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1832.210944][T22955] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1832.232353][T15977] usb 6-1: device descriptor read/8, error -71 [ 1832.238664][T22955] usb 4-1: device descriptor read/8, error -71 [ 1832.349353][T15977] usb usb6-port1: unable to enumerate USB device [ 1832.498944][T22955] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1832.521579][T22955] usb 4-1: device descriptor read/8, error -71 [ 1832.642787][T22955] usb usb4-port1: unable to enumerate USB device [ 1832.729751][T18416] binder: 18415:18416 ioctl c018620c 200000000040 returned -1 [ 1833.174319][T18424] loop3: detected capacity change from 0 to 1 [ 1833.182060][T18424] Dev loop3: unable to read RDB block 1 [ 1833.188183][T18424] loop3: unable to read partition table [ 1833.194589][T18424] loop3: partition table beyond EOD, truncated [ 1833.204470][T18424] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1833.215587][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1362.tmp-b7:3' failed: Read-only file system [ 1833.238855][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1362.tmp-b7:3' failed: Read-only file system [ 1833.261827][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1362.tmp-b7:3' failed: Read-only file system [ 1833.395905][T18435] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1833.405312][T18435] /dev/rnullb0: Can't open blockdev [ 1833.491507][T18439] /dev/rnullb0: Can't open blockdev [ 1833.549928][T18443] /dev/rnullb0: Can't open blockdev [ 1833.751149][T18445] /dev/rnullb0: Can't open blockdev [ 1833.907605][T18449] loop3: detected capacity change from 0 to 1 [ 1833.921721][T18449] Dev loop3: unable to read RDB block 1 [ 1833.932112][T18449] loop3: unable to read partition table [ 1833.938013][T18449] loop3: partition table beyond EOD, truncated [ 1833.945580][T18449] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1833.965468][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1364.tmp-b7:3' failed: Read-only file system [ 1834.007801][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1364.tmp-b7:3' failed: Read-only file system [ 1834.041847][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1364.tmp-b7:3' failed: Read-only file system [ 1834.196295][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1365.tmp-b7:3' failed: Read-only file system [ 1834.295261][T18458] Malformed UNC in devname [ 1834.295261][T18458] [ 1834.302724][T18458] CIFS: VFS: Malformed UNC in devname [ 1834.321815][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1365.tmp-b7:3' failed: Read-only file system [ 1834.336085][T18458] Malformed UNC in devname [ 1834.336085][T18458] [ 1834.349330][T18458] CIFS: VFS: Malformed UNC in devname [ 1834.420383][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1365.tmp-b7:3' failed: Read-only file system [ 1834.510384][T18471] /dev/rnullb0: Can't open blockdev [ 1834.644683][T18476] /dev/rnullb0: Can't open blockdev [ 1834.687272][T18478] loop3: detected capacity change from 0 to 1 [ 1834.696756][T18478] Dev loop3: unable to read RDB block 1 [ 1834.702984][T18478] loop3: unable to read partition table [ 1834.708911][T18478] loop3: partition table beyond EOD, truncated [ 1834.715712][T18478] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1834.763300][T18481] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.13335'. [ 1834.778517][T18480] netlink: 16186 bytes leftover after parsing attributes in process `syz.8.13335'. [ 1834.821794][T18480] macsec0: entered promiscuous mode [ 1834.827192][T18480] macsec0: entered allmulticast mode [ 1834.832568][T18480] veth1_macvtap: entered allmulticast mode [ 1834.844086][T18480] /dev/rnullb0: Can't open blockdev [ 1834.863994][T18484] /dev/rnullb0: Can't open blockdev [ 1834.871238][T18485] /dev/rnullb0: Can't open blockdev [ 1834.925365][ T5958] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 1834.952756][T18490] random: crng reseeded on system resumption [ 1834.957707][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13337'. [ 1834.985840][T18487] netlink: 20 bytes leftover after parsing attributes in process `syz.8.13337'. [ 1835.119915][ T5958] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1835.144600][ T5958] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1835.164820][ T5958] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1835.189716][ T5958] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1835.200866][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 1835.213115][ T5958] usb 4-1: Product: syz [ 1835.218875][ T5958] usb 4-1: Manufacturer: syz [ 1835.223580][ T5958] usb 4-1: SerialNumber: syz [ 1835.255224][T18501] /dev/rnullb0: Can't open blockdev [ 1835.255942][ T30] audit: type=1400 audit(6291405080.210:9291): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=18500 comm="syz.8.13342" [ 1835.288552][ T5958] cdc_mbim 4-1:1.0: MBIM functional descriptor missing [ 1835.300998][ T5958] cdc_mbim 4-1:1.0: bind() failure [ 1835.406968][T18507] /dev/rnullb0: Can't open blockdev [ 1835.413223][T18507] /dev/rnullb0: Can't open blockdev [ 1835.421460][T18507] /dev/rnullb0: Can't open blockdev [ 1835.428701][T18507] /dev/rnullb0: Can't open blockdev [ 1835.434354][T18507] /dev/rnullb0: Can't open blockdev [ 1835.440764][T18507] /dev/rnullb0: Can't open blockdev [ 1835.446437][T18507] /dev/rnullb0: Can't open blockdev [ 1835.452951][T18507] /dev/rnullb0: Can't open blockdev [ 1835.458669][T18507] /dev/rnullb0: Can't open blockdev [ 1835.464945][T18507] /dev/rnullb0: Can't open blockdev [ 1835.471124][T18507] /dev/rnullb0: Can't open blockdev [ 1835.476980][T18507] /dev/rnullb0: Can't open blockdev [ 1835.477447][T22955] usb 4-1: USB disconnect, device number 96 [ 1835.484214][T18507] /dev/rnullb0: Can't open blockdev [ 1835.496277][T18507] /dev/rnullb0: Can't open blockdev [ 1835.496857][T18507] /dev/rnullb0: Can't open blockdev [ 1835.497449][T18507] /dev/rnullb0: Can't open blockdev [ 1835.498030][T18507] /dev/rnullb0: Can't open blockdev [ 1835.520935][T18507] /dev/rnullb0: Can't open blockdev [ 1835.527024][T18507] /dev/rnullb0: Can't open blockdev [ 1835.527513][T15977] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1835.533060][T18507] /dev/rnullb0: Can't open blockdev [ 1835.547076][T18507] /dev/rnullb0: Can't open blockdev [ 1835.553027][T18507] /dev/rnullb0: Can't open blockdev [ 1835.559245][T18507] /dev/rnullb0: Can't open blockdev [ 1835.564888][T18507] /dev/rnullb0: Can't open blockdev [ 1835.572289][T18507] /dev/rnullb0: Can't open blockdev [ 1835.579327][T18507] /dev/rnullb0: Can't open blockdev [ 1835.585092][T18507] /dev/rnullb0: Can't open blockdev [ 1835.591312][T18507] /dev/rnullb0: Can't open blockdev [ 1835.596981][T18507] /dev/rnullb0: Can't open blockdev [ 1835.604067][T18507] /dev/rnullb0: Can't open blockdev [ 1835.612199][T18507] /dev/rnullb0: Can't open blockdev [ 1835.617850][T18507] /dev/rnullb0: Can't open blockdev [ 1835.625848][T18507] /dev/rnullb0: Can't open blockdev [ 1835.634927][T18507] /dev/rnullb0: Can't open blockdev [ 1835.640597][T18507] /dev/rnullb0: Can't open blockdev [ 1835.649751][T18507] /dev/rnullb0: Can't open blockdev [ 1835.657712][T18507] /dev/rnullb0: Can't open blockdev [ 1835.665574][T18507] /dev/rnullb0: Can't open blockdev [ 1835.671477][T18507] /dev/rnullb0: Can't open blockdev [ 1835.680077][T18507] /dev/rnullb0: Can't open blockdev [ 1835.687959][T18507] /dev/rnullb0: Can't open blockdev [ 1835.693640][T18507] /dev/rnullb0: Can't open blockdev [ 1835.699630][T18507] /dev/rnullb0: Can't open blockdev [ 1835.705337][T18507] /dev/rnullb0: Can't open blockdev [ 1835.711896][T15977] usb 6-1: Using ep0 maxpacket: 32 [ 1835.717350][T18507] /dev/rnullb0: Can't open blockdev [ 1835.718906][T15977] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1835.723592][T18507] /dev/rnullb0: Can't open blockdev [ 1835.732202][T15977] usb 6-1: config 0 has no interface number 0 [ 1835.742785][T15977] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1835.743341][T18507] /dev/rnullb0: Can't open blockdev [ 1835.757324][T15977] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1835.769252][T18507] /dev/rnullb0: Can't open blockdev [ 1835.771022][T15977] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1835.771055][T15977] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1835.771082][T15977] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1835.771109][T15977] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1835.777832][T18507] /dev/rnullb0: Can't open blockdev [ 1835.787608][T15977] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1835.787635][T15977] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1835.787666][T15977] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1835.799361][T18507] /dev/rnullb0: Can't open blockdev [ 1835.835034][T15977] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1835.837680][T15977] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1835.847213][T18507] /dev/rnullb0: Can't open blockdev [ 1835.863947][T15977] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1835.876490][T18507] /dev/rnullb0: Can't open blockdev [ 1835.896124][T15977] usb 6-1: Product: syz [ 1835.899710][T18507] /dev/rnullb0: Can't open blockdev [ 1835.903655][T15977] usb 6-1: Manufacturer: syz [ 1835.908402][T18507] /dev/rnullb0: Can't open blockdev [ 1835.920526][T15977] usb 6-1: SerialNumber: syz [ 1835.924635][T18507] /dev/rnullb0: Can't open blockdev [ 1835.934193][T18507] /dev/rnullb0: Can't open blockdev [ 1835.940159][T15977] usb 6-1: config 0 descriptor?? [ 1835.940496][T18507] /dev/rnullb0: Can't open blockdev [ 1835.949425][T18496] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1835.951944][T18507] /dev/rnullb0: Can't open blockdev [ 1835.963716][T18507] /dev/rnullb0: Can't open blockdev [ 1835.969412][T18496] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1835.969546][T18507] /dev/rnullb0: Can't open blockdev [ 1835.981932][T15977] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1835.983142][T18507] /dev/rnullb0: Can't open blockdev [ 1835.996973][T18507] /dev/rnullb0: Can't open blockdev [ 1836.003422][T18507] /dev/rnullb0: Can't open blockdev [ 1836.003966][T15977] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1836.009576][T18507] /dev/rnullb0: Can't open blockdev [ 1836.023979][T18507] /dev/rnullb0: Can't open blockdev [ 1836.031753][T15977] scsi host1: microtekX6 [ 1836.155658][T18512] loop3: detected capacity change from 0 to 1 [ 1836.185128][T13450] Dev loop3: unable to read RDB block 1 [ 1836.191123][T13450] loop3: unable to read partition table [ 1836.214408][T13450] loop3: partition table beyond EOD, truncated [ 1836.223079][T18512] Dev loop3: unable to read RDB block 1 [ 1836.239482][T18512] loop3: unable to read partition table [ 1836.252602][T18512] loop3: partition table beyond EOD, truncated [ 1836.261372][T18512] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1836.353434][T18518] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13347'. [ 1836.413364][T18521] /dev/rnullb0: Can't open blockdev [ 1836.426166][T18523] /dev/rnullb0: Can't open blockdev [ 1836.492689][T18526] netlink: 'syz.3.13349': attribute type 3 has an invalid length. [ 1836.505182][T18526] netlink: 'syz.3.13349': attribute type 1 has an invalid length. [ 1836.522073][T18526] netlink: 220 bytes leftover after parsing attributes in process `syz.3.13349'. [ 1836.543058][T18528] /dev/rnullb0: Can't open blockdev [ 1836.743386][T18533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13352'. [ 1836.765309][ T30] audit: type=1326 audit(6291405081.632:9292): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=18532 comm="syz.3.13352" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f732998e929 code=0x0 [ 1836.883037][T18531] netlink: 'syz.8.13351': attribute type 83 has an invalid length. [ 1837.159304][T15977] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1837.320084][T15977] usb 9-1: Using ep0 maxpacket: 8 [ 1837.326682][T18541] MTD: Couldn't look up './file0': -15 [ 1837.329128][T15977] usb 9-1: config 1 has an invalid descriptor of length 228, skipping remainder of the config [ 1837.351382][T15977] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1837.367680][T15977] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1837.379835][T15977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.390752][T15977] usb 9-1: Product: 濆 [ 1837.397196][T15977] usb 9-1: Manufacturer: 釠 [ 1837.402023][T15977] usb 9-1: SerialNumber: 㫒肼裿í„뼆掻複抷鴻虦ꊨ졧ꔄአ[ 1837.789281][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1369.tmp-b7:3' failed: Read-only file system [ 1837.836576][T18547] loop3: detected capacity change from 0 to 1 [ 1837.848202][T18547] Dev loop3: unable to read RDB block 1 [ 1837.855393][T18547] loop3: unable to read partition table [ 1837.861624][T18547] loop3: partition table beyond EOD, truncated [ 1837.896840][T18547] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1837.908855][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1370.tmp-b7:3' failed: Read-only file system [ 1837.952835][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1370.tmp-b7:3' failed: Read-only file system [ 1838.002736][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1370.tmp-b7:3' failed: Read-only file system [ 1838.138970][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1371.tmp-b7:3' failed: Read-only file system [ 1838.177660][T15977] usb 9-1: 0:2 : does not exist [ 1838.259524][T15977] usb 9-1: USB disconnect, device number 35 [ 1838.319412][T13450] udevd[13450]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1838.414717][T18564] Malformed UNC in devname [ 1838.414717][T18564] [ 1838.451398][T13503] udevd[13503]: symlink '../../loop3' '/dev/disk/by-diskseq/1371.tmp-b7:3' failed: Read-only file system [ 1838.473739][T18564] CIFS: VFS: Malformed UNC in devname [ 1838.483779][T17547] usb 6-1: USB disconnect, device number 76 [ 1838.551134][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1371.tmp-b7:3' failed: Read-only file system [ 1838.600037][T18572] loop3: detected capacity change from 0 to 1 [ 1838.640605][T15118] Dev loop3: unable to read RDB block 1 [ 1838.662728][T15118] loop3: unable to read partition table [ 1838.684252][T15118] loop3: partition table beyond EOD, truncated [ 1838.703613][T18572] Dev loop3: unable to read RDB block 1 [ 1838.709700][T18572] loop3: unable to read partition table [ 1838.729248][T18572] loop3: partition table beyond EOD, truncated [ 1838.737638][T18572] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1838.750066][T18577] /dev/rnullb0: Can't open blockdev [ 1838.757009][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1372.tmp-b7:3' failed: Read-only file system [ 1838.828179][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1372.tmp-b7:3' failed: Read-only file system [ 1838.995554][T18588] /dev/rnullb0: Can't open blockdev [ 1839.126701][T17547] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1839.288490][T18595] /dev/rnullb0: Can't open blockdev [ 1839.350716][T17547] usb 9-1: Using ep0 maxpacket: 16 [ 1839.358383][T17547] usb 9-1: config 4 has an invalid interface number: 140 but max is 0 [ 1839.369352][T17547] usb 9-1: config 4 has no interface number 0 [ 1839.373154][T18595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13374'. [ 1839.378669][T17547] usb 9-1: config 4 interface 140 has no altsetting 0 [ 1839.401858][T17547] usb 9-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=68.3b [ 1839.413982][T17547] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.428343][T17547] usb 9-1: Product: syz [ 1839.432556][T17547] usb 9-1: Manufacturer: syz [ 1839.438627][T17547] usb 9-1: SerialNumber: syz [ 1839.465278][T17547] ums-cypress 9-1:4.140: USB Mass Storage device detected [ 1839.698689][T17547] usb 9-1: USB disconnect, device number 36 [ 1839.949483][T15977] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1840.124169][T15977] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.138781][T15977] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1840.151027][T15977] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1840.165310][T15977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1840.173410][T15977] usb 4-1: SerialNumber: syz [ 1840.210784][T18608] loop3: detected capacity change from 0 to 1 [ 1840.221512][T18608] Dev loop3: unable to read RDB block 1 [ 1840.231113][T18608] loop3: unable to read partition table [ 1840.236974][T18608] loop3: partition table beyond EOD, truncated [ 1840.244658][T18608] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1840.344526][T18610] netlink: 'syz.8.13379': attribute type 28 has an invalid length. [ 1840.355049][T18610] /dev/rnullb0: Can't open blockdev [ 1840.458804][T18615] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.13381'. [ 1840.485751][T18615] netlink: 5128 bytes leftover after parsing attributes in process `syz.8.13381'. [ 1840.496155][T18615] netlink: 584 bytes leftover after parsing attributes in process `syz.8.13381'. [ 1840.591998][T15977] usb 4-1: 0:2 : does not exist [ 1840.626547][T15977] usb 4-1: USB disconnect, device number 97 [ 1840.642654][T18620] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1840.660795][T18620] /dev/rnullb0: Can't open blockdev [ 1840.746842][T18625] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1840.754553][T18625] /dev/rnullb0: Can't open blockdev [ 1840.799045][T18627] /dev/rnullb0: Can't open blockdev [ 1841.194234][T18632] loop3: detected capacity change from 0 to 1 [ 1841.223867][T18632] Dev loop3: unable to read RDB block 1 [ 1841.229473][T18632] loop3: unable to read partition table [ 1841.243744][T18632] loop3: partition table beyond EOD, truncated [ 1841.269500][T18632] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1841.465351][T28913] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1841.475776][T28913] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1841.485713][T28913] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1841.494573][T28913] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1841.503066][T28913] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1841.723076][ T3536] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.825720][ T3536] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1841.876080][ T981] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 1841.966904][ T3536] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.065864][ T981] usb 4-1: device descriptor read/64, error -71 [ 1842.115300][ T3536] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1842.148185][T18637] chnl_net:caif_netlink_parms(): no params data found [ 1842.229668][T18637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1842.236900][T18637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.244255][T18637] bridge_slave_0: entered allmulticast mode [ 1842.251820][T18637] bridge_slave_0: entered promiscuous mode [ 1842.260769][T18637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1842.267967][T18637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.276879][T18637] bridge_slave_1: entered allmulticast mode [ 1842.284389][T18637] bridge_slave_1: entered promiscuous mode [ 1842.322296][ T981] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1842.351282][T18637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1842.363957][T18637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1842.441739][T18637] team0: Port device team_slave_0 added [ 1842.450256][T18637] team0: Port device team_slave_1 added [ 1842.461217][ T981] usb 4-1: device descriptor read/64, error -71 [ 1842.472872][ T3536] bridge0: port 3(batadv0) entered disabled state [ 1842.481410][ T3536] bridge_slave_1: left allmulticast mode [ 1842.487774][ T3536] bridge_slave_1: left promiscuous mode [ 1842.494050][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1842.503693][ T3536] bridge_slave_0: left allmulticast mode [ 1842.509744][ T3536] bridge_slave_0: left promiscuous mode [ 1842.516418][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1842.586998][ T981] usb usb4-port1: attempt power cycle [ 1842.717756][ T3536] dvmrp1 (unregistering): left allmulticast mode [ 1842.925090][ T3536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1842.936498][ T3536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1842.946443][ T3536] bond0 (unregistering): Released all slaves [ 1842.963730][ T981] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1842.985800][ T981] usb 4-1: device descriptor read/8, error -71 [ 1842.993442][T18637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1843.012030][T18637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.038495][T18637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1843.052253][T18637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1843.059204][T18637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1843.085150][ C0] vkms_vblank_simulate: vblank timer overrun [ 1843.094370][T18637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1843.113008][ T3536] tipc: Left network mode [ 1843.178340][T18637] hsr_slave_0: entered promiscuous mode [ 1843.184980][T18637] hsr_slave_1: entered promiscuous mode [ 1843.192011][T18637] debugfs: 'hsr0' already exists in 'hsr' [ 1843.197970][T18637] Cannot create hsr debugfs directory [ 1843.241631][ T981] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 1843.274090][ T981] usb 4-1: device descriptor read/8, error -71 [ 1843.317773][ T3536] hsr_slave_0: left promiscuous mode [ 1843.324449][ T3536] hsr_slave_1: left promiscuous mode [ 1843.337293][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1843.345756][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1843.355645][ T3536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1843.363357][ T3536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1843.400094][ T3536] veth0_macvtap: left promiscuous mode [ 1843.402309][ T981] usb usb4-port1: unable to enumerate USB device [ 1843.412085][ T3536] veth1_vlan: left promiscuous mode [ 1843.418556][ T3536] veth0_vlan: left promiscuous mode [ 1843.694238][ T725] Bluetooth: hci3: command tx timeout [ 1844.039659][ T3536] team0 (unregistering): Port device ªªªªªª removed [ 1844.087351][ T3536] team0 (unregistering): Port device team_slave_0 removed [ 1844.767352][T13450] udevd[13450]: symlink '../../loop3' '/dev/disk/by-diskseq/1377.tmp-b7:3' failed: Read-only file system [ 1845.227894][T18637] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1845.249344][T18637] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1845.267195][T18637] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1845.278137][T18637] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1845.409679][T18637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1845.430807][T18637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1845.444877][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.452006][ T9639] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1845.476716][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.483827][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1845.759326][T18637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1845.915578][ T725] Bluetooth: hci3: command tx timeout [ 1846.137092][T18637] veth0_vlan: entered promiscuous mode [ 1846.155408][T18637] veth1_vlan: entered promiscuous mode [ 1846.187570][T18637] veth0_macvtap: entered promiscuous mode [ 1846.197665][T18637] veth1_macvtap: entered promiscuous mode [ 1846.219510][T18637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1846.233261][T18637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1846.272638][ T9639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.285046][ T9639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.308380][ T9639] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.353552][ T9639] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.405380][ T3560] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.415389][ T3560] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.488315][ T9642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.504774][ T9642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.137564][ T725] Bluetooth: hci3: command tx timeout [ 1850.360643][ T725] Bluetooth: hci3: command tx timeout [ 1892.678073][T18757] /dev/rnullb0: Can't open blockdev [ 1892.735476][T18766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13397'. [ 1892.810450][T18770] loop3: detected capacity change from 0 to 1 [ 1892.817543][T18770] Dev loop3: unable to read RDB block 1 [ 1892.817846][T18772] /dev/rnullb0: Can't open blockdev [ 1892.823439][T18770] loop3: unable to read partition table [ 1892.834565][T18770] loop3: partition table beyond EOD, truncated [ 1892.853164][T18770] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1892.868453][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1378.tmp-b7:3' failed: Read-only file system [ 1892.938120][T18774] /dev/rnullb0: Can't open blockdev [ 1892.941520][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1378.tmp-b7:3' failed: Read-only file system [ 1893.005538][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1378.tmp-b7:3' failed: Read-only file system [ 1893.074434][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1379.tmp-b7:3' failed: Read-only file system [ 1893.155298][T18781] /dev/rnullb0: Can't open blockdev [ 1893.230983][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1379.tmp-b7:3' failed: Read-only file system [ 1893.291353][T18791] /dev/rnullb0: Can't open blockdev [ 1893.376410][ T30] audit: type=1326 audit(6291405134.591:9293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18795 comm="syz.5.13409" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f061378e929 code=0x0 [ 1893.587941][ T5958] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 1893.751494][ T5958] usb 4-1: Using ep0 maxpacket: 32 [ 1893.763359][T18801] loop3: detected capacity change from 0 to 1 [ 1893.769898][ T5958] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 5 [ 1893.786360][ T5958] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1893.795569][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1893.795664][T18801] Dev loop3: unable to read RDB block 1 [ 1893.814998][T18801] loop3: unable to read partition table [ 1893.815420][ T5958] usb 4-1: Product: syz [ 1893.821041][T18801] loop3: partition table beyond EOD, truncated [ 1893.832540][T18801] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1893.846895][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1380.tmp-b7:3' failed: Read-only file system [ 1893.848477][ T5958] usb 4-1: Manufacturer: syz [ 1893.864227][ T5958] usb 4-1: SerialNumber: syz [ 1893.875426][ T5958] usb 4-1: config 0 descriptor?? [ 1893.899997][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1380.tmp-b7:3' failed: Read-only file system [ 1893.939060][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1380.tmp-b7:3' failed: Read-only file system [ 1894.302221][T18818] /dev/rnullb0: Can't open blockdev [ 1894.479670][T18827] loop3: detected capacity change from 0 to 1 [ 1894.490412][T18767] Dev loop3: unable to read RDB block 1 [ 1894.496017][T18767] loop3: unable to read partition table [ 1894.505109][T18767] loop3: partition table beyond EOD, truncated [ 1894.518601][T18827] Dev loop3: unable to read RDB block 1 [ 1894.524763][T18827] loop3: unable to read partition table [ 1894.551738][T18827] loop3: partition table beyond EOD, truncated [ 1894.567202][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1382.tmp-b7:3' failed: Read-only file system [ 1894.578910][T18827] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1894.593894][T29506] usb 4-1: USB disconnect, device number 102 [ 1894.674055][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1382.tmp-b7:3' failed: Read-only file system [ 1894.752332][T18841] /dev/rnullb0: Can't open blockdev [ 1894.795500][T18841] /dev/rnullb0: Can't open blockdev [ 1894.803868][T18841] /dev/rnullb0: Can't open blockdev [ 1894.830700][T18841] /dev/rnullb0: Can't open blockdev [ 1894.849834][T18841] /dev/rnullb0: Can't open blockdev [ 1894.859722][T18841] /dev/rnullb0: Can't open blockdev [ 1894.871544][T18841] /dev/rnullb0: Can't open blockdev [ 1894.877455][T18841] /dev/rnullb0: Can't open blockdev [ 1894.889202][T18841] /dev/rnullb0: Can't open blockdev [ 1894.896289][T18841] /dev/rnullb0: Can't open blockdev [ 1894.902421][T18841] /dev/rnullb0: Can't open blockdev [ 1894.919048][T18845] syz.5.13425: attempt to access beyond end of device [ 1894.919048][T18845] nbd5: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1894.921336][T18841] /dev/rnullb0: Can't open blockdev [ 1894.935476][T18845] gfs2: error -5 reading superblock [ 1894.951107][T18841] /dev/rnullb0: Can't open blockdev [ 1894.967683][T18841] /dev/rnullb0: Can't open blockdev [ 1894.973421][T18841] /dev/rnullb0: Can't open blockdev [ 1894.984197][T18841] /dev/rnullb0: Can't open blockdev [ 1894.993510][T18841] /dev/rnullb0: Can't open blockdev [ 1895.024726][T18841] /dev/rnullb0: Can't open blockdev [ 1895.034103][T18841] /dev/rnullb0: Can't open blockdev [ 1895.039845][T18841] /dev/rnullb0: Can't open blockdev [ 1895.055146][T18841] /dev/rnullb0: Can't open blockdev [ 1895.068993][T18841] /dev/rnullb0: Can't open blockdev [ 1895.069510][T18849] /dev/rnullb0: Can't open blockdev [ 1895.075034][T18841] /dev/rnullb0: Can't open blockdev [ 1895.086180][T18841] /dev/rnullb0: Can't open blockdev [ 1895.092079][T18841] /dev/rnullb0: Can't open blockdev [ 1895.115104][T18851] /dev/sg0: Can't lookup blockdev [ 1895.128782][T18841] /dev/rnullb0: Can't open blockdev [ 1895.151611][T18841] /dev/rnullb0: Can't open blockdev [ 1895.157474][T18841] /dev/rnullb0: Can't open blockdev [ 1895.180286][T18841] /dev/rnullb0: Can't open blockdev [ 1895.193142][T18841] /dev/rnullb0: Can't open blockdev [ 1895.204209][T18841] /dev/rnullb0: Can't open blockdev [ 1895.219969][T18841] /dev/rnullb0: Can't open blockdev [ 1895.225951][T18841] /dev/rnullb0: Can't open blockdev [ 1895.232430][T18841] /dev/rnullb0: Can't open blockdev [ 1895.243651][T18841] /dev/rnullb0: Can't open blockdev [ 1895.250809][T18841] /dev/rnullb0: Can't open blockdev [ 1895.262959][T18841] /dev/rnullb0: Can't open blockdev [ 1895.268783][T18841] /dev/rnullb0: Can't open blockdev [ 1895.274977][T18841] /dev/rnullb0: Can't open blockdev [ 1895.285041][T18841] /dev/rnullb0: Can't open blockdev [ 1895.291854][T18841] /dev/rnullb0: Can't open blockdev [ 1895.297699][T18841] /dev/rnullb0: Can't open blockdev [ 1895.305372][T18841] /dev/rnullb0: Can't open blockdev [ 1895.311560][T18841] /dev/rnullb0: Can't open blockdev [ 1895.317409][T18841] /dev/rnullb0: Can't open blockdev [ 1895.323749][T18841] /dev/rnullb0: Can't open blockdev [ 1895.329583][T18841] /dev/rnullb0: Can't open blockdev [ 1895.335510][T18841] /dev/rnullb0: Can't open blockdev [ 1895.341887][T18841] /dev/rnullb0: Can't open blockdev [ 1895.347852][T18841] /dev/rnullb0: Can't open blockdev [ 1895.354158][T18841] /dev/rnullb0: Can't open blockdev [ 1895.359928][T18841] /dev/rnullb0: Can't open blockdev [ 1895.366429][T18841] /dev/rnullb0: Can't open blockdev [ 1895.372434][T18841] /dev/rnullb0: Can't open blockdev [ 1895.378779][T18841] /dev/rnullb0: Can't open blockdev [ 1895.385288][T18841] /dev/rnullb0: Can't open blockdev [ 1895.391239][T18841] /dev/rnullb0: Can't open blockdev [ 1895.397487][T18841] /dev/rnullb0: Can't open blockdev [ 1895.405641][T18841] /dev/rnullb0: Can't open blockdev [ 1895.416622][T18841] /dev/rnullb0: Can't open blockdev [ 1895.422608][T18841] /dev/rnullb0: Can't open blockdev [ 1895.443254][T18841] /dev/rnullb0: Can't open blockdev [ 1895.450099][T18841] /dev/rnullb0: Can't open blockdev [ 1895.455907][T18841] /dev/rnullb0: Can't open blockdev [ 1895.462387][T18841] /dev/rnullb0: Can't open blockdev [ 1895.527616][T18861] loop3: detected capacity change from 0 to 1 [ 1895.539095][T18861] Dev loop3: unable to read RDB block 1 [ 1895.544991][T18861] loop3: unable to read partition table [ 1895.550917][T18861] loop3: partition table beyond EOD, truncated [ 1895.557237][T18861] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1895.663121][T18863] /dev/rnullb0: Can't open blockdev [ 1895.810624][T18867] /dev/rnullb0: Can't open blockdev [ 1895.882732][T18871] /dev/rnullb0: Can't open blockdev [ 1895.915891][T18872] /dev/rnullb0: Can't open blockdev [ 1895.994750][T18877] /dev/rnullb0: Can't open blockdev [ 1896.084535][T18879] /dev/rnullb0: Can't open blockdev [ 1896.162493][T18884] /dev/rnullb0: Can't open blockdev [ 1896.268904][T18888] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13444'. [ 1896.346594][T18891] /dev/rnullb0: Can't open blockdev [ 1896.665289][T18898] syzkaller0: entered promiscuous mode [ 1896.672370][T18898] syzkaller0: entered allmulticast mode [ 1896.842209][T18905] /dev/rnullb0: Can't open blockdev [ 1896.857631][T18905] 9pnet_virtio: no channels available for device syz [ 1896.892658][T18905] fuseblk: Unknown parameter 'fowner<00000000000000000000' [ 1897.105410][T18908] /dev/rnullb0: Can't open blockdev [ 1897.163253][T29506] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1897.316141][T18910] /dev/rnullb0: Can't open blockdev [ 1897.324795][T18910] /dev/rnullb0: Can't open blockdev [ 1897.329450][T29506] usb 6-1: Using ep0 maxpacket: 32 [ 1897.339523][T18910] /dev/rnullb0: Can't open blockdev [ 1897.355509][T29506] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1897.369845][T18910] /dev/rnullb0: Can't open blockdev [ 1897.375068][T29506] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 1897.377888][T18910] /dev/rnullb0: Can't open blockdev [ 1897.382795][T29506] usb 6-1: can't read configurations, error -71 [ 1897.400022][T18910] /dev/rnullb0: Can't open blockdev [ 1897.406563][T18910] /dev/rnullb0: Can't open blockdev [ 1897.412480][T18910] /dev/rnullb0: Can't open blockdev [ 1897.418891][T18910] /dev/rnullb0: Can't open blockdev [ 1897.424827][T18910] /dev/rnullb0: Can't open blockdev [ 1897.430938][T18910] /dev/rnullb0: Can't open blockdev [ 1897.436822][T18910] /dev/rnullb0: Can't open blockdev [ 1897.442700][T18910] /dev/rnullb0: Can't open blockdev [ 1897.454103][T18910] /dev/rnullb0: Can't open blockdev [ 1897.460647][T18910] /dev/rnullb0: Can't open blockdev [ 1897.467343][T18910] /dev/rnullb0: Can't open blockdev [ 1897.479968][T18910] /dev/rnullb0: Can't open blockdev [ 1897.486154][T18910] /dev/rnullb0: Can't open blockdev [ 1897.493333][T18910] /dev/rnullb0: Can't open blockdev [ 1897.499323][T18910] /dev/rnullb0: Can't open blockdev [ 1897.509027][T18910] /dev/rnullb0: Can't open blockdev [ 1897.516022][T18910] /dev/rnullb0: Can't open blockdev [ 1897.528785][T18910] /dev/rnullb0: Can't open blockdev [ 1897.542420][T18910] /dev/rnullb0: Can't open blockdev [ 1897.548398][T18910] /dev/rnullb0: Can't open blockdev [ 1897.559221][T18910] /dev/rnullb0: Can't open blockdev [ 1897.572710][T18910] /dev/rnullb0: Can't open blockdev [ 1897.579651][T18910] /dev/rnullb0: Can't open blockdev [ 1897.590137][T18910] /dev/rnullb0: Can't open blockdev [ 1897.596031][T18910] /dev/rnullb0: Can't open blockdev [ 1897.606758][T18910] /dev/rnullb0: Can't open blockdev [ 1897.614527][T18910] /dev/rnullb0: Can't open blockdev [ 1897.620870][T18910] /dev/rnullb0: Can't open blockdev [ 1897.626771][T18910] /dev/rnullb0: Can't open blockdev [ 1897.634864][T18910] /dev/rnullb0: Can't open blockdev [ 1897.646145][T18910] /dev/rnullb0: Can't open blockdev [ 1897.652244][T18910] /dev/rnullb0: Can't open blockdev [ 1897.658166][T18910] /dev/rnullb0: Can't open blockdev [ 1897.667840][T18910] /dev/rnullb0: Can't open blockdev [ 1897.677955][T18910] /dev/rnullb0: Can't open blockdev [ 1897.685100][T18910] /dev/rnullb0: Can't open blockdev [ 1897.691029][T18910] /dev/rnullb0: Can't open blockdev [ 1897.705891][T18910] /dev/rnullb0: Can't open blockdev [ 1897.711870][T18910] /dev/rnullb0: Can't open blockdev [ 1897.718616][T18910] /dev/rnullb0: Can't open blockdev [ 1897.732436][T18910] /dev/rnullb0: Can't open blockdev [ 1897.744013][T18910] /dev/rnullb0: Can't open blockdev [ 1897.751269][T18910] /dev/rnullb0: Can't open blockdev [ 1897.757243][T18910] /dev/rnullb0: Can't open blockdev [ 1897.763141][T18910] /dev/rnullb0: Can't open blockdev [ 1897.775711][T18910] /dev/rnullb0: Can't open blockdev [ 1897.805560][T18910] /dev/rnullb0: Can't open blockdev [ 1897.815502][T18910] /dev/rnullb0: Can't open blockdev [ 1897.821943][T18910] /dev/rnullb0: Can't open blockdev [ 1897.831223][T18910] /dev/rnullb0: Can't open blockdev [ 1897.839580][T18910] /dev/rnullb0: Can't open blockdev [ 1897.845641][T18910] /dev/rnullb0: Can't open blockdev [ 1897.852349][T18910] /dev/rnullb0: Can't open blockdev [ 1897.862277][T18910] /dev/rnullb0: Can't open blockdev [ 1897.868964][T18910] /dev/rnullb0: Can't open blockdev [ 1897.881692][T18910] /dev/rnullb0: Can't open blockdev [ 1897.888806][T18910] /dev/rnullb0: Can't open blockdev [ 1897.894699][T18910] /dev/rnullb0: Can't open blockdev [ 1897.931180][T18910] /dev/rnullb0: Can't open blockdev [ 1897.937007][T18910] /dev/rnullb0: Can't open blockdev [ 1898.163319][ T725] Bluetooth: hci4: command 0x0405 tx timeout [ 1898.172157][T18921] /dev/rnullb0: Can't open blockdev [ 1898.179609][T18919] /dev/rnullb0: Can't open blockdev [ 1898.281711][T18923] /dev/rnullb0: Can't open blockdev [ 1898.489820][T18927] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1898.506192][T18927] /dev/rnullb0: Can't open blockdev [ 1899.599235][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1385.tmp-b7:3' failed: Read-only file system [ 1899.636086][T18933] /dev/rnullb0: Can't open blockdev [ 1899.647360][T18931] netlink: 'syz.3.13460': attribute type 1 has an invalid length. [ 1899.755262][T18937] /dev/rnullb0: Can't open blockdev [ 1900.134634][T18950] netlink: 72 bytes leftover after parsing attributes in process `syz.8.13465'. [ 1900.208359][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1385.tmp-b7:3' failed: Read-only file system [ 1900.354552][T17547] [ 1900.354564][T17547] ====================================================== [ 1900.354573][T17547] WARNING: possible circular locking dependency detected [ 1900.354587][T17547] 6.16.0-rc5-next-20250710-syzkaller #0 Not tainted [ 1900.354598][T17547] ------------------------------------------------------ [ 1900.354607][T17547] kworker/0:5/17547 is trying to acquire lock: [ 1900.354617][T17547] ffff88801a8a10b8 (&buf->lock){+.+.}-{4:4}, at: tty_buffer_flush+0x74/0x2b0 [ 1900.354673][T17547] [ 1900.354673][T17547] but task is already holding lock: [ 1900.354680][T17547] ffffffff8e530780 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 1900.354717][T17547] [ 1900.354717][T17547] which lock already depends on the new lock. [ 1900.354717][T17547] [ 1900.354724][T17547] [ 1900.354724][T17547] the existing dependency chain (in reverse order) is: [ 1900.354731][T17547] [ 1900.354731][T17547] -> #2 (console_lock){+.+.}-{0:0}: [ 1900.354761][T17547] lock_acquire+0x120/0x360 [ 1900.354781][T17547] console_lock+0x164/0x1b0 [ 1900.354803][T17547] con_flush_chars+0x70/0x280 [ 1900.354822][T17547] n_tty_write+0xee1/0x11d0 [ 1900.354844][T17547] file_tty_write+0x500/0x990 [ 1900.354860][T17547] vfs_write+0x54b/0xa90 [ 1900.354876][T17547] ksys_write+0x145/0x250 [ 1900.354891][T17547] do_syscall_64+0xfa/0x3b0 [ 1900.354915][T17547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.354932][T17547] [ 1900.354932][T17547] -> #1 (&tty->termios_rwsem){++++}-{4:4}: [ 1900.354959][T17547] lock_acquire+0x120/0x360 [ 1900.354976][T17547] down_write+0x96/0x1f0 [ 1900.355000][T17547] n_tty_flush_buffer+0x30/0x230 [ 1900.355023][T17547] tty_buffer_flush+0x1e9/0x2b0 [ 1900.355042][T17547] tty_ldisc_flush+0x6b/0xc0 [ 1900.355059][T17547] tty_port_close_start+0x2da/0x550 [ 1900.355080][T17547] tty_port_close+0x2a/0x150 [ 1900.355102][T17547] tty_release+0x389/0x1640 [ 1900.355119][T17547] __fput+0x449/0xa70 [ 1900.355140][T17547] task_work_run+0x1d4/0x260 [ 1900.355156][T17547] exit_to_user_mode_loop+0xec/0x110 [ 1900.355175][T17547] do_syscall_64+0x2bd/0x3b0 [ 1900.355198][T17547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1900.355214][T17547] [ 1900.355214][T17547] -> #0 (&buf->lock){+.+.}-{4:4}: [ 1900.355240][T17547] validate_chain+0xb9b/0x2140 [ 1900.355261][T17547] __lock_acquire+0xab9/0xd20 [ 1900.355279][T17547] lock_acquire+0x120/0x360 [ 1900.355296][T17547] __mutex_lock+0x182/0xe80 [ 1900.355319][T17547] tty_buffer_flush+0x74/0x2b0 [ 1900.355337][T17547] tty_ldisc_flush+0x6b/0xc0 [ 1900.355353][T17547] __do_SAK+0x138/0x6d0 [ 1900.355371][T17547] vc_SAK+0x78/0x220 [ 1900.355384][T17547] process_scheduled_works+0xade/0x17b0 [ 1900.355405][T17547] worker_thread+0x8a0/0xda0 [ 1900.355426][T17547] kthread+0x711/0x8a0 [ 1900.355449][T17547] ret_from_fork+0x3f9/0x770 [ 1900.355469][T17547] ret_from_fork_asm+0x1a/0x30 [ 1900.355485][T17547] [ 1900.355485][T17547] other info that might help us debug this: [ 1900.355485][T17547] [ 1900.355492][T17547] Chain exists of: [ 1900.355492][T17547] &buf->lock --> &tty->termios_rwsem --> console_lock [ 1900.355492][T17547] [ 1900.355524][T17547] Possible unsafe locking scenario: [ 1900.355524][T17547] [ 1900.355532][T17547] CPU0 CPU1 [ 1900.355538][T17547] ---- ---- [ 1900.355545][T17547] lock(console_lock); [ 1900.355558][T17547] lock(&tty->termios_rwsem); [ 1900.355573][T17547] lock(console_lock); [ 1900.355588][T17547] lock(&buf->lock); [ 1900.355601][T17547] [ 1900.355601][T17547] *** DEADLOCK *** [ 1900.355601][T17547] [ 1900.355607][T17547] 4 locks held by kworker/0:5/17547: [ 1900.355618][T17547] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1900.355670][T17547] #1: ffffc9000e9a7bc0 ((work_completion)(&vc_cons[currcons].SAK_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1900.355717][T17547] #2: ffffffff8e530780 (console_lock){+.+.}-{0:0}, at: vc_SAK+0x28/0x220 [ 1900.355756][T17547] #3: ffff888021efe0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_flush+0x20/0xc0 [ 1900.355798][T17547] [ 1900.355798][T17547] stack backtrace: [ 1900.355809][T17547] CPU: 0 UID: 0 PID: 17547 Comm: kworker/0:5 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1900.355829][T17547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1900.355841][T17547] Workqueue: events vc_SAK [ 1900.355855][T17547] Call Trace: [ 1900.355862][T17547] [ 1900.355869][T17547] dump_stack_lvl+0x189/0x250 [ 1900.355895][T17547] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1900.355918][T17547] ? __pfx__printk+0x10/0x10 [ 1900.355943][T17547] ? print_lock_name+0xde/0x100 [ 1900.355967][T17547] print_circular_bug+0x2ee/0x310 [ 1900.355992][T17547] check_noncircular+0x134/0x160 [ 1900.356018][T17547] validate_chain+0xb9b/0x2140 [ 1900.356049][T17547] __lock_acquire+0xab9/0xd20 [ 1900.356071][T17547] ? tty_buffer_flush+0x74/0x2b0 [ 1900.356090][T17547] lock_acquire+0x120/0x360 [ 1900.356108][T17547] ? tty_buffer_flush+0x74/0x2b0 [ 1900.356131][T17547] __mutex_lock+0x182/0xe80 [ 1900.356154][T17547] ? tty_buffer_flush+0x74/0x2b0 [ 1900.356172][T17547] ? __lock_acquire+0xab9/0xd20 [ 1900.356194][T17547] ? tty_buffer_flush+0x74/0x2b0 [ 1900.356214][T17547] ? __pfx___mutex_lock+0x10/0x10 [ 1900.356236][T17547] ? do_raw_spin_lock+0x121/0x290 [ 1900.356264][T17547] ? ldsem_down_read_trylock+0x137/0x1a0 [ 1900.356288][T17547] ? tty_ldisc_flush+0x20/0xc0 [ 1900.356304][T17547] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1900.356329][T17547] tty_buffer_flush+0x74/0x2b0 [ 1900.356351][T17547] tty_ldisc_flush+0x6b/0xc0 [ 1900.356369][T17547] __do_SAK+0x138/0x6d0 [ 1900.356391][T17547] vc_SAK+0x78/0x220 [ 1900.356405][T17547] ? process_scheduled_works+0x9ef/0x17b0 [ 1900.356427][T17547] process_scheduled_works+0xade/0x17b0 [ 1900.356458][T17547] ? __pfx_process_scheduled_works+0x10/0x10 [ 1900.356486][T17547] worker_thread+0x8a0/0xda0 [ 1900.356509][T17547] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1900.356533][T17547] ? __kthread_parkme+0x7b/0x200 [ 1900.356560][T17547] kthread+0x711/0x8a0 [ 1900.356585][T17547] ? __pfx_worker_thread+0x10/0x10 [ 1900.356605][T17547] ? __pfx_kthread+0x10/0x10 [ 1900.356630][T17547] ? _raw_spin_unlock_irq+0x23/0x50 [ 1900.356649][T17547] ? lockdep_hardirqs_on+0x9c/0x150 [ 1900.356676][T17547] ? __pfx_kthread+0x10/0x10 [ 1900.356700][T17547] ret_from_fork+0x3f9/0x770 [ 1900.356722][T17547] ? __pfx_ret_from_fork+0x10/0x10 [ 1900.356744][T17547] ? __switch_to_asm+0x39/0x70 [ 1900.356759][T17547] ? __switch_to_asm+0x33/0x70 [ 1900.356774][T17547] ? __pfx_kthread+0x10/0x10 [ 1900.356799][T17547] ret_from_fork_asm+0x1a/0x30 [ 1900.356821][T17547] [ 1900.379067][T18953] /dev/rnullb0: Can't open blockdev [ 1900.506394][T18966] /dev/rnullb0: Can't open blockdev [ 1900.610928][T14888] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1900.783343][T14888] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1900.783367][T14888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1900.784173][T14888] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1900.784196][T14888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1900.784215][T14888] usb 4-1: SerialNumber: syz [ 1901.005358][T14888] usb 4-1: 0:2 : does not exist [ 1901.005416][T14888] usb 4-1: unit 255 not found! [ 1901.011039][T14888] usb 4-1: 5:0: cannot get min/max values for control 14 (id 5) [ 1901.014041][T14888] usb 4-1: 5:0: cannot get min/max values for control 15 (id 5) [ 1901.016946][T14888] usb 4-1: 5:0: cannot get min/max values for control 16 (id 5) [ 1901.019716][T14888] usb 4-1: 5:0: cannot get min/max values for control 18 (id 5) [ 1901.025137][T14888] usb 4-1: USB disconnect, device number 103 [ 1901.037005][T18767] udevd[18767]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1901.606983][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1385.tmp-b7:3' failed: Read-only file system [ 1901.673342][T18978] /dev/rnullb0: Can't open blockdev [ 1903.983224][T18981] base_sock_release(ffff88805c64d400) sk=ffff888056cfa000 [ 1904.162472][T18992] loop3: detected capacity change from 0 to 1 [ 1904.163007][T18992] Dev loop3: unable to read RDB block 1 [ 1904.163044][T18992] loop3: unable to read partition table [ 1904.163158][T18992] loop3: partition table beyond EOD, truncated [ 1904.163173][T18992] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1904.168162][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1386.tmp-b7:3' failed: Read-only file system [ 1904.177499][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1386.tmp-b7:3' failed: Read-only file system [ 1904.185213][T18767] udevd[18767]: symlink '../../loop3' '/dev/disk/by-diskseq/1386.tmp-b7:3' failed: Read-only file system [ 1905.132734][T18999] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 1907.398380][T28913] Bluetooth: hci3: command 0x0405 tx timeout [ 1908.689215][T19015] syz.0.13488: attempt to access beyond end of device [ 1908.689215][T19015] nbd0: rw=0, sector=2, nr_sectors = 1 limit=0 [ 1908.689256][T19015] hfs: can't find a HFS filesystem on dev nbd0 [ 1908.752340][T19019] /dev/rnullb0: Can't open blockdev [ 1908.870197][T19022] erofs (device nbd0): cannot find valid erofs superblock [ 1912.460752][T19047] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1917.095478][T19063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13502'. [ 1917.206286][T28913] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1917.206578][T28913] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1917.206806][T28913] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1917.207385][T28913] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1917.207770][T28913] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1917.271767][T28913] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1917.273131][T28913] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1917.279192][T28913] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1917.279776][T28913] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1917.280156][T28913] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1917.429807][T19068] chnl_net:caif_netlink_parms(): no params data found [ 1917.441497][T19081] loop3: detected capacity change from 0 to 1 [ 1917.442690][T19053] Dev loop3: unable to read RDB block 1 [ 1917.442724][T19053] loop3: unable to read partition table [ 1917.442864][T19053] loop3: partition table beyond EOD, truncated [ 1917.449259][T19081] Dev loop3: unable to read RDB block 1 [ 1917.449309][T19081] loop3: unable to read partition table [ 1917.449418][T19081] loop3: partition table beyond EOD, truncated [ 1917.449434][T19081] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1917.450711][T19053] udevd[19053]: symlink '../../loop3' '/dev/disk/by-diskseq/1388.tmp-b7:3' failed: Read-only file system [ 1917.465890][T19053] udevd[19053]: symlink '../../loop3' '/dev/disk/by-diskseq/1388.tmp-b7:3' failed: Read-only file system [ 1917.479101][T19053] udevd[19053]: symlink '../../loop3' '/dev/disk/by-diskseq/1388.tmp-b7:3' failed: Read-only file system [ 1917.498930][T19070] chnl_net:caif_netlink_parms(): no params data found [ 1917.570139][T19068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.570235][T19068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.570481][T19068] bridge_slave_0: entered allmulticast mode [ 1917.571465][T19068] bridge_slave_0: entered promiscuous mode [ 1917.573145][T19068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.573208][T19068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.573321][T19068] bridge_slave_1: entered allmulticast mode [ 1917.581510][T19068] bridge_slave_1: entered promiscuous mode [ 1917.667202][T19070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1917.667301][T19070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1917.667411][T19070] bridge_slave_0: entered allmulticast mode [ 1917.668316][T19070] bridge_slave_0: entered promiscuous mode [ 1917.681249][T19068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1917.695137][T19068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1917.702992][T19070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1917.703058][T19070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1917.703142][T19070] bridge_slave_1: entered allmulticast mode [ 1917.703727][T19070] bridge_slave_1: entered promiscuous mode [ 1917.762454][T19068] team0: Port device team_slave_0 added [ 1917.764567][T19070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1917.765819][T19068] team0: Port device team_slave_1 added [ 1917.784193][T19070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1917.804124][T19068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1917.804137][T19068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1917.804181][T19068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1917.805206][T19068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1917.805218][T19068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1917.805267][T19068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1917.833157][T19070] team0: Port device team_slave_0 added [ 1917.835028][T19070] team0: Port device team_slave_1 added [ 1917.866807][T19068] hsr_slave_0: entered promiscuous mode [ 1917.867417][T19068] hsr_slave_1: entered promiscuous mode [ 1917.867822][T19068] debugfs: 'hsr0' already exists in 'hsr' [ 1917.867838][T19068] Cannot create hsr debugfs directory [ 1917.877861][T19070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1917.877875][T19070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1917.877917][T19070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1917.879087][T19070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1917.879100][T19070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1917.879137][T19070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1917.906068][T28913] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1917.906273][T28913] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1917.906459][T28913] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1917.907014][T28913] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1917.907364][T28913] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1917.937694][T19070] hsr_slave_0: entered promiscuous mode [ 1917.938380][T19070] hsr_slave_1: entered promiscuous mode [ 1917.938776][T19070] debugfs: 'hsr0' already exists in 'hsr' [ 1917.938791][T19070] Cannot create hsr debugfs directory [ 1918.269210][T19103] chnl_net:caif_netlink_parms(): no params data found [ 1918.372400][T19103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.372478][T19103] bridge0: port 1(bridge_slave_0) entered disabled state [ 1918.372591][T19103] bridge_slave_0: entered allmulticast mode [ 1918.373646][T19103] bridge_slave_0: entered promiscuous mode [ 1918.381688][T19103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.381764][T19103] bridge0: port 2(bridge_slave_1) entered disabled state [ 1918.381878][T19103] bridge_slave_1: entered allmulticast mode [ 1918.382791][T19103] bridge_slave_1: entered promiscuous mode [ 1918.435777][T19103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1918.438503][T19103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1918.457882][T19070] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.459756][T19068] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1918.462778][T19068] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1918.476980][T19068] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1918.479728][T19068] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1918.484586][T19103] team0: Port device team_slave_0 added [ 1918.489554][T19103] team0: Port device team_slave_1 added [ 1918.523242][T19070] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.534224][T19103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1918.534238][T19103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1918.534275][T19103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1918.541750][T19103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1918.541766][T19103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1918.541815][T19103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1918.573437][T19070] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.592247][T19103] hsr_slave_0: entered promiscuous mode [ 1918.592921][T19103] hsr_slave_1: entered promiscuous mode [ 1918.593356][T19103] debugfs: 'hsr0' already exists in 'hsr' [ 1918.593371][T19103] Cannot create hsr debugfs directory [ 1918.623615][T19070] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1918.680687][T19068] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1918.736161][T19068] 8021q: adding VLAN 0 to HW filter on device team0 [ 1918.768894][ T3560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1918.768971][ T3560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1918.770253][ T3560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1918.770314][ T3560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1918.818104][T19070] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1918.822991][T19070] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1918.828775][T19070] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1918.832843][T19070] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1919.119280][T19070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.137301][T19068] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.143775][T19070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.183557][T29125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.183623][T29125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.192714][T29125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.192779][T29125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1919.228601][T19103] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1919.232828][T19103] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1919.235638][T19103] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1919.248755][T19103] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1919.254567][T19068] veth0_vlan: entered promiscuous mode [ 1919.275936][T19068] veth1_vlan: entered promiscuous mode [ 1919.301242][T19070] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1919.334039][T19068] veth0_macvtap: entered promiscuous mode [ 1919.343249][T19068] veth1_macvtap: entered promiscuous mode [ 1919.363354][T19068] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1919.367936][T19068] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1919.373389][T28913] Bluetooth: hci5: command tx timeout [ 1919.390016][T29125] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.408144][T29125] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.417549][T19103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1919.417997][T29125] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.418846][T29125] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1919.432153][T19103] 8021q: adding VLAN 0 to HW filter on device team0 [ 1919.440266][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1919.440329][ T3536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1919.441447][T19068] ieee80211 phy119: Selected rate control algorithm 'minstrel_ht' [ 1919.466726][T28913] Bluetooth: hci6: command tx timeout [ 1919.472696][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1919.472761][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1919.508582][ T9639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.508599][ T9639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.525515][T19068] ieee80211 phy120: Selected rate control algorithm 'minstrel_ht' [ 1919.576174][ T3560] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1919.576191][ T3560] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1919.614529][T19070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1919.664944][T19053] udevd[19053]: symlink '../../loop1' '/dev/disk/by-diskseq/595.tmp-b7:1' failed: Read-only file system [ 1919.777971][T19053] udevd[19053]: symlink '../../loop1' '/dev/disk/by-diskseq/595.tmp-b7:1' failed: Read-only file system [ 1919.825337][T19103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1920.000849][T19070] veth0_vlan: entered promiscuous mode [ 1920.007383][T19070] veth1_vlan: entered promiscuous mode [ 1920.036554][T19070] veth0_macvtap: entered promiscuous mode [ 1920.040169][T19070] veth1_macvtap: entered promiscuous mode [ 1920.055596][T28913] Bluetooth: hci7: command tx timeout [ 1920.058101][T19070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1920.068264][T19070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1920.076786][T19199] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.076821][T19199] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.076850][T19199] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.076879][T19199] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.116377][T19070] ieee80211 phy121: Selected rate control algorithm 'minstrel_ht' [ 1920.158534][T29125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.158552][T29125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.162692][T19103] veth0_vlan: entered promiscuous mode [ 1920.167027][T19103] veth1_vlan: entered promiscuous mode [ 1920.171853][T19070] ieee80211 phy122: Selected rate control algorithm 'minstrel_ht' [ 1920.199431][T19103] veth0_macvtap: entered promiscuous mode [ 1920.203044][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.203060][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.209871][T19103] veth1_macvtap: entered promiscuous mode [ 1920.229334][T19103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1920.238121][T19103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1920.249249][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.249295][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.249685][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.250172][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1920.278123][T19053] udevd[19053]: symlink '../../loop4' '/dev/disk/by-diskseq/1135.tmp-b7:4' failed: Read-only file system [ 1920.291147][T19103] ieee80211 phy123: Selected rate control algorithm 'minstrel_ht' [ 1920.309668][T19229] overlayfs: failed to resolve './file1': -2 [ 1920.329440][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.329457][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.334731][T19103] ieee80211 phy124: Selected rate control algorithm 'minstrel_ht' [ 1920.368012][T19199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1920.368029][T19199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1920.397881][T19230] block nbd4: Device being setup by another task [ 1920.419526][T19053] udevd[19053]: symlink '../../loop6' '/dev/disk/by-diskseq/1303.tmp-b7:6' failed: Read-only file system [ 1920.445664][T19236] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1920.544393][T19053] udevd[19053]: symlink '../../loop6' '/dev/disk/by-diskseq/1303.tmp-b7:6' failed: Read-only file system [ 1920.557854][T19246] loop3: detected capacity change from 0 to 1 [ 1920.558891][T19246] Dev loop3: unable to read RDB block 1 [ 1920.558927][T19246] loop3: unable to read partition table [ 1920.559047][T19246] loop3: partition table beyond EOD, truncated [ 1920.559064][T19246] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1920.564904][T19053] udevd[19053]: symlink '../../loop3' '/dev/disk/by-diskseq/1390.tmp-b7:3' failed: Read-only file system [ 1920.585436][T19053] udevd[19053]: symlink '../../loop3' '/dev/disk/by-diskseq/1390.tmp-b7:3' failed: Read-only file system [ 1920.979250][T19266] 9pnet_fd: p9_fd_create_unix (19266): problem connecting socket: ./cgroup: -111 [ 1921.052378][T19271] netlink: 'syz.0.13515': attribute type 1 has an invalid length. [ 1921.052400][T19271] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.13515'. [ 1921.187882][T19229] block nbd4: shutting down sockets [ 1921.328457][T19288] loop3: detected capacity change from 0 to 1 [ 1921.329279][T19288] Dev loop3: unable to read RDB block 1 [ 1921.329316][T19288] loop3: unable to read partition table [ 1921.329433][T19288] loop3: partition table beyond EOD, truncated [ 1921.329449][T19288] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1921.383670][T19291] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1921.508370][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1921.598568][T28913] Bluetooth: hci5: command tx timeout [ 1921.679864][T28913] Bluetooth: hci6: command tx timeout [ 1921.701212][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1921.702535][ T9] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1921.702572][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1921.702593][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1921.702615][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1921.702637][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1921.702670][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1921.702690][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1921.922386][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 1921.922420][ T9] usbtmc 7-1:16.0: can't read capabilities [ 1922.179982][T14888] usb 7-1: USB disconnect, device number 6 [ 1922.242084][T19339] loop3: detected capacity change from 0 to 1 [ 1922.245085][T19339] Dev loop3: unable to read RDB block 1 [ 1922.245121][T19339] loop3: unable to read partition table [ 1922.245260][T19339] loop3: partition table beyond EOD, truncated [ 1922.245277][T19339] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1922.280070][T28913] Bluetooth: hci7: command tx timeout [ 1922.360295][T19347] loop3: detected capacity change from 0 to 1 [ 1922.368806][T19347] Dev loop3: unable to read RDB block 1 [ 1922.368844][T19347] loop3: unable to read partition table [ 1922.368958][T19347] loop3: partition table beyond EOD, truncated [ 1922.368987][T19347] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1922.421853][T19350] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1922.489342][T19354] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1922.526589][T19356] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1922.584262][T19360] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1922.662335][T19370] netlink: 'syz.0.13539': attribute type 75 has an invalid length. [ 1922.662453][T19373] netlink: 'syz.0.13539': attribute type 75 has an invalid length. [ 1922.674002][T19369] openvswitch: netlink: Missing key (keys=44, expected=200000) [ 1922.718470][T19377] overlayfs: conflicting lowerdir path [ 1922.866355][T19388] /dev/rnullb0: Can't open blockdev [ 1922.870610][ T30] audit: type=1326 audit(6291405162.180:9294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19376 comm="syz.6.13541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ce838e929 code=0x7fc00000 [ 1922.932092][T19053] udevd[19053]: symlink '../../loop6' '/dev/disk/by-diskseq/1303.tmp-b7:6' failed: Read-only file system [ 1922.938226][T19025] udevd[19025]: symlink '../../loop4' '/dev/disk/by-diskseq/1135.tmp-b7:4' failed: Read-only file system [ 1922.989279][T19053] udevd[19053]: symlink '../../loop6' '/dev/disk/by-diskseq/1303.tmp-b7:6' failed: Read-only file system [ 1923.072743][T19053] udevd[19053]: symlink '../../loop6' '/dev/disk/by-diskseq/1303.tmp-b7:6' failed: Read-only file system [ 1923.817160][T28913] Bluetooth: hci5: command tx timeout [ 1923.902813][T28913] Bluetooth: hci6: command tx timeout [ 1924.501714][T28913] Bluetooth: hci7: command tx timeout [ 1926.040971][T28913] Bluetooth: hci5: command tx timeout [ 1926.126434][T28913] Bluetooth: hci6: command tx timeout [ 1926.724657][T28913] Bluetooth: hci7: command tx timeout [ 1936.066808][T19941] udevd[19941]: symlink '../../loop6' '/dev/disk/by-diskseq/1303.tmp-b7:6' failed: Read-only file system [ 1936.177265][T19941] udevd[19941]: symlink '../../loop6' '/dev/disk/by-diskseq/1303.tmp-b7:6' failed: Read-only file system [ 1936.200008][ T725] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1936.200226][ T725] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1936.200432][ T725] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1936.201040][ T725] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1936.201490][ T725] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1936.232510][T19963] /dev/rnullb0: Can't open blockdev [ 1936.343571][T19957] chnl_net:caif_netlink_parms(): no params data found [ 1936.399266][T19957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.399375][T19957] bridge0: port 1(bridge_slave_0) entered disabled state [ 1936.399488][T19957] bridge_slave_0: entered allmulticast mode [ 1936.400381][T19957] bridge_slave_0: entered promiscuous mode [ 1936.402927][T19957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.403024][T19957] bridge0: port 2(bridge_slave_1) entered disabled state [ 1936.403139][T19957] bridge_slave_1: entered allmulticast mode [ 1936.404060][T19957] bridge_slave_1: entered promiscuous mode [ 1936.430759][T19957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1936.432899][T19957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1936.454934][T19957] team0: Port device team_slave_0 added [ 1936.456273][T19957] team0: Port device team_slave_1 added [ 1936.488272][T19957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1936.488286][T19957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1936.488326][T19957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1936.489396][T19957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1936.489409][T19957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1936.489450][T19957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1936.505384][T29506] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1936.522893][T19957] hsr_slave_0: entered promiscuous mode [ 1936.523721][T19957] hsr_slave_1: entered promiscuous mode [ 1936.524149][T19957] debugfs: 'hsr0' already exists in 'hsr' [ 1936.524165][T19957] Cannot create hsr debugfs directory [ 1936.562324][T19987] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13571'. [ 1936.651809][T19994] /dev/rnullb0: Can't open blockdev [ 1936.652369][T19995] /dev/rnullb0: Can't open blockdev [ 1936.666106][T29506] usb 7-1: Using ep0 maxpacket: 8 [ 1936.671139][T29506] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 190, using maximum allowed: 30 [ 1936.671180][T29506] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 190 [ 1936.673133][T29506] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1936.673160][T29506] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1936.673179][T29506] usb 7-1: Product: syz [ 1936.673193][T29506] usb 7-1: Manufacturer: syz [ 1936.673207][T29506] usb 7-1: SerialNumber: syz [ 1936.674519][T29506] usb 7-1: config 0 descriptor?? [ 1936.923320][T19957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1936.927158][T19957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1936.929897][T19957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1936.932655][T19957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1936.981142][T19957] bridge0: port 2(bridge_slave_1) entered blocking state [ 1936.981227][T19957] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1936.981416][T19957] bridge0: port 1(bridge_slave_0) entered blocking state [ 1936.981500][T19957] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.027427][T19957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1937.037125][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1937.037571][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1937.044837][T19957] 8021q: adding VLAN 0 to HW filter on device team0 [ 1937.054225][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 1937.054330][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1937.057116][T19199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1937.057170][T19199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1937.241436][T19957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1937.482748][T19957] veth0_vlan: entered promiscuous mode [ 1937.491633][T19957] veth1_vlan: entered promiscuous mode [ 1937.527935][T19957] veth0_macvtap: entered promiscuous mode [ 1937.530500][T19957] veth1_macvtap: entered promiscuous mode [ 1937.539270][T19957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1937.547080][T19957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1937.552603][T19199] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.552637][T19199] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.552682][T19199] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.552710][T19199] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1937.584330][T19957] ieee80211 phy125: Selected rate control algorithm 'minstrel_ht' [ 1937.628652][T19199] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1937.628670][T19199] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1937.630823][T19957] ieee80211 phy126: Selected rate control algorithm 'minstrel_ht' [ 1937.675026][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1937.675043][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1937.738493][T20052] loop3: detected capacity change from 0 to 1 [ 1937.749751][T20052] Dev loop3: unable to read RDB block 1 [ 1937.749789][T20052] loop3: unable to read partition table [ 1937.749947][T20052] loop3: partition table beyond EOD, truncated [ 1937.749974][T20052] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1937.768827][T20000] udevd[20000]: symlink '../../loop3' '/dev/disk/by-diskseq/1399.tmp-b7:3' failed: Read-only file system [ 1937.771973][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1937.785023][T20000] udevd[20000]: symlink '../../loop3' '/dev/disk/by-diskseq/1399.tmp-b7:3' failed: Read-only file system [ 1937.805972][T19941] udevd[19941]: symlink '../../loop3' '/dev/disk/by-diskseq/1399.tmp-b7:3' failed: Read-only file system [ 1937.828676][T20000] udevd[20000]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1937.889556][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1937.962431][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1937.995070][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1938.060025][T20069] overlayfs: failed to resolve './file1': -2 [ 1938.354983][T28913] Bluetooth: hci8: command tx timeout [ 1939.851123][ T5946] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1940.011550][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 1940.014853][ T5946] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 1940.014877][ T5946] usb 5-1: config 0 has no interface number 0 [ 1940.014924][ T5946] usb 5-1: config 0 interface 120 has no altsetting 0 [ 1940.016679][ T5946] usb 5-1: New USB device found, idVendor=9022, idProduct=d632, bcdDevice=e9.8b [ 1940.016706][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1940.016726][ T5946] usb 5-1: Product: syz [ 1940.016741][ T5946] usb 5-1: Manufacturer: syz [ 1940.016765][ T5946] usb 5-1: SerialNumber: syz [ 1940.022585][ T5946] usb 5-1: config 0 descriptor?? [ 1940.028829][ T5946] dvb-usb: found a 'TeVii S632 USB' in warm state. [ 1940.028876][ T5946] dw2102: su3000_power_ctrl: 1, initialized 0 [ 1940.028893][ T5946] dvb-usb: bulk message failed: -22 (2/0) [ 1940.033729][ T5946] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1940.034538][ T5946] dvbdev: DVB: registering new adapter (TeVii S632 USB) [ 1940.034597][ T5946] usb 5-1: media controller created [ 1940.034623][ T5946] dvb-usb: bulk message failed: -22 (6/0) [ 1940.034637][ T5946] dw2102: i2c transfer failed. [ 1940.034649][ T5946] dvb-usb: bulk message failed: -22 (6/0) [ 1940.034662][ T5946] dw2102: i2c transfer failed. [ 1940.034672][ T5946] dvb-usb: bulk message failed: -22 (6/0) [ 1940.034685][ T5946] dw2102: i2c transfer failed. [ 1940.034721][ T5946] dvb-usb: bulk message failed: -22 (6/0) [ 1940.034734][ T5946] dw2102: i2c transfer failed. [ 1940.034745][ T5946] dvb-usb: bulk message failed: -22 (6/0) [ 1940.034758][ T5946] dw2102: i2c transfer failed. [ 1940.034769][ T5946] dvb-usb: bulk message failed: -22 (6/0) [ 1940.034781][ T5946] dw2102: i2c transfer failed. [ 1940.034790][ T5946] dvb-usb: MAC address: 02:02:02:02:02:02 [ 1940.053446][ T5946] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1940.077975][ T5946] dvb-usb: bulk message failed: -22 (1/0) [ 1940.077994][ T5946] dw2102: command 0x51 transfer failed. [ 1940.110884][ T5946] DVB: Unable to find symbol m88rs2000_attach() [ 1940.110898][ T5946] dvb-usb: no frontend was attached by 'TeVii S632 USB' [ 1940.173355][ T5946] rc_core: IR keymap rc-su3000 not found [ 1940.173387][ T5946] Registered IR keymap rc-empty [ 1940.174423][ T5946] rc rc0: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1940.176058][ T5946] input: TeVii S632 USB as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input177 [ 1940.177442][ T5946] dvb-usb: schedule remote query interval to 150 msecs. [ 1940.177461][ T5946] dw2102: su3000_power_ctrl: 0, initialized 1 [ 1940.177475][ T5946] dvb-usb: TeVii S632 USB successfully initialized and connected. [ 1940.243988][ T5946] usb 5-1: USB disconnect, device number 38 [ 1940.278427][ T5946] dvb-usb: TeVii S632 USB successfully deinitialized and disconnected. [ 1940.578051][T28913] Bluetooth: hci8: command tx timeout [ 1940.958705][T20220] overlayfs: failed to resolve './file1': -2 [ 1941.011430][T20223] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1941.193218][T20239] netlink: 'syz.4.13592': attribute type 11 has an invalid length. [ 1941.195515][T20239] /dev/rnullb0: Can't open blockdev [ 1941.350445][T20251] /dev/rnullb0: Can't open blockdev [ 1941.609947][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1941.622379][T20264] overlayfs: failed to resolve './file1': -2 [ 1941.669505][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1941.696309][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1941.710014][T20270] overlay: filesystem on ./bus not supported as upperdir [ 1941.756882][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1941.766675][T20274] FAULT_INJECTION: forcing a failure. [ 1941.766675][T20274] name failslab, interval 1, probability 0, space 0, times 0 [ 1941.766725][T20274] CPU: 1 UID: 0 PID: 20274 Comm: syz.7.13600 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1941.766747][T20274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1941.766760][T20274] Call Trace: [ 1941.766768][T20274] [ 1941.766776][T20274] dump_stack_lvl+0x189/0x250 [ 1941.766808][T20274] ? __pfx____ratelimit+0x10/0x10 [ 1941.766833][T20274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1941.766861][T20274] ? __pfx__printk+0x10/0x10 [ 1941.766887][T20274] ? fs_reclaim_acquire+0x7d/0x100 [ 1941.766908][T20274] ? __pfx___might_resched+0x10/0x10 [ 1941.766931][T20274] ? lock_acquire+0x5f/0x360 [ 1941.766953][T20274] should_fail_ex+0x414/0x560 [ 1941.766983][T20274] should_failslab+0xa8/0x100 [ 1941.767002][T20274] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1941.767029][T20274] ? vm_area_dup+0x2b/0x680 [ 1941.767049][T20274] vm_area_dup+0x2b/0x680 [ 1941.767068][T20274] __split_vma+0x1a9/0xa00 [ 1941.767093][T20274] ? mas_next_slot+0xc20/0xcf0 [ 1941.767117][T20274] ? __pfx___split_vma+0x10/0x10 [ 1941.767146][T20274] ? mas_find+0xb0e/0xd30 [ 1941.767171][T20274] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 1941.767203][T20274] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1941.767241][T20274] ? mas_find+0xa7d/0xd30 [ 1941.767263][T20274] mmap_region+0x724/0x20c0 [ 1941.767286][T20274] ? mntput_no_expire+0xb9/0x9d0 [ 1941.767303][T20274] ? rcu_is_watching+0x15/0xb0 [ 1941.767334][T20274] ? unwind_next_frame+0xa5/0x2390 [ 1941.767358][T20274] ? __pfx_mmap_region+0x10/0x10 [ 1941.767381][T20274] ? is_bpf_text_address+0x26/0x2b0 [ 1941.767400][T20274] ? rcu_is_watching+0x15/0xb0 [ 1941.767423][T20274] ? rcu_is_watching+0x15/0xb0 [ 1941.767464][T20274] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1941.767491][T20274] ? aa_file_perm+0x13e/0x11b0 [ 1941.767509][T20274] ? rcu_is_watching+0x15/0xb0 [ 1941.767532][T20274] ? apparmor_capable+0x137/0x1b0 [ 1941.767552][T20274] ? bpf_lsm_capable+0x9/0x20 [ 1941.767566][T20274] ? security_capable+0x7e/0x2e0 [ 1941.767590][T20274] ? shmem_mapping+0xd/0x50 [ 1941.767610][T20274] ? memfd_check_seals_mmap+0xc5/0x200 [ 1941.767636][T20274] do_mmap+0xc45/0x10d0 [ 1941.767659][T20274] ? lock_release+0x4b/0x3e0 [ 1941.767677][T20274] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1941.767705][T20274] ? __pfx_do_mmap+0x10/0x10 [ 1941.767726][T20274] ? down_write_killable+0x178/0x230 [ 1941.767754][T20274] ? __pfx_down_write_killable+0x10/0x10 [ 1941.767778][T20274] ? common_file_perm+0x1b5/0x230 [ 1941.767806][T20274] vm_mmap_pgoff+0x2a6/0x4d0 [ 1941.767829][T20274] ? rcu_is_watching+0x15/0xb0 [ 1941.767852][T20274] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1941.767872][T20274] ? lock_release+0x4b/0x3e0 [ 1941.767894][T20274] ? __fget_files+0x3a0/0x420 [ 1941.767914][T20274] ? __fget_files+0x2a/0x420 [ 1941.767934][T20274] ksys_mmap_pgoff+0x51f/0x760 [ 1941.767961][T20274] do_syscall_64+0xfa/0x3b0 [ 1941.767986][T20274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.768003][T20274] ? clear_bhb_loop+0x60/0xb0 [ 1941.768022][T20274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1941.768039][T20274] RIP: 0033:0x7f1b7538e929 [ 1941.768054][T20274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1941.768069][T20274] RSP: 002b:00007f1b76244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1941.768088][T20274] RAX: ffffffffffffffda RBX: 00007f1b755b5fa0 RCX: 00007f1b7538e929 [ 1941.768102][T20274] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1941.768114][T20274] RBP: 00007f1b76244090 R08: 0000000000000003 R09: 0000000000002000 [ 1941.768125][T20274] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000001 [ 1941.768137][T20274] R13: 0000000000000000 R14: 00007f1b755b5fa0 R15: 00007ffebf0af748 [ 1941.768155][T20274] [ 1941.809047][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1941.896984][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1941.909143][T20284] netlink: 'syz.7.13602': attribute type 11 has an invalid length. [ 1941.911339][T20284] /dev/rnullb0: Can't open blockdev [ 1941.948144][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1942.016502][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1942.033784][T29506] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1942.033820][T29506] usb 7-1: setting power ON [ 1942.033841][T29506] dvb-usb: bulk message failed: -22 (2/0) [ 1942.040022][T29506] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1942.040469][T29506] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1942.040506][T29506] usb 7-1: media controller created [ 1942.059792][T29506] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1942.084128][T29506] usb 7-1: selecting invalid altsetting 6 [ 1942.084147][T29506] usb 7-1: digital interface selection failed (-22) [ 1942.084161][T29506] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1942.084674][T29506] usb 7-1: setting power OFF [ 1942.084689][T29506] dvb-usb: bulk message failed: -22 (2/0) [ 1942.084703][T29506] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1942.084715][T29506] (NULL device *): no alternate interface [ 1942.092982][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1942.118290][T29506] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1942.165414][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1942.637727][T20333] loop3: detected capacity change from 0 to 1 [ 1942.638778][T20333] Dev loop3: unable to read RDB block 1 [ 1942.638817][T20333] loop3: unable to read partition table [ 1942.638943][T20333] loop3: partition table beyond EOD, truncated [ 1942.652080][T20333] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1942.725433][T20341] loop3: detected capacity change from 0 to 1 [ 1942.729397][T19965] Dev loop3: unable to read RDB block 1 [ 1942.729438][T19965] loop3: unable to read partition table [ 1942.729582][T19965] loop3: partition table beyond EOD, truncated [ 1942.736251][T20341] Dev loop3: unable to read RDB block 1 [ 1942.736287][T20341] loop3: unable to read partition table [ 1942.736408][T20341] loop3: partition table beyond EOD, truncated [ 1942.736425][T20341] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1942.744600][T20339] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1942.802069][T28913] Bluetooth: hci8: command tx timeout [ 1942.861399][T20349] netlink: 'syz.7.13619': attribute type 11 has an invalid length. [ 1943.007353][T20364] FAULT_INJECTION: forcing a failure. [ 1943.007353][T20364] name failslab, interval 1, probability 0, space 0, times 0 [ 1943.007382][T20364] CPU: 1 UID: 0 PID: 20364 Comm: syz.7.13626 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1943.007404][T20364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1943.007416][T20364] Call Trace: [ 1943.007423][T20364] [ 1943.007430][T20364] dump_stack_lvl+0x189/0x250 [ 1943.007459][T20364] ? __pfx____ratelimit+0x10/0x10 [ 1943.007482][T20364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1943.007506][T20364] ? __pfx__printk+0x10/0x10 [ 1943.007531][T20364] ? fs_reclaim_acquire+0x7d/0x100 [ 1943.007549][T20364] ? rcu_is_watching+0x15/0xb0 [ 1943.007570][T20364] ? __pfx___might_resched+0x10/0x10 [ 1943.007592][T20364] ? lock_acquire+0x5f/0x360 [ 1943.007613][T20364] should_fail_ex+0x414/0x560 [ 1943.007641][T20364] should_failslab+0xa8/0x100 [ 1943.007659][T20364] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1943.007684][T20364] ? mas_alloc_nodes+0x2e9/0x8e0 [ 1943.007707][T20364] mas_alloc_nodes+0x2e9/0x8e0 [ 1943.007732][T20364] mas_preallocate+0x3ad/0x6f0 [ 1943.007755][T20364] ? __pfx_mas_preallocate+0x10/0x10 [ 1943.007780][T20364] ? __mas_set_range+0x12f/0x3c0 [ 1943.007805][T20364] __split_vma+0x2fa/0xa00 [ 1943.007831][T20364] ? __pfx___split_vma+0x10/0x10 [ 1943.007858][T20364] ? mas_find+0xb0e/0xd30 [ 1943.007881][T20364] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 1943.007910][T20364] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1943.007936][T20364] ? mas_find+0xa7d/0xd30 [ 1943.007959][T20364] mmap_region+0x724/0x20c0 [ 1943.007982][T20364] ? mntput_no_expire+0xb9/0x9d0 [ 1943.007999][T20364] ? rcu_is_watching+0x15/0xb0 [ 1943.008021][T20364] ? unwind_next_frame+0xa5/0x2390 [ 1943.008046][T20364] ? __pfx_mmap_region+0x10/0x10 [ 1943.008068][T20364] ? is_bpf_text_address+0x26/0x2b0 [ 1943.008088][T20364] ? rcu_is_watching+0x15/0xb0 [ 1943.008111][T20364] ? rcu_is_watching+0x15/0xb0 [ 1943.008153][T20364] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1943.008178][T20364] ? aa_file_perm+0x13e/0x11b0 [ 1943.008197][T20364] ? rcu_is_watching+0x15/0xb0 [ 1943.008220][T20364] ? apparmor_capable+0x137/0x1b0 [ 1943.008246][T20364] ? bpf_lsm_capable+0x9/0x20 [ 1943.008261][T20364] ? security_capable+0x7e/0x2e0 [ 1943.008285][T20364] ? shmem_mapping+0xd/0x50 [ 1943.008304][T20364] ? memfd_check_seals_mmap+0xc5/0x200 [ 1943.008328][T20364] do_mmap+0xc45/0x10d0 [ 1943.008351][T20364] ? lock_release+0x4b/0x3e0 [ 1943.008368][T20364] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1943.008396][T20364] ? __pfx_do_mmap+0x10/0x10 [ 1943.008417][T20364] ? down_write_killable+0x178/0x230 [ 1943.008444][T20364] ? __pfx_down_write_killable+0x10/0x10 [ 1943.008469][T20364] ? common_file_perm+0x1b5/0x230 [ 1943.008497][T20364] vm_mmap_pgoff+0x2a6/0x4d0 [ 1943.008520][T20364] ? rcu_is_watching+0x15/0xb0 [ 1943.008542][T20364] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1943.008563][T20364] ? lock_release+0x4b/0x3e0 [ 1943.008585][T20364] ? __fget_files+0x3a0/0x420 [ 1943.008604][T20364] ? __fget_files+0x2a/0x420 [ 1943.008625][T20364] ksys_mmap_pgoff+0x51f/0x760 [ 1943.008651][T20364] do_syscall_64+0xfa/0x3b0 [ 1943.008675][T20364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.008692][T20364] ? clear_bhb_loop+0x60/0xb0 [ 1943.008711][T20364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1943.008727][T20364] RIP: 0033:0x7f1b7538e929 [ 1943.008742][T20364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1943.008757][T20364] RSP: 002b:00007f1b76244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1943.008776][T20364] RAX: ffffffffffffffda RBX: 00007f1b755b5fa0 RCX: 00007f1b7538e929 [ 1943.008789][T20364] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1943.008801][T20364] RBP: 00007f1b76244090 R08: 0000000000000003 R09: 0000000000002000 [ 1943.008813][T20364] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000001 [ 1943.008824][T20364] R13: 0000000000000000 R14: 00007f1b755b5fa0 R15: 00007ffebf0af748 [ 1943.008843][T20364] [ 1943.066257][T20366] loop3: detected capacity change from 0 to 1 [ 1943.066824][T20366] Dev loop3: unable to read RDB block 1 [ 1943.066863][T20366] loop3: unable to read partition table [ 1943.066989][T20366] loop3: partition table beyond EOD, truncated [ 1943.067007][T20366] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1945.024823][T28913] Bluetooth: hci8: command tx timeout [ 1946.326712][T20476] netlink: 'syz.4.13630': attribute type 11 has an invalid length. [ 1946.366422][T20478] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1946.559201][T20502] /dev/rnullb0: Can't open blockdev [ 1946.594459][T20507] overlayfs: failed to resolve './file1': -2 [ 1946.634038][T20509] netlink: 'syz.0.13643': attribute type 11 has an invalid length. [ 1946.677793][T20515] netlink: 'syz.4.13648': attribute type 11 has an invalid length. [ 1946.853863][ T30] audit: type=1800 audit(6291405184.613:9295): pid=20524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13651" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1947.021229][T20531] overlayfs: failed to resolve './file1': -2 [ 1947.145274][T20541] netlink: 'syz.4.13660': attribute type 11 has an invalid length. [ 1947.197493][T20545] /dev/rnullb0: Can't open blockdev [ 1947.242035][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13664'. [ 1947.568687][ T1073] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1947.729020][ T1073] usb 5-1: Using ep0 maxpacket: 32 [ 1947.733929][ T1073] usb 5-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 1947.733956][ T1073] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1947.733973][ T1073] usb 5-1: Product: syz [ 1947.733986][ T1073] usb 5-1: Manufacturer: syz [ 1947.733999][ T1073] usb 5-1: SerialNumber: syz [ 1947.736545][ T1073] empeg 5-1:1.0: empeg converter detected [ 1947.951556][ T1073] empeg 5-1:1.0: probe with driver empeg failed with error -71 [ 1947.956639][ T1073] usb 5-1: USB disconnect, device number 39 [ 1948.550068][T20554] overlayfs: failed to resolve './file1': -2 [ 1949.761331][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1949.792539][T20578] overlayfs: failed to resolve './file0': -2 [ 1949.844802][T20583] overlayfs: failed to resolve './file0': -2 [ 1949.881227][ T30] audit: type=1800 audit(6291405187.448:9296): pid=20581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.13673" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1949.896694][T20587] netlink: 'syz.4.13679': attribute type 11 has an invalid length. [ 1949.933472][T20589] FAULT_INJECTION: forcing a failure. [ 1949.933472][T20589] name failslab, interval 1, probability 0, space 0, times 0 [ 1949.933499][T20589] CPU: 0 UID: 0 PID: 20589 Comm: syz.4.13680 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1949.933520][T20589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1949.933531][T20589] Call Trace: [ 1949.933539][T20589] [ 1949.933547][T20589] dump_stack_lvl+0x189/0x250 [ 1949.933576][T20589] ? __pfx____ratelimit+0x10/0x10 [ 1949.933598][T20589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1949.933622][T20589] ? __pfx__printk+0x10/0x10 [ 1949.933647][T20589] ? fs_reclaim_acquire+0x7d/0x100 [ 1949.933722][T20589] ? __pfx___might_resched+0x10/0x10 [ 1949.933751][T20589] ? lock_acquire+0x5f/0x360 [ 1949.933771][T20589] should_fail_ex+0x414/0x560 [ 1949.933801][T20589] should_failslab+0xa8/0x100 [ 1949.933818][T20589] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1949.933844][T20589] ? getname_flags+0xb8/0x540 [ 1949.933868][T20589] getname_flags+0xb8/0x540 [ 1949.933890][T20589] do_sys_openat2+0xbc/0x1c0 [ 1949.933914][T20589] ? __pfx_do_sys_openat2+0x10/0x10 [ 1949.933938][T20589] ? ksys_write+0x22a/0x250 [ 1949.933960][T20589] ? __pfx_ksys_write+0x10/0x10 [ 1949.933979][T20589] __x64_sys_openat+0x138/0x170 [ 1949.934004][T20589] do_syscall_64+0xfa/0x3b0 [ 1949.934029][T20589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.934046][T20589] ? clear_bhb_loop+0x60/0xb0 [ 1949.934064][T20589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1949.934081][T20589] RIP: 0033:0x7f139bf8d290 [ 1949.934096][T20589] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1949.934112][T20589] RSP: 002b:00007f139ce0af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1949.934131][T20589] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f139bf8d290 [ 1949.934143][T20589] RDX: 0000000000000002 RSI: 00007f139ce0afa0 RDI: 00000000ffffff9c [ 1949.934155][T20589] RBP: 00007f139ce0afa0 R08: 0000000000000000 R09: 0000000000000000 [ 1949.934166][T20589] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1949.934177][T20589] R13: 0000000000000001 R14: 00007f139c1b5fa0 R15: 00007fffcb3100f8 [ 1949.934196][T20589] [ 1950.136627][T20599] overlayfs: failed to resolve './file0': -2 [ 1950.165094][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1950.201407][T20601] overlayfs: failed to resolve './file0': -2 [ 1950.237071][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1950.286080][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1950.293466][T20607] FAULT_INJECTION: forcing a failure. [ 1950.293466][T20607] name failslab, interval 1, probability 0, space 0, times 0 [ 1950.293494][T20607] CPU: 1 UID: 0 PID: 20607 Comm: syz.4.13690 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1950.293516][T20607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1950.293529][T20607] Call Trace: [ 1950.293536][T20607] [ 1950.293543][T20607] dump_stack_lvl+0x189/0x250 [ 1950.293572][T20607] ? __pfx____ratelimit+0x10/0x10 [ 1950.293595][T20607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1950.293619][T20607] ? __pfx__printk+0x10/0x10 [ 1950.293650][T20607] ? fs_reclaim_acquire+0x7d/0x100 [ 1950.293669][T20607] ? __pfx___might_resched+0x10/0x10 [ 1950.293690][T20607] ? lock_acquire+0x5f/0x360 [ 1950.293711][T20607] should_fail_ex+0x414/0x560 [ 1950.293739][T20607] should_failslab+0xa8/0x100 [ 1950.293756][T20607] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1950.293781][T20607] ? vm_area_alloc+0x24/0x140 [ 1950.293800][T20607] vm_area_alloc+0x24/0x140 [ 1950.293817][T20607] mmap_region+0xdc7/0x20c0 [ 1950.293841][T20607] ? mntput_no_expire+0xb9/0x9d0 [ 1950.293857][T20607] ? rcu_is_watching+0x15/0xb0 [ 1950.293880][T20607] ? unwind_next_frame+0xa5/0x2390 [ 1950.293904][T20607] ? __pfx_mmap_region+0x10/0x10 [ 1950.293929][T20607] ? rcu_is_watching+0x15/0xb0 [ 1950.293971][T20607] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1950.293997][T20607] ? aa_file_perm+0x13e/0x11b0 [ 1950.294019][T20607] ? bpf_lsm_capable+0x9/0x20 [ 1950.294034][T20607] ? security_capable+0x7e/0x2e0 [ 1950.294059][T20607] ? shmem_mapping+0xd/0x50 [ 1950.294078][T20607] ? memfd_check_seals_mmap+0xc5/0x200 [ 1950.294103][T20607] do_mmap+0xc45/0x10d0 [ 1950.294125][T20607] ? lock_release+0x4b/0x3e0 [ 1950.294143][T20607] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1950.294171][T20607] ? __pfx_do_mmap+0x10/0x10 [ 1950.294193][T20607] ? down_write_killable+0x178/0x230 [ 1950.294221][T20607] ? __pfx_down_write_killable+0x10/0x10 [ 1950.294247][T20607] ? common_file_perm+0x1b5/0x230 [ 1950.294282][T20607] vm_mmap_pgoff+0x2a6/0x4d0 [ 1950.294306][T20607] ? rcu_is_watching+0x15/0xb0 [ 1950.294329][T20607] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1950.294349][T20607] ? lock_release+0x4b/0x3e0 [ 1950.294371][T20607] ? __fget_files+0x3a0/0x420 [ 1950.294390][T20607] ? __fget_files+0x2a/0x420 [ 1950.294411][T20607] ksys_mmap_pgoff+0x51f/0x760 [ 1950.294439][T20607] do_syscall_64+0xfa/0x3b0 [ 1950.294463][T20607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.294482][T20607] ? clear_bhb_loop+0x60/0xb0 [ 1950.294501][T20607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1950.294518][T20607] RIP: 0033:0x7f139bf8e929 [ 1950.294531][T20607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1950.294546][T20607] RSP: 002b:00007f139ce0b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1950.294564][T20607] RAX: ffffffffffffffda RBX: 00007f139c1b5fa0 RCX: 00007f139bf8e929 [ 1950.294577][T20607] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1950.294590][T20607] RBP: 00007f139ce0b090 R08: 0000000000000003 R09: 0000000000002000 [ 1950.294601][T20607] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000001 [ 1950.294612][T20607] R13: 0000000000000000 R14: 00007f139c1b5fa0 R15: 00007fffcb3100f8 [ 1950.294631][T20607] [ 1950.333353][T20612] netlink: 'syz.0.13691': attribute type 10 has an invalid length. [ 1950.334574][T20612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1950.397236][T20619] /dev/rnullb0: Can't open blockdev [ 1950.494301][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1950.526198][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1950.560094][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1952.782168][ T725] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1952.782445][ T725] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1952.782646][ T725] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1952.783328][ T725] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1952.783796][ T725] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1952.876236][T20632] chnl_net:caif_netlink_parms(): no params data found [ 1952.915811][T20632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1952.915909][T20632] bridge0: port 1(bridge_slave_0) entered disabled state [ 1952.916017][T20632] bridge_slave_0: entered allmulticast mode [ 1952.916887][T20632] bridge_slave_0: entered promiscuous mode [ 1952.918338][T20632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1952.918404][T20632] bridge0: port 2(bridge_slave_1) entered disabled state [ 1952.918499][T20632] bridge_slave_1: entered allmulticast mode [ 1952.919217][T20632] bridge_slave_1: entered promiscuous mode [ 1952.933876][T20632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1952.935935][T20632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1952.950794][T20632] team0: Port device team_slave_0 added [ 1952.952344][T20632] team0: Port device team_slave_1 added [ 1952.966623][T20632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1952.966647][T20632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1952.966796][T20632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1952.968011][T20632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1952.968024][T20632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1952.968063][T20632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1952.993389][T20632] hsr_slave_0: entered promiscuous mode [ 1952.994016][T20632] hsr_slave_1: entered promiscuous mode [ 1952.994399][T20632] debugfs: 'hsr0' already exists in 'hsr' [ 1952.994416][T20632] Cannot create hsr debugfs directory [ 1953.346778][T20632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1953.349381][T20632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1953.354852][T20632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1953.357113][T20632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1953.378028][T20632] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.378105][T20632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1953.378295][T20632] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.378377][T20632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1953.428666][T20632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1953.435608][ T3560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1953.436071][ T3560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1953.445281][T20632] 8021q: adding VLAN 0 to HW filter on device team0 [ 1953.452246][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1953.452310][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1953.465268][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1953.465337][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1953.637965][T20632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1953.678051][T20632] veth0_vlan: entered promiscuous mode [ 1953.682711][T20632] veth1_vlan: entered promiscuous mode [ 1953.709707][T20632] veth0_macvtap: entered promiscuous mode [ 1953.712738][T20632] veth1_macvtap: entered promiscuous mode [ 1953.735683][T20632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1953.738859][T20632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1953.753908][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.753945][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.753974][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.754001][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1953.764757][T20681] overlayfs: failed to resolve './file0': -2 [ 1953.815367][T20632] ieee80211 phy127: Selected rate control algorithm 'minstrel_ht' [ 1953.842579][T20687] overlayfs: failed to resolve './file1': -2 [ 1953.849261][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1953.861224][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1953.861245][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1953.881724][T20632] ieee80211 phy128: Selected rate control algorithm 'minstrel_ht' [ 1953.912789][T29125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1953.912806][T29125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1954.023725][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1954.094034][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1954.108822][ T30] audit: type=1800 audit(6291405191.396:9297): pid=20703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13695" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1954.260326][T22955] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1954.395707][T20718] FAULT_INJECTION: forcing a failure. [ 1954.395707][T20718] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1954.395737][T20718] CPU: 1 UID: 0 PID: 20718 Comm: syz.7.13709 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1954.395759][T20718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1954.395770][T20718] Call Trace: [ 1954.395778][T20718] [ 1954.395786][T20718] dump_stack_lvl+0x189/0x250 [ 1954.395816][T20718] ? __pfx____ratelimit+0x10/0x10 [ 1954.395839][T20718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1954.395863][T20718] ? __pfx__printk+0x10/0x10 [ 1954.395888][T20718] ? lock_acquire+0x5f/0x360 [ 1954.395910][T20718] should_fail_ex+0x414/0x560 [ 1954.395939][T20718] prepare_alloc_pages+0x213/0x610 [ 1954.395962][T20718] __alloc_frozen_pages_noprof+0x123/0x370 [ 1954.395983][T20718] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1954.396008][T20718] ? policy_nodemask+0x27c/0x720 [ 1954.396033][T20718] ? do_raw_spin_lock+0x121/0x290 [ 1954.396060][T20718] alloc_pages_mpol+0x232/0x4a0 [ 1954.396089][T20718] alloc_pages_noprof+0xa9/0x190 [ 1954.396106][T20718] __pmd_alloc+0x3a/0x3b0 [ 1954.396132][T20718] __handle_mm_fault+0x9ad/0x5440 [ 1954.396162][T20718] ? __pfx___handle_mm_fault+0x10/0x10 [ 1954.396186][T20718] ? rcu_is_watching+0x15/0xb0 [ 1954.396221][T20718] ? find_vma+0xe7/0x160 [ 1954.396244][T20718] ? __pfx_find_vma+0x10/0x10 [ 1954.396269][T20718] handle_mm_fault+0x40a/0x8e0 [ 1954.396298][T20718] do_user_addr_fault+0x764/0x1390 [ 1954.396331][T20718] exc_page_fault+0x76/0xf0 [ 1954.396355][T20718] asm_exc_page_fault+0x26/0x30 [ 1954.396371][T20718] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1954.396391][T20718] Code: c4 10 e9 44 01 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 01 04 00 66 2e [ 1954.396407][T20718] RSP: 0018:ffffc9000ccc7a38 EFLAGS: 00050202 [ 1954.396423][T20718] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1954.396435][T20718] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000ccc7ae0 [ 1954.396448][T20718] RBP: ffffc9000ccc7d90 R08: ffffc9000ccc7ae3 R09: 1ffff92001998f5c [ 1954.396461][T20718] R10: dffffc0000000000 R11: fffff52001998f5d R12: dffffc0000000000 [ 1954.396475][T20718] R13: ffffc9000ccc7ae0 R14: ffffc9000ccc7ae0 R15: 0000200000000040 [ 1954.396496][T20718] _copy_from_user+0x7a/0xb0 [ 1954.396522][T20718] ? semctl_main+0xee/0x15f0 [ 1954.396545][T20718] semctl_main+0x6f5/0x15f0 [ 1954.396568][T20718] ? semctl_main+0xee/0x15f0 [ 1954.396593][T20718] ? __pfx_semctl_main+0x10/0x10 [ 1954.396637][T20718] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1954.396662][T20718] ? __pfx_vfs_write+0x10/0x10 [ 1954.396683][T20718] __se_sys_semctl+0x31c/0x3a0 [ 1954.396706][T20718] ? __pfx___se_sys_semctl+0x10/0x10 [ 1954.396730][T20718] ? __pfx_ksys_write+0x10/0x10 [ 1954.396746][T20718] ? rcu_is_watching+0x15/0xb0 [ 1954.396769][T20718] ? rcu_is_watching+0x15/0xb0 [ 1954.396791][T20718] do_syscall_64+0xfa/0x3b0 [ 1954.396815][T20718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.396831][T20718] ? clear_bhb_loop+0x60/0xb0 [ 1954.396896][T20718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.396914][T20718] RIP: 0033:0x7f1b7538e929 [ 1954.396928][T20718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1954.396943][T20718] RSP: 002b:00007f1b76244038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1954.396961][T20718] RAX: ffffffffffffffda RBX: 00007f1b755b5fa0 RCX: 00007f1b7538e929 [ 1954.396974][T20718] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 1954.396985][T20718] RBP: 00007f1b76244090 R08: 0000000000000000 R09: 0000000000000000 [ 1954.396997][T20718] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1954.397008][T20718] R13: 0000000000000000 R14: 00007f1b755b5fa0 R15: 00007ffebf0af748 [ 1954.397027][T20718] [ 1954.451036][T22955] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1954.451071][T22955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1954.451099][T22955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1954.451123][T22955] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1954.451163][T22955] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1954.451187][T22955] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.456586][T22955] usb 5-1: config 0 descriptor?? [ 1954.543117][T20730] overlayfs: failed to resolve './file1': -2 [ 1954.733263][ T5946] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 1954.896509][ T5946] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1954.896542][ T5946] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1954.896574][ T5946] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1954.896596][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.909835][T22955] plantronics 0003:047F:FFFF.0069: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1954.926851][T20752] FAULT_INJECTION: forcing a failure. [ 1954.926851][T20752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1954.926878][T20752] CPU: 1 UID: 0 PID: 20752 Comm: syz.7.13718 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1954.926899][T20752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1954.926914][T20752] Call Trace: [ 1954.926921][T20752] [ 1954.926929][T20752] dump_stack_lvl+0x189/0x250 [ 1954.926957][T20752] ? __pfx____ratelimit+0x10/0x10 [ 1954.926980][T20752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1954.927004][T20752] ? __pfx__printk+0x10/0x10 [ 1954.927038][T20752] ? rcu_is_watching+0x15/0xb0 [ 1954.927062][T20752] should_fail_ex+0x414/0x560 [ 1954.927091][T20752] _copy_to_user+0x31/0xb0 [ 1954.927118][T20752] simple_read_from_buffer+0xe1/0x170 [ 1954.927140][T20752] proc_fail_nth_read+0x1df/0x250 [ 1954.927165][T20752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1954.927189][T20752] ? rw_verify_area+0x2a6/0x4d0 [ 1954.927206][T20752] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1954.927230][T20752] vfs_read+0x200/0x980 [ 1954.927246][T20752] ? __fget_files+0x2a/0x420 [ 1954.927266][T20752] ? __pfx___mutex_lock+0x10/0x10 [ 1954.927290][T20752] ? __pfx_vfs_read+0x10/0x10 [ 1954.927310][T20752] ? __fget_files+0x3a0/0x420 [ 1954.927329][T20752] ? __fget_files+0x2a/0x420 [ 1954.927353][T20752] ksys_read+0x145/0x250 [ 1954.927369][T20752] ? __pfx_ksys_read+0x10/0x10 [ 1954.927388][T20752] ? rcu_is_watching+0x15/0xb0 [ 1954.927412][T20752] do_syscall_64+0xfa/0x3b0 [ 1954.927437][T20752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.927454][T20752] ? clear_bhb_loop+0x60/0xb0 [ 1954.927473][T20752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.927490][T20752] RIP: 0033:0x7f1b7538d33c [ 1954.927505][T20752] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1954.927521][T20752] RSP: 002b:00007f1b76244030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1954.927539][T20752] RAX: ffffffffffffffda RBX: 00007f1b755b5fa0 RCX: 00007f1b7538d33c [ 1954.927552][T20752] RDX: 000000000000000f RSI: 00007f1b762440a0 RDI: 0000000000000003 [ 1954.927563][T20752] RBP: 00007f1b76244090 R08: 0000000000000000 R09: 0000000000000000 [ 1954.927575][T20752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.927586][T20752] R13: 0000000000000001 R14: 00007f1b755b5fa0 R15: 00007ffebf0af748 [ 1954.927605][T20752] [ 1954.945301][T28913] Bluetooth: hci9: command tx timeout [ 1955.218467][T22955] usb 5-1: USB disconnect, device number 40 [ 1955.350821][ T5946] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 1955.352177][ T5946] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input179 [ 1955.352577][ T5946] input: failed to attach handler kbd to device input179, error: -5 [ 1955.360368][ T5946] usb 3-1: USB disconnect, device number 94 [ 1955.398690][T19965] udevd[19965]: setting mode of /dev/input/mouse1 to 020660 failed: Read-only file system [ 1955.398749][T19965] udevd[19965]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: Read-only file system [ 1955.467212][T19941] udevd[19941]: setting mode of /dev/input/event4 to 020660 failed: Read-only file system [ 1955.467276][T19941] udevd[19941]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: Read-only file system [ 1955.893494][ T30] audit: type=1800 audit(6291405193.070:9298): pid=20761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.13719" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1955.948504][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1955.969308][ T30] audit: type=1800 audit(6291405193.136:9299): pid=20809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13721" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1956.018488][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1956.064427][T20819] /dev/rnullb0: Can't open blockdev [ 1956.089780][T19941] udevd[19941]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1956.147175][ T30] audit: type=1800 audit(6291405193.304:9300): pid=20822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13723" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1956.173389][T19965] udevd[19965]: symlink '../../loop7' '/dev/disk/by-diskseq/1398.tmp-b7:7' failed: Read-only file system [ 1956.214587][T20835] loop3: detected capacity change from 0 to 1 [ 1956.219938][T19965] Dev loop3: unable to read RDB block 1 [ 1956.219974][T19965] loop3: unable to read partition table [ 1956.220095][T19965] loop3: partition table beyond EOD, truncated [ 1956.222229][T20835] Dev loop3: unable to read RDB block 1 [ 1956.222265][T20835] loop3: unable to read partition table [ 1956.222375][T20835] loop3: partition table beyond EOD, truncated [ 1956.222399][T20835] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1956.224642][T19965] udevd[19965]: symlink '../../loop3' '/dev/disk/by-diskseq/1407.tmp-b7:3' failed: Read-only file system [ 1956.235262][T19965] udevd[19965]: symlink '../../loop3' '/dev/disk/by-diskseq/1407.tmp-b7:3' failed: Read-only file system [ 1956.275631][T20840] FAULT_INJECTION: forcing a failure. [ 1956.275631][T20840] name failslab, interval 1, probability 0, space 0, times 0 [ 1956.275657][T20840] CPU: 1 UID: 0 PID: 20840 Comm: syz.2.13729 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1956.275679][T20840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1956.275690][T20840] Call Trace: [ 1956.275697][T20840] [ 1956.275705][T20840] dump_stack_lvl+0x189/0x250 [ 1956.275733][T20840] ? __pfx____ratelimit+0x10/0x10 [ 1956.275758][T20840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1956.275781][T20840] ? __pfx__printk+0x10/0x10 [ 1956.275805][T20840] ? fs_reclaim_acquire+0x7d/0x100 [ 1956.275824][T20840] ? __pfx___might_resched+0x10/0x10 [ 1956.275846][T20840] ? lock_acquire+0x5f/0x360 [ 1956.275867][T20840] should_fail_ex+0x414/0x560 [ 1956.275896][T20840] should_failslab+0xa8/0x100 [ 1956.275931][T20840] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1956.275956][T20840] ? alloc_empty_file+0x55/0x1d0 [ 1956.275981][T20840] alloc_empty_file+0x55/0x1d0 [ 1956.276003][T20840] path_openat+0x107/0x3830 [ 1956.276029][T20840] ? arch_stack_walk+0xfc/0x150 [ 1956.276064][T20840] ? kasan_save_track+0x4f/0x80 [ 1956.276088][T20840] ? kasan_save_track+0x3e/0x80 [ 1956.276110][T20840] ? __kasan_slab_alloc+0x6c/0x80 [ 1956.276134][T20840] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1956.276158][T20840] ? getname_flags+0xb8/0x540 [ 1956.276179][T20840] ? __pfx_path_openat+0x10/0x10 [ 1956.276204][T20840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.276229][T20840] do_filp_open+0x1fa/0x410 [ 1956.276256][T20840] ? __pfx_do_filp_open+0x10/0x10 [ 1956.276290][T20840] ? _raw_spin_unlock+0x28/0x50 [ 1956.276310][T20840] ? alloc_fd+0x64c/0x6c0 [ 1956.276334][T20840] do_sys_openat2+0x121/0x1c0 [ 1956.276362][T20840] ? __pfx_do_sys_openat2+0x10/0x10 [ 1956.276385][T20840] ? ksys_write+0x22a/0x250 [ 1956.276403][T20840] ? __pfx_ksys_write+0x10/0x10 [ 1956.276421][T20840] __x64_sys_openat+0x138/0x170 [ 1956.276447][T20840] do_syscall_64+0xfa/0x3b0 [ 1956.276471][T20840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.276488][T20840] ? clear_bhb_loop+0x60/0xb0 [ 1956.276507][T20840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.276524][T20840] RIP: 0033:0x7f503b78d290 [ 1956.276539][T20840] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1956.276555][T20840] RSP: 002b:00007f503c59ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1956.276573][T20840] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f503b78d290 [ 1956.276586][T20840] RDX: 0000000000000002 RSI: 00007f503c59ffa0 RDI: 00000000ffffff9c [ 1956.276598][T20840] RBP: 00007f503c59ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1956.276610][T20840] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1956.276620][T20840] R13: 0000000000000001 R14: 00007f503b9b5fa0 R15: 00007fff2584be88 [ 1956.276639][T20840] [ 1956.286658][T20837] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1956.414460][T20849] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1957.176609][T28913] Bluetooth: hci9: command tx timeout [ 1957.438771][ T30] audit: type=1800 audit(6291405194.520:9301): pid=20860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13733" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1957.563501][T29506] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 1957.728322][T29506] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1957.728351][T29506] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1957.728386][T29506] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1957.728407][T29506] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1957.730247][T29506] usb 5-1: config 0 descriptor?? [ 1957.783732][ T30] audit: type=1800 audit(6291405194.839:9302): pid=20925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13743" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1958.040657][T20944] overlayfs: failed to resolve './file0': -2 [ 1958.163751][T29506] lenovo 0003:17EF:6067.006A: unknown main item tag 0x2 [ 1958.163785][T29506] lenovo 0003:17EF:6067.006A: unknown main item tag 0x4 [ 1958.163810][T29506] lenovo 0003:17EF:6067.006A: item fetching failed at offset 10/11 [ 1958.164184][T29506] lenovo 0003:17EF:6067.006A: hid_parse failed [ 1958.164232][T29506] lenovo 0003:17EF:6067.006A: probe with driver lenovo failed with error -22 [ 1958.386057][T22955] usb 5-1: USB disconnect, device number 41 [ 1958.979716][ T30] audit: type=1800 audit(6291405195.961:9303): pid=20953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.13747" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1959.037450][T21006] FAULT_INJECTION: forcing a failure. [ 1959.037450][T21006] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.037478][T21006] CPU: 0 UID: 0 PID: 21006 Comm: syz.2.13749 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1959.037500][T21006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1959.037511][T21006] Call Trace: [ 1959.037518][T21006] [ 1959.037526][T21006] dump_stack_lvl+0x189/0x250 [ 1959.037555][T21006] ? __pfx____ratelimit+0x10/0x10 [ 1959.037579][T21006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1959.037603][T21006] ? __pfx__printk+0x10/0x10 [ 1959.037627][T21006] ? fs_reclaim_acquire+0x7d/0x100 [ 1959.037645][T21006] ? __pfx___might_resched+0x10/0x10 [ 1959.037667][T21006] ? lock_acquire+0x5f/0x360 [ 1959.037696][T21006] should_fail_ex+0x414/0x560 [ 1959.037725][T21006] should_failslab+0xa8/0x100 [ 1959.037743][T21006] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1959.037768][T21006] ? __pmd_alloc+0xc6/0x3b0 [ 1959.037794][T21006] __pmd_alloc+0xc6/0x3b0 [ 1959.037820][T21006] __handle_mm_fault+0x9ad/0x5440 [ 1959.037851][T21006] ? __pfx___handle_mm_fault+0x10/0x10 [ 1959.037875][T21006] ? rcu_is_watching+0x15/0xb0 [ 1959.037905][T21006] ? find_vma+0xe7/0x160 [ 1959.037933][T21006] ? __pfx_find_vma+0x10/0x10 [ 1959.037958][T21006] handle_mm_fault+0x40a/0x8e0 [ 1959.037986][T21006] do_user_addr_fault+0x764/0x1390 [ 1959.038012][T21006] exc_page_fault+0x76/0xf0 [ 1959.038035][T21006] asm_exc_page_fault+0x26/0x30 [ 1959.038051][T21006] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1959.038071][T21006] Code: c4 10 e9 44 01 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 0d 01 04 00 66 2e [ 1959.038087][T21006] RSP: 0018:ffffc9000ceafa38 EFLAGS: 00050202 [ 1959.038104][T21006] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1959.038116][T21006] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000ceafae0 [ 1959.038128][T21006] RBP: ffffc9000ceafd90 R08: ffffc9000ceafae3 R09: 1ffff920019d5f5c [ 1959.038142][T21006] R10: dffffc0000000000 R11: fffff520019d5f5d R12: dffffc0000000000 [ 1959.038155][T21006] R13: ffffc9000ceafae0 R14: ffffc9000ceafae0 R15: 0000200000000040 [ 1959.038176][T21006] _copy_from_user+0x7a/0xb0 [ 1959.038201][T21006] ? semctl_main+0xee/0x15f0 [ 1959.038224][T21006] semctl_main+0x6f5/0x15f0 [ 1959.038247][T21006] ? semctl_main+0xee/0x15f0 [ 1959.038271][T21006] ? __pfx_semctl_main+0x10/0x10 [ 1959.038314][T21006] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1959.038339][T21006] ? __pfx_vfs_write+0x10/0x10 [ 1959.038360][T21006] __se_sys_semctl+0x31c/0x3a0 [ 1959.038382][T21006] ? __pfx___se_sys_semctl+0x10/0x10 [ 1959.038407][T21006] ? __pfx_ksys_write+0x10/0x10 [ 1959.038422][T21006] ? rcu_is_watching+0x15/0xb0 [ 1959.038446][T21006] ? rcu_is_watching+0x15/0xb0 [ 1959.038469][T21006] do_syscall_64+0xfa/0x3b0 [ 1959.038492][T21006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.038510][T21006] ? clear_bhb_loop+0x60/0xb0 [ 1959.038529][T21006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.038545][T21006] RIP: 0033:0x7f503b78e929 [ 1959.038559][T21006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1959.038575][T21006] RSP: 002b:00007f503c5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 1959.038592][T21006] RAX: ffffffffffffffda RBX: 00007f503b9b5fa0 RCX: 00007f503b78e929 [ 1959.038606][T21006] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000000 [ 1959.038617][T21006] RBP: 00007f503c5a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1959.038629][T21006] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1959.038640][T21006] R13: 0000000000000000 R14: 00007f503b9b5fa0 R15: 00007fff2584be88 [ 1959.038659][T21006] [ 1959.147963][T21017] /dev/rnullb0: Can't open blockdev [ 1959.176713][T21020] FAULT_INJECTION: forcing a failure. [ 1959.176713][T21020] name failslab, interval 1, probability 0, space 0, times 0 [ 1959.176741][T21020] CPU: 0 UID: 0 PID: 21020 Comm: syz.2.13754 Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 PREEMPT(full) [ 1959.176763][T21020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1959.176774][T21020] Call Trace: [ 1959.176781][T21020] [ 1959.176789][T21020] dump_stack_lvl+0x189/0x250 [ 1959.176817][T21020] ? __pfx____ratelimit+0x10/0x10 [ 1959.176840][T21020] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1959.176864][T21020] ? __pfx__printk+0x10/0x10 [ 1959.176889][T21020] ? __pfx___might_resched+0x10/0x10 [ 1959.176911][T21020] ? lock_acquire+0x5f/0x360 [ 1959.176939][T21020] should_fail_ex+0x414/0x560 [ 1959.176967][T21020] should_failslab+0xa8/0x100 [ 1959.176985][T21020] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1959.177010][T21020] ? __anon_vma_prepare+0xcb/0x4a0 [ 1959.177028][T21020] __anon_vma_prepare+0xcb/0x4a0 [ 1959.177047][T21020] __handle_mm_fault+0x4ca8/0x5440 [ 1959.177077][T21020] ? __pfx___handle_mm_fault+0x10/0x10 [ 1959.177105][T21020] ? __pfx_mt_find+0x10/0x10 [ 1959.177134][T21020] ? __pfx___might_resched+0x10/0x10 [ 1959.177157][T21020] handle_mm_fault+0x40a/0x8e0 [ 1959.177185][T21020] __get_user_pages+0x1699/0x2ce0 [ 1959.177223][T21020] populate_vma_page_range+0x29f/0x3a0 [ 1959.177247][T21020] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1959.177269][T21020] ? userfaultfd_unmap_complete+0x278/0x2d0 [ 1959.177290][T21020] ? down_read+0x1ad/0x2e0 [ 1959.177315][T21020] __mm_populate+0x24c/0x380 [ 1959.177339][T21020] ? __pfx___mm_populate+0x10/0x10 [ 1959.177362][T21020] ? up_write+0x1c4/0x420 [ 1959.177388][T21020] vm_mmap_pgoff+0x387/0x4d0 [ 1959.177411][T21020] ? rcu_is_watching+0x15/0xb0 [ 1959.177434][T21020] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1959.177455][T21020] ? lock_release+0x4b/0x3e0 [ 1959.177477][T21020] ? __fget_files+0x3a0/0x420 [ 1959.177497][T21020] ? __fget_files+0x2a/0x420 [ 1959.177519][T21020] ksys_mmap_pgoff+0x51f/0x760 [ 1959.177545][T21020] do_syscall_64+0xfa/0x3b0 [ 1959.177570][T21020] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.177587][T21020] ? clear_bhb_loop+0x60/0xb0 [ 1959.177607][T21020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1959.177624][T21020] RIP: 0033:0x7f503b78e929 [ 1959.177640][T21020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1959.177655][T21020] RSP: 002b:00007f503c5a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1959.177673][T21020] RAX: ffffffffffffffda RBX: 00007f503b9b5fa0 RCX: 00007f503b78e929 [ 1959.177687][T21020] RDX: 0000000003000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 1959.177699][T21020] RBP: 00007f503c5a0090 R08: 0000000000000003 R09: 0000000000002000 [ 1959.177711][T21020] R10: 0000000000022052 R11: 0000000000000246 R12: 0000000000000001 [ 1959.177722][T21020] R13: 0000000000000000 R14: 00007f503b9b5fa0 R15: 00007fff2584be88 [ 1959.177741][T21020] [ 1959.240671][ T30] audit: type=1800 audit(6291405196.195:9304): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13752" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1959.393506][T28913] Bluetooth: hci9: command tx timeout [ 1959.446876][T21042] loop3: detected capacity change from 0 to 1 [ 1959.448047][T21042] Dev loop3: unable to read RDB block 1 [ 1959.448084][T21042] loop3: unable to read partition table [ 1959.448204][T21042] loop3: partition table beyond EOD, truncated [ 1959.451884][T21042] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1959.720031][T21063] /dev/rnullb0: Can't open blockdev [ 1959.871788][ T30] audit: type=1800 audit(6291405196.784:9305): pid=21071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13765" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1961.614436][T28913] Bluetooth: hci9: command tx timeout [ 1962.562348][T21168] /dev/rnullb0: Can't open blockdev [ 1962.576216][T21170] loop3: detected capacity change from 0 to 1 [ 1962.578672][T19965] Dev loop3: unable to read RDB block 1 [ 1962.578706][T19965] loop3: unable to read partition table [ 1962.578830][T19965] loop3: partition table beyond EOD, truncated [ 1962.583604][T21170] Dev loop3: unable to read RDB block 1 [ 1962.583649][T21170] loop3: unable to read partition table [ 1962.583763][T21170] loop3: partition table beyond EOD, truncated [ 1962.583781][T21170] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1962.585569][T19965] udevd[19965]: symlink '../../loop3' '/dev/disk/by-diskseq/1411.tmp-b7:3' failed: Read-only file system [ 1962.600329][T19965] udevd[19965]: symlink '../../loop3' '/dev/disk/by-diskseq/1411.tmp-b7:3' failed: Read-only file system [ 1962.609260][T19965] udevd[19965]: symlink '../../loop3' '/dev/disk/by-diskseq/1411.tmp-b7:3' failed: Read-only file system [ 1962.655957][T21177] overlayfs: failed to resolve './file1': -2 [ 1962.706055][ T30] audit: type=1800 audit(6291405199.451:9306): pid=21176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.13771" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1977.263511][ T725] Bluetooth: hci3: command 0x0405 tx timeout [ 2048.411529][T21190] Bluetooth: hci6: command 0x0406 tx timeout [ 2048.411575][T21190] Bluetooth: hci5: command 0x0406 tx timeout [ 2048.411604][T21190] Bluetooth: hci7: command 0x0406 tx timeout [ 2067.395859][ T31] INFO: task kworker/0:4:15977 blocked for more than 143 seconds. [ 2067.395884][ T31] Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 [ 2067.395896][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2067.395906][ T31] task:kworker/0:4 state:D stack:21576 pid:15977 tgid:15977 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2067.395969][ T31] Workqueue: events console_callback [ 2067.395996][ T31] Call Trace: [ 2067.396005][ T31] [ 2067.396015][ T31] __schedule+0x16f5/0x4d00 [ 2067.396046][ T31] ? schedule+0x165/0x360 [ 2067.396069][ T31] ? __pfx___schedule+0x10/0x10 [ 2067.396089][ T31] ? preempt_schedule_common+0x83/0xd0 [ 2067.396113][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 2067.396138][ T31] ? lock_release+0x4b/0x3e0 [ 2067.396162][ T31] schedule+0x165/0x360 [ 2067.396184][ T31] schedule_timeout+0x9a/0x270 [ 2067.396209][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2067.396232][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2067.396254][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2067.396278][ T31] __down_common+0x319/0x6a0 [ 2067.396308][ T31] ? __pfx___down_common+0x10/0x10 [ 2067.396334][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 2067.396361][ T31] down+0x80/0xd0 [ 2067.396386][ T31] console_lock+0x145/0x1b0 [ 2067.396411][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2067.396435][ T31] console_callback+0x69/0x440 [ 2067.396455][ T31] ? __pfx_console_callback+0x10/0x10 [ 2067.396476][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2067.396496][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2067.396518][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2067.396540][ T31] process_scheduled_works+0xade/0x17b0 [ 2067.396573][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2067.396603][ T31] worker_thread+0x8a0/0xda0 [ 2067.396637][ T31] kthread+0x711/0x8a0 [ 2067.396664][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2067.396687][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.396714][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2067.396732][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2067.396753][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.396778][ T31] ret_from_fork+0x3f9/0x770 [ 2067.396800][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2067.396819][ T31] ? __switch_to_asm+0x39/0x70 [ 2067.396836][ T31] ? __switch_to_asm+0x33/0x70 [ 2067.396852][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.396878][ T31] ret_from_fork_asm+0x1a/0x30 [ 2067.396901][ T31] [ 2067.396933][ T31] INFO: task kworker/u8:3:9642 blocked for more than 143 seconds. [ 2067.396947][ T31] Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 [ 2067.396959][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2067.396969][ T31] task:kworker/u8:3 state:D stack:22216 pid:9642 tgid:9642 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2067.397019][ T31] Workqueue: events_unbound flush_to_ldisc [ 2067.397043][ T31] Call Trace: [ 2067.397050][ T31] [ 2067.397060][ T31] __schedule+0x16f5/0x4d00 [ 2067.397088][ T31] ? psi_task_change+0xe5/0x250 [ 2067.397112][ T31] ? schedule+0x165/0x360 [ 2067.397132][ T31] ? __lock_acquire+0xab9/0xd20 [ 2067.397152][ T31] ? __pfx___schedule+0x10/0x10 [ 2067.397176][ T31] ? schedule+0x91/0x360 [ 2067.397206][ T31] schedule+0x165/0x360 [ 2067.397227][ T31] schedule_timeout+0x9a/0x270 [ 2067.397247][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2067.397271][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2067.397292][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2067.397316][ T31] __down_common+0x319/0x6a0 [ 2067.397338][ T31] ? __pfx___down_common+0x10/0x10 [ 2067.397356][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 2067.397373][ T31] ? console_unlock+0x21b/0x270 [ 2067.397393][ T31] down+0x80/0xd0 [ 2067.397411][ T31] console_lock+0x145/0x1b0 [ 2067.397430][ T31] do_con_write+0x102/0x5200 [ 2067.397461][ T31] ? __pfx_do_con_write+0x10/0x10 [ 2067.397477][ T31] ? n_tty_receive_char+0x76c/0xc30 [ 2067.397502][ T31] ? __lock_acquire+0xab9/0xd20 [ 2067.397519][ T31] ? __mutex_trylock_common+0x153/0x260 [ 2067.397538][ T31] con_put_char+0x82/0xc0 [ 2067.397552][ T31] ? __pfx_con_put_char+0x10/0x10 [ 2067.397567][ T31] ? rcu_is_watching+0x15/0xb0 [ 2067.397584][ T31] ? trace_contention_end+0x39/0x120 [ 2067.397602][ T31] ? __pfx_con_put_char+0x10/0x10 [ 2067.397616][ T31] tty_put_char+0xce/0x160 [ 2067.397632][ T31] ? __pfx_tty_put_char+0x10/0x10 [ 2067.397647][ T31] ? __lock_acquire+0xb31/0xd20 [ 2067.397662][ T31] ? n_tty_receive_buf_common+0xbe3/0x12f0 [ 2067.397683][ T31] do_output_char+0x6ac/0x970 [ 2067.397703][ T31] __process_echoes+0x2e1/0xa20 [ 2067.397724][ T31] n_tty_receive_buf_common+0xc29/0x12f0 [ 2067.397753][ T31] tty_port_default_receive_buf+0x6e/0xa0 [ 2067.397770][ T31] flush_to_ldisc+0x247/0x720 [ 2067.397787][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2067.397804][ T31] process_scheduled_works+0xade/0x17b0 [ 2067.397828][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2067.397849][ T31] worker_thread+0x8a0/0xda0 [ 2067.397872][ T31] kthread+0x711/0x8a0 [ 2067.397892][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2067.397908][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.397927][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2067.397943][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2067.397960][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.397979][ T31] ret_from_fork+0x3f9/0x770 [ 2067.397995][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2067.398012][ T31] ? __switch_to_asm+0x39/0x70 [ 2067.398024][ T31] ? __switch_to_asm+0x33/0x70 [ 2067.398035][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.398054][ T31] ret_from_fork_asm+0x1a/0x30 [ 2067.398070][ T31] [ 2067.398088][ T31] INFO: task kworker/0:5:17547 blocked for more than 143 seconds. [ 2067.398097][ T31] Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 [ 2067.398105][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2067.398111][ T31] task:kworker/0:5 state:D stack:21784 pid:17547 tgid:17547 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 2067.398147][ T31] Workqueue: events vc_SAK [ 2067.398159][ T31] Call Trace: [ 2067.398164][ T31] [ 2067.398171][ T31] __schedule+0x16f5/0x4d00 [ 2067.398188][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 2067.398215][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2067.398232][ T31] ? schedule+0x165/0x360 [ 2067.398248][ T31] ? __pfx___schedule+0x10/0x10 [ 2067.398267][ T31] ? lock_release+0x4b/0x3e0 [ 2067.398281][ T31] ? rcu_is_watching+0x15/0xb0 [ 2067.398299][ T31] schedule+0x165/0x360 [ 2067.398315][ T31] schedule_preempt_disabled+0x13/0x30 [ 2067.398331][ T31] __mutex_lock+0x724/0xe80 [ 2067.398348][ T31] ? __lock_acquire+0xab9/0xd20 [ 2067.398362][ T31] ? __mutex_lock+0x51b/0xe80 [ 2067.398381][ T31] ? tty_buffer_flush+0x74/0x2b0 [ 2067.398397][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 2067.398413][ T31] ? do_raw_spin_lock+0x121/0x290 [ 2067.398435][ T31] ? ldsem_down_read_trylock+0x137/0x1a0 [ 2067.398453][ T31] ? tty_ldisc_flush+0x20/0xc0 [ 2067.398466][ T31] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 2067.398486][ T31] tty_buffer_flush+0x74/0x2b0 [ 2067.398502][ T31] tty_ldisc_flush+0x6b/0xc0 [ 2067.398516][ T31] __do_SAK+0x138/0x6d0 [ 2067.398533][ T31] vc_SAK+0x78/0x220 [ 2067.398544][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 2067.398560][ T31] process_scheduled_works+0xade/0x17b0 [ 2067.398584][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 2067.398604][ T31] worker_thread+0x8a0/0xda0 [ 2067.398621][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2067.398639][ T31] ? __kthread_parkme+0x7b/0x200 [ 2067.398659][ T31] kthread+0x711/0x8a0 [ 2067.398679][ T31] ? __pfx_worker_thread+0x10/0x10 [ 2067.398695][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.398714][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 2067.398729][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 2067.398745][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.398764][ T31] ret_from_fork+0x3f9/0x770 [ 2067.398780][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 2067.398796][ T31] ? __switch_to_asm+0x39/0x70 [ 2067.398808][ T31] ? __switch_to_asm+0x33/0x70 [ 2067.398819][ T31] ? __pfx_kthread+0x10/0x10 [ 2067.398838][ T31] ret_from_fork_asm+0x1a/0x30 [ 2067.398854][ T31] [ 2067.398863][ T31] INFO: task syz.8.13471:18962 blocked for more than 143 seconds. [ 2067.398872][ T31] Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 [ 2067.398880][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2067.398886][ T31] task:syz.8.13471 state:D stack:27336 pid:18962 tgid:18961 ppid:16012 task_flags:0x400040 flags:0x00004004 [ 2067.398924][ T31] Call Trace: [ 2067.398929][ T31] [ 2067.398935][ T31] __schedule+0x16f5/0x4d00 [ 2067.398953][ T31] ? stack_trace_save+0x9c/0xe0 [ 2067.398975][ T31] ? vsnprintf+0xe3a/0xf00 [ 2067.398989][ T31] ? schedule+0x165/0x360 [ 2067.399003][ T31] ? kasan_save_track+0x4f/0x80 [ 2067.399021][ T31] ? kasan_save_free_info+0x46/0x50 [ 2067.399036][ T31] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 2067.399055][ T31] ? __pfx___schedule+0x10/0x10 [ 2067.399070][ T31] ? do_filp_open+0x1fa/0x410 [ 2067.399090][ T31] ? __x64_sys_openat+0x138/0x170 [ 2067.399108][ T31] ? schedule+0x91/0x360 [ 2067.399123][ T31] ? rcu_is_watching+0x15/0xb0 [ 2067.399141][ T31] ? lock_release+0x4b/0x3e0 [ 2067.399157][ T31] schedule+0x165/0x360 [ 2067.399173][ T31] schedule_timeout+0x9a/0x270 [ 2067.399187][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 2067.399209][ T31] ? rcu_is_watching+0x15/0xb0 [ 2067.399226][ T31] ? rcu_is_watching+0x15/0xb0 [ 2067.399244][ T31] __down_common+0x319/0x6a0 [ 2067.399265][ T31] ? __pfx___down_common+0x10/0x10 [ 2067.399283][ T31] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 2067.399302][ T31] down+0x80/0xd0 [ 2067.399320][ T31] console_lock+0x145/0x1b0 [ 2067.399338][ T31] vcs_open+0x5d/0xd0 [ 2067.399351][ T31] chrdev_open+0x4c9/0x5e0 [ 2067.399367][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2067.399383][ T31] ? fsnotify_open_perm_and_set_mode+0x113/0x610 [ 2067.399401][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 2067.399416][ T31] do_dentry_open+0x953/0x13f0 [ 2067.399437][ T31] vfs_open+0x3b/0x340 [ 2067.399452][ T31] ? path_openat+0x2ecd/0x3830 [ 2067.399473][ T31] path_openat+0x2ee5/0x3830 [ 2067.399492][ T31] ? arch_stack_walk+0xfc/0x150 [ 2067.399519][ T31] ? __pfx_path_openat+0x10/0x10 [ 2067.399538][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.399557][ T31] do_filp_open+0x1fa/0x410 [ 2067.399577][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 2067.399603][ T31] ? _raw_spin_unlock+0x28/0x50 [ 2067.399617][ T31] ? alloc_fd+0x64c/0x6c0 [ 2067.399635][ T31] do_sys_openat2+0x121/0x1c0 [ 2067.399652][ T31] ? __se_sys_futex+0x36f/0x400 [ 2067.399672][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 2067.399692][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 2067.399712][ T31] __x64_sys_openat+0x138/0x170 [ 2067.399731][ T31] do_syscall_64+0xfa/0x3b0 [ 2067.399750][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.399762][ T31] ? clear_bhb_loop+0x60/0xb0 [ 2067.399777][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2067.399791][ T31] RIP: 0033:0x7f0ec818e929 [ 2067.399802][ T31] RSP: 002b:00007f0ec5ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2067.399816][ T31] RAX: ffffffffffffffda RBX: 00007f0ec83b5fa0 RCX: 00007f0ec818e929 [ 2067.399826][ T31] RDX: 0000000000040000 RSI: 0000200000002000 RDI: ffffffffffffff9c [ 2067.399836][ T31] RBP: 00007f0ec8210b39 R08: 0000000000000000 R09: 0000000000000000 [ 2067.399845][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2067.399853][ T31] R13: 0000000000000000 R14: 00007f0ec83b5fa0 R15: 00007ffcbbe9b778 [ 2067.399868][ T31] [ 2067.399873][ T31] INFO: task syz.5.13473:18966 blocked for more than 143 seconds. [ 2067.399882][ T31] Not tainted 6.16.0-rc5-next-20250710-syzkaller #0 [ 2067.399890][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2067.399896][ T31] task:syz.5.13473 state:D stack:25096 pid:18966 tgid:18965 ppid:18637 task_flags:0x400140 flags:0x00004004 [ 2067.399934][ T31] Call Trace: [ 2067.399938][ T31] [ 2067.399946][ T31] __schedule+0x16f5/0x4d00 [ 2067.399967][ T31] ? rcu_is_watching+0x15/0xb0 [ 2067.399983][ T31] ? schedule+0x165/0x360 [ 2067.399999][ T31] ? __pfx___schedule+0x10/0x10 [ 2067.400015][ T31] ? schedule+0x91/0x360 [ 2067.400029][ T31] ? rcu_is_watching+0x15/0xb0 [ 2067.400047][ T31] ? lock_release+0x4b/0x3e0